feat(bigtable): Enable ALTS hard bound token in Bigtable w/ direct access (#13153)

rockspore · web-flow · commit 9023934127b4 · 2025-10-23T13:43:30.000-04:00
The same thing has been introduced to Cloud Spanner and GCS.
diff --git a/bigtable/bigtable.go b/bigtable/bigtable.go
@@ -150,6 +150,9 @@ func NewClientWithConfig(ctx context.Context, project, instance string, config C
 	enableDirectAccess, _ := strconv.ParseBool(os.Getenv("CBT_ENABLE_DIRECTPATH"))
 	if enableDirectAccess {
 		o = append(o, internaloption.EnableDirectPath(true), internaloption.EnableDirectPathXds())
+		if disableBoundToken, _ := strconv.ParseBool(os.Getenv("CBT_DISABLE_DIRECTPATH_BOUND_TOKEN")); !disableBoundToken {
+			o = append(o, internaloption.AllowHardBoundTokens("ALTS"))
+		}
 	}
 
 	// Allow non-default service account in DirectPath.

Original file line number	Diff line number	Diff line change
`@@ -150,6 +150,9 @@ func NewClientWithConfig(ctx context.Context, project, instance string, config C`
`150`	`150`	`enableDirectAccess, _ := strconv.ParseBool(os.Getenv("CBT_ENABLE_DIRECTPATH"))`
`151`	`151`	`if enableDirectAccess {`
`152`	`152`	`o = append(o, internaloption.EnableDirectPath(true), internaloption.EnableDirectPathXds())`
	`153`	`+ if disableBoundToken, _ := strconv.ParseBool(os.Getenv("CBT_DISABLE_DIRECTPATH_BOUND_TOKEN")); !disableBoundToken {`
	`154`	`+ o = append(o, internaloption.AllowHardBoundTokens("ALTS"))`
	`155`	`+ }`
`153`	`156`	`}`
`154`	`157`
`155`	`158`	`// Allow non-default service account in DirectPath.`