feat(gax): support transparent retries during mTLS certificate rotations - #13901

Open

macastelaz wants to merge 41 commits into

googleapis:agentic-identities-bound-tokenfrom

macastelaz:rotation-retries-13246-v3

Commits on Jul 27, 2026

feat(gax): Implement cert-rotation retries for grpc and http-json.

vverman
authored and
macastelaz
committed
Included changes as per discussion with blake.

vverman
authored and
macastelaz
committed
Fix refreshing streams and apply feedback for cert rotation retries
macastelaz
committed
Address AI review comments on PR 13901
macastelaz
committed
Port Agent Identities feature for Cloud Run

vverman
authored and
macastelaz
committed
Added support for:

vverman
authored and
macastelaz
committed
Added logic to verify key and cert to ensure no mismatch along with retry logic.

vverman
authored and
macastelaz
committed
Added documentation and addressed comments.

vverman
authored and
macastelaz
committed
lint fix.

vverman
authored and
macastelaz
committed
Fix unaddressed comments from PR 13169
macastelaz
committed
Fix incorrect fail-fast logic for custom certificate config paths
macastelaz
committed
Fix AgentIdentityUtils token binding logic and TOCTOU vulnerabilities
macastelaz
committed
Fix token binding 30s timeout on permission and absent config errors
macastelaz
committed
fix: resolve lint/formatting issues in AgentIdentityUtils
macastelaz
committed
fix: resolve checkstyle and format violations
macastelaz
committed
test: add edge case coverage and refactor brittle resource loading
macastelaz
committed
style: fix checkstyle violations in auth utilities
macastelaz
committed
Fix AgentIdentityUtilsTest compilation after checkstyle
macastelaz
committed
test: fix missing InputStream import in tests
macastelaz
committed

Commits on Jul 31, 2026