From 340d3a18992953b409ef90d55e1d859cb66b37ab Mon Sep 17 00:00:00 2001 From: Luwei Ge Date: Wed, 29 Oct 2025 17:19:39 +0000 Subject: [PATCH] fix(spanner): add env var to allow disabling directpath bound token --- spanner/client.go | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/spanner/client.go b/spanner/client.go index e133df67115e..f1b6b61b9715 100644 --- a/spanner/client.go +++ b/spanner/client.go @@ -689,7 +689,9 @@ func allClientOpts(numChannels int, compression string, userOpts ...option.Clien if enableDirectPathXds, _ := strconv.ParseBool(os.Getenv("GOOGLE_SPANNER_ENABLE_DIRECT_ACCESS")); enableDirectPathXds { clientDefaultOpts = append(clientDefaultOpts, internaloption.AllowNonDefaultServiceAccount(true)) clientDefaultOpts = append(clientDefaultOpts, internaloption.EnableDirectPath(true), internaloption.EnableDirectPathXds()) - clientDefaultOpts = append(clientDefaultOpts, internaloption.AllowHardBoundTokens("ALTS")) + if disableBoundToken, _ := strconv.ParseBool(os.Getenv("GOOGLE_SPANNER_DISABLE_DIRECT_ACCESS_BOUND_TOKEN")); !disableBoundToken { + clientDefaultOpts = append(clientDefaultOpts, internaloption.AllowHardBoundTokens("ALTS")) + } } if compression == "gzip" { userOpts = append(userOpts, option.WithGRPCDialOption(grpc.WithDefaultCallOptions(