Add hostname-override flag to root command to support overriding SNI …

…hostname
authzed · Nov 22, 2023 · 9d7bf5f · 9d7bf5f
1 parent 7942023
commit 9d7bf5f
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 0 deletions.
diff --git a/internal/client/client.go b/internal/client/client.go
@@ -108,5 +108,10 @@ func DialOptsFromFlags(cmd *cobra.Command, token storage.Token) ([]grpc.DialOpti
 		opts = append(opts, certOpt)
 	}
 
+	hostnameOverride := cobrautil.MustGetString(cmd, "hostname-override")
+	if hostnameOverride != "" {
+		opts = append(opts, grpc.WithAuthority(hostnameOverride))
+	}
+
 	return opts, nil
 }
diff --git a/internal/cmd/cmd.go b/internal/cmd/cmd.go
@@ -33,6 +33,7 @@ func Run() {
 
 	rootCmd.PersistentFlags().String("endpoint", "", "spicedb gRPC API endpoint")
 	rootCmd.PersistentFlags().String("permissions-system", "", "permissions system to query")
+	rootCmd.PersistentFlags().String("hostname-override", "", "override the hostname used in the connection to the endpoint")
 	rootCmd.PersistentFlags().String("token", "", "token used to authenticate to SpiceDB")
 	rootCmd.PersistentFlags().String("certificate-path", "", "path to certificate authoriy used to verify secure connections")
 	rootCmd.PersistentFlags().Bool("insecure", false, "connect over a plaintext connection")