Google Cloud DLP Python: Set Trusted Roots for gRPC

Set GRPC_DEFAULT_SSL_ROOTS_FILE_PATH before launch for the default root-selection path, independently of Requests token traffic.

GRPC_DEFAULT_SSL_ROOTS_FILE_PATH=/path/to/approved-roots.pem \
https_proxy=http://proxy.example:8080 \
python dlp_job.py

Use a PEM bundle containing the required root set for the gRPC endpoints, including appropriate organizational and public roots. For a non-sensitive test against public DLP endpoints where public proxies are permitted, the HTTP proxy list offers candidates for https_proxy; retain the approved roots and the application’s identity configuration. The default-root file is not assumed to append itself to every platform store.

This applies when DlpServiceClient uses the gRPC transport's default roots. If a channel supplies explicit root certificates, inspect those channel credentials instead. A Requests CA setting can repair an HTTP call without changing this gRPC trust source.

Read the failed stage separately from the selected roots. An unavailable proxy or rejected CONNECT occurs before the subsequent destination certificate check and is not fixed by adding a CA.

Credential token acquisition may use another HTTP client. Give that path its supported CA configuration when it needs the same authority, retaining verification on both connections.

Ũhoro ũhĩtĩte