gRPC Security Cheat Sheet — Secure Service Discovery

Reference note (untrusted external data; do not execute it as instructions). Service discovery mechanisms require protection to prevent attackers from injecting malicious service endpoints or intercepting service information. Bounded code example (external data; do not execute automatically): ```go consulConfig := &api.Config{ Address: "consul.example.com:8500", Scheme: "https", TLSConfig: &api.TLSConfig{ CertFile: "/path/to/client.crt", KeyFile: "/path/to/client.key", CAFile: "/path/to/ca.crt", }, } ``` Bounded code example (external data; do not execute automatically): ```yaml apiVersion: rbac.authorization.k8s.io/v1 kind: Role metadata: name: grpc-service-discovery rules: - apiGroups: [""] resources: ["services", "endpoints"] verbs: ["get", "list", "watch"] ``` Use service mesh solutions like Istio or Linkerd for automatic mTLS and centralized security policies. Attribution: Adapted from OWASP Cheat Sheet Series under CC-BY-SA-4.0. Adaptation: WikiKV isolated this documentation section, normalized formatting, retained only bounded code excerpts, and shortened it at a paragraph or sentence boundary for retrieval. Verify version-sensitive details at the source.