grpc 1.31.0.pre1 → 1.33.0.pre1

data/third_party/re2/util/utf.h

@@ -0,0 +1,44 @@
+/*
+ * The authors of this software are Rob Pike and Ken Thompson.
+ *              Copyright (c) 2002 by Lucent Technologies.
+ * Permission to use, copy, modify, and distribute this software for any
+ * purpose without fee is hereby granted, provided that this entire notice
+ * is included in all copies of any software which is or includes a copy
+ * or modification of this software and in all copies of the supporting
+ * documentation for such software.
+ * THIS SOFTWARE IS BEING PROVIDED "AS IS", WITHOUT ANY EXPRESS OR IMPLIED
+ * WARRANTY.  IN PARTICULAR, NEITHER THE AUTHORS NOR LUCENT TECHNOLOGIES MAKE ANY
+ * REPRESENTATION OR WARRANTY OF ANY KIND CONCERNING THE MERCHANTABILITY
+ * OF THIS SOFTWARE OR ITS FITNESS FOR ANY PARTICULAR PURPOSE.
+ *
+ * This file and rune.cc have been converted to compile as C++ code
+ * in name space re2.
+ */
+
+#ifndef UTIL_UTF_H_
+#define UTIL_UTF_H_
+
+#include <stdint.h>
+
+namespace re2 {
+
+typedef signed int Rune;	/* Code-point values in Unicode 4.0 are 21 bits wide.*/
+
+enum
+{
+  UTFmax	= 4,		/* maximum bytes per rune */
+  Runesync	= 0x80,		/* cannot represent part of a UTF sequence (<) */
+  Runeself	= 0x80,		/* rune and UTF sequences are the same (<) */
+  Runeerror	= 0xFFFD,	/* decoding error in UTF */
+  Runemax	= 0x10FFFF,	/* maximum rune value */
+};
+
+int runetochar(char* s, const Rune* r);
+int chartorune(Rune* r, const char* s);
+int fullrune(const char* s, int n);
+int utflen(const char* s);
+char* utfrune(const char*, Rune);
+
+}  // namespace re2
+
+#endif  // UTIL_UTF_H_

data/third_party/re2/util/util.h

@@ -0,0 +1,42 @@
+// Copyright 2009 The RE2 Authors.  All Rights Reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+#ifndef UTIL_UTIL_H_
+#define UTIL_UTIL_H_
+
+#define arraysize(array) (sizeof(array)/sizeof((array)[0]))
+
+#ifndef ATTRIBUTE_NORETURN
+#if defined(__GNUC__)
+#define ATTRIBUTE_NORETURN __attribute__((noreturn))
+#elif defined(_MSC_VER)
+#define ATTRIBUTE_NORETURN __declspec(noreturn)
+#else
+#define ATTRIBUTE_NORETURN
+#endif
+#endif
+
+#ifndef ATTRIBUTE_UNUSED
+#if defined(__GNUC__)
+#define ATTRIBUTE_UNUSED __attribute__((unused))
+#else
+#define ATTRIBUTE_UNUSED
+#endif
+#endif
+
+#ifndef FALLTHROUGH_INTENDED
+#if defined(__clang__)
+#define FALLTHROUGH_INTENDED [[clang::fallthrough]]
+#elif defined(__GNUC__) && __GNUC__ >= 7
+#define FALLTHROUGH_INTENDED [[gnu::fallthrough]]
+#else
+#define FALLTHROUGH_INTENDED do {} while (0)
+#endif
+#endif
+
+#ifndef NO_THREAD_SAFETY_ANALYSIS
+#define NO_THREAD_SAFETY_ANALYSIS
+#endif
+
+#endif  // UTIL_UTIL_H_

data/third_party/upb/upb/decode.c

@@ -62,11 +62,13 @@ static const unsigned fixed64_ok = (1 << UPB_DTYPE_DOUBLE) |
                                    (1 << UPB_DTYPE_SFIXED64);
 
 /* Op: an action to be performed for a wire-type/field-type combination. */
-#define OP_SCALAR_LG2(n) (n)
-#define OP_FIXPCK_LG2(n) (n + 4)
-#define OP_VARPCK_LG2(n) (n + 8)
+#define OP_SCALAR_LG2(n) (n)      /* n in [0, 2, 3] => op in [0, 2, 3] */
 #define OP_STRING 4
-#define OP_SUBMSG 5
+#define OP_BYTES 5
+#define OP_SUBMSG 6
+/* Ops above are scalar-only. Repeated fields can use any op.  */
+#define OP_FIXPCK_LG2(n) (n + 5)  /* n in [2, 3] => op in [7, 8] */
+#define OP_VARPCK_LG2(n) (n + 9)  /* n in [0, 2, 3] => op in [9, 11, 12] */
 
 static const int8_t varint_ops[19] = {
     -1,               /* field not found */
@@ -104,7 +106,7 @@ static const int8_t delim_ops[37] = {
     OP_STRING, /* STRING */
     -1,        /* GROUP */
     OP_SUBMSG, /* MESSAGE */
-    OP_STRING, /* BYTES */
+    OP_BYTES,  /* BYTES */
     -1,        /* UINT32 */
     -1,        /* ENUM */
     -1,        /* SFIXED32 */
@@ -123,7 +125,7 @@ static const int8_t delim_ops[37] = {
     OP_STRING,        /* REPEATED STRING */
     OP_SUBMSG,        /* REPEATED GROUP */
     OP_SUBMSG,        /* REPEATED MESSAGE */
-    OP_STRING,        /* REPEATED BYTES */
+    OP_BYTES,         /* REPEATED BYTES */
     OP_VARPCK_LG2(2), /* REPEATED UINT32 */
     OP_VARPCK_LG2(2), /* REPEATED ENUM */
     OP_FIXPCK_LG2(2), /* REPEATED SFIXED32 */
@@ -143,8 +145,6 @@ typedef struct {
 
 typedef union {
   bool bool_val;
-  int32_t int32_val;
-  int64_t int64_val;
   uint32_t uint32_val;
   uint64_t uint64_val;
   upb_strview str_val;
@@ -155,6 +155,40 @@ static const char *decode_msg(upb_decstate *d, const char *ptr, upb_msg *msg,
 
 UPB_NORETURN static void decode_err(upb_decstate *d) { longjmp(d->err, 1); }
 
+void decode_verifyutf8(upb_decstate *d, const char *buf, int len) {
+  static const uint8_t utf8_offset[] = {
+      1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1,
+      1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1,
+      1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1,
+      1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1,
+      1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1,
+      1, 1, 1, 1, 1, 1, 1, 1, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0,
+      0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0,
+      0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0,
+      2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2,
+      2, 2, 2, 2, 2, 2, 2, 2, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3,
+      4, 4, 4, 4, 4, 4, 4, 4, 0, 0, 0, 0, 0, 0, 0, 0,
+  };
+
+  int i, j;
+  uint8_t offset;
+
+  i = 0;
+  while (i < len) {
+    offset = utf8_offset[(uint8_t)buf[i]];
+    if (offset == 0 || i + offset > len) {
+      decode_err(d);
+    }
+    for (j = i + 1; j < i + offset; j++) {
+      if ((buf[j] & 0xc0) != 0x80) {
+        decode_err(d);
+      }
+    }
+    i += offset;
+  }
+  if (i != len) decode_err(d);
+}
+
 static bool decode_reserve(upb_decstate *d, upb_array *arr, size_t elem) {
   bool need_realloc = arr->size - arr->len < elem;
   if (need_realloc && !_upb_array_realloc(arr, arr->len + elem, d->arena)) {
@@ -209,14 +243,21 @@ static void decode_munge(int type, wireval *val) {
       break;
     case UPB_DESCRIPTOR_TYPE_SINT32: {
       uint32_t n = val->uint32_val;
-      val->int32_val = (n >> 1) ^ -(int32_t)(n & 1);
+      val->uint32_val = (n >> 1) ^ -(int32_t)(n & 1);
       break;
     }
     case UPB_DESCRIPTOR_TYPE_SINT64: {
       uint64_t n = val->uint64_val;
-      val->int64_val = (n >> 1) ^ -(int64_t)(n & 1);
+      val->uint64_val = (n >> 1) ^ -(int64_t)(n & 1);
       break;
     }
+    case UPB_DESCRIPTOR_TYPE_INT32:
+    case UPB_DESCRIPTOR_TYPE_UINT32:
+      if (!_upb_isle()) {
+        /* The next stage will memcpy(dst, &val, 4) */
+        val->uint32_val = val->uint64_val;
+      }
+      break;
   }
 }
 
@@ -300,7 +341,10 @@ static const char *decode_toarray(upb_decstate *d, const char *ptr,
       memcpy(mem, &val, 1 << op);
       return ptr;
     case OP_STRING:
-      /* Append string. */
+      decode_verifyutf8(d, val.str_val.data, val.str_val.size);
+      /* Fallthrough. */
+    case OP_BYTES:
+      /* Append bytes. */
       mem =
           UPB_PTR_AT(_upb_array_ptr(arr), arr->len * sizeof(upb_strview), void);
       arr->len++;
@@ -389,7 +433,7 @@ static void decode_tomap(upb_decstate *d, upb_msg *msg,
   if (entry->fields[1].descriptortype == UPB_DESCRIPTOR_TYPE_MESSAGE ||
       entry->fields[1].descriptortype == UPB_DESCRIPTOR_TYPE_GROUP) {
     /* Create proactively to handle the case where it doesn't appear. */
-    ent.v.val.val = (uint64_t)_upb_msg_new(entry->submsgs[0], d->arena);
+    ent.v.val = upb_value_ptr(_upb_msg_new(entry->submsgs[0], d->arena));
   }
 
   decode_tosubmsg(d, &ent.k, layout, field, val.str_val);
@@ -434,6 +478,9 @@ static const char *decode_tomsg(upb_decstate *d, const char *ptr, upb_msg *msg,
       break;
     }
     case OP_STRING:
+      decode_verifyutf8(d, val.str_val.data, val.str_val.size);
+      /* Fallthrough. */
+    case OP_BYTES:
       memcpy(mem, &val, sizeof(upb_strview));
       break;
     case OP_SCALAR_LG2(3):
@@ -477,14 +524,16 @@ static const char *decode_msg(upb_decstate *d, const char *ptr, upb_msg *msg,
         break;
       case UPB_WIRE_TYPE_32BIT:
         if (d->limit - ptr < 4) decode_err(d);
-        memcpy(&val, ptr, 4);
+        memcpy(&val.uint32_val, ptr, 4);
+        val.uint32_val = _upb_be_swap32(val.uint32_val);
         ptr += 4;
         op = OP_SCALAR_LG2(2);
         if (((1 << field->descriptortype) & fixed32_ok) == 0) goto unknown;
         break;
       case UPB_WIRE_TYPE_64BIT:
         if (d->limit - ptr < 8) decode_err(d);
-        memcpy(&val, ptr, 8);
+        memcpy(&val.uint64_val, ptr, 8);
+        val.uint64_val = _upb_be_swap64(val.uint64_val);
         ptr += 8;
         op = OP_SCALAR_LG2(3);
         if (((1 << field->descriptortype) & fixed64_ok) == 0) goto unknown;
@@ -504,7 +553,7 @@ static const char *decode_msg(upb_decstate *d, const char *ptr, upb_msg *msg,
         break;
       }
       case UPB_WIRE_TYPE_START_GROUP:
-        val.int32_val = field_number;
+        val.uint32_val = field_number;
         op = OP_SUBMSG;
         if (field->descriptortype != UPB_DTYPE_GROUP) goto unknown;
         break;

data/third_party/upb/upb/encode.c

@@ -77,12 +77,12 @@ static bool upb_put_bytes(upb_encstate *e, const void *data, size_t len) {
 }
 
 static bool upb_put_fixed64(upb_encstate *e, uint64_t val) {
-  /* TODO(haberman): byte-swap for big endian. */
+  val = _upb_be_swap64(val);
   return upb_put_bytes(e, &val, sizeof(uint64_t));
 }
 
 static bool upb_put_fixed32(upb_encstate *e, uint32_t val) {
-  /* TODO(haberman): byte-swap for big endian. */
+  val = _upb_be_swap32(val);
   return upb_put_bytes(e, &val, sizeof(uint32_t));
 }
 

data/third_party/upb/upb/msg.h

@@ -324,7 +324,7 @@ UPB_INLINE upb_value _upb_map_tovalue(const void *val, size_t size,
   if (size == UPB_MAPTYPE_STRING) {
     upb_strview *strp = (upb_strview*)upb_arena_malloc(a, sizeof(*strp));
     *strp = *(upb_strview*)val;
-    memcpy(&ret, &strp, sizeof(strp));
+    ret = upb_value_ptr(strp);
   } else {
     memcpy(&ret, val, size);
   }
@@ -455,7 +455,7 @@ UPB_INLINE void _upb_msg_map_set_value(void* msg, const void* val, size_t size)
   /* This is like _upb_map_tovalue() except the entry already exists so we can
    * reuse the allocated upb_strview for string fields. */
   if (size == UPB_MAPTYPE_STRING) {
-    upb_strview *strp = (upb_strview*)ent->val.val;
+    upb_strview *strp = (upb_strview*)(uintptr_t)ent->val.val;
     memcpy(strp, val, sizeof(*strp));
   } else {
     memcpy(&ent->val.val, val, size);

data/third_party/upb/upb/port_def.inc

@@ -141,7 +141,7 @@ int msvc_vsnprintf(char* s, size_t n, const char* format, va_list arg);
 #elif defined _MSC_VER
 #define UPB_ASSUME(expr) if (!(expr)) __assume(0)
 #else
-#define UPB_ASSUME(expr) do {} if (false && (expr))
+#define UPB_ASSUME(expr) do {} while (false && (expr))
 #endif
 #else
 #define UPB_ASSUME(expr) assert(expr)

data/third_party/upb/upb/table.c

@@ -559,17 +559,6 @@ bool upb_inttable_remove(upb_inttable *t, uintptr_t key, upb_value *val) {
   return success;
 }
 
-bool upb_inttable_push2(upb_inttable *t, upb_value val, upb_alloc *a) {
-  return upb_inttable_insert2(t, upb_inttable_count(t), val, a);
-}
-
-upb_value upb_inttable_pop(upb_inttable *t) {
-  upb_value val;
-  bool ok = upb_inttable_remove(t, upb_inttable_count(t) - 1, &val);
-  UPB_ASSERT(ok);
-  return val;
-}
-
 bool upb_inttable_insertptr2(upb_inttable *t, const void *key, upb_value val,
                              upb_alloc *a) {
   return upb_inttable_insert2(t, (uintptr_t)key, val, a);

data/third_party/upb/upb/table.int.h

@@ -326,15 +326,6 @@ UPB_INLINE bool upb_strtable_remove(upb_strtable *t, const char *key,
  * invalidate iterators. */
 bool upb_inttable_replace(upb_inttable *t, uintptr_t key, upb_value val);
 
-/* Handy routines for treating an inttable like a stack.  May not be mixed with
- * other insert/remove calls. */
-bool upb_inttable_push2(upb_inttable *t, upb_value val, upb_alloc *a);
-upb_value upb_inttable_pop(upb_inttable *t);
-
-UPB_INLINE bool upb_inttable_push(upb_inttable *t, upb_value val) {
-  return upb_inttable_push2(t, val, &upb_alloc_global);
-}
-
 /* Convenience routines for inttables with pointer keys. */
 bool upb_inttable_insertptr2(upb_inttable *t, const void *key, upb_value val,
                              upb_alloc *a);

data/third_party/upb/upb/upb.c

@@ -106,15 +106,28 @@ struct upb_arena {
 
 static const size_t memblock_reserve = UPB_ALIGN_UP(sizeof(mem_block), 16);
 
+static upb_arena *arena_findroot(upb_arena *a) {
+  /* Path splitting keeps time complexity down, see:
+   *   https://en.wikipedia.org/wiki/Disjoint-set_data_structure */
+  while (a->parent != a) {
+    upb_arena *next = a->parent;
+    a->parent = next->parent;
+    a = next;
+  }
+  return a;
+}
+
 static void upb_arena_addblock(upb_arena *a, void *ptr, size_t size) {
   mem_block *block = ptr;
+  upb_arena *root = arena_findroot(a);
 
-  block->next = a->freelist;
+  /* The block is for arena |a|, but should appear in the freelist of |root|. */
+  block->next = root->freelist;
   block->size = (uint32_t)size;
   block->cleanups = 0;
-  a->freelist = block;
+  root->freelist = block;
   a->last_size = block->size;
-  if (!a->freelist_tail) a->freelist_tail = block;
+  if (!root->freelist_tail) root->freelist_tail = block;
 
   a->head.ptr = UPB_PTR_AT(block, memblock_reserve, char);
   a->head.end = UPB_PTR_AT(block, size, char);
@@ -149,17 +162,6 @@ static void *upb_arena_doalloc(upb_alloc *alloc, void *ptr, size_t oldsize,
   return upb_arena_realloc(a, ptr, oldsize, size);
 }
 
-static upb_arena *arena_findroot(upb_arena *a) {
-  /* Path splitting keeps time complexity down, see:
-   *   https://en.wikipedia.org/wiki/Disjoint-set_data_structure */
-  while (a->parent != a) {
-    upb_arena *next = a->parent;
-    a->parent = next->parent;
-    a = next;
-  }
-  return a;
-}
-
 /* Public Arena API ***********************************************************/
 
 upb_arena *arena_initslow(void *mem, size_t n, upb_alloc *alloc) {

data/third_party/upb/upb/upb.h

@@ -273,6 +273,32 @@ typedef enum {
 
 #define UPB_MAP_BEGIN ((size_t)-1)
 
+UPB_INLINE bool _upb_isle(void) {
+  int x = 1;
+  return *(char*)&x == 1;
+}
+
+UPB_INLINE uint32_t _upb_be_swap32(uint32_t val) {
+  if (_upb_isle()) {
+    return val;
+  } else {
+    return ((val & 0xff) << 24) | ((val & 0xff00) << 8) |
+           ((val & 0xff0000ULL) >> 8) | ((val & 0xff000000ULL) >> 24);
+  }
+}
+
+UPB_INLINE uint64_t _upb_be_swap64(uint64_t val) {
+  if (_upb_isle()) {
+    return val;
+  } else {
+    return ((val & 0xff) << 56) | ((val & 0xff00) << 40) |
+           ((val & 0xff0000) << 24) | ((val & 0xff000000) << 8) |
+           ((val & 0xff00000000ULL) >> 8) | ((val & 0xff0000000000ULL) >> 24) |
+           ((val & 0xff000000000000ULL) >> 40) |
+           ((val & 0xff00000000000000ULL) >> 56);
+  }
+}
+
 #include "upb/port_undef.inc"
 
 #ifdef __cplusplus

data/third_party/upb/upb/upb.hpp

@@ -60,6 +60,8 @@ class Arena {
     });
   }
 
+  void Fuse(Arena& other) { upb_arena_fuse(ptr(), other.ptr()); }
+
  private:
   std::unique_ptr<upb_arena, decltype(&upb_arena_free)> ptr_;
 };

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: grpc
 version: !ruby/object:Gem::Version
-  version: 1.31.0.pre1
+  version: 1.33.0.pre1
 platform: ruby
 authors:
 - gRPC Authors
 autorequire: 
 bindir: src/ruby/bin
 cert_chain: []
-date: 2020-07-22 00:00:00.000000000 Z
+date: 2020-10-07 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: google-protobuf
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '3.12'
+        version: '3.13'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '3.12'
+        version: '3.13'
 - !ruby/object:Gem::Dependency
   name: googleapis-common-protos-types
   requirement: !ruby/object:Gem::Requirement
@@ -218,6 +218,7 @@ files:
 - include/grpc/grpc_posix.h
 - include/grpc/grpc_security.h
 - include/grpc/grpc_security_constants.h
+- include/grpc/impl/codegen/README.md
 - include/grpc/impl/codegen/atm.h
 - include/grpc/impl/codegen/atm_gcc_atomic.h
 - include/grpc/impl/codegen/atm_gcc_sync.h
@@ -314,16 +315,14 @@ files:
 - src/core/ext/filters/client_channel/lb_policy/weighted_target/weighted_target.cc
 - src/core/ext/filters/client_channel/lb_policy/xds/cds.cc
 - src/core/ext/filters/client_channel/lb_policy/xds/eds.cc
-- src/core/ext/filters/client_channel/lb_policy/xds/lrs.cc
+- src/core/ext/filters/client_channel/lb_policy/xds/eds_drop.cc
 - src/core/ext/filters/client_channel/lb_policy/xds/xds.h
-- src/core/ext/filters/client_channel/lb_policy/xds/xds_routing.cc
+- src/core/ext/filters/client_channel/lb_policy/xds/xds_cluster_manager.cc
 - src/core/ext/filters/client_channel/lb_policy_factory.h
 - src/core/ext/filters/client_channel/lb_policy_registry.cc
 - src/core/ext/filters/client_channel/lb_policy_registry.h
 - src/core/ext/filters/client_channel/local_subchannel_pool.cc
 - src/core/ext/filters/client_channel/local_subchannel_pool.h
-- src/core/ext/filters/client_channel/parse_address.cc
-- src/core/ext/filters/client_channel/parse_address.h
 - src/core/ext/filters/client_channel/proxy_mapper.h
 - src/core/ext/filters/client_channel/proxy_mapper_registry.cc
 - src/core/ext/filters/client_channel/proxy_mapper_registry.h
@@ -348,6 +347,7 @@ files:
 - src/core/ext/filters/client_channel/resolver/fake/fake_resolver.h
 - src/core/ext/filters/client_channel/resolver/sockaddr/sockaddr_resolver.cc
 - src/core/ext/filters/client_channel/resolver/xds/xds_resolver.cc
+- src/core/ext/filters/client_channel/resolver/xds/xds_resolver.h
 - src/core/ext/filters/client_channel/resolver_factory.h
 - src/core/ext/filters/client_channel/resolver_registry.cc
 - src/core/ext/filters/client_channel/resolver_registry.h
@@ -370,17 +370,6 @@ files:
 - src/core/ext/filters/client_channel/subchannel_interface.h
 - src/core/ext/filters/client_channel/subchannel_pool_interface.cc
 - src/core/ext/filters/client_channel/subchannel_pool_interface.h
-- src/core/ext/filters/client_channel/xds/xds_api.cc
-- src/core/ext/filters/client_channel/xds/xds_api.h
-- src/core/ext/filters/client_channel/xds/xds_bootstrap.cc
-- src/core/ext/filters/client_channel/xds/xds_bootstrap.h
-- src/core/ext/filters/client_channel/xds/xds_channel.h
-- src/core/ext/filters/client_channel/xds/xds_channel_args.h
-- src/core/ext/filters/client_channel/xds/xds_channel_secure.cc
-- src/core/ext/filters/client_channel/xds/xds_client.cc
-- src/core/ext/filters/client_channel/xds/xds_client.h
-- src/core/ext/filters/client_channel/xds/xds_client_stats.cc
-- src/core/ext/filters/client_channel/xds/xds_client_stats.h
 - src/core/ext/filters/client_idle/client_idle_filter.cc
 - src/core/ext/filters/deadline/deadline_filter.cc
 - src/core/ext/filters/deadline/deadline_filter.h
@@ -468,110 +457,122 @@ files:
 - src/core/ext/upb-generated/envoy/annotations/deprecation.upb.h
 - src/core/ext/upb-generated/envoy/annotations/resource.upb.c
 - src/core/ext/upb-generated/envoy/annotations/resource.upb.h
-- src/core/ext/upb-generated/envoy/api/v2/auth/cert.upb.c
-- src/core/ext/upb-generated/envoy/api/v2/auth/cert.upb.h
-- src/core/ext/upb-generated/envoy/api/v2/auth/common.upb.c
-- src/core/ext/upb-generated/envoy/api/v2/auth/common.upb.h
-- src/core/ext/upb-generated/envoy/api/v2/auth/secret.upb.c
-- src/core/ext/upb-generated/envoy/api/v2/auth/secret.upb.h
-- src/core/ext/upb-generated/envoy/api/v2/auth/tls.upb.c
-- src/core/ext/upb-generated/envoy/api/v2/auth/tls.upb.h
-- src/core/ext/upb-generated/envoy/api/v2/cds.upb.c
-- src/core/ext/upb-generated/envoy/api/v2/cds.upb.h
-- src/core/ext/upb-generated/envoy/api/v2/cluster.upb.c
-- src/core/ext/upb-generated/envoy/api/v2/cluster.upb.h
-- src/core/ext/upb-generated/envoy/api/v2/cluster/circuit_breaker.upb.c
-- src/core/ext/upb-generated/envoy/api/v2/cluster/circuit_breaker.upb.h
-- src/core/ext/upb-generated/envoy/api/v2/cluster/filter.upb.c
-- src/core/ext/upb-generated/envoy/api/v2/cluster/filter.upb.h
-- src/core/ext/upb-generated/envoy/api/v2/cluster/outlier_detection.upb.c
-- src/core/ext/upb-generated/envoy/api/v2/cluster/outlier_detection.upb.h
-- src/core/ext/upb-generated/envoy/api/v2/core/address.upb.c
-- src/core/ext/upb-generated/envoy/api/v2/core/address.upb.h
-- src/core/ext/upb-generated/envoy/api/v2/core/backoff.upb.c
-- src/core/ext/upb-generated/envoy/api/v2/core/backoff.upb.h
-- src/core/ext/upb-generated/envoy/api/v2/core/base.upb.c
-- src/core/ext/upb-generated/envoy/api/v2/core/base.upb.h
-- src/core/ext/upb-generated/envoy/api/v2/core/config_source.upb.c
-- src/core/ext/upb-generated/envoy/api/v2/core/config_source.upb.h
-- src/core/ext/upb-generated/envoy/api/v2/core/event_service_config.upb.c
-- src/core/ext/upb-generated/envoy/api/v2/core/event_service_config.upb.h
-- src/core/ext/upb-generated/envoy/api/v2/core/grpc_service.upb.c
-- src/core/ext/upb-generated/envoy/api/v2/core/grpc_service.upb.h
-- src/core/ext/upb-generated/envoy/api/v2/core/health_check.upb.c
-- src/core/ext/upb-generated/envoy/api/v2/core/health_check.upb.h
-- src/core/ext/upb-generated/envoy/api/v2/core/http_uri.upb.c
-- src/core/ext/upb-generated/envoy/api/v2/core/http_uri.upb.h
-- src/core/ext/upb-generated/envoy/api/v2/core/protocol.upb.c
-- src/core/ext/upb-generated/envoy/api/v2/core/protocol.upb.h
-- src/core/ext/upb-generated/envoy/api/v2/core/socket_option.upb.c
-- src/core/ext/upb-generated/envoy/api/v2/core/socket_option.upb.h
-- src/core/ext/upb-generated/envoy/api/v2/discovery.upb.c
-- src/core/ext/upb-generated/envoy/api/v2/discovery.upb.h
-- src/core/ext/upb-generated/envoy/api/v2/eds.upb.c
-- src/core/ext/upb-generated/envoy/api/v2/eds.upb.h
-- src/core/ext/upb-generated/envoy/api/v2/endpoint.upb.c
-- src/core/ext/upb-generated/envoy/api/v2/endpoint.upb.h
-- src/core/ext/upb-generated/envoy/api/v2/endpoint/endpoint.upb.c
-- src/core/ext/upb-generated/envoy/api/v2/endpoint/endpoint.upb.h
-- src/core/ext/upb-generated/envoy/api/v2/endpoint/endpoint_components.upb.c
-- src/core/ext/upb-generated/envoy/api/v2/endpoint/endpoint_components.upb.h
-- src/core/ext/upb-generated/envoy/api/v2/endpoint/load_report.upb.c
-- src/core/ext/upb-generated/envoy/api/v2/endpoint/load_report.upb.h
-- src/core/ext/upb-generated/envoy/api/v2/lds.upb.c
-- src/core/ext/upb-generated/envoy/api/v2/lds.upb.h
-- src/core/ext/upb-generated/envoy/api/v2/listener.upb.c
-- src/core/ext/upb-generated/envoy/api/v2/listener.upb.h
-- src/core/ext/upb-generated/envoy/api/v2/listener/listener.upb.c
-- src/core/ext/upb-generated/envoy/api/v2/listener/listener.upb.h
-- src/core/ext/upb-generated/envoy/api/v2/listener/listener_components.upb.c
-- src/core/ext/upb-generated/envoy/api/v2/listener/listener_components.upb.h
-- src/core/ext/upb-generated/envoy/api/v2/listener/udp_listener_config.upb.c
-- src/core/ext/upb-generated/envoy/api/v2/listener/udp_listener_config.upb.h
-- src/core/ext/upb-generated/envoy/api/v2/rds.upb.c
-- src/core/ext/upb-generated/envoy/api/v2/rds.upb.h
-- src/core/ext/upb-generated/envoy/api/v2/route.upb.c
-- src/core/ext/upb-generated/envoy/api/v2/route.upb.h
-- src/core/ext/upb-generated/envoy/api/v2/route/route.upb.c
-- src/core/ext/upb-generated/envoy/api/v2/route/route.upb.h
-- src/core/ext/upb-generated/envoy/api/v2/route/route_components.upb.c
-- src/core/ext/upb-generated/envoy/api/v2/route/route_components.upb.h
-- src/core/ext/upb-generated/envoy/api/v2/scoped_route.upb.c
-- src/core/ext/upb-generated/envoy/api/v2/scoped_route.upb.h
-- src/core/ext/upb-generated/envoy/api/v2/srds.upb.c
-- src/core/ext/upb-generated/envoy/api/v2/srds.upb.h
-- src/core/ext/upb-generated/envoy/config/filter/accesslog/v2/accesslog.upb.c
-- src/core/ext/upb-generated/envoy/config/filter/accesslog/v2/accesslog.upb.h
-- src/core/ext/upb-generated/envoy/config/filter/network/http_connection_manager/v2/http_connection_manager.upb.c
-- src/core/ext/upb-generated/envoy/config/filter/network/http_connection_manager/v2/http_connection_manager.upb.h
-- src/core/ext/upb-generated/envoy/config/listener/v2/api_listener.upb.c
-- src/core/ext/upb-generated/envoy/config/listener/v2/api_listener.upb.h
-- src/core/ext/upb-generated/envoy/config/trace/v2/http_tracer.upb.c
-- src/core/ext/upb-generated/envoy/config/trace/v2/http_tracer.upb.h
-- src/core/ext/upb-generated/envoy/service/discovery/v2/ads.upb.c
-- src/core/ext/upb-generated/envoy/service/discovery/v2/ads.upb.h
-- src/core/ext/upb-generated/envoy/service/load_stats/v2/lrs.upb.c
-- src/core/ext/upb-generated/envoy/service/load_stats/v2/lrs.upb.h
-- src/core/ext/upb-generated/envoy/type/http.upb.c
-- src/core/ext/upb-generated/envoy/type/http.upb.h
-- src/core/ext/upb-generated/envoy/type/matcher/regex.upb.c
-- src/core/ext/upb-generated/envoy/type/matcher/regex.upb.h
-- src/core/ext/upb-generated/envoy/type/matcher/string.upb.c
-- src/core/ext/upb-generated/envoy/type/matcher/string.upb.h
-- src/core/ext/upb-generated/envoy/type/metadata/v2/metadata.upb.c
-- src/core/ext/upb-generated/envoy/type/metadata/v2/metadata.upb.h
-- src/core/ext/upb-generated/envoy/type/percent.upb.c
-- src/core/ext/upb-generated/envoy/type/percent.upb.h
-- src/core/ext/upb-generated/envoy/type/range.upb.c
-- src/core/ext/upb-generated/envoy/type/range.upb.h
-- src/core/ext/upb-generated/envoy/type/semantic_version.upb.c
-- src/core/ext/upb-generated/envoy/type/semantic_version.upb.h
-- src/core/ext/upb-generated/envoy/type/tracing/v2/custom_tag.upb.c
-- src/core/ext/upb-generated/envoy/type/tracing/v2/custom_tag.upb.h
-- src/core/ext/upb-generated/gogoproto/gogo.upb.c
-- src/core/ext/upb-generated/gogoproto/gogo.upb.h
+- src/core/ext/upb-generated/envoy/config/accesslog/v3/accesslog.upb.c
+- src/core/ext/upb-generated/envoy/config/accesslog/v3/accesslog.upb.h
+- src/core/ext/upb-generated/envoy/config/cluster/v3/circuit_breaker.upb.c
+- src/core/ext/upb-generated/envoy/config/cluster/v3/circuit_breaker.upb.h
+- src/core/ext/upb-generated/envoy/config/cluster/v3/cluster.upb.c
+- src/core/ext/upb-generated/envoy/config/cluster/v3/cluster.upb.h
+- src/core/ext/upb-generated/envoy/config/cluster/v3/filter.upb.c
+- src/core/ext/upb-generated/envoy/config/cluster/v3/filter.upb.h
+- src/core/ext/upb-generated/envoy/config/cluster/v3/outlier_detection.upb.c
+- src/core/ext/upb-generated/envoy/config/cluster/v3/outlier_detection.upb.h
+- src/core/ext/upb-generated/envoy/config/core/v3/address.upb.c
+- src/core/ext/upb-generated/envoy/config/core/v3/address.upb.h
+- src/core/ext/upb-generated/envoy/config/core/v3/backoff.upb.c
+- src/core/ext/upb-generated/envoy/config/core/v3/backoff.upb.h
+- src/core/ext/upb-generated/envoy/config/core/v3/base.upb.c
+- src/core/ext/upb-generated/envoy/config/core/v3/base.upb.h
+- src/core/ext/upb-generated/envoy/config/core/v3/config_source.upb.c
+- src/core/ext/upb-generated/envoy/config/core/v3/config_source.upb.h
+- src/core/ext/upb-generated/envoy/config/core/v3/event_service_config.upb.c
+- src/core/ext/upb-generated/envoy/config/core/v3/event_service_config.upb.h
+- src/core/ext/upb-generated/envoy/config/core/v3/extension.upb.c
+- src/core/ext/upb-generated/envoy/config/core/v3/extension.upb.h
+- src/core/ext/upb-generated/envoy/config/core/v3/grpc_service.upb.c
+- src/core/ext/upb-generated/envoy/config/core/v3/grpc_service.upb.h
+- src/core/ext/upb-generated/envoy/config/core/v3/health_check.upb.c
+- src/core/ext/upb-generated/envoy/config/core/v3/health_check.upb.h
+- src/core/ext/upb-generated/envoy/config/core/v3/http_uri.upb.c
+- src/core/ext/upb-generated/envoy/config/core/v3/http_uri.upb.h
+- src/core/ext/upb-generated/envoy/config/core/v3/protocol.upb.c
+- src/core/ext/upb-generated/envoy/config/core/v3/protocol.upb.h
+- src/core/ext/upb-generated/envoy/config/core/v3/proxy_protocol.upb.c
+- src/core/ext/upb-generated/envoy/config/core/v3/proxy_protocol.upb.h
+- src/core/ext/upb-generated/envoy/config/core/v3/socket_option.upb.c
+- src/core/ext/upb-generated/envoy/config/core/v3/socket_option.upb.h
+- src/core/ext/upb-generated/envoy/config/core/v3/substitution_format_string.upb.c
+- src/core/ext/upb-generated/envoy/config/core/v3/substitution_format_string.upb.h
+- src/core/ext/upb-generated/envoy/config/endpoint/v3/endpoint.upb.c
+- src/core/ext/upb-generated/envoy/config/endpoint/v3/endpoint.upb.h
+- src/core/ext/upb-generated/envoy/config/endpoint/v3/endpoint_components.upb.c
+- src/core/ext/upb-generated/envoy/config/endpoint/v3/endpoint_components.upb.h
+- src/core/ext/upb-generated/envoy/config/endpoint/v3/load_report.upb.c
+- src/core/ext/upb-generated/envoy/config/endpoint/v3/load_report.upb.h
+- src/core/ext/upb-generated/envoy/config/listener/v3/api_listener.upb.c
+- src/core/ext/upb-generated/envoy/config/listener/v3/api_listener.upb.h
+- src/core/ext/upb-generated/envoy/config/listener/v3/listener.upb.c
+- src/core/ext/upb-generated/envoy/config/listener/v3/listener.upb.h
+- src/core/ext/upb-generated/envoy/config/listener/v3/listener_components.upb.c
+- src/core/ext/upb-generated/envoy/config/listener/v3/listener_components.upb.h
+- src/core/ext/upb-generated/envoy/config/listener/v3/udp_listener_config.upb.c
+- src/core/ext/upb-generated/envoy/config/listener/v3/udp_listener_config.upb.h
+- src/core/ext/upb-generated/envoy/config/rbac/v3/rbac.upb.c
+- src/core/ext/upb-generated/envoy/config/rbac/v3/rbac.upb.h
+- src/core/ext/upb-generated/envoy/config/route/v3/route.upb.c
+- src/core/ext/upb-generated/envoy/config/route/v3/route.upb.h
+- src/core/ext/upb-generated/envoy/config/route/v3/route_components.upb.c
+- src/core/ext/upb-generated/envoy/config/route/v3/route_components.upb.h
+- src/core/ext/upb-generated/envoy/config/route/v3/scoped_route.upb.c
+- src/core/ext/upb-generated/envoy/config/route/v3/scoped_route.upb.h
+- src/core/ext/upb-generated/envoy/config/trace/v3/http_tracer.upb.c
+- src/core/ext/upb-generated/envoy/config/trace/v3/http_tracer.upb.h
+- src/core/ext/upb-generated/envoy/extensions/filters/network/http_connection_manager/v3/http_connection_manager.upb.c
+- src/core/ext/upb-generated/envoy/extensions/filters/network/http_connection_manager/v3/http_connection_manager.upb.h
+- src/core/ext/upb-generated/envoy/extensions/transport_sockets/tls/v3/cert.upb.c
+- src/core/ext/upb-generated/envoy/extensions/transport_sockets/tls/v3/cert.upb.h
+- src/core/ext/upb-generated/envoy/extensions/transport_sockets/tls/v3/common.upb.c
+- src/core/ext/upb-generated/envoy/extensions/transport_sockets/tls/v3/common.upb.h
+- src/core/ext/upb-generated/envoy/extensions/transport_sockets/tls/v3/secret.upb.c
+- src/core/ext/upb-generated/envoy/extensions/transport_sockets/tls/v3/secret.upb.h
+- src/core/ext/upb-generated/envoy/extensions/transport_sockets/tls/v3/tls.upb.c
+- src/core/ext/upb-generated/envoy/extensions/transport_sockets/tls/v3/tls.upb.h
+- src/core/ext/upb-generated/envoy/service/cluster/v3/cds.upb.c
+- src/core/ext/upb-generated/envoy/service/cluster/v3/cds.upb.h
+- src/core/ext/upb-generated/envoy/service/discovery/v3/ads.upb.c
+- src/core/ext/upb-generated/envoy/service/discovery/v3/ads.upb.h
+- src/core/ext/upb-generated/envoy/service/discovery/v3/discovery.upb.c
+- src/core/ext/upb-generated/envoy/service/discovery/v3/discovery.upb.h
+- src/core/ext/upb-generated/envoy/service/endpoint/v3/eds.upb.c
+- src/core/ext/upb-generated/envoy/service/endpoint/v3/eds.upb.h
+- src/core/ext/upb-generated/envoy/service/listener/v3/lds.upb.c
+- src/core/ext/upb-generated/envoy/service/listener/v3/lds.upb.h
+- src/core/ext/upb-generated/envoy/service/load_stats/v3/lrs.upb.c
+- src/core/ext/upb-generated/envoy/service/load_stats/v3/lrs.upb.h
+- src/core/ext/upb-generated/envoy/service/route/v3/rds.upb.c
+- src/core/ext/upb-generated/envoy/service/route/v3/rds.upb.h
+- src/core/ext/upb-generated/envoy/service/route/v3/srds.upb.c
+- src/core/ext/upb-generated/envoy/service/route/v3/srds.upb.h
+- src/core/ext/upb-generated/envoy/type/matcher/v3/metadata.upb.c
+- src/core/ext/upb-generated/envoy/type/matcher/v3/metadata.upb.h
+- src/core/ext/upb-generated/envoy/type/matcher/v3/number.upb.c
+- src/core/ext/upb-generated/envoy/type/matcher/v3/number.upb.h
+- src/core/ext/upb-generated/envoy/type/matcher/v3/path.upb.c
+- src/core/ext/upb-generated/envoy/type/matcher/v3/path.upb.h
+- src/core/ext/upb-generated/envoy/type/matcher/v3/regex.upb.c
+- src/core/ext/upb-generated/envoy/type/matcher/v3/regex.upb.h
+- src/core/ext/upb-generated/envoy/type/matcher/v3/string.upb.c
+- src/core/ext/upb-generated/envoy/type/matcher/v3/string.upb.h
+- src/core/ext/upb-generated/envoy/type/matcher/v3/value.upb.c
+- src/core/ext/upb-generated/envoy/type/matcher/v3/value.upb.h
+- src/core/ext/upb-generated/envoy/type/metadata/v3/metadata.upb.c
+- src/core/ext/upb-generated/envoy/type/metadata/v3/metadata.upb.h
+- src/core/ext/upb-generated/envoy/type/tracing/v3/custom_tag.upb.c
+- src/core/ext/upb-generated/envoy/type/tracing/v3/custom_tag.upb.h
+- src/core/ext/upb-generated/envoy/type/v3/http.upb.c
+- src/core/ext/upb-generated/envoy/type/v3/http.upb.h
+- src/core/ext/upb-generated/envoy/type/v3/percent.upb.c
+- src/core/ext/upb-generated/envoy/type/v3/percent.upb.h
+- src/core/ext/upb-generated/envoy/type/v3/range.upb.c
+- src/core/ext/upb-generated/envoy/type/v3/range.upb.h
+- src/core/ext/upb-generated/envoy/type/v3/semantic_version.upb.c
+- src/core/ext/upb-generated/envoy/type/v3/semantic_version.upb.h
 - src/core/ext/upb-generated/google/api/annotations.upb.c
 - src/core/ext/upb-generated/google/api/annotations.upb.h
+- src/core/ext/upb-generated/google/api/expr/v1alpha1/checked.upb.c
+- src/core/ext/upb-generated/google/api/expr/v1alpha1/checked.upb.h
+- src/core/ext/upb-generated/google/api/expr/v1alpha1/syntax.upb.c
+- src/core/ext/upb-generated/google/api/expr/v1alpha1/syntax.upb.h
 - src/core/ext/upb-generated/google/api/http.upb.c
 - src/core/ext/upb-generated/google/api/http.upb.h
 - src/core/ext/upb-generated/google/protobuf/any.upb.c
@@ -602,14 +603,45 @@ files:
 - src/core/ext/upb-generated/src/proto/grpc/lb/v1/load_balancer.upb.h
 - src/core/ext/upb-generated/udpa/annotations/migrate.upb.c
 - src/core/ext/upb-generated/udpa/annotations/migrate.upb.h
+- src/core/ext/upb-generated/udpa/annotations/security.upb.c
+- src/core/ext/upb-generated/udpa/annotations/security.upb.h
 - src/core/ext/upb-generated/udpa/annotations/sensitive.upb.c
 - src/core/ext/upb-generated/udpa/annotations/sensitive.upb.h
 - src/core/ext/upb-generated/udpa/annotations/status.upb.c
 - src/core/ext/upb-generated/udpa/annotations/status.upb.h
+- src/core/ext/upb-generated/udpa/annotations/versioning.upb.c
+- src/core/ext/upb-generated/udpa/annotations/versioning.upb.h
+- src/core/ext/upb-generated/udpa/core/v1/authority.upb.c
+- src/core/ext/upb-generated/udpa/core/v1/authority.upb.h
+- src/core/ext/upb-generated/udpa/core/v1/collection_entry.upb.c
+- src/core/ext/upb-generated/udpa/core/v1/collection_entry.upb.h
+- src/core/ext/upb-generated/udpa/core/v1/context_params.upb.c
+- src/core/ext/upb-generated/udpa/core/v1/context_params.upb.h
+- src/core/ext/upb-generated/udpa/core/v1/resource.upb.c
+- src/core/ext/upb-generated/udpa/core/v1/resource.upb.h
+- src/core/ext/upb-generated/udpa/core/v1/resource_locator.upb.c
+- src/core/ext/upb-generated/udpa/core/v1/resource_locator.upb.h
+- src/core/ext/upb-generated/udpa/core/v1/resource_name.upb.c
+- src/core/ext/upb-generated/udpa/core/v1/resource_name.upb.h
 - src/core/ext/upb-generated/udpa/data/orca/v1/orca_load_report.upb.c
 - src/core/ext/upb-generated/udpa/data/orca/v1/orca_load_report.upb.h
 - src/core/ext/upb-generated/validate/validate.upb.c
 - src/core/ext/upb-generated/validate/validate.upb.h
+- src/core/ext/xds/certificate_provider_factory.h
+- src/core/ext/xds/certificate_provider_registry.cc
+- src/core/ext/xds/certificate_provider_registry.h
+- src/core/ext/xds/certificate_provider_store.h
+- src/core/ext/xds/google_mesh_ca_certificate_provider_factory.cc
+- src/core/ext/xds/google_mesh_ca_certificate_provider_factory.h
+- src/core/ext/xds/xds_api.cc
+- src/core/ext/xds/xds_api.h
+- src/core/ext/xds/xds_bootstrap.cc
+- src/core/ext/xds/xds_bootstrap.h
+- src/core/ext/xds/xds_channel_args.h
+- src/core/ext/xds/xds_client.cc
+- src/core/ext/xds/xds_client.h
+- src/core/ext/xds/xds_client_stats.cc
+- src/core/ext/xds/xds_client_stats.h
 - src/core/lib/avl/avl.cc
 - src/core/lib/avl/avl.h
 - src/core/lib/backoff/backoff.cc
@@ -706,6 +738,7 @@ files:
 - src/core/lib/gprpp/arena.h
 - src/core/lib/gprpp/atomic.h
 - src/core/lib/gprpp/debug_location.h
+- src/core/lib/gprpp/dual_ref_counted.h
 - src/core/lib/gprpp/fork.cc
 - src/core/lib/gprpp/fork.h
 - src/core/lib/gprpp/global_config.h
@@ -809,6 +842,8 @@ files:
 - src/core/lib/iomgr/lockfree_event.cc
 - src/core/lib/iomgr/lockfree_event.h
 - src/core/lib/iomgr/nameser.h
+- src/core/lib/iomgr/parse_address.cc
+- src/core/lib/iomgr/parse_address.h
 - src/core/lib/iomgr/poller/eventmanager_libuv.cc
 - src/core/lib/iomgr/poller/eventmanager_libuv.h
 - src/core/lib/iomgr/polling_entity.cc
@@ -908,10 +943,24 @@ files:
 - src/core/lib/iomgr/work_serializer.h
 - src/core/lib/json/json.h
 - src/core/lib/json/json_reader.cc
+- src/core/lib/json/json_util.cc
+- src/core/lib/json/json_util.h
 - src/core/lib/json/json_writer.cc
 - src/core/lib/profiling/basic_timers.cc
 - src/core/lib/profiling/stap_timers.cc
 - src/core/lib/profiling/timers.h
+- src/core/lib/security/authorization/authorization_engine.cc
+- src/core/lib/security/authorization/authorization_engine.h
+- src/core/lib/security/authorization/evaluate_args.cc
+- src/core/lib/security/authorization/evaluate_args.h
+- src/core/lib/security/authorization/mock_cel/activation.h
+- src/core/lib/security/authorization/mock_cel/cel_expr_builder_factory.h
+- src/core/lib/security/authorization/mock_cel/cel_expression.h
+- src/core/lib/security/authorization/mock_cel/cel_value.h
+- src/core/lib/security/authorization/mock_cel/evaluator_core.h
+- src/core/lib/security/authorization/mock_cel/flat_expr_builder.h
+- src/core/lib/security/authorization/mock_cel/statusor.h
+- src/core/lib/security/certificate_provider.h
 - src/core/lib/security/context/security_context.cc
 - src/core/lib/security/context/security_context.h
 - src/core/lib/security/credentials/alts/alts_credentials.cc
@@ -951,10 +1000,14 @@ files:
 - src/core/lib/security/credentials/plugin/plugin_credentials.h
 - src/core/lib/security/credentials/ssl/ssl_credentials.cc
 - src/core/lib/security/credentials/ssl/ssl_credentials.h
+- src/core/lib/security/credentials/tls/grpc_tls_certificate_distributor.cc
+- src/core/lib/security/credentials/tls/grpc_tls_certificate_distributor.h
 - src/core/lib/security/credentials/tls/grpc_tls_credentials_options.cc
 - src/core/lib/security/credentials/tls/grpc_tls_credentials_options.h
 - src/core/lib/security/credentials/tls/tls_credentials.cc
 - src/core/lib/security/credentials/tls/tls_credentials.h
+- src/core/lib/security/credentials/xds/xds_credentials.cc
+- src/core/lib/security/credentials/xds/xds_credentials.h
 - src/core/lib/security/security_connector/alts/alts_security_connector.cc
 - src/core/lib/security/security_connector/alts/alts_security_connector.h
 - src/core/lib/security/security_connector/fake/fake_security_connector.cc
@@ -982,8 +1035,6 @@ files:
 - src/core/lib/security/transport/security_handshaker.cc
 - src/core/lib/security/transport/security_handshaker.h
 - src/core/lib/security/transport/server_auth_filter.cc
-- src/core/lib/security/transport/target_authority_table.cc
-- src/core/lib/security/transport/target_authority_table.h
 - src/core/lib/security/transport/tsi_error.cc
 - src/core/lib/security/transport/tsi_error.h
 - src/core/lib/security/util/json_util.cc
@@ -994,13 +1045,11 @@ files:
 - src/core/lib/slice/percent_encoding.h
 - src/core/lib/slice/slice.cc
 - src/core/lib/slice/slice_buffer.cc
-- src/core/lib/slice/slice_hash_table.h
 - src/core/lib/slice/slice_intern.cc
 - src/core/lib/slice/slice_internal.h
 - src/core/lib/slice/slice_string_helpers.cc
 - src/core/lib/slice/slice_string_helpers.h
 - src/core/lib/slice/slice_utils.h
-- src/core/lib/slice/slice_weak_hash_table.h
 - src/core/lib/surface/api_trace.cc
 - src/core/lib/surface/api_trace.h
 - src/core/lib/surface/byte_buffer.cc
@@ -1034,6 +1083,8 @@ files:
 - src/core/lib/surface/validate_metadata.cc
 - src/core/lib/surface/validate_metadata.h
 - src/core/lib/surface/version.cc
+- src/core/lib/transport/authority_override.cc
+- src/core/lib/transport/authority_override.h
 - src/core/lib/transport/bdp_estimator.cc
 - src/core/lib/transport/bdp_estimator.h
 - src/core/lib/transport/byte_stream.cc
@@ -1211,6 +1262,8 @@ files:
 - src/ruby/spec/pb/codegen/grpc/testing/package_options_import.proto
 - src/ruby/spec/pb/codegen/grpc/testing/package_options_import2.proto
 - src/ruby/spec/pb/codegen/grpc/testing/package_options_ruby_style.proto
+- src/ruby/spec/pb/codegen/grpc/testing/same_package_service_name.proto
+- src/ruby/spec/pb/codegen/grpc/testing/same_ruby_package_service_name.proto
 - src/ruby/spec/pb/codegen/package_option_spec.rb
 - src/ruby/spec/pb/duplicate/codegen_spec.rb
 - src/ruby/spec/pb/health/checker_spec.rb
@@ -1226,7 +1279,9 @@ files:
 - src/ruby/spec/testdata/server1.key
 - src/ruby/spec/testdata/server1.pem
 - src/ruby/spec/time_consts_spec.rb
+- src/ruby/spec/user_agent_spec.rb
 - third_party/abseil-cpp/absl/algorithm/algorithm.h
+- third_party/abseil-cpp/absl/algorithm/container.h
 - third_party/abseil-cpp/absl/base/attributes.h
 - third_party/abseil-cpp/absl/base/call_once.h
 - third_party/abseil-cpp/absl/base/casts.h
@@ -1238,12 +1293,17 @@ files:
 - third_party/abseil-cpp/absl/base/internal/bits.h
 - third_party/abseil-cpp/absl/base/internal/cycleclock.cc
 - third_party/abseil-cpp/absl/base/internal/cycleclock.h
+- third_party/abseil-cpp/absl/base/internal/direct_mmap.h
 - third_party/abseil-cpp/absl/base/internal/endian.h
 - third_party/abseil-cpp/absl/base/internal/errno_saver.h
+- third_party/abseil-cpp/absl/base/internal/exponential_biased.cc
+- third_party/abseil-cpp/absl/base/internal/exponential_biased.h
 - third_party/abseil-cpp/absl/base/internal/hide_ptr.h
 - third_party/abseil-cpp/absl/base/internal/identity.h
 - third_party/abseil-cpp/absl/base/internal/inline_variable.h
 - third_party/abseil-cpp/absl/base/internal/invoke.h
+- third_party/abseil-cpp/absl/base/internal/low_level_alloc.cc
+- third_party/abseil-cpp/absl/base/internal/low_level_alloc.h
 - third_party/abseil-cpp/absl/base/internal/low_level_scheduling.h
 - third_party/abseil-cpp/absl/base/internal/per_thread_tls.h
 - third_party/abseil-cpp/absl/base/internal/raw_logging.cc
@@ -1276,19 +1336,70 @@ files:
 - third_party/abseil-cpp/absl/base/policy_checks.h
 - third_party/abseil-cpp/absl/base/port.h
 - third_party/abseil-cpp/absl/base/thread_annotations.h
+- third_party/abseil-cpp/absl/container/fixed_array.h
+- third_party/abseil-cpp/absl/container/flat_hash_set.h
 - third_party/abseil-cpp/absl/container/inlined_vector.h
+- third_party/abseil-cpp/absl/container/internal/common.h
 - third_party/abseil-cpp/absl/container/internal/compressed_tuple.h
+- third_party/abseil-cpp/absl/container/internal/container_memory.h
+- third_party/abseil-cpp/absl/container/internal/hash_function_defaults.h
+- third_party/abseil-cpp/absl/container/internal/hash_policy_traits.h
+- third_party/abseil-cpp/absl/container/internal/hashtable_debug_hooks.h
+- third_party/abseil-cpp/absl/container/internal/hashtablez_sampler.cc
+- third_party/abseil-cpp/absl/container/internal/hashtablez_sampler.h
+- third_party/abseil-cpp/absl/container/internal/hashtablez_sampler_force_weak_definition.cc
+- third_party/abseil-cpp/absl/container/internal/have_sse.h
 - third_party/abseil-cpp/absl/container/internal/inlined_vector.h
+- third_party/abseil-cpp/absl/container/internal/layout.h
+- third_party/abseil-cpp/absl/container/internal/raw_hash_set.cc
+- third_party/abseil-cpp/absl/container/internal/raw_hash_set.h
+- third_party/abseil-cpp/absl/debugging/internal/address_is_readable.cc
+- third_party/abseil-cpp/absl/debugging/internal/address_is_readable.h
+- third_party/abseil-cpp/absl/debugging/internal/demangle.cc
+- third_party/abseil-cpp/absl/debugging/internal/demangle.h
+- third_party/abseil-cpp/absl/debugging/internal/elf_mem_image.cc
+- third_party/abseil-cpp/absl/debugging/internal/elf_mem_image.h
+- third_party/abseil-cpp/absl/debugging/internal/stacktrace_aarch64-inl.inc
+- third_party/abseil-cpp/absl/debugging/internal/stacktrace_arm-inl.inc
+- third_party/abseil-cpp/absl/debugging/internal/stacktrace_config.h
+- third_party/abseil-cpp/absl/debugging/internal/stacktrace_generic-inl.inc
+- third_party/abseil-cpp/absl/debugging/internal/stacktrace_powerpc-inl.inc
+- third_party/abseil-cpp/absl/debugging/internal/stacktrace_unimplemented-inl.inc
+- third_party/abseil-cpp/absl/debugging/internal/stacktrace_win32-inl.inc
+- third_party/abseil-cpp/absl/debugging/internal/stacktrace_x86-inl.inc
+- third_party/abseil-cpp/absl/debugging/internal/symbolize.h
+- third_party/abseil-cpp/absl/debugging/internal/vdso_support.cc
+- third_party/abseil-cpp/absl/debugging/internal/vdso_support.h
+- third_party/abseil-cpp/absl/debugging/stacktrace.cc
+- third_party/abseil-cpp/absl/debugging/stacktrace.h
+- third_party/abseil-cpp/absl/debugging/symbolize.cc
+- third_party/abseil-cpp/absl/debugging/symbolize.h
+- third_party/abseil-cpp/absl/debugging/symbolize_elf.inc
+- third_party/abseil-cpp/absl/debugging/symbolize_unimplemented.inc
+- third_party/abseil-cpp/absl/debugging/symbolize_win32.inc
+- third_party/abseil-cpp/absl/functional/function_ref.h
+- third_party/abseil-cpp/absl/functional/internal/function_ref.h
+- third_party/abseil-cpp/absl/hash/hash.h
+- third_party/abseil-cpp/absl/hash/internal/city.cc
+- third_party/abseil-cpp/absl/hash/internal/city.h
+- third_party/abseil-cpp/absl/hash/internal/hash.cc
+- third_party/abseil-cpp/absl/hash/internal/hash.h
 - third_party/abseil-cpp/absl/memory/memory.h
 - third_party/abseil-cpp/absl/meta/type_traits.h
 - third_party/abseil-cpp/absl/numeric/int128.cc
 - third_party/abseil-cpp/absl/numeric/int128.h
 - third_party/abseil-cpp/absl/numeric/int128_have_intrinsic.inc
 - third_party/abseil-cpp/absl/numeric/int128_no_intrinsic.inc
+- third_party/abseil-cpp/absl/status/status.cc
+- third_party/abseil-cpp/absl/status/status.h
+- third_party/abseil-cpp/absl/status/status_payload_printer.cc
+- third_party/abseil-cpp/absl/status/status_payload_printer.h
 - third_party/abseil-cpp/absl/strings/ascii.cc
 - third_party/abseil-cpp/absl/strings/ascii.h
 - third_party/abseil-cpp/absl/strings/charconv.cc
 - third_party/abseil-cpp/absl/strings/charconv.h
+- third_party/abseil-cpp/absl/strings/cord.cc
+- third_party/abseil-cpp/absl/strings/cord.h
 - third_party/abseil-cpp/absl/strings/escaping.cc
 - third_party/abseil-cpp/absl/strings/escaping.h
 - third_party/abseil-cpp/absl/strings/internal/char_map.h
@@ -1296,6 +1407,7 @@ files:
 - third_party/abseil-cpp/absl/strings/internal/charconv_bigint.h
 - third_party/abseil-cpp/absl/strings/internal/charconv_parse.cc
 - third_party/abseil-cpp/absl/strings/internal/charconv_parse.h
+- third_party/abseil-cpp/absl/strings/internal/cord_internal.h
 - third_party/abseil-cpp/absl/strings/internal/escaping.cc
 - third_party/abseil-cpp/absl/strings/internal/escaping.h
 - third_party/abseil-cpp/absl/strings/internal/memutil.cc
@@ -1338,6 +1450,24 @@ files:
 - third_party/abseil-cpp/absl/strings/strip.h
 - third_party/abseil-cpp/absl/strings/substitute.cc
 - third_party/abseil-cpp/absl/strings/substitute.h
+- third_party/abseil-cpp/absl/synchronization/barrier.cc
+- third_party/abseil-cpp/absl/synchronization/barrier.h
+- third_party/abseil-cpp/absl/synchronization/blocking_counter.cc
+- third_party/abseil-cpp/absl/synchronization/blocking_counter.h
+- third_party/abseil-cpp/absl/synchronization/internal/create_thread_identity.cc
+- third_party/abseil-cpp/absl/synchronization/internal/create_thread_identity.h
+- third_party/abseil-cpp/absl/synchronization/internal/graphcycles.cc
+- third_party/abseil-cpp/absl/synchronization/internal/graphcycles.h
+- third_party/abseil-cpp/absl/synchronization/internal/kernel_timeout.h
+- third_party/abseil-cpp/absl/synchronization/internal/mutex_nonprod.inc
+- third_party/abseil-cpp/absl/synchronization/internal/per_thread_sem.cc
+- third_party/abseil-cpp/absl/synchronization/internal/per_thread_sem.h
+- third_party/abseil-cpp/absl/synchronization/internal/waiter.cc
+- third_party/abseil-cpp/absl/synchronization/internal/waiter.h
+- third_party/abseil-cpp/absl/synchronization/mutex.cc
+- third_party/abseil-cpp/absl/synchronization/mutex.h
+- third_party/abseil-cpp/absl/synchronization/notification.cc
+- third_party/abseil-cpp/absl/synchronization/notification.h
 - third_party/abseil-cpp/absl/time/civil_time.cc
 - third_party/abseil-cpp/absl/time/civil_time.h
 - third_party/abseil-cpp/absl/time/clock.cc
@@ -1371,10 +1501,14 @@ files:
 - third_party/abseil-cpp/absl/time/time.h
 - third_party/abseil-cpp/absl/types/bad_optional_access.cc
 - third_party/abseil-cpp/absl/types/bad_optional_access.h
+- third_party/abseil-cpp/absl/types/bad_variant_access.cc
+- third_party/abseil-cpp/absl/types/bad_variant_access.h
 - third_party/abseil-cpp/absl/types/internal/optional.h
 - third_party/abseil-cpp/absl/types/internal/span.h
+- third_party/abseil-cpp/absl/types/internal/variant.h
 - third_party/abseil-cpp/absl/types/optional.h
 - third_party/abseil-cpp/absl/types/span.h
+- third_party/abseil-cpp/absl/types/variant.h
 - third_party/abseil-cpp/absl/utility/utility.h
 - third_party/address_sorting/address_sorting.c
 - third_party/address_sorting/address_sorting_internal.h
@@ -1471,6 +1605,7 @@ files:
 - third_party/boringssl-with-bazel/src/crypto/digest_extra/digest_extra.c
 - third_party/boringssl-with-bazel/src/crypto/dsa/dsa.c
 - third_party/boringssl-with-bazel/src/crypto/dsa/dsa_asn1.c
+- third_party/boringssl-with-bazel/src/crypto/dsa/internal.h
 - third_party/boringssl-with-bazel/src/crypto/ec_extra/ec_asn1.c
 - third_party/boringssl-with-bazel/src/crypto/ec_extra/ec_derive.c
 - third_party/boringssl-with-bazel/src/crypto/ec_extra/hash_to_curve.c
@@ -1594,6 +1729,8 @@ files:
 - third_party/boringssl-with-bazel/src/crypto/fipsmodule/tls/internal.h
 - third_party/boringssl-with-bazel/src/crypto/fipsmodule/tls/kdf.c
 - third_party/boringssl-with-bazel/src/crypto/hkdf/hkdf.c
+- third_party/boringssl-with-bazel/src/crypto/hpke/hpke.c
+- third_party/boringssl-with-bazel/src/crypto/hpke/internal.h
 - third_party/boringssl-with-bazel/src/crypto/hrss/hrss.c
 - third_party/boringssl-with-bazel/src/crypto/hrss/internal.h
 - third_party/boringssl-with-bazel/src/crypto/internal.h
@@ -1723,12 +1860,10 @@ files:
 - third_party/boringssl-with-bazel/src/crypto/x509v3/v3_pci.c
 - third_party/boringssl-with-bazel/src/crypto/x509v3/v3_pcia.c
 - third_party/boringssl-with-bazel/src/crypto/x509v3/v3_pcons.c
-- third_party/boringssl-with-bazel/src/crypto/x509v3/v3_pku.c
 - third_party/boringssl-with-bazel/src/crypto/x509v3/v3_pmaps.c
 - third_party/boringssl-with-bazel/src/crypto/x509v3/v3_prn.c
 - third_party/boringssl-with-bazel/src/crypto/x509v3/v3_purp.c
 - third_party/boringssl-with-bazel/src/crypto/x509v3/v3_skey.c
-- third_party/boringssl-with-bazel/src/crypto/x509v3/v3_sxnet.c
 - third_party/boringssl-with-bazel/src/crypto/x509v3/v3_utl.c
 - third_party/boringssl-with-bazel/src/include/openssl/aead.h
 - third_party/boringssl-with-bazel/src/include/openssl/aes.h
@@ -1924,6 +2059,55 @@ files:
 - third_party/cares/config_freebsd/ares_config.h
 - third_party/cares/config_linux/ares_config.h
 - third_party/cares/config_openbsd/ares_config.h
+- third_party/re2/re2/bitmap256.h
+- third_party/re2/re2/bitstate.cc
+- third_party/re2/re2/compile.cc
+- third_party/re2/re2/dfa.cc
+- third_party/re2/re2/filtered_re2.cc
+- third_party/re2/re2/filtered_re2.h
+- third_party/re2/re2/mimics_pcre.cc
+- third_party/re2/re2/nfa.cc
+- third_party/re2/re2/onepass.cc
+- third_party/re2/re2/parse.cc
+- third_party/re2/re2/perl_groups.cc
+- third_party/re2/re2/pod_array.h
+- third_party/re2/re2/prefilter.cc
+- third_party/re2/re2/prefilter.h
+- third_party/re2/re2/prefilter_tree.cc
+- third_party/re2/re2/prefilter_tree.h
+- third_party/re2/re2/prog.cc
+- third_party/re2/re2/prog.h
+- third_party/re2/re2/re2.cc
+- third_party/re2/re2/re2.h
+- third_party/re2/re2/regexp.cc
+- third_party/re2/re2/regexp.h
+- third_party/re2/re2/set.cc
+- third_party/re2/re2/set.h
+- third_party/re2/re2/simplify.cc
+- third_party/re2/re2/sparse_array.h
+- third_party/re2/re2/sparse_set.h
+- third_party/re2/re2/stringpiece.cc
+- third_party/re2/re2/stringpiece.h
+- third_party/re2/re2/tostring.cc
+- third_party/re2/re2/unicode_casefold.cc
+- third_party/re2/re2/unicode_casefold.h
+- third_party/re2/re2/unicode_groups.cc
+- third_party/re2/re2/unicode_groups.h
+- third_party/re2/re2/walker-inl.h
+- third_party/re2/util/benchmark.h
+- third_party/re2/util/flags.h
+- third_party/re2/util/logging.h
+- third_party/re2/util/malloc_counter.h
+- third_party/re2/util/mix.h
+- third_party/re2/util/mutex.h
+- third_party/re2/util/pcre.cc
+- third_party/re2/util/pcre.h
+- third_party/re2/util/rune.cc
+- third_party/re2/util/strutil.cc
+- third_party/re2/util/strutil.h
+- third_party/re2/util/test.h
+- third_party/re2/util/utf.h
+- third_party/re2/util/util.h
 - third_party/upb/upb/decode.c
 - third_party/upb/upb/decode.h
 - third_party/upb/upb/encode.c
@@ -1990,43 +2174,46 @@ signing_key:
 specification_version: 4
 summary: GRPC system in Ruby
 test_files:
-- src/ruby/spec/support/services.rb
-- src/ruby/spec/support/helpers.rb
-- src/ruby/spec/testdata/README
+- src/ruby/spec/testdata/server1.key
 - src/ruby/spec/testdata/server1.pem
-- src/ruby/spec/testdata/ca.pem
 - src/ruby/spec/testdata/client.pem
+- src/ruby/spec/testdata/ca.pem
 - src/ruby/spec/testdata/client.key
-- src/ruby/spec/testdata/server1.key
-- src/ruby/spec/client_server_spec.rb
-- src/ruby/spec/call_credentials_spec.rb
+- src/ruby/spec/testdata/README
+- src/ruby/spec/server_credentials_spec.rb
+- src/ruby/spec/error_sanity_spec.rb
 - src/ruby/spec/call_spec.rb
-- src/ruby/spec/debug_message_spec.rb
-- src/ruby/spec/channel_connection_spec.rb
-- src/ruby/spec/spec_helper.rb
-- src/ruby/spec/google_rpc_status_utils_spec.rb
-- src/ruby/spec/server_spec.rb
-- src/ruby/spec/time_consts_spec.rb
 - src/ruby/spec/client_auth_spec.rb
-- src/ruby/spec/channel_spec.rb
+- src/ruby/spec/call_credentials_spec.rb
+- src/ruby/spec/pb/health/checker_spec.rb
 - src/ruby/spec/pb/duplicate/codegen_spec.rb
-- src/ruby/spec/pb/codegen/grpc/testing/package_options_ruby_style.proto
-- src/ruby/spec/pb/codegen/grpc/testing/package_options_import.proto
 - src/ruby/spec/pb/codegen/grpc/testing/package_options_import2.proto
+- src/ruby/spec/pb/codegen/grpc/testing/same_package_service_name.proto
+- src/ruby/spec/pb/codegen/grpc/testing/package_options_import.proto
 - src/ruby/spec/pb/codegen/grpc/testing/package_options.proto
+- src/ruby/spec/pb/codegen/grpc/testing/same_ruby_package_service_name.proto
+- src/ruby/spec/pb/codegen/grpc/testing/package_options_ruby_style.proto
 - src/ruby/spec/pb/codegen/package_option_spec.rb
-- src/ruby/spec/pb/health/checker_spec.rb
-- src/ruby/spec/error_sanity_spec.rb
-- src/ruby/spec/errors_spec.rb
-- src/ruby/spec/server_credentials_spec.rb
-- src/ruby/spec/compression_options_spec.rb
-- src/ruby/spec/generic/rpc_server_pool_spec.rb
-- src/ruby/spec/generic/server_interceptors_spec.rb
+- src/ruby/spec/spec_helper.rb
+- src/ruby/spec/channel_connection_spec.rb
 - src/ruby/spec/generic/client_interceptors_spec.rb
-- src/ruby/spec/generic/rpc_server_spec.rb
 - src/ruby/spec/generic/interceptor_registry_spec.rb
-- src/ruby/spec/generic/client_stub_spec.rb
+- src/ruby/spec/generic/rpc_server_spec.rb
 - src/ruby/spec/generic/active_call_spec.rb
-- src/ruby/spec/generic/rpc_desc_spec.rb
+- src/ruby/spec/generic/client_stub_spec.rb
 - src/ruby/spec/generic/service_spec.rb
+- src/ruby/spec/generic/server_interceptors_spec.rb
+- src/ruby/spec/generic/rpc_desc_spec.rb
+- src/ruby/spec/generic/rpc_server_pool_spec.rb
+- src/ruby/spec/channel_spec.rb
+- src/ruby/spec/support/services.rb
+- src/ruby/spec/support/helpers.rb
+- src/ruby/spec/time_consts_spec.rb
+- src/ruby/spec/client_server_spec.rb
+- src/ruby/spec/user_agent_spec.rb
 - src/ruby/spec/channel_credentials_spec.rb
+- src/ruby/spec/google_rpc_status_utils_spec.rb
+- src/ruby/spec/compression_options_spec.rb
+- src/ruby/spec/server_spec.rb
+- src/ruby/spec/errors_spec.rb
+- src/ruby/spec/debug_message_spec.rb