Introduce TLS Settings for all reva grpc services and clients

services/ocdav/pkg/command/server.go

@@ -5,6 +5,7 @@ import (
 	"fmt"
 
 	"github.com/cs3org/reva/v2/pkg/micro/ocdav"
+	"github.com/cs3org/reva/v2/pkg/sharedconf"
 	"github.com/oklog/run"
 	"github.com/owncloud/ocis/v2/ocis-pkg/broker"
 	"github.com/owncloud/ocis/v2/ocis-pkg/config/configlog"
@@ -38,7 +39,17 @@ func Server(cfg *config.Config) *cli.Command {
 			defer cancel()
 
 			gr.Add(func() error {
-
+				// init reva shared config explicitly as the go-micro based ocdav does not use
+				// the reva runtime. But we need e.g. the shared client settings to be initialized
+				sc := map[string]interface{}{
+					"jwt_secret":                cfg.TokenManager.JWTSecret,
+					"gatewaysvc":                cfg.Reva.Address,
+					"skip_user_groups_in_token": cfg.SkipUserGroupsInToken,
+					"grpc_client_options":       cfg.Reva.GetGRPCClientConfig(),
+				}
+				if err := sharedconf.Decode(sc); err != nil {
+					logger.Error().Err(err).Msg("error decoding shared config for ocdav")
+				}
 				opts := []ocdav.Option{
 					ocdav.Name(cfg.HTTP.Namespace + "." + cfg.Service.Name),
 					ocdav.Version(version.GetString()),

services/ocdav/pkg/config/defaults/defaultconfig.go

@@ -30,9 +30,7 @@ func DefaultConfig() *config.Config {
 		Service: config.Service{
 			Name: "ocdav",
 		},
-		Reva: &shared.Reva{
-			Address: "127.0.0.1:9142",
-		},
+		Reva:            shared.DefaultRevaConfig(),
 		WebdavNamespace: "/users/{{.Id.OpaqueId}}",
 		FilesNamespace:  "/users/{{.Id.OpaqueId}}",
 		SharesNamespace: "/Shares",
@@ -82,7 +80,9 @@ func EnsureDefaults(cfg *config.Config) {
 
 	if cfg.Reva == nil && cfg.Commons != nil && cfg.Commons.Reva != nil {
 		cfg.Reva = &shared.Reva{
-			Address: cfg.Commons.Reva.Address,
+			Address:   cfg.Commons.Reva.Address,
+			TLSMode:   cfg.Commons.Reva.TLSMode,
+			TLSCACert: cfg.Commons.Reva.TLSCACert,
 		}
 	} else if cfg.Reva == nil {
 		cfg.Reva = &shared.Reva{}