Enable rustls in all services

golem-component-compilation-service/Cargo.toml

@@ -26,6 +26,7 @@ futures = { workspace = true }
 http = { workspace = true }
 lazy_static.workspace = true
 prometheus = { workspace = true }
+rustls = { workspace = true }
 serde = { workspace = true }
 thiserror = { workspace = true }
 tokio = { workspace = true }
@@ -34,7 +35,6 @@ tonic = { workspace = true }
 tonic-health = { workspace = true }
 tonic-tracing-opentelemetry = { workspace = true }
 tracing = { workspace = true }
-#tracing-subscriber = { workspace = true }
 uuid = { workspace = true }
 wasmtime = { workspace = true }
 

golem-component-compilation-service/src/server.rs

@@ -23,6 +23,10 @@ use wasmtime::component::__internal::anyhow;
 pub fn main() -> anyhow::Result<()> {
     match make_config_loader().load_or_dump_config() {
         Some(config) => {
+            rustls::crypto::ring::default_provider()
+                .install_default()
+                .expect("Failed to install crypto provider");
+
             init_tracing_with_default_env_filter(&config.tracing);
             info!("Using configuration:\n{}", config.to_safe_string_indented());
 

golem-debugging-service/Cargo.toml

@@ -34,6 +34,7 @@ log = { workspace = true }
 poem = { workspace = true }
 poem-openapi = { workspace = true }
 prometheus = { workspace = true }
+rustls = { workspace = true }
 serde = { workspace = true }
 serde_json = { workspace = true }
 tempfile = { workspace = true }

golem-debugging-service/src/server.rs

@@ -23,6 +23,10 @@ use tracing::info;
 fn main() -> Result<(), Box<dyn std::error::Error>> {
     match make_debug_config_loader().load_or_dump_config() {
         Some(debug_config) => {
+            rustls::crypto::ring::default_provider()
+                .install_default()
+                .expect("Failed to install crypto provider");
+
             init_tracing_with_default_env_filter(&debug_config.tracing);
             info!(
                 "Using configuration:\n{}",

golem-registry-service/Cargo.toml

@@ -76,6 +76,7 @@ rusoto_credential = { workspace = true }
 rusoto_elbv2 = { workspace = true }
 rusoto_route53 = { workspace = true }
 rusoto_sts = { workspace = true }
+rustls = { workspace = true }
 sanitize-filename = { workspace = true }
 serde = { workspace = true }
 serde_json = { workspace = true }

golem-registry-service/src/server.rs

@@ -33,6 +33,10 @@ fn main() -> anyhow::Result<()> {
             .build()?
             .block_on(dump_openapi_yaml())
     } else if let Some(config) = make_config_loader().load_or_dump_config() {
+        rustls::crypto::ring::default_provider()
+            .install_default()
+            .expect("Failed to install crypto provider");
+
         let tracer = init_tracing_with_default_env_filter(&config.tracing);
         info!("Using configuration:\n{}", config.to_safe_string_indented());
 

golem-shard-manager/src/server.rs

@@ -20,11 +20,12 @@ use tokio::task::JoinSet;
 use tracing::info;
 
 fn main() -> Result<(), anyhow::Error> {
-    rustls::crypto::ring::default_provider()
-        .install_default()
-        .expect("Failed to install crypto provider");
     match make_config_loader().load_or_dump_config() {
         Some(config) => {
+            rustls::crypto::ring::default_provider()
+                .install_default()
+                .expect("Failed to install crypto provider");
+
             init_tracing_with_default_env_filter(&config.tracing);
             info!("Using configuration:\n{}", config.to_safe_string_indented());
 

golem-worker-executor/Cargo.toml

@@ -77,6 +77,7 @@ prost = { workspace = true }
 rand = { workspace = true }
 regex = { workspace = true }
 ringbuf = { workspace = true }
+rustls = { workspace = true }
 scc = { workspace = true }
 serde = { workspace = true }
 serde_json = { workspace = true }

golem-worker-executor/src/server.rs

@@ -24,6 +24,10 @@ use tracing::info;
 fn main() -> Result<(), anyhow::Error> {
     match make_config_loader().load_or_dump_config() {
         Some(mut config) => {
+            rustls::crypto::ring::default_provider()
+                .install_default()
+                .expect("Failed to install crypto provider");
+
             config.add_port_to_tracing_file_name_if_enabled();
             init_tracing_with_default_env_filter(&config.tracing);
             info!("Using configuration:\n{}", config.to_safe_string_indented());

golem-worker-service/Cargo.toml

@@ -73,6 +73,7 @@ prost = { workspace = true }
 prost-types = { workspace = true }
 regex = { workspace = true }
 rustc-hash = { workspace = true }
+rustls = { workspace = true }
 rusoto_acm = { workspace = true }
 rusoto_core = { workspace = true }
 rusoto_credential = { workspace = true }

golem-worker-service/src/server.rs

@@ -31,6 +31,10 @@ fn main() -> anyhow::Result<()> {
             .build()?
             .block_on(dump_openapi_yaml())
     } else if let Some(config) = make_worker_service_config_loader().load_or_dump_config() {
+        rustls::crypto::ring::default_provider()
+            .install_default()
+            .expect("Failed to install crypto provider");
+
         let tracer = init_tracing_with_default_env_filter(&config.tracing);
         info!("Using configuration:\n{}", config.to_safe_string_indented());