Bump up proto for replicas config and TLS option simplification

Author: hanahmily

CHANGES.md

@@ -10,6 +10,8 @@ Release Notes.
 * Bump up the API to support sharding_key.
 * Bump up the API to support version 0.9.
 * Support stage query on TopN.
+* Add replicas configuration to the API: introduce `replicas` in LifecycleStage and ResourceOpts to support high availability.
+* Simplify TLS options: remove unsupported mTLS client certificate settings from Options and DefaultChannelFactory; trust CA is still supported.
 
 0.8.0
 ------------------

src/main/java/org/apache/skywalking/banyandb/v1/client/Options.java

@@ -55,14 +55,6 @@ public class Options {
      * SSL: Trusted CA Path
      */
     private String sslTrustCAPath = "";
-    /**
-     * SSL: Cert Chain Path, BanyanDB server not support mTLS yet
-     */
-    private String sslCertChainPath = "";
-    /**
-     * SSL: Cert Key Path, BanyanDB server not support mTLS yet
-     */
-    private String sslKeyPath = "";
 
     public Options() {
     }

src/main/java/org/apache/skywalking/banyandb/v1/client/grpc/channel/DefaultChannelFactory.java

@@ -56,22 +56,6 @@ public ManagedChannel create() throws IOException {
             SslContextBuilder builder = GrpcSslContexts.forClient();
 
             if (isCAFileExist) {
-                String certPath = options.getSslCertChainPath();
-                String keyPath = options.getSslKeyPath();
-                if (!Strings.isNullOrEmpty(certPath) && Strings.isNullOrEmpty(keyPath)) {
-                    File keyFile = new File(keyPath);
-                    File certFile = new File(certPath);
-
-                    if (certFile.isFile() && keyFile.isFile()) {
-                        try (InputStream cert = new FileInputStream(certFile);
-                             InputStream key = PrivateKeyUtil.loadDecryptionKey(keyFile.getAbsolutePath())) {
-                            builder.keyManager(cert, key);
-                        }
-                    } else if (!certFile.isFile() || !keyFile.isFile()) {
-                        log.warn("Failed to enable mTLS caused by cert or key cannot be found.");
-                    }
-                }
-
                 builder.trustManager(caFile);
             }
             managedChannelBuilder.negotiationType(NegotiationType.TLS).sslContext(builder.build());

src/main/proto/banyandb/v1/banyandb-common.proto

@@ -81,6 +81,12 @@ message LifecycleStage {
 
   // Indicates whether segments that are no longer live should be closed.
   bool close = 6;
+
+  // replicas is the number of replicas for this stage.
+  // This is an optional field and defaults to 0.
+  // A value of 0 means no replicas, while a value of 1 means one primary shard and one replica.
+  // Higher values indicate more replicas.
+  uint32 replicas = 7;
 }
 
 message ResourceOpts {
@@ -94,6 +100,11 @@ message ResourceOpts {
   repeated LifecycleStage stages = 4;
   // default_stages is the name of the default stage
   repeated string default_stages = 5;
+  // replicas is the number of replicas. This is used to ensure high availability and fault tolerance.
+  // This is an optional field and defaults to 0.
+  // A value of 0 means no replicas, while a value of 1 means one primary shard and one replica.
+  // Higher values indicate more replicas.
+  uint32 replicas = 6;
 }
 
 // Group is an internal object for Group management