Fix/ensure secure connection (#76)

Continued work on #75

Author: flora-hofmann-frequenz

RELEASE_NOTES.md

@@ -8,6 +8,8 @@
 
 ## New Features
 
+* TLS is now enabled for all connections.
+
 ## Bug Fixes
 
 <!-- Here goes notable bug fixes that are worth a special mention or explanation -->

src/frequenz/client/reporting/_client.py

@@ -9,6 +9,7 @@
 from datetime import datetime
 from typing import Any, cast
 
+import grpc
 import grpc.aio as grpcaio
 
 # pylint: disable=no-name-in-module
@@ -107,7 +108,9 @@ def __init__(self, service_address: str, key: str | None = None) -> None:
             service_address: The address of the Reporting service.
             key: The API key for the authorization.
         """
-        self._grpc_channel = grpcaio.insecure_channel(service_address)
+        self._grpc_channel = grpcaio.secure_channel(
+            service_address, grpc.ssl_channel_credentials()
+        )
         self._stub = ReportingStub(self._grpc_channel)
         self._metadata = (("key", key),) if key else ()
 

tests/test_client_reporting.py

@@ -3,7 +3,7 @@
 
 """Tests for the frequenz.client.reporting package."""
 from typing import Generator
-from unittest.mock import MagicMock, patch
+from unittest.mock import ANY, MagicMock, patch
 
 import pytest
 
@@ -13,16 +13,16 @@
 
 @pytest.fixture
 def mock_channel() -> Generator[MagicMock, None, None]:
-    """Fixture for grpc.aio.insecure_channel."""
-    with patch("grpc.aio.insecure_channel") as mock:
+    """Fixture for grpc.aio.secure_channel."""
+    with patch("grpc.aio.secure_channel") as mock:
         yield mock
 
 
 @pytest.mark.asyncio
 async def test_client_initialization(mock_channel: MagicMock) -> None:
     """Test that the client initializes the channel."""
     client = ReportingApiClient("localhost:50051")  # noqa: F841
-    mock_channel.assert_called_once_with("localhost:50051")
+    mock_channel.assert_called_once_with("localhost:50051", ANY)
 
 
 def test_components_data_batch_is_empty_true() -> None: