Update config TLS field to be Optional

Author: THardy98

temporalio/bridge/sdk-core

@@ -24,7 +24,7 @@
 class ClientConfigTLSDict(TypedDict, total=False):
     """Dictionary representation of TLS config for TOML."""
 
-    disabled: bool
+    disabled: Optional[bool]
     server_name: str
     server_ca_cert: Mapping[str, str]
     client_cert: Mapping[str, str]
@@ -105,8 +105,8 @@ class ClientConfigTLS:
         Experimental API.
     """
 
-    disabled: bool = False
-    """If true, TLS is explicitly disabled."""
+    disabled: Optional[bool] = None
+    """If True, TLS is explicitly disabled. If False, TLS is explicitly enabled. If None, TLS behavior was not configured."""
     server_name: Optional[str] = None
     """SNI override."""
     server_root_ca_cert: Optional[DataSource] = None
@@ -119,7 +119,7 @@ class ClientConfigTLS:
     def to_dict(self) -> ClientConfigTLSDict:
         """Convert to a dictionary that can be used for TOML serialization."""
         d: ClientConfigTLSDict = {}
-        if self.disabled:
+        if self.disabled is not None:
             d["disabled"] = self.disabled
         if self.server_name is not None:
             d["server_name"] = self.server_name
@@ -138,7 +138,7 @@ def set_source(
 
     def to_connect_tls_config(self) -> Union[bool, temporalio.service.TLSConfig]:
         """Create a `temporalio.service.TLSConfig` from this profile."""
-        if self.disabled:
+        if self.disabled is True:
             return False
 
         return temporalio.service.TLSConfig(
@@ -154,7 +154,7 @@ def from_dict(d: Optional[ClientConfigTLSDict]) -> Optional[ClientConfigTLS]:
         if not d:
             return None
         return ClientConfigTLS(
-            disabled=d.get("disabled", False),
+            disabled=d.get("disabled"),
             server_name=d.get("server_name"),
             # Note: Bridge uses snake_case, but TOML uses kebab-case which is
             # converted to snake_case. Core has server_ca_cert, client_key.

temporalio/envconfig.py

@@ -519,7 +519,6 @@ def test_client_config_profile_to_from_dict():
         namespace="some-namespace",
         api_key="some-api-key",
         tls=ClientConfigTLS(
-            disabled=False,
             server_name="some-server-name",
             server_root_ca_cert=b"ca-cert-data",
             client_cert=Path("/path/to/client.crt"),
@@ -530,7 +529,7 @@ def test_client_config_profile_to_from_dict():
 
     profile_dict = profile.to_dict()
 
-    # Check dict representation. Note that disabled=False is not in the dict.
+    # Check dict representation. Note that disabled=None is not in the dict.
     expected_dict = {
         "address": "some-address",
         "namespace": "some-namespace",
@@ -557,7 +556,6 @@ def test_client_config_profile_to_from_dict():
         namespace="some-namespace",
         api_key="some-api-key",
         tls=ClientConfigTLS(
-            disabled=False,
             server_name="some-server-name",
             server_root_ca_cert="ca-cert-data",  # Was bytes, now str
             client_cert=Path("/path/to/client.crt"),