From 5064a2a61d9fc514f9afdeb2f058df283e5457de Mon Sep 17 00:00:00 2001
From: Eric Anderson <ejona@google.com>
Date: Wed, 22 Oct 2025 07:45:48 -0700
Subject: [PATCH] alts: Remove dep on grpclb

There are no longer any users of grpclb on directpath, so remove the
special-casing logic to choose between TLS and ALTS for grpclb-provided
backends.

Removing the grpclb dep can speed channel startup, as grpclb's DNS
resolver does SRV lookups which are no longer needed.
---
 alts/BUILD.bazel                                          | 1 -
 alts/build.gradle                                         | 2 --
 .../io/grpc/alts/internal/AltsProtocolNegotiator.java     | 5 +----
 .../internal/GoogleDefaultProtocolNegotiatorTest.java     | 8 --------
 gcp-observability/build.gradle                            | 1 -
 5 files changed, 1 insertion(+), 16 deletions(-)

diff --git a/alts/BUILD.bazel b/alts/BUILD.bazel
index 2d9d3508461..d2c01449dc3 100644
--- a/alts/BUILD.bazel
+++ b/alts/BUILD.bazel
@@ -13,7 +13,6 @@ java_library(
         ":handshaker_java_proto",
         "//api",
         "//core:internal",
-        "//grpclb",
         "//netty",
         "//stub",
         "@com_google_protobuf//:protobuf_java",
diff --git a/alts/build.gradle b/alts/build.gradle
index fe2e27784fc..c206a37bcef 100644
--- a/alts/build.gradle
+++ b/alts/build.gradle
@@ -14,12 +14,10 @@ dependencies {
     implementation project(':grpc-auth'),
             project(':grpc-core'),
             project(":grpc-context"), // Override google-auth dependency with our newer version
-            project(':grpc-grpclb'),
             project(':grpc-protobuf'),
             project(':grpc-stub'),
             libraries.protobuf.java,
             libraries.conscrypt,
-            libraries.guava.jre, // JRE required by protobuf-java-util from grpclb
             libraries.google.auth.oauth2Http
     def nettyDependency = implementation project(':grpc-netty')
 
diff --git a/alts/src/main/java/io/grpc/alts/internal/AltsProtocolNegotiator.java b/alts/src/main/java/io/grpc/alts/internal/AltsProtocolNegotiator.java
index e0343f83c51..9c51cf6a053 100644
--- a/alts/src/main/java/io/grpc/alts/internal/AltsProtocolNegotiator.java
+++ b/alts/src/main/java/io/grpc/alts/internal/AltsProtocolNegotiator.java
@@ -30,7 +30,6 @@
 import io.grpc.SecurityLevel;
 import io.grpc.Status;
 import io.grpc.alts.internal.RpcProtocolVersionsUtil.RpcVersionsCheckResult;
-import io.grpc.grpclb.GrpclbConstants;
 import io.grpc.internal.ObjectPool;
 import io.grpc.netty.GrpcHttp2ConnectionHandler;
 import io.grpc.netty.InternalProtocolNegotiator;
@@ -299,9 +298,7 @@ public ChannelHandler newHandler(GrpcHttp2ConnectionHandler grpcHandler) {
         isXdsDirectPath = isDirectPathCluster(
             grpcHandler.getEagAttributes().get(clusterNameAttrKey));
       }
-      if (grpcHandler.getEagAttributes().get(GrpclbConstants.ATTR_LB_ADDR_AUTHORITY) != null
-          || grpcHandler.getEagAttributes().get(GrpclbConstants.ATTR_LB_PROVIDED_BACKEND) != null
-          || isXdsDirectPath) {
+      if (isXdsDirectPath) {
         TsiHandshaker handshaker =
             handshakerFactory.newHandshaker(grpcHandler.getAuthority(), negotiationLogger); 
         NettyTsiHandshaker nettyHandshaker = new NettyTsiHandshaker(handshaker);
diff --git a/alts/src/test/java/io/grpc/alts/internal/GoogleDefaultProtocolNegotiatorTest.java b/alts/src/test/java/io/grpc/alts/internal/GoogleDefaultProtocolNegotiatorTest.java
index 9a520720beb..14c19e554ae 100644
--- a/alts/src/test/java/io/grpc/alts/internal/GoogleDefaultProtocolNegotiatorTest.java
+++ b/alts/src/test/java/io/grpc/alts/internal/GoogleDefaultProtocolNegotiatorTest.java
@@ -29,7 +29,6 @@
 import io.grpc.ChannelLogger;
 import io.grpc.ChannelLogger.ChannelLogLevel;
 import io.grpc.ManagedChannel;
-import io.grpc.grpclb.GrpclbConstants;
 import io.grpc.inprocess.InProcessChannelBuilder;
 import io.grpc.internal.ObjectPool;
 import io.grpc.netty.GrpcHttp2ConnectionHandler;
@@ -95,13 +94,6 @@ public void tearDown() {
     @Nullable
     abstract Attributes.Key<String> getClusterNameAttrKey();
 
-    @Test
-    public void altsHandler_lbProvidedBackend() {
-      Attributes attrs =
-          Attributes.newBuilder().set(GrpclbConstants.ATTR_LB_PROVIDED_BACKEND, true).build();
-      subtest_altsHandler(attrs);
-    }
-
     @Test
     public void tlsHandler_emptyAttributes() {
       subtest_tlsHandler(Attributes.EMPTY);
diff --git a/gcp-observability/build.gradle b/gcp-observability/build.gradle
index c6d6fa28ddc..1d8c7a9f961 100644
--- a/gcp-observability/build.gradle
+++ b/gcp-observability/build.gradle
@@ -59,7 +59,6 @@ dependencies {
             project(path: ':grpc-alts', configuration: 'shadow'),
             project(':grpc-auth'), // Align grpc versions
             project(':grpc-core'), // Align grpc versions
-            project(':grpc-grpclb'), // Align grpc versions
             project(':grpc-services'), // Align grpc versions
             libraries.animalsniffer.annotations, // Use our newer version
             libraries.auto.value.annotations, // Use our newer version