From 5c55428580f8bdf0007cfc9caff12ea87998668b Mon Sep 17 00:00:00 2001
From: Frederic Branczyk <fbranczyk@gmail.com>
Date: Thu, 15 Jan 2026 10:51:41 +0100
Subject: [PATCH] snap: Add remote-store-grpc-headers config option

Allow users to specify additional gRPC headers via snap configuration.
Headers are specified as comma-separated key=value pairs.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
---
 snap/README.md                 |  1 +
 snap/hooks/configure           |  6 ++++++
 snap/local/parca-agent-wrapper | 10 ++++++++++
 3 files changed, 17 insertions(+)

diff --git a/snap/README.md b/snap/README.md
index 2385d5709d..8a3f482a60 100644
--- a/snap/README.md
+++ b/snap/README.md
@@ -35,6 +35,7 @@ There are a small number of config options:
 | `http-address`          | Any string                       | `:7071`          | Address for HTTP server to bind to.                          |
 | `remote-store-address`  | Any string                       | `localhost:7071` | Remote store (gRPC) address to send profiles and symbols to. |
 | `remote-store-insecure` | `true`, `false`                  | `false`          | Send gRPC requests via plaintext instead of TLS.             |
+| `remote-store-grpc-headers` | Comma-separated key=value pairs | ``               | Additional gRPC headers to send with each request.           |
 | `config-path`           | Any string                       | ``               | Path to config file.                                         |
 
 Config options can be set with `sudo snap set parca-agent <option>=<value>`
diff --git a/snap/hooks/configure b/snap/hooks/configure
index 74dcaea6c4..bcfdd5988e 100644
--- a/snap/hooks/configure
+++ b/snap/hooks/configure
@@ -71,3 +71,9 @@ off_cpu_threshold="$(snapctl get off-cpu-threshold)"
 if [[ -z "$off_cpu_threshold" ]]; then
     snapctl set off-cpu-threshold="0"
 fi
+
+# Set gRPC headers
+remote_store_grpc_headers="$(snapctl get remote-store-grpc-headers)"
+if [[ -z "$remote_store_grpc_headers" ]]; then
+    snapctl set remote-store-grpc-headers=""
+fi
diff --git a/snap/local/parca-agent-wrapper b/snap/local/parca-agent-wrapper
index 5bf615ac31..7153ffbda3 100644
--- a/snap/local/parca-agent-wrapper
+++ b/snap/local/parca-agent-wrapper
@@ -28,6 +28,7 @@ token="$(snapctl get remote-store-bearer-token)"
 metadata_external_labels="$(snapctl get metadata-external-labels)"
 config_path="$(snapctl get config-path)"
 off_cpu_threshold="$(snapctl get off-cpu-threshold)"
+grpc_headers="$(snapctl get remote-store-grpc-headers)"
 
 # Start building an array of command line options
 opts=(
@@ -46,5 +47,14 @@ if [[ -n "${token}" ]]; then
     opts+=("--remote-store-bearer-token=${token}")
 fi
 
+# If gRPC headers have been set, append them to the command line args
+# Headers should be comma-separated key=value pairs, e.g., "X-Custom-Header=value1,X-Another=value2"
+if [[ -n "${grpc_headers}" ]]; then
+    IFS=',' read -ra headers <<< "${grpc_headers}"
+    for header in "${headers[@]}"; do
+        opts+=("--remote-store-grpc-headers=${header}")
+    done
+fi
+
 # Run parca-agent with the gathered arguments
 exec "${SNAP}/parca-agent" "${opts[@]}" 2>&1  | tee -a "$SNAP_COMMON/parca-agent.log"