Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[telemetrygen] Fix case where root CAs should inherit from host environment #31250

Merged
merged 4 commits into from
Feb 21, 2024

Conversation

AlexDCraig
Copy link
Contributor

@AlexDCraig AlexDCraig commented Feb 14, 2024

Description:

Adding TLS configuration to telemetrygen made it so that providing root CA information is mandatory. This is for the case when you are generating CAs and using them to sign certificates. In the case where the CA that signed the certificate is a known trusted CA, we shouldn't have to provide its CA certificate. This PR fixes this problem by allowing the code to pull its CA pool from the host environment when CAs are not explicitly supplied.

Link to tracking Issue: github.com/open-telemetry/opentelemetry-collector-contrib/issues/31191

Testing: Generate metrics, logs, traces against http and grpc endpoints with legitimate certificates

Documentation:

@AlexDCraig AlexDCraig requested a review from a team February 14, 2024 00:52
Copy link

linux-foundation-easycla bot commented Feb 14, 2024

CLA Signed

The committers listed above are authorized under a signed CLA.

@github-actions github-actions bot added the cmd/telemetrygen telemetrygen command label Feb 14, 2024
@AlexDCraig
Copy link
Contributor Author

@dmitryax CLA signed. I believe the PR that introduced this regression in functionality was #29681

@mx-psi
Copy link
Member

mx-psi commented Feb 14, 2024

cc @Juliaj can you review this?

@Juliaj
Copy link
Contributor

Juliaj commented Feb 16, 2024

@mx-psi, @AlexDCraig , the changes look good!

@AlexDCraig
Copy link
Contributor Author

@mx-psi @bryan-aguilar @dmitryax Are we good to proceed?

@bryan-aguilar
Copy link
Contributor

@AlexDCraig, weird, I thought I put the ready to merge label on it. I will monitor the workflows and add the label once they pass.

@bryan-aguilar bryan-aguilar added the ready to merge Code review completed; ready to merge by maintainers label Feb 20, 2024
@TylerHelmuth TylerHelmuth merged commit 21a764b into open-telemetry:main Feb 21, 2024
147 checks passed
XinRanZhAWS pushed a commit to XinRanZhAWS/opentelemetry-collector-contrib that referenced this pull request Mar 13, 2024
…onment (open-telemetry#31250)

**Description:** 

Adding TLS configuration to telemetrygen made it so that providing root
CA information is mandatory. This is for the case when you are
generating CAs and using them to sign certificates. In the case where
the CA that signed the certificate is a known trusted CA, we shouldn't
have to provide its CA certificate. This PR fixes this problem by
allowing the code to pull its CA pool from the host environment when CAs
are not explicitly supplied.

**Link to tracking Issue:**
[github.com/open-telemetry/issues/31191](open-telemetry#31191)

**Testing:** Generate metrics, logs, traces against http and grpc
endpoints with legitimate certificates

**Documentation:** <Describe the documentation added.>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
cmd/telemetrygen telemetrygen command ready to merge Code review completed; ready to merge by maintainers
Projects
None yet
Development

Successfully merging this pull request may close these issues.

6 participants