Skip to content

Remove auth credential headers from upstream requests to otel collectors (both the legacy and the new one).

Pawel Rozlach requested to merge prozlach/remove_auth_creds_from_upstream_req into main

We shouldn't be pushing auth headers to upstream servers unless it is strictly necessary. It is a basic security measure in case somebody gains access to the collector itself.

Related to #2595 (closed)

Edited by Pawel Rozlach

Merge request reports