Skip to content

Implement OTEL secrets replacement in parsed policy#6419

Open
michel-laterman wants to merge 1 commit intoelastic:mainfrom
michel-laterman:bug/otel-secret-refereces
Open

Implement OTEL secrets replacement in parsed policy#6419
michel-laterman wants to merge 1 commit intoelastic:mainfrom
michel-laterman:bug/otel-secret-refereces

Conversation

@michel-laterman
Copy link
Contributor

What is the problem this PR solves?

Added functionality to replace secrets in OTEL sections (receivers, exporters, processors, extensions, connectors) of a policy. Updated the NewParsedPolicy function to process these sections and append identified secret keys. Included a new test case to validate the correct replacement of secrets in the OTEL sections.

How does this PR solve the problem?

Add a call to the existing ProcessMapSecrets method for OTEL keys in the policy.

Design Checklist

  • I have ensured my design is stateless and will work when multiple fleet-server instances are behind a load balancer.
  • I have or intend to scale test my changes, ensuring it will work reliably with 100K+ agents connected.
  • I have included fail safe mechanisms to limit the load on fleet-server: rate limiting, circuit breakers, caching, load shedding, etc.

Checklist

  • I have commented my code, particularly in hard-to-understand areas
  • I have made corresponding changes to the documentation
  • I have made corresponding change to the default configuration files
  • I have added tests that prove my fix is effective or that my feature works
  • I have added an entry in ./changelog/fragments using the changelog tool

Related issues

Added functionality to replace secrets in OTEL sections (receivers, exporters,
processors, extensions, connectors) of a policy. Updated the `NewParsedPolicy`
function to process these sections and append identified secret keys. Included a
new test case to validate the correct replacement of secrets in the OTEL
sections.
@michel-laterman michel-laterman requested a review from a team as a code owner February 24, 2026 22:50
@michel-laterman michel-laterman added the bug Something isn't working label Feb 24, 2026
@michel-laterman michel-laterman added Team:Elastic-Agent-Control-Plane Label for the Agent Control Plane team backport-active-9 Automated backport with mergify to all the active 9.[0-9]+ branches labels Feb 24, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

backport-active-9 Automated backport with mergify to all the active 9.[0-9]+ branches bug Something isn't working Team:Elastic-Agent-Control-Plane Label for the Agent Control Plane team

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Secrets in Fleet-managed OTel configuration are not rendered

1 participant