Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Service Accounts instead of PAT for OTEL Config in DDN #10586

Open
bmacwoo opened this issue Nov 5, 2024 · 1 comment
Open

Service Accounts instead of PAT for OTEL Config in DDN #10586

bmacwoo opened this issue Nov 5, 2024 · 1 comment
Labels
c/ddn-auth k/enhancement New feature or improve an existing feature

Comments

@bmacwoo
Copy link

bmacwoo commented Nov 5, 2024

Component

Observability - Open Telemetry

Is your proposal related to a problem?

In the current OpenTelemetry (OTEL) configuration process within DDN, the requirement to obtain a Personal Access Token (PAT) is tied to individual user accounts. This user-based approach poses potential security risks, especially in deployment scenarios. Best practices suggest utilizing Service Accounts to enhance security by minimizing reliance on personal tokens and ensuring a more controlled and manageable authentication process.

Describe the solution you'd like

Implement a feature that allows the use of Service Accounts for OTEL configuration in DDN, instead of the current user-based token system. This change would align with security best practices and provide a more robust solution for managing deployments.

Describe alternatives you've considered

NA

@bmacwoo bmacwoo added the k/enhancement New feature or improve an existing feature label Nov 5, 2024
@manasag
Copy link
Contributor

manasag commented Nov 8, 2024

Thanks for creating this request. And yes, this is a pending feature that is important for production best practices. We will update when we are able to schedule this feature.

@manasag manasag added the c/ddn-auth label Nov 8, 2024 — with Linear
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
c/ddn-auth k/enhancement New feature or improve an existing feature
Projects
None yet
Development

No branches or pull requests

2 participants