Skip to content

otel: tls endpoint and otel in serve mode#1108

Open
TheRayquaza wants to merge 1 commit intocontainerd:mainfrom
TheRayquaza:mateo.lelong/fix-shimkit-otel-v1
Open

otel: tls endpoint and otel in serve mode#1108
TheRayquaza wants to merge 1 commit intocontainerd:mainfrom
TheRayquaza:mateo.lelong/fix-shimkit-otel-v1

Conversation

@TheRayquaza
Copy link
Copy Markdown

@TheRayquaza TheRayquaza commented Apr 15, 2026

I found a couple of issues when using a TLS OTEL endpoint:

TLS certificates for OTEL

  • before: can't be verified by the shim
  • fix: added the rustls-native-certs package to verify certificates

OTEL configuration failure

before: when the OTEL configuration is invalid, the shim fails and never return the pod address

Failed to create pod sandbox: rpc error: code = Unknown desc = failed to start sandbox
"3cb59679bc83014eeb5e249b740b507965ef6928d77dbf5ccfa85ab103dd9e64": failed to create containerd task: 
failed to start shim: start failed: failed to create TTRPC connection: unsupported protocol:
OpenTelemetry trace error occurred. error sending request for url (https//...

fix: OTEL configuration is loaded only in serve mode, invalid configuration is just ignored

…ished 1.0.0

Signed-off-by: Mateo Lelong <mateo.lelong@datadoghq.com>
@TheRayquaza TheRayquaza changed the title otel: support tls endpoint, enable otel in serve mode and otel: support tls endpoint and otel in serve mode Apr 15, 2026
@TheRayquaza TheRayquaza changed the title otel: support tls endpoint and otel in serve mode otel: tls endpoint and otel in serve mode Apr 15, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant