Skip to content

fix(sdk): enforce exporter isolation at send time for OTel 1.45 - #277

Merged
krisztianfekete merged 1 commit into
mainfrom
fix/sdk-exporter-isolation-otel-145
Nov 10, 2026
Merged

krisztianfekete merged 1 commit into
mainfrom
fix/sdk-exporter-isolation-otel-145

Conversation

@krisztianfekete

Copy link
Copy Markdown
Member

OpenTelemetry 1.45 changed how the OTLP HTTP exporters resolve settings: headers from OTEL_EXPORTER_OTLP_*HEADERS are now merged with explicit ones, and the client certificate from the environment is set on the requests session. As a result the SDK sent the application's OTLP headers and mTLS certificate to the agentevals endpoint, or dropped exports when those certificate files were missing.

The SDK's isolated session now enforces isolation in send(): default trust store, no client certificate, no proxy, and only transport headers plus x-agentevals-sdk. This works on 1.44 and 1.45.

TestExporterIsolation now checks the outgoing request at the HTTP adapter instead of private exporter attributes, and passes on both versions. Unblocks #276.

@krisztianfekete
krisztianfekete merged commit 40994c4 into main Nov 10, 2026
9 checks passed
@krisztianfekete
krisztianfekete deleted the fix/sdk-exporter-isolation-otel-145 branch November 10, 2026 10:52
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant