Azure monitor exporter authentication

[arjunmahishi]

Component(s)

exporter/azuremonitor

Is your feature request related to a problem? Please describe.

The current implementation of the Azure monitor exporter does not support EntraID based authentication out of the box. So, One has to use aad-auth-proxy along with OTel. This additional tool adds a bit of maintenance overhead.

Describe the solution you'd like

Are there any plans to add support for EntraID based auth in the future?

If not, can the exporter use an HTTP client created using the confighttp package instead of a default HTTP client? A lot of other exporters seem to be doing this. This will allow us to create an auth extension with the capabilities of aad-auth-proxy. I think a lot of users would prefer using an extension instead of deploying a whole other tool.

Describe alternatives you've considered

No response

Additional context

The confighttp's HTTP client can be injected somewhere here perhaps

opentelemetry-collector-contrib/exporter/azuremonitorexporter/factory.go

Lines 128 to 132 in 886c4b4

	telemetryConfiguration := appinsights.NewTelemetryConfiguration(string(exporterConfig.InstrumentationKey))
	telemetryConfiguration.EndpointUrl = exporterConfig.Endpoint
	telemetryConfiguration.MaxBatchSize = exporterConfig.MaxBatchSize
	telemetryConfiguration.MaxBatchInterval = exporterConfig.MaxBatchInterval
	telemetryClient := appinsights.NewTelemetryClientFromConfig(telemetryConfiguration)

[github-actions]

Pinging code owners:

• exporter/azuremonitor: @pcwiese

See Adding Labels via Comments if you do not have permissions to add labels yourself.

[Ricky-G]

Hi @arjunmahishi does this solve the issue

https://github.com/open-telemetry/opentelemetry-collector-contrib/blob/main/exporter/azuremonitorexporter/AUTHENTICATION.md#aadentra-authentication

[arjunmahishi]

Hi @arjunmahishi does this solve the issue

https://github.com/open-telemetry/opentelemetry-collector-contrib/blob/main/exporter/azuremonitorexporter/AUTHENTICATION.md#aadentra-authentication

No it does not. This is what is currently possible. My post is about asking for a better alternative.

[github-actions]

This issue has been inactive for 60 days. It will be closed in 60 days if there is no activity. To ping code owners by adding a component label, see Adding Labels via Comments, or if you are unsure of which component this issue relates to, please ping @open-telemetry/collector-contrib-triagers. If this issue is still relevant, please ping the code owners or leave a comment explaining why it is still relevant. Otherwise, please close it.

Pinging code owners:

• exporter/azuremonitor: @pcwiese

See Adding Labels via Comments if you do not have permissions to add labels yourself.

[github-actions]

This issue has been closed as inactive because it has been stale for 120 days with no activity.