Page MenuHomeVyOS Platform

telegraf: Azure credentials exported into the commit process environment, never reach the service
Closed, ResolvedPublicBUG

Description

Azure Data Explorer credentials are set in the commit process environment and never reach the telegraf service.

Location
src/conf_mode/service_monitoring_telegraf.py:104-106

data/templates/telegraf/override.conf.j2

Problem
os.environ[...] in get_config(); the systemd override clears EnvironmentFile= and only sets INFLUX_TOKEN.

Impact
Azure Data Explorer output can never authenticate.

Suggested fix
Write AZURE_* to a 0600 EnvironmentFile referenced by the override.

Details

Version
rolling
Is it a breaking change?
Perfectly compatible
Issue type
Bug (incorrect behavior)

Event Timeline

natali-rs1985 changed the task status from Open to In progress.
natali-rs1985 claimed this task.
natali-rs1985 triaged this task as High priority.
natali-rs1985 updated the task description. (Show Details)
natali-rs1985 changed Version from rol to rolling.
Viacheslav moved this task from Need Triage to Completed on the VyOS Rolling board.