Skip to content

Conversation

padyx
Copy link
Contributor

@padyx padyx commented May 19, 2022

What this PR does:
It re-enables the proxy_url option for alertmanager receivers.

⚠️ Reverts part of a security change! Review well ⚠️

Originally introduced with #4129 . We believe this might have been an overly cautious fix and propose to re-enable this option again. This seems to be the consensus in the follow-up discussion. #4129 (comment) by @alvinlin123

Which issue(s) this PR fixes:
Fixes #4680

Checklist

  • Tests updated
  • Documentation added
  • CHANGELOG.md updated - the order of entries should be [CHANGE], [FEATURE], [ENHANCEMENT], [BUGFIX]

@padyx
Copy link
Contributor Author

padyx commented May 25, 2022

Not sure why the test failed, I've tried that locally and did not see this error.

Rebased the branch to master to retry this, plus added the CHANGELOG.md change which was missing before.

CHANGELOG.md Outdated
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

In change log, the convention is to put the PR number instead of the issue number. May I ask you to kindly update it? Thanks!

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Of course, done!

Signed-off-by: Patrick Bänziger <[email protected]>
Copy link
Member

@friedrichg friedrichg left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The proxy url is used by the roundtripper in alertmanager to create connections. That proxy connection is http, https or socks5 (per go Transport.Proxy). There is no risk that a rogue tenant could access local files here.

This can be re-enabled.

@alvinlin123 alvinlin123 merged commit 618a41b into cortexproject:master May 31, 2022
@padyx padyx deleted the reenable-proxyurl branch May 31, 2022 09:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Unable to set a proxy for alertmanager-receivers

3 participants