Skip to main content

OTEL-046: OTLP HTTP endpoint missing URL scheme

Severity: warn (advisory)

Rule Details

otlphttp speaks HTTP, so its endpoint is a full URL. Passing a bare host:port makes the Collector guess a scheme — usually http://, which silently downgrades a production exporter to cleartext. Spell out https:// (or http:// for a local sink) explicitly.

This rule fires when an otlphttp exporter has an endpoint that does not start with http:// or https:// and is not a literal ${env:...} reference.

Options

This rule has no options.

Examples

Avoid
exporters:
otlphttp/backend:
endpoint: backend.example.com:4318 # missing scheme
Prefer
exporters:
otlphttp/backend:
endpoint: https://backend.example.com:4318

When Not To Use It

Never — always include the scheme.

  • OTEL-044 — OTLP gRPC exporter endpoint has http(s):// scheme
  • OTEL-045 — OTLP gRPC endpoint missing port number
  • OTEL-047 — OTLP HTTP exporter using gRPC port 4317

Version

Available since augur v0.1.0.

Further Reading

Resources