OTEL-046: OTLP HTTP endpoint missing URL scheme
Severity: warn (advisory)
Rule Details
otlphttp speaks HTTP, so its endpoint is a full URL. Passing a bare host:port makes the Collector guess a scheme — usually http://, which silently downgrades a production exporter to cleartext. Spell out https:// (or http:// for a local sink) explicitly.
This rule fires when an otlphttp exporter has an endpoint that does not start with http:// or https:// and is not a literal ${env:...} reference.
Options
This rule has no options.
Examples
Avoid
exporters:
otlphttp/backend:
endpoint: backend.example.com:4318 # missing scheme
Prefer
exporters:
otlphttp/backend:
endpoint: https://backend.example.com:4318
When Not To Use It
Never — always include the scheme.
Related Rules
- OTEL-044 — OTLP gRPC exporter endpoint has
http(s)://scheme - OTEL-045 — OTLP gRPC endpoint missing port number
- OTEL-047 — OTLP HTTP exporter using gRPC port 4317
Version
Available since augur v0.1.0.
Further Reading
Resources
- Rule source:
policy/main/exporter.rego