stacklok / toolhive / 24157941814

65%

Build Type

push

github

Committed by web-flow

Commit Message

Add custom CA certificate support for OTLP endpoints (#4676)

* Add custom CA certificate support for OTLP endpoints in MCPTelemetryConfig

When the OTLP collector uses TLS with certificates signed by an internal
CA, there was no way to inject a custom CA bundle into the proxyrunner
pod. Users had to resort to SSL_CERT_FILE which replaces the entire
system CA pool.

Add a caBundleRef field to MCPTelemetryOTelConfig that references a
ConfigMap containing the CA bundle. The operator mounts it into the pod
and threads the file path through the telemetry config layers so the
OTLP HTTP exporters use WithTLSClientConfig() with the custom CA
appended to the system pool.

Closes #4672

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

* Update swagger and CRD API reference docs

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Coverage Stats

114 of 133 new or added lines in 12 files covered. (85.71%)

13 existing lines in 4 files now uncovered.

54938 of 84223 relevant lines covered (65.23%)

63.42 hits per line