Problem Statement

Customers using Red Hat OpenShift Service on AWS (ROSA) and OpenShift Container Platform cannot export telemetry data to AWS OpenSearch Ingestion Service (OSIS) because the Red Hat build of OpenTelemetry lacks the SigV4 authentication extension.

Technical Requirements

Current State

Red Hat Build of OpenTelemetry currently supports these authentication extensions:

• BearerTokenAuth Extension
• OAuth2Client Extension
• File Storage Extension
• OIDC Auth Extension
• Jaeger Remote Sampling Extension
• Performance Profiler Extension
• Health Check Extension
• zPages Extension

Requested Feature

Add SigV4 Authentication Extension (sigv4auth) to the Red Hat build of OpenTelemetry Collector.

Configuration Example:

extensions:
  sigv4auth:
    region: "us-west-2"
    service: "es"  # for OpenSearch
    # Optional: role_arn for cross-account access
    # Optional: session_name for STS sessionsexporters:
  otlphttp:
    endpoint: "https://opensearch-ingestion-endpoint.region.osis.amazonaws.com"
    auth:
      authenticator: sigv4auth
    compression: gzipservice:
  extensions: [sigv4auth]
  pipelines:
    metrics:
      receivers: [otlp, prometheus]
      exporters: [otlphttp]