Bypassing SSL Verification with OTLPMetricExporter

[ETURNA]

Greetings,

I'm trying to send system metrics via a Python script hosted on an EC2 instance (AWS) to collectors hosted on EC2 instances behind an application load balancer. Assuming that an organizational policy is in place to redirect HTTP traffic to HTTPS, there would be a listener on the ALB to redirect port 4318 traffic to 443, then pass that traffic to 4318 on the target group instances.

Main hurdle I'm facing is an SSL verification error:
[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: self signed certificate in certificate chain (_ssl.c:1091)

My code is pretty simple. Just wondering how I would go about bypassing the certificate verification?

from opentelemetry.sdk.resources import SERVICE_NAME, Resource
from opentelemetry.exporter.otlp.proto.http.metric_exporter import OTLPMetricExporter
from opentelemetry.sdk.metrics import (
    Counter,
    Histogram,
    MeterProvider,
    ObservableCounter,
    ObservableGauge,
    ObservableUpDownCounter,
    UpDownCounter
)

from opentelemetry.metrics.export import (
    AggregationTemporality,
    PeriodicExportingMetricReader,
    ConsoleMetricExporter
)

from opentelemetry.metrics import set_meter_provider
from opentelemetry.instrumentation.system_metrics import SystemMetricsInstrumentor

resource = Resource.create(
    {
        SERVICE_NAME: "otel_test_service"
    }
)

# Local testing

# exporter = ConsoleMetricExporter()
# set_meter_provider(MeterProvider([PeriodicExportingMetricReader(exporter)], resource=resource))

# Endpoint testing

exporter = OTLPMetricExporter(
    endpoint = "http://testinginternalurl.com:4318/v1/metrics",
    preferred_temporality = {
        Counter: AggregationTemporality.DELTA,
        UpDownCounter: AggregationTemporality.CUMULATIVE,
        Histogram: AggregationTemporality.DELTA,
        ObservableCounter: AggregationTemporality.DELTA,
        ObservableUpDownCounter: AggregationTemporality.CUMULATIVE,
    }
)

reader = PeriodicExportingMetricReader(exporter)
provider = MeterProvider(metric_readers=[reader], resource=resource)
set_meter_provider(provider)

SystemMetricsInstrumentor().instrument()

Thanks.

[ocelotl]

Hello

I'm not sure we can do that. Our code just relies on grpc to create secure or insecure channels. I looked around and it seems like there is no support to skip SSL verification on Python.

[ETURNA]

I appreciate your response! I came to the same conclusions concerning SSL verification on Python, so I simply opened 4318 on my ALB and it worked just fine. :)