Azure monitor exporter authentication

[arjunmahishi]

Component(s)

exporter/azuremonitor

Is your feature request related to a problem? Please describe.

The current implementation of the Azure monitor exporter does not support EntraID based authentication out of the box. So, One has to use aad-auth-proxy along with OTel. This additional tool adds a bit of maintenance overhead.

Describe the solution you'd like

Are there any plans to add support for EntraID based auth in the future?

If not, can the exporter use an HTTP client created using the confighttp package instead of a default HTTP client? A lot of other exporters seem to be doing this. This will allow us to create an auth extension with the capabilities of aad-auth-proxy. I think a lot of users would prefer using an extension instead of deploying a whole other tool.

Describe alternatives you've considered

No response

Additional context

The confighttp's HTTP client can be injected somewhere here perhaps

opentelemetry-collector-contrib/exporter/azuremonitorexporter/factory.go

Lines 128 to 132 in 886c4b4

	telemetryConfiguration := appinsights.NewTelemetryConfiguration(string(exporterConfig.InstrumentationKey))
	telemetryConfiguration.EndpointUrl = exporterConfig.Endpoint
	telemetryConfiguration.MaxBatchSize = exporterConfig.MaxBatchSize
	telemetryConfiguration.MaxBatchInterval = exporterConfig.MaxBatchInterval
	telemetryClient := appinsights.NewTelemetryClientFromConfig(telemetryConfiguration)

[github-actions]

Pinging code owners:

• exporter/azuremonitor: @pcwiese

See Adding Labels via Comments if you do not have permissions to add labels yourself.

[Ricky-G]

Hi @arjunmahishi does this solve the issue

https://github.com/open-telemetry/opentelemetry-collector-contrib/blob/main/exporter/azuremonitorexporter/AUTHENTICATION.md#aadentra-authentication

[arjunmahishi]

Hi @arjunmahishi does this solve the issue

https://github.com/open-telemetry/opentelemetry-collector-contrib/blob/main/exporter/azuremonitorexporter/AUTHENTICATION.md#aadentra-authentication

No it does not. This is what is currently possible. My post is about asking for a better alternative.