OpenTelemetry-Go Contrib vulnerable to denial of service in otelhttp due to unbound cardinality metrics

SwathiEnugula202 commented 3 months ago

Upgrade go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to fix 1 Dependabot alert in vertical-pod-autoscaler/e2e/go.mod Upgrade go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to version 0.44.0 or later. For example:

require go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.44.0

SwathiEnugula202 commented 3 months ago

I will work on this

k8s-triage-robot commented 1 week ago

The Kubernetes project currently lacks enough contributors to adequately respond to all issues.

This bot triages un-triaged issues according to the following rules:

After 90d of inactivity, lifecycle/stale is applied
After 30d of inactivity since lifecycle/stale was applied, lifecycle/rotten is applied
After 30d of inactivity since lifecycle/rotten was applied, the issue is closed

You can:

Mark this issue as fresh with /remove-lifecycle stale
Close this issue with /close
Offer to help out with Issue Triage

Please send feedback to sig-contributor-experience at kubernetes/community.

/lifecycle stale

adrianmoisey commented 1 week ago

/area vertical-pod-autoscaler

kubernetes / autoscaler

OpenTelemetry-Go Contrib vulnerable to denial of service in otelhttp due to unbound cardinality metrics #6699