Adam Iwaniuk

Security: Configuration Restrictions

3

https://github.com/open-telemetry/opamp-spec/blob/main/specification.md#configuration-restrictions This is very hard thing to implement in a secure way, but if not implemented properly then it may even decrease security of environment: Agent operator assuming it works...

I think it may be worth to extend Code Signing section (https://github.com/open-telemetry/opamp-spec/blob/main/specification.md#code-signing) and add downgrade protection recommendation. Let's consider following scenario: 1. Agent is running with version X of package...

I just lost 10 minutes because of this. I had double space after token instead of single one and when build failed,I spent time on debugging why builder is not...