Grafana sending emails to [email protected]

[mindrunner]

Just recently Grafana started to send alert emails to an default address (see screenshot). Could not find a straight forward way to change this setting in values.yaml. Is this expected behaviour? Any advice?

Cross Post: https://github.com/prometheus-community/helm-charts/issues/2335

[zanhsieh]

@mindrunner Could you check if you remove the comment block and change the email here?

https://github.com/grafana/helm-charts/blob/7143ee0fbc3321c2809194acffb981476b64a4f8/charts/grafana/values.yaml#L601

If that doesn't work then we have to escalate to Grafana developers.

[mindrunner]

Tried that already

  notifiers:
    notifiers.yaml:
      notifiers:
        - name: email-notifier
          type: email
          uid: email1
          org_id: 1
          is_default: true
          settings:
            addresses: [email protected]

[RenWal]

I've just encountered this in a plain Grafana 9.1.5 install from the Debian repo at https://packages.grafana.com/oss/deb stable/main amd64. Upgrading to that version apparently deleted the previously existing contact points and auto-enabled this address. I consider this a security risk, since there is actually a mail server at [email protected]. Alerts can contain sensitive information and should never, ever be sent to an address that the server administrator did not specify.

[RenWal]

See also https://github.com/grafana/grafana/issues/48934