oncall icon indicating copy to clipboard operation
oncall copied to clipboard

Allow optional local requests for outgoing webhooks

Open Matvey-Kuk opened this issue 2 years ago • 1 comments

An OSS user reported in the community that he experienced problems with outgoing webhooks not being able to reach the desired host.

It happened that this security check didn't let it go: https://github.com/grafana/oncall/blob/dev/engine/apps/alerts/utils.py#L60

I propose to introduce env variable "ALLOW_DANGEROUS_WEBHOOKS" (false by default) for those who run OnCall in a trusted environment. This env variable will help to disable all webhook checks.

Matvey-Kuk avatar Jul 14 '22 07:07 Matvey-Kuk

FYI: We're taking this to the main team's backlog.

Matvey-Kuk avatar Jul 14 '22 10:07 Matvey-Kuk

Closing, since the feature is merged.

Matvey-Kuk avatar Sep 23 '22 14:09 Matvey-Kuk