Werk #18311: OTel: Use site certificates for TLS encryption

Component Checks & agents
Title OTel: Use site certificates for TLS encryption
Date Oct 7, 2025
Level Trivial Change
Class Bug Fix
Compatibility Compatible - no manual interaction needed
Checkmk versions & editions
2.5.0b1
Not yet released
Checkmk Cloud (CCE), Checkmk MSP (CME)
2.4.0p15
Not yet released
Checkmk Cloud (CCE), Checkmk MSP (CME)

The certificates used by the OTel collector for TLS encryption are signed by the site CA and contain the same information as general site certificates.

The OTel collector now uses the general site certificates for TLS encryption instead of requiring separate ones. This change simplifies certificate management by eliminating the need to create and maintain distinct certificates for the OTel collector. Existing general site certificates are used automatically, reducing administrative overhead. No action is required unless you want to replace certificates, in which case you should update the general site certificates as usual.

To the list of all Werks