Plan
archived
Tempo 3.1 adds Kafka TLS/SASL, trace redaction, and TraceQL metrics updates
- Platform/SRE — Plan: Platform teams running Tempo 3.0 in microservices mode with Kafka-based ingestion shipped without TLS support — a real security gap. Upgrading to 3.1 closes it with TLS and additional SASL mechanisms (SCRAM-SHA-256/512, OAUTHBEARER, AWS_MSK_IAM); schedule the upgrade this quarter if Kafka ingestion is in use.
- CI/CD — Skip
- Leader — Skip
This entry was curated and judged by AI (Claude) with automated enrichment
(CISA KEV / EPSS / public PoC). Verify against the original source before
acting. Found a bad verdict?
Report it —
confirmed errors go to the corrections log.