From dbb87e3d7f50289203e9f0658f7ff412af0cfbf7 Mon Sep 17 00:00:00 2001 From: Fernando Alexandre Date: Mon, 20 Jul 2026 16:01:53 +0100 Subject: [PATCH 1/2] Adding new `client_secret_file` parameter to http and opentelemetry Signed-off-by: Fernando Alexandre --- administration/configuring-fluent-bit/yaml/pipeline-section.md | 1 + pipeline/outputs/http.md | 1 + pipeline/outputs/opentelemetry.md | 1 + 3 files changed, 3 insertions(+) diff --git a/administration/configuring-fluent-bit/yaml/pipeline-section.md b/administration/configuring-fluent-bit/yaml/pipeline-section.md index 3fea1f1b1..de27f6ce0 100644 --- a/administration/configuring-fluent-bit/yaml/pipeline-section.md +++ b/administration/configuring-fluent-bit/yaml/pipeline-section.md @@ -185,6 +185,7 @@ Output plugins that support outgoing `OAuth 2.0` authentication can expose the f | `oauth2.token_url` | Token endpoint URL. | _none_ | | `oauth2.client_id` | Client ID. | _none_ | | `oauth2.client_secret` | Client secret. | _none_ | +| `oauth2.client_secret_file` | Optional client_secret file path. | _none_ | | `oauth2.scope` | Optional scope parameter. | _none_ | | `oauth2.audience` | Optional audience parameter. | _none_ | | `oauth2.resource` | Optional resource parameter. | _none_ | diff --git a/pipeline/outputs/http.md b/pipeline/outputs/http.md index 687f20012..655654d3e 100644 --- a/pipeline/outputs/http.md +++ b/pipeline/outputs/http.md @@ -38,6 +38,7 @@ The _HTTP_ output plugin lets you flush your records into an HTTP endpoint. It i | `oauth2.auth_method` | `OAuth 2.0` client authentication method. Supported values: `basic`, `post`, `private_key_jwt`. | `basic` | | `oauth2.client_id` | `OAuth 2.0` client ID. | _none_ | | `oauth2.client_secret` | `OAuth 2.0` client secret. | _none_ | +| `oauth2.client_secret_file` | Optional `OAuth 2.0` client_secret file path. | _none_ | | `oauth2.connect_timeout` | Connect timeout for `OAuth 2.0` token requests. | `0s` | | `oauth2.enable` | Enable `OAuth 2.0` client credentials for outgoing requests. | `false` | | `oauth2.jwt_aud` | Audience for `private_key_jwt` JSON Web Token (JWT) assertion. Defaults to the value of `oauth2.token_url` when not set. | _none_ | diff --git a/pipeline/outputs/opentelemetry.md b/pipeline/outputs/opentelemetry.md index 879fbd4db..873cc3dd1 100644 --- a/pipeline/outputs/opentelemetry.md +++ b/pipeline/outputs/opentelemetry.md @@ -124,6 +124,7 @@ pipeline: | `oauth2.auth_method` | `OAuth 2.0` client authentication method. Supported values: `basic`, `post`, `private_key_jwt`. | `basic` | | `oauth2.client_id` | `OAuth 2.0` client ID. | _none_ | | `oauth2.client_secret` | `OAuth 2.0` client secret. | _none_ | +| `oauth2.client_secret_file` | Optional `OAuth 2.0` client_secret file path. | _none_ | | `oauth2.connect_timeout` | Connect timeout for `OAuth 2.0` token requests. | `0s` | | `oauth2.enable` | Enable `OAuth 2.0` client credentials for outgoing requests. | `false` | | `oauth2.jwt_aud` | Audience for `private_key_jwt` JSON Web Token (JWT) assertion. Defaults to the value of `oauth2.token_url` when not set. | _none_ | From 2c6ed22a2500cb1613e2febdad40c59ecbecd1e6 Mon Sep 17 00:00:00 2001 From: Fernando Alexandre Date: Mon, 20 Jul 2026 16:08:04 +0100 Subject: [PATCH 2/2] pipeline: outputs: administration: document oauth2.client_secret_file Add the `oauth2.client_secret_file` parameter to the OAuth 2.0 tables in the HTTP and OpenTelemetry output plugins, and to the shared OAuth 2.0 parameter table in the YAML pipeline section. The parameter takes a path to a file containing the client secret and overrides `oauth2.client_secret` when both are set. Signed-off-by: Fernando Alexandre Signed-off-by: Eric D. Schabell --- administration/configuring-fluent-bit/yaml/pipeline-section.md | 2 +- pipeline/outputs/http.md | 2 +- pipeline/outputs/opentelemetry.md | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/administration/configuring-fluent-bit/yaml/pipeline-section.md b/administration/configuring-fluent-bit/yaml/pipeline-section.md index de27f6ce0..1635aa939 100644 --- a/administration/configuring-fluent-bit/yaml/pipeline-section.md +++ b/administration/configuring-fluent-bit/yaml/pipeline-section.md @@ -185,7 +185,7 @@ Output plugins that support outgoing `OAuth 2.0` authentication can expose the f | `oauth2.token_url` | Token endpoint URL. | _none_ | | `oauth2.client_id` | Client ID. | _none_ | | `oauth2.client_secret` | Client secret. | _none_ | -| `oauth2.client_secret_file` | Optional client_secret file path. | _none_ | +| `oauth2.client_secret_file` | Optional path to a file containing the client secret. Overrides `oauth2.client_secret`. | _none_ | | `oauth2.scope` | Optional scope parameter. | _none_ | | `oauth2.audience` | Optional audience parameter. | _none_ | | `oauth2.resource` | Optional resource parameter. | _none_ | diff --git a/pipeline/outputs/http.md b/pipeline/outputs/http.md index 655654d3e..8a6425693 100644 --- a/pipeline/outputs/http.md +++ b/pipeline/outputs/http.md @@ -38,7 +38,7 @@ The _HTTP_ output plugin lets you flush your records into an HTTP endpoint. It i | `oauth2.auth_method` | `OAuth 2.0` client authentication method. Supported values: `basic`, `post`, `private_key_jwt`. | `basic` | | `oauth2.client_id` | `OAuth 2.0` client ID. | _none_ | | `oauth2.client_secret` | `OAuth 2.0` client secret. | _none_ | -| `oauth2.client_secret_file` | Optional `OAuth 2.0` client_secret file path. | _none_ | +| `oauth2.client_secret_file` | Optional path to a file containing the `OAuth 2.0` client secret. Overrides `oauth2.client_secret`. | _none_ | | `oauth2.connect_timeout` | Connect timeout for `OAuth 2.0` token requests. | `0s` | | `oauth2.enable` | Enable `OAuth 2.0` client credentials for outgoing requests. | `false` | | `oauth2.jwt_aud` | Audience for `private_key_jwt` JSON Web Token (JWT) assertion. Defaults to the value of `oauth2.token_url` when not set. | _none_ | diff --git a/pipeline/outputs/opentelemetry.md b/pipeline/outputs/opentelemetry.md index 873cc3dd1..84710fcbb 100644 --- a/pipeline/outputs/opentelemetry.md +++ b/pipeline/outputs/opentelemetry.md @@ -124,7 +124,7 @@ pipeline: | `oauth2.auth_method` | `OAuth 2.0` client authentication method. Supported values: `basic`, `post`, `private_key_jwt`. | `basic` | | `oauth2.client_id` | `OAuth 2.0` client ID. | _none_ | | `oauth2.client_secret` | `OAuth 2.0` client secret. | _none_ | -| `oauth2.client_secret_file` | Optional `OAuth 2.0` client_secret file path. | _none_ | +| `oauth2.client_secret_file` | Optional path to a file containing the `OAuth 2.0` client secret. Overrides `oauth2.client_secret`. | _none_ | | `oauth2.connect_timeout` | Connect timeout for `OAuth 2.0` token requests. | `0s` | | `oauth2.enable` | Enable `OAuth 2.0` client credentials for outgoing requests. | `false` | | `oauth2.jwt_aud` | Audience for `private_key_jwt` JSON Web Token (JWT) assertion. Defaults to the value of `oauth2.token_url` when not set. | _none_ |