[kvnloo]

Current disposition — 2026-10-16

SUPERSEDED / OWNER_COVERED

The OTLP gzip/HTTPS requirement is now served by Eric Curtin's merged origin #4399, merge 82977e27a438c8a6a1072498432f9f7c75a33a85 (2026-10-13). Current origin main a4c848adbddd0b4732fd70ddcf8a563a5b1e9317 enables the same gzip-tonic, tls-aws-lc, tls-roots features. Preserve this fork head d15eb8b7d8745649e16d3fb66c96e74f2bdec5b9 and Kevin/dot staging history; credit Eric Curtin for the independently landed implementation and rksharma-owg for the independent startup reproduction. Closing this downstream promotion carrier unmerged; no new native exporter/delivery run or test-equivalence claim.

Canonical queue: https://github.com/kvnloo/oss-factory/issues/67

---

Summary

Enable the OTLP/gRPC transport capabilities already documented or expected by operators: gzip compression and HTTPS collector endpoints.

Promotion status: HOLD — OpenShell requires a maintainer vouch before first-time contributors may open upstream PRs. Keep this fork PR as downstream staging only.

Related Issue

• Upstream: bug: OTLP trace export fails to start with gzip compression or an https:// collector endpoint NVIDIA/OpenShell#3899
• Fork staging ticket: [SUPERSEDED] upstream #3899 — enable OTLP gzip + HTTPS export #9

Changes

• enable gzip-tonic for OTEL_EXPORTER_OTLP_COMPRESSION=gzip;
• enable tls-aws-lc to match the workspace TLS backend;
• enable tls-roots so HTTPS collectors use platform trust roots;
• add setup regressions for gzip and HTTPS;
• document HTTPS trust behavior and supported compression.

Testing

Regression tests build the real shared openshell-otel exporter through provider_for:

• generic gzip compression env var must build successfully;
• https://localhost:4317 must build successfully with native roots.

Full fork CI is the promotion gate.

Checklist

• Exact current upstream main base
• Small issue-scoped change
• DCO sign-off on every commit
• Tests added
• User-facing docs updated
• No unrelated files

[kvnloo]

Upstream promotion attempt on 2026-10-01 returned GitHub 403 (Resource not accessible by integration) for NVIDIA#3899.

Status remains READY TO POST. The fork branch/PR is the canonical promotion artifact until org-side write access is available.

[kvnloo]

Upstream PR is open: NVIDIA#4019

The earlier 403 (Resource not accessible by integration) was the integration token, not a block on the kvnloo OAuth account. This fork PR is no longer the promotion queue.

[kvnloo]

Correction: NVIDIA#4019 was created, then closed by the OpenShell first-contributor vouch bot. It is not an open upstream PR. A maintainer /vouch is required before it can stay open. Reopening without that will be closed again.

[kvnloo]

GEM1 verified-artifact reconciliation — U36

Recovery experiment: https://github.com/kvnloo/oss-factory/issues/221

Title/body duplicate search plus direct carrier inspection selected this existing home; no duplicate issue is being opened.

U36

• Evidence: Existing carrier fix(otel): enable gzip and HTTPS OTLP export [HOLD: VOUCH REQUIRED] #10 is CLOSED at d15eb8b.
• Reconstruction: Use this exact carrier/head and its current state/hold; compare later recovered bytes before reviving or duplicating work.
• Acceptance (NOT RUN): Satisfy this carrier's documented project/platform acceptance and attribution/review gates on its actual current base before any further publication.
• Boundary: Current state overrides historical READY wording. Closed/held items were not reopened; no upstream action, merge or new acceptance run.

This is artifact/ownership reconciliation only. No tests, builds, native UI/device runs, upstream publication or merge were performed by this promotion pass.