Skip to content

[Serving] Remove config-info endpoint from metrics server - #8123

Merged
Jiang-Jia-Jun merged 1 commit into
release/2.3from
rm-config-info-release-2.3
Sep 24, 2026
Merged

Jiang-Jia-Jun merged 1 commit into
release/2.3from
rm-config-info-release-2.3

Conversation

@Jiang-Jia-Jun

Copy link
Copy Markdown
Collaborator

The /config-info endpoint on the metrics server dumps the full engine config (cfg.dict) and all environment variables as JSON, leaking sensitive configuration and secrets. Remove the endpoint and its tests. The cache_config_info Prometheus metric is unchanged.

The /config-info endpoint on the metrics server dumps the full engine config (cfg.__dict__) and all environment variables as JSON, leaking sensitive configuration and secrets. Remove the endpoint and its tests. The cache_config_info Prometheus metric is unchanged.
Copilot AI lite review requested due to automatic review settings September 24, 2026 12:21

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot review overview

🟢 Approval recommended

No unresolved blocking issues were identified.

Review effort: Lite
Findings: None

What changed in this PR

Removes the /config-info metrics endpoint to prevent exposure of engine configuration and environment variables while preserving the cache_config_info metric.

Changes:

  • Removes the sensitive endpoint and unused imports.
  • Removes its end-to-end test.
  • Preserves Prometheus metric behavior.
File Description
tests/​e2e/​test_ernie_03b_pd.py Removes the obsolete endpoint test.
fastdeploy/​entrypoints/​openai/​api_server.py Removes the sensitive configuration endpoint.

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

@CLAassistant

Copy link
Copy Markdown

CLA assistant check
Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
You have signed the CLA already but the status is still pending? Let us recheck it.

@Jiang-Jia-Jun
Jiang-Jia-Jun merged commit b21a20c into release/2.3 Sep 24, 2026
9 of 12 checks passed
@Jiang-Jia-Jun
Jiang-Jia-Jun deleted the rm-config-info-release-2.3 branch September 24, 2026 12:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants