Under the hood
Useful1 Signal3
Internal metrics export won't send a credential to a host it wasn't minted for.
What's wrong with this entry?
Anonymous. No account, no email.
What
The internal BigQuery metrics exporter now checks that its credential actually belongs to the host it is about to contact. If not it skips the export, skips the organisation opt-out check, and sends with no authentication headers rather than failing.
Details
- A mismatch is classified as
misrouted_credentialwith the message "credential withheld: this telemetry endpoint is not the host it belongs to". - There is a bypass field,
isAntEndpointOverride, but the constructor sets it to false unconditionally, so it cannot be taken in this build. - The opt-out request switched from fetching a credential asynchronously to sending none, relying on headers supplied by the router, and reports "Auth error: no credential usable for the metrics opt-out check" when none is usable.
Evidence
BigQuery metrics export: credential does not belong to the metrics endpoint host, skipping
Strings lifted out of the shipped bundle, so the claim above can be checked against them.