VictoriaLogs Authentication#

Overview#

The VictoriaLogs provider (victorialogs_provider.py) supports three authentication types — NoAuth, Basic, and Bearer — configured via the VictorialogsProviderAuthConfig dataclass.

Auth Config Fields#

All auth config is declared in VictorialogsProviderAuthConfig:

generate_auth_headers() Behavior#

generate_auth_headers() produces the HTTP headers passed to every request:

• Basic: Base64-encodes username:password and returns {"Authorization": "Basic <encoded>"} 1
• Bearer: Returns a dict with Authorization: Bearer <token> and/or X-Scope-OrgID: <value> depending on which fields are set 2
• NoAuth: No explicit return statement — the function falls through and implicitly returns None ⚠️ 3

Known Bug: NoAuth Returns None#

Status: Open bug with a fix in review — PR #6668.

When authentication_type is "NoAuth" (the default), generate_auth_headers() returns None instead of {}. Every query path in _query() then calls headers.update(...) on the result 4, raising:

AttributeError: 'NoneType' object has no attribute 'update'

This affects all four query types (query, hits, stats_query, stats_query_range) 5. The failure only appears at query time — the provider installs and validate_scopes() may pass because the scope check uses generate_auth_headers() without .update() 6.

Impact: A VictoriaLogs instance requiring no credentials cannot be queried at all with the default configuration.

Workaround: Select Basic auth and supply arbitrary credentials. Unauthenticated VictoriaLogs instances ignore the Authorization header 5.

Fix (PR #6668): Return {} from the NoAuth branch so downstream .update() calls succeed 5.

Usage in Queries#

_query() supports four queryType values, each posting to a different endpoint 7:

For query and hits, the code merges auth headers with AccountID and ProjectID headers before sending 4 8. This merge is the direct call site of the None bug.

Key Files#