Skip to content

[tempo-distributed] Set default max_result_limit for search to 262144#111

Merged
QuentinBisson merged 4 commits intografana-community:mainfrom
zhxiaogg:xiaoguang/fix-VUL-2026-0021
Apr 12, 2026
Merged

[tempo-distributed] Set default max_result_limit for search to 262144#111
QuentinBisson merged 4 commits intografana-community:mainfrom
zhxiaogg:xiaoguang/fix-VUL-2026-0021

Conversation

@zhxiaogg
Copy link
Copy Markdown

@zhxiaogg zhxiaogg commented Feb 20, 2026

What this PR does / why we need it

Set the default value of query_frontend.search.max_result_limit to 262144 (256*1024) to cap the maximum number of results returned by search requests. Previously the default was 0 (unlimited), which could allow unbounded result sets.

There is a corresponding upstream fix: grafana/tempo#6525

Which issue this PR fixes

(optional, in fixes #<issue number>(, fixes #<issue_number>, ...) format, will close that issue when PR gets merged)

  • fixes VUL-2026-0021

Special notes for your reviewer

Checklist

  • DCO signed
  • Chart Version bumped
  • Title of the PR starts with chart name (e.g. [grafana])

Comment thread charts/tempo-distributed/values.yaml Outdated
Set the default value of `query_frontend.search.max_result_limit` to
262144 (256*1024) to cap the maximum number of results returned by
search requests. Previously the default was 0 (unlimited), which could
allow unbounded result sets.

Signed-off-by: Shawn <shawn.zhang@grafana.com>
@zhxiaogg zhxiaogg force-pushed the xiaoguang/fix-VUL-2026-0021 branch from e129e0b to 068cfc5 Compare February 23, 2026 20:41
Comment thread charts/tempo-distributed/values.yaml Outdated
Comment thread charts/tempo-distributed/values.yaml Outdated
@QuentinBisson
Copy link
Copy Markdown

@zhxiaogg are you fine with this?

QuentinBisson and others added 3 commits April 12, 2026 15:51
Co-authored-by: Sheikh-Abubaker <sheikhabubaker761@gmail.com>
Signed-off-by: Quentin Bisson <quentin.bisson@gmail.com>
Co-authored-by: Sheikh-Abubaker <sheikhabubaker761@gmail.com>
Signed-off-by: Quentin Bisson <quentin.bisson@gmail.com>
Signed-off-by: Quentin Bisson <quentin.bisson@gmail.com>
@QuentinBisson QuentinBisson merged commit d4393a2 into grafana-community:main Apr 12, 2026
8 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants