Grafana metrics are publicly exposed
The prometheus metrics for the Grafana instance on OAS instance has its /metrics
endpoint publicly available. While this shouldn't expose sensitive information this is usually not desirable.
Edited by Geoffrey Preud'Homme