[receiver/jmx] mark receiver as deprecated

CHANGELOG.md

@@ -18,6 +18,7 @@
 - `datadogexporter`: Deprecate `service` setting in favor of `service.name` semantic convention (#8784)
 - `datadogexporter`: Deprecate `version` setting in favor of `service.version` semantic convention (#8784)
 - `datadogexporter`: Deprecate `GetHostTags` method from `TagsConfig` struct (#8975)
+- `jmxreceiver`: Deprecate JMX receiver (#9063)
 
 ### 🚀 New components 🚀
 

receiver/jmxreceiver/README.md

@@ -1,4 +1,7 @@
-# JMX Receiver
+# Deprecated JMX Receiver
+
+This receiver has been deprecated due to security concerns around the ability to specify the execution of
+any arbitrary processes via its configuration. See [#6750](https://github.com/open-telemetry/opentelemetry-collector-contrib/issues/6750) for additional details.
 
 ### Overview
 

receiver/jmxreceiver/factory.go

@@ -16,19 +16,23 @@ package jmxreceiver // import "github.com/open-telemetry/opentelemetry-collector
 
 import (
 	"context"
+	"sync"
 	"time"
 
 	"go.opentelemetry.io/collector/component"
 	"go.opentelemetry.io/collector/config"
 	"go.opentelemetry.io/collector/consumer"
 	"go.opentelemetry.io/collector/exporter/exporterhelper"
+	"go.uber.org/zap"
 )
 
 const (
 	typeStr      = "jmx"
 	otlpEndpoint = "0.0.0.0:0"
 )
 
+var once sync.Once
+
 func NewFactory() component.ReceiverFactory {
 	return component.NewReceiverFactory(
 		typeStr,
@@ -51,12 +55,19 @@ func createDefaultConfig() config.Receiver {
 	}
 }
 
+func logDeprecation(logger *zap.Logger) {
+	once.Do(func() {
+		logger.Warn("jmx receiver is deprecated and will be removed in future versions.")
+	})
+}
+
 func createReceiver(
 	_ context.Context,
 	params component.ReceiverCreateSettings,
 	cfg config.Receiver,
 	consumer consumer.Metrics,
 ) (component.MetricsReceiver, error) {
+	logDeprecation(params.Logger)
 	jmxConfig := cfg.(*Config)
 	if err := jmxConfig.validate(); err != nil {
 		return nil, err