Files
git.stella-ops.org/ops/devops/tenant/recording-rules.yaml
StellaOps Bot 35c8f9216f Add tests and implement timeline ingestion options with NATS and Redis subscribers
- Introduced `BinaryReachabilityLifterTests` to validate binary lifting functionality.
- Created `PackRunWorkerOptions` for configuring worker paths and execution persistence.
- Added `TimelineIngestionOptions` for configuring NATS and Redis ingestion transports.
- Implemented `NatsTimelineEventSubscriber` for subscribing to NATS events.
- Developed `RedisTimelineEventSubscriber` for reading from Redis Streams.
- Added `TimelineEnvelopeParser` to normalize incoming event envelopes.
- Created unit tests for `TimelineEnvelopeParser` to ensure correct field mapping.
- Implemented `TimelineAuthorizationAuditSink` for logging authorization outcomes.
2025-12-03 09:46:48 +02:00

19 lines
897 B
YAML

# Recording rules supporting tenant audit dashboards/alerts (DEVOPS-TEN-49-001)
apiVersion: 1
groups:
- name: tenant-sli
interval: 30s
rules:
- record: tenant_requests_rate:5m
expr: sum by (tenant, service) (rate(tenant_requests_total[5m]))
- record: tenant_error_rate:5m
expr: sum by (tenant, service) (rate(tenant_requests_total{status=~"5.."}[5m])) /
clamp_min(sum by (tenant, service) (rate(tenant_requests_total[5m])), 1)
- record: tenant_latency_p95:5m
expr: histogram_quantile(0.95, sum by (le, tenant, service) (rate(tenant_requests_duration_seconds_bucket[5m])))
- record: jwks_cache_hit_ratio:5m
expr: rate(auth_jwks_cache_hits_total[5m]) /
clamp_min(rate(auth_jwks_cache_hits_total[5m]) + rate(auth_jwks_cache_misses_total[5m]), 1)
- record: tenant_rate_limit_hits:5m
expr: sum by (tenant, service) (rate(tenant_rate_limit_hits_total[5m]))