3pp-mirror/pomerium
1
0
Fork 0
mirror of https://github.com/pomerium/pomerium.git synced 2025-06-12 15:52:53 +02:00
Code Issues Projects Releases Packages Wiki Activity

core: more metrics (#5629)

Browse source 
## Summary
Add some more metrics:

- Authenticate token verification
- Authorization log duration
- Authorization evaluator and header evaluator
- IDP token session creator

HTTP and gRPC endpoints are already instrumented via middleware, which
covers authenticate, proxy and databroker endpoints. Postgres is also
already instrumented using `otelpgx`.

## Related issues
-
[ENG-2407](https://linear.app/pomerium/issue/ENG-2407/add-additional-metrics-and-tracing-spans-to-pomerium)


## Checklist

- [x] reference any related issues
- [ ] updated unit tests
- [ ] add appropriate label (`enhancement`, `bug`, `breaking`,
`dependencies`, `ci`)
- [x] ready for review
This commit is contained in:
Caleb Doxsey 2025-05-29 09:34:41 -06:00 • committed by GitHub
parent 957e0982c1
commit 13554ec78d
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
8 changed files with 164 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

36
authenticate/authenticate.go
View file

@ -7,11 +7,13 @@ import (
"errors"
"fmt"
"go.opentelemetry.io/otel/metric"
oteltrace "go.opentelemetry.io/otel/trace"
"github.com/pomerium/pomerium/config"
"github.com/pomerium/pomerium/internal/atomicutil"
"github.com/pomerium/pomerium/internal/log"
"github.com/pomerium/pomerium/internal/telemetry/metrics"
"github.com/pomerium/pomerium/pkg/cryptutil"
"github.com/pomerium/pomerium/pkg/telemetry/trace"
)
@ -41,6 +43,15 @@ func ValidateOptions(o *config.Options) error {
// Authenticate contains data required to run the authenticate service.
type Authenticate struct {
accessTokenVerificationCount metric.Int64Counter
accessTokenValidVerificationCount metric.Int64Counter
accessTokenInvalidVerificationCount metric.Int64Counter
accessTokenVerificationDuration metric.Int64Histogram
identityTokenVerificationCount metric.Int64Counter
identityTokenValidVerificationCount metric.Int64Counter
identityTokenInvalidVerificationCount metric.Int64Counter
identityTokenVerificationDuration metric.Int64Histogram
cfg *authenticateConfig
options *atomicutil.Value[*config.Options]
state *atomicutil.Value[*authenticateState]
@ -56,6 +67,31 @@ func New(ctx context.Context, cfg *config.Config, options ...Option) (*Authentic
tracer := tracerProvider.Tracer(trace.PomeriumCoreTracer)
a := &Authenticate{
accessTokenVerificationCount: metrics.Int64Counter("authenticate.idp_access_token.verifications",
metric.WithDescription("Number of IDP access token verifications."),
metric.WithUnit("{verification}")),
accessTokenValidVerificationCount: metrics.Int64Counter("authenticate.idp_access_token.valid_verifications",
metric.WithDescription("Number of valid IDP access token verifications."),
metric.WithUnit("{verification}")),
accessTokenInvalidVerificationCount: metrics.Int64Counter("authenticate.idp_access_token.invalid_verifications",
metric.WithDescription("Number of invalid IDP access token verifications."),
metric.WithUnit("{verification}")),
accessTokenVerificationDuration: metrics.Int64Histogram("authenticate.idp_access_token.verification.duration",
metric.WithDescription("Duration of access token verification."),
metric.WithUnit("ms")),
identityTokenVerificationCount: metrics.Int64Counter("authenticate.idp_identity_token.verifications",
metric.WithDescription("Number of IDP identity token verifications."),
metric.WithUnit("{verification}")),
identityTokenValidVerificationCount: metrics.Int64Counter("authenticate.idp_identity_token.valid_verifications",
metric.WithDescription("Number of valid IDP identity token verifications."),
metric.WithUnit("{verification}")),
identityTokenInvalidVerificationCount: metrics.Int64Counter("authenticate.idp_identity_token.invalid_verifications",
metric.WithDescription("Number of invalid IDP identity token verifications."),
metric.WithUnit("{verification}")),
identityTokenVerificationDuration: metrics.Int64Histogram("authenticate.idp_identity_token.verification.duration",
metric.WithDescription("Duration of identity token verification."),
metric.WithUnit("ms")),
cfg: authenticateConfig,
options: config.NewAtomicOptions(),
state: atomicutil.NewValue(newAuthenticateState()),