telemetry: add tracing

- telemetry/tace: add traces throughout code
- telemetry/metrics: nest metrics and trace under telemetry
- telemetry/tace: add service name span to HTTPMetricsHandler.
- telemetry/metrics: removed chain dependency middleware_tests.
- telemetry/metrics: wrap and encapsulate variatic view registration.
- telemetry/tace: add jaeger support for tracing.
- cmd/pomerium: move `parseOptions` to internal/config.
- cmd/pomerium: offload server handling to httputil and sub pkgs.
- httputil: standardize creation/shutdown of http listeners.
- httputil: prefer curve X25519 to P256 when negotiating TLS.
- fileutil: use standardized Getw

Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>

authorize/authorize.go

@@ -6,7 +6,7 @@ import (
 
 	"github.com/pomerium/pomerium/internal/config"
 	"github.com/pomerium/pomerium/internal/log"
-	"github.com/pomerium/pomerium/internal/metrics"
+	"github.com/pomerium/pomerium/internal/telemetry/metrics"
 )
 
 // ValidateOptions checks to see if configuration values are valid for the

authorize/gprc.go

@@ -4,12 +4,16 @@ package authorize // import "github.com/pomerium/pomerium/authorize"
 import (
 	"context"
 
+	"github.com/pomerium/pomerium/internal/telemetry/trace"
 	pb "github.com/pomerium/pomerium/proto/authorize"
 )
 
 // Authorize validates the user identity, device, and context of a request for
 // a given route. Currently only checks identity.
 func (a *Authorize) Authorize(ctx context.Context, in *pb.Identity) (*pb.AuthorizeReply, error) {
+	_, span := trace.StartSpan(ctx, "authorize.grpc.Authorize")
+	defer span.End()
+
 	ok := a.ValidIdentity(in.Route,
 		&Identity{
 			User:              in.User,
@@ -23,6 +27,8 @@ func (a *Authorize) Authorize(ctx context.Context, in *pb.Identity) (*pb.Authori
 
 // IsAdmin validates the user is an administrative user.
 func (a *Authorize) IsAdmin(ctx context.Context, in *pb.Identity) (*pb.IsAdminReply, error) {
+	_, span := trace.StartSpan(ctx, "authorize.grpc.IsAdmin")
+	defer span.End()
 	ok := a.identityAccess.IsAdmin(
 		&Identity{
 			Email:  in.Email,