Skip to content

fix(grafana): point Kupo proxy panels at green multi-network proxy - #75

Merged
tripura-repalle merged 2 commits into
mainfrom
fix/kupo-dolos-green-proxy-metrics
Sep 8, 2026
Merged

fix(grafana): point Kupo proxy panels at green multi-network proxy#75
tripura-repalle merged 2 commits into
mainfrom
fix/kupo-dolos-green-proxy-metrics

Conversation

@tripura-repalle

Copy link
Copy Markdown
Collaborator

The Request Latency, Request Rate and HTTP Error Rate panels in the Kupo/Dolos dashboard filtered by pod=~".$network.", which only ever matched the idle per-network proxies (dolos-kupo-proxy-demeter-) and never the green multi-network proxy (dolos-kupo-proxy) that actually serves all Demeter Kupo traffic, leaving the panels flat.

The green proxy exposes network via different labels per metric:

  • kupo_proxy_http_request_duration_seconds_bucket -> network label (cardano-mainnet/preprod/preview)
  • kupo_proxy_http_total_request -> exported_instance label (dolos-cardano-.dolos.svc.cluster.local:11442)

Filter the latency panels by network and the rate/error panels by exported_instance so they reflect real green-proxy traffic.

The Request Latency, Request Rate and HTTP Error Rate panels in the
Kupo/Dolos dashboard filtered by pod=~".*$network.*", which only ever
matched the idle per-network proxies (dolos-kupo-proxy-demeter-<net>) and
never the green multi-network proxy (dolos-kupo-proxy) that actually
serves all Demeter Kupo traffic, leaving the panels flat.

The green proxy exposes network via different labels per metric:
- kupo_proxy_http_request_duration_seconds_bucket -> network label
  (cardano-mainnet/preprod/preview)
- kupo_proxy_http_total_request -> exported_instance label
  (dolos-cardano-<net>.dolos.svc.cluster.local:11442)

Filter the latency panels by network and the rate/error panels by
exported_instance so they reflect real green-proxy traffic.

Signed-off-by: Tripura Repalle <tripura@blinklabs.io>
Add a Grafana alert to the Kupo Dolos group that fires when the Kupo (Dolos)
proxy returns a sustained rate of unauthenticated 401s (consumer=".") above
0.1 req/s for 15m. Kupo/Dolos themselves are healthy in this case; the pattern
indicates newly issued or rotated Demeter credentials are not reaching the
proxy because the demeter-fabric daemon has silently lost its Kafka/Redpanda
consumer connection (readiness stays green while it stops syncing creds).

There is no direct fabric Kafka metric exported, so this alerts on the
customer-facing symptom, with the fabric root cause and remediation in the
annotation.

Signed-off-by: Tripura Repalle <tripura@blinklabs.io>
@tripura-repalle
tripura-repalle merged commit ca1c6ec into main Sep 8, 2026
1 check passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants