summaryrefslogtreecommitdiff
path: root/gemfeed/DRAFT-f3s-kubernetes-with-freebsd-part-8b.html
blob: 450ae8d4845ca77365ada3fc8d57d00c84f44208 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1000
1001
1002
1003
1004
1005
1006
1007
1008
1009
1010
1011
1012
1013
1014
1015
1016
1017
1018
1019
1020
1021
1022
1023
1024
1025
1026
1027
1028
1029
1030
1031
1032
1033
1034
1035
1036
1037
1038
1039
1040
1041
1042
1043
1044
1045
1046
1047
1048
1049
1050
1051
1052
1053
1054
1055
1056
1057
1058
1059
1060
1061
1062
1063
1064
1065
1066
1067
1068
1069
1070
1071
1072
1073
1074
1075
1076
1077
1078
1079
1080
1081
1082
1083
1084
1085
1086
1087
1088
1089
1090
1091
1092
1093
1094
1095
1096
1097
1098
1099
1100
1101
1102
1103
1104
1105
1106
1107
1108
1109
1110
1111
1112
1113
1114
1115
1116
1117
1118
1119
1120
1121
1122
1123
1124
1125
1126
1127
1128
1129
1130
1131
1132
1133
1134
1135
1136
1137
1138
1139
1140
1141
1142
1143
1144
1145
1146
1147
1148
1149
1150
1151
1152
1153
1154
1155
1156
1157
1158
1159
1160
1161
1162
1163
1164
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
<title>f3s: Kubernetes with FreeBSD - Part 9: Enabling etcd Metrics</title>
<link rel="shortcut icon" type="image/gif" href="/favicon.ico" />
<link rel="stylesheet" href="../style.css" />
<link rel="stylesheet" href="style-override.css" />
</head>
<body>
<div class="rfx-overlay-grid"></div>
<div class="rfx-overlay-scanlines"></div>
<div id="rfx-stars"></div>
<div class="rfx-vignette"></div>
<p class="header">
<a href="https://foo.zone">Home</a> | <a href="https://codeberg.org/snonux/foo.zone/src/branch/content-md/gemfeed/DRAFT-f3s-kubernetes-with-freebsd-part-8b.md">Markdown</a> | <a href="gemini://foo.zone/gemfeed/DRAFT-f3s-kubernetes-with-freebsd-part-8b.gmi">Gemini</a>
</p>
<h1 style='display: inline' id='f3s-kubernetes-with-freebsd---part-9-enabling-etcd-metrics'>f3s: Kubernetes with FreeBSD - Part 9: Enabling etcd Metrics</h1><br />
<br />
<h2 style='display: inline' id='introduction'>Introduction</h2><br />
<br />
<span>This post covers enabling etcd metrics monitoring for the k3s cluster. The etcd dashboard in Grafana initially showed no data because k3s uses an embedded etcd that doesn&#39;t expose metrics by default.</span><br />
<br />
<a class='textlink' href='./2025-12-07-f3s-kubernetes-with-freebsd-part-8.html'>Part 8: Observability</a><br />
<br />
<h2 style='display: inline' id='important-note-gitops-migration'>Important Note: GitOps Migration</h2><br />
<br />
<span>**Note:** After the initial observability setup, the f3s cluster was migrated from imperative Helm deployments to declarative GitOps using ArgoCD. The Prometheus configuration and deployment process described in this post have been updated for ArgoCD.</span><br />
<br />
<span>**To view the configuration as it existed before the ArgoCD migration**, check out the pre-ArgoCD revision:</span><br />
<br />
<!-- Generator: GNU source-highlight 3.1.9
by Lorenzo Bettini
http://www.lorenzobettini.it
http://www.gnu.org/software/src-highlite -->
<pre><font color="#ff0000">$ git clone https</font><font color="#F3E651">:</font><font color="#ff0000">//codeberg</font><font color="#F3E651">.</font><font color="#ff0000">org/snonux/conf</font><font color="#F3E651">.</font><font color="#ff0000">git</font>
<font color="#ff0000">$ cd conf</font>
<font color="#ff0000">$ git checkout 15a86f3  </font><i><font color="#ababab"># Last commit before ArgoCD migration</font></i>
<font color="#ff0000">$ cd f3s/prometheus</font><font color="#F3E651">/</font>
</pre>
<br />
<span>**Current master branch** uses ArgoCD with:</span><br />
<ul>
<li>Application manifest: <span class='inlinecode'>argocd-apps/monitoring/prometheus.yaml</span></li>
<li>Multi-source Application combining upstream chart + custom manifests</li>
<li>Justfile commands updated to trigger ArgoCD syncs instead of direct Helm commands</li>
</ul><br />
<span>The etcd configuration concepts remain the same—only the deployment method changed. Instead of running <span class='inlinecode'>just upgrade</span>, you would:</span><br />
<span>1. Update the configuration in Git</span><br />
<span>2. Commit and push</span><br />
<span>3. ArgoCD automatically syncs (or run <span class='inlinecode'>just sync</span> for immediate sync)</span><br />
<br />
<h2 style='display: inline' id='enabling-etcd-metrics-in-k3s'>Enabling etcd metrics in k3s</h2><br />
<br />
<span>On each control-plane node (r0, r1, r2), create /etc/rancher/k3s/config.yaml:</span><br />
<br />
<pre>
etcd-expose-metrics: true
</pre>
<br />
<span>Then restart k3s on each node:</span><br />
<br />
<pre>
systemctl restart k3s
</pre>
<br />
<span>After restarting, etcd metrics are available on port 2381:</span><br />
<br />
<pre>
curl http://127.0.0.1:2381/metrics | grep etcd
</pre>
<br />
<h2 style='display: inline' id='configuring-prometheus-to-scrape-etcd'>Configuring Prometheus to scrape etcd</h2><br />
<br />
<span>In persistence-values.yaml, enable kubeEtcd with the node IP addresses:</span><br />
<br />
<pre>
kubeEtcd:
  enabled: true
  endpoints:
    - 192.168.1.120
    - 192.168.1.121
    - 192.168.1.122
  service:
    enabled: true
    port: 2381
    targetPort: 2381
</pre>
<br />
<span>Apply the changes:</span><br />
<br />
<pre>
just upgrade
</pre>
<br />
<h2 style='display: inline' id='verifying-etcd-metrics'>Verifying etcd metrics</h2><br />
<br />
<span>After the changes, all etcd targets are being scraped:</span><br />
<br />
<pre>
kubectl exec -n monitoring prometheus-prometheus-kube-prometheus-prometheus-0 \
  -c prometheus -- wget -qO- &#39;http://localhost:9090/api/v1/query?query=etcd_server_has_leader&#39; | \
  jq -r &#39;.data.result[] | "\(.metric.instance): \(.value[1])"&#39;
</pre>
<br />
<span>Output:</span><br />
<br />
<pre>
192.168.1.120:2381: 1
192.168.1.121:2381: 1
192.168.1.122:2381: 1
</pre>
<br />
<span>The etcd dashboard in Grafana now displays metrics including Raft proposals, leader elections, and peer round trip times.</span><br />
<br />
<h2 style='display: inline' id='complete-persistence-valuesyaml'>Complete persistence-values.yaml</h2><br />
<br />
<span>The complete updated persistence-values.yaml:</span><br />
<br />
<pre>
kubeEtcd:
  enabled: true
  endpoints:
    - 192.168.1.120
    - 192.168.1.121
    - 192.168.1.122
  service:
    enabled: true
    port: 2381
    targetPort: 2381

prometheus:
  prometheusSpec:
    additionalScrapeConfigsSecret:
      enabled: true
      name: additional-scrape-configs
      key: additional-scrape-configs.yaml
    storageSpec:
      volumeClaimTemplate:
        spec:
          storageClassName: ""
          accessModes: ["ReadWriteOnce"]
          resources:
            requests:
              storage: 10Gi
          selector:
            matchLabels:
              type: local
              app: prometheus

grafana:
  persistence:
    enabled: true
    type: pvc
    existingClaim: "grafana-data-pvc"

  initChownData:
    enabled: false

  podSecurityContext:
    fsGroup: 911
    runAsUser: 911
    runAsGroup: 911
</pre>
<br />
<h2 style='display: inline' id='zfs-monitoring-for-freebsd-servers'>ZFS Monitoring for FreeBSD Servers</h2><br />
<br />
<span>The FreeBSD servers (f0, f1, f2) that provide NFS storage to the k3s cluster have ZFS filesystems. Monitoring ZFS performance is crucial for understanding storage performance and cache efficiency.</span><br />
<br />
<h3 style='display: inline' id='node-exporter-zfs-collector'>Node Exporter ZFS Collector</h3><br />
<br />
<span>The node_exporter running on each FreeBSD server (v1.9.1) includes a built-in ZFS collector that exposes metrics via sysctls. The ZFS collector is enabled by default and provides:</span><br />
<br />
<ul>
<li>ARC (Adaptive Replacement Cache) statistics</li>
<li>Cache hit/miss rates</li>
<li>Memory usage and allocation</li>
<li>MRU/MFU cache breakdown</li>
<li>Data vs metadata distribution</li>
</ul><br />
<h3 style='display: inline' id='verifying-zfs-metrics'>Verifying ZFS Metrics</h3><br />
<br />
<span>On any FreeBSD server, check that ZFS metrics are being exposed:</span><br />
<br />
<pre>
paul@f0:~ % curl -s http://localhost:9100/metrics | grep node_zfs_arcstats | wc -l
      69
</pre>
<br />
<span>The metrics are automatically scraped by Prometheus through the existing static configuration in additional-scrape-configs.yaml which targets all FreeBSD servers on port 9100 with the os: freebsd label.</span><br />
<br />
<h3 style='display: inline' id='zfs-recording-rules'>ZFS Recording Rules</h3><br />
<br />
<span>Created recording rules for easier dashboard consumption in zfs-recording-rules.yaml:</span><br />
<br />
<pre>
apiVersion: monitoring.coreos.com/v1
kind: PrometheusRule
metadata:
  name: freebsd-zfs-rules
  namespace: monitoring
  labels:
    release: prometheus
spec:
  groups:
    - name: freebsd-zfs-arc
      interval: 30s
      rules:
        - record: node_zfs_arc_hit_rate_percent
          expr: |
            100 * (
              rate(node_zfs_arcstats_hits_total{os="freebsd"}[5m]) /
              (rate(node_zfs_arcstats_hits_total{os="freebsd"}[5m]) +
               rate(node_zfs_arcstats_misses_total{os="freebsd"}[5m]))
            )
          labels:
            os: freebsd
        - record: node_zfs_arc_memory_usage_percent
          expr: |
            100 * (
              node_zfs_arcstats_size_bytes{os="freebsd"} /
              node_zfs_arcstats_c_max_bytes{os="freebsd"}
            )
          labels:
            os: freebsd
        # Additional rules for metadata %, target %, MRU/MFU %, etc.
</pre>
<br />
<span>These recording rules calculate:</span><br />
<br />
<ul>
<li>ARC hit rate percentage</li>
<li>ARC memory usage percentage (current vs maximum)</li>
<li>ARC target percentage (target vs maximum)</li>
<li>Metadata vs data percentages</li>
<li>MRU vs MFU cache percentages</li>
<li>Demand data and metadata hit rates</li>
</ul><br />
<h3 style='display: inline' id='grafana-dashboards'>Grafana Dashboards</h3><br />
<br />
<span>Created two comprehensive ZFS monitoring dashboards (zfs-dashboards.yaml):</span><br />
<br />
<span>**Dashboard 1: FreeBSD ZFS (per-host detailed view)**</span><br />
<br />
<span>Includes variables to select:</span><br />
<ul>
<li>FreeBSD server (f0, f1, or f2)</li>
<li>ZFS pool (zdata, zroot, or all)</li>
</ul><br />
<span>**Pool Overview Row:**</span><br />
<ul>
<li>Pool Capacity gauge (with thresholds: green &lt;70%, yellow &lt;85%, red &gt;85%)</li>
<li>Pool Health status (ONLINE/DEGRADED/FAULTED with color coding)</li>
<li>Total Pool Size stat</li>
<li>Free Space stat</li>
<li>Pool Space Usage Over Time (stacked: used + free)</li>
<li>Pool Capacity Trend time series</li>
</ul><br />
<span>**Dataset Statistics Row:**</span><br />
<ul>
<li>Table showing all datasets with columns: Pool, Dataset, Used, Available, Referenced</li>
<li>Automatically filters by selected pool</li>
</ul><br />
<span>**ARC Cache Statistics Row:**</span><br />
<ul>
<li>ARC Hit Rate gauge (red &lt;70%, yellow &lt;90%, green &gt;=90%)</li>
<li>ARC Size time series (current, target, max)</li>
<li>ARC Memory Usage percentage gauge</li>
<li>ARC Hits vs Misses rate</li>
<li>ARC Data vs Metadata stacked time series</li>
</ul><br />
<span>**Dashboard 2: FreeBSD ZFS Summary (cluster-wide overview)**</span><br />
<br />
<span>**Cluster-Wide Pool Statistics Row:**</span><br />
<ul>
<li>Total Storage Capacity across all servers</li>
<li>Total Used space</li>
<li>Total Free space</li>
<li>Average Pool Capacity gauge</li>
<li>Pool Health Status (worst case across cluster)</li>
<li>Total Pool Space Usage Over Time</li>
<li>Per-Pool Capacity time series (all pools on all hosts)</li>
</ul><br />
<span>**Per-Host Pool Breakdown Row:**</span><br />
<ul>
<li>Bar gauge showing capacity by host and pool</li>
<li>Table with all pools: Host, Pool, Size, Used, Free, Capacity %, Health</li>
</ul><br />
<span>**Cluster-Wide ARC Statistics Row:**</span><br />
<ul>
<li>Average ARC Hit Rate gauge across all hosts</li>
<li>ARC Hit Rate by Host time series</li>
<li>Total ARC Size Across Cluster</li>
<li>Total ARC Hits vs Misses (cluster-wide sum)</li>
<li>ARC Size by Host</li>
</ul><br />
<span>**Dashboard Visualization:**</span><br />
<br />
<a href='./f3s-kubernetes-with-freebsd-part-8b/grafana-zfs-dashboard.png'><img alt='ZFS monitoring dashboard in Grafana showing pool statistics and ARC cache metrics' title='ZFS monitoring dashboard in Grafana showing pool statistics and ARC cache metrics' src='./f3s-kubernetes-with-freebsd-part-8b/grafana-zfs-dashboard.png' /></a><br />
<br />
<h3 style='display: inline' id='deployment'>Deployment</h3><br />
<br />
<span>Applied the resources to the cluster:</span><br />
<br />
<pre>
cd /home/paul/git/conf/f3s/prometheus
kubectl apply -f zfs-recording-rules.yaml
kubectl apply -f zfs-dashboards.yaml
</pre>
<br />
<span>Updated Justfile to include ZFS recording rules in install and upgrade targets:</span><br />
<br />
<pre>
install:
    kubectl apply -f persistent-volumes.yaml
    kubectl create secret generic additional-scrape-configs --from-file=additional-scrape-configs.yaml -n monitoring --dry-run=client -o yaml | kubectl apply -f -
    helm install prometheus prometheus-community/kube-prometheus-stack --namespace monitoring -f persistence-values.yaml
    kubectl apply -f freebsd-recording-rules.yaml
    kubectl apply -f openbsd-recording-rules.yaml
    kubectl apply -f zfs-recording-rules.yaml
    just -f grafana-ingress/Justfile install
</pre>
<br />
<h3 style='display: inline' id='verifying-zfs-metrics-in-prometheus'>Verifying ZFS Metrics in Prometheus</h3><br />
<br />
<span>Check that ZFS metrics are being collected:</span><br />
<br />
<pre>
kubectl exec -n monitoring prometheus-prometheus-kube-prometheus-prometheus-0 -c prometheus -- \
  wget -qO- &#39;http://localhost:9090/api/v1/query?query=node_zfs_arcstats_size_bytes&#39;
</pre>
<br />
<span>Check recording rules are calculating correctly:</span><br />
<br />
<pre>
kubectl exec -n monitoring prometheus-prometheus-kube-prometheus-prometheus-0 -c prometheus -- \
  wget -qO- &#39;http://localhost:9090/api/v1/query?query=node_zfs_arc_memory_usage_percent&#39;
</pre>
<br />
<span>Example output shows memory usage percentage for each FreeBSD server:</span><br />
<br />
<pre>
"result":[
  {"metric":{"instance":"192.168.2.130:9100","os":"freebsd"},"value":[...,"37.58"]},
  {"metric":{"instance":"192.168.2.131:9100","os":"freebsd"},"value":[...,"12.85"]},
  {"metric":{"instance":"192.168.2.132:9100","os":"freebsd"},"value":[...,"13.44"]}
]
</pre>
<br />
<h3 style='display: inline' id='accessing-the-dashboards'>Accessing the Dashboards</h3><br />
<br />
<span>The dashboards are automatically imported by the Grafana sidecar and accessible at:</span><br />
<br />
<a class='textlink' href='https://grafana.f3s.buetow.org'>https://grafana.f3s.buetow.org</a><br />
<br />
<span>Navigate to Dashboards and search for:</span><br />
<ul>
<li>"FreeBSD ZFS" - detailed per-host view with pool and dataset breakdowns</li>
<li>"FreeBSD ZFS Summary" - cluster-wide overview of all ZFS storage</li>
</ul><br />
<h3 style='display: inline' id='key-metrics-to-monitor'>Key Metrics to Monitor</h3><br />
<br />
<span>**ARC Hit Rate:** Should typically be above 90% for optimal performance. Lower hit rates indicate the ARC cache is too small or workload has poor locality.</span><br />
<br />
<span>**ARC Memory Usage:** Shows how much of the maximum ARC size is being used. If consistently at or near maximum, the ARC is effectively utilizing available memory.</span><br />
<br />
<span>**Data vs Metadata:** Typically data should dominate, but workloads with many small files will show higher metadata percentages.</span><br />
<br />
<span>**MRU vs MFU:** Most Recently Used vs Most Frequently Used cache. The ratio depends on workload characteristics.</span><br />
<br />
<span>**Pool Capacity:** Monitor pool usage to ensure adequate free space. ZFS performance degrades when pools exceed 80% capacity.</span><br />
<br />
<span>**Pool Health:** Should always show ONLINE (green). DEGRADED (yellow) indicates a disk issue requiring attention. FAULTED (red) requires immediate action.</span><br />
<br />
<span>**Dataset Usage:** Track which datasets are consuming the most space to identify growth trends and plan capacity.</span><br />
<br />
<h3 style='display: inline' id='zfs-pool-and-dataset-metrics-via-textfile-collector'>ZFS Pool and Dataset Metrics via Textfile Collector</h3><br />
<br />
<span>To complement the ARC statistics from node_exporter&#39;s built-in ZFS collector, I added pool capacity and dataset metrics using the textfile collector feature.</span><br />
<br />
<span>Created a script at /usr/local/bin/zfs_pool_metrics.sh on each FreeBSD server:</span><br />
<br />
<pre>
#!/bin/sh
# ZFS Pool and Dataset Metrics Collector for Prometheus

OUTPUT_FILE="/var/tmp/node_exporter/zfs_pools.prom.$$"
FINAL_FILE="/var/tmp/node_exporter/zfs_pools.prom"

mkdir -p /var/tmp/node_exporter

{
    # Pool metrics
    echo "# HELP zfs_pool_size_bytes Total size of ZFS pool"
    echo "# TYPE zfs_pool_size_bytes gauge"
    echo "# HELP zfs_pool_allocated_bytes Allocated space in ZFS pool"
    echo "# TYPE zfs_pool_allocated_bytes gauge"
    echo "# HELP zfs_pool_free_bytes Free space in ZFS pool"
    echo "# TYPE zfs_pool_free_bytes gauge"
    echo "# HELP zfs_pool_capacity_percent Capacity percentage"
    echo "# TYPE zfs_pool_capacity_percent gauge"
    echo "# HELP zfs_pool_health Pool health (0=ONLINE, 1=DEGRADED, 2=FAULTED)"
    echo "# TYPE zfs_pool_health gauge"

    zpool list -Hp -o name,size,allocated,free,capacity,health | \
    while IFS=$&#39;\t&#39; read name size alloc free cap health; do
        case "$health" in
            ONLINE)   health_val=0 ;;
            DEGRADED) health_val=1 ;;
            FAULTED)  health_val=2 ;;
            *)        health_val=6 ;;
        esac
        cap_num=$(echo "$cap" | sed &#39;s/%//&#39;)

        echo "zfs_pool_size_bytes{pool=\"$name\"} $size"
        echo "zfs_pool_allocated_bytes{pool=\"$name\"} $alloc"
        echo "zfs_pool_free_bytes{pool=\"$name\"} $free"
        echo "zfs_pool_capacity_percent{pool=\"$name\"} $cap_num"
        echo "zfs_pool_health{pool=\"$name\"} $health_val"
    done

    # Dataset metrics
    echo "# HELP zfs_dataset_used_bytes Used space in dataset"
    echo "# TYPE zfs_dataset_used_bytes gauge"
    echo "# HELP zfs_dataset_available_bytes Available space"
    echo "# TYPE zfs_dataset_available_bytes gauge"
    echo "# HELP zfs_dataset_referenced_bytes Referenced space"
    echo "# TYPE zfs_dataset_referenced_bytes gauge"

    zfs list -Hp -t filesystem -o name,used,available,referenced | \
    while IFS=$&#39;\t&#39; read name used avail ref; do
        pool=$(echo "$name" | cut -d/ -f1)
        echo "zfs_dataset_used_bytes{pool=\"$pool\",dataset=\"$name\"} $used"
        echo "zfs_dataset_available_bytes{pool=\"$pool\",dataset=\"$name\"} $avail"
        echo "zfs_dataset_referenced_bytes{pool=\"$pool\",dataset=\"$name\"} $ref"
    done
} &gt; "$OUTPUT_FILE"

mv "$OUTPUT_FILE" "$FINAL_FILE"
</pre>
<br />
<span>Deployed to all FreeBSD servers:</span><br />
<br />
<pre>
for host in f0 f1 f2; do
    scp /tmp/zfs_pool_metrics.sh paul@$host:/tmp/
    ssh paul@$host &#39;doas mv /tmp/zfs_pool_metrics.sh /usr/local/bin/ &amp;&amp; \
                    doas chmod +x /usr/local/bin/zfs_pool_metrics.sh&#39;
done
</pre>
<br />
<span>Set up cron jobs to run every minute:</span><br />
<br />
<pre>
for host in f0 f1 f2; do
    ssh paul@$host &#39;echo "* * * * * /usr/local/bin/zfs_pool_metrics.sh &gt;/dev/null 2&gt;&amp;1" | \
                    doas crontab -&#39;
done
</pre>
<br />
<span>The textfile collector (already configured with --collector.textfile.directory=/var/tmp/node_exporter) automatically picks up the metrics.</span><br />
<br />
<span>Verify metrics are being exposed:</span><br />
<br />
<pre>
paul@f0:~ % curl -s http://localhost:9100/metrics | grep "^zfs_pool" | head -5
zfs_pool_allocated_bytes{pool="zdata"} 6.47622733824e+11
zfs_pool_allocated_bytes{pool="zroot"} 5.3338578944e+10
zfs_pool_capacity_percent{pool="zdata"} 64
zfs_pool_capacity_percent{pool="zroot"} 10
zfs_pool_free_bytes{pool="zdata"} 3.48809678848e+11
</pre>
<br />
<h2 style='display: inline' id='summary'>Summary</h2><br />
<br />
<span>Enhanced the f3s cluster observability by:</span><br />
<br />
<ul>
<li>Enabling etcd metrics monitoring for the k3s embedded etcd</li>
<li>Implementing comprehensive ZFS monitoring for FreeBSD storage servers</li>
<li>Creating recording rules for calculated metrics (ARC hit rates, memory usage, etc.)</li>
<li>Deploying Grafana dashboards for visualization</li>
<li>Configuring automatic dashboard import via ConfigMap labels</li>
</ul><br />
<span>The monitoring stack now provides visibility into both cluster control plane health (etcd) and storage performance (ZFS).</span><br />
<br />
<a class='textlink' href='https://codeberg.org/snonux/conf/src/branch/master/f3s/prometheus'>prometheus configuration on Codeberg</a><br />
<br />
<h2 style='display: inline' id='distributed-tracing-with-grafana-tempo'>Distributed Tracing with Grafana Tempo</h2><br />
<br />
<span>After implementing logs (Loki) and metrics (Prometheus), the final pillar of observability is distributed tracing. Grafana Tempo provides distributed tracing capabilities that help understand request flows across microservices.</span><br />
<br />
<h3 style='display: inline' id='why-distributed-tracing'>Why Distributed Tracing?</h3><br />
<br />
<span>In a microservices architecture, a single user request may traverse multiple services. Distributed tracing:</span><br />
<br />
<ul>
<li>Tracks requests across service boundaries</li>
<li>Identifies performance bottlenecks</li>
<li>Visualizes service dependencies</li>
<li>Correlates with logs and metrics</li>
<li>Helps debug complex distributed systems</li>
</ul><br />
<h3 style='display: inline' id='deploying-grafana-tempo'>Deploying Grafana Tempo</h3><br />
<br />
<span>Tempo is deployed in monolithic mode, following the same pattern as Loki&#39;s SingleBinary deployment.</span><br />
<br />
<span>#### Configuration Strategy</span><br />
<br />
<span>**Deployment Mode:** Monolithic (all components in one process)</span><br />
<ul>
<li>Simpler operation than microservices mode</li>
<li>Suitable for the cluster scale</li>
<li>Consistent with Loki deployment pattern</li>
</ul><br />
<span>**Storage:** Filesystem backend using hostPath</span><br />
<ul>
<li>10Gi storage at /data/nfs/k3svolumes/tempo/data</li>
<li>7-day retention (168h)</li>
<li>Local storage is the only option for monolithic mode</li>
</ul><br />
<span>**OTLP Receivers:** Standard OpenTelemetry Protocol ports</span><br />
<ul>
<li>gRPC: 4317</li>
<li>HTTP: 4318</li>
<li>Bind to 0.0.0.0 to avoid Tempo 2.7+ localhost-only binding issue</li>
</ul><br />
<span>#### Tempo Deployment Files</span><br />
<br />
<span>Created in /home/paul/git/conf/f3s/tempo/:</span><br />
<br />
<span>**values.yaml** - Helm chart configuration:</span><br />
<br />
<pre>
tempo:
  retention: 168h
  storage:
    trace:
      backend: local
      local:
        path: /var/tempo/traces
      wal:
        path: /var/tempo/wal
  receivers:
    otlp:
      protocols:
        grpc:
          endpoint: 0.0.0.0:4317
        http:
          endpoint: 0.0.0.0:4318

persistence:
  enabled: true
  size: 10Gi
  storageClassName: ""

resources:
  limits:
    cpu: 1000m
    memory: 2Gi
  requests:
    cpu: 500m
    memory: 1Gi
</pre>
<br />
<span>**persistent-volumes.yaml** - Storage configuration:</span><br />
<br />
<pre>
apiVersion: v1
kind: PersistentVolume
metadata:
  name: tempo-data-pv
spec:
  capacity:
    storage: 10Gi
  accessModes:
    - ReadWriteOnce
  persistentVolumeReclaimPolicy: Retain
  hostPath:
    path: /data/nfs/k3svolumes/tempo/data
---
apiVersion: v1
kind: PersistentVolumeClaim
metadata:
  name: tempo-data-pvc
  namespace: monitoring
spec:
  storageClassName: ""
  accessModes:
    - ReadWriteOnce
  resources:
    requests:
      storage: 10Gi
</pre>
<br />
<span>**Grafana Datasource Provisioning**</span><br />
<br />
<span>All Grafana datasources (Prometheus, Alertmanager, Loki, Tempo) are provisioned via a unified ConfigMap that is directly mounted to the Grafana pod. This approach ensures datasources are loaded on startup without requiring sidecar-based discovery.</span><br />
<br />
<span>In /home/paul/git/conf/f3s/prometheus/grafana-datasources-all.yaml:</span><br />
<br />
<pre>
apiVersion: v1
kind: ConfigMap
metadata:
  name: grafana-datasources-all
  namespace: monitoring
data:
  datasources.yaml: |
    apiVersion: 1
    datasources:
      - name: Prometheus
        type: prometheus
        uid: prometheus
        url: http://prometheus-kube-prometheus-prometheus.monitoring:9090/
        access: proxy
        isDefault: true
      - name: Alertmanager
        type: alertmanager
        uid: alertmanager
        url: http://prometheus-kube-prometheus-alertmanager.monitoring:9093/
      - name: Loki
        type: loki
        uid: loki
        url: http://loki.monitoring.svc.cluster.local:3100
      - name: Tempo
        type: tempo
        uid: tempo
        url: http://tempo.monitoring.svc.cluster.local:3200
        jsonData:
          tracesToLogsV2:
            datasourceUid: loki
            spanStartTimeShift: -1h
            spanEndTimeShift: 1h
          tracesToMetrics:
            datasourceUid: prometheus
          serviceMap:
            datasourceUid: prometheus
          nodeGraph:
            enabled: true
</pre>
<br />
<span>The kube-prometheus-stack Helm values (persistence-values.yaml) are configured to:</span><br />
<ul>
<li>Disable sidecar-based datasource provisioning</li>
<li>Mount grafana-datasources-all ConfigMap directly to /etc/grafana/provisioning/datasources/</li>
</ul><br />
<span>This direct mounting approach is simpler and more reliable than sidecar-based discovery.</span><br />
<br />
<span>#### Installation</span><br />
<br />
<pre>
cd /home/paul/git/conf/f3s/tempo
just install
</pre>
<br />
<span>Verify Tempo is running:</span><br />
<br />
<pre>
kubectl get pods -n monitoring -l app.kubernetes.io/name=tempo
kubectl exec -n monitoring &lt;tempo-pod&gt; -- wget -qO- http://localhost:3200/ready
</pre>
<br />
<h3 style='display: inline' id='configuring-grafana-alloy-for-trace-collection'>Configuring Grafana Alloy for Trace Collection</h3><br />
<br />
<span>Updated /home/paul/git/conf/f3s/loki/alloy-values.yaml to add OTLP receivers for traces while maintaining existing log collection.</span><br />
<br />
<span>#### OTLP Receiver Configuration</span><br />
<br />
<span>Added to Alloy configuration after the log collection pipeline:</span><br />
<br />
<pre>
// OTLP receiver for traces via gRPC and HTTP
otelcol.receiver.otlp "default" {
  grpc {
    endpoint = "0.0.0.0:4317"
  }
  http {
    endpoint = "0.0.0.0:4318"
  }
  output {
    traces = [otelcol.processor.batch.default.input]
  }
}

// Batch processor for efficient trace forwarding
otelcol.processor.batch "default" {
  timeout = "5s"
  send_batch_size = 100
  send_batch_max_size = 200
  output {
    traces = [otelcol.exporter.otlp.tempo.input]
  }
}

// OTLP exporter to send traces to Tempo
otelcol.exporter.otlp "tempo" {
  client {
    endpoint = "tempo.monitoring.svc.cluster.local:4317"
    tls {
      insecure = true
    }
    compression = "gzip"
  }
}
</pre>
<br />
<span>The batch processor reduces network overhead by accumulating spans before forwarding to Tempo.</span><br />
<br />
<span>#### Upgrade Alloy</span><br />
<br />
<pre>
cd /home/paul/git/conf/f3s/loki
just upgrade
</pre>
<br />
<span>Verify OTLP receivers are listening:</span><br />
<br />
<pre>
kubectl logs -n monitoring -l app.kubernetes.io/name=alloy | grep -i "otlp.*receiver"
kubectl exec -n monitoring &lt;alloy-pod&gt; -- netstat -ln | grep -E &#39;:(4317|4318)&#39;
</pre>
<br />
<h3 style='display: inline' id='demo-tracing-application'>Demo Tracing Application</h3><br />
<br />
<span>Created a three-tier Python application to demonstrate distributed tracing in action.</span><br />
<br />
<span>#### Application Architecture</span><br />
<br />
<pre>
User → Frontend (Flask:5000) → Middleware (Flask:5001) → Backend (Flask:5002)
           ↓                          ↓                        ↓
                    Alloy (OTLP:4317) → Tempo → Grafana
</pre>
<br />
<span>**Frontend Service:**</span><br />
<ul>
<li>Receives HTTP requests at /api/process</li>
<li>Forwards to middleware service</li>
<li>Creates parent span for the entire request</li>
</ul><br />
<span>**Middleware Service:**</span><br />
<ul>
<li>Transforms data at /api/transform</li>
<li>Calls backend service</li>
<li>Creates child span linked to frontend</li>
</ul><br />
<span>**Backend Service:**</span><br />
<ul>
<li>Returns data at /api/data</li>
<li>Simulates database query (100ms sleep)</li>
<li>Creates leaf span in the trace</li>
</ul><br />
<span>#### OpenTelemetry Instrumentation</span><br />
<br />
<span>All services use Python OpenTelemetry libraries:</span><br />
<br />
<span>**Dependencies:**</span><br />
<pre>
flask==3.0.0
requests==2.31.0
opentelemetry-distro==0.49b0
opentelemetry-exporter-otlp==1.28.0
opentelemetry-instrumentation-flask==0.49b0
opentelemetry-instrumentation-requests==0.49b0
</pre>
<br />
<span>**Auto-instrumentation pattern** (used in all services):</span><br />
<br />
<!-- Generator: GNU source-highlight 3.1.9
by Lorenzo Bettini
http://www.lorenzobettini.it
http://www.gnu.org/software/src-highlite -->
<pre><font color="#ababab">from</font><font color="#ff0000"> opentelemetry </font><font color="#ababab">import</font><font color="#ff0000"> trace</font>
<font color="#ababab">from</font><font color="#ff0000"> opentelemetry</font><font color="#F3E651">.</font><font color="#ff0000">sdk</font><font color="#F3E651">.</font><font color="#ff0000">trace </font><font color="#ababab">import</font><font color="#ff0000"> TracerProvider</font>
<font color="#ababab">from</font><font color="#ff0000"> opentelemetry</font><font color="#F3E651">.</font><font color="#ff0000">exporter</font><font color="#F3E651">.</font><font color="#ff0000">otlp</font><font color="#F3E651">.</font><font color="#ff0000">proto</font><font color="#F3E651">.</font><font color="#ff0000">grpc</font><font color="#F3E651">.</font><font color="#ff0000">trace_exporter </font><font color="#ababab">import</font><font color="#ff0000"> OTLPSpanExporter</font>
<font color="#ababab">from</font><font color="#ff0000"> opentelemetry</font><font color="#F3E651">.</font><font color="#ff0000">instrumentation</font><font color="#F3E651">.</font><font color="#ff0000">flask </font><font color="#ababab">import</font><font color="#ff0000"> FlaskInstrumentor</font>
<font color="#ababab">from</font><font color="#ff0000"> opentelemetry</font><font color="#F3E651">.</font><font color="#ff0000">instrumentation</font><font color="#F3E651">.</font><font color="#ff0000">requests </font><font color="#ababab">import</font><font color="#ff0000"> RequestsInstrumentor</font>
<font color="#ababab">from</font><font color="#ff0000"> opentelemetry</font><font color="#F3E651">.</font><font color="#ff0000">sdk</font><font color="#F3E651">.</font><font color="#ff0000">resources </font><font color="#ababab">import</font><font color="#ff0000"> Resource</font>

<i><font color="#ababab"># Define service identity</font></i>
<font color="#ff0000">resource </font><font color="#F3E651">=</font><font color="#ff0000"> </font><font color="#7bc710">Resource</font><font color="#F3E651">(</font><font color="#ff0000">attributes</font><font color="#F3E651">={</font>
<font color="#ff0000">    </font><font color="#bb00ff">"service.name"</font><font color="#F3E651">:</font><font color="#ff0000"> </font><font color="#bb00ff">"frontend"</font><font color="#F3E651">,</font>
<font color="#ff0000">    </font><font color="#bb00ff">"service.namespace"</font><font color="#F3E651">:</font><font color="#ff0000"> </font><font color="#bb00ff">"tracing-demo"</font><font color="#F3E651">,</font>
<font color="#ff0000">    </font><font color="#bb00ff">"service.version"</font><font color="#F3E651">:</font><font color="#ff0000"> </font><font color="#bb00ff">"1.0.0"</font>
<font color="#F3E651">})</font>

<font color="#ff0000">provider </font><font color="#F3E651">=</font><font color="#ff0000"> </font><font color="#7bc710">TracerProvider</font><font color="#F3E651">(</font><font color="#ff0000">resource</font><font color="#F3E651">=</font><font color="#ff0000">resource</font><font color="#F3E651">)</font>

<i><font color="#ababab"># Export to Alloy</font></i>
<font color="#ff0000">otlp_exporter </font><font color="#F3E651">=</font><font color="#ff0000"> </font><font color="#7bc710">OTLPSpanExporter</font><font color="#F3E651">(</font>
<font color="#ff0000">    endpoint</font><font color="#F3E651">=</font><font color="#bb00ff">"http://alloy.monitoring.svc.cluster.local:4317"</font><font color="#F3E651">,</font>
<font color="#ff0000">    insecure</font><font color="#F3E651">=</font><font color="#ff0000">True</font>
<font color="#F3E651">)</font>

<font color="#ff0000">processor </font><font color="#F3E651">=</font><font color="#ff0000"> </font><font color="#7bc710">BatchSpanProcessor</font><font color="#F3E651">(</font><font color="#ff0000">otlp_exporter</font><font color="#F3E651">)</font>
<font color="#ff0000">provider</font><font color="#F3E651">.</font><font color="#7bc710">add_span_processor</font><font color="#F3E651">(</font><font color="#ff0000">processor</font><font color="#F3E651">)</font>
<font color="#ff0000">trace</font><font color="#F3E651">.</font><font color="#7bc710">set_tracer_provider</font><font color="#F3E651">(</font><font color="#ff0000">provider</font><font color="#F3E651">)</font>

<i><font color="#ababab"># Auto-instrument Flask and requests</font></i>
<font color="#7bc710">FlaskInstrumentor</font><font color="#F3E651">().</font><font color="#7bc710">instrument_app</font><font color="#F3E651">(</font><font color="#ff0000">app</font><font color="#F3E651">)</font>
<font color="#7bc710">RequestsInstrumentor</font><font color="#F3E651">().</font><font color="#7bc710">instrument</font><font color="#F3E651">()</font>
</pre>
<br />
<span>The auto-instrumentation automatically:</span><br />
<ul>
<li>Creates spans for HTTP requests</li>
<li>Propagates trace context via W3C Trace Context headers</li>
<li>Links parent and child spans across service boundaries</li>
</ul><br />
<span>#### Deployment</span><br />
<br />
<span>Created Helm chart in /home/paul/git/conf/f3s/tracing-demo/ with three separate deployments, services, and an ingress.</span><br />
<br />
<span>Build and deploy:</span><br />
<br />
<pre>
cd /home/paul/git/conf/f3s/tracing-demo
just build
just import
just install
</pre>
<br />
<span>Verify deployment:</span><br />
<br />
<pre>
kubectl get pods -n services | grep tracing-demo
kubectl get ingress -n services tracing-demo-ingress
</pre>
<br />
<span>Access the application at:</span><br />
<br />
<a class='textlink' href='http://tracing-demo.f3s.buetow.org'>http://tracing-demo.f3s.buetow.org</a><br />
<br />
<h3 style='display: inline' id='visualizing-traces-in-grafana'>Visualizing Traces in Grafana</h3><br />
<br />
<span>The Tempo datasource is automatically discovered by Grafana through the ConfigMap label.</span><br />
<br />
<span>#### Accessing Traces</span><br />
<br />
<span>Navigate to Grafana → Explore → Select "Tempo" datasource</span><br />
<br />
<span>**Search Interface:**</span><br />
<ul>
<li>Search by Trace ID</li>
<li>Search by service name</li>
<li>Search by tags</li>
</ul><br />
<span>**TraceQL Queries:**</span><br />
<br />
<span>Find all traces from demo app:</span><br />
<pre>
{ resource.service.namespace = "tracing-demo" }
</pre>
<br />
<span>Find slow requests (&gt;200ms):</span><br />
<pre>
{ duration &gt; 200ms }
</pre>
<br />
<span>Find traces from specific service:</span><br />
<pre>
{ resource.service.name = "frontend" }
</pre>
<br />
<span>Find errors:</span><br />
<pre>
{ status = error }
</pre>
<br />
<span>Complex query - frontend traces calling middleware:</span><br />
<pre>
{ resource.service.namespace = "tracing-demo" } &amp;&amp; { span.http.status_code &gt;= 500 }
</pre>
<br />
<span>#### Service Graph Visualization</span><br />
<br />
<span>The service graph shows visual connections between services:</span><br />
<br />
<span>1. Navigate to Explore → Tempo</span><br />
<span>2. Enable "Service Graph" view</span><br />
<span>3. Shows: Frontend → Middleware → Backend with request rates</span><br />
<br />
<span>The service graph uses Prometheus metrics generated from trace data.</span><br />
<br />
<h3 style='display: inline' id='correlation-between-observability-signals'>Correlation Between Observability Signals</h3><br />
<br />
<span>Tempo integrates with Loki and Prometheus to provide unified observability.</span><br />
<br />
<span>#### Traces-to-Logs</span><br />
<br />
<span>Click on any span in a trace to see related logs:</span><br />
<br />
<span>1. View trace in Grafana</span><br />
<span>2. Click on a span</span><br />
<span>3. Select "Logs for this span"</span><br />
<span>4. Loki shows logs filtered by:</span><br />
<span>   * Time range (span duration ± 1 hour)</span><br />
<span>   * Service name</span><br />
<span>   * Namespace</span><br />
<span>   * Pod</span><br />
<br />
<span>This helps correlate what the service was doing when the span was created.</span><br />
<br />
<span>#### Traces-to-Metrics</span><br />
<br />
<span>View Prometheus metrics for services in the trace:</span><br />
<br />
<span>1. View trace in Grafana</span><br />
<span>2. Select "Metrics" tab</span><br />
<span>3. Shows metrics like:</span><br />
<span>   * Request rate</span><br />
<span>   * Error rate</span><br />
<span>   * Duration percentiles</span><br />
<br />
<span>#### Logs-to-Traces</span><br />
<br />
<span>From logs, you can jump to related traces:</span><br />
<br />
<span>1. In Loki, logs that contain trace IDs are automatically linked</span><br />
<span>2. Click the trace ID to view the full trace</span><br />
<span>3. See the complete request flow</span><br />
<br />
<h3 style='display: inline' id='generating-traces-for-testing'>Generating Traces for Testing</h3><br />
<br />
<span>Test the demo application:</span><br />
<br />
<pre>
curl http://tracing-demo.f3s.buetow.org/api/process
</pre>
<br />
<span>Load test (generates 50 traces):</span><br />
<br />
<pre>
cd /home/paul/git/conf/f3s/tracing-demo
just load-test
</pre>
<br />
<span>Each request creates a distributed trace spanning all three services.</span><br />
<br />
<h3 style='display: inline' id='verifying-the-complete-pipeline'>Verifying the Complete Pipeline</h3><br />
<br />
<span>Check the trace flow end-to-end:</span><br />
<br />
<span>**1. Application generates traces:**</span><br />
<pre>
kubectl logs -n services -l app=tracing-demo-frontend | grep -i trace
</pre>
<br />
<span>**2. Alloy receives traces:**</span><br />
<pre>
kubectl logs -n monitoring -l app.kubernetes.io/name=alloy | grep -i otlp
</pre>
<br />
<span>**3. Tempo stores traces:**</span><br />
<pre>
kubectl logs -n monitoring -l app.kubernetes.io/name=tempo | grep -i trace
</pre>
<br />
<span>**4. Grafana displays traces:**</span><br />
<span>Navigate to Explore → Tempo → Search for traces</span><br />
<br />
<h3 style='display: inline' id='practical-example-viewing-a-distributed-trace'>Practical Example: Viewing a Distributed Trace</h3><br />
<br />
<span>Let&#39;s generate a trace and examine it in Grafana.</span><br />
<br />
<span>**1. Generate a trace by calling the demo application:**</span><br />
<br />
<pre>
curl -H "Host: tracing-demo.f3s.buetow.org" http://r0/api/process
</pre>
<br />
<span>**Response (HTTP 200):**</span><br />
<br />
<!-- Generator: GNU source-highlight 3.1.9
by Lorenzo Bettini
http://www.lorenzobettini.it
http://www.gnu.org/software/src-highlite -->
<pre><font color="#F3E651">{</font>
<font color="#ff0000">  </font><font color="#ff0000">"</font><font color="#ff0000">middleware_response</font><font color="#ff0000">"</font><font color="#ff0000">: </font><font color="#F3E651">{</font>
<font color="#ff0000">    </font><font color="#ff0000">"</font><font color="#ff0000">backend_data</font><font color="#ff0000">"</font><font color="#ff0000">: </font><font color="#F3E651">{</font>
<font color="#ff0000">      </font><font color="#ff0000">"</font><font color="#ff0000">data</font><font color="#ff0000">"</font><font color="#ff0000">: </font><font color="#F3E651">{</font>
<font color="#ff0000">        </font><font color="#ff0000">"</font><font color="#ff0000">id</font><font color="#ff0000">"</font><font color="#ff0000">: </font><font color="#bb00ff">12345</font><font color="#F3E651">,</font>
<font color="#ff0000">        </font><font color="#ff0000">"</font><font color="#ff0000">query_time_ms</font><font color="#ff0000">"</font><font color="#ff0000">: </font><font color="#bb00ff">100.0</font><font color="#F3E651">,</font>
<font color="#ff0000">        </font><font color="#ff0000">"</font><font color="#ff0000">timestamp</font><font color="#ff0000">"</font><font color="#ff0000">:</font><font color="#ff0000"> "</font><font color="#bb00ff">2025-12-28T18:35:01.064538</font><font color="#ff0000">"</font><font color="#F3E651">,</font>
<font color="#ff0000">        </font><font color="#ff0000">"</font><font color="#ff0000">value</font><font color="#ff0000">"</font><font color="#ff0000">:</font><font color="#ff0000"> "</font><font color="#bb00ff">Sample data from backend service</font><font color="#ff0000">"</font>
<font color="#ff0000">      </font><font color="#F3E651">},</font>
<font color="#ff0000">      </font><font color="#ff0000">"</font><font color="#ff0000">service</font><font color="#ff0000">"</font><font color="#ff0000">:</font><font color="#ff0000"> "</font><font color="#bb00ff">backend</font><font color="#ff0000">"</font>
<font color="#ff0000">    </font><font color="#F3E651">},</font>
<font color="#ff0000">    </font><font color="#ff0000">"</font><font color="#ff0000">middleware_processed</font><font color="#ff0000">"</font><font color="#ff0000">: </font><b><font color="#ffffff">true</font></b><font color="#F3E651">,</font>
<font color="#ff0000">    </font><font color="#ff0000">"</font><font color="#ff0000">original_data</font><font color="#ff0000">"</font><font color="#ff0000">: </font><font color="#F3E651">{</font>
<font color="#ff0000">      </font><font color="#ff0000">"</font><font color="#ff0000">source</font><font color="#ff0000">"</font><font color="#ff0000">:</font><font color="#ff0000"> "</font><font color="#bb00ff">GET request</font><font color="#ff0000">"</font>
<font color="#ff0000">    </font><font color="#F3E651">},</font>
<font color="#ff0000">    </font><font color="#ff0000">"</font><font color="#ff0000">transformation_time_ms</font><font color="#ff0000">"</font><font color="#ff0000">: </font><font color="#bb00ff">50</font>
<font color="#ff0000">  </font><font color="#F3E651">},</font>
<font color="#ff0000">  </font><font color="#ff0000">"</font><font color="#ff0000">request_data</font><font color="#ff0000">"</font><font color="#ff0000">: </font><font color="#F3E651">{</font>
<font color="#ff0000">    </font><font color="#ff0000">"</font><font color="#ff0000">source</font><font color="#ff0000">"</font><font color="#ff0000">:</font><font color="#ff0000"> "</font><font color="#bb00ff">GET request</font><font color="#ff0000">"</font>
<font color="#ff0000">  </font><font color="#F3E651">},</font>
<font color="#ff0000">  </font><font color="#ff0000">"</font><font color="#ff0000">service</font><font color="#ff0000">"</font><font color="#ff0000">:</font><font color="#ff0000"> "</font><font color="#bb00ff">frontend</font><font color="#ff0000">"</font><font color="#F3E651">,</font>
<font color="#ff0000">  </font><font color="#ff0000">"</font><font color="#ff0000">status</font><font color="#ff0000">"</font><font color="#ff0000">:</font><font color="#ff0000"> "</font><font color="#bb00ff">success</font><font color="#ff0000">"</font>
<font color="#F3E651">}</font>
</pre>
<br />
<span>**2. Find the trace in Tempo via API:**</span><br />
<br />
<span>After a few seconds (for batch export), search for recent traces:</span><br />
<br />
<pre>
kubectl exec -n monitoring tempo-0 -- wget -qO- \
  &#39;http://localhost:3200/api/search?tags=service.namespace%3Dtracing-demo&amp;limit=5&#39; 2&gt;/dev/null | \
  python3 -m json.tool
</pre>
<br />
<span>Returns traces including:</span><br />
<br />
<!-- Generator: GNU source-highlight 3.1.9
by Lorenzo Bettini
http://www.lorenzobettini.it
http://www.gnu.org/software/src-highlite -->
<pre><font color="#F3E651">{</font>
<font color="#ff0000">  </font><font color="#ff0000">"</font><font color="#ff0000">traceID</font><font color="#ff0000">"</font><font color="#ff0000">:</font><font color="#ff0000"> "</font><font color="#bb00ff">4be1151c0bdcd5625ac7e02b98d95bd5</font><font color="#ff0000">"</font><font color="#F3E651">,</font>
<font color="#ff0000">  </font><font color="#ff0000">"</font><font color="#ff0000">rootServiceName</font><font color="#ff0000">"</font><font color="#ff0000">:</font><font color="#ff0000"> "</font><font color="#bb00ff">frontend</font><font color="#ff0000">"</font><font color="#F3E651">,</font>
<font color="#ff0000">  </font><font color="#ff0000">"</font><font color="#ff0000">rootTraceName</font><font color="#ff0000">"</font><font color="#ff0000">:</font><font color="#ff0000"> "</font><font color="#bb00ff">GET /api/process</font><font color="#ff0000">"</font><font color="#F3E651">,</font>
<font color="#ff0000">  </font><font color="#ff0000">"</font><font color="#ff0000">durationMs</font><font color="#ff0000">"</font><font color="#ff0000">: </font><font color="#bb00ff">221</font>
<font color="#F3E651">}</font>
</pre>
<br />
<span>**3. Fetch complete trace details:**</span><br />
<br />
<pre>
kubectl exec -n monitoring tempo-0 -- wget -qO- \
  &#39;http://localhost:3200/api/traces/4be1151c0bdcd5625ac7e02b98d95bd5&#39; 2&gt;/dev/null | \
  python3 -m json.tool
</pre>
<br />
<span>**Trace structure (8 spans across 3 services):**</span><br />
<br />
<pre>
Trace ID: 4be1151c0bdcd5625ac7e02b98d95bd5
Services: 3 (frontend, middleware, backend)

Service: frontend
  └─ GET /api/process                 221.10ms  (HTTP server span)
  └─ frontend-process                 216.23ms  (custom business logic span)
  └─ POST                             209.97ms  (HTTP client span to middleware)

Service: middleware
  └─ POST /api/transform              186.02ms  (HTTP server span)
  └─ middleware-transform             180.96ms  (custom business logic span)
  └─ GET                              127.52ms  (HTTP client span to backend)

Service: backend
  └─ GET /api/data                    103.93ms  (HTTP server span)
  └─ backend-get-data                 102.11ms  (custom business logic span with 100ms sleep)
</pre>
<br />
<span>**4. View the trace in Grafana UI:**</span><br />
<br />
<span>Navigate to: Grafana → Explore → Tempo datasource</span><br />
<br />
<span>Search using TraceQL:</span><br />
<pre>
{ resource.service.namespace = "tracing-demo" }
</pre>
<br />
<span>Or directly open the trace by pasting the trace ID in the search box:</span><br />
<pre>
4be1151c0bdcd5625ac7e02b98d95bd5
</pre>
<br />
<span>**5. Trace visualization:**</span><br />
<br />
<span>The trace waterfall view in Grafana shows the complete request flow with timing:</span><br />
<br />
<a href='./f3s-kubernetes-with-freebsd-part-8b/grafana-tempo-trace.png'><img alt='Distributed trace visualization in Grafana Tempo showing Frontend → Middleware → Backend spans' title='Distributed trace visualization in Grafana Tempo showing Frontend → Middleware → Backend spans' src='./f3s-kubernetes-with-freebsd-part-8b/grafana-tempo-trace.png' /></a><br />
<br />
<span>For additional examples of Tempo trace visualization, see also:</span><br />
<br />
<a class='textlink' href='https://foo.zone/gemfeed/2025-12-24-x-rag-observability-hackathon.html'>X-RAG Observability Hackathon (more Grafana Tempo screenshots)</a><br />
<br />
<span>The trace reveals the distributed request flow:</span><br />
<ul>
<li>**Frontend (221ms)**: Receives GET /api/process, executes business logic, calls middleware</li>
<li>**Middleware (186ms)**: Receives POST /api/transform, transforms data, calls backend</li>
<li>**Backend (104ms)**: Receives GET /api/data, simulates database query with 100ms sleep</li>
<li>**Total request time**: 221ms end-to-end</li>
<li>**Span propagation**: W3C Trace Context headers automatically link all spans</li>
</ul><br />
<span>**6. Service graph visualization:**</span><br />
<br />
<span>The service graph is automatically generated from traces and shows service dependencies. For examples of service graph visualization in Grafana, see the screenshots in the X-RAG Observability Hackathon blog post.</span><br />
<br />
<a class='textlink' href='https://foo.zone/gemfeed/2025-12-24-x-rag-observability-hackathon.html'>X-RAG Observability Hackathon (includes service graph screenshots)</a><br />
<br />
<span>This visualization helps identify:</span><br />
<ul>
<li>Request rates between services</li>
<li>Average latency for each hop</li>
<li>Error rates (if any)</li>
<li>Service dependencies and communication patterns</li>
</ul><br />
<h3 style='display: inline' id='storage-and-retention'>Storage and Retention</h3><br />
<br />
<span>Monitor Tempo storage usage:</span><br />
<br />
<pre>
kubectl exec -n monitoring &lt;tempo-pod&gt; -- df -h /var/tempo
</pre>
<br />
<span>With 10Gi storage and 7-day retention, the system handles moderate trace volumes. If storage fills up:</span><br />
<br />
<ul>
<li>Reduce retention to 72h (3 days)</li>
<li>Implement sampling in Alloy</li>
<li>Increase PV size</li>
</ul><br />
<h3 style='display: inline' id='complete-observability-stack'>Complete Observability Stack</h3><br />
<br />
<span>The f3s cluster now has complete observability:</span><br />
<br />
<span>**Metrics** (Prometheus):</span><br />
<ul>
<li>Cluster resource usage</li>
<li>Application metrics</li>
<li>Node metrics (FreeBSD ZFS, OpenBSD edge)</li>
<li>etcd health</li>
</ul><br />
<span>**Logs** (Loki):</span><br />
<ul>
<li>All pod logs</li>
<li>Structured log collection</li>
<li>Log aggregation and search</li>
</ul><br />
<span>**Traces** (Tempo):</span><br />
<ul>
<li>Distributed request tracing</li>
<li>Service dependency mapping</li>
<li>Performance profiling</li>
<li>Error tracking</li>
</ul><br />
<span>**Visualization** (Grafana):</span><br />
<ul>
<li>Unified dashboards</li>
<li>Correlation between metrics, logs, and traces</li>
<li>Service graphs</li>
<li>Alerts</li>
</ul><br />
<h3 style='display: inline' id='configuration-files'>Configuration Files</h3><br />
<br />
<span>All configuration files are available on Codeberg:</span><br />
<br />
<a class='textlink' href='https://codeberg.org/snonux/conf/src/branch/master/f3s/tempo'>Tempo configuration</a><br />
<a class='textlink' href='https://codeberg.org/snonux/conf/src/branch/master/f3s/loki'>Alloy configuration (updated for traces)</a><br />
<a class='textlink' href='https://codeberg.org/snonux/conf/src/branch/master/f3s/tracing-demo'>Demo tracing application</a><br />
<p class="footer">
    Generated with <a href="https://codeberg.org/snonux/gemtexter">Gemtexter 3.0.1-develop</a> |
    served by <a href="https://www.OpenBSD.org">OpenBSD</a>/<a href="https://man.openbsd.org/relayd.8">relayd(8)</a>+<a href="https://man.openbsd.org/httpd.8">httpd(8)</a> |
    <a href="https://foo.zone/site-mirrors.html">Site Mirrors</a>
    <br />
    Webring: <a href="https://shring.sh/foo.zone/previous">previous</a> | <a href="https://shring.sh">shring</a> | <a href="https://shring.sh/foo.zone/next">next</a>
</p>
</body>
</html>