Files
ruvnet--RuView/v2/crates/wifi-densepose-sensing-server/src/telemetry.rs
T
ruv 9fb5af7cf2 feat(sensing-server): add secure opt-in OTLP log export
Import and harden the OpenTelemetry logging work from #1382. Preserve default stderr behavior, register and validate RuView semantic conventions, attach a published schema, enable TLS roots, pin demo images, and fix first-CSI node lifecycle reporting.

Supersedes #1382
Closes #1460

Co-authored-by: Jens Holdgaard Pedersen <jens@holdgaard.org>
2026-07-28 22:42:18 -04:00

156 lines
5.7 KiB
Rust

//! Tracing bootstrap, with optional OTLP log export.
//!
//! Without the `otel` cargo feature (the default) this is exactly the
//! stderr `tracing_subscriber::fmt()` setup the server has always had.
//! With the feature, and only when `OTEL_EXPORTER_OTLP_ENDPOINT` is set
//! in the environment, [`init`] additionally installs an
//! `opentelemetry-appender-tracing` bridge so every `tracing` event is
//! exported as an OpenTelemetry log record (`service.name = "ruview"`)
//! to that endpoint over OTLP/gRPC. Endpoint unset means the OTLP
//! pipeline is never constructed and no curated events are emitted.
//!
//! The curated events named in [`crate::semconv`] carry registry-backed
//! event names and attribute keys (see `semconv/registry/` at the repo
//! root); everything else exports under tracing's default event names.
#[cfg(feature = "otel")]
use std::sync::atomic::{AtomicBool, Ordering};
/// Service name reported in the OTLP resource. Log backends that derive
/// a tenant from `service.name` file all RuView logs under it.
#[cfg(feature = "otel")]
const SERVICE_NAME: &str = "ruview";
/// True only after an explicitly configured OTLP logger has been installed.
///
/// Curated sensing events are new output, so call sites consult this flag
/// before emitting them. This preserves the server's pre-OTel stderr behavior
/// both in default builds and in `otel` builds without a working exporter.
#[cfg(feature = "otel")]
static CURATED_EVENTS_ENABLED: AtomicBool = AtomicBool::new(false);
/// The server's long-standing default log filter.
const DEFAULT_FILTER: &str = "info,tower_http=debug";
/// Whether the explicitly configured OTLP pipeline is ready to receive curated
/// `ruview.*` events.
#[cfg(feature = "otel")]
pub fn curated_events_enabled() -> bool {
CURATED_EVENTS_ENABLED.load(Ordering::Acquire)
}
/// Default builds cannot emit curated OTLP events.
#[cfg(not(feature = "otel"))]
pub const fn curated_events_enabled() -> bool {
false
}
/// Owns the OTLP logger pipeline when one was installed. Hold it for the
/// process lifetime; dropping it flushes pending log records.
pub struct TelemetryGuard {
#[cfg(feature = "otel")]
logger: Option<opentelemetry_sdk::logs::SdkLoggerProvider>,
}
impl Drop for TelemetryGuard {
fn drop(&mut self) {
#[cfg(feature = "otel")]
if let Some(logger) = &self.logger {
CURATED_EVENTS_ENABLED.store(false, Ordering::Release);
let _ = logger.shutdown();
}
}
}
/// Install the global `tracing` subscriber. Call once, at start-up,
/// inside the tokio runtime (the OTLP exporter runs on it).
#[must_use = "dropping the guard tears the OTLP log pipeline down"]
pub fn init() -> TelemetryGuard {
#[cfg(feature = "otel")]
if std::env::var_os("OTEL_EXPORTER_OTLP_ENDPOINT").is_some() {
match init_with_otlp() {
Ok(logger) => {
CURATED_EVENTS_ENABLED.store(true, Ordering::Release);
return TelemetryGuard {
logger: Some(logger),
};
}
Err(e) => eprintln!("OTLP log export disabled (exporter build failed): {e}"),
}
}
init_fmt_only();
TelemetryGuard {
#[cfg(feature = "otel")]
logger: None,
}
}
fn init_fmt_only() {
tracing_subscriber::fmt()
.with_env_filter(
tracing_subscriber::EnvFilter::try_from_default_env()
.unwrap_or_else(|_| DEFAULT_FILTER.into()),
)
.init();
}
#[cfg(feature = "otel")]
fn init_with_otlp(
) -> Result<opentelemetry_sdk::logs::SdkLoggerProvider, opentelemetry_otlp::ExporterBuildError> {
use opentelemetry_appender_tracing::layer::OpenTelemetryTracingBridge;
use opentelemetry_otlp::LogExporter;
use opentelemetry_sdk::logs::SdkLoggerProvider;
use opentelemetry_sdk::Resource;
use tracing_subscriber::layer::SubscriberExt as _;
use tracing_subscriber::util::SubscriberInitExt as _;
use tracing_subscriber::{EnvFilter, Layer as _};
// The exporter reads OTEL_EXPORTER_OTLP_ENDPOINT (and the other
// OTEL_EXPORTER_* variables) from the environment itself.
let exporter = LogExporter::builder().with_tonic().build()?;
let resource = Resource::builder()
.with_service_name(SERVICE_NAME)
.with_schema_url([], crate::semconv::SCHEMA_URL)
.build();
let logger = SdkLoggerProvider::builder()
.with_batch_exporter(exporter)
.with_resource(resource)
.build();
// Telemetry-induced-telemetry loop guard: the OTLP exporter is itself
// a tonic/hyper client, so its internal tracing events must not
// re-enter the bridge (a failed export would emit records that
// trigger more exports). The `off` directives win over RUST_LOG.
let mut bridge_filter =
EnvFilter::try_from_default_env().unwrap_or_else(|_| EnvFilter::new(DEFAULT_FILTER));
for directive in [
"hyper=off",
"tonic=off",
"h2=off",
"tower=off",
"opentelemetry=off",
"opentelemetry_sdk=off",
"opentelemetry_otlp=off",
] {
if let Ok(directive) = directive.parse() {
bridge_filter = bridge_filter.add_directive(directive);
}
}
let bridge = OpenTelemetryTracingBridge::new(&logger).with_filter(bridge_filter);
let fmt = tracing_subscriber::fmt::layer().with_filter(
EnvFilter::try_from_default_env().unwrap_or_else(|_| EnvFilter::new(DEFAULT_FILTER)),
);
tracing_subscriber::registry().with(bridge).with(fmt).init();
Ok(logger)
}
#[cfg(test)]
mod tests {
#[cfg(not(feature = "otel"))]
#[test]
fn default_build_never_enables_curated_events() {
assert!(!super::curated_events_enabled());
}
}