Da Huang 31e0f75f03 docs: how an actor exports telemetry under the egress lockdown (#2120) ...

An actor's own OpenTelemetry SDK does not use the ateom relay; it dials
the collector over the network, and the actor egress lockdown denies
that connection unless the actor has an EgressPolicy rule for it.
Verified on kind and on GKE (main 4e079e7b): with no policy every export
fails with "connection reset by peer" and the gateway logs "actor has no
egress policy"; with an http rule naming the collector Service on
4317/4318 spans and metrics arrive.

Add a section to the observability guide with the rule for the kind and
GKE managed collectors, why it has to be an http rule (OTLP/gRPC is
h2c), that it is per actor, the reconnect lag a running actor sees after
the policy appears, and that IP-based k8sattributes enrichment
attributes the actor's telemetry to the egress gateway pod. Point to it
from the egress traffic doc.

2026-10-02 18:42:22 +00:00

..

assets

Add initial threat model for substrate (#303)

2026-07-01 10:31:39 -07:00

dev

ci: add automated release notes generation (#2018)

2026-10-01 20:42:12 +00:00

metrics

router: report no_capacity only for a ResourceExhausted cause (#1929)

2026-10-02 15:02:46 +00:00

api-guide.md

SystemInfo: Allow multiple trustbundle names in one file (#2048)

2026-10-02 04:23:40 +00:00

api-style-guide.md

docs: remove stale references to ActorTemplate as a Kubernetes CRD (#1404)

2026-09-04 16:40:04 -07:00

api-validation.md

Add a doc on using DV to validate protobuf (#1327)

2026-08-31 13:10:13 -04:00

architecture.md

cordon-control-plane: share one pool, give postgres its own (#2056)

2026-10-01 21:24:10 +00:00

authentication.md

api: delete the DebugClear RPC and the Debug service (#1346)

2026-09-01 17:46:05 -04:00

code-style-guide.md

CI: create JUnit artifacts and gate on all tests passing (#1873)

2026-09-28 22:01:26 +00:00

csi-deployment.md

nodepath: move the node state root to /var/lib/ate (#1926)

2026-09-28 18:27:55 +00:00

csi-volumes.md

Rename SnapshotsConfig to SnapshotConfig everywhere in the codebase (#1791)

2026-09-23 14:39:09 +00:00

egress-credential-injection.md

Add gcp secret manager as a credential provider in its own go module (#1991)

2026-09-30 22:56:13 +00:00

egress-traffic.md

docs: how an actor exports telemetry under the egress lockdown (#2120)

2026-10-02 18:42:22 +00:00

egress-trust-bundle.md

SystemInfo: Allow multiple trustbundle names in one file (#2048)

2026-10-02 04:23:40 +00:00

glossary.md

Remove onResume.fromData and the DATA_ON_GOLDEN restore scope (#2105)

2026-10-02 05:08:42 +00:00

integration-repos.md

docs: convention for integration repository structure and naming (#712)

2026-08-19 11:24:41 -07:00

network-egress.md

Atunnel <> PEP contract documentation (#1726)

2026-09-18 21:30:05 +00:00

observability.md

docs: how an actor exports telemetry under the egress lockdown (#2120)

2026-10-02 18:42:22 +00:00

request-parking.md

atenet-router: take parking-lot slots at the park transition, not at admission

2026-09-15 09:56:33 -07:00

roadmap.md

docs: sharpen Substrate overview and fix "computer infrastructure" typo (#1619)

2026-09-11 14:08:16 -07:00

threat-model.md

Address PR feedback

2026-09-09 13:23:36 -07:00

threats.json

Security status report SKILL (#680)

2026-08-20 01:33:00 -07:00

upgrade.md

cordon-control-plane: share one pool, give postgres its own (#2056)

2026-10-01 21:24:10 +00:00