Documentation
¶
Overview ¶
Package observability builds the funcd platform's root logger (ADR-0009).
It constructs a root *slog.Logger from configuration, hands out named child loggers, allows runtime log-level switching, and lifts trace_id/span_id from the OpenTelemetry span context into every record (the trace API only — the SDK pipeline, OTLP export, and audit channel belong to the follow-up P-F2). There is no package-level logger: the root is constructed here and injected from the composition root, so tests can assert on output with an in-memory writer.
Index ¶
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
This section is empty.
Types ¶
type AuditDecision ¶
type AuditDecision string
AuditDecision is the outcome recorded for a security-relevant action.
const ( // AuditAllow records that the action was permitted. AuditAllow AuditDecision = "allow" // AuditDeny records that the action was denied. AuditDeny AuditDecision = "deny" )
func (AuditDecision) Validate ¶
func (d AuditDecision) Validate() error
Validate reports whether d is a known decision; unknown maps to fault.Invalid.
type AuditEvent ¶
type AuditEvent struct {
Actor string // authenticated principal / API key id
Action string // e.g. "function.apply", "egress.connect"
Resource string // namespaced resource ref
Decision AuditDecision // allow | deny
Reason string // optional human reason (e.g. PDP rule)
}
AuditEvent is one security-relevant event — who did what to which resource and the decision. Typed (no any); it travels the dedicated audit stream, never the operational log stream.
type AuditRecorder ¶
type AuditRecorder struct {
// contains filtered or unexported fields
}
AuditRecorder writes audit events to a dedicated sink labeled source=audit, kept separate from operational logs (blueprint: audit is not ops logging). The V1 sink is a structured JSON writer; durable retention is a V2 audit ADR.
func NewAuditRecorder ¶
func NewAuditRecorder(w io.Writer) *AuditRecorder
NewAuditRecorder builds an AuditRecorder writing to w (the composition root passes the audit stream; tests pass a buffer).
func (*AuditRecorder) Record ¶
func (r *AuditRecorder) Record(ctx context.Context, e AuditEvent) error
Record writes one audit event. It returns fault.Invalid if Decision is unknown.
type Config ¶
type Config struct {
// Level is the initial log level; it is switchable at runtime via SetLevel.
Level slog.Level
// Format selects text or json rendering; the empty value defaults to json.
Format Format
}
Config configures the root logger. It is value config (ADR-0002 §1): the composition root supplies a populated Config. Level is a slog.Level, which implements encoding.TextUnmarshaler, so "info"/"debug"/"warn+2"/… bind directly from TOML or the environment without a custom parser here.
type Fanout ¶
type Fanout struct {
// contains filtered or unexported fields
}
Fanout is a slog.Handler that dispatches every record to all inner handlers — the seam the composition root (P-I) uses to send a record to stdout and OTLP. Concrete return type (ADR-0002 §1: constructors return concrete structs).
func (*Fanout) Handle ¶
Handle dispatches a clone of the record to every inner handler that is enabled.
type Format ¶
type Format string
Format selects the slog handler rendering. The empty value is valid and defaults to FormatJSON in NewLogger (blueprint: stdout JSON by default).
type Logger ¶
type Logger struct {
// contains filtered or unexported fields
}
Logger is the platform's root logging facade: a root *slog.Logger whose level is switchable at runtime, plus named child loggers. It holds no package-level state — two NewLogger calls are fully independent.
func NewLogger ¶
NewLogger builds the root Logger from cfg, writing to w (the composition root passes os.Stdout; tests pass a buffer). It returns a fault.Invalid error if cfg.Format is an unknown value. The name matches the blueprint "Platform logging" spec; the package will also expose the OTel provider and audit constructors in P-F2, so it is NewLogger, not a bare New. slog.LevelVar and the stdlib handlers are goroutine-safe, so SetLevel is race-free during live logging.
func (*Logger) Component ¶
Component returns a child logger tagged with component=name. Children are independent and do not mutate the root or each other.
type Telemetry ¶
type Telemetry struct {
// contains filtered or unexported fields
}
Telemetry holds the platform's OTel providers and the OTLP log handler. It is injected (no globals); Shutdown flushes and closes every provider.
func NewFromProviders ¶
func NewFromProviders(mp metric.MeterProvider, tp trace.TracerProvider) *Telemetry
NewFromProviders builds a Telemetry from explicit OTel providers (a nil provider falls back to the no-op). It is the seam for injecting SDK providers directly — e.g. an in-memory reader/recorder in tests, or a custom-wired pipeline — without going through the OTLP-exporter constructor.
func NewTelemetry ¶
func NewTelemetry(ctx context.Context, cfg TelemetryConfig) (*Telemetry, error)
NewTelemetry builds the pipeline from cfg. With cfg.Endpoint set it constructs OTLP gRPC exporters and SDK providers; otherwise it returns no-op providers and a no-op log handler. Construction never dials the network (export is lazy).
func (*Telemetry) LogHandler ¶
LogHandler returns the otelslog bridge handler (records ship over OTLP), or a no-op handler whose Enabled is false when telemetry is disabled.
func (*Telemetry) LoggerProvider ¶
func (t *Telemetry) LoggerProvider() otellog.LoggerProvider
LoggerProvider returns the OTel logger provider (SDK-backed or no-op).
func (*Telemetry) MeterProvider ¶
func (t *Telemetry) MeterProvider() metric.MeterProvider
MeterProvider returns the meter provider (SDK-backed or no-op).
func (*Telemetry) Shutdown ¶
Shutdown flushes and closes every provider. It is deadline-bounded (honors ctx) and idempotent — a second call is a no-op.
func (*Telemetry) TracerProvider ¶
func (t *Telemetry) TracerProvider() trace.TracerProvider
TracerProvider returns the tracer provider (SDK-backed or no-op).
type TelemetryConfig ¶
type TelemetryConfig struct {
// Endpoint is the OTLP gRPC target, e.g. "localhost:4317"; "" disables export.
Endpoint string
// ServiceName sets the resource service.name; "" defaults to "funcd".
ServiceName string
// Insecure runs gRPC without TLS (dev/local collector).
Insecure bool
}
TelemetryConfig configures the OTel pipeline. An empty Endpoint disables export (no-op providers) — dev/tests need no collector. ServiceName defaults to "funcd".
Source Files