mirror of https://github.com/openobserve/openobserve.git synced 2026-11-05 08:09:22 +00:00

Files

T

Loakesh Indiran 3f49343426 feat(synthetics): private-agent token lifecycle, browser private agents & P0 lease fixes (#13432 )

Synthetics work spanning private-agent tokens, browser private agents,
and job-lease correctness. (Enterprise backend:
openobserve/o2-enterprise#2260.)

## Private-agent probe tokens
- Named, org-level, rotatable `o2syn_` probe tokens — **create / list /
rotate / disable**. Rotate = create-new + keep-old for zero-downtime
overlap; disable = revoke. Fixes the gap where a private-agent token was
an unrevocable standing credential.
- IAM **Synthetics Tokens** page (create / rotate / disable) with an
**Agents** column — how many agents currently use each token, so a token
is only revoked once it's safe.
- `POST /synthetics/agent-tokens` to mint a named token; agent
`token_id` tracking; per-agent **Restart config** action.

## Browser checks on private locations
- Allow browser checks on private, **browser-capable** locations
(previously public/Lambda only).
- Agent-setup drawer emits `--type=browser` so the install command pulls
the browser probe image.

## Private locations as agent pools
- A private location is treated as a **pool of interchangeable agents**
— list shows live/total agent count + C/min (deliberate naming instead
of auto-generated `private-location-XXXX`).

## Lease correctness (P0)
- **Atomic job lease** — no duplicate runs when a location has multiple
agents (guarded `status = 0` claim + winner-scoped return).
- **Capability-filter the lease by agent type** — a net agent and a
browser agent can now share one pool; the net agent no longer wins (and
fails with `unsupported check type: browser`) a browser job.

## Scheduling & RBAC
- Expose `next_run_at` on DueMonitor for drift-free scheduling.
- CREATE-folder query is authoritative (RBAC); require PUT permission to
move checks between folders; pass the folder query param on per-check
API calls.

2026-07-24 17:39:35 +00:00

src

feat(synthetics): private-agent token lifecycle, browser private agents & P0 lease fixes (#13432 )

2026-07-24 17:39:35 +00:00

build.rs

refactor: extract API frontend crate (#13181 )

2026-07-14 12:40:47 +00:00

Cargo.toml

refactor: extract TLS and node services from core (#13449 )

2026-07-24 16:56:37 +00:00

README.md

refactor: extract management API crate (#13202 )

2026-07-15 07:10:41 +00:00

README.md

openobserve-api

openobserve-api is the transport frontend for OpenObserve. It composes the HTTP and gRPC handlers, routers, OpenAPI schemas, and rate-limit path mappings used by the server binary.

Domain handlers are split into dedicated crates where possible:

openobserve-api-query for search, PromQL, and trace APIs.
openobserve-api-management for management APIs.
openobserve-api-common for shared HTTP types and extractors.
openobserve-core for application services and business logic.

This is an internal workspace crate and is not published independently. New business logic should normally be implemented in openobserve-core, leaving this crate responsible for transport composition.