Page MenuHomePhabricator

Configure graphite to be read only
Open, Needs TriagePublic

Description

This is a task that aims to track the planning and configuration implementation of the current Graphite stack to a read-only mode, allowing querying of existing metrics while blocking the ingestion of new metrics.

High-level Steps:

Planning

  • Review all applications and services configuration, pushing metrics to Graphite and document ingress points.

Implementation

  • Update or disable configurations in applications and services to stop sending metrics to Graphite.
  • Configure statsd to no longer forward metrics to Graphite.
  • Modify firewall rules or ACLs to block traffic on the ports used for metric ingestion.
  • Ensure that queries to the existing Graphite metrics are still functional and accessible.

Testing & Post implementation clean-up

  • Test using Grafana to confirm that no new metrics are being ingested while old metrics remain queryable.
  • Document changes made to enforce read-only access.
  • Guide for how to query historical data in Graphite.
  • Alerts for new data being ingested into Graphite