Decide whether Maghost needs host-level metrics #20

New issue

Open

opened 2026-08-23 17:07:55 +00:00 by stanta · 0 comments

stanta commented

2026-08-23 17:07:55 +00:00

Owner

Outcome

Accept the current Maghost host-metrics blind spot or approve a narrowly owned exporter.

Current state

Public DNS and DNS-collector are monitored. CPU, memory, disk, and operating system state are not exported.

Work

Define which host failures public DNS probes cannot detect early.
Assess node_exporter exposure and transport options.
Decide whether service-level monitoring is sufficient.
If approved, define firewall, scrape, update, and ownership boundaries.

Validation

The decision and residual risk are recorded.
Any deployed exporter is not public and has a verified scrape path.

References

iac/MAGHOST.md
iac/ansible/host_vars/auth-dns-maghost.yml

## Outcome Accept the current Maghost host-metrics blind spot or approve a narrowly owned exporter. ## Current state Public DNS and DNS-collector are monitored. CPU, memory, disk, and operating system state are not exported. ## Work - [ ] Define which host failures public DNS probes cannot detect early. - [ ] Assess node_exporter exposure and transport options. - [ ] Decide whether service-level monitoring is sufficient. - [ ] If approved, define firewall, scrape, update, and ownership boundaries. ## Validation - [ ] The decision and residual risk are recorded. - [ ] Any deployed exporter is not public and has a verified scrape path. ## References - `iac/MAGHOST.md` - `iac/ansible/host_vars/auth-dns-maghost.yml`

stanta added the

labels

2026-08-23 17:07:55 +00:00