You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardexpand all lines: content/docs/reference/tracing.mdx
+10-10
Original file line number
Diff line number
Diff line change
@@ -16,8 +16,7 @@ import TabItem from '@theme/TabItem';
16
16
17
17
## Summary
18
18
19
-
Pomerium has comprehensive support for OpenTelemetry tracing, allowing detailed introspection into requests and authorization flows.
20
-
You can use tracing to debug errors and latency issues in your applications.
19
+
Pomerium has comprehensive support for OpenTelemetry tracing, allowing detailed introspection into requests and authorization flows. You can use tracing to debug errors and latency issues in your applications.
21
20
22
21
## Configuration
23
22
@@ -27,13 +26,14 @@ You can use tracing to debug errors and latency issues in your applications.
27
26
### Environment Variables
28
27
29
28
The recommended way to configure tracing is by using the standard OpenTelemetry environment variables:
The main variables used to configure tracing in Pomerium are the following:
34
34
35
35
| Name | Description | Default |
36
-
| :---| :----------| :------ |
36
+
| :-- | :-- | :-- |
37
37
|[`OTEL_TRACES_EXPORTER`](https://opentelemetry.io/docs/specs/otel/configuration/sdk-environment-variables/#exporter-selection)| Trace exporter to be used. <br/> Valid values are `"otlp"` or `"none"`|`"none"`|
38
38
|[`OTEL_EXPORTER_OTLP_ENDPOINT`](https://opentelemetry.io/docs/languages/sdk-configuration/otlp-exporter/#otel_exporter_otlp_endpoint) or <br/> [`OTEL_EXPORTER_OTLP_TRACES_ENDPOINT`](https://opentelemetry.io/docs/languages/sdk-configuration/otlp-exporter/#otel_exporter_otlp_traces_endpoint)| See [Endpoint Configuration](https://opentelemetry.io/docs/languages/sdk-configuration/otlp-exporter/#endpoint-configuration). |
39
39
|[`OTEL_EXPORTER_OTLP_PROTOCOL`](https://opentelemetry.io/docs/languages/sdk-configuration/otlp-exporter/#otel_exporter_otlp_protocol) or <br/> [`OTEL_EXPORTER_OTLP_TRACES_PROTOCOL`](https://opentelemetry.io/docs/languages/sdk-configuration/otlp-exporter/#otel_exporter_otlp_traces_protocol)| See [Protocol Configuration](https://opentelemetry.io/docs/languages/sdk-configuration/otlp-exporter/#protocol-configuration). <br/> Valid values are `"grpc"` or `"http/protobuf"`. <br/>If unset, Pomerium will attempt to determine the protocol based on the endpoint port number (the standard ports are 4317 for GRPC, 4318 for HTTP), otherwise it will default to `"http/protobuf"`. | (auto) |
@@ -44,7 +44,7 @@ The main variables used to configure tracing in Pomerium are the following:
44
44
Tracing can also be configured using the Pomerium config file if desired:
@@ -62,6 +62,7 @@ Tracing can also be configured using the Pomerium config file if desired:
62
62
4. Optionally, enter a protocol ("grpc" or "http/protobuf"). If the endpoint uses port 4317 or 4318, the protocol will be selected automatically. Port 4317 is the standard for OTLP GRPC, and 4318 for OTLP HTTP.
@@ -92,14 +94,11 @@ $ OTEL_TRACES_EXPORTER=otlp OTEL_EXPORTER_OTLP_ENDPOINT=http://localhost:4317 po
92
94
93
95
### Tracing errors
94
96
95
-
A typo in the OAuth2 issuer URL configuration is a common mistake that can lead to unexpected errors.
96
-
A user attempting to navigate to a Pomerium route that requires authentication might see an error page instead of being redirected to the Identity Provider.
97
-
In the Jaeger UI, traces that contain errors are highlighted and easy to find:
97
+
A typo in the OAuth2 issuer URL configuration is a common mistake that can lead to unexpected errors. A user attempting to navigate to a Pomerium route that requires authentication might see an error page instead of being redirected to the Identity Provider. In the Jaeger UI, traces that contain errors are highlighted and easy to find:
Clicking on this trace will show us the original unauthenticated request (`GET https://verify.localhost.pomerium.io/`) and that it was redirected to sign in.
102
-
When attempting to initiate the auth flow, an error was encountered, which was recorded in the trace:
101
+
Clicking on this trace will show us the original unauthenticated request (`GET https://verify.localhost.pomerium.io/`) and that it was redirected to sign in. When attempting to initiate the auth flow, an error was encountered, which was recorded in the trace:
@@ -118,6 +117,7 @@ The [Securing Grafana with Pomerium](../guides/grafana.mdx) guide can help you g
118
117
To enable OpenTelemetry traces in Grafana, set the environment variable `GF_TRACING_OPENTELEMETRY_OTLP_ADDRESS` to the same ip:port (without scheme) as the OTLP endpoint configured in Pomerium.
119
118
120
119
Alternatively, this can be setin the Grafana config file:
120
+
121
121
```ini
122
122
# grafana.ini
123
123
[tracing.opentelemetry.otlp]
@@ -130,7 +130,7 @@ With tracing enabled in both Pomerium and Grafana, navigate to your Grafana rout
130
130
131
131

132
132
133
-
The bottom trace (occured first) is the initial unauthenticated request to Pomerium. The top trace is the authenticated request, after the user signed in and was redirected. This trace includes spans exported by Grafana itself, which we can see in detail:
133
+
The bottom trace (occurred first) is the initial unauthenticated request to Pomerium. The top trace is the authenticated request, after the user signed in and was redirected. This trace includes spans exported by Grafana itself, which we can see in detail:
0 commit comments