jetstack / jetstack/dependency-track-exporter

High label cardinality issue

Open
#53 6 comments 0 reactions 0 assignees View on GitHub
Dominant language
Go
Stars
26
Forks
8
PR merge metrics
No merged PRs in 30d

Description

After a successful deployment of dependency-track-exporter, I start receiving alerts in our infrastructure because the exporter is generating labels with high cardinalities.

It is a known issue when taking into account Prometheus performance as stated in this article [Cardinality is key by Robust Perception](https://www.robustperception.io/cardinality-is-key/)

After a deep investigation, I found that the offender metric is `dependency_track_project_policy_violations` which has a label `uuid` that can explode the number of combinations.

I would suggest dropping the `uuid` label since it doesn't bring benefits in this case as we already have the project name.

Unfortunately, I'm not a good Go developer, but I would be happy to help in any other way.

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.