Storage Tiering Service · View 25 of 31 · 6 · Operations
Decisions
- Three alerts act without a human: stale telemetry stops demotion, a charge ratio above 12% pauses demotion, and a failed ring gate freezes the policy. People are paged for the state, not asked to make the stop.
- The telemetry canary is checked from the witness site by a self-hosted Healthchecks instance. A pipeline that stops sending looks identical to a quiet corpus to any monitor that only watches for errors.
- Resolution SLO alerts use multi-window burn rates against 99.99%, because a 4-minute monthly budget is spent before a threshold alert fires.
Stack
- Prometheus with Thanos for metrics, 13 months. Decision, movement and recall records in ClickHouse. OpenTelemetry traces to Tempo, sampled except for slow resolves and failed movements. Grafana over all three.
Numbers
- Wrong-tier read rate at most 0.05% of reads; unread rehydrations at most 3% of bytes; platform cost at most 8% of net saving, reported monthly.