nbari / dbpulse / 33536456269

74%

main: 74%

Build Type

push

github

Committed by nbari

Commit Message

0.10.0

Harden the monitoring loop against the failure modes dbpulse exists to
detect, update dependencies, and close the paths that silently disabled
TLS or reported false health.

A wedged database that accepts TCP and then goes silent used to stall the
loop indefinitely: no iteration, no error metric, no output. Checks are
now bounded by a client-side deadline. Compounding it, metrics are
LazyLock and so were absent from /metrics rather than 0 until a check
completed, meaning `dbpulse_pulse == 0` alerts never fired; every metric
and its label children are registered at startup. A check that overran
its interval also skipped its sleep entirely and hammered the database at
~25 iterations/second exactly when it was already struggling.

An unparseable, uppercase, or MySQL-spelled sslmode fell through to
TlsMode::Disable, so an operator asking for verified TLS silently got
plaintext. Parsing and parameter-key lookup now fail closed. The
certificate probe verifies under verify-ca and verify-full, matching what
the driver enforces rather than being stricter than it, and sizes its
budget against what is left of the check deadline.

A standby whose primary had died reported a replication lag of exactly 0
forever while serving stale data. Equal LSNs now count as caught up only
while a walreceiver row is present -- keyed off row existence, because
status is privilege-restricted and an unprivileged monitoring role would
otherwise see a growing lag on a healthy standby. Gauges that stop being
updated retire their series instead of freezing at their last value.

Concurrency on the shared table no longer looks like a fault: a drop
landing mid-check recreates and retries, and another instance overwriting
the read/write row is distinguished from a lost write.

sqlx 0.9 required auditing all 28 dynamic SQL call sites; dependency
count dropped from 303 to 258 and cargo-audit is clean. Adds a security
policy, a daily cargo-audit/cargo-deny workflow, and aarch64 RPM an... (continued)

Coverage Stats

1494 of 1882 new or added lines in 17 files covered. (79.38%)

8 existing lines in 3 files now uncovered.

5010 of 6783 relevant lines covered (73.86%)

197.06 hits per line