Observability and retention environment
Collection, retention, logging, metrics export, and telemetry environment settings.
Observability environment variables configure collection, retention ceilings, service logging, and telemetry export.
Read environment loading before setting
values. Edit deployment values in the release bundle's infra.env or the corresponding
Kubernetes ConfigMap and Secret, then restart the affected service.
Retention and sampling
INFRA_METRICS_INTERVAL_SECONDS
Type: integer seconds. Default: 5.
Inclusive range 5–60 for supported raw collection. A configured interval does not fabricate samples from disconnected sources.
INFRA_METRICS_RAW_RETENTION_DAYS
Type: positive integer days. Default: 7.
Inclusive range 1–90. Default raw retention and installation ceiling for lower-level policy where configured.
INFRA_METRICS_AGGREGATED_RETENTION_DAYS
Type: positive integer days. Default: 365.
Inclusive range 7–1825; cannot be shorter than raw retention. Controls stored aggregates, not third-party monitoring archives.
INFRA_LOG_RETENTION_DAYS
Type: positive integer days. Default: 30.
Inclusive range 1–365. Default managed log and journal retention. A hold or external archive can retain additional copies.
INFRA_OPERATION_RETENTION_DAYS
Type: positive integer days. Default: 90.
Inclusive range 7–1825. Terminal operation history retention; active operations are not expired by this interval.
INFRA_AUDIT_RETENTION_DAYS
Type: positive integer days. Default: 365.
Inclusive range 30–3650. Default audit retention. Shortening cannot override an active legal hold or external archive policy.
INFRA_SESSION_RECORDING_RETENTION_DAYS
Type: positive integer days. Default: 30.
Inclusive range 1–365. Applies to supported managed recordings, independently of ordinary guest logs.
INFRA_EXPORT_TTL_HOURS
Type: positive integer hours. Default: 24.
Inclusive range 1–168. Download-artifact lifetime after completion. Archiving an export follows the destination's own retention.
INFRA_RETENTION_SWEEP_INTERVAL_SECONDS
Type: integer seconds. Default: 3600.
Inclusive range 60–86400. Controls cleanup evaluation scheduling, not immediate physical space reclamation.
Logs, metrics endpoint, and traces
INFRA_LOG_LEVEL
Type: enum. Default: info.
Accepts debug, info, warn, or error. Secret redaction remains active at every level.
INFRA_LOG_FORMAT
Type: enum. Default: json.
Accepts json or text. JSON preserves structured request and operation IDs for collection.
INFRA_METRICS_EXPORT_ENABLED
Type: boolean. Default: true.
Enables the authenticated Prometheus-compatible export surface. It does not make organization metrics public.
INFRA_METRICS_EXPORT_TOKEN_FILE
Type: absolute secret path. Default: unset.
Optional dedicated installation-monitoring token for an approved private scrape path. Public organization exporters retain their scoped API authorization.
INFRA_OTLP_ENABLED
Type: boolean. Default: false.
Enables outbound operational telemetry. Endpoint becomes required; enabling does not export guest disk contents.
INFRA_OTLP_ENDPOINT
Type: HTTPS URL. Default: unset.
Required OTLP/HTTP collector base URL when enabled. Resource names and IDs can appear in telemetry, so select an approved destination.
INFRA_OTLP_HEADERS_FILE
Type: absolute secret path. Default: unset.
Optional collector authentication headers in the supported key/value file format. Values are excluded from startup logs.
INFRA_TRACE_SAMPLE_RATIO
Type: number. Default: 0.1.
Inclusive range 0.0–1.0. Zero disables sampled traces; one requests full sampling subject to exporter capacity. Invalid values are rejected, not clamped.