Multi-Tenancy Support for Mimir Ruler about mimir HOT 3 OPEN

Mimir Ruler should be able to support multi-tenant request just like it does for the metrics.

How exactly should Mimir Ruler endpoint for listing rules work when it finds multiple tenants in X-Scope-OrgID header? List rule groups from all tenants? Then we run into possibility of conflicting namespaces. Shall endpoint create logical hiearchy with tenant in the top-level? Then view would be different between single-tenant and multi-tenant and all clients would need to understand both.

What about endpoint for setting rule group, or deleting namespace? Should the modification be applied to the first tenant? All tenants?

These questions need to be answered before we can add support for multi tenancy into Ruler API.

I see. Then maybe it will make sense to include the challenges you described above in the documentation so it's clear to everyone.

It's mentioned in the official documentation

Grafana Mimir is a multi-tenant system where tenants can query metrics and alerts that include their tenant ID. The query takes the tenant ID from the X-Scope-OrgID parameter that exists in the HTTP header of each request, for example X-Scope-OrgID: . You can federate queries across multiple tenants by using true in -tenant-federation.enabled=true. When you specify tenant IDs, separate them with a pipe (|) character in the X-Scope-OrgID header, as in the example X-Scope-OrgID: tenant-1|tenant-2|tenant-3.

Source: https://grafana.com/docs/mimir/latest/manage/secure/authentication-and-authorization/

It's easy for people to assume that all components in the Grafana Mimir system support multi-tenancy until they realize that's not the case during implémentation.

Once it's made cleared, maybe the community will be able to offer some creative solutions.

I start the issue with "it's frustrating..." because it's part of the template provided. While it's actually frustrating, I do appreciate the work being done at Grafana Lab and there's no offense.

Hopefully there will be solutions or easier alternatives to this problem soon.

from mimir.

Mimir Ruler should be able to support multi-tenant request just like it does for the metrics.

How exactly should Mimir Ruler endpoint for listing rules work when it finds multiple tenants in X-Scope-OrgID header? List rule groups from all tenants? Then we run into possibility of conflicting namespaces. Shall endpoint create logical hiearchy with tenant in the top-level? Then view would be different between single-tenant and multi-tenant and all clients would need to understand both.

What about endpoint for setting rule group, or deleting namespace? Should the modification be applied to the first tenant? All tenants?

These questions need to be answered before we can add support for multi tenancy into Ruler API.

from mimir.