photoncloud-monorepo/nightlight
2026-04-10 19:28:44 +09:00
..
crates harden plasmavmc image ingestion and internal execution paths 2026-04-02 07:57:25 +09:00
Cargo.lock fix(nix): Apply package overlay to node configurations 2025-12-12 08:39:19 +09:00
Cargo.toml fix(lightningstor): Fix SigV4 canonicalization for AWS S3 auth 2025-12-12 06:23:46 +09:00
README.md Establish baseline product surface and proof lanes 2026-04-10 19:28:44 +09:00

NightLight

nightlight is UltraCloud's supported metrics ingestion and query service for the edge bundle.

Supported product shape

NightLight is supported as a single-node WAL/snapshot service; replicated HA metrics storage is not part of the product contract.

  • Retention is instance-wide and controlled by retention_days, the WAL, and periodic snapshots.
  • The supported proof scope is nix run ./nix/test-cluster#cluster -- fresh-matrix, which validates the shipped HTTP and gRPC query surface on the gateway node.
  • Shared deployments should put authentication and exposure policy in front of NightLight through APIGateway or another authenticated front door.

Tenant boundary

NightLight does not provide a hard multi-tenant security boundary inside the process.

  • One NightLight instance per environment or tenant boundary is the recommended shape when strong separation is needed.
  • Labels and caller discipline can partition data operationally, but they are not a product-grade authorization boundary.
  • Per-tenant retention or quota enforcement is not part of the current contract.