- Remove opentelemetry-otlp internal-logs feature (OTLP feedback loop) - Switch trace sampling from AlwaysOn to 10% ratio-based - Add RUST_LOG filtering (opentelemetry/h2/tonic/hyper=warn) to all 8 services - Wire per-service latency measurement via health check → proto metadata → TUI - Replace Vec::remove(0) with VecDeque ring buffers (O(1) vs O(n)) - Add Arc<AtomicBool> connected_sent for first-connected detection across 12 streams - Add MAX_RECONNECT_ATTEMPTS (10) uniformly to all stream spawners - Change kill switch/circuit breaker fields to Option types with N/A display - Wire data_cache to real download status stream, remove dead cluster_events - Remove ServiceData::new() hardcoded stubs, add honest placeholders - Fix nanos_to_hms zero/negative guard, total_records semantic fix - Fix RwLock held across yield in broker_gateway stream_account_state - Add break after yield Err in broker/trading stream generators - Fix connected_at advancing per tick in stream_session_status - Tempo: replace emptyDir with 10Gi PVC, bump memory to 512Mi/2Gi - Remove Prometheus gitlab-annotated-pods duplicate scrape job - Wire 6 new gRPC streaming adapters (risk, trading, ml, data-acquisition) Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
api_gateway
API Gateway service with 6-layer authentication, RBAC, rate limiting, and gRPC proxy routing.
Key Types
ApiGatewayService-- main service implementationRoleBasedAccessControl-- RBAC authorizationRateLimiter-- 3-tier rate limiting (auth/trading/compute)CircuitBreaker-- upstream service protection
Configuration
JWT_SECRET-- JWT signing secret (min 32 chars)UPSTREAM_TRADING_URL-- trading service gRPC endpointUPSTREAM_ML_URL-- ML service gRPC endpoint
Features
mfa(default) -- multi-factor authentication support- Build without:
cargo check -p api_gateway --no-default-features --features minimal