042 - BYOC Telemetry, Improved UI and Deprovisioning

​

BYOC telemetry

• Apps send OpenTelemetry to a private OTLP endpoint in each install
• The runner forwards it to your relay, which exports to any OTLP backend
• Records are stamped with verified nuon.org.id, nuon.app.id, and nuon.install.id
• No backend credentials in customer accounts
• Customers can disable the endpoint in their stack
• Org default plus per-install overrides

OTEL_EXPORTER_OTLP_PROTOCOL = "http/protobuf"
OTEL_EXPORTER_OTLP_ENDPOINT = "{{ .nuon.install_stack.outputs.telemetry_endpoint }}"

​

Improved UI

• App branches are each app’s landing page
• Install pages show commits behind the tracked branch
• Active deployments listed above history
• Actions, runbooks, and deployments record who triggered them

​

Deprovisioning

• [teardown] retain removes listed resources from state and leaves them running
• The teardown plan marks each retained resource with a Retain action
• The plan fails if a retained resource depends on something being destroyed
• apply_on_teardown = false skips a policy during teardowns and keeps it on for deploys
• Failed plan steps can be skipped
• Deprovisions show on the install’s deployments page

[teardown]
retain = [
  "aws_rds_cluster.main",
  "aws_rds_cluster_instance.main",
]

[[policy]]
type              = "terraform_module"
engine            = "opa"
contents          = "./protect-rds-cluster.rego"
apply_on_teardown = false

​

Other updates in this release

​

Scheduled runbooks

[[triggers]]
type          = "cron"
cron_schedule = "0 6 * * 1"

​

AWS cloud connections