kubernetes/staging/src/k8s.io/apiserver/pkg/endpoints/filters/metrics.go

const successLabel …

const failureLabel …

const errorLabel …

const allowedLabel …

const deniedLabel …

const noOpinionLabel …

var authenticatedUserCounter …

var authenticatedAttemptsCounter …

var authenticationLatency …

var authorizationAttemptsCounter …

var authorizationLatency …

func init() { … }

func recordAuthorizationMetrics(ctx context.Context, authorized authorizer.Decision, err error, authStart time.Time, authFinish time.Time) { … }

func recordAuthenticationMetrics(ctx context.Context, resp *authenticator.Response, ok bool, err error, apiAudiences authenticator.Audiences, authStart time.Time, authFinish time.Time) { … }

// compressUsername maps all possible usernames onto a small set of categories
// of usernames. This is done both to limit the cardinality of the
// authorized_user_requests metric, and to avoid pushing actual usernames in the
// metric.
func compressUsername(username string) string { … }