Skip to content

Conversation

@zedkipp
Copy link

@zedkipp zedkipp commented Jan 16, 2026

Add dashboard for monitoring workspace boundary audit logs, showing HTTP requests that are audited by boundary within workspaces. This dashboard is intended to be a good starting point. It intends to enable answering questions like:

  • What requests did a particular boundary policy allow/deny? (note: boundary policy can change across template versions)
  • What requests did boundary allow/deny in a workspace?
  • What requests did boundary allow/deny for a workspace owner?
  • What requests did boundary allow/deny for a specific domain?

Panels:

  • Request Totals: count of allowed vs denied requests
  • Top Allowed/Denied Domains: most frequently accessed domains
  • Recent Allowed/Denied Requests: detailed table with time, domain, method, path, workspace owner, workspace name, template ID, and template version ID.

Includes filters for domain, workspace owner, template ID, and template version ID to narrow results.

The dashboard being added can be viewed here with dogfood data: https://grafana.dev.coder.com/d/agent-boundaries-pr/coder-agent-boundaries-pr

Screenshots:
Screenshot 2026-01-22 at 4 00 42 PM
Screenshot 2026-01-22 at 4 01 05 PM

#76

@zedkipp zedkipp force-pushed the zedkipp/boundary-dashboard branch 7 times, most recently from 9900f11 to 48a8ff8 Compare January 19, 2026 19:47
@zedkipp zedkipp changed the title feat: add Coder Boundary Stats dashboard feat: add Coder Agent Boundaries dashboard Jan 19, 2026
@zedkipp zedkipp force-pushed the zedkipp/boundary-dashboard branch from 48a8ff8 to efcfb0a Compare January 19, 2026 21:42
Add dashboard for monitoring workspace agent boundary audit logs, showing HTTP
requests that are audited by boundary within workspaces.

Panels:
- Request Totals: count of allowed vs denied requests
- Top Allowed/Denied Domains: most frequently accessed domains
- Recent Allowed/Denied Requests: detailed table with time, domain,
  method, path, workspace owner, and workspace name

Includes filters for domain and workspace owner to narrow results.
@zedkipp zedkipp force-pushed the zedkipp/boundary-dashboard branch from efcfb0a to fdbb3f6 Compare January 19, 2026 21:49
@zedkipp zedkipp marked this pull request as ready for review January 19, 2026 23:05
@zedkipp zedkipp requested a review from dannykopping as a code owner January 19, 2026 23:05
Copy link
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Some feedback from @dannykopping:

  • Add the ability to filter by template ID and template version: this will help answer questions like "what is being allowed/denied for my boundary policy defined in template xyz"
  • Break down request totals by user: can drill down to topk allowed/blocked
  • Consider having aggregates by user on the left and totals on the right instead of the panel with just a number for total
  • Consider having an overview that allows drill down

I think I will add the filters by template ID and template version in this PR as that seems very useful for platform admins/template admins. I'll experiment/iterate on the other points of feedback.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant