[HardMax71]

The FastAPI OpenTelemetry instrumentation never worked. dishka_lifespan.py called instrument_app inside the lifespan, but Starlette builds the middleware stack on its first ASGI call, which is the lifespan startup itself, and instrument_app only patches build_middleware_stack without rebuilding. So no request produced an OTel span or HTTP metric, and MetricsMiddleware was the only HTTP telemetry. A probe that drives the lifespan the way uvicorn does recorded nothing with the old placement and all three HTTP instruments with the new one.

create_app now instruments the app before the stack exists, so the OTel middleware wraps everything, and MetricsMiddleware is deleted. The backend image sets OTEL_SEMCONV_STABILITY_OPT_IN=http (pytest's env does too), so requests land as http_server_request_duration_seconds, http_server_active_requests and the two body size histograms, labelled by FastAPI's route template instead of our regexes. Since the OTel middleware is outermost, the 403, 429 and 413 answers from CSRF, rate limiting and the size limit now show up in the metrics; before they didn't.

The psutil gauges go as well. The collector's host_metrics receiver already scraped host memory, and now host CPU utilization too, and every backend and worker process reports its own memory, CPU, threads and file descriptors through opentelemetry-instrumentation-system-metrics. setup_metrics moves to app/core/metrics/base.py, and psutil is no longer a direct dependency.

The HTTP dashboard's panels read the new series. The contract test builds the instrumentations' families on a bare app the way create_app configures them, and passes. The middleware, metrics reference and contract testing docs describe the new setup.

Checked with ruff, mypy, grimp, 564 unit tests, the 3 contract tests and a strict docs build. Against the real create_app with an in-memory reader, a request recorded http.server.request.duration with method, status and scheme, and the security headers still came back.

---

Summary by cubic

Fixes the FastAPI OpenTelemetry instrumentation, which ran inside the lifespan after Starlette had already built the middleware stack and so never wrapped a single request. HTTP and process metrics now come from OpenTelemetry instrumentations, and the hand-written MetricsMiddleware and psutil gauges are removed.

HTTP metrics

• Requests record http_server_request_duration_seconds, http_server_active_requests and the two body size histograms, labelled by FastAPI route templates instead of regex-normalized paths.
• The stable semantic convention names require OTEL_SEMCONV_STABILITY_OPT_IN=http, now set in the backend image and pytest.
• The OTel middleware wraps CSRF, rate limiting and the size limit, so their 403, 429 and 413 responses show up in metrics where they were absent before.

Process metrics

• Each backend and worker process reports its own memory, CPU, threads and file descriptors via opentelemetry-instrumentation-system-metrics; host CPU and memory come from the collector's host_metrics receiver.
• setup_metrics moved to app/core/metrics/base.py, and psutil stops being a direct dependency.

The Grafana HTTP dashboard, the metrics reference and middleware docs, and the contract test now match the new series.

^{Written for commit a2c7eb6. Summary will update on new commits.}

[coderabbitai]

Important

• 🔍 Trigger review

This repository does not receive automatic reviews because it has fewer than 10 stars.

⚙️ Run configuration

• Configuration used: defaults
• Review profile: CHILL
• Plan: Advanced
• Run ID: c88caccb-eb6c-4c8a-82f6-a0c89c830b4c

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[codecov-commenter]

⚠️ Please install the to ensure uploads and comments are reliably processed by Codecov.

Codecov Report

❌ Patch coverage is 72.72727% with 6 lines in your changes missing coverage. Please review.

Files with missing lines	Patch %	Lines
backend/app/core/metrics/base.py	64.70%	6 Missing ⚠️
❗ Your organization needs to install the Codecov GitHub app to enable full functionality.

Flag	Coverage Δ
backend-unit	72.39% <72.72%> (-0.05%)	⬇️

Flags with carried forward coverage won't be shown. Click here to find out more.

Files with missing lines	Coverage Δ
backend/app/core/dishka_lifespan.py	100.00% <ø> (ø)
backend/app/core/metrics/__init__.py	100.00% <100.00%> (ø)
backend/app/core/middlewares/__init__.py	100.00% <ø> (ø)
backend/app/main.py	93.44% <100.00%> (+0.22%)	⬆️
backend/app/worker.py	86.53% <100.00%> (ø)
backend/app/core/metrics/base.py	75.00% <64.70%> (-15.91%)	⬇️

Components	Coverage Δ
Backend	91.15% <72.72%> (+<0.01%)	⬆️
Frontend	92.60% <ø> (ø)

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.