Building compliant observability for Docker extensions

sarah_connor
Tue, 14 Apr 2026 14:07:15 +0000

The fastest way to get burned is letting each extension invent its own telemetry pipeline instead of going through your central controls. Push everything through OpenTelemetry with org-owned exporters, and enforce redaction plus sampling via policy-as-code so local dev tokens don’t end up in prod logs.

Sarah