Multi-tenant observability at scale: Fine-grained access control with Janus

In this hands-on workshop, Max walks participants through a challenge every platform team hits at scale: How do you give dozens of tenants access to a shared observability stack without letting them see each other's data? Janus solves this by acting as an authentication proxy that rewrites PromQL, LogQL, and TraceQL queries on the fly based on OAuth2 token claims - no changes required to Prometheus/Thanos, Loki, or Tempo.

Key takeaways:
- Deploy a multi-cluster observability stack with Thanos, Loki, and Tempo
- Configure Janus as an authentication proxy in front of your observability backends
- Map OAuth2 token claims to query rewrites for per-tenant data isolation
- Apply the same pattern to your own platform engineering use cases