feat(obs): alert on I/O pressure — the metric that missed the prod-1 outage

On 2026-09-07 06:05:21Z k3s-prod-1 went NotReady ("Kubelet stopped posting node
status") with the host up, pingable and SSH-able. The cause was disk I/O
starvation of the embedded etcd, from its own journal:

  slow fdatasync               took=3.56s / 6.71s / 4.95s / 3.40s (expects 1s)
  apply request took too long  took=8.30s                         (expects 100ms)
  etcdserver: too many requests

/proc/pressure/io FULL avg300 read 11.36 on k3s-prod-1 against 0.75 on
k3s-prod-2 (NVMe) and 1.29 on k3s-prod-3 — all three nodes put /data/k3s
(etcd's WAL) and /data/longhorn (every replica) on ONE partition, and node 1's
is a 2011 consumer SATA SSD with 61,440 reallocated sectors.

The stack alerted on CPU-PSI and memory and had NO I/O alert at all, so the
first signal the operator got was a node already out of the cluster. Adds:

  NodeIOPressureHigh      full IO PSI > 5%  for 10m  warning
  NodeIOPressureCritical  full IO PSI > 10% for 5m   critical

Thresholds are measured, not guessed: rate() is a 0-1 fraction, so the outage's
11.36% is 0.1136 and the healthy steady state on the same node is ~0.01.
Verified live that node-exporter already exports
node_pressure_io_{stalled,waiting}_seconds_total for all three prod nodes, so
these rules fire on arrival — no new exporter, no scrape change. (etcd's own
fsync histograms are NOT available: kube-prometheus-stack's kubeEtcd scrape job
is deliberately disabled for k3s, so PSI is the signal we actually have.)

PSI *full* (every runnable task blocked on disk), not *some*: `some` is noisy on
a storage node and did not separate the failing node from its peers.

Dashboard gains the matching I/O row and is retitled accordingly. Not scoped to
prod — dev shares this file and its k3s VMs are HDD-backed, where the same alert
is if anything more likely to earn its keep.

Co-Authored-By: Claude Opus 5 <[email protected]>
(cherry picked from commit cb28fc80e7e2085d2539530d55f90fc92e3b1bba)

platform/monitoring/node-pressure-dashboard.yaml

@@ -1,9 +1,17 @@
 ---
-# Grafana dashboard for node CPU/memory PRESSURE (docs/10 — platform-health capacity view). A plain
+# Grafana dashboard for node CPU/memory/IO PRESSURE (docs/10 — platform-health capacity view). A plain
 # ConfigMap labeled `grafana_dashboard` that the kube-prometheus-stack Grafana sidecar auto-loads
 # (searchNamespace ALL). Surfaces PSI + load-per-core, which averaged CPU% (the default node
 # dashboards / kubectl top) hides — this is the view that reveals "spikes cause blips of delay".
-# Pairs with the NodeCPUPressureHigh / NodeCPULoadHigh alerts in alerts.yaml.
+# Pairs with the NodeCPUPressureHigh / NodeCPULoadHigh / NodeIOPressureHigh alerts in alerts.yaml.
+#
+# THE I/O ROW WAS ADDED AFTER 2026-09-07. k3s-prod-1 went NotReady that morning with the host
+# still up: its embedded etcd could not complete WAL fdatasync (3.5-6.7 s against a 1 s
+# expectation) because Longhorn replicas and etcd share one partition on a 2011 consumer SATA
+# SSD. `/proc/pressure/io` FULL avg300 was 11.36 on that node vs 0.75 (NVMe node 2) and 1.29
+# (node 3) — and this dashboard, like the alerts, plotted only CPU and memory. I/O PSI *full*
+# (every task blocked on disk) is the series that tracked the outage; `some` is too noisy on a
+# storage node to read. Both are plotted, `full` first.
 apiVersion: v1
 kind: ConfigMap
 metadata:
@@ -14,7 +22,7 @@ metadata:
 data:
   node-pressure.json: |
     {
-      "title": "Nodes — CPU / Memory Pressure",
+      "title": "Nodes — CPU / Memory / I-O Pressure",
       "uid": "node-pressure",
       "schemaVersion": 39,
       "timezone": "browser",
@@ -102,6 +110,43 @@ data:
           "targets": [
             {"expr": "rate(node_pressure_memory_waiting_seconds_total[5m]) * 100", "legendFormat": "{{instance}}"}
           ]
+        },
+        {
+          "id": 8,
+          "type": "stat",
+          "title": "Max I/O pressure (PSI full, now)",
+          "description": "Fraction of time EVERY task on the node was blocked on disk. Steady state on these nodes is ~1%. k3s-prod-1 sat at 11.4% while its etcd stalled and the node went NotReady on 2026-09-07.",
+          "gridPos": {"h": 6, "w": 6, "x": 18, "y": 0},
+          "fieldConfig": {"defaults": {"unit": "percent", "thresholds": {"steps": [
+            {"color": "green", "value": null}, {"color": "yellow", "value": 5}, {"color": "red", "value": 10}
+          ]}}},
+          "targets": [
+            {"expr": "max(rate(node_pressure_io_stalled_seconds_total[5m])) * 100", "legendFormat": "max IO PSI full"}
+          ]
+        },
+        {
+          "id": 9,
+          "type": "timeseries",
+          "title": "I/O pressure (PSI full) per node — etcd stall risk",
+          "description": "Thresholds match the NodeIOPressureHigh (5%) and NodeIOPressureCritical (10%) alerts. A node held above 10% is the shape that starved etcd's WAL fsync on 2026-09-07.",
+          "gridPos": {"h": 8, "w": 12, "x": 0, "y": 22},
+          "fieldConfig": {"defaults": {"unit": "percent", "custom": {"drawStyle": "line", "fillOpacity": 10}, "thresholds": {"mode": "absolute", "steps": [
+            {"color": "green", "value": null}, {"color": "yellow", "value": 5}, {"color": "red", "value": 10}
+          ]}}},
+          "targets": [
+            {"expr": "rate(node_pressure_io_stalled_seconds_total[5m]) * 100", "legendFormat": "{{instance}}"}
+          ]
+        },
+        {
+          "id": 10,
+          "type": "timeseries",
+          "title": "I/O pressure (PSI some) per node",
+          "description": "Time at least one task was blocked on disk. Always higher than `full`; useful for spotting which node carries the write load, not for alerting.",
+          "gridPos": {"h": 8, "w": 12, "x": 12, "y": 22},
+          "fieldConfig": {"defaults": {"unit": "percent", "custom": {"drawStyle": "line", "fillOpacity": 10}}},
+          "targets": [
+            {"expr": "rate(node_pressure_io_waiting_seconds_total[5m]) * 100", "legendFormat": "{{instance}}"}
+          ]
         }
       ]
     }