query rejection

 - query rejection configurations are added. It uses QueryAttributes which is used by priority queue
 - added tests.

 priority queue
 - priority queue was changed to include step, agent, dashboard, panel configs.

Signed-off-by: Erlan Zholdubai uulu <[email protected]>

Author: erlan-z

docs/configuration/config-file-reference.md

@@ -2928,10 +2928,6 @@ lifecycler:
 # CLI flag: -ingester.active-series-metrics-idle-timeout
 [active_series_metrics_idle_timeout: <duration> | default = 10m]
 
-# Enable uploading compacted blocks.
-# CLI flag: -ingester.upload-compacted-blocks-enabled
-[upload_compacted_blocks_enabled: <boolean> | default = true]
-
 instance_limits:
   # Max ingestion rate (samples/sec) that ingester will accept. This limit is
   # per-ingester, not per-tenant. Additional push requests will be rejected.
@@ -3172,9 +3168,9 @@ The `limits_config` configures default and per-tenant limits imposed by Cortex s
 # CLI flag: -ingester.max-global-series-per-metric
 [max_global_series_per_metric: <int> | default = 0]
 
-# [Experimental] Enable limits per LabelSet. Supported limits per labelSet:
-# [max_series]
-[limits_per_label_set: <list of LimitsPerLabelSet> | default = []]
+# [Experimental] The maximum number of active series per LabelSet, across the
+# cluster before replication. Empty list to disable.
+[max_series_per_label_set: <list of MaxSeriesPerLabelSet> | default = []]
 
 # The maximum number of active metrics with metadata per user, per ingester. 0
 # to disable.
@@ -3276,6 +3272,14 @@ query_priority:
 
   # List of priority definitions.
   [priorities: <list of PriorityDef> | default = []]
+  
+query_rejection:
+  # Enables query rejection for tenant.
+  # CLI flag: -frontend.query-rejection.enabled
+  [enabled: <boolean> | default = false]
+
+  # List of query attributes that defines which queries should be rejected. Query will be rejected if it matches all the provided attributes
+  [query_attributes: <list of QueryAttribute> | default = []]
 
 # Duration to delay the evaluation of rules to ensure the underlying metrics
 # have been pushed to Cortex.
@@ -3644,6 +3648,11 @@ The `querier_config` configures the Cortex querier.
 # CLI flag: -querier.query-ingesters-within
 [query_ingesters_within: <duration> | default = 0s]
 
+# Deprecated (Querying long-term store for labels will be always enabled in the
+# future.): Query long-term store for series, label values and label names APIs.
+# CLI flag: -querier.query-store-for-labels-enabled
+[query_store_for_labels_enabled: <boolean> | default = false]
+
 # Enable returning samples stats per steps in query response.
 # CLI flag: -querier.per-step-stats-enabled
 [per_step_stats_enabled: <boolean> | default = false]
@@ -4262,11 +4271,6 @@ ring:
   # CLI flag: -ruler.ring.zone-awareness-enabled
   [zone_awareness_enabled: <boolean> | default = false]
 
-  # EXPERIMENTAL: File path where tokens are stored. If empty, tokens are not
-  # stored at shutdown and restored at startup.
-  # CLI flag: -ruler.ring.tokens-file-path
-  [tokens_file_path: <string> | default = ""]
-
   # Name of network interface to read address from.
   # CLI flag: -ruler.ring.instance-interface-names
   [instance_interface_names: <list of string> | default = [eth0 en0]]
@@ -5314,14 +5318,11 @@ otel:
     [tls_insecure_skip_verify: <boolean> | default = false]
 ```
 
-### `LimitsPerLabelSet`
+### `MaxSeriesPerLabelSet`
 
 ```yaml
-limits:
-  # The maximum number of active series per LabelSet, across the cluster before
-  # replication. Setting the value 0 will enable the monitoring (metrics) but
-  # would not enforce any limits.
-  [max_series: <int> | default = ]
+# The maximum number of active series per LabelSet before replication.
+[limit: <int> | default = ]
 
 # LabelSet which the limit should be applied.
 [label_set: <map of string (labelName) to string (labelValue)> | default = []]
@@ -5360,6 +5361,22 @@ time_window:
   # lookback delta) that the query should be within. If set to 0, it won't be
   # checked.
   [end: <int> | default = 0]
+
+# Limit that query step should be within. If not set it won't be checked
+query_step_limit: 
+  # Query step should be above or equal to this value to match. If set to 0, it won't be checked. 
+  [min: <duration> | default = 0]
+  # Query step should be below or equal to this value to match. If set to 0, it won't be checked. 
+  [max: <duration> | default = 0]
+
+# Query's User-Agent should match this value. If not set, it won't be checked
+[user_agent: <string> | default = ""]
+
+# Query's X-Dashboard-Uid should match this value. If not set, it won't be checked
+[dashboard_uid: <string> | default = ""]
+
+# Query's X-Panel-Id should match this value. If not set, it won't be checked
+[panel_id: <string> | default = ""]
 ```
 
 ### `DisabledRuleGroup`

pkg/querier/tripperware/limits.go

@@ -28,4 +28,6 @@ type Limits interface {
 
 	// QueryPriority returns the query priority config for the tenant, including different priorities and their attributes.
 	QueryPriority(userID string) validation.QueryPriority
+
+	QueryRejection(userID string) validation.QueryRejection
 }