Measure What the Operator or User Actually Cares About
CPU and container counts are supporting signals; service reachability, backup validity and call-path health are closer to the real objective.
availability
Certificate Expiry Is an Availability Signal
TLS can work perfectly today and still have a known future outage date embedded in the certificate.
A Single Redis Replica Is a Design Choice, Not a Default Truth
How I interpret the current one-replica values and what changes when availability requirements grow.
Cloudflare Tunnel Disruptions Need Log-Derived Monitoring
An external endpoint can flap because the tunnel reconnects even when the local service and LAN probe remain healthy.
Public and Internal Probes Answer Different Availability Questions
A service can be healthy on the LAN and unreachable through Cloudflare, TLS, DNS or authentication at the public edge.