OpenTelemetry in Production: Skyscanner's 24-Cluster Governance vs Mastodon's Minimalist Collector
OTel standardization stops at the protocol and SDK; the operational choices around Collector deployment and sampling determine cost, reliability, and team burden. These two blueprints give Western teams concrete reference points for matching observability architecture to their actual scale instead of overbuilding on day one.
Skyscanner's observability platform team manages 24 production clusters with a three-tier collector layout: node-level DaemonSet agents handle lightweight enrichment, cluster-level Gateways do sampling, routing, and rate limiting, and a regional aggregation layer reduces backend write pressure. All configuration lives in a GitOps repository with canary rollouts and automatic rollback, and every collector runs memory_limiter to prevent OOM.
Mastodon takes the opposite extreme: one Collector Deployment per Namespace, replicas: 1, config in the same repo as the app manifests. Isolation comes from the Namespace boundary, failure impact stays local, and a newcomer can understand the setup in half a day. The cost is linear instance growth and no cross-Namespace global sampling.
The article's takeaway is not that one approach is superior, but that deployment architecture determines the ceiling for governance. Teams with a dedicated platform engineer and more than ten clusters should follow Skyscanner; teams with few Namespaces and no specialist should start with Mastodon and head sampling, only adding a Gateway as scale grows.
The decision path assumes most teams do not have a dedicated observability engineer, so it steers them toward DaemonSet and head sampling before considering Gateway aggregation, which is a pragmatic counterweight to the industry's default bias toward full tail sampling and centralized Gateways.
Mastodon's per-Namespace Collector makes multi-tenancy a non-issue by construction: the Namespace is the tenant boundary, so there is no routing logic to write and no cross-tenant leak to worry about.
The article's insistence on versioned configuration and canary rollouts is a direct acknowledgement that Collector misconfiguration is a common production incident source, and that GitOps discipline scales with cluster count, not team size.