• Observatorium API doesn’t add a tenant label while writing rules to rules-objstore
• With the listallrules endpoint, thanos-rule-syncer will try to get all rules by hitting rules-objstore directly (so api#191 won’t work as we’re no longer relying on read path)
• So the rule file generated by thanos-rule-syncer, which is to be used by Thanos Ruler won’t have any tenant labels, so any resultant series will also not have labels

Highlighted affected path in the attached diagram.

A solution would be to enforce tenant labels in the Observatorium API while proxying PUT requests to rules-objstore.

A/C:

• Tenant labels should be present in the file used by Thanos Ruler
• Querier rules endpoint should return rules with tenant label
• Rule-based metrics should be queryable by the tenant