

The Chaos Engine
* Universal Interceptors: Native fault injection for Kafka, RabbitMQ, HTTP, gRPC, SQL, MongoDB, and Redis.
* Resource Sabotage: Simulate CPU starvation and memory leaks with guaranteed cleanup via the Amnesia Protocol.
* Security Hardened: Constant time token verification, memory bounded payload processing (io.LimitReader), and native evasion protection.
* Deterministic Cascading: Complex gRPC stream rules with stable session hashing that do not short circuit.
Control & Observability
* AI SRE Copilot (Oracle): Native multi LLM integration (Gemini, Claude, GPT) that autonomously analyzes live telemetry to generate and inject optimal chaos configurations.
* Kinetic Control Plane: Fleet wide orchestration via the pastaayctl CLI, featuring imperative strikes, SLA guarded autopilot, and real time telemetry dashboards.
* Distributed Tracing: Zero allocation OpenTelemetry (OTLP) integration for visualizing chaos events across microservices without goroutine leaks.
* Self aware Sensors: Real time health monitoring and asynchronous telemetry for remote control providers.
* Web Console: Centralized dashboard with real time telemetry grid, drag and drop policy builder, and the Resilience Probe, an Apdex based system resilience monitor with server side proxy probing and diagnostic field popovers.
Cloud native & GitOps
* Kubernetes Native: Seamlessly manage chaos via Custom Resource Definitions (ChaosPolicy) powered by the Pastaay Operator.
* GitOps Ready: Full reference architectures for ArgoCD and Flux with autonomous rollbacks powered by the new duration spec.
* CI/CD Integration: Native GitHub Action (pastaay-strike) to execute SLA guarded chaos experiments directly in your pipelines.
Pastaay is built to be reactive. The engine monitors configuration states via an amnesia proof filesystem watcher and remote telemetry channels. It instantly transitions between stable, high latency (Glitch), and disconnected (Void) states without dropping underlying connections or requiring service restarts.

Pastaay features zero allocation distributed tracing out-of-the-box. It automatically injects high-fidelity spans into your active context during a chaos event, providing granular visibility into exactly where, when, and how your system was disrupted.
To enable tracing, configure the following environment variable on your host application:
| Environment Variable | Description | Example |
|---|---|---|
OTEL_EXPORTER_OTLP_ENDPOINT |
The gRPC endpoint of your OTel Collector. If left empty, tracing safely defaults to a zero overhead No-Op mode. |
http://otel-collector:4317 |
PASTAAY_WEBHOOK_TOKEN |
Shared secret for webhook API and web console. When set, all /console/api/* and /chaos/webhook routes require X-Pastaay-Token header. |
my-secret-token |
PASTAAY_DEV_ALLOW_NO_TOKEN |
Set to 1 to skip token auth on protected routes. Only for local development. Never set in production. |
1 |
Pastaay utilizes OpenTelemetry's BatchSpanProcessor. This means chaos spans are flushed asynchronously. Even if your tracing backend (like Jaeger or Zipkin) goes offline, experiences severe latency, or is overwhelmed by trace volume, Pastaay will never block your application's critical path or leak goroutines.
Pastaay is built to survive high throughput data streams. Our core evaluator guarantees O(1) policy lookups and 0 Bytes of memory allocation per operation, ensuring your application never suffers from Garbage Collection (GC) spikes.

<img src="https://github.com/CemAkan/pastaay/raw/v2.3.1/docs/assets/milkshake4drBishop.gif" alt="FRINGE <3">
Pastaay is a continuously evolving enterprise chaos engineering suite. Our development phases are strictly focused on cloud native scalability and GitOps integrations.
| Phase | Theme | Architecture Goals |
|---|---|---|
| Current (v2.3) | Web Console | Centralized web dashboard for direct fleet management, visual impact analysis, and interactive documentation. |
| Next | CEL driven Rule Engine | Dynamic Evaluation: Integrating Google's Common Expression Language (CEL) to allow complex, AST-compiled conditional chaos rules (e.g., payload limits, header regex) with zero allocation overhead. |
| Future | Trace aware Injection | context propagated Chaos: Leveraging OpenTelemetry Baggage to inject faults based on the complete distributed request journey, targeting specific end-to-end transaction flows across the fleet. |
Pastaay v2.3 introduces a fully client side Web Console, a real time observability hub served directly from the engine's embedded filesystem at http://localhost:2112/console. No external dependencies, no Node.js, no React.

Telemetry Panels, A modular, drag and drop grid with persistent layout:
pastaay_injected_faults_total directly from the engine's Prometheus gatherer.POST /console/api/probe) to bypass CORS. Features multi target round robin, EMA smoothed scoring, adjustable thresholds, and clickable diagnostic popovers.Key Capabilities:
* Sortable & Persistent: Drag and drop reordering saved to localStorage.
* Expand/Collapse: Each panel expands to show detailed diagnostics and tuning controls.
* Engine Status Bar: Live sensor fabric, active policy count, and emergency HALT EXPERIMENTS.
* Dark/Light Theme: Toggle persisted across sessions.
Additional Views:
Full architecture, API reference & diagnostic field docs: docs/web_console.md
Dive deep into Pastaay's mechanics using our official documentation: * The Configuration Guide - Learn how to write policies, target endpoints, and control the blast radius. * Architecture & Engine - Understand how the Policy Engine achieves zero latency lookups, and how we solved deep OS/Compiler integration constraints. * Remote Control & Cloud native Sensors - Learn how to securely control chaos across massive fleets via Redis, Kubernetes, or Webhooks. * pastaayctl: Kinetic Control Plane Reference - Master the CLI to orchestrate fleet wide chaos, run SLA guarded autopilot experiments, and monitor real time kinetic impact. * Pastaay Kubernetes Operator - Learn how to deploy the operator and manage chaos natively using Kubernetes CRDs. * GitOps & CI/CD Integrations - Reference architectures for declarative chaos management via ArgoCD and pipeline automation. * Web Console - Explore the centralized dashboard for fleet management and impact visualization.
go get github.com/CemAkan/pastaay
pastaay.yaml):version: 1
warmup_duration: "10s"
enable_default_ignored: true
policies:
- name: "custom-http-failure"
target: "/api/hello"
type: "http"
error_chance: 1.0
error_code: 429
error_body: '{"error": "Pastaay Chaos: Rate Limit Exceeded"}'
- name: "mongo-kill-switch"
target: "all"
type: "mongo"
drop_connection: true
package main
import (
"net/http"
"github.com/CemAkan/pastaay/pkg/config"
"github.com/CemAkan/pastaay/pkg/ritual"
"github.com/CemAkan/pastaay/pkg/metrics"
)
func main() {
// Load config & enable amnesia proof hot reload
cfg, _ := config.LoadConfig("pastaay.yaml")
cfgManager := config.NewManager(cfg)
config.WatchConfig("pastaay.yaml", cfgManager.Update)
// Start Prometheus metrics server
go metrics.StartServer(":2112")
// Setup your standard router
mux := http.NewServeMux()
mux.HandleFunc("/api/hello", func(w http.ResponseWriter, r *http.Request) {
w.Write([]byte("Hello, World!"))
})
// Wrap with Pastaay Chaos Middleware
chaosHandler := ritual.Middleware(cfgManager)(mux)
http.ListenAndServe(":8080", chaosHandler)
}
# Register the CRD
make -C operator install
# Deploy the operator to your cluster
make -C operator deploy IMG=<your-registry>/pastaay-operator:v2.3.1
Pastaay ships with two distinct examples to help you understand both its integration mechanics and its real time reactivity. 1. The Integration Demo A complete, hardened microservice stack (URL Shortener API, PostgreSQL, Redis, MongoDB, Kafka, RabbitMQ) showing how to securely integrate Pastaay without race conditions.
cd examples/demo
docker compose up -d --build
docker compose logs -f app
http://localhost:8080http://localhost:2112/metricshttp://localhost:9090Grafana: http://localhost:3000
The TUI Visualizer (Vortex) A standalone terminal user interface built to demonstrate Pastaay's amnesia proof hot reloading. This is the source of the GIF shown above. cd examples/visualizer
cd examples/visualizer
# Note: Use 'run' instead of 'up' to ensure a clean TTY for the visualizer
docker compose run --rm --service-ports app
Contributions from the community are always welcome❤️ Whether you are looking to build a new protocol interceptor, patch a core bug, or refine the documentation, your input is highly valued.
Please read the Contributing Guide for detailed instructions on the development workflow, core architectural guidelines (including pointer safety and interceptor fallbacks), and how to submit a Pull Request.
Pastaay is open source software licensed under the MIT License.
I Built a Chaos Engine That Goes Where No Tool Has Gone Before
16 sections covering every interceptor, the watcher, the guard, the Oracle prompt engineering, and the production bugs I hit along the way.

$ claude mcp add pastaay \
-- python -m otcore.mcp_server <graph>