feat(ddm): Implement global abuse limits for metrics

src/sentry/options/defaults.py

@@ -998,6 +998,14 @@
     flags=FLAG_PRIORITIZE_DISK | FLAG_AUTOMATOR_MODIFIABLE,
 )
 
+
+register(
+    "global-abuse-quota.metric-bucket-limit",
+    type=Int,
+    default=0,
+    flags=FLAG_PRIORITIZE_DISK | FLAG_AUTOMATOR_MODIFIABLE,
+)
+
 # END ABUSE QUOTAS
 
 # Send event messages for specific project IDs to random partitions in Kafka

src/sentry/quotas/base.py

@@ -22,6 +22,7 @@ class QuotaScope(IntEnum):
     ORGANIZATION = 1
     PROJECT = 2
     KEY = 3
+    GLOBAL = 4
 
     def api_name(self):
         return self.name.lower()
@@ -36,7 +37,7 @@ class AbuseQuota:
     # Quota categories.
     categories: list[DataCategory]
     # Quota Scope.
-    scope: Literal[QuotaScope.ORGANIZATION, QuotaScope.PROJECT]
+    scope: Literal[QuotaScope.ORGANIZATION, QuotaScope.PROJECT, QuotaScope.GLOBAL]
     # Old org option name still used for compatibility reasons,
     # takes precedence over `option` and `compat_option_sentry`.
     compat_option_org: str | None = None
@@ -404,6 +405,12 @@ def get_abuse_quotas(self, org):
                 categories=[DataCategory.METRIC_BUCKET],
                 scope=QuotaScope.ORGANIZATION,
             ),
+            AbuseQuota(
+                id="gam",
+                option="global-abuse-quota.metric-bucket-limit",
+                categories=[DataCategory.METRIC_BUCKET],
+                scope=QuotaScope.GLOBAL,
+            ),
         ]
 
         # XXX: These reason codes are hardcoded in getsentry:
@@ -412,6 +419,7 @@ def get_abuse_quotas(self, org):
         reason_codes = {
             QuotaScope.ORGANIZATION: "org_abuse_limit",
             QuotaScope.PROJECT: "project_abuse_limit",
+            QuotaScope.GLOBAL: "global_abuse_limit",
         }
 
         for quota in abuse_quotas:

tests/sentry/quotas/test_base.py

@@ -159,6 +159,14 @@ def test_check_accept_monitor_checkin(self):
                 "reasonCode": "go_away",
             },
         ),
+        (
+            QuotaConfig(limit=0, scope=QuotaScope.GLOBAL, reason_code="come back!"),
+            {
+                "limit": 0,
+                "scope": "global",
+                "reasonCode": "come back!",
+            },
+        ),
     ],
 )
 def test_quotas_to_json(obj, json):

tests/sentry/quotas/test_redis.py

@@ -71,6 +71,12 @@ class RedisQuotaTest(TestCase):
     def quota(self):
         return RedisQuota()
 
+    def test_redis_quota_serialize(self):
+        assert QuotaScope.ORGANIZATION.api_name() == "organization"
+        assert QuotaScope.PROJECT.api_name() == "project"
+        assert QuotaScope.KEY.api_name() == "key"
+        assert QuotaScope.GLOBAL.api_name() == "global"
+
     def test_abuse_quotas(self):
         # These legacy options need to be set, otherwise we'll run into
         # AssertionError: reject-all quotas cannot be tracked
@@ -113,6 +119,7 @@ def test_abuse_quotas(self):
         self.organization.update_option("project-abuse-quota.attachment-limit", 601)
         self.organization.update_option("project-abuse-quota.session-limit", 602)
         self.organization.update_option("organization-abuse-quota.metric-bucket-limit", 603)
+        self.organization.update_option("global-abuse-quota.metric-bucket-limit", 604)
         with self.feature("organizations:transaction-metrics-extraction"):
             quotas = self.quota.get_quotas(self.project)
 
@@ -148,6 +155,14 @@ def test_abuse_quotas(self):
         assert quotas[4].window == 10
         assert quotas[4].reason_code == "org_abuse_limit"
 
+        assert quotas[5].id == "gam"
+        assert quotas[5].scope == QuotaScope.GLOBAL
+        assert quotas[5].scope_id is None
+        assert quotas[5].categories == {DataCategory.METRIC_BUCKET}
+        assert quotas[5].limit == 6040
+        assert quotas[5].window == 10
+        assert quotas[5].reason_code == "global_abuse_limit"
+
         # Let's set the global option for error limits.
         # Since we already have an org override for it, it shouldn't change anything.
         with self.options({"project-abuse-quota.error-limit": 3}):