Add opentelemetry-kube-stack

Author: Utwo

monitoring/argo-apps/opentelemetry-kube-stack.yaml

@@ -0,0 +1,47 @@
+apiVersion: argoproj.io/v1alpha1
+kind: ApplicationSet
+metadata:
+  name: opentelemetry-kube-stack
+  namespace: argocd
+spec:
+  goTemplate: true
+  generators:
+    - clusters:
+        selector:
+          matchLabels:
+            monitoring: "true"
+        values:
+          clusterName: "{{.name}}"
+    - list:
+        elements:
+          - name: in-cluster
+            values:
+              clusterName: k3d-control
+  template:
+    metadata:
+      name: "opentelemetry-kube-stack-{{.values.clusterName}}"
+    spec:
+      project: monitoring
+      sources:
+        - repoURL: https://github.com/Utwo/k8s-playground
+          path: monitoring/opentelemetry-kube-stack
+          targetRevision: HEAD
+          ref: myRepo # repo is available via symlink "myRepo"
+        - repoURL: https://open-telemetry.github.io/opentelemetry-helm-charts
+          targetRevision: 0.4.1
+          chart: opentelemetry-kube-stack
+          helm:
+            ignoreMissingValueFiles: true
+            valueFiles:
+              - $myRepo/monitoring/opentelemetry-kube-stack/helm-chart-values/clusters/all/values.yaml
+              - $myRepo/monitoring/opentelemetry-kube-stack/helm-chart-values/clusters/{{.values.clusterName}}/values.yaml
+            parameters:
+              - name: "clusterName"
+                value: "{{.values.clusterName}}"
+      destination:
+        name: "{{.name}}"
+        namespace: opentelemetry-kube-stack
+      syncPolicy:
+        syncOptions:
+          - CreateNamespace=true
+          - ServerSideApply=true

monitoring/opentelemetry-kube-stack/helm-chart-values/clusters/all/values.yaml

@@ -0,0 +1,100 @@
+fullnameOverride: otel-kube-stack
+collectors:
+  daemon:
+    ports:
+      - appProtocol: grpc
+        name: otlp-grpc
+        port: 4317
+        protocol: TCP
+        hostPort: 4317 # Force the hostPort
+    env:
+      - name: PROMETHEUS_AUTH_TOKEN
+        valueFrom:
+          secretKeyRef:
+            key: PROMETHEUS_AUTH_TOKEN
+            name: otel-collector-secret
+      - name: LOKI_USERNAME
+        valueFrom:
+          secretKeyRef:
+            key: LOKI_USERNAME
+            name: otel-collector-secret
+      - name: LOKI_PASSWORD
+        valueFrom:
+          secretKeyRef:
+            key: LOKI_PASSWORD
+            name: otel-collector-secret
+    config:
+      exporters:
+        otlp/tempo:
+          endpoint: tempo.tempo.svc.cluster.local:4317
+          headers:
+            "Authorization": "Bearer ${PROMETHEUS_AUTH_TOKEN}"
+          tls:
+            insecure: true
+        otlphttp/logs:
+          endpoint: "http://loki-gateway.loki.svc.cluster.local/otlp"
+          auth:
+            authenticator: basicauth/loki
+          headers:
+            "X-Scope-OrgID": "my_org"
+          tls:
+            insecure: true
+        otlphttp/victoriametrics:
+          compression: gzip
+          encoding: proto
+          metrics_endpoint: http://vmsingle-server.victoria-metrics.svc.cluster.local:8429/opentelemetry/v1/metrics
+          headers:
+            "Authorization": "Bearer ${PROMETHEUS_AUTH_TOKEN}"
+          tls:
+            insecure: true
+      extensions:
+        basicauth/loki:
+          client_auth:
+            username: ${LOKI_USERNAME}
+            password: ${LOKI_PASSWORD}
+      service:
+        extensions: [basicauth/loki]
+        pipelines:
+          metrics:
+            exporters: [otlphttp/victoriametrics]
+          traces:
+            exporters: [otlp/tempo]
+          logs:
+            exporters: [otlphttp/logs]
+  cluster:
+    env:
+      - name: PROMETHEUS_AUTH_TOKEN
+        valueFrom:
+          secretKeyRef:
+            key: PROMETHEUS_AUTH_TOKEN
+            name: otel-collector-secret
+    config:
+      exporters:
+        otlphttp/victoriametrics:
+          compression: gzip
+          encoding: proto
+          metrics_endpoint: http://vmsingle-server.victoria-metrics.svc.cluster.local:8429/opentelemetry/v1/metrics
+          headers:
+            "Authorization": "Bearer ${PROMETHEUS_AUTH_TOKEN}"
+          tls:
+            insecure: true
+      service:
+        pipelines:
+          metrics:
+            exporters: [otlphttp/victoriametrics]
+instrumentation:
+  enabled: true
+  env:
+    - name: OTEL_K8S_NODE_NAME
+      valueFrom:
+        fieldRef:
+          fieldPath: spec.nodeName
+  exporter:
+    endpoint: http://${OTEL_K8S_NODE_NAME}:4317
+  python:
+    env:
+      - name: OTEL_EXPORTER_OTLP_ENDPOINT
+        value: http://${OTEL_K8S_NODE_NAME}:4318
+opAMPBridge:
+  enabled: true
+  addReportingLabel: true

monitoring/opentelemetry-kube-stack/helm-chart-values/clusters/k3d-control/values.yaml

@@ -0,0 +1,33 @@
+apiVersion: isindir.github.com/v1alpha3
+kind: SopsSecret
+metadata:
+    name: otel-collector-secret
+spec:
+    secretTemplates:
+        - name: otel-collector-secret
+          stringData:
+            PROMETHEUS_AUTH_TOKEN: ENC[AES256_GCM,data:eif9u0ppMXHKsBp9,iv:SIOkp6mL2dltqYWHgd7RqZmfgNo1FkSFWV2z8WEAZHk=,tag:rlKWcpyIgAceTFwurX7v8A==,type:str]
+            LOKI_USERNAME: ENC[AES256_GCM,data:htjFMxc=,iv:Yk3HV1qNO/z5aCpnzge3Jub35GZnADaVck2BvNJUb1k=,tag:J1Vnh/fFUBfcZSLJRwUopw==,type:str]
+            LOKI_PASSWORD: ENC[AES256_GCM,data:sIMAHHs=,iv:AQwTMe2eeC5w53O7DQQ84KYbr6Yl24i7YajG+8VlIyk=,tag:c8hXdUPrqi8vgmjN9my1Mg==,type:str]
+            TEMPO_USERNAME: ENC[AES256_GCM,data:I4g3pGw=,iv:IBYnnHnlpdwiyQEQZZlSN6mjO6ZimGzIpCMvtuRAeUE=,tag:TgltWlWL3wEUEB735OMfQA==,type:str]
+            TEMPO_PASSWORD: ENC[AES256_GCM,data:5jXqGy8=,iv:9wOvJL9nrjQmdJRJIr5RXgVA09pb0ckvZuz243WOJBU=,tag:DCgFAsAWGLXh3erLTeDmWw==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age1g7mudl58ufepz8nf5hyksnnhzkursvwumlvm5xc9td0uqlq2j4ys6y9rpm
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBKZzFJMVFFa3RSVFk3dmZx
+            b3RIK1dKV0VLcFlMY2M3WnZTYTg0R25RUDFrCnZqZmVZLzdkZDBWc0NmclpuU1ho
+            NU5aRVI5eFdhYVp0QWZPTzhhSm9WQmcKLS0tIFh0eVJXdjJGUlM0K1prdit6SlFE
+            RkNjR1NVRkRreGNjTkYxZDV2RGQ0akEKt+Qcq+myewC2XZyd4R+HBV0r/624wyfw
+            LT5y0baMXjdoNKLxJBIoC4KKOzeLWFOpjuMdCwejYmr1175/mqj/5Q==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2025-02-25T15:50:34Z"
+    mac: ENC[AES256_GCM,data:toW3GMbJqf7H5l3GbaWZzpvts4rvs6/p027Y9LrX4TtPSOXYbZ8WLPGg9tckJhe+oVObdAOQKhdAzmGO1NoobBrhKahqs9u1UMfyJDKuXSi0oGhBF549+kJKkCuY1BoHqbYK3YHd7Dbrj/Q6vVZD2LjP3s1kT5yTscqs2QP5C8M=,iv:1VgkoqdxUbpU3UeMIVhMBq+vZay2L9zCxd2i5rkaPAA=,tag:U/zwToAVHlTYIYYWI6jeJg==,type:str]
+    pgp: []
+    encrypted_regex: ^(data|stringData)$
+    version: 3.9.4

monitoring/opentelemetry-kube-stack/otel-secret.yaml

@@ -7,5 +7,6 @@ spec:
   extraArgs:
     opentsdbHTTPListenAddr: ":4242"
     loggerLevel: WARN
+    opentelemetry.usePrometheusNaming: "true"
     vmalert.proxyURL: "http://vmalert-alert-server:8080"
   resources: {}