initial commit
Some checks failed
CI Pipeline / Build and Test (push) Successful in 4s
Security Scanning / Trivy — Filesystem & Dependency Scan (push) Failing after 7s
Security Scanning / Gitleaks — Secret Scan (push) Failing after 7s
Security Scanning / Security Summary (push) Failing after 3s
Build and Publish TechDocs / build-and-publish (push) Successful in 1m2s
Some checks failed
CI Pipeline / Build and Test (push) Successful in 4s
Security Scanning / Trivy — Filesystem & Dependency Scan (push) Failing after 7s
Security Scanning / Gitleaks — Secret Scan (push) Failing after 7s
Security Scanning / Security Summary (push) Failing after 3s
Build and Publish TechDocs / build-and-publish (push) Successful in 1m2s
Change-Id: I8e318861a258686ddc53dda08858f74c573a6520
This commit is contained in:
@@ -0,0 +1,48 @@
|
||||
---
|
||||
# Source: opentelemetry-demo/charts/opentelemetry-collector/templates/clusterrole.yaml
|
||||
apiVersion: rbac.authorization.k8s.io/v1
|
||||
kind: ClusterRole
|
||||
metadata:
|
||||
name: otel-collector
|
||||
labels:
|
||||
helm.sh/chart: opentelemetry-collector-0.142.2
|
||||
app.kubernetes.io/name: opentelemetry-collector
|
||||
app.kubernetes.io/instance: example
|
||||
app.kubernetes.io/version: "0.142.0"
|
||||
app.kubernetes.io/managed-by: Helm
|
||||
app.kubernetes.io/part-of: opentelemetry-collector
|
||||
app.kubernetes.io/component: agent-collector
|
||||
rules:
|
||||
- apiGroups: ["coordination.k8s.io"]
|
||||
resources: ["leases"]
|
||||
verbs: ["get","list","watch","create","update","patch","delete"]
|
||||
- apiGroups: [""]
|
||||
resources: ["pods", "namespaces"]
|
||||
verbs: ["get", "watch", "list"]
|
||||
- apiGroups: ["apps"]
|
||||
resources: ["replicasets"]
|
||||
verbs: ["get", "list", "watch"]
|
||||
- apiGroups: ["extensions"]
|
||||
resources: ["replicasets"]
|
||||
verbs: ["get", "list", "watch"]
|
||||
- apiGroups: [""]
|
||||
resources: ["events", "namespaces", "namespaces/status", "nodes", "nodes/spec", "pods", "pods/status", "replicationcontrollers", "replicationcontrollers/status", "resourcequotas", "services" ]
|
||||
verbs: ["get", "list", "watch"]
|
||||
- apiGroups: ["apps"]
|
||||
resources: ["daemonsets", "deployments", "replicasets", "statefulsets"]
|
||||
verbs: ["get", "list", "watch"]
|
||||
- apiGroups: ["extensions"]
|
||||
resources: ["daemonsets", "deployments", "replicasets"]
|
||||
verbs: ["get", "list", "watch"]
|
||||
- apiGroups: ["batch"]
|
||||
resources: ["jobs", "cronjobs"]
|
||||
verbs: ["get", "list", "watch"]
|
||||
- apiGroups: ["autoscaling"]
|
||||
resources: ["horizontalpodautoscalers"]
|
||||
verbs: ["get", "list", "watch"]
|
||||
- apiGroups: [""]
|
||||
resources: ["nodes/stats"]
|
||||
verbs: ["get", "watch", "list"]
|
||||
- apiGroups: [""]
|
||||
resources: ["pods"]
|
||||
verbs: ["get", "list", "watch"]
|
||||
@@ -0,0 +1,22 @@
|
||||
---
|
||||
# Source: opentelemetry-demo/charts/opentelemetry-collector/templates/clusterrolebinding.yaml
|
||||
apiVersion: rbac.authorization.k8s.io/v1
|
||||
kind: ClusterRoleBinding
|
||||
metadata:
|
||||
name: otel-collector
|
||||
labels:
|
||||
helm.sh/chart: opentelemetry-collector-0.142.2
|
||||
app.kubernetes.io/name: opentelemetry-collector
|
||||
app.kubernetes.io/instance: example
|
||||
app.kubernetes.io/version: "0.142.0"
|
||||
app.kubernetes.io/managed-by: Helm
|
||||
app.kubernetes.io/part-of: opentelemetry-collector
|
||||
app.kubernetes.io/component: agent-collector
|
||||
roleRef:
|
||||
apiGroup: rbac.authorization.k8s.io
|
||||
kind: ClusterRole
|
||||
name: otel-collector
|
||||
subjects:
|
||||
- kind: ServiceAccount
|
||||
name: otel-collector
|
||||
namespace: default
|
||||
@@ -0,0 +1,283 @@
|
||||
---
|
||||
# Source: opentelemetry-demo/charts/opentelemetry-collector/templates/configmap-agent.yaml
|
||||
apiVersion: v1
|
||||
kind: ConfigMap
|
||||
metadata:
|
||||
name: otel-collector-agent
|
||||
namespace: default
|
||||
labels:
|
||||
helm.sh/chart: opentelemetry-collector-0.142.2
|
||||
app.kubernetes.io/name: opentelemetry-collector
|
||||
app.kubernetes.io/instance: example
|
||||
app.kubernetes.io/version: "0.142.0"
|
||||
app.kubernetes.io/managed-by: Helm
|
||||
app.kubernetes.io/part-of: opentelemetry-collector
|
||||
app.kubernetes.io/component: agent-collector
|
||||
data:
|
||||
relay: |
|
||||
connectors:
|
||||
spanmetrics: {}
|
||||
exporters:
|
||||
debug: {}
|
||||
opensearch:
|
||||
http:
|
||||
endpoint: http://opensearch:9200
|
||||
tls:
|
||||
insecure: true
|
||||
logs_index: otel-logs
|
||||
logs_index_time_format: yyyy-MM-dd
|
||||
otlp/jaeger:
|
||||
endpoint: jaeger:4317
|
||||
sending_queue:
|
||||
batch: null
|
||||
tls:
|
||||
insecure: true
|
||||
otlphttp/prometheus:
|
||||
endpoint: http://prometheus:9090/api/v1/otlp
|
||||
sending_queue:
|
||||
batch: null
|
||||
tls:
|
||||
insecure: true
|
||||
extensions:
|
||||
health_check:
|
||||
endpoint: ${env:MY_POD_IP}:13133
|
||||
k8s_leader_elector/k8s_cluster:
|
||||
auth_type: serviceAccount
|
||||
lease_name: k8s.cluster.receiver.opentelemetry.io
|
||||
lease_namespace: default
|
||||
k8s_observer:
|
||||
auth_type: serviceAccount
|
||||
node: ${env:K8S_NODE_NAME}
|
||||
processors:
|
||||
attributes:
|
||||
actions:
|
||||
- action: insert
|
||||
key: app.eng.team
|
||||
value: ring
|
||||
include:
|
||||
match_type: strict
|
||||
services:
|
||||
- frontend-proxy
|
||||
batch: {}
|
||||
k8sattributes:
|
||||
extract:
|
||||
metadata:
|
||||
- k8s.namespace.name
|
||||
- k8s.pod.name
|
||||
- k8s.pod.uid
|
||||
- k8s.node.name
|
||||
- k8s.pod.start_time
|
||||
- k8s.deployment.name
|
||||
- k8s.replicaset.name
|
||||
- k8s.replicaset.uid
|
||||
- k8s.daemonset.name
|
||||
- k8s.daemonset.uid
|
||||
- k8s.job.name
|
||||
- k8s.job.uid
|
||||
- k8s.container.name
|
||||
- k8s.cronjob.name
|
||||
- k8s.statefulset.name
|
||||
- k8s.statefulset.uid
|
||||
- container.image.tag
|
||||
- container.image.name
|
||||
- k8s.cluster.uid
|
||||
- service.namespace
|
||||
- service.name
|
||||
- service.version
|
||||
- service.instance.id
|
||||
otel_annotations: true
|
||||
filter:
|
||||
node_from_env_var: K8S_NODE_NAME
|
||||
passthrough: false
|
||||
pod_association:
|
||||
- sources:
|
||||
- from: resource_attribute
|
||||
name: k8s.pod.ip
|
||||
- sources:
|
||||
- from: resource_attribute
|
||||
name: k8s.pod.uid
|
||||
- sources:
|
||||
- from: connection
|
||||
memory_limiter:
|
||||
check_interval: 5s
|
||||
limit_percentage: 80
|
||||
spike_limit_percentage: 25
|
||||
resource:
|
||||
attributes:
|
||||
- action: insert
|
||||
from_attribute: k8s.pod.uid
|
||||
key: service.instance.id
|
||||
resourcedetection:
|
||||
detectors:
|
||||
- env
|
||||
- system
|
||||
transform:
|
||||
error_mode: ignore
|
||||
trace_statements:
|
||||
- conditions:
|
||||
- span.kind == SPAN_KIND_SERVER and resource.attributes["service.name"] == "frontend"
|
||||
and span.attributes["http.route"] == nil
|
||||
context: span
|
||||
statements:
|
||||
- set(span.attributes["http.route"], "/api/cart") where IsMatch(span.attributes["http.target"],
|
||||
"\\/api\\/cart")
|
||||
- set(span.attributes["http.route"], "/api/checkout") where IsMatch(span.attributes["http.target"],
|
||||
"\\/api\\/checkout")
|
||||
- set(span.attributes["http.route"], "/api/products/{productId}") where IsMatch(span.attributes["http.target"],
|
||||
"\\/api\\/products\\/.*")
|
||||
- set(span.attributes["http.route"], "/api/recommendations") where IsMatch(span.attributes["http.target"],
|
||||
"\\/api\\/recommendations")
|
||||
- set(span.attributes["http.route"], "/api/data") where IsMatch(span.attributes["http.target"],
|
||||
"\\/api\\/data.*")
|
||||
- context: span
|
||||
statements:
|
||||
- set_semconv_span_name("1.37.0", "unsanitized_span_name")
|
||||
receivers:
|
||||
hostmetrics:
|
||||
collection_interval: 10s
|
||||
root_path: /hostfs
|
||||
scrapers:
|
||||
cpu: null
|
||||
disk: null
|
||||
filesystem:
|
||||
exclude_fs_types:
|
||||
fs_types:
|
||||
- autofs
|
||||
- binfmt_misc
|
||||
- bpf
|
||||
- cgroup2
|
||||
- configfs
|
||||
- debugfs
|
||||
- devpts
|
||||
- devtmpfs
|
||||
- fusectl
|
||||
- hugetlbfs
|
||||
- iso9660
|
||||
- mqueue
|
||||
- nsfs
|
||||
- overlay
|
||||
- proc
|
||||
- procfs
|
||||
- pstore
|
||||
- rpc_pipefs
|
||||
- securityfs
|
||||
- selinuxfs
|
||||
- squashfs
|
||||
- sysfs
|
||||
- tracefs
|
||||
match_type: strict
|
||||
exclude_mount_points:
|
||||
match_type: regexp
|
||||
mount_points:
|
||||
- /dev/*
|
||||
- /proc/*
|
||||
- /sys/*
|
||||
- /run/k3s/containerd/*
|
||||
- /var/lib/docker/*
|
||||
- /var/lib/kubelet/*
|
||||
- /snap/*
|
||||
load: null
|
||||
memory: null
|
||||
network: null
|
||||
jaeger:
|
||||
protocols:
|
||||
grpc:
|
||||
endpoint: ${env:MY_POD_IP}:14250
|
||||
thrift_compact:
|
||||
endpoint: ${env:MY_POD_IP}:6831
|
||||
thrift_http:
|
||||
endpoint: ${env:MY_POD_IP}:14268
|
||||
k8s_cluster:
|
||||
collection_interval: 10s
|
||||
k8s_leader_elector: k8s_leader_elector/k8s_cluster
|
||||
kubeletstats:
|
||||
auth_type: serviceAccount
|
||||
collection_interval: 20s
|
||||
endpoint: ${env:K8S_NODE_IP}:10250
|
||||
otlp:
|
||||
protocols:
|
||||
grpc:
|
||||
endpoint: ${env:MY_POD_IP}:4317
|
||||
http:
|
||||
cors:
|
||||
allowed_origins:
|
||||
- http://*
|
||||
- https://*
|
||||
endpoint: ${env:MY_POD_IP}:4318
|
||||
prometheus:
|
||||
config:
|
||||
scrape_configs:
|
||||
- job_name: opentelemetry-collector
|
||||
scrape_interval: 10s
|
||||
static_configs:
|
||||
- targets:
|
||||
- ${env:MY_POD_IP}:8888
|
||||
receiver_creator/metrics:
|
||||
discovery:
|
||||
enabled: true
|
||||
watch_observers:
|
||||
- k8s_observer
|
||||
zipkin:
|
||||
endpoint: ${env:MY_POD_IP}:9411
|
||||
service:
|
||||
extensions:
|
||||
- health_check
|
||||
- k8s_observer
|
||||
- k8s_leader_elector/k8s_cluster
|
||||
pipelines:
|
||||
logs:
|
||||
exporters:
|
||||
- opensearch
|
||||
- debug
|
||||
processors:
|
||||
- k8sattributes
|
||||
- memory_limiter
|
||||
- resourcedetection
|
||||
- resource
|
||||
- batch
|
||||
receivers:
|
||||
- otlp
|
||||
metrics:
|
||||
exporters:
|
||||
- otlphttp/prometheus
|
||||
- debug
|
||||
processors:
|
||||
- k8sattributes
|
||||
- memory_limiter
|
||||
- resourcedetection
|
||||
- resource
|
||||
- batch
|
||||
receivers:
|
||||
- otlp
|
||||
- spanmetrics
|
||||
- receiver_creator/metrics
|
||||
- hostmetrics
|
||||
- kubeletstats
|
||||
- k8s_cluster
|
||||
traces:
|
||||
exporters:
|
||||
- otlp/jaeger
|
||||
- debug
|
||||
- spanmetrics
|
||||
processors:
|
||||
- k8sattributes
|
||||
- memory_limiter
|
||||
- attributes
|
||||
- spanmetrics
|
||||
- batch
|
||||
receivers:
|
||||
- otlp
|
||||
- jaeger
|
||||
- zipkin
|
||||
telemetry:
|
||||
metrics:
|
||||
level: detailed
|
||||
readers:
|
||||
- periodic:
|
||||
exporter:
|
||||
otlp:
|
||||
endpoint: http://otel-collector:4318
|
||||
insecure: true
|
||||
protocol: http/protobuf
|
||||
interval: 10000
|
||||
timeout: 5000
|
||||
@@ -0,0 +1,122 @@
|
||||
---
|
||||
# Source: opentelemetry-demo/charts/opentelemetry-collector/templates/daemonset.yaml
|
||||
apiVersion: apps/v1
|
||||
kind: DaemonSet
|
||||
metadata:
|
||||
name: otel-collector-agent
|
||||
namespace: default
|
||||
labels:
|
||||
helm.sh/chart: opentelemetry-collector-0.142.2
|
||||
app.kubernetes.io/name: opentelemetry-collector
|
||||
app.kubernetes.io/instance: example
|
||||
app.kubernetes.io/version: "0.142.0"
|
||||
app.kubernetes.io/managed-by: Helm
|
||||
app.kubernetes.io/part-of: opentelemetry-collector
|
||||
app.kubernetes.io/component: agent-collector
|
||||
spec:
|
||||
revisionHistoryLimit: 10
|
||||
selector:
|
||||
matchLabels:
|
||||
app.kubernetes.io/name: opentelemetry-collector
|
||||
app.kubernetes.io/instance: example
|
||||
component: agent-collector
|
||||
updateStrategy:
|
||||
type: RollingUpdate
|
||||
template:
|
||||
metadata:
|
||||
annotations:
|
||||
checksum/config: 84c67e88758a9d855cb1e31ff140d3c476c5388d66cfd1b6fecf481f17b49c52
|
||||
|
||||
labels:
|
||||
app.kubernetes.io/name: opentelemetry-collector
|
||||
app.kubernetes.io/instance: example
|
||||
component: agent-collector
|
||||
|
||||
spec:
|
||||
|
||||
serviceAccountName: otel-collector
|
||||
automountServiceAccountToken: true
|
||||
securityContext:
|
||||
{}
|
||||
containers:
|
||||
- name: opentelemetry-collector
|
||||
args:
|
||||
- --config=/conf/relay.yaml
|
||||
securityContext:
|
||||
{}
|
||||
image: "otel/opentelemetry-collector-contrib:0.142.0"
|
||||
imagePullPolicy: IfNotPresent
|
||||
ports:
|
||||
|
||||
- name: jaeger-compact
|
||||
containerPort: 6831
|
||||
protocol: UDP
|
||||
hostPort: 6831
|
||||
- name: jaeger-grpc
|
||||
containerPort: 14250
|
||||
protocol: TCP
|
||||
hostPort: 14250
|
||||
- name: jaeger-thrift
|
||||
containerPort: 14268
|
||||
protocol: TCP
|
||||
hostPort: 14268
|
||||
- name: metrics
|
||||
containerPort: 8888
|
||||
protocol: TCP
|
||||
- name: otlp
|
||||
containerPort: 4317
|
||||
protocol: TCP
|
||||
hostPort: 4317
|
||||
- name: otlp-http
|
||||
containerPort: 4318
|
||||
protocol: TCP
|
||||
hostPort: 4318
|
||||
- name: zipkin
|
||||
containerPort: 9411
|
||||
protocol: TCP
|
||||
hostPort: 9411
|
||||
env:
|
||||
- name: MY_POD_IP
|
||||
valueFrom:
|
||||
fieldRef:
|
||||
apiVersion: v1
|
||||
fieldPath: status.podIP
|
||||
- name: K8S_NODE_NAME
|
||||
valueFrom:
|
||||
fieldRef:
|
||||
fieldPath: spec.nodeName
|
||||
- name: K8S_NODE_IP
|
||||
valueFrom:
|
||||
fieldRef:
|
||||
fieldPath: status.hostIP
|
||||
- name: GOMEMLIMIT
|
||||
value: "160MiB"
|
||||
livenessProbe:
|
||||
httpGet:
|
||||
path: /
|
||||
port: 13133
|
||||
readinessProbe:
|
||||
httpGet:
|
||||
path: /
|
||||
port: 13133
|
||||
resources:
|
||||
limits:
|
||||
memory: 200Mi
|
||||
volumeMounts:
|
||||
- mountPath: /conf
|
||||
name: opentelemetry-collector-configmap
|
||||
- name: hostfs
|
||||
mountPath: /hostfs
|
||||
readOnly: true
|
||||
mountPropagation: HostToContainer
|
||||
volumes:
|
||||
- name: opentelemetry-collector-configmap
|
||||
configMap:
|
||||
name: otel-collector-agent
|
||||
items:
|
||||
- key: relay
|
||||
path: relay.yaml
|
||||
- name: hostfs
|
||||
hostPath:
|
||||
path: /
|
||||
hostNetwork: false
|
||||
@@ -0,0 +1,54 @@
|
||||
---
|
||||
# Source: opentelemetry-demo/charts/opentelemetry-collector/templates/service.yaml
|
||||
apiVersion: v1
|
||||
kind: Service
|
||||
metadata:
|
||||
name: otel-collector
|
||||
namespace: default
|
||||
labels:
|
||||
helm.sh/chart: opentelemetry-collector-0.142.2
|
||||
app.kubernetes.io/name: opentelemetry-collector
|
||||
app.kubernetes.io/instance: example
|
||||
app.kubernetes.io/version: "0.142.0"
|
||||
app.kubernetes.io/managed-by: Helm
|
||||
app.kubernetes.io/part-of: opentelemetry-collector
|
||||
app.kubernetes.io/component: agent-collector
|
||||
component: agent-collector
|
||||
spec:
|
||||
type: ClusterIP
|
||||
ports:
|
||||
|
||||
- name: jaeger-compact
|
||||
port: 6831
|
||||
targetPort: 6831
|
||||
protocol: UDP
|
||||
- name: jaeger-grpc
|
||||
port: 14250
|
||||
targetPort: 14250
|
||||
protocol: TCP
|
||||
- name: jaeger-thrift
|
||||
port: 14268
|
||||
targetPort: 14268
|
||||
protocol: TCP
|
||||
- name: metrics
|
||||
port: 8888
|
||||
targetPort: 8888
|
||||
protocol: TCP
|
||||
- name: otlp
|
||||
port: 4317
|
||||
targetPort: 4317
|
||||
protocol: TCP
|
||||
appProtocol: grpc
|
||||
- name: otlp-http
|
||||
port: 4318
|
||||
targetPort: 4318
|
||||
protocol: TCP
|
||||
- name: zipkin
|
||||
port: 9411
|
||||
targetPort: 9411
|
||||
protocol: TCP
|
||||
selector:
|
||||
app.kubernetes.io/name: opentelemetry-collector
|
||||
app.kubernetes.io/instance: example
|
||||
component: agent-collector
|
||||
internalTrafficPolicy: Local
|
||||
@@ -0,0 +1,15 @@
|
||||
---
|
||||
# Source: opentelemetry-demo/charts/opentelemetry-collector/templates/serviceaccount.yaml
|
||||
apiVersion: v1
|
||||
kind: ServiceAccount
|
||||
metadata:
|
||||
name: otel-collector
|
||||
namespace: default
|
||||
labels:
|
||||
helm.sh/chart: opentelemetry-collector-0.142.2
|
||||
app.kubernetes.io/name: opentelemetry-collector
|
||||
app.kubernetes.io/instance: example
|
||||
app.kubernetes.io/version: "0.142.0"
|
||||
app.kubernetes.io/managed-by: Helm
|
||||
app.kubernetes.io/part-of: opentelemetry-collector
|
||||
app.kubernetes.io/component: agent-collector
|
||||
Reference in New Issue
Block a user