From 8dd653745965c470caea0547b09d1cc0299e9183 Mon Sep 17 00:00:00 2001 From: Cyrille Le Clerc Date: Tue, 19 May 2026 11:59:16 +0200 Subject: [PATCH 01/11] [kube-stack] add prometheus option to annotationDiscovery.metrics preset Adds presets.annotationDiscovery.metrics.prometheus.enabled to the kube-stack chart. When enabled (requires metrics.enabled: true), the chart adds a standalone prometheus/annotation_discovery receiver to the metrics pipeline, configured with Kubernetes pod service discovery and Prometheus relabel rules to scrape pods on the same node carrying classic Prometheus annotations (prometheus.io/scrape=true, prometheus.io/port, prometheus.io/path, prometheus.io/scheme). A nested option presets.annotationDiscovery.metrics.prometheus.addPrometheusLabels (default false) gates whether the scrape config emits Prometheus-style Kubernetes labels (namespace, pod, and all pod labels via __meta_kubernetes_pod_label_*). When false, only the standard job / instance labels are produced, leaving the k8sattributes processor as the sole source of Kubernetes metadata. Bumps chart version 0.15.0 -> 0.15.1 and enables the new option in the daemonset-annotation-discovery-metrics example. --- charts/opentelemetry-kube-stack/Chart.yaml | 2 +- .../examples/cloud-demo/rendered/bridge.yaml | 2 +- .../cloud-demo/rendered/collector.yaml | 2 +- .../examples/cloud-demo/rendered/hooks.yaml | 2 +- .../cloud-demo/rendered/instrumentation.yaml | 2 +- .../rendered/collector.yaml | 2 +- .../rendered/hooks.yaml | 2 +- .../rendered/collector.yaml | 50 ++++++++++++++- .../rendered/hooks.yaml | 2 +- .../values.yaml | 2 + .../rendered/collector.yaml | 2 +- .../rendered/hooks.yaml | 2 +- .../examples/default/rendered/collector.yaml | 2 +- .../examples/default/rendered/hooks.yaml | 2 +- .../rendered/collector.yaml | 6 +- .../rendered/hooks.yaml | 2 +- .../rendered/collector.yaml | 4 +- .../rendered/hooks.yaml | 2 +- .../prometheus-otel/rendered/collector.yaml | 2 +- .../kube-api-server/servicemonitor.yaml | 2 +- .../kube-controller-manager/service.yaml | 2 +- .../servicemonitor.yaml | 2 +- .../rendered/exporters/kube-dns/service.yaml | 2 +- .../exporters/kube-dns/servicemonitor.yaml | 2 +- .../rendered/exporters/kube-etcd/service.yaml | 2 +- .../exporters/kube-etcd/servicemonitor.yaml | 2 +- .../exporters/kube-proxy/service.yaml | 2 +- .../exporters/kube-proxy/servicemonitor.yaml | 2 +- .../exporters/kube-scheduler/service.yaml | 2 +- .../kube-scheduler/servicemonitor.yaml | 2 +- .../prometheus-otel/rendered/hooks.yaml | 2 +- .../rendered/collector.yaml | 2 +- .../secrets-csi-driver/rendered/hooks.yaml | 2 +- .../templates/_config.tpl | 62 +++++++++++++++++++ .../values.schema.json | 15 +++++ charts/opentelemetry-kube-stack/values.yaml | 17 +++++ 36 files changed, 179 insertions(+), 35 deletions(-) diff --git a/charts/opentelemetry-kube-stack/Chart.yaml b/charts/opentelemetry-kube-stack/Chart.yaml index 55786916a7..517ac853cc 100644 --- a/charts/opentelemetry-kube-stack/Chart.yaml +++ b/charts/opentelemetry-kube-stack/Chart.yaml @@ -1,6 +1,6 @@ apiVersion: v2 name: opentelemetry-kube-stack -version: 0.15.0 +version: 0.15.1 description: | OpenTelemetry Quickstart chart for Kubernetes. Installs an operator and collector for an easy way to get started with Kubernetes observability. diff --git a/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/bridge.yaml b/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/bridge.yaml index caea42608a..a386b70f95 100644 --- a/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/bridge.yaml +++ b/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/bridge.yaml @@ -5,7 +5,7 @@ kind: OpAMPBridge metadata: name: example labels: - helm.sh/chart: opentelemetry-kube-stack-0.15.0 + helm.sh/chart: opentelemetry-kube-stack-0.15.1 app.kubernetes.io/version: "0.151.0" app.kubernetes.io/managed-by: Helm release: "example" diff --git a/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/collector.yaml b/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/collector.yaml index 2c992a1436..37c8c0858b 100644 --- a/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/collector.yaml +++ b/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/collector.yaml @@ -6,7 +6,7 @@ metadata: name: example-daemon namespace: default labels: - helm.sh/chart: opentelemetry-kube-stack-0.15.0 + helm.sh/chart: opentelemetry-kube-stack-0.15.1 app.kubernetes.io/version: "0.151.0" app.kubernetes.io/managed-by: Helm release: "example" diff --git a/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/hooks.yaml b/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/hooks.yaml index 3225d6dcc8..7abcc3a667 100644 --- a/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/hooks.yaml +++ b/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/hooks.yaml @@ -61,4 +61,4 @@ spec: - "delete" - "instrumentations,opampbridges,opentelemetrycollectors" - "-l" - - "helm.sh/chart=opentelemetry-kube-stack-0.15.0" + - "helm.sh/chart=opentelemetry-kube-stack-0.15.1" diff --git a/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/instrumentation.yaml b/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/instrumentation.yaml index 9fadae5cd1..7e3fe28f80 100644 --- a/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/instrumentation.yaml +++ b/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/instrumentation.yaml @@ -5,7 +5,7 @@ kind: Instrumentation metadata: name: example labels: - helm.sh/chart: opentelemetry-kube-stack-0.15.0 + helm.sh/chart: opentelemetry-kube-stack-0.15.1 app.kubernetes.io/version: "0.151.0" app.kubernetes.io/managed-by: Helm release: "example" diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/collector.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/collector.yaml index 9c641e9cd6..c150e452ec 100644 --- a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/collector.yaml +++ b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/collector.yaml @@ -6,7 +6,7 @@ metadata: name: example-daemon namespace: default labels: - helm.sh/chart: opentelemetry-kube-stack-0.15.0 + helm.sh/chart: opentelemetry-kube-stack-0.15.1 app.kubernetes.io/version: "0.151.0" app.kubernetes.io/managed-by: Helm release: "example" diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/hooks.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/hooks.yaml index 3225d6dcc8..7abcc3a667 100644 --- a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/hooks.yaml +++ b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/hooks.yaml @@ -61,4 +61,4 @@ spec: - "delete" - "instrumentations,opampbridges,opentelemetrycollectors" - "-l" - - "helm.sh/chart=opentelemetry-kube-stack-0.15.0" + - "helm.sh/chart=opentelemetry-kube-stack-0.15.1" diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/collector.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/collector.yaml index a5b49b4375..3e32a761ab 100644 --- a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/collector.yaml +++ b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/collector.yaml @@ -6,7 +6,7 @@ metadata: name: example-daemon namespace: default labels: - helm.sh/chart: opentelemetry-kube-stack-0.15.0 + helm.sh/chart: opentelemetry-kube-stack-0.15.1 app.kubernetes.io/version: "0.151.0" app.kubernetes.io/managed-by: Helm release: "example" @@ -43,6 +43,53 @@ spec: endpoint: 0.0.0.0:4317 http: endpoint: 0.0.0.0:4318 + prometheus/annotation_discovery: + config: + scrape_configs: + - job_name: kubernetes-pods + kubernetes_sd_configs: + - role: pod + selectors: + - field: spec.nodeName=${env:OTEL_K8S_NODE_NAME} + role: pod + relabel_configs: + - action: keep + regex: true + source_labels: + - __meta_kubernetes_pod_annotation_prometheus_io_scrape + - action: drop + regex: true + source_labels: + - __meta_kubernetes_pod_annotation_prometheus_io_scrape_slow + - action: replace + regex: (https?) + source_labels: + - __meta_kubernetes_pod_annotation_prometheus_io_scheme + target_label: __scheme__ + - action: replace + regex: (.+) + source_labels: + - __meta_kubernetes_pod_annotation_prometheus_io_path + target_label: __metrics_path__ + - action: replace + regex: ([^:]+)(?::\d+)?;(\d+) + replacement: $$1:$$2 + source_labels: + - __address__ + - __meta_kubernetes_pod_annotation_prometheus_io_port + target_label: __address__ + - action: labelmap + regex: __meta_kubernetes_pod_annotation_prometheus_io_param_(.+) + replacement: __param_$$1 + - action: drop + regex: Pending|Succeeded|Failed|Completed + source_labels: + - __meta_kubernetes_pod_phase + - action: replace + source_labels: + - __meta_kubernetes_pod_label_app_kubernetes_io_name + target_label: job + scrape_interval: 30s receiver_creator/metrics: discovery: enabled: true @@ -71,6 +118,7 @@ spec: receivers: - otlp - receiver_creator/metrics + - prometheus/annotation_discovery traces: exporters: - debug diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/hooks.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/hooks.yaml index 3225d6dcc8..7abcc3a667 100644 --- a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/hooks.yaml +++ b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/hooks.yaml @@ -61,4 +61,4 @@ spec: - "delete" - "instrumentations,opampbridges,opentelemetrycollectors" - "-l" - - "helm.sh/chart=opentelemetry-kube-stack-0.15.0" + - "helm.sh/chart=opentelemetry-kube-stack-0.15.1" diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/values.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/values.yaml index 9148e2a579..40ed3a3679 100644 --- a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/values.yaml +++ b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/values.yaml @@ -20,3 +20,5 @@ collectors: enabled: false metrics: enabled: true + prometheus: + enabled: true diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/collector.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/collector.yaml index dee759c407..e6f55a5385 100644 --- a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/collector.yaml +++ b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/collector.yaml @@ -6,7 +6,7 @@ metadata: name: example-daemon namespace: default labels: - helm.sh/chart: opentelemetry-kube-stack-0.15.0 + helm.sh/chart: opentelemetry-kube-stack-0.15.1 app.kubernetes.io/version: "0.151.0" app.kubernetes.io/managed-by: Helm release: "example" diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/hooks.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/hooks.yaml index 3225d6dcc8..7abcc3a667 100644 --- a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/hooks.yaml +++ b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/hooks.yaml @@ -61,4 +61,4 @@ spec: - "delete" - "instrumentations,opampbridges,opentelemetrycollectors" - "-l" - - "helm.sh/chart=opentelemetry-kube-stack-0.15.0" + - "helm.sh/chart=opentelemetry-kube-stack-0.15.1" diff --git a/charts/opentelemetry-kube-stack/examples/default/rendered/collector.yaml b/charts/opentelemetry-kube-stack/examples/default/rendered/collector.yaml index 3f4e144bc1..a030f9c8c0 100644 --- a/charts/opentelemetry-kube-stack/examples/default/rendered/collector.yaml +++ b/charts/opentelemetry-kube-stack/examples/default/rendered/collector.yaml @@ -6,7 +6,7 @@ metadata: name: example-daemon namespace: default labels: - helm.sh/chart: opentelemetry-kube-stack-0.15.0 + helm.sh/chart: opentelemetry-kube-stack-0.15.1 app.kubernetes.io/version: "0.151.0" app.kubernetes.io/managed-by: Helm release: "example" diff --git a/charts/opentelemetry-kube-stack/examples/default/rendered/hooks.yaml b/charts/opentelemetry-kube-stack/examples/default/rendered/hooks.yaml index 3225d6dcc8..7abcc3a667 100644 --- a/charts/opentelemetry-kube-stack/examples/default/rendered/hooks.yaml +++ b/charts/opentelemetry-kube-stack/examples/default/rendered/hooks.yaml @@ -61,4 +61,4 @@ spec: - "delete" - "instrumentations,opampbridges,opentelemetrycollectors" - "-l" - - "helm.sh/chart=opentelemetry-kube-stack-0.15.0" + - "helm.sh/chart=opentelemetry-kube-stack-0.15.1" diff --git a/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/collector.yaml b/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/collector.yaml index 96ca449389..beab5c2734 100644 --- a/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/collector.yaml +++ b/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/collector.yaml @@ -6,7 +6,7 @@ metadata: name: agent namespace: default labels: - helm.sh/chart: opentelemetry-kube-stack-0.15.0 + helm.sh/chart: opentelemetry-kube-stack-0.15.1 app.kubernetes.io/version: "0.151.0" app.kubernetes.io/managed-by: Helm release: "example" @@ -232,7 +232,7 @@ metadata: name: gateway namespace: default labels: - helm.sh/chart: opentelemetry-kube-stack-0.15.0 + helm.sh/chart: opentelemetry-kube-stack-0.15.1 app.kubernetes.io/version: "0.151.0" app.kubernetes.io/managed-by: Helm release: "example" @@ -365,7 +365,7 @@ metadata: name: ingress namespace: default labels: - helm.sh/chart: opentelemetry-kube-stack-0.15.0 + helm.sh/chart: opentelemetry-kube-stack-0.15.1 app.kubernetes.io/version: "0.151.0" app.kubernetes.io/managed-by: Helm release: "example" diff --git a/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/hooks.yaml b/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/hooks.yaml index 3225d6dcc8..7abcc3a667 100644 --- a/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/hooks.yaml +++ b/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/hooks.yaml @@ -61,4 +61,4 @@ spec: - "delete" - "instrumentations,opampbridges,opentelemetrycollectors" - "-l" - - "helm.sh/chart=opentelemetry-kube-stack-0.15.0" + - "helm.sh/chart=opentelemetry-kube-stack-0.15.1" diff --git a/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/collector.yaml b/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/collector.yaml index 1959a15b97..48a7957699 100644 --- a/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/collector.yaml +++ b/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/collector.yaml @@ -6,7 +6,7 @@ metadata: name: example-cluster-stats namespace: default labels: - helm.sh/chart: opentelemetry-kube-stack-0.15.0 + helm.sh/chart: opentelemetry-kube-stack-0.15.1 app.kubernetes.io/version: "0.151.0" app.kubernetes.io/managed-by: Helm release: "example" @@ -173,7 +173,7 @@ metadata: name: example-daemon namespace: default labels: - helm.sh/chart: opentelemetry-kube-stack-0.15.0 + helm.sh/chart: opentelemetry-kube-stack-0.15.1 app.kubernetes.io/version: "0.151.0" app.kubernetes.io/managed-by: Helm release: "example" diff --git a/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/hooks.yaml b/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/hooks.yaml index 3225d6dcc8..7abcc3a667 100644 --- a/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/hooks.yaml +++ b/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/hooks.yaml @@ -61,4 +61,4 @@ spec: - "delete" - "instrumentations,opampbridges,opentelemetrycollectors" - "-l" - - "helm.sh/chart=opentelemetry-kube-stack-0.15.0" + - "helm.sh/chart=opentelemetry-kube-stack-0.15.1" diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/collector.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/collector.yaml index ab2c31b2db..8bb4a114e5 100644 --- a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/collector.yaml +++ b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/collector.yaml @@ -6,7 +6,7 @@ metadata: name: example-daemon namespace: default labels: - helm.sh/chart: opentelemetry-kube-stack-0.15.0 + helm.sh/chart: opentelemetry-kube-stack-0.15.1 app.kubernetes.io/version: "0.151.0" app.kubernetes.io/managed-by: Helm release: "example" diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-api-server/servicemonitor.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-api-server/servicemonitor.yaml index 44bcb6fcfc..92ec8433d5 100644 --- a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-api-server/servicemonitor.yaml +++ b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-api-server/servicemonitor.yaml @@ -7,7 +7,7 @@ metadata: namespace: default labels: app: opentelemetry-kube-stack-apiserver - helm.sh/chart: opentelemetry-kube-stack-0.15.0 + helm.sh/chart: opentelemetry-kube-stack-0.15.1 app.kubernetes.io/version: "0.151.0" app.kubernetes.io/managed-by: Helm release: "example" diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-controller-manager/service.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-controller-manager/service.yaml index 989ef9b379..57ea57c54b 100644 --- a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-controller-manager/service.yaml +++ b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-controller-manager/service.yaml @@ -7,7 +7,7 @@ metadata: labels: app: opentelemetry-kube-stack-kube-controller-manager jobLabel: kube-controller-manager - helm.sh/chart: opentelemetry-kube-stack-0.15.0 + helm.sh/chart: opentelemetry-kube-stack-0.15.1 app.kubernetes.io/version: "0.151.0" app.kubernetes.io/managed-by: Helm release: "example" diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-controller-manager/servicemonitor.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-controller-manager/servicemonitor.yaml index 6c6924552f..3aa23b21fe 100644 --- a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-controller-manager/servicemonitor.yaml +++ b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-controller-manager/servicemonitor.yaml @@ -7,7 +7,7 @@ metadata: namespace: default labels: app: opentelemetry-kube-stack-kube-controller-manager - helm.sh/chart: opentelemetry-kube-stack-0.15.0 + helm.sh/chart: opentelemetry-kube-stack-0.15.1 app.kubernetes.io/version: "0.151.0" app.kubernetes.io/managed-by: Helm release: "example" diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-dns/service.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-dns/service.yaml index 79087a01e6..f67bf12190 100644 --- a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-dns/service.yaml +++ b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-dns/service.yaml @@ -7,7 +7,7 @@ metadata: labels: app: opentelemetry-kube-stack-kube-dns jobLabel: kube-dns - helm.sh/chart: opentelemetry-kube-stack-0.15.0 + helm.sh/chart: opentelemetry-kube-stack-0.15.1 app.kubernetes.io/version: "0.151.0" app.kubernetes.io/managed-by: Helm release: "example" diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-dns/servicemonitor.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-dns/servicemonitor.yaml index 6beb82db36..db82ca36d5 100644 --- a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-dns/servicemonitor.yaml +++ b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-dns/servicemonitor.yaml @@ -7,7 +7,7 @@ metadata: namespace: default labels: app: opentelemetry-kube-stack-kube-dns - helm.sh/chart: opentelemetry-kube-stack-0.15.0 + helm.sh/chart: opentelemetry-kube-stack-0.15.1 app.kubernetes.io/version: "0.151.0" app.kubernetes.io/managed-by: Helm release: "example" diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-etcd/service.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-etcd/service.yaml index fa816280b1..9f634d2070 100644 --- a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-etcd/service.yaml +++ b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-etcd/service.yaml @@ -7,7 +7,7 @@ metadata: labels: app: opentelemetry-kube-stack-kube-etcd jobLabel: kube-etcd - helm.sh/chart: opentelemetry-kube-stack-0.15.0 + helm.sh/chart: opentelemetry-kube-stack-0.15.1 app.kubernetes.io/version: "0.151.0" app.kubernetes.io/managed-by: Helm release: "example" diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-etcd/servicemonitor.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-etcd/servicemonitor.yaml index 368c7ceca4..3164220072 100644 --- a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-etcd/servicemonitor.yaml +++ b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-etcd/servicemonitor.yaml @@ -7,7 +7,7 @@ metadata: namespace: default labels: app: opentelemetry-kube-stack-kube-etcd - helm.sh/chart: opentelemetry-kube-stack-0.15.0 + helm.sh/chart: opentelemetry-kube-stack-0.15.1 app.kubernetes.io/version: "0.151.0" app.kubernetes.io/managed-by: Helm release: "example" diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-proxy/service.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-proxy/service.yaml index 38e5142e12..53791f83e4 100644 --- a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-proxy/service.yaml +++ b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-proxy/service.yaml @@ -7,7 +7,7 @@ metadata: labels: app: opentelemetry-kube-stack-kube-proxy jobLabel: kube-proxy - helm.sh/chart: opentelemetry-kube-stack-0.15.0 + helm.sh/chart: opentelemetry-kube-stack-0.15.1 app.kubernetes.io/version: "0.151.0" app.kubernetes.io/managed-by: Helm release: "example" diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-proxy/servicemonitor.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-proxy/servicemonitor.yaml index 91252ef6fc..c09529280b 100644 --- a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-proxy/servicemonitor.yaml +++ b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-proxy/servicemonitor.yaml @@ -7,7 +7,7 @@ metadata: namespace: default labels: app: opentelemetry-kube-stack-kube-proxy - helm.sh/chart: opentelemetry-kube-stack-0.15.0 + helm.sh/chart: opentelemetry-kube-stack-0.15.1 app.kubernetes.io/version: "0.151.0" app.kubernetes.io/managed-by: Helm release: "example" diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-scheduler/service.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-scheduler/service.yaml index f55b75cba9..fd20a57162 100644 --- a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-scheduler/service.yaml +++ b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-scheduler/service.yaml @@ -7,7 +7,7 @@ metadata: labels: app: opentelemetry-kube-stack-kube-scheduler jobLabel: kube-scheduler - helm.sh/chart: opentelemetry-kube-stack-0.15.0 + helm.sh/chart: opentelemetry-kube-stack-0.15.1 app.kubernetes.io/version: "0.151.0" app.kubernetes.io/managed-by: Helm release: "example" diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-scheduler/servicemonitor.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-scheduler/servicemonitor.yaml index 3616241b59..987620442d 100644 --- a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-scheduler/servicemonitor.yaml +++ b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-scheduler/servicemonitor.yaml @@ -7,7 +7,7 @@ metadata: namespace: default labels: app: opentelemetry-kube-stack-kube-scheduler - helm.sh/chart: opentelemetry-kube-stack-0.15.0 + helm.sh/chart: opentelemetry-kube-stack-0.15.1 app.kubernetes.io/version: "0.151.0" app.kubernetes.io/managed-by: Helm release: "example" diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/hooks.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/hooks.yaml index 3225d6dcc8..7abcc3a667 100644 --- a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/hooks.yaml +++ b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/hooks.yaml @@ -61,4 +61,4 @@ spec: - "delete" - "instrumentations,opampbridges,opentelemetrycollectors" - "-l" - - "helm.sh/chart=opentelemetry-kube-stack-0.15.0" + - "helm.sh/chart=opentelemetry-kube-stack-0.15.1" diff --git a/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/collector.yaml b/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/collector.yaml index cd27ca7d2d..21bc431781 100644 --- a/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/collector.yaml +++ b/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/collector.yaml @@ -6,7 +6,7 @@ metadata: name: example-daemon namespace: default labels: - helm.sh/chart: opentelemetry-kube-stack-0.15.0 + helm.sh/chart: opentelemetry-kube-stack-0.15.1 app.kubernetes.io/version: "0.151.0" app.kubernetes.io/managed-by: Helm release: "example" diff --git a/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/hooks.yaml b/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/hooks.yaml index 3225d6dcc8..7abcc3a667 100644 --- a/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/hooks.yaml +++ b/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/hooks.yaml @@ -61,4 +61,4 @@ spec: - "delete" - "instrumentations,opampbridges,opentelemetrycollectors" - "-l" - - "helm.sh/chart=opentelemetry-kube-stack-0.15.0" + - "helm.sh/chart=opentelemetry-kube-stack-0.15.1" diff --git a/charts/opentelemetry-kube-stack/templates/_config.tpl b/charts/opentelemetry-kube-stack/templates/_config.tpl index e05e20c07b..abb36db8c3 100644 --- a/charts/opentelemetry-kube-stack/templates/_config.tpl +++ b/charts/opentelemetry-kube-stack/templates/_config.tpl @@ -78,6 +78,9 @@ OR helps them easily port prometheus to the otel-kube-stack chart with no change {{- end }} {{- if .collector.presets.annotationDiscovery.metrics.enabled }} {{- $_ := set $config.service.pipelines.metrics "receivers" (append $config.service.pipelines.metrics.receivers "receiver_creator/metrics" | uniq) }} +{{- if .collector.presets.annotationDiscovery.metrics.prometheus.enabled }} +{{- $_ := set $config.service.pipelines.metrics "receivers" (append $config.service.pipelines.metrics.receivers "prometheus/annotation_discovery" | uniq) }} +{{- end }} {{- end }} {{- $config | toYaml }} {{- end }} @@ -105,6 +108,65 @@ receivers: discovery: enabled: true {{- end }} + {{- if .presets.annotationDiscovery.metrics.prometheus.enabled }} + # Scrapes pods on the same node carrying classic Prometheus annotations: + # prometheus.io/scrape=true (required), prometheus.io/port, prometheus.io/path, + # prometheus.io/scheme. Uses Kubernetes service discovery + Prometheus relabel + # rules rather than the receiver_creator + prometheus_simple combination. + prometheus/annotation_discovery: + config: + scrape_configs: + - job_name: kubernetes-pods + scrape_interval: 30s + kubernetes_sd_configs: + - role: pod + selectors: + - role: pod + # only scrape data from pods running on the same node as collector + field: "spec.nodeName=${env:OTEL_K8S_NODE_NAME}" + relabel_configs: + - source_labels: [__meta_kubernetes_pod_annotation_prometheus_io_scrape] + action: keep + regex: true + - source_labels: + [__meta_kubernetes_pod_annotation_prometheus_io_scrape_slow] + action: drop + regex: true + - source_labels: [__meta_kubernetes_pod_annotation_prometheus_io_scheme] + action: replace + regex: (https?) + target_label: __scheme__ + - source_labels: [__meta_kubernetes_pod_annotation_prometheus_io_path] + action: replace + target_label: __metrics_path__ + regex: (.+) + - source_labels: + [__address__, __meta_kubernetes_pod_annotation_prometheus_io_port] + action: replace + regex: ([^:]+)(?::\d+)?;(\d+) + # NOTE: otel collector uses env var replacement. $$ is used as a literal $. + replacement: $$1:$$2 + target_label: __address__ + - action: labelmap + regex: __meta_kubernetes_pod_annotation_prometheus_io_param_(.+) + replacement: __param_$$1 + {{- if .presets.annotationDiscovery.metrics.prometheus.addPrometheusLabels }} + - action: labelmap + regex: __meta_kubernetes_pod_label_(.+) + - source_labels: [__meta_kubernetes_namespace] + action: replace + target_label: namespace + - source_labels: [__meta_kubernetes_pod_name] + action: replace + target_label: pod + {{- end }} + - source_labels: [__meta_kubernetes_pod_phase] + regex: Pending|Succeeded|Failed|Completed + action: drop + - action: replace + source_labels: [__meta_kubernetes_pod_label_app_kubernetes_io_name] + target_label: job + {{- end }} {{- end }} {{- define "opentelemetry-kube-stack.collector.applyKubernetesAttributesConfig" -}} diff --git a/charts/opentelemetry-kube-stack/values.schema.json b/charts/opentelemetry-kube-stack/values.schema.json index a52436409f..b620687b39 100644 --- a/charts/opentelemetry-kube-stack/values.schema.json +++ b/charts/opentelemetry-kube-stack/values.schema.json @@ -1474,6 +1474,21 @@ "enabled": { "description": "Specifies whether the collector should collect metrics.", "type": "boolean" + }, + "prometheus": { + "type": "object", + "additionalProperties": false, + "description": "When enabled, adds a standalone prometheus/annotation_discovery receiver configured with Kubernetes service discovery + relabel rules to scrape pods on the same node carrying classic Prometheus annotations (prometheus.io/scrape=true, prometheus.io/port, prometheus.io/path, prometheus.io/scheme).", + "properties": { + "enabled": { + "description": "Enable scraping of pods carrying classic Prometheus annotations via a standalone Prometheus receiver.", + "type": "boolean" + }, + "addPrometheusLabels": { + "description": "When true, the scrape config emits Prometheus-style labels on scraped metrics (Kubernetes `namespace`, `pod`, and all pod labels mapped via __meta_kubernetes_pod_label_*). When false (default), only the standard Prometheus `job` and `instance` labels are produced, leaving the k8sattributes processor as the sole source of Kubernetes metadata.", + "type": "boolean" + } + } } } } diff --git a/charts/opentelemetry-kube-stack/values.yaml b/charts/opentelemetry-kube-stack/values.yaml index eeb60bb32c..69e69376b0 100644 --- a/charts/opentelemetry-kube-stack/values.yaml +++ b/charts/opentelemetry-kube-stack/values.yaml @@ -509,6 +509,20 @@ defaultCRConfig: enabled: false metrics: enabled: false + # When enabled (requires `metrics.enabled: true`), adds a standalone + # `prometheus/annotation_discovery` receiver to the metrics pipeline. It uses + # Kubernetes service discovery + Prometheus relabel rules to scrape pods on the same + # node carrying classic Prometheus annotations: prometheus.io/scrape=true (required), + # prometheus.io/port, prometheus.io/path, prometheus.io/scheme. + prometheus: + enabled: false + # When true, the prometheus/annotation_discovery scrape config emits Prometheus-style + # Kubernetes labels on scraped metrics: `namespace`, `pod`, and all pod labels mapped + # via `__meta_kubernetes_pod_label_*` (e.g. `app_kubernetes_io_name`). + # When false (default), only the standard Prometheus `job` and `instance` labels are + # produced, leaving the k8sattributes processor (presets.kubernetesAttributes.enabled) + # as the sole source of Kubernetes metadata. + addPrometheusLabels: true resourceDetection: # Each detector can be enabled individually. Base detectors 'env' and 'k8snode' are always included when any detector is enabled. # Typically used to resolve the 'k8s.cluster.name' resource attribute. @@ -561,6 +575,9 @@ collectors: enabled: false metrics: enabled: false + prometheus: + enabled: false + addPrometheusLabels: false resourceDetection: aks: enabled: false From 959842c2785a61fd8643527ce50ff59e4c9149ad Mon Sep 17 00:00:00 2001 From: Cyrille Le Clerc Date: Tue, 19 May 2026 13:43:30 +0200 Subject: [PATCH 02/11] [kube-stack] filter collector pods via SD label selector in annotation_discovery Skip the OpenTelemetry collector's own pods at the Kubernetes service discovery level by adding `app.kubernetes.io/component!=opentelemetry-collector` to the kubernetes_sd_configs selector, alongside the existing node field selector. This is more efficient than a relabel_configs drop rule: the API server returns only matching pods, so Prometheus never has to fetch the collector's pods just to discard them. --- .../rendered/collector.yaml | 1 + charts/opentelemetry-kube-stack/templates/_config.tpl | 4 +++- 2 files changed, 4 insertions(+), 1 deletion(-) diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/collector.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/collector.yaml index 3e32a761ab..b4c25fd9ce 100644 --- a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/collector.yaml +++ b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/collector.yaml @@ -51,6 +51,7 @@ spec: - role: pod selectors: - field: spec.nodeName=${env:OTEL_K8S_NODE_NAME} + label: app.kubernetes.io/component!=opentelemetry-collector role: pod relabel_configs: - action: keep diff --git a/charts/opentelemetry-kube-stack/templates/_config.tpl b/charts/opentelemetry-kube-stack/templates/_config.tpl index abb36db8c3..72ac753f56 100644 --- a/charts/opentelemetry-kube-stack/templates/_config.tpl +++ b/charts/opentelemetry-kube-stack/templates/_config.tpl @@ -122,8 +122,10 @@ receivers: - role: pod selectors: - role: pod - # only scrape data from pods running on the same node as collector + # Only scrape data from pods running on the same node as the collector, + # and skip the OpenTelemetry collector's own pods to avoid self-scrape loops. field: "spec.nodeName=${env:OTEL_K8S_NODE_NAME}" + label: "app.kubernetes.io/component!=opentelemetry-collector" relabel_configs: - source_labels: [__meta_kubernetes_pod_annotation_prometheus_io_scrape] action: keep From 4f22359825f06ae415aa9de074e73d7678a4f6b3 Mon Sep 17 00:00:00 2001 From: Cyrille Le Clerc Date: Tue, 26 May 2026 10:23:57 +0200 Subject: [PATCH 03/11] feat(kube-stack): add presets.prometheus.{nodeExporter,cadvisor,podAnnotations} MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Introduces a new top-level `presets.prometheus.*` namespace as a daemonset-local replacement for the `scrape_configs_file: daemon_scrape_configs.yaml` flow. Each preset adds a named instance of the prometheus receiver to the metrics pipeline: * prometheus/node_exporter — scrapes node-exporter on ${OTEL_K8S_NODE_IP}:9100 * prometheus/cadvisor — scrapes /metrics/cadvisor on the local kubelet (job_name=kubelet for KPS / legacy parity) * prometheus/pod_annotations — scrapes pods on the local node carrying classic prometheus.io/scrape=true annotations Renames `presets.annotationDiscovery.metrics.prometheus` → `presets.prometheus.podAnnotations`. Drops `addPrometheusLabels`; the preset always emits namespace/pod/node and the full pod-label set, matching daemon_scrape_configs.yaml output. Chart-enforced constraints (template render fails with a clear error if violated): * mutually exclusive with `scrape_configs_file` (the presets are a replacement) * require `mode: daemonset` Time-series compatibility with daemon_scrape_configs.yaml: all three presets are drop-in compatible — same job/instance/Kubernetes label sets — with additive extras (a new `node` label on all three, self-scrape filter on podAnnotations). Bumps chart 0.15.1 → 0.16.0. Adds a new example examples/daemonset-prometheus-presets demonstrating all three. README gains a detailed "presets.prometheus.* vs. KPS ServiceMonitors" section under the existing Kube-Prometheus-Stack compatability heading. --- charts/opentelemetry-kube-stack/Chart.yaml | 2 +- charts/opentelemetry-kube-stack/README.md | 85 +++- .../examples/cloud-demo/rendered/bridge.yaml | 4 +- .../cloud-demo/rendered/clusterrole.yaml | 1 + .../cloud-demo/rendered/collector.yaml | 3 +- .../examples/cloud-demo/rendered/hooks.yaml | 3 +- .../cloud-demo/rendered/instrumentation.yaml | 3 +- .../operator-webhook-with-cert-manager.yaml | 1 + .../opentelemetry-operator/certmanager.yaml | 1 + .../opentelemetry-operator/clusterrole.yaml | 2 + .../clusterrolebinding.yaml | 2 + .../opentelemetry-operator/deployment.yaml | 1 + .../rendered/opentelemetry-operator/role.yaml | 1 + .../opentelemetry-operator/rolebinding.yaml | 1 + .../opentelemetry-operator/service.yaml | 1 + .../serviceaccount.yaml | 1 + .../tests/test-certmanager-connection.yaml | 1 + .../tests/test-service-connection.yaml | 1 + .../rendered/clusterrole.yaml | 1 + .../rendered/collector.yaml | 4 +- .../rendered/hooks.yaml | 3 +- .../operator-webhook-with-cert-manager.yaml | 1 + .../opentelemetry-operator/certmanager.yaml | 1 + .../opentelemetry-operator/clusterrole.yaml | 2 + .../clusterrolebinding.yaml | 2 + .../opentelemetry-operator/deployment.yaml | 1 + .../rendered/opentelemetry-operator/role.yaml | 1 + .../opentelemetry-operator/rolebinding.yaml | 1 + .../opentelemetry-operator/service.yaml | 1 + .../serviceaccount.yaml | 1 + .../tests/test-certmanager-connection.yaml | 1 + .../tests/test-service-connection.yaml | 1 + .../rendered/clusterrole.yaml | 1 + .../rendered/collector.yaml | 53 +-- .../rendered/hooks.yaml | 3 +- .../operator-webhook-with-cert-manager.yaml | 1 + .../opentelemetry-operator/certmanager.yaml | 1 + .../opentelemetry-operator/clusterrole.yaml | 2 + .../clusterrolebinding.yaml | 2 + .../opentelemetry-operator/deployment.yaml | 1 + .../rendered/opentelemetry-operator/role.yaml | 1 + .../opentelemetry-operator/rolebinding.yaml | 1 + .../opentelemetry-operator/service.yaml | 1 + .../serviceaccount.yaml | 1 + .../tests/test-certmanager-connection.yaml | 1 + .../tests/test-service-connection.yaml | 1 + .../values.yaml | 2 - .../rendered/clusterrole.yaml | 1 + .../rendered/collector.yaml | 4 +- .../rendered/hooks.yaml | 3 +- .../operator-webhook-with-cert-manager.yaml | 1 + .../opentelemetry-operator/certmanager.yaml | 1 + .../opentelemetry-operator/clusterrole.yaml | 2 + .../clusterrolebinding.yaml | 2 + .../opentelemetry-operator/deployment.yaml | 1 + .../rendered/opentelemetry-operator/role.yaml | 1 + .../opentelemetry-operator/rolebinding.yaml | 1 + .../opentelemetry-operator/service.yaml | 1 + .../serviceaccount.yaml | 1 + .../tests/test-certmanager-connection.yaml | 1 + .../tests/test-service-connection.yaml | 1 + .../rendered/clusterrole.yaml | 69 +++ .../rendered/collector.yaml | 238 ++++++++++ .../rendered/hooks.yaml | 65 +++ .../operator-webhook-with-cert-manager.yaml | 193 +++++++++ .../admission-webhooks/operator-webhook.yaml | 3 + .../opentelemetry-operator/certmanager.yaml | 44 ++ .../opentelemetry-operator/clusterrole.yaml | 410 ++++++++++++++++++ .../clusterrolebinding.yaml | 24 + .../opentelemetry-operator/deployment.yaml | 105 +++++ .../rendered/opentelemetry-operator/role.yaml | 200 +++++++++ .../opentelemetry-operator/rolebinding.yaml | 24 + .../opentelemetry-operator/service.yaml | 48 ++ .../serviceaccount.yaml | 17 + .../tests/test-certmanager-connection.yaml | 54 +++ .../tests/test-service-connection.yaml | 107 +++++ .../daemonset-prometheus-presets/values.yaml | 45 ++ .../default/rendered/clusterrole.yaml | 1 + .../examples/default/rendered/collector.yaml | 3 +- .../examples/default/rendered/hooks.yaml | 3 +- .../operator-webhook-with-cert-manager.yaml | 1 + .../opentelemetry-operator/certmanager.yaml | 1 + .../opentelemetry-operator/clusterrole.yaml | 2 + .../clusterrolebinding.yaml | 2 + .../opentelemetry-operator/deployment.yaml | 1 + .../rendered/opentelemetry-operator/role.yaml | 1 + .../opentelemetry-operator/rolebinding.yaml | 1 + .../opentelemetry-operator/service.yaml | 1 + .../serviceaccount.yaml | 1 + .../tests/test-certmanager-connection.yaml | 1 + .../tests/test-service-connection.yaml | 1 + .../rendered/clusterrole.yaml | 1 + .../rendered/collector.yaml | 7 +- .../rendered/hooks.yaml | 3 +- .../operator-webhook-with-cert-manager.yaml | 1 + .../opentelemetry-operator/certmanager.yaml | 1 + .../opentelemetry-operator/clusterrole.yaml | 2 + .../clusterrolebinding.yaml | 2 + .../opentelemetry-operator/deployment.yaml | 1 + .../rendered/opentelemetry-operator/role.yaml | 1 + .../opentelemetry-operator/rolebinding.yaml | 1 + .../opentelemetry-operator/service.yaml | 1 + .../serviceaccount.yaml | 1 + .../tests/test-certmanager-connection.yaml | 1 + .../tests/test-service-connection.yaml | 1 + .../rendered/clusterrole.yaml | 1 + .../rendered/collector.yaml | 5 +- .../rendered/hooks.yaml | 3 +- .../operator-webhook-with-cert-manager.yaml | 1 + .../opentelemetry-operator/certmanager.yaml | 1 + .../opentelemetry-operator/clusterrole.yaml | 2 + .../clusterrolebinding.yaml | 2 + .../opentelemetry-operator/deployment.yaml | 1 + .../rendered/opentelemetry-operator/role.yaml | 1 + .../opentelemetry-operator/rolebinding.yaml | 1 + .../opentelemetry-operator/service.yaml | 1 + .../serviceaccount.yaml | 1 + .../tests/test-certmanager-connection.yaml | 1 + .../tests/test-service-connection.yaml | 1 + .../prometheus-otel/rendered/clusterrole.yaml | 1 + .../prometheus-otel/rendered/collector.yaml | 3 +- .../kube-api-server/servicemonitor.yaml | 3 +- .../kube-controller-manager/service.yaml | 3 +- .../servicemonitor.yaml | 3 +- .../rendered/exporters/kube-dns/service.yaml | 3 +- .../exporters/kube-dns/servicemonitor.yaml | 3 +- .../rendered/exporters/kube-etcd/service.yaml | 2 +- .../exporters/kube-etcd/servicemonitor.yaml | 3 +- .../exporters/kube-proxy/service.yaml | 2 +- .../exporters/kube-proxy/servicemonitor.yaml | 3 +- .../exporters/kube-scheduler/service.yaml | 2 +- .../kube-scheduler/servicemonitor.yaml | 3 +- .../prometheus-otel/rendered/hooks.yaml | 3 +- .../kube-state-metrics/deployment.yaml | 1 + .../rendered/kube-state-metrics/role.yaml | 2 + .../rendered/kube-state-metrics/service.yaml | 1 + .../kube-state-metrics/servicemonitor.yaml | 1 + .../operator-webhook-with-cert-manager.yaml | 1 + .../opentelemetry-operator/certmanager.yaml | 1 + .../opentelemetry-operator/clusterrole.yaml | 2 + .../clusterrolebinding.yaml | 2 + .../opentelemetry-operator/deployment.yaml | 1 + .../rendered/opentelemetry-operator/role.yaml | 1 + .../opentelemetry-operator/rolebinding.yaml | 1 + .../opentelemetry-operator/service.yaml | 1 + .../serviceaccount.yaml | 1 + .../tests/test-certmanager-connection.yaml | 1 + .../tests/test-service-connection.yaml | 1 + .../prometheus-node-exporter/daemonset.yaml | 1 + .../prometheus-node-exporter/service.yaml | 1 + .../servicemonitor.yaml | 1 + .../rendered/clusterrole.yaml | 1 + .../rendered/collector.yaml | 3 +- .../rendered/extramanifests.yaml | 1 + .../secrets-csi-driver/rendered/hooks.yaml | 3 +- .../operator-webhook-with-cert-manager.yaml | 1 + .../opentelemetry-operator/certmanager.yaml | 1 + .../opentelemetry-operator/clusterrole.yaml | 2 + .../clusterrolebinding.yaml | 2 + .../opentelemetry-operator/deployment.yaml | 1 + .../rendered/opentelemetry-operator/role.yaml | 1 + .../opentelemetry-operator/rolebinding.yaml | 1 + .../opentelemetry-operator/service.yaml | 1 + .../serviceaccount.yaml | 1 + .../tests/test-certmanager-connection.yaml | 1 + .../tests/test-service-connection.yaml | 1 + .../templates/_config.tpl | 252 ++++++++--- .../values.schema.json | 86 +++- charts/opentelemetry-kube-stack/values.yaml | 98 ++++- 169 files changed, 2270 insertions(+), 185 deletions(-) create mode 100644 charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/clusterrole.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/collector.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/hooks.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/admission-webhooks/operator-webhook.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/certmanager.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/clusterrole.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/clusterrolebinding.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/deployment.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/role.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/rolebinding.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/service.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/serviceaccount.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/tests/test-service-connection.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/values.yaml diff --git a/charts/opentelemetry-kube-stack/Chart.yaml b/charts/opentelemetry-kube-stack/Chart.yaml index 517ac853cc..77d82030cd 100644 --- a/charts/opentelemetry-kube-stack/Chart.yaml +++ b/charts/opentelemetry-kube-stack/Chart.yaml @@ -1,6 +1,6 @@ apiVersion: v2 name: opentelemetry-kube-stack -version: 0.15.1 +version: 0.16.0 description: | OpenTelemetry Quickstart chart for Kubernetes. Installs an operator and collector for an easy way to get started with Kubernetes observability. diff --git a/charts/opentelemetry-kube-stack/README.md b/charts/opentelemetry-kube-stack/README.md index 36879ab39e..bdde44fc0b 100644 --- a/charts/opentelemetry-kube-stack/README.md +++ b/charts/opentelemetry-kube-stack/README.md @@ -34,6 +34,89 @@ This chart provides functionality to port an existing scrape configuration from > [!NOTE] > This chart aims to provide compatibility for scrape targets from the kube-prometheus-stack chart. This chart is not responsible for applying Prometheus Rules, Alertmanager, or a Prometheus instance. +#### `presets.prometheus.*` vs. kube-prometheus-stack ServiceMonitors + +The `presets.prometheus.*` family (`nodeExporter`, `cadvisor`, `podAnnotations`) adds named instances of the prometheus receiver to the daemonset collector's metrics pipeline. They are a DaemonSet-local alternative to the kube-prometheus-stack (KPS) `ServiceMonitor`-based approach and a **replacement** for the `daemon_scrape_configs.yaml` scrape file. The two approaches produce **similar but not identical** time series. + +##### Constraints (chart-enforced) + +The presets are gated by template-render assertions; chart rendering fails if these are violated: + +* **Mutually exclusive with `scrape_configs_file`**. The presets replace the scrape file (which by default already has node-exporter, kubelet/cAdvisor, and pod-annotation jobs). Enabling any preset while `scrape_configs_file` is non-empty fails with a clear error. Set `scrape_configs_file: ""` to migrate. +* **Require `mode: daemonset`**. The scrape configs reference `${OTEL_K8S_NODE_IP}` / `${OTEL_K8S_NODE_NAME}`, which the OpenTelemetry Operator only injects on daemonset collector pods. + +##### Discovery model + +| | kube-prometheus-stack | `presets.prometheus.*` | +|------------------|--------------------------------------------------------------------|------------------------------------------------------------------------------------------------------------------| +| Mechanism | `ServiceMonitor` CRD → Prometheus Operator generates scrape config | Inline Prometheus scrape config inside each daemonset collector | +| Discovery | Kubernetes Endpoints / Pod service discovery | `static_configs` (nodeExporter, cadvisor) or `kubernetes_sd_configs` filtered to the local node (podAnnotations) | +| Who scrapes whom | One central Prometheus scrapes every target cluster-wide | Each daemonset collector scrapes only its own node — sharded by design, no central bottleneck | + +##### Label set + +The exact labels attached vary per preset; the table below shows what each `presets.prometheus.*` emits today versus a KPS ServiceMonitor on the equivalent target. + +| Label | KPS ServiceMonitor | `nodeExporter` | `cadvisor` | `podAnnotations` | +|--------------------------------|------------------------------------------------------------------|-------------------------------|------------------------------------------------|-------------------------------------------------------------| +| `job` | From `ServiceMonitor.jobLabel` (e.g. `node-exporter`, `kubelet`) | `node-exporter` | `kubelet` | `kubernetes-pods`, overridable per pod via the `__meta_kubernetes_pod_label_app_kubernetes_io_name` label | +| `instance` | `:` from Endpoints SD | `:` | `:` | `:` from pod SD | +| `node` | `` from `__meta_kubernetes_pod_node_name` | from `${OTEL_K8S_NODE_NAME}` | from `${OTEL_K8S_NODE_NAME}` | from `__meta_kubernetes_pod_node_name` | +| `namespace` | from Endpoints SD | — | intrinsic (emitted by cAdvisor) | from `__meta_kubernetes_namespace` | +| `pod` | from Endpoints SD | — | intrinsic | from `__meta_kubernetes_pod_name` | +| `container`, `image` | `container` from Endpoints SD | — | intrinsic (`container`, `image` from cAdvisor) | — | +| Pod labels (`labelmap`) | via `ServiceMonitor.podTargetLabels` | — | — | all pod labels mapped via `__meta_kubernetes_pod_label_*` | +| `service`, `endpoint` | from Endpoints SD | — | — | — | + +For OTel-aware backends, any missing Kubernetes context is supplied downstream by the `k8sattributes` processor (`presets.kubernetesAttributes.enabled`) as resource attributes rather than Prometheus labels. + +###### Why `nodeExporter` emits fewer labels + +node-exporter metrics are **host-scoped** — `node_cpu_seconds_total` describes the kernel of the underlying node, not any specific pod. When kube-prometheus-stack scrapes node-exporter via Endpoints SD, it attaches `namespace`/`pod`/`container` labels that describe the *exporter's own deployment* (`monitoring/prometheus-node-exporter-xyz/node-exporter`). Those labels carry no information about the metric and are easy to misuse (e.g. `sum by (namespace) (node_cpu_seconds_total)` returns one number for whichever namespace node-exporter is deployed in, not per-workload usage). + +The `nodeExporter` preset drops them deliberately; this is a feature, not a parity gap. `cadvisor` and `podAnnotations` series, by contrast, *are* per-workload and so emit `namespace`/`pod`/`container` meaningfully. + +##### Backward compatibility with `daemon_scrape_configs.yaml` + +Each preset replaces a specific scrape job in `daemon_scrape_configs.yaml`. All three are drop-in compatible — `job` / `instance` / Kubernetes label set are preserved, so existing queries, dashboards, alerts, and recording rules keep working. The remaining differences are either additive (a new `node` label) or default-value tweaks called out per preset below. + +###### `nodeExporter` ↔ `node-exporter` job + +**Drop-in compatible.** Same scrape target (`${OTEL_K8S_NODE_IP}:9100`), same `job=node-exporter` label, same `scrape_interval: 30s`. The preset additionally emits a `node` label (the legacy job didn't) — purely additive, won't break queries. + +###### `cadvisor` ↔ `kubelet` job + +**Drop-in compatible.** The preset uses `job_name: kubelet` for label parity with both `daemon_scrape_configs.yaml` (which force-relabels every series to `job=kubelet`) and kube-prometheus-stack (which derives `job=kubelet` from the kubelet Service's `k8s-app` label). Queries / dashboards / alerts filtering `{job="kubelet"}` keep working unchanged. + +Minor differences (all additive — no broken queries): + +* **Scrape interval**: the preset defaults to `30s`, the legacy job uses `15s`. Set `presets.prometheus.cadvisor.scrapeInterval: 15s` to match exactly (affects `rate()` resolution). +* **Dropped helper labels**: the legacy job attaches `endpoint=https-metrics` and `metrics_path=/metrics/cadvisor`; the preset does not. Rarely referenced in queries. +* **Intrinsic cAdvisor labels** (`namespace`, `pod`, `container`, `image`, `id`, ...) are identical in both — these come from cAdvisor itself, not from relabel rules. +* **`metric_relabel_configs`**: identical drop list (container_cpu_load_average_10s, container_spec_*, container_fs_io_current, container_memory_mapped_file/swap, container_file_descriptors/tasks_state/threads_max, plus non-pod cgroup rows). + +###### `podAnnotations` ↔ `kubernetes-pods` job + +**Drop-in compatible.** Same `job_name: kubernetes-pods` (overridable per pod via the `app.kubernetes.io/name` pod label, in both cases), same label set (`namespace`, `pod`, all pod labels via `labelmap`), same `scrape_interval: 30s`, same annotation-driven scheme/path/port/param handling. + +Differences from the legacy job (both additive — no broken queries): + +* **`node` label** added by the preset (sourced from `__meta_kubernetes_pod_node_name`). +* **Self-scrape filter**: the preset's pod selector excludes pods with `app.kubernetes.io/component=opentelemetry-collector` to prevent the collector from scraping itself. The legacy job has no such filter, so it would scrape any collector pod carrying `prometheus.io/scrape: "true"`. + +##### Customization + +KPS exposes `relabelings` and `metricRelabelings` on each `ServiceMonitor`. The presets expose `enabled`, `scrapeInterval`, `scrapeTimeout`, and — for `nodeExporter` / `cadvisor` only — `port`. (`podAnnotations` discovers the port per pod from the `prometheus.io/port` annotation, so a chart-level `port` knob doesn't apply.) For richer relabeling, drop the preset and use `scrape_configs_file` instead — see [scrape_configs_file Details](#scrape_configs_file-details). + +##### Other duplicate-scrape risks + +* **`prometheus-node-exporter` subchart**: when installed via the top-level `nodeExporter.enabled: true` flag, the subchart creates its own `ServiceMonitor` by default. If a target allocator picks it up, node-exporter is scraped twice — once locally by every daemonset collector and once via the ServiceMonitor through the cluster collector. + +##### When to use which + +* **Use the presets** if you want a sharded, DaemonSet-native pipeline with no central Prometheus bottleneck and your dashboards rely primarily on `job` / `instance` / `node` (and, for `podAnnotations`, the standard Kubernetes label set). +* **Use the target allocator + ServiceMonitors** (set `targetAllocator.enabled: true` instead) if you need full KPS label parity (including `service` / `endpoint` / `container`), want CRD-driven dynamic configuration, or are porting existing KPS dashboards/recording rules unchanged. + ### Image versioning The appVersion of the chart is aligned to the latest image version of the operator. Images are upgraded within the chart manually by setting the image tag to the latest release of each image used. This will be the latest patch release for the chart's appVersion. example: @@ -152,4 +235,4 @@ The following command will show all the configurable options with detailed comme $ helm show values open-telemetry/opentelemetry-kube-stack ``` -When using this chart as a subchart, you may want to unset certain default values. Since Helm v3.13 values handling is improved and null can now consistently be used to remove values (e.g. to remove the default CPU limits). \ No newline at end of file +When using this chart as a subchart, you may want to unset certain default values. Since Helm v3.13 values handling is improved and null can now consistently be used to remove values (e.g. to remove the default CPU limits). diff --git a/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/bridge.yaml b/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/bridge.yaml index a386b70f95..8150262179 100644 --- a/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/bridge.yaml +++ b/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/bridge.yaml @@ -5,7 +5,7 @@ kind: OpAMPBridge metadata: name: example labels: - helm.sh/chart: opentelemetry-kube-stack-0.15.1 + helm.sh/chart: opentelemetry-kube-stack-0.16.0 app.kubernetes.io/version: "0.151.0" app.kubernetes.io/managed-by: Helm release: "example" @@ -58,3 +58,5 @@ spec: fieldPath: status.podIP - name: OTEL_RESOURCE_ATTRIBUTES value: "k8s.cluster.name=demo" + + diff --git a/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/clusterrole.yaml b/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/clusterrole.yaml index 515a697523..0f1ed4b2f8 100644 --- a/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/clusterrole.yaml +++ b/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/clusterrole.yaml @@ -173,3 +173,4 @@ subjects: # quirk of the Operator name: "example-opamp-bridge" namespace: "default" + diff --git a/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/collector.yaml b/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/collector.yaml index 37c8c0858b..1c2fa3804c 100644 --- a/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/collector.yaml +++ b/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/collector.yaml @@ -6,7 +6,7 @@ metadata: name: example-daemon namespace: default labels: - helm.sh/chart: opentelemetry-kube-stack-0.15.1 + helm.sh/chart: opentelemetry-kube-stack-0.16.0 app.kubernetes.io/version: "0.151.0" app.kubernetes.io/managed-by: Helm release: "example" @@ -531,3 +531,4 @@ spec: - name: hostfs hostPath: path: / + diff --git a/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/hooks.yaml b/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/hooks.yaml index 7abcc3a667..df09c1e80b 100644 --- a/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/hooks.yaml +++ b/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/hooks.yaml @@ -61,4 +61,5 @@ spec: - "delete" - "instrumentations,opampbridges,opentelemetrycollectors" - "-l" - - "helm.sh/chart=opentelemetry-kube-stack-0.15.1" + - "helm.sh/chart=opentelemetry-kube-stack-0.16.0" + diff --git a/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/instrumentation.yaml b/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/instrumentation.yaml index 7e3fe28f80..753f63f68b 100644 --- a/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/instrumentation.yaml +++ b/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/instrumentation.yaml @@ -5,7 +5,7 @@ kind: Instrumentation metadata: name: example labels: - helm.sh/chart: opentelemetry-kube-stack-0.15.1 + helm.sh/chart: opentelemetry-kube-stack-0.16.0 app.kubernetes.io/version: "0.151.0" app.kubernetes.io/managed-by: Helm release: "example" @@ -32,3 +32,4 @@ spec: env: - name: OTEL_EXPORTER_OTLP_ENDPOINT value: http://${OTEL_K8S_NODE_NAME}:4318 + diff --git a/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml b/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml index 7dbf1665c0..17585fa86a 100644 --- a/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml +++ b/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml @@ -190,3 +190,4 @@ webhooks: scope: Namespaced sideEffects: None timeoutSeconds: 10 + diff --git a/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/certmanager.yaml b/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/certmanager.yaml index b7b5be3ffe..e8615238d0 100644 --- a/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/certmanager.yaml +++ b/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/certmanager.yaml @@ -41,3 +41,4 @@ metadata: namespace: default spec: selfSigned: {} + diff --git a/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/clusterrole.yaml b/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/clusterrole.yaml index 05d1494af1..2037050533 100644 --- a/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/clusterrole.yaml +++ b/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/clusterrole.yaml @@ -406,3 +406,5 @@ rules: - /metrics verbs: - get + + diff --git a/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/clusterrolebinding.yaml b/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/clusterrolebinding.yaml index 8259beef16..4acb7d53f5 100644 --- a/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/clusterrolebinding.yaml +++ b/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/clusterrolebinding.yaml @@ -20,3 +20,5 @@ subjects: - kind: ServiceAccount name: opentelemetry-operator namespace: default + + diff --git a/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/deployment.yaml b/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/deployment.yaml index 2854112b68..c775cd1cf3 100644 --- a/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/deployment.yaml +++ b/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/deployment.yaml @@ -102,3 +102,4 @@ spec: runAsGroup: 65532 runAsNonRoot: true runAsUser: 65532 + diff --git a/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/role.yaml b/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/role.yaml index 0a015afb82..b5339517a2 100644 --- a/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/role.yaml +++ b/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/role.yaml @@ -197,3 +197,4 @@ rules: - patch - update - watch + diff --git a/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/rolebinding.yaml b/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/rolebinding.yaml index 721fdb0099..ae376e80c9 100644 --- a/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/rolebinding.yaml +++ b/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/rolebinding.yaml @@ -21,3 +21,4 @@ subjects: - kind: ServiceAccount name: opentelemetry-operator namespace: default + diff --git a/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/service.yaml b/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/service.yaml index bf164a93d7..0a3006d80f 100644 --- a/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/service.yaml +++ b/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/service.yaml @@ -45,3 +45,4 @@ spec: selector: app.kubernetes.io/name: opentelemetry-operator app.kubernetes.io/component: controller-manager + diff --git a/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/serviceaccount.yaml b/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/serviceaccount.yaml index 6abe418372..c6ba25dbac 100644 --- a/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/serviceaccount.yaml +++ b/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/serviceaccount.yaml @@ -14,3 +14,4 @@ metadata: app.kubernetes.io/part-of: opentelemetry-operator app.kubernetes.io/instance: example app.kubernetes.io/component: controller-manager + diff --git a/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml b/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml index f86f50575c..9039160e03 100644 --- a/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml +++ b/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml @@ -51,3 +51,4 @@ spec: runAsGroup: 65532 runAsNonRoot: true runAsUser: 65532 + diff --git a/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/tests/test-service-connection.yaml b/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/tests/test-service-connection.yaml index 79329c4b9b..88e0e0bc24 100644 --- a/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/tests/test-service-connection.yaml +++ b/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/tests/test-service-connection.yaml @@ -104,3 +104,4 @@ spec: runAsGroup: 65532 runAsNonRoot: true runAsUser: 65532 + diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/clusterrole.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/clusterrole.yaml index 2c535f471b..9d2d1e8211 100644 --- a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/clusterrole.yaml +++ b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/clusterrole.yaml @@ -66,3 +66,4 @@ subjects: # quirk of the Operator name: "example-daemon-collector" namespace: default + diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/collector.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/collector.yaml index c150e452ec..2e18381742 100644 --- a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/collector.yaml +++ b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/collector.yaml @@ -6,7 +6,7 @@ metadata: name: example-daemon namespace: default labels: - helm.sh/chart: opentelemetry-kube-stack-0.15.1 + helm.sh/chart: opentelemetry-kube-stack-0.16.0 app.kubernetes.io/version: "0.151.0" app.kubernetes.io/managed-by: Helm release: "example" @@ -124,3 +124,5 @@ spec: fieldPath: status.podIP - name: OTEL_RESOURCE_ATTRIBUTES value: "k8s.pod.name=$(OTEL_K8S_POD_NAME),k8s.namespace.name=$(OTEL_K8S_NAMESPACE),k8s.node.name=$(OTEL_K8S_NODE_NAME),host.name=$(OTEL_K8S_NODE_NAME),k8s.node.ip=$(OTEL_K8S_NODE_IP),k8s.pod.ip=$(OTEL_K8S_POD_IP),k8s.cluster.name=unknown_k8s_cluster" + + diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/hooks.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/hooks.yaml index 7abcc3a667..df09c1e80b 100644 --- a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/hooks.yaml +++ b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/hooks.yaml @@ -61,4 +61,5 @@ spec: - "delete" - "instrumentations,opampbridges,opentelemetrycollectors" - "-l" - - "helm.sh/chart=opentelemetry-kube-stack-0.15.1" + - "helm.sh/chart=opentelemetry-kube-stack-0.16.0" + diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml index 7dbf1665c0..17585fa86a 100644 --- a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml +++ b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml @@ -190,3 +190,4 @@ webhooks: scope: Namespaced sideEffects: None timeoutSeconds: 10 + diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/certmanager.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/certmanager.yaml index b7b5be3ffe..e8615238d0 100644 --- a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/certmanager.yaml +++ b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/certmanager.yaml @@ -41,3 +41,4 @@ metadata: namespace: default spec: selfSigned: {} + diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/clusterrole.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/clusterrole.yaml index 05d1494af1..2037050533 100644 --- a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/clusterrole.yaml +++ b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/clusterrole.yaml @@ -406,3 +406,5 @@ rules: - /metrics verbs: - get + + diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/clusterrolebinding.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/clusterrolebinding.yaml index 8259beef16..4acb7d53f5 100644 --- a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/clusterrolebinding.yaml +++ b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/clusterrolebinding.yaml @@ -20,3 +20,5 @@ subjects: - kind: ServiceAccount name: opentelemetry-operator namespace: default + + diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/deployment.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/deployment.yaml index 2854112b68..c775cd1cf3 100644 --- a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/deployment.yaml +++ b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/deployment.yaml @@ -102,3 +102,4 @@ spec: runAsGroup: 65532 runAsNonRoot: true runAsUser: 65532 + diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/role.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/role.yaml index 0a015afb82..b5339517a2 100644 --- a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/role.yaml +++ b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/role.yaml @@ -197,3 +197,4 @@ rules: - patch - update - watch + diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/rolebinding.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/rolebinding.yaml index 721fdb0099..ae376e80c9 100644 --- a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/rolebinding.yaml +++ b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/rolebinding.yaml @@ -21,3 +21,4 @@ subjects: - kind: ServiceAccount name: opentelemetry-operator namespace: default + diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/service.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/service.yaml index bf164a93d7..0a3006d80f 100644 --- a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/service.yaml +++ b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/service.yaml @@ -45,3 +45,4 @@ spec: selector: app.kubernetes.io/name: opentelemetry-operator app.kubernetes.io/component: controller-manager + diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/serviceaccount.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/serviceaccount.yaml index 6abe418372..c6ba25dbac 100644 --- a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/serviceaccount.yaml +++ b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/serviceaccount.yaml @@ -14,3 +14,4 @@ metadata: app.kubernetes.io/part-of: opentelemetry-operator app.kubernetes.io/instance: example app.kubernetes.io/component: controller-manager + diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml index f86f50575c..9039160e03 100644 --- a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml +++ b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml @@ -51,3 +51,4 @@ spec: runAsGroup: 65532 runAsNonRoot: true runAsUser: 65532 + diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/tests/test-service-connection.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/tests/test-service-connection.yaml index 79329c4b9b..88e0e0bc24 100644 --- a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/tests/test-service-connection.yaml +++ b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/tests/test-service-connection.yaml @@ -104,3 +104,4 @@ spec: runAsGroup: 65532 runAsNonRoot: true runAsUser: 65532 + diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/clusterrole.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/clusterrole.yaml index 2c535f471b..9d2d1e8211 100644 --- a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/clusterrole.yaml +++ b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/clusterrole.yaml @@ -66,3 +66,4 @@ subjects: # quirk of the Operator name: "example-daemon-collector" namespace: default + diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/collector.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/collector.yaml index b4c25fd9ce..a9b50cce3a 100644 --- a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/collector.yaml +++ b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/collector.yaml @@ -6,7 +6,7 @@ metadata: name: example-daemon namespace: default labels: - helm.sh/chart: opentelemetry-kube-stack-0.15.1 + helm.sh/chart: opentelemetry-kube-stack-0.16.0 app.kubernetes.io/version: "0.151.0" app.kubernetes.io/managed-by: Helm release: "example" @@ -43,54 +43,6 @@ spec: endpoint: 0.0.0.0:4317 http: endpoint: 0.0.0.0:4318 - prometheus/annotation_discovery: - config: - scrape_configs: - - job_name: kubernetes-pods - kubernetes_sd_configs: - - role: pod - selectors: - - field: spec.nodeName=${env:OTEL_K8S_NODE_NAME} - label: app.kubernetes.io/component!=opentelemetry-collector - role: pod - relabel_configs: - - action: keep - regex: true - source_labels: - - __meta_kubernetes_pod_annotation_prometheus_io_scrape - - action: drop - regex: true - source_labels: - - __meta_kubernetes_pod_annotation_prometheus_io_scrape_slow - - action: replace - regex: (https?) - source_labels: - - __meta_kubernetes_pod_annotation_prometheus_io_scheme - target_label: __scheme__ - - action: replace - regex: (.+) - source_labels: - - __meta_kubernetes_pod_annotation_prometheus_io_path - target_label: __metrics_path__ - - action: replace - regex: ([^:]+)(?::\d+)?;(\d+) - replacement: $$1:$$2 - source_labels: - - __address__ - - __meta_kubernetes_pod_annotation_prometheus_io_port - target_label: __address__ - - action: labelmap - regex: __meta_kubernetes_pod_annotation_prometheus_io_param_(.+) - replacement: __param_$$1 - - action: drop - regex: Pending|Succeeded|Failed|Completed - source_labels: - - __meta_kubernetes_pod_phase - - action: replace - source_labels: - - __meta_kubernetes_pod_label_app_kubernetes_io_name - target_label: job - scrape_interval: 30s receiver_creator/metrics: discovery: enabled: true @@ -119,7 +71,6 @@ spec: receivers: - otlp - receiver_creator/metrics - - prometheus/annotation_discovery traces: exporters: - debug @@ -171,3 +122,5 @@ spec: fieldPath: status.podIP - name: OTEL_RESOURCE_ATTRIBUTES value: "k8s.pod.name=$(OTEL_K8S_POD_NAME),k8s.namespace.name=$(OTEL_K8S_NAMESPACE),k8s.node.name=$(OTEL_K8S_NODE_NAME),host.name=$(OTEL_K8S_NODE_NAME),k8s.node.ip=$(OTEL_K8S_NODE_IP),k8s.pod.ip=$(OTEL_K8S_POD_IP),k8s.cluster.name=unknown_k8s_cluster" + + diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/hooks.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/hooks.yaml index 7abcc3a667..df09c1e80b 100644 --- a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/hooks.yaml +++ b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/hooks.yaml @@ -61,4 +61,5 @@ spec: - "delete" - "instrumentations,opampbridges,opentelemetrycollectors" - "-l" - - "helm.sh/chart=opentelemetry-kube-stack-0.15.1" + - "helm.sh/chart=opentelemetry-kube-stack-0.16.0" + diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml index 7dbf1665c0..17585fa86a 100644 --- a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml +++ b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml @@ -190,3 +190,4 @@ webhooks: scope: Namespaced sideEffects: None timeoutSeconds: 10 + diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/certmanager.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/certmanager.yaml index b7b5be3ffe..e8615238d0 100644 --- a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/certmanager.yaml +++ b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/certmanager.yaml @@ -41,3 +41,4 @@ metadata: namespace: default spec: selfSigned: {} + diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/clusterrole.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/clusterrole.yaml index 05d1494af1..2037050533 100644 --- a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/clusterrole.yaml +++ b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/clusterrole.yaml @@ -406,3 +406,5 @@ rules: - /metrics verbs: - get + + diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/clusterrolebinding.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/clusterrolebinding.yaml index 8259beef16..4acb7d53f5 100644 --- a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/clusterrolebinding.yaml +++ b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/clusterrolebinding.yaml @@ -20,3 +20,5 @@ subjects: - kind: ServiceAccount name: opentelemetry-operator namespace: default + + diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/deployment.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/deployment.yaml index 2854112b68..c775cd1cf3 100644 --- a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/deployment.yaml +++ b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/deployment.yaml @@ -102,3 +102,4 @@ spec: runAsGroup: 65532 runAsNonRoot: true runAsUser: 65532 + diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/role.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/role.yaml index 0a015afb82..b5339517a2 100644 --- a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/role.yaml +++ b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/role.yaml @@ -197,3 +197,4 @@ rules: - patch - update - watch + diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/rolebinding.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/rolebinding.yaml index 721fdb0099..ae376e80c9 100644 --- a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/rolebinding.yaml +++ b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/rolebinding.yaml @@ -21,3 +21,4 @@ subjects: - kind: ServiceAccount name: opentelemetry-operator namespace: default + diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/service.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/service.yaml index bf164a93d7..0a3006d80f 100644 --- a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/service.yaml +++ b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/service.yaml @@ -45,3 +45,4 @@ spec: selector: app.kubernetes.io/name: opentelemetry-operator app.kubernetes.io/component: controller-manager + diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/serviceaccount.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/serviceaccount.yaml index 6abe418372..c6ba25dbac 100644 --- a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/serviceaccount.yaml +++ b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/serviceaccount.yaml @@ -14,3 +14,4 @@ metadata: app.kubernetes.io/part-of: opentelemetry-operator app.kubernetes.io/instance: example app.kubernetes.io/component: controller-manager + diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml index f86f50575c..9039160e03 100644 --- a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml +++ b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml @@ -51,3 +51,4 @@ spec: runAsGroup: 65532 runAsNonRoot: true runAsUser: 65532 + diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/tests/test-service-connection.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/tests/test-service-connection.yaml index 79329c4b9b..88e0e0bc24 100644 --- a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/tests/test-service-connection.yaml +++ b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/tests/test-service-connection.yaml @@ -104,3 +104,4 @@ spec: runAsGroup: 65532 runAsNonRoot: true runAsUser: 65532 + diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/values.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/values.yaml index 40ed3a3679..9148e2a579 100644 --- a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/values.yaml +++ b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/values.yaml @@ -20,5 +20,3 @@ collectors: enabled: false metrics: enabled: true - prometheus: - enabled: true diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/clusterrole.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/clusterrole.yaml index 2c535f471b..9d2d1e8211 100644 --- a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/clusterrole.yaml +++ b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/clusterrole.yaml @@ -66,3 +66,4 @@ subjects: # quirk of the Operator name: "example-daemon-collector" namespace: default + diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/collector.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/collector.yaml index e6f55a5385..0a31142426 100644 --- a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/collector.yaml +++ b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/collector.yaml @@ -6,7 +6,7 @@ metadata: name: example-daemon namespace: default labels: - helm.sh/chart: opentelemetry-kube-stack-0.15.1 + helm.sh/chart: opentelemetry-kube-stack-0.16.0 app.kubernetes.io/version: "0.151.0" app.kubernetes.io/managed-by: Helm release: "example" @@ -130,3 +130,5 @@ spec: fieldPath: status.podIP - name: OTEL_RESOURCE_ATTRIBUTES value: "k8s.pod.name=$(OTEL_K8S_POD_NAME),k8s.namespace.name=$(OTEL_K8S_NAMESPACE),k8s.node.name=$(OTEL_K8S_NODE_NAME),host.name=$(OTEL_K8S_NODE_NAME),k8s.node.ip=$(OTEL_K8S_NODE_IP),k8s.pod.ip=$(OTEL_K8S_POD_IP),k8s.cluster.name=unknown_k8s_cluster" + + diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/hooks.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/hooks.yaml index 7abcc3a667..df09c1e80b 100644 --- a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/hooks.yaml +++ b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/hooks.yaml @@ -61,4 +61,5 @@ spec: - "delete" - "instrumentations,opampbridges,opentelemetrycollectors" - "-l" - - "helm.sh/chart=opentelemetry-kube-stack-0.15.1" + - "helm.sh/chart=opentelemetry-kube-stack-0.16.0" + diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml index 7dbf1665c0..17585fa86a 100644 --- a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml +++ b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml @@ -190,3 +190,4 @@ webhooks: scope: Namespaced sideEffects: None timeoutSeconds: 10 + diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/certmanager.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/certmanager.yaml index b7b5be3ffe..e8615238d0 100644 --- a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/certmanager.yaml +++ b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/certmanager.yaml @@ -41,3 +41,4 @@ metadata: namespace: default spec: selfSigned: {} + diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/clusterrole.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/clusterrole.yaml index 05d1494af1..2037050533 100644 --- a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/clusterrole.yaml +++ b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/clusterrole.yaml @@ -406,3 +406,5 @@ rules: - /metrics verbs: - get + + diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/clusterrolebinding.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/clusterrolebinding.yaml index 8259beef16..4acb7d53f5 100644 --- a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/clusterrolebinding.yaml +++ b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/clusterrolebinding.yaml @@ -20,3 +20,5 @@ subjects: - kind: ServiceAccount name: opentelemetry-operator namespace: default + + diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/deployment.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/deployment.yaml index 2854112b68..c775cd1cf3 100644 --- a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/deployment.yaml +++ b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/deployment.yaml @@ -102,3 +102,4 @@ spec: runAsGroup: 65532 runAsNonRoot: true runAsUser: 65532 + diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/role.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/role.yaml index 0a015afb82..b5339517a2 100644 --- a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/role.yaml +++ b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/role.yaml @@ -197,3 +197,4 @@ rules: - patch - update - watch + diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/rolebinding.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/rolebinding.yaml index 721fdb0099..ae376e80c9 100644 --- a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/rolebinding.yaml +++ b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/rolebinding.yaml @@ -21,3 +21,4 @@ subjects: - kind: ServiceAccount name: opentelemetry-operator namespace: default + diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/service.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/service.yaml index bf164a93d7..0a3006d80f 100644 --- a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/service.yaml +++ b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/service.yaml @@ -45,3 +45,4 @@ spec: selector: app.kubernetes.io/name: opentelemetry-operator app.kubernetes.io/component: controller-manager + diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/serviceaccount.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/serviceaccount.yaml index 6abe418372..c6ba25dbac 100644 --- a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/serviceaccount.yaml +++ b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/serviceaccount.yaml @@ -14,3 +14,4 @@ metadata: app.kubernetes.io/part-of: opentelemetry-operator app.kubernetes.io/instance: example app.kubernetes.io/component: controller-manager + diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml index f86f50575c..9039160e03 100644 --- a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml +++ b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml @@ -51,3 +51,4 @@ spec: runAsGroup: 65532 runAsNonRoot: true runAsUser: 65532 + diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/tests/test-service-connection.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/tests/test-service-connection.yaml index 79329c4b9b..88e0e0bc24 100644 --- a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/tests/test-service-connection.yaml +++ b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/tests/test-service-connection.yaml @@ -104,3 +104,4 @@ spec: runAsGroup: 65532 runAsNonRoot: true runAsUser: 65532 + diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/clusterrole.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/clusterrole.yaml new file mode 100644 index 0000000000..9d2d1e8211 --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/clusterrole.yaml @@ -0,0 +1,69 @@ +--- +# Source: opentelemetry-kube-stack/templates/clusterrole.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + name: example-collector +rules: +- apiGroups: [""] + resources: + - namespaces + - nodes + - nodes/proxy + - nodes/metrics + - nodes/stats + - services + - endpoints + - pods + - events + - secrets + - persistentvolumeclaims + - persistentvolumes + verbs: ["get", "list", "watch"] +- apiGroups: ["monitoring.coreos.com"] + resources: + - servicemonitors + - podmonitors + - scrapeconfigs + - probes + verbs: ["get", "list", "watch"] +- apiGroups: + - extensions + resources: + - ingresses + verbs: ["get", "list", "watch"] +- apiGroups: + - apps + resources: + - daemonsets + - deployments + - replicasets + - statefulsets + verbs: ["get", "list", "watch"] +- apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: ["get", "list", "watch"] +- apiGroups: ["discovery.k8s.io"] + resources: + - endpointslices + verbs: ["get", "list", "watch"] +- nonResourceURLs: ["/metrics", "/metrics/cadvisor"] + verbs: ["get"] +--- +# Source: opentelemetry-kube-stack/templates/clusterrole.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + name: example-daemon +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: example-collector +subjects: +- kind: ServiceAccount + # quirk of the Operator + name: "example-daemon-collector" + namespace: default + diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/collector.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/collector.yaml new file mode 100644 index 0000000000..aac16b8728 --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/collector.yaml @@ -0,0 +1,238 @@ +--- +# Source: opentelemetry-kube-stack/templates/collector.yaml +apiVersion: opentelemetry.io/v1beta1 +kind: OpenTelemetryCollector +metadata: + name: example-daemon + namespace: default + labels: + helm.sh/chart: opentelemetry-kube-stack-0.16.0 + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + release: "example" +spec: + managementState: managed + mode: daemonset + config: + exporters: + debug: {} + processors: + batch: + send_batch_max_size: 1500 + send_batch_size: 1000 + timeout: 1s + resource/hostname: + attributes: + - action: insert + from_attribute: k8s.node.name + key: host.name + resourcedetection/env: + detectors: + - env + - k8snode + override: false + timeout: 2s + receivers: + otlp: + protocols: + grpc: + endpoint: 0.0.0.0:4317 + http: + endpoint: 0.0.0.0:4318 + prometheus/cadvisor: + config: + scrape_configs: + - authorization: + credentials_file: /var/run/secrets/kubernetes.io/serviceaccount/token + type: Bearer + job_name: kubelet + metric_relabel_configs: + - action: drop + regex: container_cpu_(load_average_10s|system_seconds_total|user_seconds_total) + source_labels: + - __name__ + - action: drop + regex: container_fs_(io_current|reads_merged_total|sector_reads_total|sector_writes_total|writes_merged_total) + source_labels: + - __name__ + - action: drop + regex: container_memory_(mapped_file|swap) + source_labels: + - __name__ + - action: drop + regex: container_(file_descriptors|tasks_state|threads_max) + source_labels: + - __name__ + - action: drop + regex: container_spec.* + source_labels: + - __name__ + - action: drop + regex: .+; + source_labels: + - id + - pod + metrics_path: /metrics/cadvisor + relabel_configs: + - replacement: ${env:OTEL_K8S_NODE_NAME} + target_label: node + scheme: https + scrape_interval: 30s + scrape_timeout: 10s + static_configs: + - targets: + - ${env:OTEL_K8S_NODE_IP}:10250 + tls_config: + ca_file: /var/run/secrets/kubernetes.io/serviceaccount/ca.crt + insecure_skip_verify: true + prometheus/node_exporter: + config: + scrape_configs: + - job_name: node-exporter + relabel_configs: + - replacement: ${env:OTEL_K8S_NODE_NAME} + target_label: node + scrape_interval: 30s + scrape_timeout: 10s + static_configs: + - targets: + - ${env:OTEL_K8S_NODE_IP}:9100 + prometheus/pod_annotations: + config: + scrape_configs: + - job_name: kubernetes-pods + kubernetes_sd_configs: + - role: pod + selectors: + - field: spec.nodeName=${env:OTEL_K8S_NODE_NAME} + label: app.kubernetes.io/component!=opentelemetry-collector + role: pod + relabel_configs: + - action: keep + regex: true + source_labels: + - __meta_kubernetes_pod_annotation_prometheus_io_scrape + - action: drop + regex: true + source_labels: + - __meta_kubernetes_pod_annotation_prometheus_io_scrape_slow + - action: replace + regex: (https?) + source_labels: + - __meta_kubernetes_pod_annotation_prometheus_io_scheme + target_label: __scheme__ + - action: replace + regex: (.+) + source_labels: + - __meta_kubernetes_pod_annotation_prometheus_io_path + target_label: __metrics_path__ + - action: replace + regex: ([^:]+)(?::\d+)?;(\d+) + replacement: $$1:$$2 + source_labels: + - __address__ + - __meta_kubernetes_pod_annotation_prometheus_io_port + target_label: __address__ + - action: labelmap + regex: __meta_kubernetes_pod_annotation_prometheus_io_param_(.+) + replacement: __param_$$1 + - action: labelmap + regex: __meta_kubernetes_pod_label_(.+) + - action: replace + source_labels: + - __meta_kubernetes_namespace + target_label: namespace + - action: replace + source_labels: + - __meta_kubernetes_pod_name + target_label: pod + - action: replace + source_labels: + - __meta_kubernetes_pod_node_name + target_label: node + - action: drop + regex: Pending|Succeeded|Failed|Completed + source_labels: + - __meta_kubernetes_pod_phase + - action: replace + source_labels: + - __meta_kubernetes_pod_label_app_kubernetes_io_name + target_label: job + scrape_interval: 30s + scrape_timeout: 10s + service: + pipelines: + logs: + exporters: + - debug + processors: + - resourcedetection/env + - resource/hostname + - batch + receivers: + - otlp + metrics: + exporters: + - debug + processors: + - resourcedetection/env + - resource/hostname + - batch + receivers: + - otlp + - prometheus/node_exporter + - prometheus/cadvisor + - prometheus/pod_annotations + traces: + exporters: + - debug + processors: + - resourcedetection/env + - resource/hostname + - batch + receivers: + - otlp + imagePullPolicy: IfNotPresent + upgradeStrategy: automatic + terminationGracePeriodSeconds: 30 + resources: + limits: + cpu: 200m + memory: 500Mi + requests: + cpu: 100m + memory: 250Mi + securityContext: + {} + env: + - name: K8S_NODE_NAME + valueFrom: + fieldRef: + fieldPath: spec.nodeName + - name: OTEL_K8S_NODE_NAME + valueFrom: + fieldRef: + fieldPath: spec.nodeName + - name: OTEL_K8S_NODE_IP + valueFrom: + fieldRef: + fieldPath: status.hostIP + - name: OTEL_K8S_NAMESPACE + valueFrom: + fieldRef: + apiVersion: v1 + fieldPath: metadata.namespace + - name: OTEL_K8S_POD_NAME + valueFrom: + fieldRef: + apiVersion: v1 + fieldPath: metadata.name + - name: OTEL_K8S_POD_IP + valueFrom: + fieldRef: + apiVersion: v1 + fieldPath: status.podIP + - name: OTEL_RESOURCE_ATTRIBUTES + value: "k8s.pod.name=$(OTEL_K8S_POD_NAME),k8s.namespace.name=$(OTEL_K8S_NAMESPACE),k8s.node.name=$(OTEL_K8S_NODE_NAME),host.name=$(OTEL_K8S_NODE_NAME),k8s.node.ip=$(OTEL_K8S_NODE_IP),k8s.pod.ip=$(OTEL_K8S_POD_IP),k8s.cluster.name=unknown_k8s_cluster" + + diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/hooks.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/hooks.yaml new file mode 100644 index 0000000000..df09c1e80b --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/hooks.yaml @@ -0,0 +1,65 @@ +--- +# Source: opentelemetry-kube-stack/templates/hooks.yaml +apiVersion: v1 +kind: ServiceAccount +metadata: + name: delete-resources-sa + annotations: + "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded +--- +# Source: opentelemetry-kube-stack/templates/hooks.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + name: delete-resources-role + annotations: + "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded +rules: + - apiGroups: + - opentelemetry.io + resources: + - instrumentations + - opampbridges + - opentelemetrycollectors + verbs: + - get + - list + - delete +--- +# Source: opentelemetry-kube-stack/templates/hooks.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + name: delete-resources-rolebinding + annotations: + "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: delete-resources-role +subjects: + - kind: ServiceAccount + name: delete-resources-sa +--- +# Source: opentelemetry-kube-stack/templates/hooks.yaml +apiVersion: batch/v1 +kind: Job +metadata: + name: opentelemetry-kube-stack-pre-delete-job + annotations: + "helm.sh/hook": pre-delete + "helm.sh/hook-delete-policy": hook-succeeded,hook-failed +spec: + template: + spec: + restartPolicy: Never + serviceAccountName: delete-resources-sa + containers: + - name: delete-resources + image: "rancher/kubectl:v1.34.1" + args: + - "delete" + - "instrumentations,opampbridges,opentelemetrycollectors" + - "-l" + - "helm.sh/chart=opentelemetry-kube-stack-0.16.0" + diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml new file mode 100644 index 0000000000..17585fa86a --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml @@ -0,0 +1,193 @@ +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/admission-webhooks/operator-webhook-with-cert-manager.yaml +apiVersion: admissionregistration.k8s.io/v1 +kind: MutatingWebhookConfiguration +metadata: + annotations: + cert-manager.io/inject-ca-from: default/example-opentelemetry-operator-serving-cert + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: webhook + name: example-opentelemetry-operator-mutation +webhooks: + - admissionReviewVersions: + - v1 + clientConfig: + service: + name: example-opentelemetry-operator-webhook + namespace: default + path: /mutate-opentelemetry-io-v1alpha1-instrumentation + port: 443 + failurePolicy: Ignore + name: minstrumentation.kb.io + rules: + - apiGroups: + - opentelemetry.io + apiVersions: + - v1alpha1 + operations: + - CREATE + - UPDATE + resources: + - instrumentations + scope: Namespaced + sideEffects: None + timeoutSeconds: 10 + - admissionReviewVersions: + - v1 + clientConfig: + service: + name: example-opentelemetry-operator-webhook + namespace: default + path: /mutate-opentelemetry-io-v1beta1-opentelemetrycollector + port: 443 + failurePolicy: Ignore + name: mopentelemetrycollectorbeta.kb.io + rules: + - apiGroups: + - opentelemetry.io + apiVersions: + - v1beta1 + operations: + - CREATE + - UPDATE + resources: + - opentelemetrycollectors + scope: Namespaced + sideEffects: None + timeoutSeconds: 10 + - admissionReviewVersions: + - v1 + clientConfig: + service: + name: example-opentelemetry-operator-webhook + namespace: default + path: /mutate-v1-pod + port: 443 + failurePolicy: Ignore + name: mpod.kb.io + rules: + - apiGroups: + - "" + apiVersions: + - v1 + operations: + - CREATE + resources: + - pods + scope: Namespaced + sideEffects: None + timeoutSeconds: 10 +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/admission-webhooks/operator-webhook-with-cert-manager.yaml +apiVersion: admissionregistration.k8s.io/v1 +kind: ValidatingWebhookConfiguration +metadata: + annotations: + cert-manager.io/inject-ca-from: default/example-opentelemetry-operator-serving-cert + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: webhook + name: example-opentelemetry-operator-validation +webhooks: + - admissionReviewVersions: + - v1 + clientConfig: + service: + name: example-opentelemetry-operator-webhook + namespace: default + path: /validate-opentelemetry-io-v1alpha1-instrumentation + port: 443 + failurePolicy: Ignore + name: vinstrumentationcreateupdate.kb.io + rules: + - apiGroups: + - opentelemetry.io + apiVersions: + - v1alpha1 + operations: + - CREATE + - UPDATE + resources: + - instrumentations + scope: Namespaced + sideEffects: None + timeoutSeconds: 10 + - admissionReviewVersions: + - v1 + clientConfig: + service: + name: example-opentelemetry-operator-webhook + namespace: default + path: /validate-opentelemetry-io-v1alpha1-instrumentation + port: 443 + failurePolicy: Ignore + name: vinstrumentationdelete.kb.io + rules: + - apiGroups: + - opentelemetry.io + apiVersions: + - v1alpha1 + operations: + - DELETE + resources: + - instrumentations + scope: Namespaced + sideEffects: None + timeoutSeconds: 10 + - admissionReviewVersions: + - v1 + clientConfig: + service: + name: example-opentelemetry-operator-webhook + namespace: default + path: /validate-opentelemetry-io-v1beta1-opentelemetrycollector + port: 443 + failurePolicy: Ignore + name: vopentelemetrycollectorcreateupdatebeta.kb.io + rules: + - apiGroups: + - opentelemetry.io + apiVersions: + - v1beta1 + operations: + - CREATE + - UPDATE + resources: + - opentelemetrycollectors + scope: Namespaced + sideEffects: None + timeoutSeconds: 10 + - admissionReviewVersions: + - v1 + clientConfig: + service: + name: example-opentelemetry-operator-webhook + namespace: default + path: /validate-opentelemetry-io-v1beta1-opentelemetrycollector + port: 443 + failurePolicy: Ignore + name: vopentelemetrycollectordeletebeta.kb.io + rules: + - apiGroups: + - opentelemetry.io + apiVersions: + - v1beta1 + operations: + - DELETE + resources: + - opentelemetrycollectors + scope: Namespaced + sideEffects: None + timeoutSeconds: 10 + diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/admission-webhooks/operator-webhook.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/admission-webhooks/operator-webhook.yaml new file mode 100644 index 0000000000..5b9ff5511d --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/admission-webhooks/operator-webhook.yaml @@ -0,0 +1,3 @@ +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/admission-webhooks/operator-webhook.yaml +--- diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/certmanager.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/certmanager.yaml new file mode 100644 index 0000000000..e8615238d0 --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/certmanager.yaml @@ -0,0 +1,44 @@ +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/certmanager.yaml +apiVersion: cert-manager.io/v1 +kind: Certificate +metadata: + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: webhook + name: example-opentelemetry-operator-serving-cert + namespace: default +spec: + dnsNames: + - example-opentelemetry-operator-webhook.default.svc + - example-opentelemetry-operator-webhook.default.svc.cluster.local + issuerRef: + kind: Issuer + name: example-opentelemetry-operator-selfsigned-issuer + secretName: example-opentelemetry-operator-controller-manager-service-cert + subject: + organizationalUnits: + - example-opentelemetry-operator +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/certmanager.yaml +apiVersion: cert-manager.io/v1 +kind: Issuer +metadata: + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: webhook + name: example-opentelemetry-operator-selfsigned-issuer + namespace: default +spec: + selfSigned: {} + diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/clusterrole.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/clusterrole.yaml new file mode 100644 index 0000000000..2037050533 --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/clusterrole.yaml @@ -0,0 +1,410 @@ +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/clusterrole.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: controller-manager + name: example-opentelemetry-operator-manager +rules: + - apiGroups: + - "" + resources: + - configmaps + - persistentvolumeclaims + - persistentvolumes + - pods + - serviceaccounts + - services + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - "" + resources: + - events + verbs: + - create + - get + - list + - patch + - watch + - apiGroups: + - "" + resources: + - namespaces + verbs: + - list + - watch + - apiGroups: + - "" + resources: + - namespaces/status + verbs: + - get + - list + - watch + - apiGroups: + - "" + resources: + - nodes/spec + verbs: + - get + - list + - watch + - apiGroups: + - "" + resources: + - pods/status + verbs: + - get + - list + - watch + - apiGroups: + - "" + resources: + - replicationcontrollers + verbs: + - get + - list + - watch + - apiGroups: + - "" + resources: + - replicationcontrollers/status + verbs: + - get + - list + - watch + - apiGroups: + - "" + resources: + - resourcequotas + verbs: + - get + - list + - watch + - apiGroups: + - apps + resources: + - daemonsets + - deployments + - statefulsets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - apps + - extensions + resources: + - replicasets + verbs: + - get + - list + - watch + - apiGroups: + - extensions + resources: + - daemonsets + verbs: + - get + - list + - watch + - apiGroups: + - extensions + resources: + - deployments + verbs: + - get + - list + - watch + - apiGroups: + - autoscaling + resources: + - horizontalpodautoscalers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - batch + resources: + - jobs + verbs: + - get + - list + - watch + - apiGroups: + - batch + resources: + - cronjobs + verbs: + - get + - list + - watch + - apiGroups: + - "" + resources: + - nodes/proxy + verbs: + - get + - apiGroups: + - "" + resources: + - nodes/stats + verbs: + - get + - apiGroups: + - config.openshift.io + resources: + - infrastructures + - infrastructures/status + verbs: + - get + - list + - watch + - apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - get + - list + - update + - apiGroups: + - discovery.k8s.io + resources: + - endpointslices + verbs: + - get + - list + - apiGroups: + - events.k8s.io + resources: + - events + verbs: + - create + - list + - patch + - watch + - apiGroups: + - gateway.networking.k8s.io + resources: + - httproutes + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - monitoring.coreos.com + resources: + - podmonitors + - servicemonitors + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - networking.k8s.io + resources: + - ingresses + - networkpolicies + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - opentelemetry.io + resources: + - instrumentations + verbs: + - get + - list + - patch + - update + - watch + - apiGroups: + - opentelemetry.io + resources: + - opampbridges + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - opentelemetry.io + resources: + - opampbridges/finalizers + verbs: + - update + - apiGroups: + - opentelemetry.io + resources: + - opampbridges/status + verbs: + - get + - patch + - update + - apiGroups: + - opentelemetry.io + resources: + - opentelemetrycollectors + verbs: + - get + - list + - patch + - update + - watch + - apiGroups: + - opentelemetry.io + resources: + - opentelemetrycollectors/finalizers + verbs: + - get + - patch + - update + - apiGroups: + - opentelemetry.io + resources: + - opentelemetrycollectors/status + verbs: + - get + - patch + - update + - apiGroups: + - policy + resources: + - poddisruptionbudgets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - route.openshift.io + resources: + - routes + - routes/custom-host + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - opentelemetry.io + resources: + - targetallocators + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - opentelemetry.io + resources: + - targetallocators/status + verbs: + - get + - patch + - update + - apiGroups: + - opentelemetry.io + resources: + - targetallocators/finalizers + verbs: + - get + - patch + - update + - apiGroups: + - cert-manager.io + resources: + - issuers + - certificaterequests + - certificates + verbs: + - create + - get + - list + - watch + - update + - patch + - delete + - apiGroups: + - authentication.k8s.io + resources: + - tokenreviews + verbs: + - create + - apiGroups: + - authorization.k8s.io + resources: + - subjectaccessreviews + verbs: + - create +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/clusterrole.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: controller-manager + name: example-opentelemetry-operator-metrics +rules: + - nonResourceURLs: + - /metrics + verbs: + - get + + diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/clusterrolebinding.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/clusterrolebinding.yaml new file mode 100644 index 0000000000..4acb7d53f5 --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/clusterrolebinding.yaml @@ -0,0 +1,24 @@ +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/clusterrolebinding.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: controller-manager + name: example-opentelemetry-operator-manager +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: example-opentelemetry-operator-manager +subjects: + - kind: ServiceAccount + name: opentelemetry-operator + namespace: default + + diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/deployment.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/deployment.yaml new file mode 100644 index 0000000000..c775cd1cf3 --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/deployment.yaml @@ -0,0 +1,105 @@ +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/deployment.yaml +apiVersion: apps/v1 +kind: Deployment +metadata: + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: controller-manager + name: example-opentelemetry-operator + namespace: default +spec: + replicas: 1 + revisionHistoryLimit: 10 + selector: + matchLabels: + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/component: controller-manager + template: + metadata: + annotations: + kubectl.kubernetes.io/default-container: manager + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: controller-manager + spec: + automountServiceAccountToken: true + hostNetwork: false + containers: + - args: + - --metrics-addr=0.0.0.0:8443 + - --metrics-secure=true + - --enable-leader-election + - --health-probe-addr=:8081 + - --webhook-port=9443 + - --collector-image=otel/opentelemetry-collector-k8s:0.151.0 + command: + - /manager + env: + - name: SERVICE_ACCOUNT_NAME + valueFrom: + fieldRef: + fieldPath: spec.serviceAccountName + - name: ENABLE_WEBHOOKS + value: "true" + image: "ghcr.io/open-telemetry/opentelemetry-operator/opentelemetry-operator:0.151.0" + name: manager + imagePullPolicy: IfNotPresent + ports: + - containerPort: 8443 + name: metrics + protocol: TCP + - containerPort: 9443 + name: webhook-server + protocol: TCP + livenessProbe: + httpGet: + path: /healthz + port: 8081 + initialDelaySeconds: 15 + periodSeconds: 20 + readinessProbe: + httpGet: + path: /readyz + port: 8081 + initialDelaySeconds: 5 + periodSeconds: 10 + resources: + {} + volumeMounts: + - mountPath: /tmp/k8s-webhook-server/serving-certs + name: cert + readOnly: true + securityContext: + allowPrivilegeEscalation: false + capabilities: + drop: + - ALL + runAsNonRoot: true + seccompProfile: + type: RuntimeDefault + nodeSelector: + kubernetes.io/os: linux + serviceAccountName: opentelemetry-operator + terminationGracePeriodSeconds: 10 + volumes: + - name: cert + secret: + defaultMode: 420 + secretName: example-opentelemetry-operator-controller-manager-service-cert + securityContext: + fsGroup: 65532 + runAsGroup: 65532 + runAsNonRoot: true + runAsUser: 65532 + diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/role.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/role.yaml new file mode 100644 index 0000000000..b5339517a2 --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/role.yaml @@ -0,0 +1,200 @@ +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/role.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: controller-manager + name: example-opentelemetry-operator-leader-election + namespace: default +rules: + - apiGroups: + - "" + resources: + - configmaps + - pods + - serviceaccounts + - services + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - "" + resources: + - events + verbs: + - create + - patch + - apiGroups: + - "" + resources: + - namespaces + - secrets + verbs: + - get + - list + - watch + - apiGroups: + - apps + resources: + - daemonsets + - deployments + - statefulsets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - apps + resources: + - replicasets + verbs: + - get + - list + - watch + - apiGroups: + - autoscaling + resources: + - horizontalpodautoscalers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - batch + resources: + - jobs + verbs: + - get + - list + - watch + - apiGroups: + - config.openshift.io + resources: + - infrastructures + - infrastructures/status + verbs: + - get + - list + - watch + - apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - get + - list + - update + - apiGroups: + - monitoring.coreos.com + resources: + - podmonitors + - servicemonitors + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - opentelemetry.io + resources: + - instrumentations + - opentelemetrycollectors + verbs: + - get + - list + - patch + - update + - watch + - apiGroups: + - opentelemetry.io + resources: + - opampbridges + - targetallocators + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - opentelemetry.io + resources: + - opampbridges/finalizers + verbs: + - update + - apiGroups: + - opentelemetry.io + resources: + - opampbridges/status + - opentelemetrycollectors/finalizers + - opentelemetrycollectors/status + - targetallocators/status + - targetallocators/finalizers + verbs: + - get + - patch + - update + - apiGroups: + - policy + resources: + - poddisruptionbudgets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - route.openshift.io + resources: + - routes + - routes/custom-host + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/rolebinding.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/rolebinding.yaml new file mode 100644 index 0000000000..ae376e80c9 --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/rolebinding.yaml @@ -0,0 +1,24 @@ +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/rolebinding.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: controller-manager + name: example-opentelemetry-operator-leader-election + namespace: default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: example-opentelemetry-operator-leader-election +subjects: + - kind: ServiceAccount + name: opentelemetry-operator + namespace: default + diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/service.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/service.yaml new file mode 100644 index 0000000000..0a3006d80f --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/service.yaml @@ -0,0 +1,48 @@ +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/service.yaml +apiVersion: v1 +kind: Service +metadata: + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: controller-manager + name: example-opentelemetry-operator + namespace: default +spec: + ports: + - name: metrics + port: 8443 + protocol: TCP + targetPort: metrics + selector: + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/component: controller-manager +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/service.yaml +apiVersion: v1 +kind: Service +metadata: + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: controller-manager + name: example-opentelemetry-operator-webhook + namespace: default +spec: + ports: + - port: 443 + protocol: TCP + targetPort: webhook-server + selector: + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/component: controller-manager + diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/serviceaccount.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/serviceaccount.yaml new file mode 100644 index 0000000000..c6ba25dbac --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/serviceaccount.yaml @@ -0,0 +1,17 @@ +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/serviceaccount.yaml +apiVersion: v1 +kind: ServiceAccount +automountServiceAccountToken: true +metadata: + name: opentelemetry-operator + namespace: default + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: controller-manager + diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml new file mode 100644 index 0000000000..9039160e03 --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml @@ -0,0 +1,54 @@ +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/tests/test-certmanager-connection.yaml +apiVersion: v1 +kind: Pod +metadata: + name: "example-opentelemetry-operator-cert-manager" + namespace: default + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: webhook + annotations: + "helm.sh/hook": test +spec: + containers: + - name: wget + image: "busybox:latest" + env: + - name: CERT_MANAGER_CLUSTERIP + value: "cert-manager-webhook" + - name: CERT_MANAGER_PORT + value: "443" + command: + - sh + - -c + # The following shell script tests if the cert-manager service is up. If the service is up, when we try + # to wget its exposed port, we will get an HTTP error 400. + - | + wget_output=$(wget -q "$CERT_MANAGER_CLUSTERIP:$CERT_MANAGER_PORT") + if wget_output=="wget: server returned error: HTTP/1.0 400 Bad Request" + then exit 0 + else exit 1 + fi + securityContext: + allowPrivilegeEscalation: false + capabilities: + drop: + - ALL + runAsNonRoot: true + seccompProfile: + type: RuntimeDefault + restartPolicy: Never + nodeSelector: + kubernetes.io/os: linux + securityContext: + fsGroup: 65532 + runAsGroup: 65532 + runAsNonRoot: true + runAsUser: 65532 + diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/tests/test-service-connection.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/tests/test-service-connection.yaml new file mode 100644 index 0000000000..88e0e0bc24 --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/tests/test-service-connection.yaml @@ -0,0 +1,107 @@ +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/tests/test-service-connection.yaml +apiVersion: v1 +kind: Pod +metadata: + name: "example-opentelemetry-operator-metrics" + namespace: default + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: controller-manager + annotations: + "helm.sh/hook": test +spec: + containers: + - name: wget + image: "busybox:latest" + env: + - name: MANAGER_METRICS_SERVICE_CLUSTERIP + value: "example-opentelemetry-operator" + - name: MANAGER_METRICS_SERVICE_PORT + value: "8443" + command: + - sh + - -c + # The following shell script tests if the controller-manager-metrics-service is up. + # If the service is up, when we try to wget its exposed port, we will get an HTTP error 400. + - | + wget_output=$(wget -q "$MANAGER_METRICS_SERVICE_CLUSTERIP:$MANAGER_METRICS_SERVICE_PORT") + if wget_output=="wget: server returned error: HTTP/1.0 400 Bad Request" + then exit 0 + else exit 1 + fi + securityContext: + allowPrivilegeEscalation: false + capabilities: + drop: + - ALL + runAsNonRoot: true + seccompProfile: + type: RuntimeDefault + restartPolicy: Never + nodeSelector: + kubernetes.io/os: linux + securityContext: + fsGroup: 65532 + runAsGroup: 65532 + runAsNonRoot: true + runAsUser: 65532 +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/tests/test-service-connection.yaml +apiVersion: v1 +kind: Pod +metadata: + name: "example-opentelemetry-operator-webhook" + namespace: default + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: controller-manager + annotations: + "helm.sh/hook": test +spec: + containers: + - name: wget + image: "busybox:latest" + env: + - name: WEBHOOK_SERVICE_CLUSTERIP + value: "example-opentelemetry-operator-webhook" + - name: WEBHOOK_SERVICE_PORT + value: "443" + command: + - sh + - -c + # The following shell script tests if the webhook service is up. If the service is up, when we try + # to wget its exposed port, we will get an HTTP error 400. + - | + wget_output=$(wget -q "$WEBHOOK_SERVICE_CLUSTERIP:$WEBHOOK_SERVICE_PORT") + if wget_output=="wget: server returned error: HTTP/1.0 400 Bad Request" + then exit 0 + else exit 1 + fi + securityContext: + allowPrivilegeEscalation: false + capabilities: + drop: + - ALL + runAsNonRoot: true + seccompProfile: + type: RuntimeDefault + restartPolicy: Never + nodeSelector: + kubernetes.io/os: linux + securityContext: + fsGroup: 65532 + runAsGroup: 65532 + runAsNonRoot: true + runAsUser: 65532 + diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/values.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/values.yaml new file mode 100644 index 0000000000..f3ebaac9f1 --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/values.yaml @@ -0,0 +1,45 @@ +# Demonstrates the `presets.prometheus.*` family of presets, which add named instances +# of the prometheus receiver to the metrics pipeline of the daemonset collector: +# +# * prometheus/node_exporter — scrapes Prometheus Node Exporter on the same node +# * prometheus/cadvisor — scrapes cAdvisor metrics from the local kubelet +# * prometheus/pod_annotations — scrapes pods carrying classic prometheus.io/* annotations +# +# Each preset uses ${OTEL_K8S_NODE_IP} / ${OTEL_K8S_NODE_NAME} to scope scraping to the +# local node, so the load is naturally sharded across daemonset collector pods. +# +# This example disables the default `scrape_configs_file` so node-exporter and cAdvisor +# are only scraped once. The default daemon_scrape_configs.yaml already has its own +# node-exporter, kubelet/cadvisor and pod-annotation scrape jobs — enabling these presets +# alongside it would cause duplicate scrapes. +collectors: + daemon: + scrape_configs_file: "" + presets: + logsCollection: + enabled: false + kubeletMetrics: + enabled: false + hostMetrics: + enabled: false + kubernetesAttributes: + enabled: false + kubernetesEvents: + enabled: false + clusterMetrics: + enabled: false + prometheus: + nodeExporter: + enabled: true + port: 9100 + scrapeInterval: 30s + scrapeTimeout: 10s + cadvisor: + enabled: true + port: 10250 + scrapeInterval: 30s + scrapeTimeout: 10s + podAnnotations: + enabled: true + scrapeInterval: 30s + scrapeTimeout: 10s \ No newline at end of file diff --git a/charts/opentelemetry-kube-stack/examples/default/rendered/clusterrole.yaml b/charts/opentelemetry-kube-stack/examples/default/rendered/clusterrole.yaml index 3379a6a125..04fd4b7372 100644 --- a/charts/opentelemetry-kube-stack/examples/default/rendered/clusterrole.yaml +++ b/charts/opentelemetry-kube-stack/examples/default/rendered/clusterrole.yaml @@ -138,3 +138,4 @@ subjects: # quirk of the Operator name: "example-daemon-collector" namespace: default + diff --git a/charts/opentelemetry-kube-stack/examples/default/rendered/collector.yaml b/charts/opentelemetry-kube-stack/examples/default/rendered/collector.yaml index a030f9c8c0..87cf348759 100644 --- a/charts/opentelemetry-kube-stack/examples/default/rendered/collector.yaml +++ b/charts/opentelemetry-kube-stack/examples/default/rendered/collector.yaml @@ -6,7 +6,7 @@ metadata: name: example-daemon namespace: default labels: - helm.sh/chart: opentelemetry-kube-stack-0.15.1 + helm.sh/chart: opentelemetry-kube-stack-0.16.0 app.kubernetes.io/version: "0.151.0" app.kubernetes.io/managed-by: Helm release: "example" @@ -512,3 +512,4 @@ spec: - name: hostfs hostPath: path: / + diff --git a/charts/opentelemetry-kube-stack/examples/default/rendered/hooks.yaml b/charts/opentelemetry-kube-stack/examples/default/rendered/hooks.yaml index 7abcc3a667..df09c1e80b 100644 --- a/charts/opentelemetry-kube-stack/examples/default/rendered/hooks.yaml +++ b/charts/opentelemetry-kube-stack/examples/default/rendered/hooks.yaml @@ -61,4 +61,5 @@ spec: - "delete" - "instrumentations,opampbridges,opentelemetrycollectors" - "-l" - - "helm.sh/chart=opentelemetry-kube-stack-0.15.1" + - "helm.sh/chart=opentelemetry-kube-stack-0.16.0" + diff --git a/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml b/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml index 7dbf1665c0..17585fa86a 100644 --- a/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml +++ b/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml @@ -190,3 +190,4 @@ webhooks: scope: Namespaced sideEffects: None timeoutSeconds: 10 + diff --git a/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/certmanager.yaml b/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/certmanager.yaml index b7b5be3ffe..e8615238d0 100644 --- a/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/certmanager.yaml +++ b/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/certmanager.yaml @@ -41,3 +41,4 @@ metadata: namespace: default spec: selfSigned: {} + diff --git a/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/clusterrole.yaml b/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/clusterrole.yaml index 05d1494af1..2037050533 100644 --- a/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/clusterrole.yaml +++ b/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/clusterrole.yaml @@ -406,3 +406,5 @@ rules: - /metrics verbs: - get + + diff --git a/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/clusterrolebinding.yaml b/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/clusterrolebinding.yaml index 8259beef16..4acb7d53f5 100644 --- a/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/clusterrolebinding.yaml +++ b/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/clusterrolebinding.yaml @@ -20,3 +20,5 @@ subjects: - kind: ServiceAccount name: opentelemetry-operator namespace: default + + diff --git a/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/deployment.yaml b/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/deployment.yaml index 2854112b68..c775cd1cf3 100644 --- a/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/deployment.yaml +++ b/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/deployment.yaml @@ -102,3 +102,4 @@ spec: runAsGroup: 65532 runAsNonRoot: true runAsUser: 65532 + diff --git a/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/role.yaml b/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/role.yaml index 0a015afb82..b5339517a2 100644 --- a/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/role.yaml +++ b/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/role.yaml @@ -197,3 +197,4 @@ rules: - patch - update - watch + diff --git a/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/rolebinding.yaml b/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/rolebinding.yaml index 721fdb0099..ae376e80c9 100644 --- a/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/rolebinding.yaml +++ b/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/rolebinding.yaml @@ -21,3 +21,4 @@ subjects: - kind: ServiceAccount name: opentelemetry-operator namespace: default + diff --git a/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/service.yaml b/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/service.yaml index bf164a93d7..0a3006d80f 100644 --- a/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/service.yaml +++ b/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/service.yaml @@ -45,3 +45,4 @@ spec: selector: app.kubernetes.io/name: opentelemetry-operator app.kubernetes.io/component: controller-manager + diff --git a/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/serviceaccount.yaml b/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/serviceaccount.yaml index 6abe418372..c6ba25dbac 100644 --- a/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/serviceaccount.yaml +++ b/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/serviceaccount.yaml @@ -14,3 +14,4 @@ metadata: app.kubernetes.io/part-of: opentelemetry-operator app.kubernetes.io/instance: example app.kubernetes.io/component: controller-manager + diff --git a/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml b/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml index f86f50575c..9039160e03 100644 --- a/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml +++ b/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml @@ -51,3 +51,4 @@ spec: runAsGroup: 65532 runAsNonRoot: true runAsUser: 65532 + diff --git a/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/tests/test-service-connection.yaml b/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/tests/test-service-connection.yaml index 79329c4b9b..88e0e0bc24 100644 --- a/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/tests/test-service-connection.yaml +++ b/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/tests/test-service-connection.yaml @@ -104,3 +104,4 @@ spec: runAsGroup: 65532 runAsNonRoot: true runAsUser: 65532 + diff --git a/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/clusterrole.yaml b/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/clusterrole.yaml index 2ed6efe919..5f316fe954 100644 --- a/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/clusterrole.yaml +++ b/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/clusterrole.yaml @@ -138,3 +138,4 @@ subjects: # quirk of the Operator name: "agent-collector" namespace: default + diff --git a/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/collector.yaml b/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/collector.yaml index beab5c2734..c8ee284931 100644 --- a/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/collector.yaml +++ b/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/collector.yaml @@ -6,7 +6,7 @@ metadata: name: agent namespace: default labels: - helm.sh/chart: opentelemetry-kube-stack-0.15.1 + helm.sh/chart: opentelemetry-kube-stack-0.16.0 app.kubernetes.io/version: "0.151.0" app.kubernetes.io/managed-by: Helm release: "example" @@ -232,7 +232,7 @@ metadata: name: gateway namespace: default labels: - helm.sh/chart: opentelemetry-kube-stack-0.15.1 + helm.sh/chart: opentelemetry-kube-stack-0.16.0 app.kubernetes.io/version: "0.151.0" app.kubernetes.io/managed-by: Helm release: "example" @@ -365,7 +365,7 @@ metadata: name: ingress namespace: default labels: - helm.sh/chart: opentelemetry-kube-stack-0.15.1 + helm.sh/chart: opentelemetry-kube-stack-0.16.0 app.kubernetes.io/version: "0.151.0" app.kubernetes.io/managed-by: Helm release: "example" @@ -484,3 +484,4 @@ spec: path: /var/lib/otelcol/ingress type: DirectoryOrCreate name: varlibotelcol + diff --git a/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/hooks.yaml b/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/hooks.yaml index 7abcc3a667..df09c1e80b 100644 --- a/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/hooks.yaml +++ b/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/hooks.yaml @@ -61,4 +61,5 @@ spec: - "delete" - "instrumentations,opampbridges,opentelemetrycollectors" - "-l" - - "helm.sh/chart=opentelemetry-kube-stack-0.15.1" + - "helm.sh/chart=opentelemetry-kube-stack-0.16.0" + diff --git a/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml b/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml index 7dbf1665c0..17585fa86a 100644 --- a/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml +++ b/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml @@ -190,3 +190,4 @@ webhooks: scope: Namespaced sideEffects: None timeoutSeconds: 10 + diff --git a/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/certmanager.yaml b/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/certmanager.yaml index b7b5be3ffe..e8615238d0 100644 --- a/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/certmanager.yaml +++ b/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/certmanager.yaml @@ -41,3 +41,4 @@ metadata: namespace: default spec: selfSigned: {} + diff --git a/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/clusterrole.yaml b/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/clusterrole.yaml index 05d1494af1..2037050533 100644 --- a/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/clusterrole.yaml +++ b/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/clusterrole.yaml @@ -406,3 +406,5 @@ rules: - /metrics verbs: - get + + diff --git a/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/clusterrolebinding.yaml b/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/clusterrolebinding.yaml index 8259beef16..4acb7d53f5 100644 --- a/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/clusterrolebinding.yaml +++ b/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/clusterrolebinding.yaml @@ -20,3 +20,5 @@ subjects: - kind: ServiceAccount name: opentelemetry-operator namespace: default + + diff --git a/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/deployment.yaml b/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/deployment.yaml index 2854112b68..c775cd1cf3 100644 --- a/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/deployment.yaml +++ b/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/deployment.yaml @@ -102,3 +102,4 @@ spec: runAsGroup: 65532 runAsNonRoot: true runAsUser: 65532 + diff --git a/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/role.yaml b/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/role.yaml index 0a015afb82..b5339517a2 100644 --- a/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/role.yaml +++ b/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/role.yaml @@ -197,3 +197,4 @@ rules: - patch - update - watch + diff --git a/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/rolebinding.yaml b/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/rolebinding.yaml index 721fdb0099..ae376e80c9 100644 --- a/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/rolebinding.yaml +++ b/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/rolebinding.yaml @@ -21,3 +21,4 @@ subjects: - kind: ServiceAccount name: opentelemetry-operator namespace: default + diff --git a/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/service.yaml b/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/service.yaml index bf164a93d7..0a3006d80f 100644 --- a/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/service.yaml +++ b/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/service.yaml @@ -45,3 +45,4 @@ spec: selector: app.kubernetes.io/name: opentelemetry-operator app.kubernetes.io/component: controller-manager + diff --git a/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/serviceaccount.yaml b/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/serviceaccount.yaml index 6abe418372..c6ba25dbac 100644 --- a/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/serviceaccount.yaml +++ b/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/serviceaccount.yaml @@ -14,3 +14,4 @@ metadata: app.kubernetes.io/part-of: opentelemetry-operator app.kubernetes.io/instance: example app.kubernetes.io/component: controller-manager + diff --git a/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml b/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml index f86f50575c..9039160e03 100644 --- a/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml +++ b/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml @@ -51,3 +51,4 @@ spec: runAsGroup: 65532 runAsNonRoot: true runAsUser: 65532 + diff --git a/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/tests/test-service-connection.yaml b/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/tests/test-service-connection.yaml index 79329c4b9b..88e0e0bc24 100644 --- a/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/tests/test-service-connection.yaml +++ b/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/tests/test-service-connection.yaml @@ -104,3 +104,4 @@ spec: runAsGroup: 65532 runAsNonRoot: true runAsUser: 65532 + diff --git a/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/clusterrole.yaml b/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/clusterrole.yaml index ba20b50e83..e936bf24d8 100644 --- a/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/clusterrole.yaml +++ b/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/clusterrole.yaml @@ -141,3 +141,4 @@ subjects: # quirk of the Operator name: "example-daemon-collector" namespace: default + diff --git a/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/collector.yaml b/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/collector.yaml index 48a7957699..42d52cdd0f 100644 --- a/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/collector.yaml +++ b/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/collector.yaml @@ -6,7 +6,7 @@ metadata: name: example-cluster-stats namespace: default labels: - helm.sh/chart: opentelemetry-kube-stack-0.15.1 + helm.sh/chart: opentelemetry-kube-stack-0.16.0 app.kubernetes.io/version: "0.151.0" app.kubernetes.io/managed-by: Helm release: "example" @@ -173,7 +173,7 @@ metadata: name: example-daemon namespace: default labels: - helm.sh/chart: opentelemetry-kube-stack-0.15.1 + helm.sh/chart: opentelemetry-kube-stack-0.16.0 app.kubernetes.io/version: "0.151.0" app.kubernetes.io/managed-by: Helm release: "example" @@ -644,3 +644,4 @@ spec: - name: hostfs hostPath: path: / + diff --git a/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/hooks.yaml b/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/hooks.yaml index 7abcc3a667..df09c1e80b 100644 --- a/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/hooks.yaml +++ b/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/hooks.yaml @@ -61,4 +61,5 @@ spec: - "delete" - "instrumentations,opampbridges,opentelemetrycollectors" - "-l" - - "helm.sh/chart=opentelemetry-kube-stack-0.15.1" + - "helm.sh/chart=opentelemetry-kube-stack-0.16.0" + diff --git a/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml b/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml index 7dbf1665c0..17585fa86a 100644 --- a/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml +++ b/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml @@ -190,3 +190,4 @@ webhooks: scope: Namespaced sideEffects: None timeoutSeconds: 10 + diff --git a/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/certmanager.yaml b/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/certmanager.yaml index b7b5be3ffe..e8615238d0 100644 --- a/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/certmanager.yaml +++ b/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/certmanager.yaml @@ -41,3 +41,4 @@ metadata: namespace: default spec: selfSigned: {} + diff --git a/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/clusterrole.yaml b/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/clusterrole.yaml index 05d1494af1..2037050533 100644 --- a/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/clusterrole.yaml +++ b/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/clusterrole.yaml @@ -406,3 +406,5 @@ rules: - /metrics verbs: - get + + diff --git a/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/clusterrolebinding.yaml b/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/clusterrolebinding.yaml index 8259beef16..4acb7d53f5 100644 --- a/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/clusterrolebinding.yaml +++ b/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/clusterrolebinding.yaml @@ -20,3 +20,5 @@ subjects: - kind: ServiceAccount name: opentelemetry-operator namespace: default + + diff --git a/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/deployment.yaml b/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/deployment.yaml index 2854112b68..c775cd1cf3 100644 --- a/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/deployment.yaml +++ b/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/deployment.yaml @@ -102,3 +102,4 @@ spec: runAsGroup: 65532 runAsNonRoot: true runAsUser: 65532 + diff --git a/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/role.yaml b/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/role.yaml index 0a015afb82..b5339517a2 100644 --- a/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/role.yaml +++ b/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/role.yaml @@ -197,3 +197,4 @@ rules: - patch - update - watch + diff --git a/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/rolebinding.yaml b/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/rolebinding.yaml index 721fdb0099..ae376e80c9 100644 --- a/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/rolebinding.yaml +++ b/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/rolebinding.yaml @@ -21,3 +21,4 @@ subjects: - kind: ServiceAccount name: opentelemetry-operator namespace: default + diff --git a/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/service.yaml b/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/service.yaml index bf164a93d7..0a3006d80f 100644 --- a/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/service.yaml +++ b/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/service.yaml @@ -45,3 +45,4 @@ spec: selector: app.kubernetes.io/name: opentelemetry-operator app.kubernetes.io/component: controller-manager + diff --git a/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/serviceaccount.yaml b/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/serviceaccount.yaml index 6abe418372..c6ba25dbac 100644 --- a/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/serviceaccount.yaml +++ b/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/serviceaccount.yaml @@ -14,3 +14,4 @@ metadata: app.kubernetes.io/part-of: opentelemetry-operator app.kubernetes.io/instance: example app.kubernetes.io/component: controller-manager + diff --git a/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml b/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml index f86f50575c..9039160e03 100644 --- a/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml +++ b/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml @@ -51,3 +51,4 @@ spec: runAsGroup: 65532 runAsNonRoot: true runAsUser: 65532 + diff --git a/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/tests/test-service-connection.yaml b/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/tests/test-service-connection.yaml index 79329c4b9b..88e0e0bc24 100644 --- a/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/tests/test-service-connection.yaml +++ b/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/tests/test-service-connection.yaml @@ -104,3 +104,4 @@ spec: runAsGroup: 65532 runAsNonRoot: true runAsUser: 65532 + diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/clusterrole.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/clusterrole.yaml index 2f258ac609..32f102bb70 100644 --- a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/clusterrole.yaml +++ b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/clusterrole.yaml @@ -69,3 +69,4 @@ subjects: - kind: ServiceAccount name: example-daemon-targetallocator namespace: default + diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/collector.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/collector.yaml index 8bb4a114e5..f7dc54045e 100644 --- a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/collector.yaml +++ b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/collector.yaml @@ -6,7 +6,7 @@ metadata: name: example-daemon namespace: default labels: - helm.sh/chart: opentelemetry-kube-stack-0.15.1 + helm.sh/chart: opentelemetry-kube-stack-0.16.0 app.kubernetes.io/version: "0.151.0" app.kubernetes.io/managed-by: Helm release: "example" @@ -134,3 +134,4 @@ spec: secretKeyRef: key: access_token name: otel-collector-secret + diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-api-server/servicemonitor.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-api-server/servicemonitor.yaml index 92ec8433d5..1037fe3792 100644 --- a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-api-server/servicemonitor.yaml +++ b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-api-server/servicemonitor.yaml @@ -7,7 +7,7 @@ metadata: namespace: default labels: app: opentelemetry-kube-stack-apiserver - helm.sh/chart: opentelemetry-kube-stack-0.15.1 + helm.sh/chart: opentelemetry-kube-stack-0.16.0 app.kubernetes.io/version: "0.151.0" app.kubernetes.io/managed-by: Helm release: "example" @@ -35,3 +35,4 @@ spec: matchLabels: component: apiserver provider: kubernetes + diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-controller-manager/service.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-controller-manager/service.yaml index 57ea57c54b..9dcfc972bf 100644 --- a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-controller-manager/service.yaml +++ b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-controller-manager/service.yaml @@ -7,7 +7,7 @@ metadata: labels: app: opentelemetry-kube-stack-kube-controller-manager jobLabel: kube-controller-manager - helm.sh/chart: opentelemetry-kube-stack-0.15.1 + helm.sh/chart: opentelemetry-kube-stack-0.16.0 app.kubernetes.io/version: "0.151.0" app.kubernetes.io/managed-by: Helm release: "example" @@ -22,3 +22,4 @@ spec: selector: component: kube-controller-manager type: ClusterIP + diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-controller-manager/servicemonitor.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-controller-manager/servicemonitor.yaml index 3aa23b21fe..9ef9dcb9ce 100644 --- a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-controller-manager/servicemonitor.yaml +++ b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-controller-manager/servicemonitor.yaml @@ -7,7 +7,7 @@ metadata: namespace: default labels: app: opentelemetry-kube-stack-kube-controller-manager - helm.sh/chart: opentelemetry-kube-stack-0.15.1 + helm.sh/chart: opentelemetry-kube-stack-0.16.0 app.kubernetes.io/version: "0.151.0" app.kubernetes.io/managed-by: Helm release: "example" @@ -28,3 +28,4 @@ spec: tlsConfig: caFile: /var/run/secrets/kubernetes.io/serviceaccount/ca.crt insecureSkipVerify: true + diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-dns/service.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-dns/service.yaml index f67bf12190..4b6f32aba5 100644 --- a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-dns/service.yaml +++ b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-dns/service.yaml @@ -7,7 +7,7 @@ metadata: labels: app: opentelemetry-kube-stack-kube-dns jobLabel: kube-dns - helm.sh/chart: opentelemetry-kube-stack-0.15.1 + helm.sh/chart: opentelemetry-kube-stack-0.16.0 app.kubernetes.io/version: "0.151.0" app.kubernetes.io/managed-by: Helm release: "example" @@ -25,3 +25,4 @@ spec: targetPort: 10055 selector: k8s-app: kube-dns + diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-dns/servicemonitor.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-dns/servicemonitor.yaml index db82ca36d5..bda13b20d4 100644 --- a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-dns/servicemonitor.yaml +++ b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-dns/servicemonitor.yaml @@ -7,7 +7,7 @@ metadata: namespace: default labels: app: opentelemetry-kube-stack-kube-dns - helm.sh/chart: opentelemetry-kube-stack-0.15.1 + helm.sh/chart: opentelemetry-kube-stack-0.16.0 app.kubernetes.io/version: "0.151.0" app.kubernetes.io/managed-by: Helm release: "example" @@ -26,3 +26,4 @@ spec: bearerTokenFile: /var/run/secrets/kubernetes.io/serviceaccount/token - port: http-metrics-skydns bearerTokenFile: /var/run/secrets/kubernetes.io/serviceaccount/token + diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-etcd/service.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-etcd/service.yaml index 9f634d2070..ec97d4662b 100644 --- a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-etcd/service.yaml +++ b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-etcd/service.yaml @@ -7,7 +7,7 @@ metadata: labels: app: opentelemetry-kube-stack-kube-etcd jobLabel: kube-etcd - helm.sh/chart: opentelemetry-kube-stack-0.15.1 + helm.sh/chart: opentelemetry-kube-stack-0.16.0 app.kubernetes.io/version: "0.151.0" app.kubernetes.io/managed-by: Helm release: "example" diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-etcd/servicemonitor.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-etcd/servicemonitor.yaml index 3164220072..006d61f678 100644 --- a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-etcd/servicemonitor.yaml +++ b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-etcd/servicemonitor.yaml @@ -7,7 +7,7 @@ metadata: namespace: default labels: app: opentelemetry-kube-stack-kube-etcd - helm.sh/chart: opentelemetry-kube-stack-0.15.1 + helm.sh/chart: opentelemetry-kube-stack-0.16.0 app.kubernetes.io/version: "0.151.0" app.kubernetes.io/managed-by: Helm release: "example" @@ -24,3 +24,4 @@ spec: endpoints: - port: http-metrics bearerTokenFile: /var/run/secrets/kubernetes.io/serviceaccount/token + diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-proxy/service.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-proxy/service.yaml index 53791f83e4..8af7794d9b 100644 --- a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-proxy/service.yaml +++ b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-proxy/service.yaml @@ -7,7 +7,7 @@ metadata: labels: app: opentelemetry-kube-stack-kube-proxy jobLabel: kube-proxy - helm.sh/chart: opentelemetry-kube-stack-0.15.1 + helm.sh/chart: opentelemetry-kube-stack-0.16.0 app.kubernetes.io/version: "0.151.0" app.kubernetes.io/managed-by: Helm release: "example" diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-proxy/servicemonitor.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-proxy/servicemonitor.yaml index c09529280b..4035b3cc66 100644 --- a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-proxy/servicemonitor.yaml +++ b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-proxy/servicemonitor.yaml @@ -7,7 +7,7 @@ metadata: namespace: default labels: app: opentelemetry-kube-stack-kube-proxy - helm.sh/chart: opentelemetry-kube-stack-0.15.1 + helm.sh/chart: opentelemetry-kube-stack-0.16.0 app.kubernetes.io/version: "0.151.0" app.kubernetes.io/managed-by: Helm release: "example" @@ -24,3 +24,4 @@ spec: endpoints: - port: http-metrics bearerTokenFile: /var/run/secrets/kubernetes.io/serviceaccount/token + diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-scheduler/service.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-scheduler/service.yaml index fd20a57162..ef5a5763d7 100644 --- a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-scheduler/service.yaml +++ b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-scheduler/service.yaml @@ -7,7 +7,7 @@ metadata: labels: app: opentelemetry-kube-stack-kube-scheduler jobLabel: kube-scheduler - helm.sh/chart: opentelemetry-kube-stack-0.15.1 + helm.sh/chart: opentelemetry-kube-stack-0.16.0 app.kubernetes.io/version: "0.151.0" app.kubernetes.io/managed-by: Helm release: "example" diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-scheduler/servicemonitor.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-scheduler/servicemonitor.yaml index 987620442d..8fb50913e1 100644 --- a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-scheduler/servicemonitor.yaml +++ b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-scheduler/servicemonitor.yaml @@ -7,7 +7,7 @@ metadata: namespace: default labels: app: opentelemetry-kube-stack-kube-scheduler - helm.sh/chart: opentelemetry-kube-stack-0.15.1 + helm.sh/chart: opentelemetry-kube-stack-0.16.0 app.kubernetes.io/version: "0.151.0" app.kubernetes.io/managed-by: Helm release: "example" @@ -28,3 +28,4 @@ spec: tlsConfig: caFile: /var/run/secrets/kubernetes.io/serviceaccount/ca.crt insecureSkipVerify: true + diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/hooks.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/hooks.yaml index 7abcc3a667..df09c1e80b 100644 --- a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/hooks.yaml +++ b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/hooks.yaml @@ -61,4 +61,5 @@ spec: - "delete" - "instrumentations,opampbridges,opentelemetrycollectors" - "-l" - - "helm.sh/chart=opentelemetry-kube-stack-0.15.1" + - "helm.sh/chart=opentelemetry-kube-stack-0.16.0" + diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/kube-state-metrics/deployment.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/kube-state-metrics/deployment.yaml index 8e7389c0ff..06bb5ab7d8 100644 --- a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/kube-state-metrics/deployment.yaml +++ b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/kube-state-metrics/deployment.yaml @@ -86,3 +86,4 @@ spec: drop: - ALL readOnlyRootFilesystem: true + diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/kube-state-metrics/role.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/kube-state-metrics/role.yaml index e7c53da37c..96e9f39ebc 100644 --- a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/kube-state-metrics/role.yaml +++ b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/kube-state-metrics/role.yaml @@ -154,3 +154,5 @@ rules: resources: - volumeattachments verbs: ["list", "watch"] + + diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/kube-state-metrics/service.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/kube-state-metrics/service.yaml index bac884f9bf..239a6407b8 100644 --- a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/kube-state-metrics/service.yaml +++ b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/kube-state-metrics/service.yaml @@ -27,3 +27,4 @@ spec: selector: app.kubernetes.io/name: kube-state-metrics app.kubernetes.io/instance: example + diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/kube-state-metrics/servicemonitor.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/kube-state-metrics/servicemonitor.yaml index 8e1c1ac419..7eccbfc900 100644 --- a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/kube-state-metrics/servicemonitor.yaml +++ b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/kube-state-metrics/servicemonitor.yaml @@ -23,3 +23,4 @@ spec: endpoints: - port: http honorLabels: true + diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml index 7dbf1665c0..17585fa86a 100644 --- a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml +++ b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml @@ -190,3 +190,4 @@ webhooks: scope: Namespaced sideEffects: None timeoutSeconds: 10 + diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/certmanager.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/certmanager.yaml index b7b5be3ffe..e8615238d0 100644 --- a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/certmanager.yaml +++ b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/certmanager.yaml @@ -41,3 +41,4 @@ metadata: namespace: default spec: selfSigned: {} + diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/clusterrole.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/clusterrole.yaml index 05d1494af1..2037050533 100644 --- a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/clusterrole.yaml +++ b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/clusterrole.yaml @@ -406,3 +406,5 @@ rules: - /metrics verbs: - get + + diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/clusterrolebinding.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/clusterrolebinding.yaml index 8259beef16..4acb7d53f5 100644 --- a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/clusterrolebinding.yaml +++ b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/clusterrolebinding.yaml @@ -20,3 +20,5 @@ subjects: - kind: ServiceAccount name: opentelemetry-operator namespace: default + + diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/deployment.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/deployment.yaml index 2854112b68..c775cd1cf3 100644 --- a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/deployment.yaml +++ b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/deployment.yaml @@ -102,3 +102,4 @@ spec: runAsGroup: 65532 runAsNonRoot: true runAsUser: 65532 + diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/role.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/role.yaml index 0a015afb82..b5339517a2 100644 --- a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/role.yaml +++ b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/role.yaml @@ -197,3 +197,4 @@ rules: - patch - update - watch + diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/rolebinding.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/rolebinding.yaml index 721fdb0099..ae376e80c9 100644 --- a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/rolebinding.yaml +++ b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/rolebinding.yaml @@ -21,3 +21,4 @@ subjects: - kind: ServiceAccount name: opentelemetry-operator namespace: default + diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/service.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/service.yaml index bf164a93d7..0a3006d80f 100644 --- a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/service.yaml +++ b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/service.yaml @@ -45,3 +45,4 @@ spec: selector: app.kubernetes.io/name: opentelemetry-operator app.kubernetes.io/component: controller-manager + diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/serviceaccount.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/serviceaccount.yaml index 6abe418372..c6ba25dbac 100644 --- a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/serviceaccount.yaml +++ b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/serviceaccount.yaml @@ -14,3 +14,4 @@ metadata: app.kubernetes.io/part-of: opentelemetry-operator app.kubernetes.io/instance: example app.kubernetes.io/component: controller-manager + diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml index f86f50575c..9039160e03 100644 --- a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml +++ b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml @@ -51,3 +51,4 @@ spec: runAsGroup: 65532 runAsNonRoot: true runAsUser: 65532 + diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/tests/test-service-connection.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/tests/test-service-connection.yaml index 79329c4b9b..88e0e0bc24 100644 --- a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/tests/test-service-connection.yaml +++ b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/tests/test-service-connection.yaml @@ -104,3 +104,4 @@ spec: runAsGroup: 65532 runAsNonRoot: true runAsUser: 65532 + diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/prometheus-node-exporter/daemonset.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/prometheus-node-exporter/daemonset.yaml index c27c5df927..1758e4e4be 100644 --- a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/prometheus-node-exporter/daemonset.yaml +++ b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/prometheus-node-exporter/daemonset.yaml @@ -131,3 +131,4 @@ spec: - name: root hostPath: path: / + diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/prometheus-node-exporter/service.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/prometheus-node-exporter/service.yaml index d4fb44a87b..8b8fd23461 100644 --- a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/prometheus-node-exporter/service.yaml +++ b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/prometheus-node-exporter/service.yaml @@ -27,3 +27,4 @@ spec: selector: app.kubernetes.io/name: prometheus-node-exporter app.kubernetes.io/instance: example + diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/prometheus-node-exporter/servicemonitor.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/prometheus-node-exporter/servicemonitor.yaml index 1e18808405..6a6ccabf3a 100644 --- a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/prometheus-node-exporter/servicemonitor.yaml +++ b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/prometheus-node-exporter/servicemonitor.yaml @@ -26,3 +26,4 @@ spec: endpoints: - port: http-metrics scheme: http + diff --git a/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/clusterrole.yaml b/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/clusterrole.yaml index 3379a6a125..04fd4b7372 100644 --- a/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/clusterrole.yaml +++ b/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/clusterrole.yaml @@ -138,3 +138,4 @@ subjects: # quirk of the Operator name: "example-daemon-collector" namespace: default + diff --git a/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/collector.yaml b/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/collector.yaml index 21bc431781..036ae97b72 100644 --- a/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/collector.yaml +++ b/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/collector.yaml @@ -6,7 +6,7 @@ metadata: name: example-daemon namespace: default labels: - helm.sh/chart: opentelemetry-kube-stack-0.15.1 + helm.sh/chart: opentelemetry-kube-stack-0.16.0 app.kubernetes.io/version: "0.151.0" app.kubernetes.io/managed-by: Helm release: "example" @@ -512,3 +512,4 @@ spec: - name: hostfs hostPath: path: / + diff --git a/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/extramanifests.yaml b/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/extramanifests.yaml index fa01c2bd12..ad558c0210 100644 --- a/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/extramanifests.yaml +++ b/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/extramanifests.yaml @@ -18,3 +18,4 @@ spec: objectName: token secretName: collector-credentials-secret type: Opaque + diff --git a/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/hooks.yaml b/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/hooks.yaml index 7abcc3a667..df09c1e80b 100644 --- a/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/hooks.yaml +++ b/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/hooks.yaml @@ -61,4 +61,5 @@ spec: - "delete" - "instrumentations,opampbridges,opentelemetrycollectors" - "-l" - - "helm.sh/chart=opentelemetry-kube-stack-0.15.1" + - "helm.sh/chart=opentelemetry-kube-stack-0.16.0" + diff --git a/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml b/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml index 7dbf1665c0..17585fa86a 100644 --- a/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml +++ b/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml @@ -190,3 +190,4 @@ webhooks: scope: Namespaced sideEffects: None timeoutSeconds: 10 + diff --git a/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/certmanager.yaml b/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/certmanager.yaml index b7b5be3ffe..e8615238d0 100644 --- a/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/certmanager.yaml +++ b/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/certmanager.yaml @@ -41,3 +41,4 @@ metadata: namespace: default spec: selfSigned: {} + diff --git a/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/clusterrole.yaml b/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/clusterrole.yaml index 05d1494af1..2037050533 100644 --- a/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/clusterrole.yaml +++ b/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/clusterrole.yaml @@ -406,3 +406,5 @@ rules: - /metrics verbs: - get + + diff --git a/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/clusterrolebinding.yaml b/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/clusterrolebinding.yaml index 8259beef16..4acb7d53f5 100644 --- a/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/clusterrolebinding.yaml +++ b/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/clusterrolebinding.yaml @@ -20,3 +20,5 @@ subjects: - kind: ServiceAccount name: opentelemetry-operator namespace: default + + diff --git a/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/deployment.yaml b/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/deployment.yaml index 2854112b68..c775cd1cf3 100644 --- a/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/deployment.yaml +++ b/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/deployment.yaml @@ -102,3 +102,4 @@ spec: runAsGroup: 65532 runAsNonRoot: true runAsUser: 65532 + diff --git a/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/role.yaml b/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/role.yaml index 0a015afb82..b5339517a2 100644 --- a/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/role.yaml +++ b/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/role.yaml @@ -197,3 +197,4 @@ rules: - patch - update - watch + diff --git a/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/rolebinding.yaml b/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/rolebinding.yaml index 721fdb0099..ae376e80c9 100644 --- a/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/rolebinding.yaml +++ b/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/rolebinding.yaml @@ -21,3 +21,4 @@ subjects: - kind: ServiceAccount name: opentelemetry-operator namespace: default + diff --git a/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/service.yaml b/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/service.yaml index bf164a93d7..0a3006d80f 100644 --- a/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/service.yaml +++ b/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/service.yaml @@ -45,3 +45,4 @@ spec: selector: app.kubernetes.io/name: opentelemetry-operator app.kubernetes.io/component: controller-manager + diff --git a/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/serviceaccount.yaml b/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/serviceaccount.yaml index 6abe418372..c6ba25dbac 100644 --- a/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/serviceaccount.yaml +++ b/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/serviceaccount.yaml @@ -14,3 +14,4 @@ metadata: app.kubernetes.io/part-of: opentelemetry-operator app.kubernetes.io/instance: example app.kubernetes.io/component: controller-manager + diff --git a/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml b/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml index f86f50575c..9039160e03 100644 --- a/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml +++ b/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml @@ -51,3 +51,4 @@ spec: runAsGroup: 65532 runAsNonRoot: true runAsUser: 65532 + diff --git a/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/tests/test-service-connection.yaml b/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/tests/test-service-connection.yaml index 79329c4b9b..88e0e0bc24 100644 --- a/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/tests/test-service-connection.yaml +++ b/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/tests/test-service-connection.yaml @@ -104,3 +104,4 @@ spec: runAsGroup: 65532 runAsNonRoot: true runAsUser: 65532 + diff --git a/charts/opentelemetry-kube-stack/templates/_config.tpl b/charts/opentelemetry-kube-stack/templates/_config.tpl index 927be5a49d..cede9b97f0 100644 --- a/charts/opentelemetry-kube-stack/templates/_config.tpl +++ b/charts/opentelemetry-kube-stack/templates/_config.tpl @@ -10,6 +10,7 @@ receiver (with an empty scrape_configs list) is injected if one isn't already de target allocator has a receiver to populate. */}} {{- define "opentelemetry-kube-stack.config" -}} +{{- include "opentelemetry-kube-stack.assertPrometheusPresets" . }} {{- $collector := .collector }} {{- $config := .collector.config }} {{- if .collector.scrape_configs_file }} @@ -46,6 +47,18 @@ target allocator has a receiver to populate. {{- $config = (include "opentelemetry-kube-stack.collector.applyKubeletMetricsConfig" (dict "collector" $collector) | fromYaml) -}} {{- $_ := set $collector "config" $config }} {{- end }} +{{- if .collector.presets.prometheus.nodeExporter.enabled }} +{{- $config = (include "opentelemetry-kube-stack.collector.applyPrometheusScrapeConfig" (dict "collector" $collector "configTemplate" "opentelemetry-kube-stack.collector.prometheusNodeExporterConfig" "receiverName" "prometheus/node_exporter") | fromYaml) -}} +{{- $_ := set $collector "config" $config }} +{{- end }} +{{- if .collector.presets.prometheus.cadvisor.enabled }} +{{- $config = (include "opentelemetry-kube-stack.collector.applyPrometheusScrapeConfig" (dict "collector" $collector "configTemplate" "opentelemetry-kube-stack.collector.prometheusCadvisorConfig" "receiverName" "prometheus/cadvisor") | fromYaml) -}} +{{- $_ := set $collector "config" $config }} +{{- end }} +{{- if .collector.presets.prometheus.podAnnotations.enabled }} +{{- $config = (include "opentelemetry-kube-stack.collector.applyPrometheusScrapeConfig" (dict "collector" $collector "configTemplate" "opentelemetry-kube-stack.collector.prometheusPodAnnotationsConfig" "receiverName" "prometheus/pod_annotations") | fromYaml) -}} +{{- $_ := set $collector "config" $config }} +{{- end }} {{- if .collector.presets.kubernetesEvents.enabled }} {{- $config = (include "opentelemetry-kube-stack.collector.applyKubernetesEventsConfig" (dict "collector" $collector "namespace" .namespace) | fromYaml) -}} {{- $_ := set $collector "config" $config }} @@ -91,9 +104,6 @@ OR helps them easily port prometheus to the otel-kube-stack chart with no change {{- end }} {{- if .collector.presets.annotationDiscovery.metrics.enabled }} {{- $_ := set $config.service.pipelines.metrics "receivers" (append $config.service.pipelines.metrics.receivers "receiver_creator/metrics" | uniq) }} -{{- if .collector.presets.annotationDiscovery.metrics.prometheus.enabled }} -{{- $_ := set $config.service.pipelines.metrics "receivers" (append $config.service.pipelines.metrics.receivers "prometheus/annotation_discovery" | uniq) }} -{{- end }} {{- end }} {{- $config | toYaml }} {{- end }} @@ -121,67 +131,6 @@ receivers: discovery: enabled: true {{- end }} - {{- if .presets.annotationDiscovery.metrics.prometheus.enabled }} - # Scrapes pods on the same node carrying classic Prometheus annotations: - # prometheus.io/scrape=true (required), prometheus.io/port, prometheus.io/path, - # prometheus.io/scheme. Uses Kubernetes service discovery + Prometheus relabel - # rules rather than the receiver_creator + prometheus_simple combination. - prometheus/annotation_discovery: - config: - scrape_configs: - - job_name: kubernetes-pods - scrape_interval: 30s - kubernetes_sd_configs: - - role: pod - selectors: - - role: pod - # Only scrape data from pods running on the same node as the collector, - # and skip the OpenTelemetry collector's own pods to avoid self-scrape loops. - field: "spec.nodeName=${env:OTEL_K8S_NODE_NAME}" - label: "app.kubernetes.io/component!=opentelemetry-collector" - relabel_configs: - - source_labels: [__meta_kubernetes_pod_annotation_prometheus_io_scrape] - action: keep - regex: true - - source_labels: - [__meta_kubernetes_pod_annotation_prometheus_io_scrape_slow] - action: drop - regex: true - - source_labels: [__meta_kubernetes_pod_annotation_prometheus_io_scheme] - action: replace - regex: (https?) - target_label: __scheme__ - - source_labels: [__meta_kubernetes_pod_annotation_prometheus_io_path] - action: replace - target_label: __metrics_path__ - regex: (.+) - - source_labels: - [__address__, __meta_kubernetes_pod_annotation_prometheus_io_port] - action: replace - regex: ([^:]+)(?::\d+)?;(\d+) - # NOTE: otel collector uses env var replacement. $$ is used as a literal $. - replacement: $$1:$$2 - target_label: __address__ - - action: labelmap - regex: __meta_kubernetes_pod_annotation_prometheus_io_param_(.+) - replacement: __param_$$1 - {{- if .presets.annotationDiscovery.metrics.prometheus.addPrometheusLabels }} - - action: labelmap - regex: __meta_kubernetes_pod_label_(.+) - - source_labels: [__meta_kubernetes_namespace] - action: replace - target_label: namespace - - source_labels: [__meta_kubernetes_pod_name] - action: replace - target_label: pod - {{- end }} - - source_labels: [__meta_kubernetes_pod_phase] - regex: Pending|Succeeded|Failed|Completed - action: drop - - action: replace - source_labels: [__meta_kubernetes_pod_label_app_kubernetes_io_name] - target_label: job - {{- end }} {{- end }} {{- define "opentelemetry-kube-stack.collector.applyKubernetesAttributesConfig" -}} @@ -556,3 +505,178 @@ gcp: k8s.cluster.name: enabled: true {{- end -}} + +{{/* +Validates the `presets.prometheus.*` family of presets: + * mutually exclusive with `scrape_configs_file` — they are a replacement, not + an addition. Enabling both would cause duplicate scrapes (the default + daemon_scrape_configs.yaml already has node-exporter / kubelet-cadvisor / + kubernetes-pods jobs). + * require the collector to run in `daemonset` mode — the scrape configs use + the OTEL_K8S_NODE_IP / OTEL_K8S_NODE_NAME env vars and kubernetes_sd + field selectors keyed on the local node, which are only meaningful when + a collector pod is scheduled per node. +*/}} +{{- define "opentelemetry-kube-stack.assertPrometheusPresets" -}} +{{- $prom := .collector.presets.prometheus }} +{{- $enabled := list }} +{{- if $prom.nodeExporter.enabled }}{{- $enabled = append $enabled "nodeExporter" }}{{- end }} +{{- if $prom.cadvisor.enabled }}{{- $enabled = append $enabled "cadvisor" }}{{- end }} +{{- if $prom.podAnnotations.enabled }}{{- $enabled = append $enabled "podAnnotations" }}{{- end }} +{{- if $enabled }} +{{- $collectorName := .collector.suffix | default "unnamed" }} +{{- $enabledList := join ", " $enabled }} +{{- if .collector.scrape_configs_file }} +{{- fail (printf "collector %q: presets.prometheus.{%s} are a replacement for `scrape_configs_file` (the chart default is `daemon_scrape_configs.yaml`). Both are configured: scrape_configs_file=%q. Choose one — either keep `scrape_configs_file` and disable the listed presets, or keep the presets and set `scrape_configs_file: \"\"`." $collectorName $enabledList .collector.scrape_configs_file) }} +{{- end }} +{{- $mode := .collector.mode | default "deployment" }} +{{- if ne $mode "daemonset" }} +{{- fail (printf "collector %q: presets.prometheus.{%s} require `mode: daemonset` (current mode: %q). The scrape targets reference ${OTEL_K8S_NODE_IP} / ${OTEL_K8S_NODE_NAME}, which the OpenTelemetry Operator only injects on daemonset collector pods." $collectorName $enabledList $mode) }} +{{- end }} +{{- end }} +{{- end }} + +{{/* +Shared apply helper for the `presets.prometheus.*` family. Merges the named +scrape-config template into the collector config and appends the receiver to +the metrics pipeline. Args: + collector - the collector dict + configTemplate - full name of the scrape-config template to include + receiverName - receiver key to append to service.pipelines.metrics.receivers +*/}} +{{- define "opentelemetry-kube-stack.collector.applyPrometheusScrapeConfig" -}} +{{- $config := mustMergeOverwrite (include .configTemplate .collector | fromYaml) .collector.config }} +{{- if and (dig "service" "pipelines" "metrics" false $config) (not (has .receiverName (dig "service" "pipelines" "metrics" "receivers" list $config))) }} +{{- $_ := set $config.service.pipelines.metrics "receivers" (append ($config.service.pipelines.metrics.receivers | default list) .receiverName | uniq) }} +{{- end }} +{{- $config | toYaml }} +{{- end }} + +{{- define "opentelemetry-kube-stack.collector.prometheusNodeExporterConfig" -}} +{{- $cfg := .presets.prometheus.nodeExporter }} +receivers: + prometheus/node_exporter: + config: + scrape_configs: + - job_name: node-exporter + scrape_interval: {{ $cfg.scrapeInterval }} + scrape_timeout: {{ $cfg.scrapeTimeout }} + static_configs: + - targets: + - ${env:OTEL_K8S_NODE_IP}:{{ $cfg.port }} + relabel_configs: + - target_label: node + replacement: ${env:OTEL_K8S_NODE_NAME} +{{- end }} + +{{- define "opentelemetry-kube-stack.collector.prometheusCadvisorConfig" -}} +{{- $cfg := .presets.prometheus.cadvisor }} +receivers: + prometheus/cadvisor: + config: + scrape_configs: + - job_name: kubelet + scheme: https + metrics_path: /metrics/cadvisor + scrape_interval: {{ $cfg.scrapeInterval }} + scrape_timeout: {{ $cfg.scrapeTimeout }} + authorization: + type: Bearer + credentials_file: /var/run/secrets/kubernetes.io/serviceaccount/token + tls_config: + ca_file: /var/run/secrets/kubernetes.io/serviceaccount/ca.crt + insecure_skip_verify: true + static_configs: + - targets: + - ${env:OTEL_K8S_NODE_IP}:{{ $cfg.port }} + relabel_configs: + - target_label: node + replacement: ${env:OTEL_K8S_NODE_NAME} + metric_relabel_configs: + # Drop the highest-cardinality / lowest-value cAdvisor series. Mirrors the + # `metric_relabel_configs` used by the kubelet job in daemon_scrape_configs.yaml. + - source_labels: [__name__] + regex: container_cpu_(load_average_10s|system_seconds_total|user_seconds_total) + action: drop + - source_labels: [__name__] + regex: container_fs_(io_current|reads_merged_total|sector_reads_total|sector_writes_total|writes_merged_total) + action: drop + - source_labels: [__name__] + regex: container_memory_(mapped_file|swap) + action: drop + - source_labels: [__name__] + regex: container_(file_descriptors|tasks_state|threads_max) + action: drop + - source_labels: [__name__] + regex: container_spec.* + action: drop + # Drop series where the cgroup id is set but the pod label is empty + # (non-pod cgroups like system.slice and the kubelet's own resources). + - source_labels: [id, pod] + regex: .+; + action: drop +{{- end }} + +{{- define "opentelemetry-kube-stack.collector.prometheusPodAnnotationsConfig" -}} +{{- $cfg := .presets.prometheus.podAnnotations }} +receivers: + prometheus/pod_annotations: + config: + scrape_configs: + - job_name: kubernetes-pods + scrape_interval: {{ $cfg.scrapeInterval }} + scrape_timeout: {{ $cfg.scrapeTimeout }} + kubernetes_sd_configs: + - role: pod + selectors: + - role: pod + # Only scrape data from pods running on the same node as the collector, + # and skip the OpenTelemetry collector's own pods to avoid self-scrape loops. + field: "spec.nodeName=${env:OTEL_K8S_NODE_NAME}" + label: "app.kubernetes.io/component!=opentelemetry-collector" + relabel_configs: + - source_labels: [__meta_kubernetes_pod_annotation_prometheus_io_scrape] + action: keep + regex: true + - source_labels: + [__meta_kubernetes_pod_annotation_prometheus_io_scrape_slow] + action: drop + regex: true + - source_labels: [__meta_kubernetes_pod_annotation_prometheus_io_scheme] + action: replace + regex: (https?) + target_label: __scheme__ + - source_labels: [__meta_kubernetes_pod_annotation_prometheus_io_path] + action: replace + target_label: __metrics_path__ + regex: (.+) + - source_labels: + [__address__, __meta_kubernetes_pod_annotation_prometheus_io_port] + action: replace + regex: ([^:]+)(?::\d+)?;(\d+) + # NOTE: otel collector uses env var replacement. $$ is used as a literal $. + replacement: $$1:$$2 + target_label: __address__ + - action: labelmap + regex: __meta_kubernetes_pod_annotation_prometheus_io_param_(.+) + replacement: __param_$$1 + # Emit Prometheus-style Kubernetes labels: namespace, pod, node, and all pod labels + # mapped via __meta_kubernetes_pod_label_*. + - action: labelmap + regex: __meta_kubernetes_pod_label_(.+) + - source_labels: [__meta_kubernetes_namespace] + action: replace + target_label: namespace + - source_labels: [__meta_kubernetes_pod_name] + action: replace + target_label: pod + - source_labels: [__meta_kubernetes_pod_node_name] + action: replace + target_label: node + - source_labels: [__meta_kubernetes_pod_phase] + regex: Pending|Succeeded|Failed|Completed + action: drop + - action: replace + source_labels: [__meta_kubernetes_pod_label_app_kubernetes_io_name] + target_label: job +{{- end }} diff --git a/charts/opentelemetry-kube-stack/values.schema.json b/charts/opentelemetry-kube-stack/values.schema.json index b620687b39..fcdbcbb0b0 100644 --- a/charts/opentelemetry-kube-stack/values.schema.json +++ b/charts/opentelemetry-kube-stack/values.schema.json @@ -1474,20 +1474,77 @@ "enabled": { "description": "Specifies whether the collector should collect metrics.", "type": "boolean" - }, - "prometheus": { - "type": "object", - "additionalProperties": false, - "description": "When enabled, adds a standalone prometheus/annotation_discovery receiver configured with Kubernetes service discovery + relabel rules to scrape pods on the same node carrying classic Prometheus annotations (prometheus.io/scrape=true, prometheus.io/port, prometheus.io/path, prometheus.io/scheme).", - "properties": { - "enabled": { - "description": "Enable scraping of pods carrying classic Prometheus annotations via a standalone Prometheus receiver.", - "type": "boolean" - }, - "addPrometheusLabels": { - "description": "When true, the scrape config emits Prometheus-style labels on scraped metrics (Kubernetes `namespace`, `pod`, and all pod labels mapped via __meta_kubernetes_pod_label_*). When false (default), only the standard Prometheus `job` and `instance` labels are produced, leaving the k8sattributes processor as the sole source of Kubernetes metadata.", - "type": "boolean" - } + } + } + } + }, + "prometheus": { + "type": "object", + "additionalProperties": false, + "description": "Prometheus-based scraping presets. Each preset adds a named instance of the prometheus receiver (e.g. `prometheus/node_exporter`) to the metrics pipeline. Constraints (enforced at template render time): mutually exclusive with `scrape_configs_file` (the presets replace the scrape file), and require `mode: daemonset` (the scrape configs use ${OTEL_K8S_NODE_IP} / ${OTEL_K8S_NODE_NAME} and kubernetes_sd field selectors keyed on the local node).", + "properties": { + "nodeExporter": { + "type": "object", + "additionalProperties": false, + "description": "Scrapes a Prometheus Node Exporter on the local node via a static_config targeting ${OTEL_K8S_NODE_IP}:. Adds a `prometheus/node_exporter` receiver to the metrics pipeline.", + "properties": { + "enabled": { + "description": "Enable scraping of the Prometheus Node Exporter on the local node.", + "type": "boolean" + }, + "port": { + "description": "Port where the Prometheus Node Exporter is listening on each node. Defaults to 9100.", + "type": "integer" + }, + "scrapeInterval": { + "description": "Scrape interval as a duration string accepted by Prometheus (e.g. \"30s\", \"1m\"). Defaults to 30s.", + "type": "string" + }, + "scrapeTimeout": { + "description": "Scrape timeout as a duration string accepted by Prometheus (e.g. \"10s\"). Defaults to 10s.", + "type": "string" + } + } + }, + "cadvisor": { + "type": "object", + "additionalProperties": false, + "description": "Scrapes cAdvisor metrics from the local node's kubelet via a static_config targeting https://${OTEL_K8S_NODE_IP}:/metrics/cadvisor with service-account bearer-token auth. Adds a `prometheus/cadvisor` receiver. Drops the highest-cardinality / lowest-value cAdvisor series by default.", + "properties": { + "enabled": { + "description": "Enable scraping of cAdvisor metrics from the local node's kubelet.", + "type": "boolean" + }, + "port": { + "description": "Port where the kubelet HTTPS endpoint serves /metrics/cadvisor. Defaults to 10250.", + "type": "integer" + }, + "scrapeInterval": { + "description": "Scrape interval as a duration string accepted by Prometheus (e.g. \"30s\", \"1m\"). Defaults to 30s.", + "type": "string" + }, + "scrapeTimeout": { + "description": "Scrape timeout as a duration string accepted by Prometheus (e.g. \"10s\"). Defaults to 10s.", + "type": "string" + } + } + }, + "podAnnotations": { + "type": "object", + "additionalProperties": false, + "description": "Scrapes pods on the local node carrying classic Prometheus annotations (prometheus.io/scrape=true, prometheus.io/port, prometheus.io/path, prometheus.io/scheme). Adds a `prometheus/pod_annotations` receiver to the metrics pipeline that uses Kubernetes pod service discovery + Prometheus relabel rules. Always emits namespace/pod/node and all pod labels via labelmap — matches the labels produced by the `kubernetes-pods` job in `daemon_scrape_configs.yaml`.", + "properties": { + "enabled": { + "description": "Enable scraping of pods carrying classic Prometheus annotations via a standalone Prometheus receiver.", + "type": "boolean" + }, + "scrapeInterval": { + "description": "Scrape interval as a duration string accepted by Prometheus (e.g. \"30s\", \"1m\"). Defaults to 30s.", + "type": "string" + }, + "scrapeTimeout": { + "description": "Scrape timeout as a duration string accepted by Prometheus (e.g. \"10s\"). Defaults to 10s.", + "type": "string" } } } @@ -1563,6 +1620,7 @@ "type": "string" }, "scrape_configs_file": { + "description": "Path to an external Prometheus scrape_configs file to load into the collector's prometheus receiver. Mutually exclusive with the `presets.prometheus.*` family of presets (enabling both fails the chart render). Set to \"\" when using `presets.prometheus.*`.", "type": "string", "default": "" }, diff --git a/charts/opentelemetry-kube-stack/values.yaml b/charts/opentelemetry-kube-stack/values.yaml index 69e69376b0..755518e01f 100644 --- a/charts/opentelemetry-kube-stack/values.yaml +++ b/charts/opentelemetry-kube-stack/values.yaml @@ -94,6 +94,10 @@ defaultCRConfig: # the collector's prometheus scrape_configs. This is added to assist users # coming from the prometheus ecosystem by allowing users to simply copy and paste # directly from prometheus into this file to use the same config. + # + # Mutually exclusive with the `presets.prometheus.*` family of presets — the + # presets are a replacement for the scrape file, not an addition. Enabling both + # fails the chart render. scrape_configs_file: "" # Management state of the collector @@ -509,20 +513,65 @@ defaultCRConfig: enabled: false metrics: enabled: false - # When enabled (requires `metrics.enabled: true`), adds a standalone - # `prometheus/annotation_discovery` receiver to the metrics pipeline. It uses - # Kubernetes service discovery + Prometheus relabel rules to scrape pods on the same - # node carrying classic Prometheus annotations: prometheus.io/scrape=true (required), - # prometheus.io/port, prometheus.io/path, prometheus.io/scheme. - prometheus: - enabled: false - # When true, the prometheus/annotation_discovery scrape config emits Prometheus-style - # Kubernetes labels on scraped metrics: `namespace`, `pod`, and all pod labels mapped - # via `__meta_kubernetes_pod_label_*` (e.g. `app_kubernetes_io_name`). - # When false (default), only the standard Prometheus `job` and `instance` labels are - # produced, leaving the k8sattributes processor (presets.kubernetesAttributes.enabled) - # as the sole source of Kubernetes metadata. - addPrometheusLabels: true + # Configures Prometheus-based scraping presets. Each preset adds a named instance of the + # prometheus receiver (e.g. `prometheus/node_exporter`) to the metrics pipeline. + # + # Constraints (enforced at template render time — invalid configurations fail with a + # clear error message): + # * Mutually exclusive with `scrape_configs_file` — the presets are a replacement + # for the scrape file (the chart default is `daemon_scrape_configs.yaml`, which + # already covers the same targets). Enable the presets and set + # `scrape_configs_file: ""`, or keep `scrape_configs_file` and disable the presets. + # * Require `mode: daemonset` — the scrape configs reference `${OTEL_K8S_NODE_IP}` / + # `${OTEL_K8S_NODE_NAME}` (only injected on daemonset collectors) and use field + # selectors keyed on the local node. + # + # Distinct from the top-level `nodeExporter.enabled` flag, which controls whether the + # prometheus-node-exporter subchart is installed. + # + # For comparison with the kube-prometheus-stack ServiceMonitor approach (discovery model, + # label differences), see the "Kube-Prometheus-Stack compatability" section in README.md. + prometheus: + # Scrapes a Prometheus Node Exporter on the local node via a static_config targeting + # `${OTEL_K8S_NODE_IP}:`. Adds a `prometheus/node_exporter` receiver. + nodeExporter: + enabled: false + # Port where the Prometheus Node Exporter is listening on each node. + port: 9100 + # Scrape interval, as a duration string accepted by Prometheus (e.g. "30s", "1m"). + scrapeInterval: 30s + # Scrape timeout, as a duration string accepted by Prometheus. + scrapeTimeout: 10s + # Scrapes cAdvisor metrics from the local node's kubelet via a static_config targeting + # `https://${OTEL_K8S_NODE_IP}:/metrics/cadvisor` with bearer-token auth from the + # collector's service account. Adds a `prometheus/cadvisor` receiver. + # + # Drops the highest-cardinality / lowest-value cAdvisor series by default + # (container_cpu_load_average_10s, container_spec_*, container_fs_io_current, ...). + cadvisor: + enabled: false + # Port where the kubelet HTTPS endpoint serves /metrics/cadvisor. + port: 10250 + # Scrape interval, as a duration string accepted by Prometheus (e.g. "30s", "1m"). + scrapeInterval: 30s + # Scrape timeout, as a duration string accepted by Prometheus. + scrapeTimeout: 10s + # Scrapes pods on the local node carrying classic Prometheus annotations: + # prometheus.io/scrape=true (required), prometheus.io/port, prometheus.io/path, + # prometheus.io/scheme. Adds a `prometheus/pod_annotations` receiver that uses + # Kubernetes pod service discovery + Prometheus relabel rules. + # + # The scrape config always emits Prometheus-style Kubernetes labels — `namespace`, + # `pod`, `node`, and all pod labels mapped via `__meta_kubernetes_pod_label_*`. This + # matches the labels produced by the `kubernetes-pods` job in + # `daemon_scrape_configs.yaml`, so existing dashboards, alerts and recording rules + # built on those labels keep working when migrating from `scrape_configs_file`. + podAnnotations: + enabled: false + # Scrape interval, as a duration string accepted by Prometheus (e.g. "30s", "1m"). + scrapeInterval: 30s + # Scrape timeout, as a duration string accepted by Prometheus. + scrapeTimeout: 10s resourceDetection: # Each detector can be enabled individually. Base detectors 'env' and 'k8snode' are always included when any detector is enabled. # Typically used to resolve the 'k8s.cluster.name' resource attribute. @@ -553,9 +602,12 @@ collectors: requests: cpu: 100m memory: 250Mi - # A scrape config file to instruct the daemon collector to pull metrics from any matching targets on the same node with - # prometheus.io/scrape=true - # This config also scrapes a running node exporter and the kubelet CAdvisor metrics which aren't currently supported. + # A scrape config file loaded into the daemon collector's prometheus receiver. The + # default `daemon_scrape_configs.yaml` scrapes node-exporter on the same host, kubelet + # cAdvisor metrics, and pods on the same node carrying `prometheus.io/scrape=true`. + # + # Mutually exclusive with `presets.prometheus.*` (set `scrape_configs_file: ""` to + # use those presets instead). scrape_configs_file: "daemon_scrape_configs.yaml" presets: logsCollection: @@ -575,9 +627,15 @@ collectors: enabled: false metrics: enabled: false - prometheus: - enabled: false - addPrometheusLabels: false + # NOTE: "prometheus.*" presets are mutually exclusive with "scrape_configs_file", + # they are a replacement for the scrape config file, not an addition. Enabling both fails the chart render. + prometheus: + nodeExporter: + enabled: false + cadvisor: + enabled: false + podAnnotations: + enabled: false resourceDetection: aks: enabled: false From c42d82212c31187ec8c3197ecec2a8be2068e991 Mon Sep 17 00:00:00 2001 From: Cyrille Le Clerc Date: Thu, 28 May 2026 08:52:45 +0200 Subject: [PATCH 04/11] force recommit generated helm config --- .../examples/cloud-demo/rendered/bridge.yaml | 62 -- .../cloud-demo/rendered/clusterrole.yaml | 176 ----- .../cloud-demo/rendered/collector.yaml | 534 --------------- .../examples/cloud-demo/rendered/hooks.yaml | 65 -- .../cloud-demo/rendered/instrumentation.yaml | 35 - .../operator-webhook-with-cert-manager.yaml | 193 ------ .../admission-webhooks/operator-webhook.yaml | 3 - .../opentelemetry-operator/certmanager.yaml | 44 -- .../opentelemetry-operator/clusterrole.yaml | 410 ----------- .../clusterrolebinding.yaml | 24 - .../opentelemetry-operator/deployment.yaml | 105 --- .../rendered/opentelemetry-operator/role.yaml | 200 ------ .../opentelemetry-operator/rolebinding.yaml | 24 - .../opentelemetry-operator/service.yaml | 48 -- .../serviceaccount.yaml | 17 - .../tests/test-certmanager-connection.yaml | 54 -- .../tests/test-service-connection.yaml | 107 --- .../rendered/clusterrole.yaml | 69 -- .../rendered/collector.yaml | 128 ---- .../rendered/hooks.yaml | 65 -- .../operator-webhook-with-cert-manager.yaml | 193 ------ .../admission-webhooks/operator-webhook.yaml | 3 - .../opentelemetry-operator/certmanager.yaml | 44 -- .../opentelemetry-operator/clusterrole.yaml | 410 ----------- .../clusterrolebinding.yaml | 24 - .../opentelemetry-operator/deployment.yaml | 105 --- .../rendered/opentelemetry-operator/role.yaml | 200 ------ .../opentelemetry-operator/rolebinding.yaml | 24 - .../opentelemetry-operator/service.yaml | 48 -- .../serviceaccount.yaml | 17 - .../tests/test-certmanager-connection.yaml | 54 -- .../tests/test-service-connection.yaml | 107 --- .../rendered/clusterrole.yaml | 69 -- .../rendered/collector.yaml | 126 ---- .../rendered/hooks.yaml | 65 -- .../operator-webhook-with-cert-manager.yaml | 193 ------ .../admission-webhooks/operator-webhook.yaml | 3 - .../opentelemetry-operator/certmanager.yaml | 44 -- .../opentelemetry-operator/clusterrole.yaml | 410 ----------- .../clusterrolebinding.yaml | 24 - .../opentelemetry-operator/deployment.yaml | 105 --- .../rendered/opentelemetry-operator/role.yaml | 200 ------ .../opentelemetry-operator/rolebinding.yaml | 24 - .../opentelemetry-operator/service.yaml | 48 -- .../serviceaccount.yaml | 17 - .../tests/test-certmanager-connection.yaml | 54 -- .../tests/test-service-connection.yaml | 107 --- .../rendered/clusterrole.yaml | 69 -- .../rendered/collector.yaml | 134 ---- .../rendered/hooks.yaml | 65 -- .../operator-webhook-with-cert-manager.yaml | 193 ------ .../admission-webhooks/operator-webhook.yaml | 3 - .../opentelemetry-operator/certmanager.yaml | 44 -- .../opentelemetry-operator/clusterrole.yaml | 410 ----------- .../clusterrolebinding.yaml | 24 - .../opentelemetry-operator/deployment.yaml | 105 --- .../rendered/opentelemetry-operator/role.yaml | 200 ------ .../opentelemetry-operator/rolebinding.yaml | 24 - .../opentelemetry-operator/service.yaml | 48 -- .../serviceaccount.yaml | 17 - .../tests/test-certmanager-connection.yaml | 54 -- .../tests/test-service-connection.yaml | 107 --- .../rendered/clusterrole.yaml | 69 -- .../rendered/collector.yaml | 238 ------- .../rendered/hooks.yaml | 65 -- .../operator-webhook-with-cert-manager.yaml | 193 ------ .../admission-webhooks/operator-webhook.yaml | 3 - .../opentelemetry-operator/certmanager.yaml | 44 -- .../opentelemetry-operator/clusterrole.yaml | 410 ----------- .../clusterrolebinding.yaml | 24 - .../opentelemetry-operator/deployment.yaml | 105 --- .../rendered/opentelemetry-operator/role.yaml | 200 ------ .../opentelemetry-operator/rolebinding.yaml | 24 - .../opentelemetry-operator/service.yaml | 48 -- .../serviceaccount.yaml | 17 - .../tests/test-certmanager-connection.yaml | 54 -- .../tests/test-service-connection.yaml | 107 --- .../default/rendered/clusterrole.yaml | 141 ---- .../examples/default/rendered/collector.yaml | 515 -------------- .../examples/default/rendered/hooks.yaml | 65 -- .../operator-webhook-with-cert-manager.yaml | 193 ------ .../admission-webhooks/operator-webhook.yaml | 3 - .../opentelemetry-operator/certmanager.yaml | 44 -- .../opentelemetry-operator/clusterrole.yaml | 410 ----------- .../clusterrolebinding.yaml | 24 - .../opentelemetry-operator/deployment.yaml | 105 --- .../rendered/opentelemetry-operator/role.yaml | 200 ------ .../opentelemetry-operator/rolebinding.yaml | 24 - .../opentelemetry-operator/service.yaml | 48 -- .../serviceaccount.yaml | 17 - .../tests/test-certmanager-connection.yaml | 54 -- .../tests/test-service-connection.yaml | 107 --- .../rendered/clusterrole.yaml | 141 ---- .../rendered/collector.yaml | 487 ------------- .../rendered/hooks.yaml | 65 -- .../operator-webhook-with-cert-manager.yaml | 193 ------ .../admission-webhooks/operator-webhook.yaml | 3 - .../opentelemetry-operator/certmanager.yaml | 44 -- .../opentelemetry-operator/clusterrole.yaml | 410 ----------- .../clusterrolebinding.yaml | 24 - .../opentelemetry-operator/deployment.yaml | 105 --- .../rendered/opentelemetry-operator/role.yaml | 200 ------ .../opentelemetry-operator/rolebinding.yaml | 24 - .../opentelemetry-operator/service.yaml | 48 -- .../serviceaccount.yaml | 17 - .../tests/test-certmanager-connection.yaml | 54 -- .../tests/test-service-connection.yaml | 107 --- .../rendered/clusterrole.yaml | 144 ---- .../rendered/collector.yaml | 647 ------------------ .../rendered/hooks.yaml | 65 -- .../operator-webhook-with-cert-manager.yaml | 193 ------ .../admission-webhooks/operator-webhook.yaml | 3 - .../opentelemetry-operator/certmanager.yaml | 44 -- .../opentelemetry-operator/clusterrole.yaml | 410 ----------- .../clusterrolebinding.yaml | 24 - .../opentelemetry-operator/deployment.yaml | 105 --- .../rendered/opentelemetry-operator/role.yaml | 200 ------ .../opentelemetry-operator/rolebinding.yaml | 24 - .../opentelemetry-operator/service.yaml | 48 -- .../serviceaccount.yaml | 17 - .../tests/test-certmanager-connection.yaml | 54 -- .../tests/test-service-connection.yaml | 107 --- .../prometheus-otel/rendered/clusterrole.yaml | 72 -- .../prometheus-otel/rendered/collector.yaml | 137 ---- .../kube-api-server/servicemonitor.yaml | 38 - .../kube-controller-manager/service.yaml | 25 - .../servicemonitor.yaml | 31 - .../rendered/exporters/kube-dns/service.yaml | 28 - .../exporters/kube-dns/servicemonitor.yaml | 29 - .../rendered/exporters/kube-etcd/service.yaml | 24 - .../exporters/kube-etcd/servicemonitor.yaml | 27 - .../exporters/kube-proxy/service.yaml | 24 - .../exporters/kube-proxy/servicemonitor.yaml | 27 - .../exporters/kube-scheduler/service.yaml | 24 - .../kube-scheduler/servicemonitor.yaml | 31 - .../prometheus-otel/rendered/hooks.yaml | 65 -- .../clusterrolebinding.yaml | 23 - .../kube-state-metrics/deployment.yaml | 89 --- .../rendered/kube-state-metrics/role.yaml | 158 ----- .../rendered/kube-state-metrics/service.yaml | 30 - .../kube-state-metrics/serviceaccount.yaml | 17 - .../kube-state-metrics/servicemonitor.yaml | 26 - .../operator-webhook-with-cert-manager.yaml | 193 ------ .../admission-webhooks/operator-webhook.yaml | 3 - .../opentelemetry-operator/certmanager.yaml | 44 -- .../opentelemetry-operator/clusterrole.yaml | 410 ----------- .../clusterrolebinding.yaml | 24 - .../opentelemetry-operator/deployment.yaml | 105 --- .../rendered/opentelemetry-operator/role.yaml | 200 ------ .../opentelemetry-operator/rolebinding.yaml | 24 - .../opentelemetry-operator/service.yaml | 48 -- .../serviceaccount.yaml | 17 - .../tests/test-certmanager-connection.yaml | 54 -- .../tests/test-service-connection.yaml | 107 --- .../prometheus-node-exporter/daemonset.yaml | 134 ---- .../prometheus-node-exporter/service.yaml | 30 - .../serviceaccount.yaml | 17 - .../servicemonitor.yaml | 29 - .../rendered/clusterrole.yaml | 141 ---- .../rendered/collector.yaml | 515 -------------- .../rendered/extramanifests.yaml | 21 - .../secrets-csi-driver/rendered/hooks.yaml | 65 -- .../operator-webhook-with-cert-manager.yaml | 193 ------ .../admission-webhooks/operator-webhook.yaml | 3 - .../opentelemetry-operator/certmanager.yaml | 44 -- .../opentelemetry-operator/clusterrole.yaml | 410 ----------- .../clusterrolebinding.yaml | 24 - .../opentelemetry-operator/deployment.yaml | 105 --- .../rendered/opentelemetry-operator/role.yaml | 200 ------ .../opentelemetry-operator/rolebinding.yaml | 24 - .../opentelemetry-operator/service.yaml | 48 -- .../serviceaccount.yaml | 17 - .../tests/test-certmanager-connection.yaml | 54 -- .../tests/test-service-connection.yaml | 107 --- 174 files changed, 18471 deletions(-) delete mode 100644 charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/bridge.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/clusterrole.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/collector.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/hooks.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/instrumentation.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/admission-webhooks/operator-webhook.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/certmanager.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/clusterrole.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/clusterrolebinding.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/deployment.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/role.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/rolebinding.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/service.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/serviceaccount.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/tests/test-service-connection.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/clusterrole.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/collector.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/hooks.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/admission-webhooks/operator-webhook.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/certmanager.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/clusterrole.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/clusterrolebinding.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/deployment.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/role.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/rolebinding.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/service.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/serviceaccount.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/tests/test-service-connection.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/clusterrole.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/collector.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/hooks.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/admission-webhooks/operator-webhook.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/certmanager.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/clusterrole.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/clusterrolebinding.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/deployment.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/role.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/rolebinding.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/service.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/serviceaccount.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/tests/test-service-connection.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/clusterrole.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/collector.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/hooks.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/admission-webhooks/operator-webhook.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/certmanager.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/clusterrole.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/clusterrolebinding.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/deployment.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/role.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/rolebinding.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/service.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/serviceaccount.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/tests/test-service-connection.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/clusterrole.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/collector.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/hooks.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/admission-webhooks/operator-webhook.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/certmanager.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/clusterrole.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/clusterrolebinding.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/deployment.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/role.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/rolebinding.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/service.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/serviceaccount.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/tests/test-service-connection.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/default/rendered/clusterrole.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/default/rendered/collector.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/default/rendered/hooks.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/admission-webhooks/operator-webhook.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/certmanager.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/clusterrole.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/clusterrolebinding.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/deployment.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/role.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/rolebinding.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/service.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/serviceaccount.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/tests/test-service-connection.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/clusterrole.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/collector.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/hooks.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/admission-webhooks/operator-webhook.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/certmanager.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/clusterrole.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/clusterrolebinding.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/deployment.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/role.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/rolebinding.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/service.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/serviceaccount.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/tests/test-service-connection.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/clusterrole.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/collector.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/hooks.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/admission-webhooks/operator-webhook.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/certmanager.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/clusterrole.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/clusterrolebinding.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/deployment.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/role.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/rolebinding.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/service.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/serviceaccount.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/tests/test-service-connection.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/clusterrole.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/collector.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-api-server/servicemonitor.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-controller-manager/service.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-controller-manager/servicemonitor.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-dns/service.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-dns/servicemonitor.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-etcd/service.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-etcd/servicemonitor.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-proxy/service.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-proxy/servicemonitor.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-scheduler/service.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-scheduler/servicemonitor.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/hooks.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/kube-state-metrics/clusterrolebinding.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/kube-state-metrics/deployment.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/kube-state-metrics/role.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/kube-state-metrics/service.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/kube-state-metrics/serviceaccount.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/kube-state-metrics/servicemonitor.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/admission-webhooks/operator-webhook.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/certmanager.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/clusterrole.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/clusterrolebinding.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/deployment.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/role.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/rolebinding.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/service.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/serviceaccount.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/tests/test-service-connection.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/prometheus-node-exporter/daemonset.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/prometheus-node-exporter/service.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/prometheus-node-exporter/serviceaccount.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/prometheus-node-exporter/servicemonitor.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/clusterrole.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/collector.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/extramanifests.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/hooks.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/admission-webhooks/operator-webhook.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/certmanager.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/clusterrole.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/clusterrolebinding.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/deployment.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/role.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/rolebinding.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/service.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/serviceaccount.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml delete mode 100644 charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/tests/test-service-connection.yaml diff --git a/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/bridge.yaml b/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/bridge.yaml deleted file mode 100644 index 8150262179..0000000000 --- a/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/bridge.yaml +++ /dev/null @@ -1,62 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/templates/bridge.yaml -apiVersion: opentelemetry.io/v1alpha1 -kind: OpAMPBridge -metadata: - name: example - labels: - helm.sh/chart: opentelemetry-kube-stack-0.16.0 - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - release: "example" -spec: - endpoint: http://opamp-server:8080 - capabilities: - AcceptsOpAMPConnectionSettings: true - AcceptsOtherConnectionSettings: true - AcceptsRemoteConfig: true - AcceptsRestartCommand: true - ReportsEffectiveConfig: true - ReportsHealth: true - ReportsOwnLogs: true - ReportsOwnMetrics: true - ReportsOwnTraces: true - ReportsRemoteConfig: true - ReportsStatus: true - replicas: 1 - image: "ghcr.io/open-telemetry/opentelemetry-operator/operator-opamp-bridge:0.151.0" - upgradeStrategy: automatic - securityContext: - runAsNonRoot: true - runAsUser: 1000 - resources: - limits: - cpu: 250m - memory: 256Mi - requests: - cpu: 250m - memory: 256Mi - env: - - name: OTEL_K8S_NODE_NAME - valueFrom: - fieldRef: - fieldPath: spec.nodeName - - name: OTEL_K8S_NAMESPACE - valueFrom: - fieldRef: - apiVersion: v1 - fieldPath: metadata.namespace - - name: OTEL_K8S_POD_NAME - valueFrom: - fieldRef: - apiVersion: v1 - fieldPath: metadata.name - - name: OTEL_K8S_POD_IP - valueFrom: - fieldRef: - apiVersion: v1 - fieldPath: status.podIP - - name: OTEL_RESOURCE_ATTRIBUTES - value: "k8s.cluster.name=demo" - - diff --git a/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/clusterrole.yaml b/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/clusterrole.yaml deleted file mode 100644 index 0f1ed4b2f8..0000000000 --- a/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/clusterrole.yaml +++ /dev/null @@ -1,176 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/templates/clusterrole.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - name: example-collector -rules: -- apiGroups: [""] - resources: - - namespaces - - nodes - - nodes/proxy - - nodes/metrics - - nodes/stats - - services - - endpoints - - pods - - events - - secrets - - persistentvolumeclaims - - persistentvolumes - verbs: ["get", "list", "watch"] -- apiGroups: ["monitoring.coreos.com"] - resources: - - servicemonitors - - podmonitors - - scrapeconfigs - - probes - verbs: ["get", "list", "watch"] -- apiGroups: - - extensions - resources: - - ingresses - verbs: ["get", "list", "watch"] -- apiGroups: - - apps - resources: - - daemonsets - - deployments - - replicasets - - statefulsets - verbs: ["get", "list", "watch"] -- apiGroups: - - networking.k8s.io - resources: - - ingresses - verbs: ["get", "list", "watch"] -- apiGroups: ["discovery.k8s.io"] - resources: - - endpointslices - verbs: ["get", "list", "watch"] -- nonResourceURLs: ["/metrics", "/metrics/cadvisor"] - verbs: ["get"] - -- verbs: - - get - - list - - watch - - create - - update - - patch - - delete - apiGroups: - - coordination.k8s.io - resources: - - leases -- apiGroups: - - "" - resources: - - events - - namespaces - - namespaces/status - - nodes - - nodes/spec - - pods - - pods/status - - replicationcontrollers - - replicationcontrollers/status - - resourcequotas - - services - verbs: - - get - - list - - watch -- apiGroups: - - apps - resources: - - daemonsets - - deployments - - replicasets - - statefulsets - verbs: - - get - - list - - watch -- apiGroups: - - extensions - resources: - - daemonsets - - deployments - - replicasets - verbs: - - get - - list - - watch -- apiGroups: - - batch - resources: - - jobs - - cronjobs - verbs: - - get - - list - - watch -- apiGroups: - - autoscaling - resources: - - horizontalpodautoscalers - verbs: - - get - - list - - watch -- apiGroups: ["events.k8s.io"] - resources: ["events"] - verbs: ["watch", "list"] ---- -# Source: opentelemetry-kube-stack/templates/clusterrole.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - name: example-bridge -rules: - - apiGroups: - - opentelemetry.io - resources: - - opentelemetrycollectors - verbs: - - "*" - - apiGroups: - - "" - resources: - - pods - verbs: - - 'list' - - 'get' ---- -# Source: opentelemetry-kube-stack/templates/clusterrole.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding -metadata: - name: example-daemon -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: example-collector -subjects: -- kind: ServiceAccount - # quirk of the Operator - name: "example-daemon-collector" - namespace: default ---- -# Source: opentelemetry-kube-stack/templates/clusterrole.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding -metadata: - name: example -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: "example-bridge" -subjects: - - kind: ServiceAccount - # quirk of the Operator - name: "example-opamp-bridge" - namespace: "default" - diff --git a/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/collector.yaml b/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/collector.yaml deleted file mode 100644 index 1c2fa3804c..0000000000 --- a/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/collector.yaml +++ /dev/null @@ -1,534 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/templates/collector.yaml -apiVersion: opentelemetry.io/v1beta1 -kind: OpenTelemetryCollector -metadata: - name: example-daemon - namespace: default - labels: - helm.sh/chart: opentelemetry-kube-stack-0.16.0 - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - release: "example" - opentelemetry.io/opamp-reporting: "true" -spec: - managementState: managed - mode: daemonset - config: - exporters: - debug: {} - otlp: - endpoint: ingest.example.com:443 - headers: - access-token: ${ACCESS_TOKEN} - extensions: - k8s_leader_elector/k8s_cluster: - auth_type: serviceAccount - lease_name: k8s.cluster.receiver.opentelemetry.io - lease_namespace: default - k8s_leader_elector/k8s_objects: - auth_type: serviceAccount - lease_name: k8s.objects.receiver.opentelemetry.io - lease_namespace: default - processors: - batch: - send_batch_max_size: 1500 - send_batch_size: 1000 - timeout: 1s - k8sattributes: - extract: - labels: - - from: pod - key: app.kubernetes.io/instance - tag_name: k8s.app.instance - - from: pod - key: app.kubernetes.io/component - tag_name: k8s.app.component - metadata: - - k8s.namespace.name - - k8s.pod.name - - k8s.pod.uid - - k8s.node.name - - k8s.pod.start_time - - k8s.deployment.name - - k8s.replicaset.name - - k8s.replicaset.uid - - k8s.daemonset.name - - k8s.daemonset.uid - - k8s.job.name - - k8s.job.uid - - k8s.container.name - - k8s.cronjob.name - - k8s.statefulset.name - - k8s.statefulset.uid - - container.image.tag - - container.image.name - - k8s.cluster.uid - - service.namespace - - service.name - - service.version - - service.instance.id - otel_annotations: true - filter: - node_from_env_var: OTEL_K8S_NODE_NAME - passthrough: false - pod_association: - - sources: - - from: resource_attribute - name: k8s.pod.uid - - sources: - - from: resource_attribute - name: k8s.pod.name - - from: resource_attribute - name: k8s.namespace.name - - from: resource_attribute - name: k8s.node.name - - sources: - - from: resource_attribute - name: k8s.pod.ip - - sources: - - from: resource_attribute - name: k8s.pod.name - - from: resource_attribute - name: k8s.namespace.name - - sources: - - from: connection - resource/hostname: - attributes: - - action: insert - from_attribute: k8s.node.name - key: host.name - resourcedetection/env: - detectors: - - env - - k8snode - override: false - timeout: 2s - receivers: - filelog: - exclude: [] - include: - - /var/log/pods/*/*/*.log - include_file_name: false - include_file_path: true - operators: - - id: container-parser - max_log_size: 102400 - type: container - retry_on_failure: - enabled: true - start_at: end - hostmetrics: - collection_interval: 10s - root_path: /hostfs - scrapers: - cpu: - metrics: - system.cpu.logical.count: - enabled: true - system.cpu.utilization: - enabled: true - disk: {} - filesystem: - exclude_fs_types: - fs_types: - - autofs - - binfmt_misc - - bpf - - cgroup2 - - configfs - - debugfs - - devpts - - devtmpfs - - fusectl - - hugetlbfs - - iso9660 - - mqueue - - nsfs - - overlay - - proc - - procfs - - pstore - - rpc_pipefs - - securityfs - - selinuxfs - - squashfs - - sysfs - - tracefs - match_type: strict - exclude_mount_points: - match_type: regexp - mount_points: - - /dev/* - - /proc/* - - /sys/* - - /run/k3s/containerd/* - - /var/lib/docker/* - - /var/lib/kubelet/* - - /snap/* - metrics: - system.filesystem.utilization: - enabled: true - load: {} - memory: - metrics: - system.memory.limit: - enabled: true - system.memory.utilization: - enabled: true - network: {} - paging: - metrics: - system.paging.usage: - enabled: true - system: - metrics: - system.uptime: - enabled: true - k8s_cluster: - allocatable_types_to_report: - - cpu - - memory - - storage - auth_type: serviceAccount - collection_interval: 10s - k8s_leader_elector: k8s_leader_elector/k8s_cluster - node_conditions_to_report: - - Ready - - MemoryPressure - - DiskPressure - - NetworkUnavailable - k8sobjects: - k8s_leader_elector: k8s_leader_elector/k8s_objects - objects: - - exclude_watch_type: - - DELETED - group: events.k8s.io - mode: watch - name: events - kubeletstats: - auth_type: serviceAccount - collection_interval: 15s - endpoint: https://${env:OTEL_K8S_NODE_IP}:10250 - extra_metadata_labels: - - container.id - - k8s.volume.type - insecure_skip_verify: true - k8s_api_config: - auth_type: serviceAccount - metric_groups: - - node - - pod - - volume - - container - metrics: - container.cpu.usage: - enabled: true - k8s.node.cpu.usage: - enabled: true - k8s.node.uptime: - enabled: true - k8s.pod.cpu.usage: - enabled: true - k8s.pod.uptime: - enabled: true - otlp: - protocols: - grpc: - endpoint: 0.0.0.0:4317 - http: - endpoint: 0.0.0.0:4318 - prometheus: - config: - scrape_configs: - - job_name: kubernetes-pods - kubernetes_sd_configs: - - role: pod - selectors: - - field: spec.nodeName=${env:OTEL_K8S_NODE_NAME} - role: pod - relabel_configs: - - action: keep - regex: true - source_labels: - - __meta_kubernetes_pod_annotation_prometheus_io_scrape - - action: drop - regex: true - source_labels: - - __meta_kubernetes_pod_annotation_prometheus_io_scrape_slow - - action: replace - regex: (https?) - source_labels: - - __meta_kubernetes_pod_annotation_prometheus_io_scheme - target_label: __scheme__ - - action: replace - regex: (.+) - source_labels: - - __meta_kubernetes_pod_annotation_prometheus_io_path - target_label: __metrics_path__ - - action: replace - regex: ([^:]+)(?::\d+)?;(\d+) - replacement: $$1:$$2 - source_labels: - - __address__ - - __meta_kubernetes_pod_annotation_prometheus_io_port - target_label: __address__ - - action: labelmap - regex: __meta_kubernetes_pod_annotation_prometheus_io_param_(.+) - replacement: __param_$$1 - - action: labelmap - regex: __meta_kubernetes_pod_label_(.+) - - action: replace - source_labels: - - __meta_kubernetes_namespace - target_label: namespace - - action: replace - source_labels: - - __meta_kubernetes_pod_name - target_label: pod - - action: drop - regex: Pending|Succeeded|Failed|Completed - source_labels: - - __meta_kubernetes_pod_phase - - action: replace - source_labels: - - __meta_kubernetes_pod_label_app_kubernetes_io_name - target_label: job - scrape_interval: 30s - - job_name: node-exporter - relabel_configs: - - action: labelmap - regex: __meta_kubernetes_node_label_(.+) - - action: replace - regex: (.*) - replacement: $$1 - separator: ; - source_labels: - - job - target_label: __tmp_prometheus_job_name - scrape_interval: 30s - static_configs: - - targets: - - ${env:OTEL_K8S_NODE_IP}:9100 - - authorization: - credentials_file: /var/run/secrets/kubernetes.io/serviceaccount/token - type: Bearer - follow_redirects: true - honor_labels: true - honor_timestamps: true - job_name: kubelet - kubernetes_sd_configs: - - follow_redirects: true - role: node - selectors: - - field: metadata.name=${env:OTEL_K8S_NODE_NAME} - role: node - metric_relabel_configs: - - action: drop - regex: container_cpu_(load_average_10s|system_seconds_total|user_seconds_total) - replacement: $$1 - separator: ; - source_labels: - - __name__ - - action: drop - regex: container_fs_(io_current|reads_merged_total|sector_reads_total|sector_writes_total|writes_merged_total) - replacement: $$1 - separator: ; - source_labels: - - __name__ - - action: drop - regex: container_memory_(mapped_file|swap) - replacement: $$1 - separator: ; - source_labels: - - __name__ - - action: drop - regex: container_(file_descriptors|tasks_state|threads_max) - replacement: $$1 - separator: ; - source_labels: - - __name__ - - action: drop - regex: container_spec.* - replacement: $$1 - separator: ; - source_labels: - - __name__ - - action: drop - regex: .+; - replacement: $$1 - separator: ; - source_labels: - - id - - pod - metrics_path: /metrics/cadvisor - relabel_configs: - - action: replace - regex: (.*) - replacement: $$1 - separator: ; - source_labels: - - job - target_label: __tmp_prometheus_job_name - - action: replace - replacement: kubelet - target_label: job - - action: replace - regex: (.*) - replacement: $$1 - separator: ; - source_labels: - - __meta_kubernetes_node_name - target_label: node - - action: replace - regex: (.*) - replacement: https-metrics - separator: ; - target_label: endpoint - - action: replace - regex: (.*) - replacement: $$1 - separator: ; - source_labels: - - __metrics_path__ - target_label: metrics_path - - action: hashmod - modulus: 1 - regex: (.*) - replacement: $$1 - separator: ; - source_labels: - - __address__ - target_label: __tmp_hash - - action: keep - regex: $(SHARD) - replacement: $$1 - separator: ; - source_labels: - - __tmp_hash - scheme: https - scrape_interval: 15s - scrape_timeout: 10s - tls_config: - ca_file: /var/run/secrets/kubernetes.io/serviceaccount/ca.crt - insecure_skip_verify: true - service: - extensions: - - k8s_leader_elector/k8s_objects - - k8s_leader_elector/k8s_cluster - pipelines: - logs: - exporters: - - debug - - otlp - processors: - - k8sattributes - - resourcedetection/env - - resource/hostname - - batch - receivers: - - otlp - - filelog - - k8sobjects - metrics: - exporters: - - debug - - otlp - processors: - - k8sattributes - - resourcedetection/env - - resource/hostname - - batch - receivers: - - prometheus - - otlp - - hostmetrics - - kubeletstats - - k8s_cluster - traces: - exporters: - - debug - - otlp - processors: - - k8sattributes - - resourcedetection/env - - resource/hostname - - batch - receivers: - - otlp - imagePullPolicy: IfNotPresent - upgradeStrategy: automatic - terminationGracePeriodSeconds: 30 - resources: - limits: - cpu: 200m - memory: 500Mi - requests: - cpu: 100m - memory: 250Mi - securityContext: - {} - volumeMounts: - - name: varlogpods - mountPath: /var/log/pods - readOnly: true - - name: varlibdockercontainers - mountPath: /var/lib/docker/containers - readOnly: true - - name: hostfs - mountPath: /hostfs - readOnly: true - mountPropagation: HostToContainer - ports: - - appProtocol: grpc - hostPort: 4317 - name: otlp-grpc - port: 4317 - protocol: TCP - env: - - name: K8S_NODE_NAME - valueFrom: - fieldRef: - fieldPath: spec.nodeName - - name: OTEL_K8S_NODE_NAME - valueFrom: - fieldRef: - fieldPath: spec.nodeName - - name: OTEL_K8S_NODE_IP - valueFrom: - fieldRef: - fieldPath: status.hostIP - - name: OTEL_K8S_NAMESPACE - valueFrom: - fieldRef: - apiVersion: v1 - fieldPath: metadata.namespace - - name: OTEL_K8S_POD_NAME - valueFrom: - fieldRef: - apiVersion: v1 - fieldPath: metadata.name - - name: OTEL_K8S_POD_IP - valueFrom: - fieldRef: - apiVersion: v1 - fieldPath: status.podIP - - name: OTEL_RESOURCE_ATTRIBUTES - value: "k8s.pod.name=$(OTEL_K8S_POD_NAME),k8s.namespace.name=$(OTEL_K8S_NAMESPACE),k8s.node.name=$(OTEL_K8S_NODE_NAME),host.name=$(OTEL_K8S_NODE_NAME),k8s.node.ip=$(OTEL_K8S_NODE_IP),k8s.pod.ip=$(OTEL_K8S_POD_IP),k8s.cluster.name=demo" - - - name: ACCESS_TOKEN - valueFrom: - secretKeyRef: - key: access_token - name: otel-collector-secret - volumes: - - name: varlogpods - hostPath: - path: /var/log/pods - - name: varlibdockercontainers - hostPath: - path: /var/lib/docker/containers - - name: hostfs - hostPath: - path: / - diff --git a/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/hooks.yaml b/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/hooks.yaml deleted file mode 100644 index df09c1e80b..0000000000 --- a/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/hooks.yaml +++ /dev/null @@ -1,65 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/templates/hooks.yaml -apiVersion: v1 -kind: ServiceAccount -metadata: - name: delete-resources-sa - annotations: - "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded ---- -# Source: opentelemetry-kube-stack/templates/hooks.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - name: delete-resources-role - annotations: - "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded -rules: - - apiGroups: - - opentelemetry.io - resources: - - instrumentations - - opampbridges - - opentelemetrycollectors - verbs: - - get - - list - - delete ---- -# Source: opentelemetry-kube-stack/templates/hooks.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding -metadata: - name: delete-resources-rolebinding - annotations: - "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: delete-resources-role -subjects: - - kind: ServiceAccount - name: delete-resources-sa ---- -# Source: opentelemetry-kube-stack/templates/hooks.yaml -apiVersion: batch/v1 -kind: Job -metadata: - name: opentelemetry-kube-stack-pre-delete-job - annotations: - "helm.sh/hook": pre-delete - "helm.sh/hook-delete-policy": hook-succeeded,hook-failed -spec: - template: - spec: - restartPolicy: Never - serviceAccountName: delete-resources-sa - containers: - - name: delete-resources - image: "rancher/kubectl:v1.34.1" - args: - - "delete" - - "instrumentations,opampbridges,opentelemetrycollectors" - - "-l" - - "helm.sh/chart=opentelemetry-kube-stack-0.16.0" - diff --git a/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/instrumentation.yaml b/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/instrumentation.yaml deleted file mode 100644 index 753f63f68b..0000000000 --- a/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/instrumentation.yaml +++ /dev/null @@ -1,35 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/templates/instrumentation.yaml -apiVersion: opentelemetry.io/v1alpha1 -kind: Instrumentation -metadata: - name: example - labels: - helm.sh/chart: opentelemetry-kube-stack-0.16.0 - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - release: "example" -spec: - exporter: - endpoint: http://${OTEL_K8S_NODE_NAME}:4317 - propagators: - - tracecontext - - baggage - - b3 - - b3multi - - jaeger - - xray - - ottrace - env: - - name: OTEL_K8S_NODE_NAME - valueFrom: - fieldRef: - fieldPath: spec.nodeName - resource: - addK8sUIDAttributes: true - resourceAttributes: {} - python: - env: - - name: OTEL_EXPORTER_OTLP_ENDPOINT - value: http://${OTEL_K8S_NODE_NAME}:4318 - diff --git a/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml b/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml deleted file mode 100644 index 17585fa86a..0000000000 --- a/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml +++ /dev/null @@ -1,193 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/admission-webhooks/operator-webhook-with-cert-manager.yaml -apiVersion: admissionregistration.k8s.io/v1 -kind: MutatingWebhookConfiguration -metadata: - annotations: - cert-manager.io/inject-ca-from: default/example-opentelemetry-operator-serving-cert - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: webhook - name: example-opentelemetry-operator-mutation -webhooks: - - admissionReviewVersions: - - v1 - clientConfig: - service: - name: example-opentelemetry-operator-webhook - namespace: default - path: /mutate-opentelemetry-io-v1alpha1-instrumentation - port: 443 - failurePolicy: Ignore - name: minstrumentation.kb.io - rules: - - apiGroups: - - opentelemetry.io - apiVersions: - - v1alpha1 - operations: - - CREATE - - UPDATE - resources: - - instrumentations - scope: Namespaced - sideEffects: None - timeoutSeconds: 10 - - admissionReviewVersions: - - v1 - clientConfig: - service: - name: example-opentelemetry-operator-webhook - namespace: default - path: /mutate-opentelemetry-io-v1beta1-opentelemetrycollector - port: 443 - failurePolicy: Ignore - name: mopentelemetrycollectorbeta.kb.io - rules: - - apiGroups: - - opentelemetry.io - apiVersions: - - v1beta1 - operations: - - CREATE - - UPDATE - resources: - - opentelemetrycollectors - scope: Namespaced - sideEffects: None - timeoutSeconds: 10 - - admissionReviewVersions: - - v1 - clientConfig: - service: - name: example-opentelemetry-operator-webhook - namespace: default - path: /mutate-v1-pod - port: 443 - failurePolicy: Ignore - name: mpod.kb.io - rules: - - apiGroups: - - "" - apiVersions: - - v1 - operations: - - CREATE - resources: - - pods - scope: Namespaced - sideEffects: None - timeoutSeconds: 10 ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/admission-webhooks/operator-webhook-with-cert-manager.yaml -apiVersion: admissionregistration.k8s.io/v1 -kind: ValidatingWebhookConfiguration -metadata: - annotations: - cert-manager.io/inject-ca-from: default/example-opentelemetry-operator-serving-cert - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: webhook - name: example-opentelemetry-operator-validation -webhooks: - - admissionReviewVersions: - - v1 - clientConfig: - service: - name: example-opentelemetry-operator-webhook - namespace: default - path: /validate-opentelemetry-io-v1alpha1-instrumentation - port: 443 - failurePolicy: Ignore - name: vinstrumentationcreateupdate.kb.io - rules: - - apiGroups: - - opentelemetry.io - apiVersions: - - v1alpha1 - operations: - - CREATE - - UPDATE - resources: - - instrumentations - scope: Namespaced - sideEffects: None - timeoutSeconds: 10 - - admissionReviewVersions: - - v1 - clientConfig: - service: - name: example-opentelemetry-operator-webhook - namespace: default - path: /validate-opentelemetry-io-v1alpha1-instrumentation - port: 443 - failurePolicy: Ignore - name: vinstrumentationdelete.kb.io - rules: - - apiGroups: - - opentelemetry.io - apiVersions: - - v1alpha1 - operations: - - DELETE - resources: - - instrumentations - scope: Namespaced - sideEffects: None - timeoutSeconds: 10 - - admissionReviewVersions: - - v1 - clientConfig: - service: - name: example-opentelemetry-operator-webhook - namespace: default - path: /validate-opentelemetry-io-v1beta1-opentelemetrycollector - port: 443 - failurePolicy: Ignore - name: vopentelemetrycollectorcreateupdatebeta.kb.io - rules: - - apiGroups: - - opentelemetry.io - apiVersions: - - v1beta1 - operations: - - CREATE - - UPDATE - resources: - - opentelemetrycollectors - scope: Namespaced - sideEffects: None - timeoutSeconds: 10 - - admissionReviewVersions: - - v1 - clientConfig: - service: - name: example-opentelemetry-operator-webhook - namespace: default - path: /validate-opentelemetry-io-v1beta1-opentelemetrycollector - port: 443 - failurePolicy: Ignore - name: vopentelemetrycollectordeletebeta.kb.io - rules: - - apiGroups: - - opentelemetry.io - apiVersions: - - v1beta1 - operations: - - DELETE - resources: - - opentelemetrycollectors - scope: Namespaced - sideEffects: None - timeoutSeconds: 10 - diff --git a/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/admission-webhooks/operator-webhook.yaml b/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/admission-webhooks/operator-webhook.yaml deleted file mode 100644 index 5b9ff5511d..0000000000 --- a/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/admission-webhooks/operator-webhook.yaml +++ /dev/null @@ -1,3 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/admission-webhooks/operator-webhook.yaml ---- diff --git a/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/certmanager.yaml b/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/certmanager.yaml deleted file mode 100644 index e8615238d0..0000000000 --- a/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/certmanager.yaml +++ /dev/null @@ -1,44 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/certmanager.yaml -apiVersion: cert-manager.io/v1 -kind: Certificate -metadata: - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: webhook - name: example-opentelemetry-operator-serving-cert - namespace: default -spec: - dnsNames: - - example-opentelemetry-operator-webhook.default.svc - - example-opentelemetry-operator-webhook.default.svc.cluster.local - issuerRef: - kind: Issuer - name: example-opentelemetry-operator-selfsigned-issuer - secretName: example-opentelemetry-operator-controller-manager-service-cert - subject: - organizationalUnits: - - example-opentelemetry-operator ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/certmanager.yaml -apiVersion: cert-manager.io/v1 -kind: Issuer -metadata: - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: webhook - name: example-opentelemetry-operator-selfsigned-issuer - namespace: default -spec: - selfSigned: {} - diff --git a/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/clusterrole.yaml b/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/clusterrole.yaml deleted file mode 100644 index 2037050533..0000000000 --- a/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/clusterrole.yaml +++ /dev/null @@ -1,410 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/clusterrole.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: controller-manager - name: example-opentelemetry-operator-manager -rules: - - apiGroups: - - "" - resources: - - configmaps - - persistentvolumeclaims - - persistentvolumes - - pods - - serviceaccounts - - services - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - "" - resources: - - events - verbs: - - create - - get - - list - - patch - - watch - - apiGroups: - - "" - resources: - - namespaces - verbs: - - list - - watch - - apiGroups: - - "" - resources: - - namespaces/status - verbs: - - get - - list - - watch - - apiGroups: - - "" - resources: - - nodes/spec - verbs: - - get - - list - - watch - - apiGroups: - - "" - resources: - - pods/status - verbs: - - get - - list - - watch - - apiGroups: - - "" - resources: - - replicationcontrollers - verbs: - - get - - list - - watch - - apiGroups: - - "" - resources: - - replicationcontrollers/status - verbs: - - get - - list - - watch - - apiGroups: - - "" - resources: - - resourcequotas - verbs: - - get - - list - - watch - - apiGroups: - - apps - resources: - - daemonsets - - deployments - - statefulsets - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - apps - - extensions - resources: - - replicasets - verbs: - - get - - list - - watch - - apiGroups: - - extensions - resources: - - daemonsets - verbs: - - get - - list - - watch - - apiGroups: - - extensions - resources: - - deployments - verbs: - - get - - list - - watch - - apiGroups: - - autoscaling - resources: - - horizontalpodautoscalers - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - batch - resources: - - jobs - verbs: - - get - - list - - watch - - apiGroups: - - batch - resources: - - cronjobs - verbs: - - get - - list - - watch - - apiGroups: - - "" - resources: - - nodes/proxy - verbs: - - get - - apiGroups: - - "" - resources: - - nodes/stats - verbs: - - get - - apiGroups: - - config.openshift.io - resources: - - infrastructures - - infrastructures/status - verbs: - - get - - list - - watch - - apiGroups: - - coordination.k8s.io - resources: - - leases - verbs: - - create - - get - - list - - update - - apiGroups: - - discovery.k8s.io - resources: - - endpointslices - verbs: - - get - - list - - apiGroups: - - events.k8s.io - resources: - - events - verbs: - - create - - list - - patch - - watch - - apiGroups: - - gateway.networking.k8s.io - resources: - - httproutes - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - monitoring.coreos.com - resources: - - podmonitors - - servicemonitors - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - networking.k8s.io - resources: - - ingresses - - networkpolicies - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - opentelemetry.io - resources: - - instrumentations - verbs: - - get - - list - - patch - - update - - watch - - apiGroups: - - opentelemetry.io - resources: - - opampbridges - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - opentelemetry.io - resources: - - opampbridges/finalizers - verbs: - - update - - apiGroups: - - opentelemetry.io - resources: - - opampbridges/status - verbs: - - get - - patch - - update - - apiGroups: - - opentelemetry.io - resources: - - opentelemetrycollectors - verbs: - - get - - list - - patch - - update - - watch - - apiGroups: - - opentelemetry.io - resources: - - opentelemetrycollectors/finalizers - verbs: - - get - - patch - - update - - apiGroups: - - opentelemetry.io - resources: - - opentelemetrycollectors/status - verbs: - - get - - patch - - update - - apiGroups: - - policy - resources: - - poddisruptionbudgets - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - route.openshift.io - resources: - - routes - - routes/custom-host - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - opentelemetry.io - resources: - - targetallocators - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - opentelemetry.io - resources: - - targetallocators/status - verbs: - - get - - patch - - update - - apiGroups: - - opentelemetry.io - resources: - - targetallocators/finalizers - verbs: - - get - - patch - - update - - apiGroups: - - cert-manager.io - resources: - - issuers - - certificaterequests - - certificates - verbs: - - create - - get - - list - - watch - - update - - patch - - delete - - apiGroups: - - authentication.k8s.io - resources: - - tokenreviews - verbs: - - create - - apiGroups: - - authorization.k8s.io - resources: - - subjectaccessreviews - verbs: - - create ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/clusterrole.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: controller-manager - name: example-opentelemetry-operator-metrics -rules: - - nonResourceURLs: - - /metrics - verbs: - - get - - diff --git a/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/clusterrolebinding.yaml b/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/clusterrolebinding.yaml deleted file mode 100644 index 4acb7d53f5..0000000000 --- a/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/clusterrolebinding.yaml +++ /dev/null @@ -1,24 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/clusterrolebinding.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding -metadata: - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: controller-manager - name: example-opentelemetry-operator-manager -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: example-opentelemetry-operator-manager -subjects: - - kind: ServiceAccount - name: opentelemetry-operator - namespace: default - - diff --git a/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/deployment.yaml b/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/deployment.yaml deleted file mode 100644 index c775cd1cf3..0000000000 --- a/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/deployment.yaml +++ /dev/null @@ -1,105 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/deployment.yaml -apiVersion: apps/v1 -kind: Deployment -metadata: - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: controller-manager - name: example-opentelemetry-operator - namespace: default -spec: - replicas: 1 - revisionHistoryLimit: 10 - selector: - matchLabels: - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/component: controller-manager - template: - metadata: - annotations: - kubectl.kubernetes.io/default-container: manager - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: controller-manager - spec: - automountServiceAccountToken: true - hostNetwork: false - containers: - - args: - - --metrics-addr=0.0.0.0:8443 - - --metrics-secure=true - - --enable-leader-election - - --health-probe-addr=:8081 - - --webhook-port=9443 - - --collector-image=otel/opentelemetry-collector-k8s:0.151.0 - command: - - /manager - env: - - name: SERVICE_ACCOUNT_NAME - valueFrom: - fieldRef: - fieldPath: spec.serviceAccountName - - name: ENABLE_WEBHOOKS - value: "true" - image: "ghcr.io/open-telemetry/opentelemetry-operator/opentelemetry-operator:0.151.0" - name: manager - imagePullPolicy: IfNotPresent - ports: - - containerPort: 8443 - name: metrics - protocol: TCP - - containerPort: 9443 - name: webhook-server - protocol: TCP - livenessProbe: - httpGet: - path: /healthz - port: 8081 - initialDelaySeconds: 15 - periodSeconds: 20 - readinessProbe: - httpGet: - path: /readyz - port: 8081 - initialDelaySeconds: 5 - periodSeconds: 10 - resources: - {} - volumeMounts: - - mountPath: /tmp/k8s-webhook-server/serving-certs - name: cert - readOnly: true - securityContext: - allowPrivilegeEscalation: false - capabilities: - drop: - - ALL - runAsNonRoot: true - seccompProfile: - type: RuntimeDefault - nodeSelector: - kubernetes.io/os: linux - serviceAccountName: opentelemetry-operator - terminationGracePeriodSeconds: 10 - volumes: - - name: cert - secret: - defaultMode: 420 - secretName: example-opentelemetry-operator-controller-manager-service-cert - securityContext: - fsGroup: 65532 - runAsGroup: 65532 - runAsNonRoot: true - runAsUser: 65532 - diff --git a/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/role.yaml b/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/role.yaml deleted file mode 100644 index b5339517a2..0000000000 --- a/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/role.yaml +++ /dev/null @@ -1,200 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/role.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: controller-manager - name: example-opentelemetry-operator-leader-election - namespace: default -rules: - - apiGroups: - - "" - resources: - - configmaps - - pods - - serviceaccounts - - services - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - "" - resources: - - events - verbs: - - create - - patch - - apiGroups: - - "" - resources: - - namespaces - - secrets - verbs: - - get - - list - - watch - - apiGroups: - - apps - resources: - - daemonsets - - deployments - - statefulsets - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - apps - resources: - - replicasets - verbs: - - get - - list - - watch - - apiGroups: - - autoscaling - resources: - - horizontalpodautoscalers - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - batch - resources: - - jobs - verbs: - - get - - list - - watch - - apiGroups: - - config.openshift.io - resources: - - infrastructures - - infrastructures/status - verbs: - - get - - list - - watch - - apiGroups: - - coordination.k8s.io - resources: - - leases - verbs: - - create - - get - - list - - update - - apiGroups: - - monitoring.coreos.com - resources: - - podmonitors - - servicemonitors - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - networking.k8s.io - resources: - - ingresses - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - opentelemetry.io - resources: - - instrumentations - - opentelemetrycollectors - verbs: - - get - - list - - patch - - update - - watch - - apiGroups: - - opentelemetry.io - resources: - - opampbridges - - targetallocators - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - opentelemetry.io - resources: - - opampbridges/finalizers - verbs: - - update - - apiGroups: - - opentelemetry.io - resources: - - opampbridges/status - - opentelemetrycollectors/finalizers - - opentelemetrycollectors/status - - targetallocators/status - - targetallocators/finalizers - verbs: - - get - - patch - - update - - apiGroups: - - policy - resources: - - poddisruptionbudgets - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - route.openshift.io - resources: - - routes - - routes/custom-host - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - diff --git a/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/rolebinding.yaml b/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/rolebinding.yaml deleted file mode 100644 index ae376e80c9..0000000000 --- a/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/rolebinding.yaml +++ /dev/null @@ -1,24 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/rolebinding.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding -metadata: - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: controller-manager - name: example-opentelemetry-operator-leader-election - namespace: default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: example-opentelemetry-operator-leader-election -subjects: - - kind: ServiceAccount - name: opentelemetry-operator - namespace: default - diff --git a/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/service.yaml b/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/service.yaml deleted file mode 100644 index 0a3006d80f..0000000000 --- a/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/service.yaml +++ /dev/null @@ -1,48 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/service.yaml -apiVersion: v1 -kind: Service -metadata: - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: controller-manager - name: example-opentelemetry-operator - namespace: default -spec: - ports: - - name: metrics - port: 8443 - protocol: TCP - targetPort: metrics - selector: - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/component: controller-manager ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/service.yaml -apiVersion: v1 -kind: Service -metadata: - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: controller-manager - name: example-opentelemetry-operator-webhook - namespace: default -spec: - ports: - - port: 443 - protocol: TCP - targetPort: webhook-server - selector: - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/component: controller-manager - diff --git a/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/serviceaccount.yaml b/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/serviceaccount.yaml deleted file mode 100644 index c6ba25dbac..0000000000 --- a/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/serviceaccount.yaml +++ /dev/null @@ -1,17 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/serviceaccount.yaml -apiVersion: v1 -kind: ServiceAccount -automountServiceAccountToken: true -metadata: - name: opentelemetry-operator - namespace: default - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: controller-manager - diff --git a/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml b/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml deleted file mode 100644 index 9039160e03..0000000000 --- a/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml +++ /dev/null @@ -1,54 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/tests/test-certmanager-connection.yaml -apiVersion: v1 -kind: Pod -metadata: - name: "example-opentelemetry-operator-cert-manager" - namespace: default - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: webhook - annotations: - "helm.sh/hook": test -spec: - containers: - - name: wget - image: "busybox:latest" - env: - - name: CERT_MANAGER_CLUSTERIP - value: "cert-manager-webhook" - - name: CERT_MANAGER_PORT - value: "443" - command: - - sh - - -c - # The following shell script tests if the cert-manager service is up. If the service is up, when we try - # to wget its exposed port, we will get an HTTP error 400. - - | - wget_output=$(wget -q "$CERT_MANAGER_CLUSTERIP:$CERT_MANAGER_PORT") - if wget_output=="wget: server returned error: HTTP/1.0 400 Bad Request" - then exit 0 - else exit 1 - fi - securityContext: - allowPrivilegeEscalation: false - capabilities: - drop: - - ALL - runAsNonRoot: true - seccompProfile: - type: RuntimeDefault - restartPolicy: Never - nodeSelector: - kubernetes.io/os: linux - securityContext: - fsGroup: 65532 - runAsGroup: 65532 - runAsNonRoot: true - runAsUser: 65532 - diff --git a/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/tests/test-service-connection.yaml b/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/tests/test-service-connection.yaml deleted file mode 100644 index 88e0e0bc24..0000000000 --- a/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/tests/test-service-connection.yaml +++ /dev/null @@ -1,107 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/tests/test-service-connection.yaml -apiVersion: v1 -kind: Pod -metadata: - name: "example-opentelemetry-operator-metrics" - namespace: default - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: controller-manager - annotations: - "helm.sh/hook": test -spec: - containers: - - name: wget - image: "busybox:latest" - env: - - name: MANAGER_METRICS_SERVICE_CLUSTERIP - value: "example-opentelemetry-operator" - - name: MANAGER_METRICS_SERVICE_PORT - value: "8443" - command: - - sh - - -c - # The following shell script tests if the controller-manager-metrics-service is up. - # If the service is up, when we try to wget its exposed port, we will get an HTTP error 400. - - | - wget_output=$(wget -q "$MANAGER_METRICS_SERVICE_CLUSTERIP:$MANAGER_METRICS_SERVICE_PORT") - if wget_output=="wget: server returned error: HTTP/1.0 400 Bad Request" - then exit 0 - else exit 1 - fi - securityContext: - allowPrivilegeEscalation: false - capabilities: - drop: - - ALL - runAsNonRoot: true - seccompProfile: - type: RuntimeDefault - restartPolicy: Never - nodeSelector: - kubernetes.io/os: linux - securityContext: - fsGroup: 65532 - runAsGroup: 65532 - runAsNonRoot: true - runAsUser: 65532 ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/tests/test-service-connection.yaml -apiVersion: v1 -kind: Pod -metadata: - name: "example-opentelemetry-operator-webhook" - namespace: default - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: controller-manager - annotations: - "helm.sh/hook": test -spec: - containers: - - name: wget - image: "busybox:latest" - env: - - name: WEBHOOK_SERVICE_CLUSTERIP - value: "example-opentelemetry-operator-webhook" - - name: WEBHOOK_SERVICE_PORT - value: "443" - command: - - sh - - -c - # The following shell script tests if the webhook service is up. If the service is up, when we try - # to wget its exposed port, we will get an HTTP error 400. - - | - wget_output=$(wget -q "$WEBHOOK_SERVICE_CLUSTERIP:$WEBHOOK_SERVICE_PORT") - if wget_output=="wget: server returned error: HTTP/1.0 400 Bad Request" - then exit 0 - else exit 1 - fi - securityContext: - allowPrivilegeEscalation: false - capabilities: - drop: - - ALL - runAsNonRoot: true - seccompProfile: - type: RuntimeDefault - restartPolicy: Never - nodeSelector: - kubernetes.io/os: linux - securityContext: - fsGroup: 65532 - runAsGroup: 65532 - runAsNonRoot: true - runAsUser: 65532 - diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/clusterrole.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/clusterrole.yaml deleted file mode 100644 index 9d2d1e8211..0000000000 --- a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/clusterrole.yaml +++ /dev/null @@ -1,69 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/templates/clusterrole.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - name: example-collector -rules: -- apiGroups: [""] - resources: - - namespaces - - nodes - - nodes/proxy - - nodes/metrics - - nodes/stats - - services - - endpoints - - pods - - events - - secrets - - persistentvolumeclaims - - persistentvolumes - verbs: ["get", "list", "watch"] -- apiGroups: ["monitoring.coreos.com"] - resources: - - servicemonitors - - podmonitors - - scrapeconfigs - - probes - verbs: ["get", "list", "watch"] -- apiGroups: - - extensions - resources: - - ingresses - verbs: ["get", "list", "watch"] -- apiGroups: - - apps - resources: - - daemonsets - - deployments - - replicasets - - statefulsets - verbs: ["get", "list", "watch"] -- apiGroups: - - networking.k8s.io - resources: - - ingresses - verbs: ["get", "list", "watch"] -- apiGroups: ["discovery.k8s.io"] - resources: - - endpointslices - verbs: ["get", "list", "watch"] -- nonResourceURLs: ["/metrics", "/metrics/cadvisor"] - verbs: ["get"] ---- -# Source: opentelemetry-kube-stack/templates/clusterrole.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding -metadata: - name: example-daemon -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: example-collector -subjects: -- kind: ServiceAccount - # quirk of the Operator - name: "example-daemon-collector" - namespace: default - diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/collector.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/collector.yaml deleted file mode 100644 index 2e18381742..0000000000 --- a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/collector.yaml +++ /dev/null @@ -1,128 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/templates/collector.yaml -apiVersion: opentelemetry.io/v1beta1 -kind: OpenTelemetryCollector -metadata: - name: example-daemon - namespace: default - labels: - helm.sh/chart: opentelemetry-kube-stack-0.16.0 - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - release: "example" -spec: - managementState: managed - mode: daemonset - config: - exporters: - debug: {} - extensions: - k8s_observer: - auth_type: serviceAccount - node: ${env:K8S_NODE_NAME} - processors: - batch: - send_batch_max_size: 1500 - send_batch_size: 1000 - timeout: 1s - resource/hostname: - attributes: - - action: insert - from_attribute: k8s.node.name - key: host.name - resourcedetection/env: - detectors: - - env - - k8snode - override: false - timeout: 2s - receivers: - otlp: - protocols: - grpc: - endpoint: 0.0.0.0:4317 - http: - endpoint: 0.0.0.0:4318 - receiver_creator/logs: - discovery: - default_annotations: - io.opentelemetry.discovery.logs/enabled: "true" - enabled: true - watch_observers: - - k8s_observer - service: - extensions: - - k8s_observer - pipelines: - logs: - exporters: - - debug - processors: - - resourcedetection/env - - resource/hostname - - batch - receivers: - - otlp - - receiver_creator/logs - metrics: - exporters: - - debug - processors: - - resourcedetection/env - - resource/hostname - - batch - receivers: - - otlp - traces: - exporters: - - debug - processors: - - resourcedetection/env - - resource/hostname - - batch - receivers: - - otlp - imagePullPolicy: IfNotPresent - upgradeStrategy: automatic - terminationGracePeriodSeconds: 30 - resources: - limits: - cpu: 200m - memory: 500Mi - requests: - cpu: 100m - memory: 250Mi - securityContext: - {} - env: - - name: K8S_NODE_NAME - valueFrom: - fieldRef: - fieldPath: spec.nodeName - - name: OTEL_K8S_NODE_NAME - valueFrom: - fieldRef: - fieldPath: spec.nodeName - - name: OTEL_K8S_NODE_IP - valueFrom: - fieldRef: - fieldPath: status.hostIP - - name: OTEL_K8S_NAMESPACE - valueFrom: - fieldRef: - apiVersion: v1 - fieldPath: metadata.namespace - - name: OTEL_K8S_POD_NAME - valueFrom: - fieldRef: - apiVersion: v1 - fieldPath: metadata.name - - name: OTEL_K8S_POD_IP - valueFrom: - fieldRef: - apiVersion: v1 - fieldPath: status.podIP - - name: OTEL_RESOURCE_ATTRIBUTES - value: "k8s.pod.name=$(OTEL_K8S_POD_NAME),k8s.namespace.name=$(OTEL_K8S_NAMESPACE),k8s.node.name=$(OTEL_K8S_NODE_NAME),host.name=$(OTEL_K8S_NODE_NAME),k8s.node.ip=$(OTEL_K8S_NODE_IP),k8s.pod.ip=$(OTEL_K8S_POD_IP),k8s.cluster.name=unknown_k8s_cluster" - - diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/hooks.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/hooks.yaml deleted file mode 100644 index df09c1e80b..0000000000 --- a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/hooks.yaml +++ /dev/null @@ -1,65 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/templates/hooks.yaml -apiVersion: v1 -kind: ServiceAccount -metadata: - name: delete-resources-sa - annotations: - "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded ---- -# Source: opentelemetry-kube-stack/templates/hooks.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - name: delete-resources-role - annotations: - "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded -rules: - - apiGroups: - - opentelemetry.io - resources: - - instrumentations - - opampbridges - - opentelemetrycollectors - verbs: - - get - - list - - delete ---- -# Source: opentelemetry-kube-stack/templates/hooks.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding -metadata: - name: delete-resources-rolebinding - annotations: - "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: delete-resources-role -subjects: - - kind: ServiceAccount - name: delete-resources-sa ---- -# Source: opentelemetry-kube-stack/templates/hooks.yaml -apiVersion: batch/v1 -kind: Job -metadata: - name: opentelemetry-kube-stack-pre-delete-job - annotations: - "helm.sh/hook": pre-delete - "helm.sh/hook-delete-policy": hook-succeeded,hook-failed -spec: - template: - spec: - restartPolicy: Never - serviceAccountName: delete-resources-sa - containers: - - name: delete-resources - image: "rancher/kubectl:v1.34.1" - args: - - "delete" - - "instrumentations,opampbridges,opentelemetrycollectors" - - "-l" - - "helm.sh/chart=opentelemetry-kube-stack-0.16.0" - diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml deleted file mode 100644 index 17585fa86a..0000000000 --- a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml +++ /dev/null @@ -1,193 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/admission-webhooks/operator-webhook-with-cert-manager.yaml -apiVersion: admissionregistration.k8s.io/v1 -kind: MutatingWebhookConfiguration -metadata: - annotations: - cert-manager.io/inject-ca-from: default/example-opentelemetry-operator-serving-cert - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: webhook - name: example-opentelemetry-operator-mutation -webhooks: - - admissionReviewVersions: - - v1 - clientConfig: - service: - name: example-opentelemetry-operator-webhook - namespace: default - path: /mutate-opentelemetry-io-v1alpha1-instrumentation - port: 443 - failurePolicy: Ignore - name: minstrumentation.kb.io - rules: - - apiGroups: - - opentelemetry.io - apiVersions: - - v1alpha1 - operations: - - CREATE - - UPDATE - resources: - - instrumentations - scope: Namespaced - sideEffects: None - timeoutSeconds: 10 - - admissionReviewVersions: - - v1 - clientConfig: - service: - name: example-opentelemetry-operator-webhook - namespace: default - path: /mutate-opentelemetry-io-v1beta1-opentelemetrycollector - port: 443 - failurePolicy: Ignore - name: mopentelemetrycollectorbeta.kb.io - rules: - - apiGroups: - - opentelemetry.io - apiVersions: - - v1beta1 - operations: - - CREATE - - UPDATE - resources: - - opentelemetrycollectors - scope: Namespaced - sideEffects: None - timeoutSeconds: 10 - - admissionReviewVersions: - - v1 - clientConfig: - service: - name: example-opentelemetry-operator-webhook - namespace: default - path: /mutate-v1-pod - port: 443 - failurePolicy: Ignore - name: mpod.kb.io - rules: - - apiGroups: - - "" - apiVersions: - - v1 - operations: - - CREATE - resources: - - pods - scope: Namespaced - sideEffects: None - timeoutSeconds: 10 ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/admission-webhooks/operator-webhook-with-cert-manager.yaml -apiVersion: admissionregistration.k8s.io/v1 -kind: ValidatingWebhookConfiguration -metadata: - annotations: - cert-manager.io/inject-ca-from: default/example-opentelemetry-operator-serving-cert - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: webhook - name: example-opentelemetry-operator-validation -webhooks: - - admissionReviewVersions: - - v1 - clientConfig: - service: - name: example-opentelemetry-operator-webhook - namespace: default - path: /validate-opentelemetry-io-v1alpha1-instrumentation - port: 443 - failurePolicy: Ignore - name: vinstrumentationcreateupdate.kb.io - rules: - - apiGroups: - - opentelemetry.io - apiVersions: - - v1alpha1 - operations: - - CREATE - - UPDATE - resources: - - instrumentations - scope: Namespaced - sideEffects: None - timeoutSeconds: 10 - - admissionReviewVersions: - - v1 - clientConfig: - service: - name: example-opentelemetry-operator-webhook - namespace: default - path: /validate-opentelemetry-io-v1alpha1-instrumentation - port: 443 - failurePolicy: Ignore - name: vinstrumentationdelete.kb.io - rules: - - apiGroups: - - opentelemetry.io - apiVersions: - - v1alpha1 - operations: - - DELETE - resources: - - instrumentations - scope: Namespaced - sideEffects: None - timeoutSeconds: 10 - - admissionReviewVersions: - - v1 - clientConfig: - service: - name: example-opentelemetry-operator-webhook - namespace: default - path: /validate-opentelemetry-io-v1beta1-opentelemetrycollector - port: 443 - failurePolicy: Ignore - name: vopentelemetrycollectorcreateupdatebeta.kb.io - rules: - - apiGroups: - - opentelemetry.io - apiVersions: - - v1beta1 - operations: - - CREATE - - UPDATE - resources: - - opentelemetrycollectors - scope: Namespaced - sideEffects: None - timeoutSeconds: 10 - - admissionReviewVersions: - - v1 - clientConfig: - service: - name: example-opentelemetry-operator-webhook - namespace: default - path: /validate-opentelemetry-io-v1beta1-opentelemetrycollector - port: 443 - failurePolicy: Ignore - name: vopentelemetrycollectordeletebeta.kb.io - rules: - - apiGroups: - - opentelemetry.io - apiVersions: - - v1beta1 - operations: - - DELETE - resources: - - opentelemetrycollectors - scope: Namespaced - sideEffects: None - timeoutSeconds: 10 - diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/admission-webhooks/operator-webhook.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/admission-webhooks/operator-webhook.yaml deleted file mode 100644 index 5b9ff5511d..0000000000 --- a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/admission-webhooks/operator-webhook.yaml +++ /dev/null @@ -1,3 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/admission-webhooks/operator-webhook.yaml ---- diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/certmanager.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/certmanager.yaml deleted file mode 100644 index e8615238d0..0000000000 --- a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/certmanager.yaml +++ /dev/null @@ -1,44 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/certmanager.yaml -apiVersion: cert-manager.io/v1 -kind: Certificate -metadata: - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: webhook - name: example-opentelemetry-operator-serving-cert - namespace: default -spec: - dnsNames: - - example-opentelemetry-operator-webhook.default.svc - - example-opentelemetry-operator-webhook.default.svc.cluster.local - issuerRef: - kind: Issuer - name: example-opentelemetry-operator-selfsigned-issuer - secretName: example-opentelemetry-operator-controller-manager-service-cert - subject: - organizationalUnits: - - example-opentelemetry-operator ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/certmanager.yaml -apiVersion: cert-manager.io/v1 -kind: Issuer -metadata: - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: webhook - name: example-opentelemetry-operator-selfsigned-issuer - namespace: default -spec: - selfSigned: {} - diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/clusterrole.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/clusterrole.yaml deleted file mode 100644 index 2037050533..0000000000 --- a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/clusterrole.yaml +++ /dev/null @@ -1,410 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/clusterrole.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: controller-manager - name: example-opentelemetry-operator-manager -rules: - - apiGroups: - - "" - resources: - - configmaps - - persistentvolumeclaims - - persistentvolumes - - pods - - serviceaccounts - - services - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - "" - resources: - - events - verbs: - - create - - get - - list - - patch - - watch - - apiGroups: - - "" - resources: - - namespaces - verbs: - - list - - watch - - apiGroups: - - "" - resources: - - namespaces/status - verbs: - - get - - list - - watch - - apiGroups: - - "" - resources: - - nodes/spec - verbs: - - get - - list - - watch - - apiGroups: - - "" - resources: - - pods/status - verbs: - - get - - list - - watch - - apiGroups: - - "" - resources: - - replicationcontrollers - verbs: - - get - - list - - watch - - apiGroups: - - "" - resources: - - replicationcontrollers/status - verbs: - - get - - list - - watch - - apiGroups: - - "" - resources: - - resourcequotas - verbs: - - get - - list - - watch - - apiGroups: - - apps - resources: - - daemonsets - - deployments - - statefulsets - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - apps - - extensions - resources: - - replicasets - verbs: - - get - - list - - watch - - apiGroups: - - extensions - resources: - - daemonsets - verbs: - - get - - list - - watch - - apiGroups: - - extensions - resources: - - deployments - verbs: - - get - - list - - watch - - apiGroups: - - autoscaling - resources: - - horizontalpodautoscalers - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - batch - resources: - - jobs - verbs: - - get - - list - - watch - - apiGroups: - - batch - resources: - - cronjobs - verbs: - - get - - list - - watch - - apiGroups: - - "" - resources: - - nodes/proxy - verbs: - - get - - apiGroups: - - "" - resources: - - nodes/stats - verbs: - - get - - apiGroups: - - config.openshift.io - resources: - - infrastructures - - infrastructures/status - verbs: - - get - - list - - watch - - apiGroups: - - coordination.k8s.io - resources: - - leases - verbs: - - create - - get - - list - - update - - apiGroups: - - discovery.k8s.io - resources: - - endpointslices - verbs: - - get - - list - - apiGroups: - - events.k8s.io - resources: - - events - verbs: - - create - - list - - patch - - watch - - apiGroups: - - gateway.networking.k8s.io - resources: - - httproutes - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - monitoring.coreos.com - resources: - - podmonitors - - servicemonitors - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - networking.k8s.io - resources: - - ingresses - - networkpolicies - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - opentelemetry.io - resources: - - instrumentations - verbs: - - get - - list - - patch - - update - - watch - - apiGroups: - - opentelemetry.io - resources: - - opampbridges - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - opentelemetry.io - resources: - - opampbridges/finalizers - verbs: - - update - - apiGroups: - - opentelemetry.io - resources: - - opampbridges/status - verbs: - - get - - patch - - update - - apiGroups: - - opentelemetry.io - resources: - - opentelemetrycollectors - verbs: - - get - - list - - patch - - update - - watch - - apiGroups: - - opentelemetry.io - resources: - - opentelemetrycollectors/finalizers - verbs: - - get - - patch - - update - - apiGroups: - - opentelemetry.io - resources: - - opentelemetrycollectors/status - verbs: - - get - - patch - - update - - apiGroups: - - policy - resources: - - poddisruptionbudgets - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - route.openshift.io - resources: - - routes - - routes/custom-host - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - opentelemetry.io - resources: - - targetallocators - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - opentelemetry.io - resources: - - targetallocators/status - verbs: - - get - - patch - - update - - apiGroups: - - opentelemetry.io - resources: - - targetallocators/finalizers - verbs: - - get - - patch - - update - - apiGroups: - - cert-manager.io - resources: - - issuers - - certificaterequests - - certificates - verbs: - - create - - get - - list - - watch - - update - - patch - - delete - - apiGroups: - - authentication.k8s.io - resources: - - tokenreviews - verbs: - - create - - apiGroups: - - authorization.k8s.io - resources: - - subjectaccessreviews - verbs: - - create ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/clusterrole.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: controller-manager - name: example-opentelemetry-operator-metrics -rules: - - nonResourceURLs: - - /metrics - verbs: - - get - - diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/clusterrolebinding.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/clusterrolebinding.yaml deleted file mode 100644 index 4acb7d53f5..0000000000 --- a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/clusterrolebinding.yaml +++ /dev/null @@ -1,24 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/clusterrolebinding.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding -metadata: - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: controller-manager - name: example-opentelemetry-operator-manager -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: example-opentelemetry-operator-manager -subjects: - - kind: ServiceAccount - name: opentelemetry-operator - namespace: default - - diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/deployment.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/deployment.yaml deleted file mode 100644 index c775cd1cf3..0000000000 --- a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/deployment.yaml +++ /dev/null @@ -1,105 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/deployment.yaml -apiVersion: apps/v1 -kind: Deployment -metadata: - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: controller-manager - name: example-opentelemetry-operator - namespace: default -spec: - replicas: 1 - revisionHistoryLimit: 10 - selector: - matchLabels: - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/component: controller-manager - template: - metadata: - annotations: - kubectl.kubernetes.io/default-container: manager - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: controller-manager - spec: - automountServiceAccountToken: true - hostNetwork: false - containers: - - args: - - --metrics-addr=0.0.0.0:8443 - - --metrics-secure=true - - --enable-leader-election - - --health-probe-addr=:8081 - - --webhook-port=9443 - - --collector-image=otel/opentelemetry-collector-k8s:0.151.0 - command: - - /manager - env: - - name: SERVICE_ACCOUNT_NAME - valueFrom: - fieldRef: - fieldPath: spec.serviceAccountName - - name: ENABLE_WEBHOOKS - value: "true" - image: "ghcr.io/open-telemetry/opentelemetry-operator/opentelemetry-operator:0.151.0" - name: manager - imagePullPolicy: IfNotPresent - ports: - - containerPort: 8443 - name: metrics - protocol: TCP - - containerPort: 9443 - name: webhook-server - protocol: TCP - livenessProbe: - httpGet: - path: /healthz - port: 8081 - initialDelaySeconds: 15 - periodSeconds: 20 - readinessProbe: - httpGet: - path: /readyz - port: 8081 - initialDelaySeconds: 5 - periodSeconds: 10 - resources: - {} - volumeMounts: - - mountPath: /tmp/k8s-webhook-server/serving-certs - name: cert - readOnly: true - securityContext: - allowPrivilegeEscalation: false - capabilities: - drop: - - ALL - runAsNonRoot: true - seccompProfile: - type: RuntimeDefault - nodeSelector: - kubernetes.io/os: linux - serviceAccountName: opentelemetry-operator - terminationGracePeriodSeconds: 10 - volumes: - - name: cert - secret: - defaultMode: 420 - secretName: example-opentelemetry-operator-controller-manager-service-cert - securityContext: - fsGroup: 65532 - runAsGroup: 65532 - runAsNonRoot: true - runAsUser: 65532 - diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/role.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/role.yaml deleted file mode 100644 index b5339517a2..0000000000 --- a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/role.yaml +++ /dev/null @@ -1,200 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/role.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: controller-manager - name: example-opentelemetry-operator-leader-election - namespace: default -rules: - - apiGroups: - - "" - resources: - - configmaps - - pods - - serviceaccounts - - services - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - "" - resources: - - events - verbs: - - create - - patch - - apiGroups: - - "" - resources: - - namespaces - - secrets - verbs: - - get - - list - - watch - - apiGroups: - - apps - resources: - - daemonsets - - deployments - - statefulsets - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - apps - resources: - - replicasets - verbs: - - get - - list - - watch - - apiGroups: - - autoscaling - resources: - - horizontalpodautoscalers - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - batch - resources: - - jobs - verbs: - - get - - list - - watch - - apiGroups: - - config.openshift.io - resources: - - infrastructures - - infrastructures/status - verbs: - - get - - list - - watch - - apiGroups: - - coordination.k8s.io - resources: - - leases - verbs: - - create - - get - - list - - update - - apiGroups: - - monitoring.coreos.com - resources: - - podmonitors - - servicemonitors - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - networking.k8s.io - resources: - - ingresses - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - opentelemetry.io - resources: - - instrumentations - - opentelemetrycollectors - verbs: - - get - - list - - patch - - update - - watch - - apiGroups: - - opentelemetry.io - resources: - - opampbridges - - targetallocators - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - opentelemetry.io - resources: - - opampbridges/finalizers - verbs: - - update - - apiGroups: - - opentelemetry.io - resources: - - opampbridges/status - - opentelemetrycollectors/finalizers - - opentelemetrycollectors/status - - targetallocators/status - - targetallocators/finalizers - verbs: - - get - - patch - - update - - apiGroups: - - policy - resources: - - poddisruptionbudgets - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - route.openshift.io - resources: - - routes - - routes/custom-host - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/rolebinding.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/rolebinding.yaml deleted file mode 100644 index ae376e80c9..0000000000 --- a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/rolebinding.yaml +++ /dev/null @@ -1,24 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/rolebinding.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding -metadata: - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: controller-manager - name: example-opentelemetry-operator-leader-election - namespace: default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: example-opentelemetry-operator-leader-election -subjects: - - kind: ServiceAccount - name: opentelemetry-operator - namespace: default - diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/service.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/service.yaml deleted file mode 100644 index 0a3006d80f..0000000000 --- a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/service.yaml +++ /dev/null @@ -1,48 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/service.yaml -apiVersion: v1 -kind: Service -metadata: - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: controller-manager - name: example-opentelemetry-operator - namespace: default -spec: - ports: - - name: metrics - port: 8443 - protocol: TCP - targetPort: metrics - selector: - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/component: controller-manager ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/service.yaml -apiVersion: v1 -kind: Service -metadata: - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: controller-manager - name: example-opentelemetry-operator-webhook - namespace: default -spec: - ports: - - port: 443 - protocol: TCP - targetPort: webhook-server - selector: - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/component: controller-manager - diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/serviceaccount.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/serviceaccount.yaml deleted file mode 100644 index c6ba25dbac..0000000000 --- a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/serviceaccount.yaml +++ /dev/null @@ -1,17 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/serviceaccount.yaml -apiVersion: v1 -kind: ServiceAccount -automountServiceAccountToken: true -metadata: - name: opentelemetry-operator - namespace: default - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: controller-manager - diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml deleted file mode 100644 index 9039160e03..0000000000 --- a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml +++ /dev/null @@ -1,54 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/tests/test-certmanager-connection.yaml -apiVersion: v1 -kind: Pod -metadata: - name: "example-opentelemetry-operator-cert-manager" - namespace: default - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: webhook - annotations: - "helm.sh/hook": test -spec: - containers: - - name: wget - image: "busybox:latest" - env: - - name: CERT_MANAGER_CLUSTERIP - value: "cert-manager-webhook" - - name: CERT_MANAGER_PORT - value: "443" - command: - - sh - - -c - # The following shell script tests if the cert-manager service is up. If the service is up, when we try - # to wget its exposed port, we will get an HTTP error 400. - - | - wget_output=$(wget -q "$CERT_MANAGER_CLUSTERIP:$CERT_MANAGER_PORT") - if wget_output=="wget: server returned error: HTTP/1.0 400 Bad Request" - then exit 0 - else exit 1 - fi - securityContext: - allowPrivilegeEscalation: false - capabilities: - drop: - - ALL - runAsNonRoot: true - seccompProfile: - type: RuntimeDefault - restartPolicy: Never - nodeSelector: - kubernetes.io/os: linux - securityContext: - fsGroup: 65532 - runAsGroup: 65532 - runAsNonRoot: true - runAsUser: 65532 - diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/tests/test-service-connection.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/tests/test-service-connection.yaml deleted file mode 100644 index 88e0e0bc24..0000000000 --- a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/tests/test-service-connection.yaml +++ /dev/null @@ -1,107 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/tests/test-service-connection.yaml -apiVersion: v1 -kind: Pod -metadata: - name: "example-opentelemetry-operator-metrics" - namespace: default - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: controller-manager - annotations: - "helm.sh/hook": test -spec: - containers: - - name: wget - image: "busybox:latest" - env: - - name: MANAGER_METRICS_SERVICE_CLUSTERIP - value: "example-opentelemetry-operator" - - name: MANAGER_METRICS_SERVICE_PORT - value: "8443" - command: - - sh - - -c - # The following shell script tests if the controller-manager-metrics-service is up. - # If the service is up, when we try to wget its exposed port, we will get an HTTP error 400. - - | - wget_output=$(wget -q "$MANAGER_METRICS_SERVICE_CLUSTERIP:$MANAGER_METRICS_SERVICE_PORT") - if wget_output=="wget: server returned error: HTTP/1.0 400 Bad Request" - then exit 0 - else exit 1 - fi - securityContext: - allowPrivilegeEscalation: false - capabilities: - drop: - - ALL - runAsNonRoot: true - seccompProfile: - type: RuntimeDefault - restartPolicy: Never - nodeSelector: - kubernetes.io/os: linux - securityContext: - fsGroup: 65532 - runAsGroup: 65532 - runAsNonRoot: true - runAsUser: 65532 ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/tests/test-service-connection.yaml -apiVersion: v1 -kind: Pod -metadata: - name: "example-opentelemetry-operator-webhook" - namespace: default - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: controller-manager - annotations: - "helm.sh/hook": test -spec: - containers: - - name: wget - image: "busybox:latest" - env: - - name: WEBHOOK_SERVICE_CLUSTERIP - value: "example-opentelemetry-operator-webhook" - - name: WEBHOOK_SERVICE_PORT - value: "443" - command: - - sh - - -c - # The following shell script tests if the webhook service is up. If the service is up, when we try - # to wget its exposed port, we will get an HTTP error 400. - - | - wget_output=$(wget -q "$WEBHOOK_SERVICE_CLUSTERIP:$WEBHOOK_SERVICE_PORT") - if wget_output=="wget: server returned error: HTTP/1.0 400 Bad Request" - then exit 0 - else exit 1 - fi - securityContext: - allowPrivilegeEscalation: false - capabilities: - drop: - - ALL - runAsNonRoot: true - seccompProfile: - type: RuntimeDefault - restartPolicy: Never - nodeSelector: - kubernetes.io/os: linux - securityContext: - fsGroup: 65532 - runAsGroup: 65532 - runAsNonRoot: true - runAsUser: 65532 - diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/clusterrole.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/clusterrole.yaml deleted file mode 100644 index 9d2d1e8211..0000000000 --- a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/clusterrole.yaml +++ /dev/null @@ -1,69 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/templates/clusterrole.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - name: example-collector -rules: -- apiGroups: [""] - resources: - - namespaces - - nodes - - nodes/proxy - - nodes/metrics - - nodes/stats - - services - - endpoints - - pods - - events - - secrets - - persistentvolumeclaims - - persistentvolumes - verbs: ["get", "list", "watch"] -- apiGroups: ["monitoring.coreos.com"] - resources: - - servicemonitors - - podmonitors - - scrapeconfigs - - probes - verbs: ["get", "list", "watch"] -- apiGroups: - - extensions - resources: - - ingresses - verbs: ["get", "list", "watch"] -- apiGroups: - - apps - resources: - - daemonsets - - deployments - - replicasets - - statefulsets - verbs: ["get", "list", "watch"] -- apiGroups: - - networking.k8s.io - resources: - - ingresses - verbs: ["get", "list", "watch"] -- apiGroups: ["discovery.k8s.io"] - resources: - - endpointslices - verbs: ["get", "list", "watch"] -- nonResourceURLs: ["/metrics", "/metrics/cadvisor"] - verbs: ["get"] ---- -# Source: opentelemetry-kube-stack/templates/clusterrole.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding -metadata: - name: example-daemon -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: example-collector -subjects: -- kind: ServiceAccount - # quirk of the Operator - name: "example-daemon-collector" - namespace: default - diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/collector.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/collector.yaml deleted file mode 100644 index a9b50cce3a..0000000000 --- a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/collector.yaml +++ /dev/null @@ -1,126 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/templates/collector.yaml -apiVersion: opentelemetry.io/v1beta1 -kind: OpenTelemetryCollector -metadata: - name: example-daemon - namespace: default - labels: - helm.sh/chart: opentelemetry-kube-stack-0.16.0 - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - release: "example" -spec: - managementState: managed - mode: daemonset - config: - exporters: - debug: {} - extensions: - k8s_observer: - auth_type: serviceAccount - node: ${env:K8S_NODE_NAME} - processors: - batch: - send_batch_max_size: 1500 - send_batch_size: 1000 - timeout: 1s - resource/hostname: - attributes: - - action: insert - from_attribute: k8s.node.name - key: host.name - resourcedetection/env: - detectors: - - env - - k8snode - override: false - timeout: 2s - receivers: - otlp: - protocols: - grpc: - endpoint: 0.0.0.0:4317 - http: - endpoint: 0.0.0.0:4318 - receiver_creator/metrics: - discovery: - enabled: true - watch_observers: - - k8s_observer - service: - extensions: - - k8s_observer - pipelines: - logs: - exporters: - - debug - processors: - - resourcedetection/env - - resource/hostname - - batch - receivers: - - otlp - metrics: - exporters: - - debug - processors: - - resourcedetection/env - - resource/hostname - - batch - receivers: - - otlp - - receiver_creator/metrics - traces: - exporters: - - debug - processors: - - resourcedetection/env - - resource/hostname - - batch - receivers: - - otlp - imagePullPolicy: IfNotPresent - upgradeStrategy: automatic - terminationGracePeriodSeconds: 30 - resources: - limits: - cpu: 200m - memory: 500Mi - requests: - cpu: 100m - memory: 250Mi - securityContext: - {} - env: - - name: K8S_NODE_NAME - valueFrom: - fieldRef: - fieldPath: spec.nodeName - - name: OTEL_K8S_NODE_NAME - valueFrom: - fieldRef: - fieldPath: spec.nodeName - - name: OTEL_K8S_NODE_IP - valueFrom: - fieldRef: - fieldPath: status.hostIP - - name: OTEL_K8S_NAMESPACE - valueFrom: - fieldRef: - apiVersion: v1 - fieldPath: metadata.namespace - - name: OTEL_K8S_POD_NAME - valueFrom: - fieldRef: - apiVersion: v1 - fieldPath: metadata.name - - name: OTEL_K8S_POD_IP - valueFrom: - fieldRef: - apiVersion: v1 - fieldPath: status.podIP - - name: OTEL_RESOURCE_ATTRIBUTES - value: "k8s.pod.name=$(OTEL_K8S_POD_NAME),k8s.namespace.name=$(OTEL_K8S_NAMESPACE),k8s.node.name=$(OTEL_K8S_NODE_NAME),host.name=$(OTEL_K8S_NODE_NAME),k8s.node.ip=$(OTEL_K8S_NODE_IP),k8s.pod.ip=$(OTEL_K8S_POD_IP),k8s.cluster.name=unknown_k8s_cluster" - - diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/hooks.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/hooks.yaml deleted file mode 100644 index df09c1e80b..0000000000 --- a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/hooks.yaml +++ /dev/null @@ -1,65 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/templates/hooks.yaml -apiVersion: v1 -kind: ServiceAccount -metadata: - name: delete-resources-sa - annotations: - "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded ---- -# Source: opentelemetry-kube-stack/templates/hooks.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - name: delete-resources-role - annotations: - "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded -rules: - - apiGroups: - - opentelemetry.io - resources: - - instrumentations - - opampbridges - - opentelemetrycollectors - verbs: - - get - - list - - delete ---- -# Source: opentelemetry-kube-stack/templates/hooks.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding -metadata: - name: delete-resources-rolebinding - annotations: - "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: delete-resources-role -subjects: - - kind: ServiceAccount - name: delete-resources-sa ---- -# Source: opentelemetry-kube-stack/templates/hooks.yaml -apiVersion: batch/v1 -kind: Job -metadata: - name: opentelemetry-kube-stack-pre-delete-job - annotations: - "helm.sh/hook": pre-delete - "helm.sh/hook-delete-policy": hook-succeeded,hook-failed -spec: - template: - spec: - restartPolicy: Never - serviceAccountName: delete-resources-sa - containers: - - name: delete-resources - image: "rancher/kubectl:v1.34.1" - args: - - "delete" - - "instrumentations,opampbridges,opentelemetrycollectors" - - "-l" - - "helm.sh/chart=opentelemetry-kube-stack-0.16.0" - diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml deleted file mode 100644 index 17585fa86a..0000000000 --- a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml +++ /dev/null @@ -1,193 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/admission-webhooks/operator-webhook-with-cert-manager.yaml -apiVersion: admissionregistration.k8s.io/v1 -kind: MutatingWebhookConfiguration -metadata: - annotations: - cert-manager.io/inject-ca-from: default/example-opentelemetry-operator-serving-cert - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: webhook - name: example-opentelemetry-operator-mutation -webhooks: - - admissionReviewVersions: - - v1 - clientConfig: - service: - name: example-opentelemetry-operator-webhook - namespace: default - path: /mutate-opentelemetry-io-v1alpha1-instrumentation - port: 443 - failurePolicy: Ignore - name: minstrumentation.kb.io - rules: - - apiGroups: - - opentelemetry.io - apiVersions: - - v1alpha1 - operations: - - CREATE - - UPDATE - resources: - - instrumentations - scope: Namespaced - sideEffects: None - timeoutSeconds: 10 - - admissionReviewVersions: - - v1 - clientConfig: - service: - name: example-opentelemetry-operator-webhook - namespace: default - path: /mutate-opentelemetry-io-v1beta1-opentelemetrycollector - port: 443 - failurePolicy: Ignore - name: mopentelemetrycollectorbeta.kb.io - rules: - - apiGroups: - - opentelemetry.io - apiVersions: - - v1beta1 - operations: - - CREATE - - UPDATE - resources: - - opentelemetrycollectors - scope: Namespaced - sideEffects: None - timeoutSeconds: 10 - - admissionReviewVersions: - - v1 - clientConfig: - service: - name: example-opentelemetry-operator-webhook - namespace: default - path: /mutate-v1-pod - port: 443 - failurePolicy: Ignore - name: mpod.kb.io - rules: - - apiGroups: - - "" - apiVersions: - - v1 - operations: - - CREATE - resources: - - pods - scope: Namespaced - sideEffects: None - timeoutSeconds: 10 ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/admission-webhooks/operator-webhook-with-cert-manager.yaml -apiVersion: admissionregistration.k8s.io/v1 -kind: ValidatingWebhookConfiguration -metadata: - annotations: - cert-manager.io/inject-ca-from: default/example-opentelemetry-operator-serving-cert - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: webhook - name: example-opentelemetry-operator-validation -webhooks: - - admissionReviewVersions: - - v1 - clientConfig: - service: - name: example-opentelemetry-operator-webhook - namespace: default - path: /validate-opentelemetry-io-v1alpha1-instrumentation - port: 443 - failurePolicy: Ignore - name: vinstrumentationcreateupdate.kb.io - rules: - - apiGroups: - - opentelemetry.io - apiVersions: - - v1alpha1 - operations: - - CREATE - - UPDATE - resources: - - instrumentations - scope: Namespaced - sideEffects: None - timeoutSeconds: 10 - - admissionReviewVersions: - - v1 - clientConfig: - service: - name: example-opentelemetry-operator-webhook - namespace: default - path: /validate-opentelemetry-io-v1alpha1-instrumentation - port: 443 - failurePolicy: Ignore - name: vinstrumentationdelete.kb.io - rules: - - apiGroups: - - opentelemetry.io - apiVersions: - - v1alpha1 - operations: - - DELETE - resources: - - instrumentations - scope: Namespaced - sideEffects: None - timeoutSeconds: 10 - - admissionReviewVersions: - - v1 - clientConfig: - service: - name: example-opentelemetry-operator-webhook - namespace: default - path: /validate-opentelemetry-io-v1beta1-opentelemetrycollector - port: 443 - failurePolicy: Ignore - name: vopentelemetrycollectorcreateupdatebeta.kb.io - rules: - - apiGroups: - - opentelemetry.io - apiVersions: - - v1beta1 - operations: - - CREATE - - UPDATE - resources: - - opentelemetrycollectors - scope: Namespaced - sideEffects: None - timeoutSeconds: 10 - - admissionReviewVersions: - - v1 - clientConfig: - service: - name: example-opentelemetry-operator-webhook - namespace: default - path: /validate-opentelemetry-io-v1beta1-opentelemetrycollector - port: 443 - failurePolicy: Ignore - name: vopentelemetrycollectordeletebeta.kb.io - rules: - - apiGroups: - - opentelemetry.io - apiVersions: - - v1beta1 - operations: - - DELETE - resources: - - opentelemetrycollectors - scope: Namespaced - sideEffects: None - timeoutSeconds: 10 - diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/admission-webhooks/operator-webhook.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/admission-webhooks/operator-webhook.yaml deleted file mode 100644 index 5b9ff5511d..0000000000 --- a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/admission-webhooks/operator-webhook.yaml +++ /dev/null @@ -1,3 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/admission-webhooks/operator-webhook.yaml ---- diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/certmanager.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/certmanager.yaml deleted file mode 100644 index e8615238d0..0000000000 --- a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/certmanager.yaml +++ /dev/null @@ -1,44 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/certmanager.yaml -apiVersion: cert-manager.io/v1 -kind: Certificate -metadata: - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: webhook - name: example-opentelemetry-operator-serving-cert - namespace: default -spec: - dnsNames: - - example-opentelemetry-operator-webhook.default.svc - - example-opentelemetry-operator-webhook.default.svc.cluster.local - issuerRef: - kind: Issuer - name: example-opentelemetry-operator-selfsigned-issuer - secretName: example-opentelemetry-operator-controller-manager-service-cert - subject: - organizationalUnits: - - example-opentelemetry-operator ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/certmanager.yaml -apiVersion: cert-manager.io/v1 -kind: Issuer -metadata: - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: webhook - name: example-opentelemetry-operator-selfsigned-issuer - namespace: default -spec: - selfSigned: {} - diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/clusterrole.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/clusterrole.yaml deleted file mode 100644 index 2037050533..0000000000 --- a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/clusterrole.yaml +++ /dev/null @@ -1,410 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/clusterrole.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: controller-manager - name: example-opentelemetry-operator-manager -rules: - - apiGroups: - - "" - resources: - - configmaps - - persistentvolumeclaims - - persistentvolumes - - pods - - serviceaccounts - - services - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - "" - resources: - - events - verbs: - - create - - get - - list - - patch - - watch - - apiGroups: - - "" - resources: - - namespaces - verbs: - - list - - watch - - apiGroups: - - "" - resources: - - namespaces/status - verbs: - - get - - list - - watch - - apiGroups: - - "" - resources: - - nodes/spec - verbs: - - get - - list - - watch - - apiGroups: - - "" - resources: - - pods/status - verbs: - - get - - list - - watch - - apiGroups: - - "" - resources: - - replicationcontrollers - verbs: - - get - - list - - watch - - apiGroups: - - "" - resources: - - replicationcontrollers/status - verbs: - - get - - list - - watch - - apiGroups: - - "" - resources: - - resourcequotas - verbs: - - get - - list - - watch - - apiGroups: - - apps - resources: - - daemonsets - - deployments - - statefulsets - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - apps - - extensions - resources: - - replicasets - verbs: - - get - - list - - watch - - apiGroups: - - extensions - resources: - - daemonsets - verbs: - - get - - list - - watch - - apiGroups: - - extensions - resources: - - deployments - verbs: - - get - - list - - watch - - apiGroups: - - autoscaling - resources: - - horizontalpodautoscalers - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - batch - resources: - - jobs - verbs: - - get - - list - - watch - - apiGroups: - - batch - resources: - - cronjobs - verbs: - - get - - list - - watch - - apiGroups: - - "" - resources: - - nodes/proxy - verbs: - - get - - apiGroups: - - "" - resources: - - nodes/stats - verbs: - - get - - apiGroups: - - config.openshift.io - resources: - - infrastructures - - infrastructures/status - verbs: - - get - - list - - watch - - apiGroups: - - coordination.k8s.io - resources: - - leases - verbs: - - create - - get - - list - - update - - apiGroups: - - discovery.k8s.io - resources: - - endpointslices - verbs: - - get - - list - - apiGroups: - - events.k8s.io - resources: - - events - verbs: - - create - - list - - patch - - watch - - apiGroups: - - gateway.networking.k8s.io - resources: - - httproutes - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - monitoring.coreos.com - resources: - - podmonitors - - servicemonitors - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - networking.k8s.io - resources: - - ingresses - - networkpolicies - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - opentelemetry.io - resources: - - instrumentations - verbs: - - get - - list - - patch - - update - - watch - - apiGroups: - - opentelemetry.io - resources: - - opampbridges - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - opentelemetry.io - resources: - - opampbridges/finalizers - verbs: - - update - - apiGroups: - - opentelemetry.io - resources: - - opampbridges/status - verbs: - - get - - patch - - update - - apiGroups: - - opentelemetry.io - resources: - - opentelemetrycollectors - verbs: - - get - - list - - patch - - update - - watch - - apiGroups: - - opentelemetry.io - resources: - - opentelemetrycollectors/finalizers - verbs: - - get - - patch - - update - - apiGroups: - - opentelemetry.io - resources: - - opentelemetrycollectors/status - verbs: - - get - - patch - - update - - apiGroups: - - policy - resources: - - poddisruptionbudgets - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - route.openshift.io - resources: - - routes - - routes/custom-host - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - opentelemetry.io - resources: - - targetallocators - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - opentelemetry.io - resources: - - targetallocators/status - verbs: - - get - - patch - - update - - apiGroups: - - opentelemetry.io - resources: - - targetallocators/finalizers - verbs: - - get - - patch - - update - - apiGroups: - - cert-manager.io - resources: - - issuers - - certificaterequests - - certificates - verbs: - - create - - get - - list - - watch - - update - - patch - - delete - - apiGroups: - - authentication.k8s.io - resources: - - tokenreviews - verbs: - - create - - apiGroups: - - authorization.k8s.io - resources: - - subjectaccessreviews - verbs: - - create ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/clusterrole.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: controller-manager - name: example-opentelemetry-operator-metrics -rules: - - nonResourceURLs: - - /metrics - verbs: - - get - - diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/clusterrolebinding.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/clusterrolebinding.yaml deleted file mode 100644 index 4acb7d53f5..0000000000 --- a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/clusterrolebinding.yaml +++ /dev/null @@ -1,24 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/clusterrolebinding.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding -metadata: - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: controller-manager - name: example-opentelemetry-operator-manager -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: example-opentelemetry-operator-manager -subjects: - - kind: ServiceAccount - name: opentelemetry-operator - namespace: default - - diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/deployment.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/deployment.yaml deleted file mode 100644 index c775cd1cf3..0000000000 --- a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/deployment.yaml +++ /dev/null @@ -1,105 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/deployment.yaml -apiVersion: apps/v1 -kind: Deployment -metadata: - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: controller-manager - name: example-opentelemetry-operator - namespace: default -spec: - replicas: 1 - revisionHistoryLimit: 10 - selector: - matchLabels: - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/component: controller-manager - template: - metadata: - annotations: - kubectl.kubernetes.io/default-container: manager - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: controller-manager - spec: - automountServiceAccountToken: true - hostNetwork: false - containers: - - args: - - --metrics-addr=0.0.0.0:8443 - - --metrics-secure=true - - --enable-leader-election - - --health-probe-addr=:8081 - - --webhook-port=9443 - - --collector-image=otel/opentelemetry-collector-k8s:0.151.0 - command: - - /manager - env: - - name: SERVICE_ACCOUNT_NAME - valueFrom: - fieldRef: - fieldPath: spec.serviceAccountName - - name: ENABLE_WEBHOOKS - value: "true" - image: "ghcr.io/open-telemetry/opentelemetry-operator/opentelemetry-operator:0.151.0" - name: manager - imagePullPolicy: IfNotPresent - ports: - - containerPort: 8443 - name: metrics - protocol: TCP - - containerPort: 9443 - name: webhook-server - protocol: TCP - livenessProbe: - httpGet: - path: /healthz - port: 8081 - initialDelaySeconds: 15 - periodSeconds: 20 - readinessProbe: - httpGet: - path: /readyz - port: 8081 - initialDelaySeconds: 5 - periodSeconds: 10 - resources: - {} - volumeMounts: - - mountPath: /tmp/k8s-webhook-server/serving-certs - name: cert - readOnly: true - securityContext: - allowPrivilegeEscalation: false - capabilities: - drop: - - ALL - runAsNonRoot: true - seccompProfile: - type: RuntimeDefault - nodeSelector: - kubernetes.io/os: linux - serviceAccountName: opentelemetry-operator - terminationGracePeriodSeconds: 10 - volumes: - - name: cert - secret: - defaultMode: 420 - secretName: example-opentelemetry-operator-controller-manager-service-cert - securityContext: - fsGroup: 65532 - runAsGroup: 65532 - runAsNonRoot: true - runAsUser: 65532 - diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/role.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/role.yaml deleted file mode 100644 index b5339517a2..0000000000 --- a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/role.yaml +++ /dev/null @@ -1,200 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/role.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: controller-manager - name: example-opentelemetry-operator-leader-election - namespace: default -rules: - - apiGroups: - - "" - resources: - - configmaps - - pods - - serviceaccounts - - services - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - "" - resources: - - events - verbs: - - create - - patch - - apiGroups: - - "" - resources: - - namespaces - - secrets - verbs: - - get - - list - - watch - - apiGroups: - - apps - resources: - - daemonsets - - deployments - - statefulsets - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - apps - resources: - - replicasets - verbs: - - get - - list - - watch - - apiGroups: - - autoscaling - resources: - - horizontalpodautoscalers - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - batch - resources: - - jobs - verbs: - - get - - list - - watch - - apiGroups: - - config.openshift.io - resources: - - infrastructures - - infrastructures/status - verbs: - - get - - list - - watch - - apiGroups: - - coordination.k8s.io - resources: - - leases - verbs: - - create - - get - - list - - update - - apiGroups: - - monitoring.coreos.com - resources: - - podmonitors - - servicemonitors - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - networking.k8s.io - resources: - - ingresses - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - opentelemetry.io - resources: - - instrumentations - - opentelemetrycollectors - verbs: - - get - - list - - patch - - update - - watch - - apiGroups: - - opentelemetry.io - resources: - - opampbridges - - targetallocators - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - opentelemetry.io - resources: - - opampbridges/finalizers - verbs: - - update - - apiGroups: - - opentelemetry.io - resources: - - opampbridges/status - - opentelemetrycollectors/finalizers - - opentelemetrycollectors/status - - targetallocators/status - - targetallocators/finalizers - verbs: - - get - - patch - - update - - apiGroups: - - policy - resources: - - poddisruptionbudgets - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - route.openshift.io - resources: - - routes - - routes/custom-host - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/rolebinding.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/rolebinding.yaml deleted file mode 100644 index ae376e80c9..0000000000 --- a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/rolebinding.yaml +++ /dev/null @@ -1,24 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/rolebinding.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding -metadata: - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: controller-manager - name: example-opentelemetry-operator-leader-election - namespace: default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: example-opentelemetry-operator-leader-election -subjects: - - kind: ServiceAccount - name: opentelemetry-operator - namespace: default - diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/service.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/service.yaml deleted file mode 100644 index 0a3006d80f..0000000000 --- a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/service.yaml +++ /dev/null @@ -1,48 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/service.yaml -apiVersion: v1 -kind: Service -metadata: - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: controller-manager - name: example-opentelemetry-operator - namespace: default -spec: - ports: - - name: metrics - port: 8443 - protocol: TCP - targetPort: metrics - selector: - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/component: controller-manager ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/service.yaml -apiVersion: v1 -kind: Service -metadata: - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: controller-manager - name: example-opentelemetry-operator-webhook - namespace: default -spec: - ports: - - port: 443 - protocol: TCP - targetPort: webhook-server - selector: - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/component: controller-manager - diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/serviceaccount.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/serviceaccount.yaml deleted file mode 100644 index c6ba25dbac..0000000000 --- a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/serviceaccount.yaml +++ /dev/null @@ -1,17 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/serviceaccount.yaml -apiVersion: v1 -kind: ServiceAccount -automountServiceAccountToken: true -metadata: - name: opentelemetry-operator - namespace: default - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: controller-manager - diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml deleted file mode 100644 index 9039160e03..0000000000 --- a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml +++ /dev/null @@ -1,54 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/tests/test-certmanager-connection.yaml -apiVersion: v1 -kind: Pod -metadata: - name: "example-opentelemetry-operator-cert-manager" - namespace: default - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: webhook - annotations: - "helm.sh/hook": test -spec: - containers: - - name: wget - image: "busybox:latest" - env: - - name: CERT_MANAGER_CLUSTERIP - value: "cert-manager-webhook" - - name: CERT_MANAGER_PORT - value: "443" - command: - - sh - - -c - # The following shell script tests if the cert-manager service is up. If the service is up, when we try - # to wget its exposed port, we will get an HTTP error 400. - - | - wget_output=$(wget -q "$CERT_MANAGER_CLUSTERIP:$CERT_MANAGER_PORT") - if wget_output=="wget: server returned error: HTTP/1.0 400 Bad Request" - then exit 0 - else exit 1 - fi - securityContext: - allowPrivilegeEscalation: false - capabilities: - drop: - - ALL - runAsNonRoot: true - seccompProfile: - type: RuntimeDefault - restartPolicy: Never - nodeSelector: - kubernetes.io/os: linux - securityContext: - fsGroup: 65532 - runAsGroup: 65532 - runAsNonRoot: true - runAsUser: 65532 - diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/tests/test-service-connection.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/tests/test-service-connection.yaml deleted file mode 100644 index 88e0e0bc24..0000000000 --- a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/tests/test-service-connection.yaml +++ /dev/null @@ -1,107 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/tests/test-service-connection.yaml -apiVersion: v1 -kind: Pod -metadata: - name: "example-opentelemetry-operator-metrics" - namespace: default - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: controller-manager - annotations: - "helm.sh/hook": test -spec: - containers: - - name: wget - image: "busybox:latest" - env: - - name: MANAGER_METRICS_SERVICE_CLUSTERIP - value: "example-opentelemetry-operator" - - name: MANAGER_METRICS_SERVICE_PORT - value: "8443" - command: - - sh - - -c - # The following shell script tests if the controller-manager-metrics-service is up. - # If the service is up, when we try to wget its exposed port, we will get an HTTP error 400. - - | - wget_output=$(wget -q "$MANAGER_METRICS_SERVICE_CLUSTERIP:$MANAGER_METRICS_SERVICE_PORT") - if wget_output=="wget: server returned error: HTTP/1.0 400 Bad Request" - then exit 0 - else exit 1 - fi - securityContext: - allowPrivilegeEscalation: false - capabilities: - drop: - - ALL - runAsNonRoot: true - seccompProfile: - type: RuntimeDefault - restartPolicy: Never - nodeSelector: - kubernetes.io/os: linux - securityContext: - fsGroup: 65532 - runAsGroup: 65532 - runAsNonRoot: true - runAsUser: 65532 ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/tests/test-service-connection.yaml -apiVersion: v1 -kind: Pod -metadata: - name: "example-opentelemetry-operator-webhook" - namespace: default - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: controller-manager - annotations: - "helm.sh/hook": test -spec: - containers: - - name: wget - image: "busybox:latest" - env: - - name: WEBHOOK_SERVICE_CLUSTERIP - value: "example-opentelemetry-operator-webhook" - - name: WEBHOOK_SERVICE_PORT - value: "443" - command: - - sh - - -c - # The following shell script tests if the webhook service is up. If the service is up, when we try - # to wget its exposed port, we will get an HTTP error 400. - - | - wget_output=$(wget -q "$WEBHOOK_SERVICE_CLUSTERIP:$WEBHOOK_SERVICE_PORT") - if wget_output=="wget: server returned error: HTTP/1.0 400 Bad Request" - then exit 0 - else exit 1 - fi - securityContext: - allowPrivilegeEscalation: false - capabilities: - drop: - - ALL - runAsNonRoot: true - seccompProfile: - type: RuntimeDefault - restartPolicy: Never - nodeSelector: - kubernetes.io/os: linux - securityContext: - fsGroup: 65532 - runAsGroup: 65532 - runAsNonRoot: true - runAsUser: 65532 - diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/clusterrole.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/clusterrole.yaml deleted file mode 100644 index 9d2d1e8211..0000000000 --- a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/clusterrole.yaml +++ /dev/null @@ -1,69 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/templates/clusterrole.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - name: example-collector -rules: -- apiGroups: [""] - resources: - - namespaces - - nodes - - nodes/proxy - - nodes/metrics - - nodes/stats - - services - - endpoints - - pods - - events - - secrets - - persistentvolumeclaims - - persistentvolumes - verbs: ["get", "list", "watch"] -- apiGroups: ["monitoring.coreos.com"] - resources: - - servicemonitors - - podmonitors - - scrapeconfigs - - probes - verbs: ["get", "list", "watch"] -- apiGroups: - - extensions - resources: - - ingresses - verbs: ["get", "list", "watch"] -- apiGroups: - - apps - resources: - - daemonsets - - deployments - - replicasets - - statefulsets - verbs: ["get", "list", "watch"] -- apiGroups: - - networking.k8s.io - resources: - - ingresses - verbs: ["get", "list", "watch"] -- apiGroups: ["discovery.k8s.io"] - resources: - - endpointslices - verbs: ["get", "list", "watch"] -- nonResourceURLs: ["/metrics", "/metrics/cadvisor"] - verbs: ["get"] ---- -# Source: opentelemetry-kube-stack/templates/clusterrole.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding -metadata: - name: example-daemon -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: example-collector -subjects: -- kind: ServiceAccount - # quirk of the Operator - name: "example-daemon-collector" - namespace: default - diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/collector.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/collector.yaml deleted file mode 100644 index 0a31142426..0000000000 --- a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/collector.yaml +++ /dev/null @@ -1,134 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/templates/collector.yaml -apiVersion: opentelemetry.io/v1beta1 -kind: OpenTelemetryCollector -metadata: - name: example-daemon - namespace: default - labels: - helm.sh/chart: opentelemetry-kube-stack-0.16.0 - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - release: "example" -spec: - managementState: managed - mode: daemonset - config: - exporters: - debug: {} - extensions: - k8s_observer: - auth_type: serviceAccount - node: ${env:K8S_NODE_NAME} - processors: - batch: - send_batch_max_size: 1500 - send_batch_size: 1000 - timeout: 1s - resource/hostname: - attributes: - - action: insert - from_attribute: k8s.node.name - key: host.name - resourcedetection/env: - detectors: - - env - - k8snode - override: false - timeout: 2s - receivers: - otlp: - protocols: - grpc: - endpoint: 0.0.0.0:4317 - http: - endpoint: 0.0.0.0:4318 - receiver_creator/logs: - discovery: - default_annotations: - io.opentelemetry.discovery.logs/enabled: "true" - enabled: true - watch_observers: - - k8s_observer - receiver_creator/metrics: - discovery: - enabled: true - watch_observers: - - k8s_observer - service: - extensions: - - k8s_observer - pipelines: - logs: - exporters: - - debug - processors: - - resourcedetection/env - - resource/hostname - - batch - receivers: - - otlp - - receiver_creator/logs - metrics: - exporters: - - debug - processors: - - resourcedetection/env - - resource/hostname - - batch - receivers: - - otlp - - receiver_creator/metrics - traces: - exporters: - - debug - processors: - - resourcedetection/env - - resource/hostname - - batch - receivers: - - otlp - imagePullPolicy: IfNotPresent - upgradeStrategy: automatic - terminationGracePeriodSeconds: 30 - resources: - limits: - cpu: 200m - memory: 500Mi - requests: - cpu: 100m - memory: 250Mi - securityContext: - {} - env: - - name: K8S_NODE_NAME - valueFrom: - fieldRef: - fieldPath: spec.nodeName - - name: OTEL_K8S_NODE_NAME - valueFrom: - fieldRef: - fieldPath: spec.nodeName - - name: OTEL_K8S_NODE_IP - valueFrom: - fieldRef: - fieldPath: status.hostIP - - name: OTEL_K8S_NAMESPACE - valueFrom: - fieldRef: - apiVersion: v1 - fieldPath: metadata.namespace - - name: OTEL_K8S_POD_NAME - valueFrom: - fieldRef: - apiVersion: v1 - fieldPath: metadata.name - - name: OTEL_K8S_POD_IP - valueFrom: - fieldRef: - apiVersion: v1 - fieldPath: status.podIP - - name: OTEL_RESOURCE_ATTRIBUTES - value: "k8s.pod.name=$(OTEL_K8S_POD_NAME),k8s.namespace.name=$(OTEL_K8S_NAMESPACE),k8s.node.name=$(OTEL_K8S_NODE_NAME),host.name=$(OTEL_K8S_NODE_NAME),k8s.node.ip=$(OTEL_K8S_NODE_IP),k8s.pod.ip=$(OTEL_K8S_POD_IP),k8s.cluster.name=unknown_k8s_cluster" - - diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/hooks.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/hooks.yaml deleted file mode 100644 index df09c1e80b..0000000000 --- a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/hooks.yaml +++ /dev/null @@ -1,65 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/templates/hooks.yaml -apiVersion: v1 -kind: ServiceAccount -metadata: - name: delete-resources-sa - annotations: - "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded ---- -# Source: opentelemetry-kube-stack/templates/hooks.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - name: delete-resources-role - annotations: - "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded -rules: - - apiGroups: - - opentelemetry.io - resources: - - instrumentations - - opampbridges - - opentelemetrycollectors - verbs: - - get - - list - - delete ---- -# Source: opentelemetry-kube-stack/templates/hooks.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding -metadata: - name: delete-resources-rolebinding - annotations: - "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: delete-resources-role -subjects: - - kind: ServiceAccount - name: delete-resources-sa ---- -# Source: opentelemetry-kube-stack/templates/hooks.yaml -apiVersion: batch/v1 -kind: Job -metadata: - name: opentelemetry-kube-stack-pre-delete-job - annotations: - "helm.sh/hook": pre-delete - "helm.sh/hook-delete-policy": hook-succeeded,hook-failed -spec: - template: - spec: - restartPolicy: Never - serviceAccountName: delete-resources-sa - containers: - - name: delete-resources - image: "rancher/kubectl:v1.34.1" - args: - - "delete" - - "instrumentations,opampbridges,opentelemetrycollectors" - - "-l" - - "helm.sh/chart=opentelemetry-kube-stack-0.16.0" - diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml deleted file mode 100644 index 17585fa86a..0000000000 --- a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml +++ /dev/null @@ -1,193 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/admission-webhooks/operator-webhook-with-cert-manager.yaml -apiVersion: admissionregistration.k8s.io/v1 -kind: MutatingWebhookConfiguration -metadata: - annotations: - cert-manager.io/inject-ca-from: default/example-opentelemetry-operator-serving-cert - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: webhook - name: example-opentelemetry-operator-mutation -webhooks: - - admissionReviewVersions: - - v1 - clientConfig: - service: - name: example-opentelemetry-operator-webhook - namespace: default - path: /mutate-opentelemetry-io-v1alpha1-instrumentation - port: 443 - failurePolicy: Ignore - name: minstrumentation.kb.io - rules: - - apiGroups: - - opentelemetry.io - apiVersions: - - v1alpha1 - operations: - - CREATE - - UPDATE - resources: - - instrumentations - scope: Namespaced - sideEffects: None - timeoutSeconds: 10 - - admissionReviewVersions: - - v1 - clientConfig: - service: - name: example-opentelemetry-operator-webhook - namespace: default - path: /mutate-opentelemetry-io-v1beta1-opentelemetrycollector - port: 443 - failurePolicy: Ignore - name: mopentelemetrycollectorbeta.kb.io - rules: - - apiGroups: - - opentelemetry.io - apiVersions: - - v1beta1 - operations: - - CREATE - - UPDATE - resources: - - opentelemetrycollectors - scope: Namespaced - sideEffects: None - timeoutSeconds: 10 - - admissionReviewVersions: - - v1 - clientConfig: - service: - name: example-opentelemetry-operator-webhook - namespace: default - path: /mutate-v1-pod - port: 443 - failurePolicy: Ignore - name: mpod.kb.io - rules: - - apiGroups: - - "" - apiVersions: - - v1 - operations: - - CREATE - resources: - - pods - scope: Namespaced - sideEffects: None - timeoutSeconds: 10 ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/admission-webhooks/operator-webhook-with-cert-manager.yaml -apiVersion: admissionregistration.k8s.io/v1 -kind: ValidatingWebhookConfiguration -metadata: - annotations: - cert-manager.io/inject-ca-from: default/example-opentelemetry-operator-serving-cert - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: webhook - name: example-opentelemetry-operator-validation -webhooks: - - admissionReviewVersions: - - v1 - clientConfig: - service: - name: example-opentelemetry-operator-webhook - namespace: default - path: /validate-opentelemetry-io-v1alpha1-instrumentation - port: 443 - failurePolicy: Ignore - name: vinstrumentationcreateupdate.kb.io - rules: - - apiGroups: - - opentelemetry.io - apiVersions: - - v1alpha1 - operations: - - CREATE - - UPDATE - resources: - - instrumentations - scope: Namespaced - sideEffects: None - timeoutSeconds: 10 - - admissionReviewVersions: - - v1 - clientConfig: - service: - name: example-opentelemetry-operator-webhook - namespace: default - path: /validate-opentelemetry-io-v1alpha1-instrumentation - port: 443 - failurePolicy: Ignore - name: vinstrumentationdelete.kb.io - rules: - - apiGroups: - - opentelemetry.io - apiVersions: - - v1alpha1 - operations: - - DELETE - resources: - - instrumentations - scope: Namespaced - sideEffects: None - timeoutSeconds: 10 - - admissionReviewVersions: - - v1 - clientConfig: - service: - name: example-opentelemetry-operator-webhook - namespace: default - path: /validate-opentelemetry-io-v1beta1-opentelemetrycollector - port: 443 - failurePolicy: Ignore - name: vopentelemetrycollectorcreateupdatebeta.kb.io - rules: - - apiGroups: - - opentelemetry.io - apiVersions: - - v1beta1 - operations: - - CREATE - - UPDATE - resources: - - opentelemetrycollectors - scope: Namespaced - sideEffects: None - timeoutSeconds: 10 - - admissionReviewVersions: - - v1 - clientConfig: - service: - name: example-opentelemetry-operator-webhook - namespace: default - path: /validate-opentelemetry-io-v1beta1-opentelemetrycollector - port: 443 - failurePolicy: Ignore - name: vopentelemetrycollectordeletebeta.kb.io - rules: - - apiGroups: - - opentelemetry.io - apiVersions: - - v1beta1 - operations: - - DELETE - resources: - - opentelemetrycollectors - scope: Namespaced - sideEffects: None - timeoutSeconds: 10 - diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/admission-webhooks/operator-webhook.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/admission-webhooks/operator-webhook.yaml deleted file mode 100644 index 5b9ff5511d..0000000000 --- a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/admission-webhooks/operator-webhook.yaml +++ /dev/null @@ -1,3 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/admission-webhooks/operator-webhook.yaml ---- diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/certmanager.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/certmanager.yaml deleted file mode 100644 index e8615238d0..0000000000 --- a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/certmanager.yaml +++ /dev/null @@ -1,44 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/certmanager.yaml -apiVersion: cert-manager.io/v1 -kind: Certificate -metadata: - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: webhook - name: example-opentelemetry-operator-serving-cert - namespace: default -spec: - dnsNames: - - example-opentelemetry-operator-webhook.default.svc - - example-opentelemetry-operator-webhook.default.svc.cluster.local - issuerRef: - kind: Issuer - name: example-opentelemetry-operator-selfsigned-issuer - secretName: example-opentelemetry-operator-controller-manager-service-cert - subject: - organizationalUnits: - - example-opentelemetry-operator ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/certmanager.yaml -apiVersion: cert-manager.io/v1 -kind: Issuer -metadata: - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: webhook - name: example-opentelemetry-operator-selfsigned-issuer - namespace: default -spec: - selfSigned: {} - diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/clusterrole.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/clusterrole.yaml deleted file mode 100644 index 2037050533..0000000000 --- a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/clusterrole.yaml +++ /dev/null @@ -1,410 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/clusterrole.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: controller-manager - name: example-opentelemetry-operator-manager -rules: - - apiGroups: - - "" - resources: - - configmaps - - persistentvolumeclaims - - persistentvolumes - - pods - - serviceaccounts - - services - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - "" - resources: - - events - verbs: - - create - - get - - list - - patch - - watch - - apiGroups: - - "" - resources: - - namespaces - verbs: - - list - - watch - - apiGroups: - - "" - resources: - - namespaces/status - verbs: - - get - - list - - watch - - apiGroups: - - "" - resources: - - nodes/spec - verbs: - - get - - list - - watch - - apiGroups: - - "" - resources: - - pods/status - verbs: - - get - - list - - watch - - apiGroups: - - "" - resources: - - replicationcontrollers - verbs: - - get - - list - - watch - - apiGroups: - - "" - resources: - - replicationcontrollers/status - verbs: - - get - - list - - watch - - apiGroups: - - "" - resources: - - resourcequotas - verbs: - - get - - list - - watch - - apiGroups: - - apps - resources: - - daemonsets - - deployments - - statefulsets - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - apps - - extensions - resources: - - replicasets - verbs: - - get - - list - - watch - - apiGroups: - - extensions - resources: - - daemonsets - verbs: - - get - - list - - watch - - apiGroups: - - extensions - resources: - - deployments - verbs: - - get - - list - - watch - - apiGroups: - - autoscaling - resources: - - horizontalpodautoscalers - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - batch - resources: - - jobs - verbs: - - get - - list - - watch - - apiGroups: - - batch - resources: - - cronjobs - verbs: - - get - - list - - watch - - apiGroups: - - "" - resources: - - nodes/proxy - verbs: - - get - - apiGroups: - - "" - resources: - - nodes/stats - verbs: - - get - - apiGroups: - - config.openshift.io - resources: - - infrastructures - - infrastructures/status - verbs: - - get - - list - - watch - - apiGroups: - - coordination.k8s.io - resources: - - leases - verbs: - - create - - get - - list - - update - - apiGroups: - - discovery.k8s.io - resources: - - endpointslices - verbs: - - get - - list - - apiGroups: - - events.k8s.io - resources: - - events - verbs: - - create - - list - - patch - - watch - - apiGroups: - - gateway.networking.k8s.io - resources: - - httproutes - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - monitoring.coreos.com - resources: - - podmonitors - - servicemonitors - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - networking.k8s.io - resources: - - ingresses - - networkpolicies - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - opentelemetry.io - resources: - - instrumentations - verbs: - - get - - list - - patch - - update - - watch - - apiGroups: - - opentelemetry.io - resources: - - opampbridges - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - opentelemetry.io - resources: - - opampbridges/finalizers - verbs: - - update - - apiGroups: - - opentelemetry.io - resources: - - opampbridges/status - verbs: - - get - - patch - - update - - apiGroups: - - opentelemetry.io - resources: - - opentelemetrycollectors - verbs: - - get - - list - - patch - - update - - watch - - apiGroups: - - opentelemetry.io - resources: - - opentelemetrycollectors/finalizers - verbs: - - get - - patch - - update - - apiGroups: - - opentelemetry.io - resources: - - opentelemetrycollectors/status - verbs: - - get - - patch - - update - - apiGroups: - - policy - resources: - - poddisruptionbudgets - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - route.openshift.io - resources: - - routes - - routes/custom-host - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - opentelemetry.io - resources: - - targetallocators - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - opentelemetry.io - resources: - - targetallocators/status - verbs: - - get - - patch - - update - - apiGroups: - - opentelemetry.io - resources: - - targetallocators/finalizers - verbs: - - get - - patch - - update - - apiGroups: - - cert-manager.io - resources: - - issuers - - certificaterequests - - certificates - verbs: - - create - - get - - list - - watch - - update - - patch - - delete - - apiGroups: - - authentication.k8s.io - resources: - - tokenreviews - verbs: - - create - - apiGroups: - - authorization.k8s.io - resources: - - subjectaccessreviews - verbs: - - create ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/clusterrole.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: controller-manager - name: example-opentelemetry-operator-metrics -rules: - - nonResourceURLs: - - /metrics - verbs: - - get - - diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/clusterrolebinding.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/clusterrolebinding.yaml deleted file mode 100644 index 4acb7d53f5..0000000000 --- a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/clusterrolebinding.yaml +++ /dev/null @@ -1,24 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/clusterrolebinding.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding -metadata: - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: controller-manager - name: example-opentelemetry-operator-manager -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: example-opentelemetry-operator-manager -subjects: - - kind: ServiceAccount - name: opentelemetry-operator - namespace: default - - diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/deployment.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/deployment.yaml deleted file mode 100644 index c775cd1cf3..0000000000 --- a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/deployment.yaml +++ /dev/null @@ -1,105 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/deployment.yaml -apiVersion: apps/v1 -kind: Deployment -metadata: - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: controller-manager - name: example-opentelemetry-operator - namespace: default -spec: - replicas: 1 - revisionHistoryLimit: 10 - selector: - matchLabels: - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/component: controller-manager - template: - metadata: - annotations: - kubectl.kubernetes.io/default-container: manager - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: controller-manager - spec: - automountServiceAccountToken: true - hostNetwork: false - containers: - - args: - - --metrics-addr=0.0.0.0:8443 - - --metrics-secure=true - - --enable-leader-election - - --health-probe-addr=:8081 - - --webhook-port=9443 - - --collector-image=otel/opentelemetry-collector-k8s:0.151.0 - command: - - /manager - env: - - name: SERVICE_ACCOUNT_NAME - valueFrom: - fieldRef: - fieldPath: spec.serviceAccountName - - name: ENABLE_WEBHOOKS - value: "true" - image: "ghcr.io/open-telemetry/opentelemetry-operator/opentelemetry-operator:0.151.0" - name: manager - imagePullPolicy: IfNotPresent - ports: - - containerPort: 8443 - name: metrics - protocol: TCP - - containerPort: 9443 - name: webhook-server - protocol: TCP - livenessProbe: - httpGet: - path: /healthz - port: 8081 - initialDelaySeconds: 15 - periodSeconds: 20 - readinessProbe: - httpGet: - path: /readyz - port: 8081 - initialDelaySeconds: 5 - periodSeconds: 10 - resources: - {} - volumeMounts: - - mountPath: /tmp/k8s-webhook-server/serving-certs - name: cert - readOnly: true - securityContext: - allowPrivilegeEscalation: false - capabilities: - drop: - - ALL - runAsNonRoot: true - seccompProfile: - type: RuntimeDefault - nodeSelector: - kubernetes.io/os: linux - serviceAccountName: opentelemetry-operator - terminationGracePeriodSeconds: 10 - volumes: - - name: cert - secret: - defaultMode: 420 - secretName: example-opentelemetry-operator-controller-manager-service-cert - securityContext: - fsGroup: 65532 - runAsGroup: 65532 - runAsNonRoot: true - runAsUser: 65532 - diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/role.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/role.yaml deleted file mode 100644 index b5339517a2..0000000000 --- a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/role.yaml +++ /dev/null @@ -1,200 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/role.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: controller-manager - name: example-opentelemetry-operator-leader-election - namespace: default -rules: - - apiGroups: - - "" - resources: - - configmaps - - pods - - serviceaccounts - - services - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - "" - resources: - - events - verbs: - - create - - patch - - apiGroups: - - "" - resources: - - namespaces - - secrets - verbs: - - get - - list - - watch - - apiGroups: - - apps - resources: - - daemonsets - - deployments - - statefulsets - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - apps - resources: - - replicasets - verbs: - - get - - list - - watch - - apiGroups: - - autoscaling - resources: - - horizontalpodautoscalers - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - batch - resources: - - jobs - verbs: - - get - - list - - watch - - apiGroups: - - config.openshift.io - resources: - - infrastructures - - infrastructures/status - verbs: - - get - - list - - watch - - apiGroups: - - coordination.k8s.io - resources: - - leases - verbs: - - create - - get - - list - - update - - apiGroups: - - monitoring.coreos.com - resources: - - podmonitors - - servicemonitors - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - networking.k8s.io - resources: - - ingresses - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - opentelemetry.io - resources: - - instrumentations - - opentelemetrycollectors - verbs: - - get - - list - - patch - - update - - watch - - apiGroups: - - opentelemetry.io - resources: - - opampbridges - - targetallocators - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - opentelemetry.io - resources: - - opampbridges/finalizers - verbs: - - update - - apiGroups: - - opentelemetry.io - resources: - - opampbridges/status - - opentelemetrycollectors/finalizers - - opentelemetrycollectors/status - - targetallocators/status - - targetallocators/finalizers - verbs: - - get - - patch - - update - - apiGroups: - - policy - resources: - - poddisruptionbudgets - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - route.openshift.io - resources: - - routes - - routes/custom-host - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/rolebinding.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/rolebinding.yaml deleted file mode 100644 index ae376e80c9..0000000000 --- a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/rolebinding.yaml +++ /dev/null @@ -1,24 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/rolebinding.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding -metadata: - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: controller-manager - name: example-opentelemetry-operator-leader-election - namespace: default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: example-opentelemetry-operator-leader-election -subjects: - - kind: ServiceAccount - name: opentelemetry-operator - namespace: default - diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/service.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/service.yaml deleted file mode 100644 index 0a3006d80f..0000000000 --- a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/service.yaml +++ /dev/null @@ -1,48 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/service.yaml -apiVersion: v1 -kind: Service -metadata: - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: controller-manager - name: example-opentelemetry-operator - namespace: default -spec: - ports: - - name: metrics - port: 8443 - protocol: TCP - targetPort: metrics - selector: - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/component: controller-manager ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/service.yaml -apiVersion: v1 -kind: Service -metadata: - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: controller-manager - name: example-opentelemetry-operator-webhook - namespace: default -spec: - ports: - - port: 443 - protocol: TCP - targetPort: webhook-server - selector: - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/component: controller-manager - diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/serviceaccount.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/serviceaccount.yaml deleted file mode 100644 index c6ba25dbac..0000000000 --- a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/serviceaccount.yaml +++ /dev/null @@ -1,17 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/serviceaccount.yaml -apiVersion: v1 -kind: ServiceAccount -automountServiceAccountToken: true -metadata: - name: opentelemetry-operator - namespace: default - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: controller-manager - diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml deleted file mode 100644 index 9039160e03..0000000000 --- a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml +++ /dev/null @@ -1,54 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/tests/test-certmanager-connection.yaml -apiVersion: v1 -kind: Pod -metadata: - name: "example-opentelemetry-operator-cert-manager" - namespace: default - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: webhook - annotations: - "helm.sh/hook": test -spec: - containers: - - name: wget - image: "busybox:latest" - env: - - name: CERT_MANAGER_CLUSTERIP - value: "cert-manager-webhook" - - name: CERT_MANAGER_PORT - value: "443" - command: - - sh - - -c - # The following shell script tests if the cert-manager service is up. If the service is up, when we try - # to wget its exposed port, we will get an HTTP error 400. - - | - wget_output=$(wget -q "$CERT_MANAGER_CLUSTERIP:$CERT_MANAGER_PORT") - if wget_output=="wget: server returned error: HTTP/1.0 400 Bad Request" - then exit 0 - else exit 1 - fi - securityContext: - allowPrivilegeEscalation: false - capabilities: - drop: - - ALL - runAsNonRoot: true - seccompProfile: - type: RuntimeDefault - restartPolicy: Never - nodeSelector: - kubernetes.io/os: linux - securityContext: - fsGroup: 65532 - runAsGroup: 65532 - runAsNonRoot: true - runAsUser: 65532 - diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/tests/test-service-connection.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/tests/test-service-connection.yaml deleted file mode 100644 index 88e0e0bc24..0000000000 --- a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/tests/test-service-connection.yaml +++ /dev/null @@ -1,107 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/tests/test-service-connection.yaml -apiVersion: v1 -kind: Pod -metadata: - name: "example-opentelemetry-operator-metrics" - namespace: default - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: controller-manager - annotations: - "helm.sh/hook": test -spec: - containers: - - name: wget - image: "busybox:latest" - env: - - name: MANAGER_METRICS_SERVICE_CLUSTERIP - value: "example-opentelemetry-operator" - - name: MANAGER_METRICS_SERVICE_PORT - value: "8443" - command: - - sh - - -c - # The following shell script tests if the controller-manager-metrics-service is up. - # If the service is up, when we try to wget its exposed port, we will get an HTTP error 400. - - | - wget_output=$(wget -q "$MANAGER_METRICS_SERVICE_CLUSTERIP:$MANAGER_METRICS_SERVICE_PORT") - if wget_output=="wget: server returned error: HTTP/1.0 400 Bad Request" - then exit 0 - else exit 1 - fi - securityContext: - allowPrivilegeEscalation: false - capabilities: - drop: - - ALL - runAsNonRoot: true - seccompProfile: - type: RuntimeDefault - restartPolicy: Never - nodeSelector: - kubernetes.io/os: linux - securityContext: - fsGroup: 65532 - runAsGroup: 65532 - runAsNonRoot: true - runAsUser: 65532 ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/tests/test-service-connection.yaml -apiVersion: v1 -kind: Pod -metadata: - name: "example-opentelemetry-operator-webhook" - namespace: default - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: controller-manager - annotations: - "helm.sh/hook": test -spec: - containers: - - name: wget - image: "busybox:latest" - env: - - name: WEBHOOK_SERVICE_CLUSTERIP - value: "example-opentelemetry-operator-webhook" - - name: WEBHOOK_SERVICE_PORT - value: "443" - command: - - sh - - -c - # The following shell script tests if the webhook service is up. If the service is up, when we try - # to wget its exposed port, we will get an HTTP error 400. - - | - wget_output=$(wget -q "$WEBHOOK_SERVICE_CLUSTERIP:$WEBHOOK_SERVICE_PORT") - if wget_output=="wget: server returned error: HTTP/1.0 400 Bad Request" - then exit 0 - else exit 1 - fi - securityContext: - allowPrivilegeEscalation: false - capabilities: - drop: - - ALL - runAsNonRoot: true - seccompProfile: - type: RuntimeDefault - restartPolicy: Never - nodeSelector: - kubernetes.io/os: linux - securityContext: - fsGroup: 65532 - runAsGroup: 65532 - runAsNonRoot: true - runAsUser: 65532 - diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/clusterrole.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/clusterrole.yaml deleted file mode 100644 index 9d2d1e8211..0000000000 --- a/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/clusterrole.yaml +++ /dev/null @@ -1,69 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/templates/clusterrole.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - name: example-collector -rules: -- apiGroups: [""] - resources: - - namespaces - - nodes - - nodes/proxy - - nodes/metrics - - nodes/stats - - services - - endpoints - - pods - - events - - secrets - - persistentvolumeclaims - - persistentvolumes - verbs: ["get", "list", "watch"] -- apiGroups: ["monitoring.coreos.com"] - resources: - - servicemonitors - - podmonitors - - scrapeconfigs - - probes - verbs: ["get", "list", "watch"] -- apiGroups: - - extensions - resources: - - ingresses - verbs: ["get", "list", "watch"] -- apiGroups: - - apps - resources: - - daemonsets - - deployments - - replicasets - - statefulsets - verbs: ["get", "list", "watch"] -- apiGroups: - - networking.k8s.io - resources: - - ingresses - verbs: ["get", "list", "watch"] -- apiGroups: ["discovery.k8s.io"] - resources: - - endpointslices - verbs: ["get", "list", "watch"] -- nonResourceURLs: ["/metrics", "/metrics/cadvisor"] - verbs: ["get"] ---- -# Source: opentelemetry-kube-stack/templates/clusterrole.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding -metadata: - name: example-daemon -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: example-collector -subjects: -- kind: ServiceAccount - # quirk of the Operator - name: "example-daemon-collector" - namespace: default - diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/collector.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/collector.yaml deleted file mode 100644 index aac16b8728..0000000000 --- a/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/collector.yaml +++ /dev/null @@ -1,238 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/templates/collector.yaml -apiVersion: opentelemetry.io/v1beta1 -kind: OpenTelemetryCollector -metadata: - name: example-daemon - namespace: default - labels: - helm.sh/chart: opentelemetry-kube-stack-0.16.0 - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - release: "example" -spec: - managementState: managed - mode: daemonset - config: - exporters: - debug: {} - processors: - batch: - send_batch_max_size: 1500 - send_batch_size: 1000 - timeout: 1s - resource/hostname: - attributes: - - action: insert - from_attribute: k8s.node.name - key: host.name - resourcedetection/env: - detectors: - - env - - k8snode - override: false - timeout: 2s - receivers: - otlp: - protocols: - grpc: - endpoint: 0.0.0.0:4317 - http: - endpoint: 0.0.0.0:4318 - prometheus/cadvisor: - config: - scrape_configs: - - authorization: - credentials_file: /var/run/secrets/kubernetes.io/serviceaccount/token - type: Bearer - job_name: kubelet - metric_relabel_configs: - - action: drop - regex: container_cpu_(load_average_10s|system_seconds_total|user_seconds_total) - source_labels: - - __name__ - - action: drop - regex: container_fs_(io_current|reads_merged_total|sector_reads_total|sector_writes_total|writes_merged_total) - source_labels: - - __name__ - - action: drop - regex: container_memory_(mapped_file|swap) - source_labels: - - __name__ - - action: drop - regex: container_(file_descriptors|tasks_state|threads_max) - source_labels: - - __name__ - - action: drop - regex: container_spec.* - source_labels: - - __name__ - - action: drop - regex: .+; - source_labels: - - id - - pod - metrics_path: /metrics/cadvisor - relabel_configs: - - replacement: ${env:OTEL_K8S_NODE_NAME} - target_label: node - scheme: https - scrape_interval: 30s - scrape_timeout: 10s - static_configs: - - targets: - - ${env:OTEL_K8S_NODE_IP}:10250 - tls_config: - ca_file: /var/run/secrets/kubernetes.io/serviceaccount/ca.crt - insecure_skip_verify: true - prometheus/node_exporter: - config: - scrape_configs: - - job_name: node-exporter - relabel_configs: - - replacement: ${env:OTEL_K8S_NODE_NAME} - target_label: node - scrape_interval: 30s - scrape_timeout: 10s - static_configs: - - targets: - - ${env:OTEL_K8S_NODE_IP}:9100 - prometheus/pod_annotations: - config: - scrape_configs: - - job_name: kubernetes-pods - kubernetes_sd_configs: - - role: pod - selectors: - - field: spec.nodeName=${env:OTEL_K8S_NODE_NAME} - label: app.kubernetes.io/component!=opentelemetry-collector - role: pod - relabel_configs: - - action: keep - regex: true - source_labels: - - __meta_kubernetes_pod_annotation_prometheus_io_scrape - - action: drop - regex: true - source_labels: - - __meta_kubernetes_pod_annotation_prometheus_io_scrape_slow - - action: replace - regex: (https?) - source_labels: - - __meta_kubernetes_pod_annotation_prometheus_io_scheme - target_label: __scheme__ - - action: replace - regex: (.+) - source_labels: - - __meta_kubernetes_pod_annotation_prometheus_io_path - target_label: __metrics_path__ - - action: replace - regex: ([^:]+)(?::\d+)?;(\d+) - replacement: $$1:$$2 - source_labels: - - __address__ - - __meta_kubernetes_pod_annotation_prometheus_io_port - target_label: __address__ - - action: labelmap - regex: __meta_kubernetes_pod_annotation_prometheus_io_param_(.+) - replacement: __param_$$1 - - action: labelmap - regex: __meta_kubernetes_pod_label_(.+) - - action: replace - source_labels: - - __meta_kubernetes_namespace - target_label: namespace - - action: replace - source_labels: - - __meta_kubernetes_pod_name - target_label: pod - - action: replace - source_labels: - - __meta_kubernetes_pod_node_name - target_label: node - - action: drop - regex: Pending|Succeeded|Failed|Completed - source_labels: - - __meta_kubernetes_pod_phase - - action: replace - source_labels: - - __meta_kubernetes_pod_label_app_kubernetes_io_name - target_label: job - scrape_interval: 30s - scrape_timeout: 10s - service: - pipelines: - logs: - exporters: - - debug - processors: - - resourcedetection/env - - resource/hostname - - batch - receivers: - - otlp - metrics: - exporters: - - debug - processors: - - resourcedetection/env - - resource/hostname - - batch - receivers: - - otlp - - prometheus/node_exporter - - prometheus/cadvisor - - prometheus/pod_annotations - traces: - exporters: - - debug - processors: - - resourcedetection/env - - resource/hostname - - batch - receivers: - - otlp - imagePullPolicy: IfNotPresent - upgradeStrategy: automatic - terminationGracePeriodSeconds: 30 - resources: - limits: - cpu: 200m - memory: 500Mi - requests: - cpu: 100m - memory: 250Mi - securityContext: - {} - env: - - name: K8S_NODE_NAME - valueFrom: - fieldRef: - fieldPath: spec.nodeName - - name: OTEL_K8S_NODE_NAME - valueFrom: - fieldRef: - fieldPath: spec.nodeName - - name: OTEL_K8S_NODE_IP - valueFrom: - fieldRef: - fieldPath: status.hostIP - - name: OTEL_K8S_NAMESPACE - valueFrom: - fieldRef: - apiVersion: v1 - fieldPath: metadata.namespace - - name: OTEL_K8S_POD_NAME - valueFrom: - fieldRef: - apiVersion: v1 - fieldPath: metadata.name - - name: OTEL_K8S_POD_IP - valueFrom: - fieldRef: - apiVersion: v1 - fieldPath: status.podIP - - name: OTEL_RESOURCE_ATTRIBUTES - value: "k8s.pod.name=$(OTEL_K8S_POD_NAME),k8s.namespace.name=$(OTEL_K8S_NAMESPACE),k8s.node.name=$(OTEL_K8S_NODE_NAME),host.name=$(OTEL_K8S_NODE_NAME),k8s.node.ip=$(OTEL_K8S_NODE_IP),k8s.pod.ip=$(OTEL_K8S_POD_IP),k8s.cluster.name=unknown_k8s_cluster" - - diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/hooks.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/hooks.yaml deleted file mode 100644 index df09c1e80b..0000000000 --- a/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/hooks.yaml +++ /dev/null @@ -1,65 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/templates/hooks.yaml -apiVersion: v1 -kind: ServiceAccount -metadata: - name: delete-resources-sa - annotations: - "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded ---- -# Source: opentelemetry-kube-stack/templates/hooks.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - name: delete-resources-role - annotations: - "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded -rules: - - apiGroups: - - opentelemetry.io - resources: - - instrumentations - - opampbridges - - opentelemetrycollectors - verbs: - - get - - list - - delete ---- -# Source: opentelemetry-kube-stack/templates/hooks.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding -metadata: - name: delete-resources-rolebinding - annotations: - "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: delete-resources-role -subjects: - - kind: ServiceAccount - name: delete-resources-sa ---- -# Source: opentelemetry-kube-stack/templates/hooks.yaml -apiVersion: batch/v1 -kind: Job -metadata: - name: opentelemetry-kube-stack-pre-delete-job - annotations: - "helm.sh/hook": pre-delete - "helm.sh/hook-delete-policy": hook-succeeded,hook-failed -spec: - template: - spec: - restartPolicy: Never - serviceAccountName: delete-resources-sa - containers: - - name: delete-resources - image: "rancher/kubectl:v1.34.1" - args: - - "delete" - - "instrumentations,opampbridges,opentelemetrycollectors" - - "-l" - - "helm.sh/chart=opentelemetry-kube-stack-0.16.0" - diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml deleted file mode 100644 index 17585fa86a..0000000000 --- a/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml +++ /dev/null @@ -1,193 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/admission-webhooks/operator-webhook-with-cert-manager.yaml -apiVersion: admissionregistration.k8s.io/v1 -kind: MutatingWebhookConfiguration -metadata: - annotations: - cert-manager.io/inject-ca-from: default/example-opentelemetry-operator-serving-cert - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: webhook - name: example-opentelemetry-operator-mutation -webhooks: - - admissionReviewVersions: - - v1 - clientConfig: - service: - name: example-opentelemetry-operator-webhook - namespace: default - path: /mutate-opentelemetry-io-v1alpha1-instrumentation - port: 443 - failurePolicy: Ignore - name: minstrumentation.kb.io - rules: - - apiGroups: - - opentelemetry.io - apiVersions: - - v1alpha1 - operations: - - CREATE - - UPDATE - resources: - - instrumentations - scope: Namespaced - sideEffects: None - timeoutSeconds: 10 - - admissionReviewVersions: - - v1 - clientConfig: - service: - name: example-opentelemetry-operator-webhook - namespace: default - path: /mutate-opentelemetry-io-v1beta1-opentelemetrycollector - port: 443 - failurePolicy: Ignore - name: mopentelemetrycollectorbeta.kb.io - rules: - - apiGroups: - - opentelemetry.io - apiVersions: - - v1beta1 - operations: - - CREATE - - UPDATE - resources: - - opentelemetrycollectors - scope: Namespaced - sideEffects: None - timeoutSeconds: 10 - - admissionReviewVersions: - - v1 - clientConfig: - service: - name: example-opentelemetry-operator-webhook - namespace: default - path: /mutate-v1-pod - port: 443 - failurePolicy: Ignore - name: mpod.kb.io - rules: - - apiGroups: - - "" - apiVersions: - - v1 - operations: - - CREATE - resources: - - pods - scope: Namespaced - sideEffects: None - timeoutSeconds: 10 ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/admission-webhooks/operator-webhook-with-cert-manager.yaml -apiVersion: admissionregistration.k8s.io/v1 -kind: ValidatingWebhookConfiguration -metadata: - annotations: - cert-manager.io/inject-ca-from: default/example-opentelemetry-operator-serving-cert - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: webhook - name: example-opentelemetry-operator-validation -webhooks: - - admissionReviewVersions: - - v1 - clientConfig: - service: - name: example-opentelemetry-operator-webhook - namespace: default - path: /validate-opentelemetry-io-v1alpha1-instrumentation - port: 443 - failurePolicy: Ignore - name: vinstrumentationcreateupdate.kb.io - rules: - - apiGroups: - - opentelemetry.io - apiVersions: - - v1alpha1 - operations: - - CREATE - - UPDATE - resources: - - instrumentations - scope: Namespaced - sideEffects: None - timeoutSeconds: 10 - - admissionReviewVersions: - - v1 - clientConfig: - service: - name: example-opentelemetry-operator-webhook - namespace: default - path: /validate-opentelemetry-io-v1alpha1-instrumentation - port: 443 - failurePolicy: Ignore - name: vinstrumentationdelete.kb.io - rules: - - apiGroups: - - opentelemetry.io - apiVersions: - - v1alpha1 - operations: - - DELETE - resources: - - instrumentations - scope: Namespaced - sideEffects: None - timeoutSeconds: 10 - - admissionReviewVersions: - - v1 - clientConfig: - service: - name: example-opentelemetry-operator-webhook - namespace: default - path: /validate-opentelemetry-io-v1beta1-opentelemetrycollector - port: 443 - failurePolicy: Ignore - name: vopentelemetrycollectorcreateupdatebeta.kb.io - rules: - - apiGroups: - - opentelemetry.io - apiVersions: - - v1beta1 - operations: - - CREATE - - UPDATE - resources: - - opentelemetrycollectors - scope: Namespaced - sideEffects: None - timeoutSeconds: 10 - - admissionReviewVersions: - - v1 - clientConfig: - service: - name: example-opentelemetry-operator-webhook - namespace: default - path: /validate-opentelemetry-io-v1beta1-opentelemetrycollector - port: 443 - failurePolicy: Ignore - name: vopentelemetrycollectordeletebeta.kb.io - rules: - - apiGroups: - - opentelemetry.io - apiVersions: - - v1beta1 - operations: - - DELETE - resources: - - opentelemetrycollectors - scope: Namespaced - sideEffects: None - timeoutSeconds: 10 - diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/admission-webhooks/operator-webhook.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/admission-webhooks/operator-webhook.yaml deleted file mode 100644 index 5b9ff5511d..0000000000 --- a/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/admission-webhooks/operator-webhook.yaml +++ /dev/null @@ -1,3 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/admission-webhooks/operator-webhook.yaml ---- diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/certmanager.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/certmanager.yaml deleted file mode 100644 index e8615238d0..0000000000 --- a/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/certmanager.yaml +++ /dev/null @@ -1,44 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/certmanager.yaml -apiVersion: cert-manager.io/v1 -kind: Certificate -metadata: - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: webhook - name: example-opentelemetry-operator-serving-cert - namespace: default -spec: - dnsNames: - - example-opentelemetry-operator-webhook.default.svc - - example-opentelemetry-operator-webhook.default.svc.cluster.local - issuerRef: - kind: Issuer - name: example-opentelemetry-operator-selfsigned-issuer - secretName: example-opentelemetry-operator-controller-manager-service-cert - subject: - organizationalUnits: - - example-opentelemetry-operator ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/certmanager.yaml -apiVersion: cert-manager.io/v1 -kind: Issuer -metadata: - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: webhook - name: example-opentelemetry-operator-selfsigned-issuer - namespace: default -spec: - selfSigned: {} - diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/clusterrole.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/clusterrole.yaml deleted file mode 100644 index 2037050533..0000000000 --- a/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/clusterrole.yaml +++ /dev/null @@ -1,410 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/clusterrole.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: controller-manager - name: example-opentelemetry-operator-manager -rules: - - apiGroups: - - "" - resources: - - configmaps - - persistentvolumeclaims - - persistentvolumes - - pods - - serviceaccounts - - services - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - "" - resources: - - events - verbs: - - create - - get - - list - - patch - - watch - - apiGroups: - - "" - resources: - - namespaces - verbs: - - list - - watch - - apiGroups: - - "" - resources: - - namespaces/status - verbs: - - get - - list - - watch - - apiGroups: - - "" - resources: - - nodes/spec - verbs: - - get - - list - - watch - - apiGroups: - - "" - resources: - - pods/status - verbs: - - get - - list - - watch - - apiGroups: - - "" - resources: - - replicationcontrollers - verbs: - - get - - list - - watch - - apiGroups: - - "" - resources: - - replicationcontrollers/status - verbs: - - get - - list - - watch - - apiGroups: - - "" - resources: - - resourcequotas - verbs: - - get - - list - - watch - - apiGroups: - - apps - resources: - - daemonsets - - deployments - - statefulsets - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - apps - - extensions - resources: - - replicasets - verbs: - - get - - list - - watch - - apiGroups: - - extensions - resources: - - daemonsets - verbs: - - get - - list - - watch - - apiGroups: - - extensions - resources: - - deployments - verbs: - - get - - list - - watch - - apiGroups: - - autoscaling - resources: - - horizontalpodautoscalers - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - batch - resources: - - jobs - verbs: - - get - - list - - watch - - apiGroups: - - batch - resources: - - cronjobs - verbs: - - get - - list - - watch - - apiGroups: - - "" - resources: - - nodes/proxy - verbs: - - get - - apiGroups: - - "" - resources: - - nodes/stats - verbs: - - get - - apiGroups: - - config.openshift.io - resources: - - infrastructures - - infrastructures/status - verbs: - - get - - list - - watch - - apiGroups: - - coordination.k8s.io - resources: - - leases - verbs: - - create - - get - - list - - update - - apiGroups: - - discovery.k8s.io - resources: - - endpointslices - verbs: - - get - - list - - apiGroups: - - events.k8s.io - resources: - - events - verbs: - - create - - list - - patch - - watch - - apiGroups: - - gateway.networking.k8s.io - resources: - - httproutes - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - monitoring.coreos.com - resources: - - podmonitors - - servicemonitors - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - networking.k8s.io - resources: - - ingresses - - networkpolicies - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - opentelemetry.io - resources: - - instrumentations - verbs: - - get - - list - - patch - - update - - watch - - apiGroups: - - opentelemetry.io - resources: - - opampbridges - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - opentelemetry.io - resources: - - opampbridges/finalizers - verbs: - - update - - apiGroups: - - opentelemetry.io - resources: - - opampbridges/status - verbs: - - get - - patch - - update - - apiGroups: - - opentelemetry.io - resources: - - opentelemetrycollectors - verbs: - - get - - list - - patch - - update - - watch - - apiGroups: - - opentelemetry.io - resources: - - opentelemetrycollectors/finalizers - verbs: - - get - - patch - - update - - apiGroups: - - opentelemetry.io - resources: - - opentelemetrycollectors/status - verbs: - - get - - patch - - update - - apiGroups: - - policy - resources: - - poddisruptionbudgets - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - route.openshift.io - resources: - - routes - - routes/custom-host - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - opentelemetry.io - resources: - - targetallocators - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - opentelemetry.io - resources: - - targetallocators/status - verbs: - - get - - patch - - update - - apiGroups: - - opentelemetry.io - resources: - - targetallocators/finalizers - verbs: - - get - - patch - - update - - apiGroups: - - cert-manager.io - resources: - - issuers - - certificaterequests - - certificates - verbs: - - create - - get - - list - - watch - - update - - patch - - delete - - apiGroups: - - authentication.k8s.io - resources: - - tokenreviews - verbs: - - create - - apiGroups: - - authorization.k8s.io - resources: - - subjectaccessreviews - verbs: - - create ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/clusterrole.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: controller-manager - name: example-opentelemetry-operator-metrics -rules: - - nonResourceURLs: - - /metrics - verbs: - - get - - diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/clusterrolebinding.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/clusterrolebinding.yaml deleted file mode 100644 index 4acb7d53f5..0000000000 --- a/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/clusterrolebinding.yaml +++ /dev/null @@ -1,24 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/clusterrolebinding.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding -metadata: - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: controller-manager - name: example-opentelemetry-operator-manager -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: example-opentelemetry-operator-manager -subjects: - - kind: ServiceAccount - name: opentelemetry-operator - namespace: default - - diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/deployment.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/deployment.yaml deleted file mode 100644 index c775cd1cf3..0000000000 --- a/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/deployment.yaml +++ /dev/null @@ -1,105 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/deployment.yaml -apiVersion: apps/v1 -kind: Deployment -metadata: - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: controller-manager - name: example-opentelemetry-operator - namespace: default -spec: - replicas: 1 - revisionHistoryLimit: 10 - selector: - matchLabels: - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/component: controller-manager - template: - metadata: - annotations: - kubectl.kubernetes.io/default-container: manager - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: controller-manager - spec: - automountServiceAccountToken: true - hostNetwork: false - containers: - - args: - - --metrics-addr=0.0.0.0:8443 - - --metrics-secure=true - - --enable-leader-election - - --health-probe-addr=:8081 - - --webhook-port=9443 - - --collector-image=otel/opentelemetry-collector-k8s:0.151.0 - command: - - /manager - env: - - name: SERVICE_ACCOUNT_NAME - valueFrom: - fieldRef: - fieldPath: spec.serviceAccountName - - name: ENABLE_WEBHOOKS - value: "true" - image: "ghcr.io/open-telemetry/opentelemetry-operator/opentelemetry-operator:0.151.0" - name: manager - imagePullPolicy: IfNotPresent - ports: - - containerPort: 8443 - name: metrics - protocol: TCP - - containerPort: 9443 - name: webhook-server - protocol: TCP - livenessProbe: - httpGet: - path: /healthz - port: 8081 - initialDelaySeconds: 15 - periodSeconds: 20 - readinessProbe: - httpGet: - path: /readyz - port: 8081 - initialDelaySeconds: 5 - periodSeconds: 10 - resources: - {} - volumeMounts: - - mountPath: /tmp/k8s-webhook-server/serving-certs - name: cert - readOnly: true - securityContext: - allowPrivilegeEscalation: false - capabilities: - drop: - - ALL - runAsNonRoot: true - seccompProfile: - type: RuntimeDefault - nodeSelector: - kubernetes.io/os: linux - serviceAccountName: opentelemetry-operator - terminationGracePeriodSeconds: 10 - volumes: - - name: cert - secret: - defaultMode: 420 - secretName: example-opentelemetry-operator-controller-manager-service-cert - securityContext: - fsGroup: 65532 - runAsGroup: 65532 - runAsNonRoot: true - runAsUser: 65532 - diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/role.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/role.yaml deleted file mode 100644 index b5339517a2..0000000000 --- a/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/role.yaml +++ /dev/null @@ -1,200 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/role.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: controller-manager - name: example-opentelemetry-operator-leader-election - namespace: default -rules: - - apiGroups: - - "" - resources: - - configmaps - - pods - - serviceaccounts - - services - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - "" - resources: - - events - verbs: - - create - - patch - - apiGroups: - - "" - resources: - - namespaces - - secrets - verbs: - - get - - list - - watch - - apiGroups: - - apps - resources: - - daemonsets - - deployments - - statefulsets - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - apps - resources: - - replicasets - verbs: - - get - - list - - watch - - apiGroups: - - autoscaling - resources: - - horizontalpodautoscalers - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - batch - resources: - - jobs - verbs: - - get - - list - - watch - - apiGroups: - - config.openshift.io - resources: - - infrastructures - - infrastructures/status - verbs: - - get - - list - - watch - - apiGroups: - - coordination.k8s.io - resources: - - leases - verbs: - - create - - get - - list - - update - - apiGroups: - - monitoring.coreos.com - resources: - - podmonitors - - servicemonitors - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - networking.k8s.io - resources: - - ingresses - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - opentelemetry.io - resources: - - instrumentations - - opentelemetrycollectors - verbs: - - get - - list - - patch - - update - - watch - - apiGroups: - - opentelemetry.io - resources: - - opampbridges - - targetallocators - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - opentelemetry.io - resources: - - opampbridges/finalizers - verbs: - - update - - apiGroups: - - opentelemetry.io - resources: - - opampbridges/status - - opentelemetrycollectors/finalizers - - opentelemetrycollectors/status - - targetallocators/status - - targetallocators/finalizers - verbs: - - get - - patch - - update - - apiGroups: - - policy - resources: - - poddisruptionbudgets - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - route.openshift.io - resources: - - routes - - routes/custom-host - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/rolebinding.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/rolebinding.yaml deleted file mode 100644 index ae376e80c9..0000000000 --- a/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/rolebinding.yaml +++ /dev/null @@ -1,24 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/rolebinding.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding -metadata: - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: controller-manager - name: example-opentelemetry-operator-leader-election - namespace: default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: example-opentelemetry-operator-leader-election -subjects: - - kind: ServiceAccount - name: opentelemetry-operator - namespace: default - diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/service.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/service.yaml deleted file mode 100644 index 0a3006d80f..0000000000 --- a/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/service.yaml +++ /dev/null @@ -1,48 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/service.yaml -apiVersion: v1 -kind: Service -metadata: - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: controller-manager - name: example-opentelemetry-operator - namespace: default -spec: - ports: - - name: metrics - port: 8443 - protocol: TCP - targetPort: metrics - selector: - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/component: controller-manager ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/service.yaml -apiVersion: v1 -kind: Service -metadata: - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: controller-manager - name: example-opentelemetry-operator-webhook - namespace: default -spec: - ports: - - port: 443 - protocol: TCP - targetPort: webhook-server - selector: - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/component: controller-manager - diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/serviceaccount.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/serviceaccount.yaml deleted file mode 100644 index c6ba25dbac..0000000000 --- a/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/serviceaccount.yaml +++ /dev/null @@ -1,17 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/serviceaccount.yaml -apiVersion: v1 -kind: ServiceAccount -automountServiceAccountToken: true -metadata: - name: opentelemetry-operator - namespace: default - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: controller-manager - diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml deleted file mode 100644 index 9039160e03..0000000000 --- a/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml +++ /dev/null @@ -1,54 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/tests/test-certmanager-connection.yaml -apiVersion: v1 -kind: Pod -metadata: - name: "example-opentelemetry-operator-cert-manager" - namespace: default - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: webhook - annotations: - "helm.sh/hook": test -spec: - containers: - - name: wget - image: "busybox:latest" - env: - - name: CERT_MANAGER_CLUSTERIP - value: "cert-manager-webhook" - - name: CERT_MANAGER_PORT - value: "443" - command: - - sh - - -c - # The following shell script tests if the cert-manager service is up. If the service is up, when we try - # to wget its exposed port, we will get an HTTP error 400. - - | - wget_output=$(wget -q "$CERT_MANAGER_CLUSTERIP:$CERT_MANAGER_PORT") - if wget_output=="wget: server returned error: HTTP/1.0 400 Bad Request" - then exit 0 - else exit 1 - fi - securityContext: - allowPrivilegeEscalation: false - capabilities: - drop: - - ALL - runAsNonRoot: true - seccompProfile: - type: RuntimeDefault - restartPolicy: Never - nodeSelector: - kubernetes.io/os: linux - securityContext: - fsGroup: 65532 - runAsGroup: 65532 - runAsNonRoot: true - runAsUser: 65532 - diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/tests/test-service-connection.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/tests/test-service-connection.yaml deleted file mode 100644 index 88e0e0bc24..0000000000 --- a/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/tests/test-service-connection.yaml +++ /dev/null @@ -1,107 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/tests/test-service-connection.yaml -apiVersion: v1 -kind: Pod -metadata: - name: "example-opentelemetry-operator-metrics" - namespace: default - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: controller-manager - annotations: - "helm.sh/hook": test -spec: - containers: - - name: wget - image: "busybox:latest" - env: - - name: MANAGER_METRICS_SERVICE_CLUSTERIP - value: "example-opentelemetry-operator" - - name: MANAGER_METRICS_SERVICE_PORT - value: "8443" - command: - - sh - - -c - # The following shell script tests if the controller-manager-metrics-service is up. - # If the service is up, when we try to wget its exposed port, we will get an HTTP error 400. - - | - wget_output=$(wget -q "$MANAGER_METRICS_SERVICE_CLUSTERIP:$MANAGER_METRICS_SERVICE_PORT") - if wget_output=="wget: server returned error: HTTP/1.0 400 Bad Request" - then exit 0 - else exit 1 - fi - securityContext: - allowPrivilegeEscalation: false - capabilities: - drop: - - ALL - runAsNonRoot: true - seccompProfile: - type: RuntimeDefault - restartPolicy: Never - nodeSelector: - kubernetes.io/os: linux - securityContext: - fsGroup: 65532 - runAsGroup: 65532 - runAsNonRoot: true - runAsUser: 65532 ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/tests/test-service-connection.yaml -apiVersion: v1 -kind: Pod -metadata: - name: "example-opentelemetry-operator-webhook" - namespace: default - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: controller-manager - annotations: - "helm.sh/hook": test -spec: - containers: - - name: wget - image: "busybox:latest" - env: - - name: WEBHOOK_SERVICE_CLUSTERIP - value: "example-opentelemetry-operator-webhook" - - name: WEBHOOK_SERVICE_PORT - value: "443" - command: - - sh - - -c - # The following shell script tests if the webhook service is up. If the service is up, when we try - # to wget its exposed port, we will get an HTTP error 400. - - | - wget_output=$(wget -q "$WEBHOOK_SERVICE_CLUSTERIP:$WEBHOOK_SERVICE_PORT") - if wget_output=="wget: server returned error: HTTP/1.0 400 Bad Request" - then exit 0 - else exit 1 - fi - securityContext: - allowPrivilegeEscalation: false - capabilities: - drop: - - ALL - runAsNonRoot: true - seccompProfile: - type: RuntimeDefault - restartPolicy: Never - nodeSelector: - kubernetes.io/os: linux - securityContext: - fsGroup: 65532 - runAsGroup: 65532 - runAsNonRoot: true - runAsUser: 65532 - diff --git a/charts/opentelemetry-kube-stack/examples/default/rendered/clusterrole.yaml b/charts/opentelemetry-kube-stack/examples/default/rendered/clusterrole.yaml deleted file mode 100644 index 04fd4b7372..0000000000 --- a/charts/opentelemetry-kube-stack/examples/default/rendered/clusterrole.yaml +++ /dev/null @@ -1,141 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/templates/clusterrole.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - name: example-collector -rules: -- apiGroups: [""] - resources: - - namespaces - - nodes - - nodes/proxy - - nodes/metrics - - nodes/stats - - services - - endpoints - - pods - - events - - secrets - - persistentvolumeclaims - - persistentvolumes - verbs: ["get", "list", "watch"] -- apiGroups: ["monitoring.coreos.com"] - resources: - - servicemonitors - - podmonitors - - scrapeconfigs - - probes - verbs: ["get", "list", "watch"] -- apiGroups: - - extensions - resources: - - ingresses - verbs: ["get", "list", "watch"] -- apiGroups: - - apps - resources: - - daemonsets - - deployments - - replicasets - - statefulsets - verbs: ["get", "list", "watch"] -- apiGroups: - - networking.k8s.io - resources: - - ingresses - verbs: ["get", "list", "watch"] -- apiGroups: ["discovery.k8s.io"] - resources: - - endpointslices - verbs: ["get", "list", "watch"] -- nonResourceURLs: ["/metrics", "/metrics/cadvisor"] - verbs: ["get"] - -- verbs: - - get - - list - - watch - - create - - update - - patch - - delete - apiGroups: - - coordination.k8s.io - resources: - - leases -- apiGroups: - - "" - resources: - - events - - namespaces - - namespaces/status - - nodes - - nodes/spec - - pods - - pods/status - - replicationcontrollers - - replicationcontrollers/status - - resourcequotas - - services - verbs: - - get - - list - - watch -- apiGroups: - - apps - resources: - - daemonsets - - deployments - - replicasets - - statefulsets - verbs: - - get - - list - - watch -- apiGroups: - - extensions - resources: - - daemonsets - - deployments - - replicasets - verbs: - - get - - list - - watch -- apiGroups: - - batch - resources: - - jobs - - cronjobs - verbs: - - get - - list - - watch -- apiGroups: - - autoscaling - resources: - - horizontalpodautoscalers - verbs: - - get - - list - - watch -- apiGroups: ["events.k8s.io"] - resources: ["events"] - verbs: ["watch", "list"] ---- -# Source: opentelemetry-kube-stack/templates/clusterrole.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding -metadata: - name: example-daemon -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: example-collector -subjects: -- kind: ServiceAccount - # quirk of the Operator - name: "example-daemon-collector" - namespace: default - diff --git a/charts/opentelemetry-kube-stack/examples/default/rendered/collector.yaml b/charts/opentelemetry-kube-stack/examples/default/rendered/collector.yaml deleted file mode 100644 index 87cf348759..0000000000 --- a/charts/opentelemetry-kube-stack/examples/default/rendered/collector.yaml +++ /dev/null @@ -1,515 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/templates/collector.yaml -apiVersion: opentelemetry.io/v1beta1 -kind: OpenTelemetryCollector -metadata: - name: example-daemon - namespace: default - labels: - helm.sh/chart: opentelemetry-kube-stack-0.16.0 - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - release: "example" -spec: - managementState: managed - mode: daemonset - config: - exporters: - debug: {} - extensions: - k8s_leader_elector/k8s_cluster: - auth_type: serviceAccount - lease_name: k8s.cluster.receiver.opentelemetry.io - lease_namespace: default - k8s_leader_elector/k8s_objects: - auth_type: serviceAccount - lease_name: k8s.objects.receiver.opentelemetry.io - lease_namespace: default - processors: - batch: - send_batch_max_size: 1500 - send_batch_size: 1000 - timeout: 1s - k8sattributes: - extract: - labels: - - from: pod - key: app.kubernetes.io/instance - tag_name: k8s.app.instance - - from: pod - key: app.kubernetes.io/component - tag_name: k8s.app.component - metadata: - - k8s.namespace.name - - k8s.pod.name - - k8s.pod.uid - - k8s.node.name - - k8s.pod.start_time - - k8s.deployment.name - - k8s.replicaset.name - - k8s.replicaset.uid - - k8s.daemonset.name - - k8s.daemonset.uid - - k8s.job.name - - k8s.job.uid - - k8s.container.name - - k8s.cronjob.name - - k8s.statefulset.name - - k8s.statefulset.uid - - container.image.tag - - container.image.name - - k8s.cluster.uid - - service.namespace - - service.name - - service.version - - service.instance.id - otel_annotations: true - filter: - node_from_env_var: OTEL_K8S_NODE_NAME - passthrough: false - pod_association: - - sources: - - from: resource_attribute - name: k8s.pod.uid - - sources: - - from: resource_attribute - name: k8s.pod.name - - from: resource_attribute - name: k8s.namespace.name - - from: resource_attribute - name: k8s.node.name - - sources: - - from: resource_attribute - name: k8s.pod.ip - - sources: - - from: resource_attribute - name: k8s.pod.name - - from: resource_attribute - name: k8s.namespace.name - - sources: - - from: connection - resource/hostname: - attributes: - - action: insert - from_attribute: k8s.node.name - key: host.name - resourcedetection/env: - detectors: - - env - - k8snode - override: false - timeout: 2s - receivers: - filelog: - exclude: [] - include: - - /var/log/pods/*/*/*.log - include_file_name: false - include_file_path: true - operators: - - id: container-parser - max_log_size: 102400 - type: container - retry_on_failure: - enabled: true - start_at: end - hostmetrics: - collection_interval: 10s - root_path: /hostfs - scrapers: - cpu: - metrics: - system.cpu.logical.count: - enabled: true - system.cpu.utilization: - enabled: true - disk: {} - filesystem: - exclude_fs_types: - fs_types: - - autofs - - binfmt_misc - - bpf - - cgroup2 - - configfs - - debugfs - - devpts - - devtmpfs - - fusectl - - hugetlbfs - - iso9660 - - mqueue - - nsfs - - overlay - - proc - - procfs - - pstore - - rpc_pipefs - - securityfs - - selinuxfs - - squashfs - - sysfs - - tracefs - match_type: strict - exclude_mount_points: - match_type: regexp - mount_points: - - /dev/* - - /proc/* - - /sys/* - - /run/k3s/containerd/* - - /var/lib/docker/* - - /var/lib/kubelet/* - - /snap/* - metrics: - system.filesystem.utilization: - enabled: true - load: {} - memory: - metrics: - system.memory.limit: - enabled: true - system.memory.utilization: - enabled: true - network: {} - paging: - metrics: - system.paging.usage: - enabled: true - system: - metrics: - system.uptime: - enabled: true - k8s_cluster: - allocatable_types_to_report: - - cpu - - memory - - storage - auth_type: serviceAccount - collection_interval: 10s - k8s_leader_elector: k8s_leader_elector/k8s_cluster - node_conditions_to_report: - - Ready - - MemoryPressure - - DiskPressure - - NetworkUnavailable - k8sobjects: - k8s_leader_elector: k8s_leader_elector/k8s_objects - objects: - - exclude_watch_type: - - DELETED - group: events.k8s.io - mode: watch - name: events - kubeletstats: - auth_type: serviceAccount - collection_interval: 15s - endpoint: https://${env:OTEL_K8S_NODE_IP}:10250 - extra_metadata_labels: - - container.id - - k8s.volume.type - insecure_skip_verify: true - k8s_api_config: - auth_type: serviceAccount - metric_groups: - - node - - pod - - volume - - container - metrics: - container.cpu.usage: - enabled: true - k8s.node.cpu.usage: - enabled: true - k8s.node.uptime: - enabled: true - k8s.pod.cpu.usage: - enabled: true - k8s.pod.uptime: - enabled: true - otlp: - protocols: - grpc: - endpoint: 0.0.0.0:4317 - http: - endpoint: 0.0.0.0:4318 - prometheus: - config: - scrape_configs: - - job_name: kubernetes-pods - kubernetes_sd_configs: - - role: pod - selectors: - - field: spec.nodeName=${env:OTEL_K8S_NODE_NAME} - role: pod - relabel_configs: - - action: keep - regex: true - source_labels: - - __meta_kubernetes_pod_annotation_prometheus_io_scrape - - action: drop - regex: true - source_labels: - - __meta_kubernetes_pod_annotation_prometheus_io_scrape_slow - - action: replace - regex: (https?) - source_labels: - - __meta_kubernetes_pod_annotation_prometheus_io_scheme - target_label: __scheme__ - - action: replace - regex: (.+) - source_labels: - - __meta_kubernetes_pod_annotation_prometheus_io_path - target_label: __metrics_path__ - - action: replace - regex: ([^:]+)(?::\d+)?;(\d+) - replacement: $$1:$$2 - source_labels: - - __address__ - - __meta_kubernetes_pod_annotation_prometheus_io_port - target_label: __address__ - - action: labelmap - regex: __meta_kubernetes_pod_annotation_prometheus_io_param_(.+) - replacement: __param_$$1 - - action: labelmap - regex: __meta_kubernetes_pod_label_(.+) - - action: replace - source_labels: - - __meta_kubernetes_namespace - target_label: namespace - - action: replace - source_labels: - - __meta_kubernetes_pod_name - target_label: pod - - action: drop - regex: Pending|Succeeded|Failed|Completed - source_labels: - - __meta_kubernetes_pod_phase - - action: replace - source_labels: - - __meta_kubernetes_pod_label_app_kubernetes_io_name - target_label: job - scrape_interval: 30s - - job_name: node-exporter - relabel_configs: - - action: labelmap - regex: __meta_kubernetes_node_label_(.+) - - action: replace - regex: (.*) - replacement: $$1 - separator: ; - source_labels: - - job - target_label: __tmp_prometheus_job_name - scrape_interval: 30s - static_configs: - - targets: - - ${env:OTEL_K8S_NODE_IP}:9100 - - authorization: - credentials_file: /var/run/secrets/kubernetes.io/serviceaccount/token - type: Bearer - follow_redirects: true - honor_labels: true - honor_timestamps: true - job_name: kubelet - kubernetes_sd_configs: - - follow_redirects: true - role: node - selectors: - - field: metadata.name=${env:OTEL_K8S_NODE_NAME} - role: node - metric_relabel_configs: - - action: drop - regex: container_cpu_(load_average_10s|system_seconds_total|user_seconds_total) - replacement: $$1 - separator: ; - source_labels: - - __name__ - - action: drop - regex: container_fs_(io_current|reads_merged_total|sector_reads_total|sector_writes_total|writes_merged_total) - replacement: $$1 - separator: ; - source_labels: - - __name__ - - action: drop - regex: container_memory_(mapped_file|swap) - replacement: $$1 - separator: ; - source_labels: - - __name__ - - action: drop - regex: container_(file_descriptors|tasks_state|threads_max) - replacement: $$1 - separator: ; - source_labels: - - __name__ - - action: drop - regex: container_spec.* - replacement: $$1 - separator: ; - source_labels: - - __name__ - - action: drop - regex: .+; - replacement: $$1 - separator: ; - source_labels: - - id - - pod - metrics_path: /metrics/cadvisor - relabel_configs: - - action: replace - regex: (.*) - replacement: $$1 - separator: ; - source_labels: - - job - target_label: __tmp_prometheus_job_name - - action: replace - replacement: kubelet - target_label: job - - action: replace - regex: (.*) - replacement: $$1 - separator: ; - source_labels: - - __meta_kubernetes_node_name - target_label: node - - action: replace - regex: (.*) - replacement: https-metrics - separator: ; - target_label: endpoint - - action: replace - regex: (.*) - replacement: $$1 - separator: ; - source_labels: - - __metrics_path__ - target_label: metrics_path - - action: hashmod - modulus: 1 - regex: (.*) - replacement: $$1 - separator: ; - source_labels: - - __address__ - target_label: __tmp_hash - - action: keep - regex: $(SHARD) - replacement: $$1 - separator: ; - source_labels: - - __tmp_hash - scheme: https - scrape_interval: 15s - scrape_timeout: 10s - tls_config: - ca_file: /var/run/secrets/kubernetes.io/serviceaccount/ca.crt - insecure_skip_verify: true - service: - extensions: - - k8s_leader_elector/k8s_objects - - k8s_leader_elector/k8s_cluster - pipelines: - logs: - exporters: - - debug - processors: - - k8sattributes - - resourcedetection/env - - resource/hostname - - batch - receivers: - - otlp - - filelog - - k8sobjects - metrics: - exporters: - - debug - processors: - - k8sattributes - - resourcedetection/env - - resource/hostname - - batch - receivers: - - prometheus - - otlp - - hostmetrics - - kubeletstats - - k8s_cluster - traces: - exporters: - - debug - processors: - - k8sattributes - - resourcedetection/env - - resource/hostname - - batch - receivers: - - otlp - imagePullPolicy: IfNotPresent - upgradeStrategy: automatic - terminationGracePeriodSeconds: 30 - resources: - limits: - cpu: 200m - memory: 500Mi - requests: - cpu: 100m - memory: 250Mi - securityContext: - {} - volumeMounts: - - name: varlogpods - mountPath: /var/log/pods - readOnly: true - - name: varlibdockercontainers - mountPath: /var/lib/docker/containers - readOnly: true - - name: hostfs - mountPath: /hostfs - readOnly: true - mountPropagation: HostToContainer - env: - - name: K8S_NODE_NAME - valueFrom: - fieldRef: - fieldPath: spec.nodeName - - name: OTEL_K8S_NODE_NAME - valueFrom: - fieldRef: - fieldPath: spec.nodeName - - name: OTEL_K8S_NODE_IP - valueFrom: - fieldRef: - fieldPath: status.hostIP - - name: OTEL_K8S_NAMESPACE - valueFrom: - fieldRef: - apiVersion: v1 - fieldPath: metadata.namespace - - name: OTEL_K8S_POD_NAME - valueFrom: - fieldRef: - apiVersion: v1 - fieldPath: metadata.name - - name: OTEL_K8S_POD_IP - valueFrom: - fieldRef: - apiVersion: v1 - fieldPath: status.podIP - - name: OTEL_RESOURCE_ATTRIBUTES - value: "k8s.pod.name=$(OTEL_K8S_POD_NAME),k8s.namespace.name=$(OTEL_K8S_NAMESPACE),k8s.node.name=$(OTEL_K8S_NODE_NAME),host.name=$(OTEL_K8S_NODE_NAME),k8s.node.ip=$(OTEL_K8S_NODE_IP),k8s.pod.ip=$(OTEL_K8S_POD_IP),k8s.cluster.name=unknown_k8s_cluster" - - volumes: - - name: varlogpods - hostPath: - path: /var/log/pods - - name: varlibdockercontainers - hostPath: - path: /var/lib/docker/containers - - name: hostfs - hostPath: - path: / - diff --git a/charts/opentelemetry-kube-stack/examples/default/rendered/hooks.yaml b/charts/opentelemetry-kube-stack/examples/default/rendered/hooks.yaml deleted file mode 100644 index df09c1e80b..0000000000 --- a/charts/opentelemetry-kube-stack/examples/default/rendered/hooks.yaml +++ /dev/null @@ -1,65 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/templates/hooks.yaml -apiVersion: v1 -kind: ServiceAccount -metadata: - name: delete-resources-sa - annotations: - "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded ---- -# Source: opentelemetry-kube-stack/templates/hooks.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - name: delete-resources-role - annotations: - "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded -rules: - - apiGroups: - - opentelemetry.io - resources: - - instrumentations - - opampbridges - - opentelemetrycollectors - verbs: - - get - - list - - delete ---- -# Source: opentelemetry-kube-stack/templates/hooks.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding -metadata: - name: delete-resources-rolebinding - annotations: - "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: delete-resources-role -subjects: - - kind: ServiceAccount - name: delete-resources-sa ---- -# Source: opentelemetry-kube-stack/templates/hooks.yaml -apiVersion: batch/v1 -kind: Job -metadata: - name: opentelemetry-kube-stack-pre-delete-job - annotations: - "helm.sh/hook": pre-delete - "helm.sh/hook-delete-policy": hook-succeeded,hook-failed -spec: - template: - spec: - restartPolicy: Never - serviceAccountName: delete-resources-sa - containers: - - name: delete-resources - image: "rancher/kubectl:v1.34.1" - args: - - "delete" - - "instrumentations,opampbridges,opentelemetrycollectors" - - "-l" - - "helm.sh/chart=opentelemetry-kube-stack-0.16.0" - diff --git a/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml b/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml deleted file mode 100644 index 17585fa86a..0000000000 --- a/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml +++ /dev/null @@ -1,193 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/admission-webhooks/operator-webhook-with-cert-manager.yaml -apiVersion: admissionregistration.k8s.io/v1 -kind: MutatingWebhookConfiguration -metadata: - annotations: - cert-manager.io/inject-ca-from: default/example-opentelemetry-operator-serving-cert - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: webhook - name: example-opentelemetry-operator-mutation -webhooks: - - admissionReviewVersions: - - v1 - clientConfig: - service: - name: example-opentelemetry-operator-webhook - namespace: default - path: /mutate-opentelemetry-io-v1alpha1-instrumentation - port: 443 - failurePolicy: Ignore - name: minstrumentation.kb.io - rules: - - apiGroups: - - opentelemetry.io - apiVersions: - - v1alpha1 - operations: - - CREATE - - UPDATE - resources: - - instrumentations - scope: Namespaced - sideEffects: None - timeoutSeconds: 10 - - admissionReviewVersions: - - v1 - clientConfig: - service: - name: example-opentelemetry-operator-webhook - namespace: default - path: /mutate-opentelemetry-io-v1beta1-opentelemetrycollector - port: 443 - failurePolicy: Ignore - name: mopentelemetrycollectorbeta.kb.io - rules: - - apiGroups: - - opentelemetry.io - apiVersions: - - v1beta1 - operations: - - CREATE - - UPDATE - resources: - - opentelemetrycollectors - scope: Namespaced - sideEffects: None - timeoutSeconds: 10 - - admissionReviewVersions: - - v1 - clientConfig: - service: - name: example-opentelemetry-operator-webhook - namespace: default - path: /mutate-v1-pod - port: 443 - failurePolicy: Ignore - name: mpod.kb.io - rules: - - apiGroups: - - "" - apiVersions: - - v1 - operations: - - CREATE - resources: - - pods - scope: Namespaced - sideEffects: None - timeoutSeconds: 10 ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/admission-webhooks/operator-webhook-with-cert-manager.yaml -apiVersion: admissionregistration.k8s.io/v1 -kind: ValidatingWebhookConfiguration -metadata: - annotations: - cert-manager.io/inject-ca-from: default/example-opentelemetry-operator-serving-cert - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: webhook - name: example-opentelemetry-operator-validation -webhooks: - - admissionReviewVersions: - - v1 - clientConfig: - service: - name: example-opentelemetry-operator-webhook - namespace: default - path: /validate-opentelemetry-io-v1alpha1-instrumentation - port: 443 - failurePolicy: Ignore - name: vinstrumentationcreateupdate.kb.io - rules: - - apiGroups: - - opentelemetry.io - apiVersions: - - v1alpha1 - operations: - - CREATE - - UPDATE - resources: - - instrumentations - scope: Namespaced - sideEffects: None - timeoutSeconds: 10 - - admissionReviewVersions: - - v1 - clientConfig: - service: - name: example-opentelemetry-operator-webhook - namespace: default - path: /validate-opentelemetry-io-v1alpha1-instrumentation - port: 443 - failurePolicy: Ignore - name: vinstrumentationdelete.kb.io - rules: - - apiGroups: - - opentelemetry.io - apiVersions: - - v1alpha1 - operations: - - DELETE - resources: - - instrumentations - scope: Namespaced - sideEffects: None - timeoutSeconds: 10 - - admissionReviewVersions: - - v1 - clientConfig: - service: - name: example-opentelemetry-operator-webhook - namespace: default - path: /validate-opentelemetry-io-v1beta1-opentelemetrycollector - port: 443 - failurePolicy: Ignore - name: vopentelemetrycollectorcreateupdatebeta.kb.io - rules: - - apiGroups: - - opentelemetry.io - apiVersions: - - v1beta1 - operations: - - CREATE - - UPDATE - resources: - - opentelemetrycollectors - scope: Namespaced - sideEffects: None - timeoutSeconds: 10 - - admissionReviewVersions: - - v1 - clientConfig: - service: - name: example-opentelemetry-operator-webhook - namespace: default - path: /validate-opentelemetry-io-v1beta1-opentelemetrycollector - port: 443 - failurePolicy: Ignore - name: vopentelemetrycollectordeletebeta.kb.io - rules: - - apiGroups: - - opentelemetry.io - apiVersions: - - v1beta1 - operations: - - DELETE - resources: - - opentelemetrycollectors - scope: Namespaced - sideEffects: None - timeoutSeconds: 10 - diff --git a/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/admission-webhooks/operator-webhook.yaml b/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/admission-webhooks/operator-webhook.yaml deleted file mode 100644 index 5b9ff5511d..0000000000 --- a/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/admission-webhooks/operator-webhook.yaml +++ /dev/null @@ -1,3 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/admission-webhooks/operator-webhook.yaml ---- diff --git a/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/certmanager.yaml b/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/certmanager.yaml deleted file mode 100644 index e8615238d0..0000000000 --- a/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/certmanager.yaml +++ /dev/null @@ -1,44 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/certmanager.yaml -apiVersion: cert-manager.io/v1 -kind: Certificate -metadata: - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: webhook - name: example-opentelemetry-operator-serving-cert - namespace: default -spec: - dnsNames: - - example-opentelemetry-operator-webhook.default.svc - - example-opentelemetry-operator-webhook.default.svc.cluster.local - issuerRef: - kind: Issuer - name: example-opentelemetry-operator-selfsigned-issuer - secretName: example-opentelemetry-operator-controller-manager-service-cert - subject: - organizationalUnits: - - example-opentelemetry-operator ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/certmanager.yaml -apiVersion: cert-manager.io/v1 -kind: Issuer -metadata: - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: webhook - name: example-opentelemetry-operator-selfsigned-issuer - namespace: default -spec: - selfSigned: {} - diff --git a/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/clusterrole.yaml b/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/clusterrole.yaml deleted file mode 100644 index 2037050533..0000000000 --- a/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/clusterrole.yaml +++ /dev/null @@ -1,410 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/clusterrole.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: controller-manager - name: example-opentelemetry-operator-manager -rules: - - apiGroups: - - "" - resources: - - configmaps - - persistentvolumeclaims - - persistentvolumes - - pods - - serviceaccounts - - services - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - "" - resources: - - events - verbs: - - create - - get - - list - - patch - - watch - - apiGroups: - - "" - resources: - - namespaces - verbs: - - list - - watch - - apiGroups: - - "" - resources: - - namespaces/status - verbs: - - get - - list - - watch - - apiGroups: - - "" - resources: - - nodes/spec - verbs: - - get - - list - - watch - - apiGroups: - - "" - resources: - - pods/status - verbs: - - get - - list - - watch - - apiGroups: - - "" - resources: - - replicationcontrollers - verbs: - - get - - list - - watch - - apiGroups: - - "" - resources: - - replicationcontrollers/status - verbs: - - get - - list - - watch - - apiGroups: - - "" - resources: - - resourcequotas - verbs: - - get - - list - - watch - - apiGroups: - - apps - resources: - - daemonsets - - deployments - - statefulsets - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - apps - - extensions - resources: - - replicasets - verbs: - - get - - list - - watch - - apiGroups: - - extensions - resources: - - daemonsets - verbs: - - get - - list - - watch - - apiGroups: - - extensions - resources: - - deployments - verbs: - - get - - list - - watch - - apiGroups: - - autoscaling - resources: - - horizontalpodautoscalers - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - batch - resources: - - jobs - verbs: - - get - - list - - watch - - apiGroups: - - batch - resources: - - cronjobs - verbs: - - get - - list - - watch - - apiGroups: - - "" - resources: - - nodes/proxy - verbs: - - get - - apiGroups: - - "" - resources: - - nodes/stats - verbs: - - get - - apiGroups: - - config.openshift.io - resources: - - infrastructures - - infrastructures/status - verbs: - - get - - list - - watch - - apiGroups: - - coordination.k8s.io - resources: - - leases - verbs: - - create - - get - - list - - update - - apiGroups: - - discovery.k8s.io - resources: - - endpointslices - verbs: - - get - - list - - apiGroups: - - events.k8s.io - resources: - - events - verbs: - - create - - list - - patch - - watch - - apiGroups: - - gateway.networking.k8s.io - resources: - - httproutes - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - monitoring.coreos.com - resources: - - podmonitors - - servicemonitors - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - networking.k8s.io - resources: - - ingresses - - networkpolicies - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - opentelemetry.io - resources: - - instrumentations - verbs: - - get - - list - - patch - - update - - watch - - apiGroups: - - opentelemetry.io - resources: - - opampbridges - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - opentelemetry.io - resources: - - opampbridges/finalizers - verbs: - - update - - apiGroups: - - opentelemetry.io - resources: - - opampbridges/status - verbs: - - get - - patch - - update - - apiGroups: - - opentelemetry.io - resources: - - opentelemetrycollectors - verbs: - - get - - list - - patch - - update - - watch - - apiGroups: - - opentelemetry.io - resources: - - opentelemetrycollectors/finalizers - verbs: - - get - - patch - - update - - apiGroups: - - opentelemetry.io - resources: - - opentelemetrycollectors/status - verbs: - - get - - patch - - update - - apiGroups: - - policy - resources: - - poddisruptionbudgets - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - route.openshift.io - resources: - - routes - - routes/custom-host - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - opentelemetry.io - resources: - - targetallocators - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - opentelemetry.io - resources: - - targetallocators/status - verbs: - - get - - patch - - update - - apiGroups: - - opentelemetry.io - resources: - - targetallocators/finalizers - verbs: - - get - - patch - - update - - apiGroups: - - cert-manager.io - resources: - - issuers - - certificaterequests - - certificates - verbs: - - create - - get - - list - - watch - - update - - patch - - delete - - apiGroups: - - authentication.k8s.io - resources: - - tokenreviews - verbs: - - create - - apiGroups: - - authorization.k8s.io - resources: - - subjectaccessreviews - verbs: - - create ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/clusterrole.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: controller-manager - name: example-opentelemetry-operator-metrics -rules: - - nonResourceURLs: - - /metrics - verbs: - - get - - diff --git a/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/clusterrolebinding.yaml b/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/clusterrolebinding.yaml deleted file mode 100644 index 4acb7d53f5..0000000000 --- a/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/clusterrolebinding.yaml +++ /dev/null @@ -1,24 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/clusterrolebinding.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding -metadata: - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: controller-manager - name: example-opentelemetry-operator-manager -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: example-opentelemetry-operator-manager -subjects: - - kind: ServiceAccount - name: opentelemetry-operator - namespace: default - - diff --git a/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/deployment.yaml b/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/deployment.yaml deleted file mode 100644 index c775cd1cf3..0000000000 --- a/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/deployment.yaml +++ /dev/null @@ -1,105 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/deployment.yaml -apiVersion: apps/v1 -kind: Deployment -metadata: - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: controller-manager - name: example-opentelemetry-operator - namespace: default -spec: - replicas: 1 - revisionHistoryLimit: 10 - selector: - matchLabels: - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/component: controller-manager - template: - metadata: - annotations: - kubectl.kubernetes.io/default-container: manager - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: controller-manager - spec: - automountServiceAccountToken: true - hostNetwork: false - containers: - - args: - - --metrics-addr=0.0.0.0:8443 - - --metrics-secure=true - - --enable-leader-election - - --health-probe-addr=:8081 - - --webhook-port=9443 - - --collector-image=otel/opentelemetry-collector-k8s:0.151.0 - command: - - /manager - env: - - name: SERVICE_ACCOUNT_NAME - valueFrom: - fieldRef: - fieldPath: spec.serviceAccountName - - name: ENABLE_WEBHOOKS - value: "true" - image: "ghcr.io/open-telemetry/opentelemetry-operator/opentelemetry-operator:0.151.0" - name: manager - imagePullPolicy: IfNotPresent - ports: - - containerPort: 8443 - name: metrics - protocol: TCP - - containerPort: 9443 - name: webhook-server - protocol: TCP - livenessProbe: - httpGet: - path: /healthz - port: 8081 - initialDelaySeconds: 15 - periodSeconds: 20 - readinessProbe: - httpGet: - path: /readyz - port: 8081 - initialDelaySeconds: 5 - periodSeconds: 10 - resources: - {} - volumeMounts: - - mountPath: /tmp/k8s-webhook-server/serving-certs - name: cert - readOnly: true - securityContext: - allowPrivilegeEscalation: false - capabilities: - drop: - - ALL - runAsNonRoot: true - seccompProfile: - type: RuntimeDefault - nodeSelector: - kubernetes.io/os: linux - serviceAccountName: opentelemetry-operator - terminationGracePeriodSeconds: 10 - volumes: - - name: cert - secret: - defaultMode: 420 - secretName: example-opentelemetry-operator-controller-manager-service-cert - securityContext: - fsGroup: 65532 - runAsGroup: 65532 - runAsNonRoot: true - runAsUser: 65532 - diff --git a/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/role.yaml b/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/role.yaml deleted file mode 100644 index b5339517a2..0000000000 --- a/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/role.yaml +++ /dev/null @@ -1,200 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/role.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: controller-manager - name: example-opentelemetry-operator-leader-election - namespace: default -rules: - - apiGroups: - - "" - resources: - - configmaps - - pods - - serviceaccounts - - services - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - "" - resources: - - events - verbs: - - create - - patch - - apiGroups: - - "" - resources: - - namespaces - - secrets - verbs: - - get - - list - - watch - - apiGroups: - - apps - resources: - - daemonsets - - deployments - - statefulsets - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - apps - resources: - - replicasets - verbs: - - get - - list - - watch - - apiGroups: - - autoscaling - resources: - - horizontalpodautoscalers - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - batch - resources: - - jobs - verbs: - - get - - list - - watch - - apiGroups: - - config.openshift.io - resources: - - infrastructures - - infrastructures/status - verbs: - - get - - list - - watch - - apiGroups: - - coordination.k8s.io - resources: - - leases - verbs: - - create - - get - - list - - update - - apiGroups: - - monitoring.coreos.com - resources: - - podmonitors - - servicemonitors - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - networking.k8s.io - resources: - - ingresses - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - opentelemetry.io - resources: - - instrumentations - - opentelemetrycollectors - verbs: - - get - - list - - patch - - update - - watch - - apiGroups: - - opentelemetry.io - resources: - - opampbridges - - targetallocators - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - opentelemetry.io - resources: - - opampbridges/finalizers - verbs: - - update - - apiGroups: - - opentelemetry.io - resources: - - opampbridges/status - - opentelemetrycollectors/finalizers - - opentelemetrycollectors/status - - targetallocators/status - - targetallocators/finalizers - verbs: - - get - - patch - - update - - apiGroups: - - policy - resources: - - poddisruptionbudgets - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - route.openshift.io - resources: - - routes - - routes/custom-host - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - diff --git a/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/rolebinding.yaml b/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/rolebinding.yaml deleted file mode 100644 index ae376e80c9..0000000000 --- a/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/rolebinding.yaml +++ /dev/null @@ -1,24 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/rolebinding.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding -metadata: - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: controller-manager - name: example-opentelemetry-operator-leader-election - namespace: default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: example-opentelemetry-operator-leader-election -subjects: - - kind: ServiceAccount - name: opentelemetry-operator - namespace: default - diff --git a/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/service.yaml b/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/service.yaml deleted file mode 100644 index 0a3006d80f..0000000000 --- a/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/service.yaml +++ /dev/null @@ -1,48 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/service.yaml -apiVersion: v1 -kind: Service -metadata: - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: controller-manager - name: example-opentelemetry-operator - namespace: default -spec: - ports: - - name: metrics - port: 8443 - protocol: TCP - targetPort: metrics - selector: - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/component: controller-manager ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/service.yaml -apiVersion: v1 -kind: Service -metadata: - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: controller-manager - name: example-opentelemetry-operator-webhook - namespace: default -spec: - ports: - - port: 443 - protocol: TCP - targetPort: webhook-server - selector: - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/component: controller-manager - diff --git a/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/serviceaccount.yaml b/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/serviceaccount.yaml deleted file mode 100644 index c6ba25dbac..0000000000 --- a/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/serviceaccount.yaml +++ /dev/null @@ -1,17 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/serviceaccount.yaml -apiVersion: v1 -kind: ServiceAccount -automountServiceAccountToken: true -metadata: - name: opentelemetry-operator - namespace: default - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: controller-manager - diff --git a/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml b/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml deleted file mode 100644 index 9039160e03..0000000000 --- a/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml +++ /dev/null @@ -1,54 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/tests/test-certmanager-connection.yaml -apiVersion: v1 -kind: Pod -metadata: - name: "example-opentelemetry-operator-cert-manager" - namespace: default - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: webhook - annotations: - "helm.sh/hook": test -spec: - containers: - - name: wget - image: "busybox:latest" - env: - - name: CERT_MANAGER_CLUSTERIP - value: "cert-manager-webhook" - - name: CERT_MANAGER_PORT - value: "443" - command: - - sh - - -c - # The following shell script tests if the cert-manager service is up. If the service is up, when we try - # to wget its exposed port, we will get an HTTP error 400. - - | - wget_output=$(wget -q "$CERT_MANAGER_CLUSTERIP:$CERT_MANAGER_PORT") - if wget_output=="wget: server returned error: HTTP/1.0 400 Bad Request" - then exit 0 - else exit 1 - fi - securityContext: - allowPrivilegeEscalation: false - capabilities: - drop: - - ALL - runAsNonRoot: true - seccompProfile: - type: RuntimeDefault - restartPolicy: Never - nodeSelector: - kubernetes.io/os: linux - securityContext: - fsGroup: 65532 - runAsGroup: 65532 - runAsNonRoot: true - runAsUser: 65532 - diff --git a/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/tests/test-service-connection.yaml b/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/tests/test-service-connection.yaml deleted file mode 100644 index 88e0e0bc24..0000000000 --- a/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/tests/test-service-connection.yaml +++ /dev/null @@ -1,107 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/tests/test-service-connection.yaml -apiVersion: v1 -kind: Pod -metadata: - name: "example-opentelemetry-operator-metrics" - namespace: default - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: controller-manager - annotations: - "helm.sh/hook": test -spec: - containers: - - name: wget - image: "busybox:latest" - env: - - name: MANAGER_METRICS_SERVICE_CLUSTERIP - value: "example-opentelemetry-operator" - - name: MANAGER_METRICS_SERVICE_PORT - value: "8443" - command: - - sh - - -c - # The following shell script tests if the controller-manager-metrics-service is up. - # If the service is up, when we try to wget its exposed port, we will get an HTTP error 400. - - | - wget_output=$(wget -q "$MANAGER_METRICS_SERVICE_CLUSTERIP:$MANAGER_METRICS_SERVICE_PORT") - if wget_output=="wget: server returned error: HTTP/1.0 400 Bad Request" - then exit 0 - else exit 1 - fi - securityContext: - allowPrivilegeEscalation: false - capabilities: - drop: - - ALL - runAsNonRoot: true - seccompProfile: - type: RuntimeDefault - restartPolicy: Never - nodeSelector: - kubernetes.io/os: linux - securityContext: - fsGroup: 65532 - runAsGroup: 65532 - runAsNonRoot: true - runAsUser: 65532 ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/tests/test-service-connection.yaml -apiVersion: v1 -kind: Pod -metadata: - name: "example-opentelemetry-operator-webhook" - namespace: default - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: controller-manager - annotations: - "helm.sh/hook": test -spec: - containers: - - name: wget - image: "busybox:latest" - env: - - name: WEBHOOK_SERVICE_CLUSTERIP - value: "example-opentelemetry-operator-webhook" - - name: WEBHOOK_SERVICE_PORT - value: "443" - command: - - sh - - -c - # The following shell script tests if the webhook service is up. If the service is up, when we try - # to wget its exposed port, we will get an HTTP error 400. - - | - wget_output=$(wget -q "$WEBHOOK_SERVICE_CLUSTERIP:$WEBHOOK_SERVICE_PORT") - if wget_output=="wget: server returned error: HTTP/1.0 400 Bad Request" - then exit 0 - else exit 1 - fi - securityContext: - allowPrivilegeEscalation: false - capabilities: - drop: - - ALL - runAsNonRoot: true - seccompProfile: - type: RuntimeDefault - restartPolicy: Never - nodeSelector: - kubernetes.io/os: linux - securityContext: - fsGroup: 65532 - runAsGroup: 65532 - runAsNonRoot: true - runAsUser: 65532 - diff --git a/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/clusterrole.yaml b/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/clusterrole.yaml deleted file mode 100644 index 5f316fe954..0000000000 --- a/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/clusterrole.yaml +++ /dev/null @@ -1,141 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/templates/clusterrole.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - name: example-collector -rules: -- apiGroups: [""] - resources: - - namespaces - - nodes - - nodes/proxy - - nodes/metrics - - nodes/stats - - services - - endpoints - - pods - - events - - secrets - - persistentvolumeclaims - - persistentvolumes - verbs: ["get", "list", "watch"] -- apiGroups: ["monitoring.coreos.com"] - resources: - - servicemonitors - - podmonitors - - scrapeconfigs - - probes - verbs: ["get", "list", "watch"] -- apiGroups: - - extensions - resources: - - ingresses - verbs: ["get", "list", "watch"] -- apiGroups: - - apps - resources: - - daemonsets - - deployments - - replicasets - - statefulsets - verbs: ["get", "list", "watch"] -- apiGroups: - - networking.k8s.io - resources: - - ingresses - verbs: ["get", "list", "watch"] -- apiGroups: ["discovery.k8s.io"] - resources: - - endpointslices - verbs: ["get", "list", "watch"] -- nonResourceURLs: ["/metrics", "/metrics/cadvisor"] - verbs: ["get"] - -- verbs: - - get - - list - - watch - - create - - update - - patch - - delete - apiGroups: - - coordination.k8s.io - resources: - - leases -- apiGroups: - - "" - resources: - - events - - namespaces - - namespaces/status - - nodes - - nodes/spec - - pods - - pods/status - - replicationcontrollers - - replicationcontrollers/status - - resourcequotas - - services - verbs: - - get - - list - - watch -- apiGroups: - - apps - resources: - - daemonsets - - deployments - - replicasets - - statefulsets - verbs: - - get - - list - - watch -- apiGroups: - - extensions - resources: - - daemonsets - - deployments - - replicasets - verbs: - - get - - list - - watch -- apiGroups: - - batch - resources: - - jobs - - cronjobs - verbs: - - get - - list - - watch -- apiGroups: - - autoscaling - resources: - - horizontalpodautoscalers - verbs: - - get - - list - - watch -- apiGroups: ["events.k8s.io"] - resources: ["events"] - verbs: ["watch", "list"] ---- -# Source: opentelemetry-kube-stack/templates/clusterrole.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding -metadata: - name: agent -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: example-collector -subjects: -- kind: ServiceAccount - # quirk of the Operator - name: "agent-collector" - namespace: default - diff --git a/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/collector.yaml b/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/collector.yaml deleted file mode 100644 index c8ee284931..0000000000 --- a/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/collector.yaml +++ /dev/null @@ -1,487 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/templates/collector.yaml -apiVersion: opentelemetry.io/v1beta1 -kind: OpenTelemetryCollector -metadata: - name: agent - namespace: default - labels: - helm.sh/chart: opentelemetry-kube-stack-0.16.0 - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - release: "example" -spec: - managementState: managed - mode: daemonset - config: - exporters: - otlp: - endpoint: gateway-collector.default.svc:4317 - sending_queue: - storage: file_storage/queues - tls: - insecure: true - extensions: - file_storage/queues: - create_directory: true - directory: /var/lib/otelcol/agent/queues - k8s_leader_elector/k8s_objects: - auth_type: serviceAccount - lease_name: k8s.objects.receiver.opentelemetry.io - lease_namespace: default - processors: - k8sattributes: - extract: - labels: - - from: pod - key: app.kubernetes.io/instance - tag_name: k8s.app.instance - - from: pod - key: app.kubernetes.io/component - tag_name: k8s.app.component - metadata: - - k8s.namespace.name - - k8s.pod.name - - k8s.pod.uid - - k8s.node.name - - k8s.pod.start_time - - k8s.deployment.name - - k8s.replicaset.name - - k8s.replicaset.uid - - k8s.daemonset.name - - k8s.daemonset.uid - - k8s.job.name - - k8s.job.uid - - k8s.container.name - - k8s.cronjob.name - - k8s.statefulset.name - - k8s.statefulset.uid - - container.image.tag - - container.image.name - - k8s.cluster.uid - - service.namespace - - service.name - - service.version - - service.instance.id - otel_annotations: true - filter: - node_from_env_var: OTEL_K8S_NODE_NAME - passthrough: false - pod_association: - - sources: - - from: resource_attribute - name: k8s.pod.uid - - sources: - - from: resource_attribute - name: k8s.pod.name - - from: resource_attribute - name: k8s.namespace.name - - from: resource_attribute - name: k8s.node.name - - sources: - - from: resource_attribute - name: k8s.pod.ip - - sources: - - from: resource_attribute - name: k8s.pod.name - - from: resource_attribute - name: k8s.namespace.name - - sources: - - from: connection - receivers: - filelog: - exclude: - - /var/log/pods/default_agent*_*/otc-container/*.log - include: - - /var/log/pods/*/*/*.log - include_file_name: false - include_file_path: true - operators: - - id: container-parser - max_log_size: 102400 - type: container - retry_on_failure: - enabled: true - start_at: end - k8sobjects: - k8s_leader_elector: k8s_leader_elector/k8s_objects - objects: - - exclude_watch_type: - - DELETED - group: events.k8s.io - mode: watch - name: events - otlp: - protocols: - grpc: - endpoint: ${env:OTEL_K8S_POD_IP}:4317 - service: - extensions: - - file_storage/queues - - k8s_leader_elector/k8s_objects - pipelines: - logs: - exporters: - - otlp - processors: - - k8sattributes - receivers: - - otlp - - filelog - - k8sobjects - metrics: - exporters: - - otlp - processors: - - k8sattributes - receivers: - - otlp - traces: - exporters: - - otlp - processors: - - k8sattributes - receivers: - - otlp - imagePullPolicy: IfNotPresent - upgradeStrategy: automatic - terminationGracePeriodSeconds: 30 - resources: - limits: - cpu: 200m - memory: 500Mi - requests: - cpu: 100m - memory: 250Mi - securityContext: - runAsGroup: 0 - runAsUser: 0 - affinity: - podAntiAffinity: - preferredDuringSchedulingIgnoredDuringExecution: - - podAffinityTerm: - labelSelector: - matchLabels: - app.kubernetes.io/component: opentelemetry-collector - app.kubernetes.io/instance: 'default.agent' - topologyKey: kubernetes.io/hostname - weight: 100 - volumeMounts: - - name: varlogpods - mountPath: /var/log/pods - readOnly: true - - name: varlibdockercontainers - mountPath: /var/lib/docker/containers - readOnly: true - - mountPath: /var/lib/otelcol/agent - name: varlibotelcol - env: - - name: K8S_NODE_NAME - valueFrom: - fieldRef: - fieldPath: spec.nodeName - - name: OTEL_K8S_NODE_NAME - valueFrom: - fieldRef: - fieldPath: spec.nodeName - - name: OTEL_K8S_NODE_IP - valueFrom: - fieldRef: - fieldPath: status.hostIP - - name: OTEL_K8S_NAMESPACE - valueFrom: - fieldRef: - apiVersion: v1 - fieldPath: metadata.namespace - - name: OTEL_K8S_POD_NAME - valueFrom: - fieldRef: - apiVersion: v1 - fieldPath: metadata.name - - name: OTEL_K8S_POD_IP - valueFrom: - fieldRef: - apiVersion: v1 - fieldPath: status.podIP - - name: OTEL_RESOURCE_ATTRIBUTES - value: "k8s.pod.name=$(OTEL_K8S_POD_NAME),k8s.namespace.name=$(OTEL_K8S_NAMESPACE),k8s.node.name=$(OTEL_K8S_NODE_NAME),host.name=$(OTEL_K8S_NODE_NAME),k8s.node.ip=$(OTEL_K8S_NODE_IP),k8s.pod.ip=$(OTEL_K8S_POD_IP),k8s.cluster.name=demo" - - tolerations: - - effect: NoExecute - operator: Exists - - effect: NoSchedule - operator: Exists - - effect: PreferNoSchedule - operator: Exists - volumes: - - name: varlogpods - hostPath: - path: /var/log/pods - - name: varlibdockercontainers - hostPath: - path: /var/lib/docker/containers - - hostPath: - path: /var/lib/otelcol/agent - type: DirectoryOrCreate - name: varlibotelcol ---- -# Source: opentelemetry-kube-stack/templates/collector.yaml -apiVersion: opentelemetry.io/v1beta1 -kind: OpenTelemetryCollector -metadata: - name: gateway - namespace: default - labels: - helm.sh/chart: opentelemetry-kube-stack-0.16.0 - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - release: "example" -spec: - managementState: managed - mode: deployment - config: - exporters: - otlp: - endpoint: ingest.example.com:4318 - sending_queue: - storage: file_storage/queues - tls: - insecure: true - extensions: - file_storage/queues: - create_directory: true - directory: /var/lib/otelcol/gateway/queues - processors: - resource/common: - attributes: - - action: insert - key: k8s.cluster.name - value: 'demo' - receivers: - otlp: - protocols: - grpc: - endpoint: ${env:OTEL_K8S_POD_IP}:4317 - service: - extensions: - - file_storage/queues - pipelines: - logs: - exporters: - - otlp - processors: - - resource/common - receivers: - - otlp - metrics: - exporters: - - otlp - processors: - - resource/common - receivers: - - otlp - traces: - exporters: - - otlp - processors: - - resource/common - receivers: - - otlp - replicas: - imagePullPolicy: IfNotPresent - upgradeStrategy: automatic - terminationGracePeriodSeconds: 30 - resources: - limits: - cpu: "1" - memory: 2Gi - requests: - cpu: 500m - memory: 1Gi - securityContext: - runAsGroup: 0 - runAsUser: 0 - affinity: - podAntiAffinity: - preferredDuringSchedulingIgnoredDuringExecution: - - podAffinityTerm: - labelSelector: - matchLabels: - app.kubernetes.io/component: opentelemetry-collector - app.kubernetes.io/instance: 'default.gateway' - topologyKey: kubernetes.io/hostname - weight: 100 - volumeMounts: - - mountPath: /var/lib/otelcol/gateway - name: varlibotelcol - env: - - name: K8S_NODE_NAME - valueFrom: - fieldRef: - fieldPath: spec.nodeName - - name: OTEL_K8S_NODE_NAME - valueFrom: - fieldRef: - fieldPath: spec.nodeName - - name: OTEL_K8S_NODE_IP - valueFrom: - fieldRef: - fieldPath: status.hostIP - - name: OTEL_K8S_NAMESPACE - valueFrom: - fieldRef: - apiVersion: v1 - fieldPath: metadata.namespace - - name: OTEL_K8S_POD_NAME - valueFrom: - fieldRef: - apiVersion: v1 - fieldPath: metadata.name - - name: OTEL_K8S_POD_IP - valueFrom: - fieldRef: - apiVersion: v1 - fieldPath: status.podIP - - name: OTEL_RESOURCE_ATTRIBUTES - value: "k8s.pod.name=$(OTEL_K8S_POD_NAME),k8s.namespace.name=$(OTEL_K8S_NAMESPACE),k8s.node.name=$(OTEL_K8S_NODE_NAME),host.name=$(OTEL_K8S_NODE_NAME),k8s.node.ip=$(OTEL_K8S_NODE_IP),k8s.pod.ip=$(OTEL_K8S_POD_IP),k8s.cluster.name=demo" - - tolerations: - - effect: NoExecute - operator: Exists - - effect: NoSchedule - operator: Exists - - effect: PreferNoSchedule - operator: Exists - volumes: - - hostPath: - path: /var/lib/otelcol/gateway - type: DirectoryOrCreate - name: varlibotelcol ---- -# Source: opentelemetry-kube-stack/templates/collector.yaml -apiVersion: opentelemetry.io/v1beta1 -kind: OpenTelemetryCollector -metadata: - name: ingress - namespace: default - labels: - helm.sh/chart: opentelemetry-kube-stack-0.16.0 - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - release: "example" -spec: - managementState: managed - mode: deployment - config: - exporters: - otlp: - endpoint: gateway-collector.default.svc:4317 - sending_queue: - storage: file_storage/queues - tls: - insecure: true - extensions: - file_storage/queues: - create_directory: true - directory: /var/lib/otelcol/ingress/queues - oidc: - audience: 12345678-1234-5678-1234-567812345678 - issuer_url: https://login.microsoftonline.com/87654321-8765-4321-8765-432187654321/v2.0 - receivers: - otlp: - protocols: - http: - auth: - authenticator: oidc - endpoint: ${env:OTEL_K8S_POD_IP}:4318 - service: - extensions: - - file_storage/queues - - oidc - pipelines: - logs: - exporters: - - otlp - receivers: - - otlp - metrics: - exporters: - - otlp - receivers: - - otlp - traces: - exporters: - - otlp - receivers: - - otlp - replicas: - imagePullPolicy: IfNotPresent - upgradeStrategy: automatic - terminationGracePeriodSeconds: 30 - resources: - limits: - cpu: 200m - memory: 500Mi - requests: - cpu: 100m - memory: 250Mi - securityContext: - runAsGroup: 0 - runAsUser: 0 - affinity: - podAntiAffinity: - preferredDuringSchedulingIgnoredDuringExecution: - - podAffinityTerm: - labelSelector: - matchLabels: - app.kubernetes.io/component: opentelemetry-collector - app.kubernetes.io/instance: 'default.ingress' - topologyKey: kubernetes.io/hostname - weight: 100 - volumeMounts: - - mountPath: /var/lib/otelcol/ingress - name: varlibotelcol - env: - - name: K8S_NODE_NAME - valueFrom: - fieldRef: - fieldPath: spec.nodeName - - name: OTEL_K8S_NODE_NAME - valueFrom: - fieldRef: - fieldPath: spec.nodeName - - name: OTEL_K8S_NODE_IP - valueFrom: - fieldRef: - fieldPath: status.hostIP - - name: OTEL_K8S_NAMESPACE - valueFrom: - fieldRef: - apiVersion: v1 - fieldPath: metadata.namespace - - name: OTEL_K8S_POD_NAME - valueFrom: - fieldRef: - apiVersion: v1 - fieldPath: metadata.name - - name: OTEL_K8S_POD_IP - valueFrom: - fieldRef: - apiVersion: v1 - fieldPath: status.podIP - - name: OTEL_RESOURCE_ATTRIBUTES - value: "k8s.pod.name=$(OTEL_K8S_POD_NAME),k8s.namespace.name=$(OTEL_K8S_NAMESPACE),k8s.node.name=$(OTEL_K8S_NODE_NAME),host.name=$(OTEL_K8S_NODE_NAME),k8s.node.ip=$(OTEL_K8S_NODE_IP),k8s.pod.ip=$(OTEL_K8S_POD_IP),k8s.cluster.name=demo" - - tolerations: - - effect: NoExecute - operator: Exists - - effect: NoSchedule - operator: Exists - - effect: PreferNoSchedule - operator: Exists - volumes: - - hostPath: - path: /var/lib/otelcol/ingress - type: DirectoryOrCreate - name: varlibotelcol - diff --git a/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/hooks.yaml b/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/hooks.yaml deleted file mode 100644 index df09c1e80b..0000000000 --- a/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/hooks.yaml +++ /dev/null @@ -1,65 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/templates/hooks.yaml -apiVersion: v1 -kind: ServiceAccount -metadata: - name: delete-resources-sa - annotations: - "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded ---- -# Source: opentelemetry-kube-stack/templates/hooks.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - name: delete-resources-role - annotations: - "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded -rules: - - apiGroups: - - opentelemetry.io - resources: - - instrumentations - - opampbridges - - opentelemetrycollectors - verbs: - - get - - list - - delete ---- -# Source: opentelemetry-kube-stack/templates/hooks.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding -metadata: - name: delete-resources-rolebinding - annotations: - "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: delete-resources-role -subjects: - - kind: ServiceAccount - name: delete-resources-sa ---- -# Source: opentelemetry-kube-stack/templates/hooks.yaml -apiVersion: batch/v1 -kind: Job -metadata: - name: opentelemetry-kube-stack-pre-delete-job - annotations: - "helm.sh/hook": pre-delete - "helm.sh/hook-delete-policy": hook-succeeded,hook-failed -spec: - template: - spec: - restartPolicy: Never - serviceAccountName: delete-resources-sa - containers: - - name: delete-resources - image: "rancher/kubectl:v1.34.1" - args: - - "delete" - - "instrumentations,opampbridges,opentelemetrycollectors" - - "-l" - - "helm.sh/chart=opentelemetry-kube-stack-0.16.0" - diff --git a/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml b/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml deleted file mode 100644 index 17585fa86a..0000000000 --- a/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml +++ /dev/null @@ -1,193 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/admission-webhooks/operator-webhook-with-cert-manager.yaml -apiVersion: admissionregistration.k8s.io/v1 -kind: MutatingWebhookConfiguration -metadata: - annotations: - cert-manager.io/inject-ca-from: default/example-opentelemetry-operator-serving-cert - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: webhook - name: example-opentelemetry-operator-mutation -webhooks: - - admissionReviewVersions: - - v1 - clientConfig: - service: - name: example-opentelemetry-operator-webhook - namespace: default - path: /mutate-opentelemetry-io-v1alpha1-instrumentation - port: 443 - failurePolicy: Ignore - name: minstrumentation.kb.io - rules: - - apiGroups: - - opentelemetry.io - apiVersions: - - v1alpha1 - operations: - - CREATE - - UPDATE - resources: - - instrumentations - scope: Namespaced - sideEffects: None - timeoutSeconds: 10 - - admissionReviewVersions: - - v1 - clientConfig: - service: - name: example-opentelemetry-operator-webhook - namespace: default - path: /mutate-opentelemetry-io-v1beta1-opentelemetrycollector - port: 443 - failurePolicy: Ignore - name: mopentelemetrycollectorbeta.kb.io - rules: - - apiGroups: - - opentelemetry.io - apiVersions: - - v1beta1 - operations: - - CREATE - - UPDATE - resources: - - opentelemetrycollectors - scope: Namespaced - sideEffects: None - timeoutSeconds: 10 - - admissionReviewVersions: - - v1 - clientConfig: - service: - name: example-opentelemetry-operator-webhook - namespace: default - path: /mutate-v1-pod - port: 443 - failurePolicy: Ignore - name: mpod.kb.io - rules: - - apiGroups: - - "" - apiVersions: - - v1 - operations: - - CREATE - resources: - - pods - scope: Namespaced - sideEffects: None - timeoutSeconds: 10 ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/admission-webhooks/operator-webhook-with-cert-manager.yaml -apiVersion: admissionregistration.k8s.io/v1 -kind: ValidatingWebhookConfiguration -metadata: - annotations: - cert-manager.io/inject-ca-from: default/example-opentelemetry-operator-serving-cert - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: webhook - name: example-opentelemetry-operator-validation -webhooks: - - admissionReviewVersions: - - v1 - clientConfig: - service: - name: example-opentelemetry-operator-webhook - namespace: default - path: /validate-opentelemetry-io-v1alpha1-instrumentation - port: 443 - failurePolicy: Ignore - name: vinstrumentationcreateupdate.kb.io - rules: - - apiGroups: - - opentelemetry.io - apiVersions: - - v1alpha1 - operations: - - CREATE - - UPDATE - resources: - - instrumentations - scope: Namespaced - sideEffects: None - timeoutSeconds: 10 - - admissionReviewVersions: - - v1 - clientConfig: - service: - name: example-opentelemetry-operator-webhook - namespace: default - path: /validate-opentelemetry-io-v1alpha1-instrumentation - port: 443 - failurePolicy: Ignore - name: vinstrumentationdelete.kb.io - rules: - - apiGroups: - - opentelemetry.io - apiVersions: - - v1alpha1 - operations: - - DELETE - resources: - - instrumentations - scope: Namespaced - sideEffects: None - timeoutSeconds: 10 - - admissionReviewVersions: - - v1 - clientConfig: - service: - name: example-opentelemetry-operator-webhook - namespace: default - path: /validate-opentelemetry-io-v1beta1-opentelemetrycollector - port: 443 - failurePolicy: Ignore - name: vopentelemetrycollectorcreateupdatebeta.kb.io - rules: - - apiGroups: - - opentelemetry.io - apiVersions: - - v1beta1 - operations: - - CREATE - - UPDATE - resources: - - opentelemetrycollectors - scope: Namespaced - sideEffects: None - timeoutSeconds: 10 - - admissionReviewVersions: - - v1 - clientConfig: - service: - name: example-opentelemetry-operator-webhook - namespace: default - path: /validate-opentelemetry-io-v1beta1-opentelemetrycollector - port: 443 - failurePolicy: Ignore - name: vopentelemetrycollectordeletebeta.kb.io - rules: - - apiGroups: - - opentelemetry.io - apiVersions: - - v1beta1 - operations: - - DELETE - resources: - - opentelemetrycollectors - scope: Namespaced - sideEffects: None - timeoutSeconds: 10 - diff --git a/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/admission-webhooks/operator-webhook.yaml b/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/admission-webhooks/operator-webhook.yaml deleted file mode 100644 index 5b9ff5511d..0000000000 --- a/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/admission-webhooks/operator-webhook.yaml +++ /dev/null @@ -1,3 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/admission-webhooks/operator-webhook.yaml ---- diff --git a/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/certmanager.yaml b/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/certmanager.yaml deleted file mode 100644 index e8615238d0..0000000000 --- a/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/certmanager.yaml +++ /dev/null @@ -1,44 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/certmanager.yaml -apiVersion: cert-manager.io/v1 -kind: Certificate -metadata: - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: webhook - name: example-opentelemetry-operator-serving-cert - namespace: default -spec: - dnsNames: - - example-opentelemetry-operator-webhook.default.svc - - example-opentelemetry-operator-webhook.default.svc.cluster.local - issuerRef: - kind: Issuer - name: example-opentelemetry-operator-selfsigned-issuer - secretName: example-opentelemetry-operator-controller-manager-service-cert - subject: - organizationalUnits: - - example-opentelemetry-operator ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/certmanager.yaml -apiVersion: cert-manager.io/v1 -kind: Issuer -metadata: - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: webhook - name: example-opentelemetry-operator-selfsigned-issuer - namespace: default -spec: - selfSigned: {} - diff --git a/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/clusterrole.yaml b/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/clusterrole.yaml deleted file mode 100644 index 2037050533..0000000000 --- a/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/clusterrole.yaml +++ /dev/null @@ -1,410 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/clusterrole.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: controller-manager - name: example-opentelemetry-operator-manager -rules: - - apiGroups: - - "" - resources: - - configmaps - - persistentvolumeclaims - - persistentvolumes - - pods - - serviceaccounts - - services - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - "" - resources: - - events - verbs: - - create - - get - - list - - patch - - watch - - apiGroups: - - "" - resources: - - namespaces - verbs: - - list - - watch - - apiGroups: - - "" - resources: - - namespaces/status - verbs: - - get - - list - - watch - - apiGroups: - - "" - resources: - - nodes/spec - verbs: - - get - - list - - watch - - apiGroups: - - "" - resources: - - pods/status - verbs: - - get - - list - - watch - - apiGroups: - - "" - resources: - - replicationcontrollers - verbs: - - get - - list - - watch - - apiGroups: - - "" - resources: - - replicationcontrollers/status - verbs: - - get - - list - - watch - - apiGroups: - - "" - resources: - - resourcequotas - verbs: - - get - - list - - watch - - apiGroups: - - apps - resources: - - daemonsets - - deployments - - statefulsets - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - apps - - extensions - resources: - - replicasets - verbs: - - get - - list - - watch - - apiGroups: - - extensions - resources: - - daemonsets - verbs: - - get - - list - - watch - - apiGroups: - - extensions - resources: - - deployments - verbs: - - get - - list - - watch - - apiGroups: - - autoscaling - resources: - - horizontalpodautoscalers - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - batch - resources: - - jobs - verbs: - - get - - list - - watch - - apiGroups: - - batch - resources: - - cronjobs - verbs: - - get - - list - - watch - - apiGroups: - - "" - resources: - - nodes/proxy - verbs: - - get - - apiGroups: - - "" - resources: - - nodes/stats - verbs: - - get - - apiGroups: - - config.openshift.io - resources: - - infrastructures - - infrastructures/status - verbs: - - get - - list - - watch - - apiGroups: - - coordination.k8s.io - resources: - - leases - verbs: - - create - - get - - list - - update - - apiGroups: - - discovery.k8s.io - resources: - - endpointslices - verbs: - - get - - list - - apiGroups: - - events.k8s.io - resources: - - events - verbs: - - create - - list - - patch - - watch - - apiGroups: - - gateway.networking.k8s.io - resources: - - httproutes - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - monitoring.coreos.com - resources: - - podmonitors - - servicemonitors - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - networking.k8s.io - resources: - - ingresses - - networkpolicies - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - opentelemetry.io - resources: - - instrumentations - verbs: - - get - - list - - patch - - update - - watch - - apiGroups: - - opentelemetry.io - resources: - - opampbridges - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - opentelemetry.io - resources: - - opampbridges/finalizers - verbs: - - update - - apiGroups: - - opentelemetry.io - resources: - - opampbridges/status - verbs: - - get - - patch - - update - - apiGroups: - - opentelemetry.io - resources: - - opentelemetrycollectors - verbs: - - get - - list - - patch - - update - - watch - - apiGroups: - - opentelemetry.io - resources: - - opentelemetrycollectors/finalizers - verbs: - - get - - patch - - update - - apiGroups: - - opentelemetry.io - resources: - - opentelemetrycollectors/status - verbs: - - get - - patch - - update - - apiGroups: - - policy - resources: - - poddisruptionbudgets - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - route.openshift.io - resources: - - routes - - routes/custom-host - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - opentelemetry.io - resources: - - targetallocators - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - opentelemetry.io - resources: - - targetallocators/status - verbs: - - get - - patch - - update - - apiGroups: - - opentelemetry.io - resources: - - targetallocators/finalizers - verbs: - - get - - patch - - update - - apiGroups: - - cert-manager.io - resources: - - issuers - - certificaterequests - - certificates - verbs: - - create - - get - - list - - watch - - update - - patch - - delete - - apiGroups: - - authentication.k8s.io - resources: - - tokenreviews - verbs: - - create - - apiGroups: - - authorization.k8s.io - resources: - - subjectaccessreviews - verbs: - - create ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/clusterrole.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: controller-manager - name: example-opentelemetry-operator-metrics -rules: - - nonResourceURLs: - - /metrics - verbs: - - get - - diff --git a/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/clusterrolebinding.yaml b/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/clusterrolebinding.yaml deleted file mode 100644 index 4acb7d53f5..0000000000 --- a/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/clusterrolebinding.yaml +++ /dev/null @@ -1,24 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/clusterrolebinding.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding -metadata: - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: controller-manager - name: example-opentelemetry-operator-manager -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: example-opentelemetry-operator-manager -subjects: - - kind: ServiceAccount - name: opentelemetry-operator - namespace: default - - diff --git a/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/deployment.yaml b/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/deployment.yaml deleted file mode 100644 index c775cd1cf3..0000000000 --- a/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/deployment.yaml +++ /dev/null @@ -1,105 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/deployment.yaml -apiVersion: apps/v1 -kind: Deployment -metadata: - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: controller-manager - name: example-opentelemetry-operator - namespace: default -spec: - replicas: 1 - revisionHistoryLimit: 10 - selector: - matchLabels: - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/component: controller-manager - template: - metadata: - annotations: - kubectl.kubernetes.io/default-container: manager - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: controller-manager - spec: - automountServiceAccountToken: true - hostNetwork: false - containers: - - args: - - --metrics-addr=0.0.0.0:8443 - - --metrics-secure=true - - --enable-leader-election - - --health-probe-addr=:8081 - - --webhook-port=9443 - - --collector-image=otel/opentelemetry-collector-k8s:0.151.0 - command: - - /manager - env: - - name: SERVICE_ACCOUNT_NAME - valueFrom: - fieldRef: - fieldPath: spec.serviceAccountName - - name: ENABLE_WEBHOOKS - value: "true" - image: "ghcr.io/open-telemetry/opentelemetry-operator/opentelemetry-operator:0.151.0" - name: manager - imagePullPolicy: IfNotPresent - ports: - - containerPort: 8443 - name: metrics - protocol: TCP - - containerPort: 9443 - name: webhook-server - protocol: TCP - livenessProbe: - httpGet: - path: /healthz - port: 8081 - initialDelaySeconds: 15 - periodSeconds: 20 - readinessProbe: - httpGet: - path: /readyz - port: 8081 - initialDelaySeconds: 5 - periodSeconds: 10 - resources: - {} - volumeMounts: - - mountPath: /tmp/k8s-webhook-server/serving-certs - name: cert - readOnly: true - securityContext: - allowPrivilegeEscalation: false - capabilities: - drop: - - ALL - runAsNonRoot: true - seccompProfile: - type: RuntimeDefault - nodeSelector: - kubernetes.io/os: linux - serviceAccountName: opentelemetry-operator - terminationGracePeriodSeconds: 10 - volumes: - - name: cert - secret: - defaultMode: 420 - secretName: example-opentelemetry-operator-controller-manager-service-cert - securityContext: - fsGroup: 65532 - runAsGroup: 65532 - runAsNonRoot: true - runAsUser: 65532 - diff --git a/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/role.yaml b/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/role.yaml deleted file mode 100644 index b5339517a2..0000000000 --- a/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/role.yaml +++ /dev/null @@ -1,200 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/role.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: controller-manager - name: example-opentelemetry-operator-leader-election - namespace: default -rules: - - apiGroups: - - "" - resources: - - configmaps - - pods - - serviceaccounts - - services - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - "" - resources: - - events - verbs: - - create - - patch - - apiGroups: - - "" - resources: - - namespaces - - secrets - verbs: - - get - - list - - watch - - apiGroups: - - apps - resources: - - daemonsets - - deployments - - statefulsets - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - apps - resources: - - replicasets - verbs: - - get - - list - - watch - - apiGroups: - - autoscaling - resources: - - horizontalpodautoscalers - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - batch - resources: - - jobs - verbs: - - get - - list - - watch - - apiGroups: - - config.openshift.io - resources: - - infrastructures - - infrastructures/status - verbs: - - get - - list - - watch - - apiGroups: - - coordination.k8s.io - resources: - - leases - verbs: - - create - - get - - list - - update - - apiGroups: - - monitoring.coreos.com - resources: - - podmonitors - - servicemonitors - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - networking.k8s.io - resources: - - ingresses - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - opentelemetry.io - resources: - - instrumentations - - opentelemetrycollectors - verbs: - - get - - list - - patch - - update - - watch - - apiGroups: - - opentelemetry.io - resources: - - opampbridges - - targetallocators - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - opentelemetry.io - resources: - - opampbridges/finalizers - verbs: - - update - - apiGroups: - - opentelemetry.io - resources: - - opampbridges/status - - opentelemetrycollectors/finalizers - - opentelemetrycollectors/status - - targetallocators/status - - targetallocators/finalizers - verbs: - - get - - patch - - update - - apiGroups: - - policy - resources: - - poddisruptionbudgets - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - route.openshift.io - resources: - - routes - - routes/custom-host - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - diff --git a/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/rolebinding.yaml b/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/rolebinding.yaml deleted file mode 100644 index ae376e80c9..0000000000 --- a/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/rolebinding.yaml +++ /dev/null @@ -1,24 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/rolebinding.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding -metadata: - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: controller-manager - name: example-opentelemetry-operator-leader-election - namespace: default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: example-opentelemetry-operator-leader-election -subjects: - - kind: ServiceAccount - name: opentelemetry-operator - namespace: default - diff --git a/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/service.yaml b/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/service.yaml deleted file mode 100644 index 0a3006d80f..0000000000 --- a/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/service.yaml +++ /dev/null @@ -1,48 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/service.yaml -apiVersion: v1 -kind: Service -metadata: - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: controller-manager - name: example-opentelemetry-operator - namespace: default -spec: - ports: - - name: metrics - port: 8443 - protocol: TCP - targetPort: metrics - selector: - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/component: controller-manager ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/service.yaml -apiVersion: v1 -kind: Service -metadata: - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: controller-manager - name: example-opentelemetry-operator-webhook - namespace: default -spec: - ports: - - port: 443 - protocol: TCP - targetPort: webhook-server - selector: - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/component: controller-manager - diff --git a/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/serviceaccount.yaml b/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/serviceaccount.yaml deleted file mode 100644 index c6ba25dbac..0000000000 --- a/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/serviceaccount.yaml +++ /dev/null @@ -1,17 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/serviceaccount.yaml -apiVersion: v1 -kind: ServiceAccount -automountServiceAccountToken: true -metadata: - name: opentelemetry-operator - namespace: default - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: controller-manager - diff --git a/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml b/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml deleted file mode 100644 index 9039160e03..0000000000 --- a/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml +++ /dev/null @@ -1,54 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/tests/test-certmanager-connection.yaml -apiVersion: v1 -kind: Pod -metadata: - name: "example-opentelemetry-operator-cert-manager" - namespace: default - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: webhook - annotations: - "helm.sh/hook": test -spec: - containers: - - name: wget - image: "busybox:latest" - env: - - name: CERT_MANAGER_CLUSTERIP - value: "cert-manager-webhook" - - name: CERT_MANAGER_PORT - value: "443" - command: - - sh - - -c - # The following shell script tests if the cert-manager service is up. If the service is up, when we try - # to wget its exposed port, we will get an HTTP error 400. - - | - wget_output=$(wget -q "$CERT_MANAGER_CLUSTERIP:$CERT_MANAGER_PORT") - if wget_output=="wget: server returned error: HTTP/1.0 400 Bad Request" - then exit 0 - else exit 1 - fi - securityContext: - allowPrivilegeEscalation: false - capabilities: - drop: - - ALL - runAsNonRoot: true - seccompProfile: - type: RuntimeDefault - restartPolicy: Never - nodeSelector: - kubernetes.io/os: linux - securityContext: - fsGroup: 65532 - runAsGroup: 65532 - runAsNonRoot: true - runAsUser: 65532 - diff --git a/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/tests/test-service-connection.yaml b/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/tests/test-service-connection.yaml deleted file mode 100644 index 88e0e0bc24..0000000000 --- a/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/tests/test-service-connection.yaml +++ /dev/null @@ -1,107 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/tests/test-service-connection.yaml -apiVersion: v1 -kind: Pod -metadata: - name: "example-opentelemetry-operator-metrics" - namespace: default - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: controller-manager - annotations: - "helm.sh/hook": test -spec: - containers: - - name: wget - image: "busybox:latest" - env: - - name: MANAGER_METRICS_SERVICE_CLUSTERIP - value: "example-opentelemetry-operator" - - name: MANAGER_METRICS_SERVICE_PORT - value: "8443" - command: - - sh - - -c - # The following shell script tests if the controller-manager-metrics-service is up. - # If the service is up, when we try to wget its exposed port, we will get an HTTP error 400. - - | - wget_output=$(wget -q "$MANAGER_METRICS_SERVICE_CLUSTERIP:$MANAGER_METRICS_SERVICE_PORT") - if wget_output=="wget: server returned error: HTTP/1.0 400 Bad Request" - then exit 0 - else exit 1 - fi - securityContext: - allowPrivilegeEscalation: false - capabilities: - drop: - - ALL - runAsNonRoot: true - seccompProfile: - type: RuntimeDefault - restartPolicy: Never - nodeSelector: - kubernetes.io/os: linux - securityContext: - fsGroup: 65532 - runAsGroup: 65532 - runAsNonRoot: true - runAsUser: 65532 ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/tests/test-service-connection.yaml -apiVersion: v1 -kind: Pod -metadata: - name: "example-opentelemetry-operator-webhook" - namespace: default - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: controller-manager - annotations: - "helm.sh/hook": test -spec: - containers: - - name: wget - image: "busybox:latest" - env: - - name: WEBHOOK_SERVICE_CLUSTERIP - value: "example-opentelemetry-operator-webhook" - - name: WEBHOOK_SERVICE_PORT - value: "443" - command: - - sh - - -c - # The following shell script tests if the webhook service is up. If the service is up, when we try - # to wget its exposed port, we will get an HTTP error 400. - - | - wget_output=$(wget -q "$WEBHOOK_SERVICE_CLUSTERIP:$WEBHOOK_SERVICE_PORT") - if wget_output=="wget: server returned error: HTTP/1.0 400 Bad Request" - then exit 0 - else exit 1 - fi - securityContext: - allowPrivilegeEscalation: false - capabilities: - drop: - - ALL - runAsNonRoot: true - seccompProfile: - type: RuntimeDefault - restartPolicy: Never - nodeSelector: - kubernetes.io/os: linux - securityContext: - fsGroup: 65532 - runAsGroup: 65532 - runAsNonRoot: true - runAsUser: 65532 - diff --git a/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/clusterrole.yaml b/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/clusterrole.yaml deleted file mode 100644 index e936bf24d8..0000000000 --- a/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/clusterrole.yaml +++ /dev/null @@ -1,144 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/templates/clusterrole.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - name: example-collector -rules: -- apiGroups: [""] - resources: - - namespaces - - nodes - - nodes/proxy - - nodes/metrics - - nodes/stats - - services - - endpoints - - pods - - events - - secrets - - persistentvolumeclaims - - persistentvolumes - verbs: ["get", "list", "watch"] -- apiGroups: ["monitoring.coreos.com"] - resources: - - servicemonitors - - podmonitors - - scrapeconfigs - - probes - verbs: ["get", "list", "watch"] -- apiGroups: - - extensions - resources: - - ingresses - verbs: ["get", "list", "watch"] -- apiGroups: - - apps - resources: - - daemonsets - - deployments - - replicasets - - statefulsets - verbs: ["get", "list", "watch"] -- apiGroups: - - networking.k8s.io - resources: - - ingresses - verbs: ["get", "list", "watch"] -- apiGroups: ["discovery.k8s.io"] - resources: - - endpointslices - verbs: ["get", "list", "watch"] -- nonResourceURLs: ["/metrics", "/metrics/cadvisor"] - verbs: ["get"] - -- apiGroups: - - "" - resources: - - events - - namespaces - - namespaces/status - - nodes - - nodes/spec - - pods - - pods/status - - replicationcontrollers - - replicationcontrollers/status - - resourcequotas - - services - verbs: - - get - - list - - watch -- apiGroups: - - apps - resources: - - daemonsets - - deployments - - replicasets - - statefulsets - verbs: - - get - - list - - watch -- apiGroups: - - extensions - resources: - - daemonsets - - deployments - - replicasets - verbs: - - get - - list - - watch -- apiGroups: - - batch - resources: - - jobs - - cronjobs - verbs: - - get - - list - - watch -- apiGroups: - - autoscaling - resources: - - horizontalpodautoscalers - verbs: - - get - - list - - watch -- apiGroups: ["events.k8s.io"] - resources: ["events"] - verbs: ["watch", "list"] ---- -# Source: opentelemetry-kube-stack/templates/clusterrole.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding -metadata: - name: example-cluster-stats -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: example-collector -subjects: -- kind: ServiceAccount - # quirk of the Operator - name: "example-cluster-stats-collector" - namespace: default ---- -# Source: opentelemetry-kube-stack/templates/clusterrole.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding -metadata: - name: example-daemon -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: example-collector -subjects: -- kind: ServiceAccount - # quirk of the Operator - name: "example-daemon-collector" - namespace: default - diff --git a/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/collector.yaml b/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/collector.yaml deleted file mode 100644 index 42d52cdd0f..0000000000 --- a/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/collector.yaml +++ /dev/null @@ -1,647 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/templates/collector.yaml -apiVersion: opentelemetry.io/v1beta1 -kind: OpenTelemetryCollector -metadata: - name: example-cluster-stats - namespace: default - labels: - helm.sh/chart: opentelemetry-kube-stack-0.16.0 - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - release: "example" -spec: - managementState: managed - mode: deployment - config: - exporters: - debug: {} - processors: - batch: - send_batch_max_size: 1500 - send_batch_size: 1000 - timeout: 1s - k8sattributes: - extract: - labels: - - from: pod - key: app.kubernetes.io/instance - tag_name: k8s.app.instance - - from: pod - key: app.kubernetes.io/component - tag_name: k8s.app.component - metadata: - - k8s.namespace.name - - k8s.pod.name - - k8s.pod.uid - - k8s.node.name - - k8s.pod.start_time - - k8s.deployment.name - - k8s.replicaset.name - - k8s.replicaset.uid - - k8s.daemonset.name - - k8s.daemonset.uid - - k8s.job.name - - k8s.job.uid - - k8s.container.name - - k8s.cronjob.name - - k8s.statefulset.name - - k8s.statefulset.uid - - container.image.tag - - container.image.name - - k8s.cluster.uid - - service.namespace - - service.name - - service.version - - service.instance.id - otel_annotations: true - passthrough: false - pod_association: - - sources: - - from: resource_attribute - name: k8s.pod.uid - - sources: - - from: resource_attribute - name: k8s.pod.name - - from: resource_attribute - name: k8s.namespace.name - - from: resource_attribute - name: k8s.node.name - - sources: - - from: resource_attribute - name: k8s.pod.ip - - sources: - - from: resource_attribute - name: k8s.pod.name - - from: resource_attribute - name: k8s.namespace.name - - sources: - - from: connection - resourcedetection/env: - detectors: - - env - override: false - timeout: 2s - receivers: - k8s_cluster: - allocatable_types_to_report: - - cpu - - memory - - storage - auth_type: serviceAccount - collection_interval: 10s - node_conditions_to_report: - - Ready - - MemoryPressure - - DiskPressure - - NetworkUnavailable - k8sobjects: - objects: - - exclude_watch_type: - - DELETED - group: events.k8s.io - mode: watch - name: events - service: - pipelines: - logs: - exporters: - - debug - processors: - - k8sattributes - - resourcedetection/env - - batch - receivers: - - k8sobjects - metrics: - exporters: - - debug - processors: - - k8sattributes - - resourcedetection/env - - batch - receivers: - - k8s_cluster - replicas: 1 - imagePullPolicy: IfNotPresent - upgradeStrategy: automatic - terminationGracePeriodSeconds: 30 - resources: - limits: - cpu: 200m - memory: 500Mi - requests: - cpu: 100m - memory: 250Mi - securityContext: - {} - env: - - name: K8S_NODE_NAME - valueFrom: - fieldRef: - fieldPath: spec.nodeName - - name: OTEL_K8S_NODE_NAME - valueFrom: - fieldRef: - fieldPath: spec.nodeName - - name: OTEL_K8S_NODE_IP - valueFrom: - fieldRef: - fieldPath: status.hostIP - - name: OTEL_K8S_NAMESPACE - valueFrom: - fieldRef: - apiVersion: v1 - fieldPath: metadata.namespace - - name: OTEL_K8S_POD_NAME - valueFrom: - fieldRef: - apiVersion: v1 - fieldPath: metadata.name - - name: OTEL_K8S_POD_IP - valueFrom: - fieldRef: - apiVersion: v1 - fieldPath: status.podIP - - name: OTEL_RESOURCE_ATTRIBUTES - value: "k8s.pod.name=$(OTEL_K8S_POD_NAME),k8s.namespace.name=$(OTEL_K8S_NAMESPACE),k8s.node.name=$(OTEL_K8S_NODE_NAME),host.name=$(OTEL_K8S_NODE_NAME),k8s.node.ip=$(OTEL_K8S_NODE_IP),k8s.pod.ip=$(OTEL_K8S_POD_IP),k8s.cluster.name=unknown_k8s_cluster" ---- -# Source: opentelemetry-kube-stack/templates/collector.yaml -apiVersion: opentelemetry.io/v1beta1 -kind: OpenTelemetryCollector -metadata: - name: example-daemon - namespace: default - labels: - helm.sh/chart: opentelemetry-kube-stack-0.16.0 - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - release: "example" -spec: - managementState: managed - mode: daemonset - config: - exporters: - debug: {} - processors: - batch: - send_batch_max_size: 1500 - send_batch_size: 1000 - timeout: 1s - k8sattributes: - extract: - labels: - - from: pod - key: app.kubernetes.io/instance - tag_name: k8s.app.instance - - from: pod - key: app.kubernetes.io/component - tag_name: k8s.app.component - metadata: - - k8s.namespace.name - - k8s.pod.name - - k8s.pod.uid - - k8s.node.name - - k8s.pod.start_time - - k8s.deployment.name - - k8s.replicaset.name - - k8s.replicaset.uid - - k8s.daemonset.name - - k8s.daemonset.uid - - k8s.job.name - - k8s.job.uid - - k8s.container.name - - k8s.cronjob.name - - k8s.statefulset.name - - k8s.statefulset.uid - - container.image.tag - - container.image.name - - k8s.cluster.uid - - service.namespace - - service.name - - service.version - - service.instance.id - otel_annotations: true - filter: - node_from_env_var: OTEL_K8S_NODE_NAME - passthrough: false - pod_association: - - sources: - - from: resource_attribute - name: k8s.pod.uid - - sources: - - from: resource_attribute - name: k8s.pod.name - - from: resource_attribute - name: k8s.namespace.name - - from: resource_attribute - name: k8s.node.name - - sources: - - from: resource_attribute - name: k8s.pod.ip - - sources: - - from: resource_attribute - name: k8s.pod.name - - from: resource_attribute - name: k8s.namespace.name - - sources: - - from: connection - resource/hostname: - attributes: - - action: insert - from_attribute: k8s.node.name - key: host.name - resourcedetection/env: - detectors: - - env - - k8snode - override: false - timeout: 2s - receivers: - filelog: - exclude: [] - include: - - /var/log/pods/*/*/*.log - include_file_name: false - include_file_path: true - operators: - - id: container-parser - max_log_size: 102400 - type: container - retry_on_failure: - enabled: true - start_at: end - hostmetrics: - collection_interval: 10s - root_path: /hostfs - scrapers: - cpu: - metrics: - system.cpu.logical.count: - enabled: true - system.cpu.utilization: - enabled: true - disk: {} - filesystem: - exclude_fs_types: - fs_types: - - autofs - - binfmt_misc - - bpf - - cgroup2 - - configfs - - debugfs - - devpts - - devtmpfs - - fusectl - - hugetlbfs - - iso9660 - - mqueue - - nsfs - - overlay - - proc - - procfs - - pstore - - rpc_pipefs - - securityfs - - selinuxfs - - squashfs - - sysfs - - tracefs - match_type: strict - exclude_mount_points: - match_type: regexp - mount_points: - - /dev/* - - /proc/* - - /sys/* - - /run/k3s/containerd/* - - /var/lib/docker/* - - /var/lib/kubelet/* - - /snap/* - metrics: - system.filesystem.utilization: - enabled: true - load: {} - memory: - metrics: - system.memory.limit: - enabled: true - system.memory.utilization: - enabled: true - network: {} - paging: - metrics: - system.paging.usage: - enabled: true - system: - metrics: - system.uptime: - enabled: true - kubeletstats: - auth_type: serviceAccount - collection_interval: 15s - endpoint: https://${env:OTEL_K8S_NODE_IP}:10250 - extra_metadata_labels: - - container.id - - k8s.volume.type - insecure_skip_verify: true - k8s_api_config: - auth_type: serviceAccount - metric_groups: - - node - - pod - - volume - - container - metrics: - container.cpu.usage: - enabled: true - k8s.node.cpu.usage: - enabled: true - k8s.node.uptime: - enabled: true - k8s.pod.cpu.usage: - enabled: true - k8s.pod.uptime: - enabled: true - otlp: - protocols: - grpc: - endpoint: 0.0.0.0:4317 - http: - endpoint: 0.0.0.0:4318 - prometheus: - config: - scrape_configs: - - job_name: kubernetes-pods - kubernetes_sd_configs: - - role: pod - selectors: - - field: spec.nodeName=${env:OTEL_K8S_NODE_NAME} - role: pod - relabel_configs: - - action: keep - regex: true - source_labels: - - __meta_kubernetes_pod_annotation_prometheus_io_scrape - - action: drop - regex: true - source_labels: - - __meta_kubernetes_pod_annotation_prometheus_io_scrape_slow - - action: replace - regex: (https?) - source_labels: - - __meta_kubernetes_pod_annotation_prometheus_io_scheme - target_label: __scheme__ - - action: replace - regex: (.+) - source_labels: - - __meta_kubernetes_pod_annotation_prometheus_io_path - target_label: __metrics_path__ - - action: replace - regex: ([^:]+)(?::\d+)?;(\d+) - replacement: $$1:$$2 - source_labels: - - __address__ - - __meta_kubernetes_pod_annotation_prometheus_io_port - target_label: __address__ - - action: labelmap - regex: __meta_kubernetes_pod_annotation_prometheus_io_param_(.+) - replacement: __param_$$1 - - action: labelmap - regex: __meta_kubernetes_pod_label_(.+) - - action: replace - source_labels: - - __meta_kubernetes_namespace - target_label: namespace - - action: replace - source_labels: - - __meta_kubernetes_pod_name - target_label: pod - - action: drop - regex: Pending|Succeeded|Failed|Completed - source_labels: - - __meta_kubernetes_pod_phase - - action: replace - source_labels: - - __meta_kubernetes_pod_label_app_kubernetes_io_name - target_label: job - scrape_interval: 30s - - job_name: node-exporter - relabel_configs: - - action: labelmap - regex: __meta_kubernetes_node_label_(.+) - - action: replace - regex: (.*) - replacement: $$1 - separator: ; - source_labels: - - job - target_label: __tmp_prometheus_job_name - scrape_interval: 30s - static_configs: - - targets: - - ${env:OTEL_K8S_NODE_IP}:9100 - - authorization: - credentials_file: /var/run/secrets/kubernetes.io/serviceaccount/token - type: Bearer - follow_redirects: true - honor_labels: true - honor_timestamps: true - job_name: kubelet - kubernetes_sd_configs: - - follow_redirects: true - role: node - selectors: - - field: metadata.name=${env:OTEL_K8S_NODE_NAME} - role: node - metric_relabel_configs: - - action: drop - regex: container_cpu_(load_average_10s|system_seconds_total|user_seconds_total) - replacement: $$1 - separator: ; - source_labels: - - __name__ - - action: drop - regex: container_fs_(io_current|reads_merged_total|sector_reads_total|sector_writes_total|writes_merged_total) - replacement: $$1 - separator: ; - source_labels: - - __name__ - - action: drop - regex: container_memory_(mapped_file|swap) - replacement: $$1 - separator: ; - source_labels: - - __name__ - - action: drop - regex: container_(file_descriptors|tasks_state|threads_max) - replacement: $$1 - separator: ; - source_labels: - - __name__ - - action: drop - regex: container_spec.* - replacement: $$1 - separator: ; - source_labels: - - __name__ - - action: drop - regex: .+; - replacement: $$1 - separator: ; - source_labels: - - id - - pod - metrics_path: /metrics/cadvisor - relabel_configs: - - action: replace - regex: (.*) - replacement: $$1 - separator: ; - source_labels: - - job - target_label: __tmp_prometheus_job_name - - action: replace - replacement: kubelet - target_label: job - - action: replace - regex: (.*) - replacement: $$1 - separator: ; - source_labels: - - __meta_kubernetes_node_name - target_label: node - - action: replace - regex: (.*) - replacement: https-metrics - separator: ; - target_label: endpoint - - action: replace - regex: (.*) - replacement: $$1 - separator: ; - source_labels: - - __metrics_path__ - target_label: metrics_path - - action: hashmod - modulus: 1 - regex: (.*) - replacement: $$1 - separator: ; - source_labels: - - __address__ - target_label: __tmp_hash - - action: keep - regex: $(SHARD) - replacement: $$1 - separator: ; - source_labels: - - __tmp_hash - scheme: https - scrape_interval: 15s - scrape_timeout: 10s - tls_config: - ca_file: /var/run/secrets/kubernetes.io/serviceaccount/ca.crt - insecure_skip_verify: true - service: - pipelines: - logs: - exporters: - - debug - processors: - - k8sattributes - - resourcedetection/env - - resource/hostname - - batch - receivers: - - otlp - - filelog - metrics: - exporters: - - debug - processors: - - k8sattributes - - resourcedetection/env - - resource/hostname - - batch - receivers: - - prometheus - - otlp - - hostmetrics - - kubeletstats - traces: - exporters: - - debug - processors: - - k8sattributes - - resourcedetection/env - - resource/hostname - - batch - receivers: - - otlp - imagePullPolicy: IfNotPresent - upgradeStrategy: automatic - terminationGracePeriodSeconds: 30 - resources: - limits: - cpu: 200m - memory: 500Mi - requests: - cpu: 100m - memory: 250Mi - securityContext: - {} - volumeMounts: - - name: varlogpods - mountPath: /var/log/pods - readOnly: true - - name: varlibdockercontainers - mountPath: /var/lib/docker/containers - readOnly: true - - name: hostfs - mountPath: /hostfs - readOnly: true - mountPropagation: HostToContainer - env: - - name: K8S_NODE_NAME - valueFrom: - fieldRef: - fieldPath: spec.nodeName - - name: OTEL_K8S_NODE_NAME - valueFrom: - fieldRef: - fieldPath: spec.nodeName - - name: OTEL_K8S_NODE_IP - valueFrom: - fieldRef: - fieldPath: status.hostIP - - name: OTEL_K8S_NAMESPACE - valueFrom: - fieldRef: - apiVersion: v1 - fieldPath: metadata.namespace - - name: OTEL_K8S_POD_NAME - valueFrom: - fieldRef: - apiVersion: v1 - fieldPath: metadata.name - - name: OTEL_K8S_POD_IP - valueFrom: - fieldRef: - apiVersion: v1 - fieldPath: status.podIP - - name: OTEL_RESOURCE_ATTRIBUTES - value: "k8s.pod.name=$(OTEL_K8S_POD_NAME),k8s.namespace.name=$(OTEL_K8S_NAMESPACE),k8s.node.name=$(OTEL_K8S_NODE_NAME),host.name=$(OTEL_K8S_NODE_NAME),k8s.node.ip=$(OTEL_K8S_NODE_IP),k8s.pod.ip=$(OTEL_K8S_POD_IP),k8s.cluster.name=unknown_k8s_cluster" - - volumes: - - name: varlogpods - hostPath: - path: /var/log/pods - - name: varlibdockercontainers - hostPath: - path: /var/lib/docker/containers - - name: hostfs - hostPath: - path: / - diff --git a/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/hooks.yaml b/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/hooks.yaml deleted file mode 100644 index df09c1e80b..0000000000 --- a/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/hooks.yaml +++ /dev/null @@ -1,65 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/templates/hooks.yaml -apiVersion: v1 -kind: ServiceAccount -metadata: - name: delete-resources-sa - annotations: - "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded ---- -# Source: opentelemetry-kube-stack/templates/hooks.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - name: delete-resources-role - annotations: - "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded -rules: - - apiGroups: - - opentelemetry.io - resources: - - instrumentations - - opampbridges - - opentelemetrycollectors - verbs: - - get - - list - - delete ---- -# Source: opentelemetry-kube-stack/templates/hooks.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding -metadata: - name: delete-resources-rolebinding - annotations: - "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: delete-resources-role -subjects: - - kind: ServiceAccount - name: delete-resources-sa ---- -# Source: opentelemetry-kube-stack/templates/hooks.yaml -apiVersion: batch/v1 -kind: Job -metadata: - name: opentelemetry-kube-stack-pre-delete-job - annotations: - "helm.sh/hook": pre-delete - "helm.sh/hook-delete-policy": hook-succeeded,hook-failed -spec: - template: - spec: - restartPolicy: Never - serviceAccountName: delete-resources-sa - containers: - - name: delete-resources - image: "rancher/kubectl:v1.34.1" - args: - - "delete" - - "instrumentations,opampbridges,opentelemetrycollectors" - - "-l" - - "helm.sh/chart=opentelemetry-kube-stack-0.16.0" - diff --git a/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml b/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml deleted file mode 100644 index 17585fa86a..0000000000 --- a/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml +++ /dev/null @@ -1,193 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/admission-webhooks/operator-webhook-with-cert-manager.yaml -apiVersion: admissionregistration.k8s.io/v1 -kind: MutatingWebhookConfiguration -metadata: - annotations: - cert-manager.io/inject-ca-from: default/example-opentelemetry-operator-serving-cert - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: webhook - name: example-opentelemetry-operator-mutation -webhooks: - - admissionReviewVersions: - - v1 - clientConfig: - service: - name: example-opentelemetry-operator-webhook - namespace: default - path: /mutate-opentelemetry-io-v1alpha1-instrumentation - port: 443 - failurePolicy: Ignore - name: minstrumentation.kb.io - rules: - - apiGroups: - - opentelemetry.io - apiVersions: - - v1alpha1 - operations: - - CREATE - - UPDATE - resources: - - instrumentations - scope: Namespaced - sideEffects: None - timeoutSeconds: 10 - - admissionReviewVersions: - - v1 - clientConfig: - service: - name: example-opentelemetry-operator-webhook - namespace: default - path: /mutate-opentelemetry-io-v1beta1-opentelemetrycollector - port: 443 - failurePolicy: Ignore - name: mopentelemetrycollectorbeta.kb.io - rules: - - apiGroups: - - opentelemetry.io - apiVersions: - - v1beta1 - operations: - - CREATE - - UPDATE - resources: - - opentelemetrycollectors - scope: Namespaced - sideEffects: None - timeoutSeconds: 10 - - admissionReviewVersions: - - v1 - clientConfig: - service: - name: example-opentelemetry-operator-webhook - namespace: default - path: /mutate-v1-pod - port: 443 - failurePolicy: Ignore - name: mpod.kb.io - rules: - - apiGroups: - - "" - apiVersions: - - v1 - operations: - - CREATE - resources: - - pods - scope: Namespaced - sideEffects: None - timeoutSeconds: 10 ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/admission-webhooks/operator-webhook-with-cert-manager.yaml -apiVersion: admissionregistration.k8s.io/v1 -kind: ValidatingWebhookConfiguration -metadata: - annotations: - cert-manager.io/inject-ca-from: default/example-opentelemetry-operator-serving-cert - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: webhook - name: example-opentelemetry-operator-validation -webhooks: - - admissionReviewVersions: - - v1 - clientConfig: - service: - name: example-opentelemetry-operator-webhook - namespace: default - path: /validate-opentelemetry-io-v1alpha1-instrumentation - port: 443 - failurePolicy: Ignore - name: vinstrumentationcreateupdate.kb.io - rules: - - apiGroups: - - opentelemetry.io - apiVersions: - - v1alpha1 - operations: - - CREATE - - UPDATE - resources: - - instrumentations - scope: Namespaced - sideEffects: None - timeoutSeconds: 10 - - admissionReviewVersions: - - v1 - clientConfig: - service: - name: example-opentelemetry-operator-webhook - namespace: default - path: /validate-opentelemetry-io-v1alpha1-instrumentation - port: 443 - failurePolicy: Ignore - name: vinstrumentationdelete.kb.io - rules: - - apiGroups: - - opentelemetry.io - apiVersions: - - v1alpha1 - operations: - - DELETE - resources: - - instrumentations - scope: Namespaced - sideEffects: None - timeoutSeconds: 10 - - admissionReviewVersions: - - v1 - clientConfig: - service: - name: example-opentelemetry-operator-webhook - namespace: default - path: /validate-opentelemetry-io-v1beta1-opentelemetrycollector - port: 443 - failurePolicy: Ignore - name: vopentelemetrycollectorcreateupdatebeta.kb.io - rules: - - apiGroups: - - opentelemetry.io - apiVersions: - - v1beta1 - operations: - - CREATE - - UPDATE - resources: - - opentelemetrycollectors - scope: Namespaced - sideEffects: None - timeoutSeconds: 10 - - admissionReviewVersions: - - v1 - clientConfig: - service: - name: example-opentelemetry-operator-webhook - namespace: default - path: /validate-opentelemetry-io-v1beta1-opentelemetrycollector - port: 443 - failurePolicy: Ignore - name: vopentelemetrycollectordeletebeta.kb.io - rules: - - apiGroups: - - opentelemetry.io - apiVersions: - - v1beta1 - operations: - - DELETE - resources: - - opentelemetrycollectors - scope: Namespaced - sideEffects: None - timeoutSeconds: 10 - diff --git a/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/admission-webhooks/operator-webhook.yaml b/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/admission-webhooks/operator-webhook.yaml deleted file mode 100644 index 5b9ff5511d..0000000000 --- a/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/admission-webhooks/operator-webhook.yaml +++ /dev/null @@ -1,3 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/admission-webhooks/operator-webhook.yaml ---- diff --git a/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/certmanager.yaml b/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/certmanager.yaml deleted file mode 100644 index e8615238d0..0000000000 --- a/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/certmanager.yaml +++ /dev/null @@ -1,44 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/certmanager.yaml -apiVersion: cert-manager.io/v1 -kind: Certificate -metadata: - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: webhook - name: example-opentelemetry-operator-serving-cert - namespace: default -spec: - dnsNames: - - example-opentelemetry-operator-webhook.default.svc - - example-opentelemetry-operator-webhook.default.svc.cluster.local - issuerRef: - kind: Issuer - name: example-opentelemetry-operator-selfsigned-issuer - secretName: example-opentelemetry-operator-controller-manager-service-cert - subject: - organizationalUnits: - - example-opentelemetry-operator ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/certmanager.yaml -apiVersion: cert-manager.io/v1 -kind: Issuer -metadata: - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: webhook - name: example-opentelemetry-operator-selfsigned-issuer - namespace: default -spec: - selfSigned: {} - diff --git a/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/clusterrole.yaml b/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/clusterrole.yaml deleted file mode 100644 index 2037050533..0000000000 --- a/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/clusterrole.yaml +++ /dev/null @@ -1,410 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/clusterrole.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: controller-manager - name: example-opentelemetry-operator-manager -rules: - - apiGroups: - - "" - resources: - - configmaps - - persistentvolumeclaims - - persistentvolumes - - pods - - serviceaccounts - - services - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - "" - resources: - - events - verbs: - - create - - get - - list - - patch - - watch - - apiGroups: - - "" - resources: - - namespaces - verbs: - - list - - watch - - apiGroups: - - "" - resources: - - namespaces/status - verbs: - - get - - list - - watch - - apiGroups: - - "" - resources: - - nodes/spec - verbs: - - get - - list - - watch - - apiGroups: - - "" - resources: - - pods/status - verbs: - - get - - list - - watch - - apiGroups: - - "" - resources: - - replicationcontrollers - verbs: - - get - - list - - watch - - apiGroups: - - "" - resources: - - replicationcontrollers/status - verbs: - - get - - list - - watch - - apiGroups: - - "" - resources: - - resourcequotas - verbs: - - get - - list - - watch - - apiGroups: - - apps - resources: - - daemonsets - - deployments - - statefulsets - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - apps - - extensions - resources: - - replicasets - verbs: - - get - - list - - watch - - apiGroups: - - extensions - resources: - - daemonsets - verbs: - - get - - list - - watch - - apiGroups: - - extensions - resources: - - deployments - verbs: - - get - - list - - watch - - apiGroups: - - autoscaling - resources: - - horizontalpodautoscalers - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - batch - resources: - - jobs - verbs: - - get - - list - - watch - - apiGroups: - - batch - resources: - - cronjobs - verbs: - - get - - list - - watch - - apiGroups: - - "" - resources: - - nodes/proxy - verbs: - - get - - apiGroups: - - "" - resources: - - nodes/stats - verbs: - - get - - apiGroups: - - config.openshift.io - resources: - - infrastructures - - infrastructures/status - verbs: - - get - - list - - watch - - apiGroups: - - coordination.k8s.io - resources: - - leases - verbs: - - create - - get - - list - - update - - apiGroups: - - discovery.k8s.io - resources: - - endpointslices - verbs: - - get - - list - - apiGroups: - - events.k8s.io - resources: - - events - verbs: - - create - - list - - patch - - watch - - apiGroups: - - gateway.networking.k8s.io - resources: - - httproutes - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - monitoring.coreos.com - resources: - - podmonitors - - servicemonitors - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - networking.k8s.io - resources: - - ingresses - - networkpolicies - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - opentelemetry.io - resources: - - instrumentations - verbs: - - get - - list - - patch - - update - - watch - - apiGroups: - - opentelemetry.io - resources: - - opampbridges - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - opentelemetry.io - resources: - - opampbridges/finalizers - verbs: - - update - - apiGroups: - - opentelemetry.io - resources: - - opampbridges/status - verbs: - - get - - patch - - update - - apiGroups: - - opentelemetry.io - resources: - - opentelemetrycollectors - verbs: - - get - - list - - patch - - update - - watch - - apiGroups: - - opentelemetry.io - resources: - - opentelemetrycollectors/finalizers - verbs: - - get - - patch - - update - - apiGroups: - - opentelemetry.io - resources: - - opentelemetrycollectors/status - verbs: - - get - - patch - - update - - apiGroups: - - policy - resources: - - poddisruptionbudgets - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - route.openshift.io - resources: - - routes - - routes/custom-host - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - opentelemetry.io - resources: - - targetallocators - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - opentelemetry.io - resources: - - targetallocators/status - verbs: - - get - - patch - - update - - apiGroups: - - opentelemetry.io - resources: - - targetallocators/finalizers - verbs: - - get - - patch - - update - - apiGroups: - - cert-manager.io - resources: - - issuers - - certificaterequests - - certificates - verbs: - - create - - get - - list - - watch - - update - - patch - - delete - - apiGroups: - - authentication.k8s.io - resources: - - tokenreviews - verbs: - - create - - apiGroups: - - authorization.k8s.io - resources: - - subjectaccessreviews - verbs: - - create ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/clusterrole.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: controller-manager - name: example-opentelemetry-operator-metrics -rules: - - nonResourceURLs: - - /metrics - verbs: - - get - - diff --git a/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/clusterrolebinding.yaml b/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/clusterrolebinding.yaml deleted file mode 100644 index 4acb7d53f5..0000000000 --- a/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/clusterrolebinding.yaml +++ /dev/null @@ -1,24 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/clusterrolebinding.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding -metadata: - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: controller-manager - name: example-opentelemetry-operator-manager -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: example-opentelemetry-operator-manager -subjects: - - kind: ServiceAccount - name: opentelemetry-operator - namespace: default - - diff --git a/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/deployment.yaml b/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/deployment.yaml deleted file mode 100644 index c775cd1cf3..0000000000 --- a/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/deployment.yaml +++ /dev/null @@ -1,105 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/deployment.yaml -apiVersion: apps/v1 -kind: Deployment -metadata: - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: controller-manager - name: example-opentelemetry-operator - namespace: default -spec: - replicas: 1 - revisionHistoryLimit: 10 - selector: - matchLabels: - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/component: controller-manager - template: - metadata: - annotations: - kubectl.kubernetes.io/default-container: manager - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: controller-manager - spec: - automountServiceAccountToken: true - hostNetwork: false - containers: - - args: - - --metrics-addr=0.0.0.0:8443 - - --metrics-secure=true - - --enable-leader-election - - --health-probe-addr=:8081 - - --webhook-port=9443 - - --collector-image=otel/opentelemetry-collector-k8s:0.151.0 - command: - - /manager - env: - - name: SERVICE_ACCOUNT_NAME - valueFrom: - fieldRef: - fieldPath: spec.serviceAccountName - - name: ENABLE_WEBHOOKS - value: "true" - image: "ghcr.io/open-telemetry/opentelemetry-operator/opentelemetry-operator:0.151.0" - name: manager - imagePullPolicy: IfNotPresent - ports: - - containerPort: 8443 - name: metrics - protocol: TCP - - containerPort: 9443 - name: webhook-server - protocol: TCP - livenessProbe: - httpGet: - path: /healthz - port: 8081 - initialDelaySeconds: 15 - periodSeconds: 20 - readinessProbe: - httpGet: - path: /readyz - port: 8081 - initialDelaySeconds: 5 - periodSeconds: 10 - resources: - {} - volumeMounts: - - mountPath: /tmp/k8s-webhook-server/serving-certs - name: cert - readOnly: true - securityContext: - allowPrivilegeEscalation: false - capabilities: - drop: - - ALL - runAsNonRoot: true - seccompProfile: - type: RuntimeDefault - nodeSelector: - kubernetes.io/os: linux - serviceAccountName: opentelemetry-operator - terminationGracePeriodSeconds: 10 - volumes: - - name: cert - secret: - defaultMode: 420 - secretName: example-opentelemetry-operator-controller-manager-service-cert - securityContext: - fsGroup: 65532 - runAsGroup: 65532 - runAsNonRoot: true - runAsUser: 65532 - diff --git a/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/role.yaml b/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/role.yaml deleted file mode 100644 index b5339517a2..0000000000 --- a/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/role.yaml +++ /dev/null @@ -1,200 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/role.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: controller-manager - name: example-opentelemetry-operator-leader-election - namespace: default -rules: - - apiGroups: - - "" - resources: - - configmaps - - pods - - serviceaccounts - - services - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - "" - resources: - - events - verbs: - - create - - patch - - apiGroups: - - "" - resources: - - namespaces - - secrets - verbs: - - get - - list - - watch - - apiGroups: - - apps - resources: - - daemonsets - - deployments - - statefulsets - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - apps - resources: - - replicasets - verbs: - - get - - list - - watch - - apiGroups: - - autoscaling - resources: - - horizontalpodautoscalers - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - batch - resources: - - jobs - verbs: - - get - - list - - watch - - apiGroups: - - config.openshift.io - resources: - - infrastructures - - infrastructures/status - verbs: - - get - - list - - watch - - apiGroups: - - coordination.k8s.io - resources: - - leases - verbs: - - create - - get - - list - - update - - apiGroups: - - monitoring.coreos.com - resources: - - podmonitors - - servicemonitors - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - networking.k8s.io - resources: - - ingresses - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - opentelemetry.io - resources: - - instrumentations - - opentelemetrycollectors - verbs: - - get - - list - - patch - - update - - watch - - apiGroups: - - opentelemetry.io - resources: - - opampbridges - - targetallocators - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - opentelemetry.io - resources: - - opampbridges/finalizers - verbs: - - update - - apiGroups: - - opentelemetry.io - resources: - - opampbridges/status - - opentelemetrycollectors/finalizers - - opentelemetrycollectors/status - - targetallocators/status - - targetallocators/finalizers - verbs: - - get - - patch - - update - - apiGroups: - - policy - resources: - - poddisruptionbudgets - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - route.openshift.io - resources: - - routes - - routes/custom-host - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - diff --git a/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/rolebinding.yaml b/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/rolebinding.yaml deleted file mode 100644 index ae376e80c9..0000000000 --- a/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/rolebinding.yaml +++ /dev/null @@ -1,24 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/rolebinding.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding -metadata: - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: controller-manager - name: example-opentelemetry-operator-leader-election - namespace: default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: example-opentelemetry-operator-leader-election -subjects: - - kind: ServiceAccount - name: opentelemetry-operator - namespace: default - diff --git a/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/service.yaml b/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/service.yaml deleted file mode 100644 index 0a3006d80f..0000000000 --- a/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/service.yaml +++ /dev/null @@ -1,48 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/service.yaml -apiVersion: v1 -kind: Service -metadata: - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: controller-manager - name: example-opentelemetry-operator - namespace: default -spec: - ports: - - name: metrics - port: 8443 - protocol: TCP - targetPort: metrics - selector: - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/component: controller-manager ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/service.yaml -apiVersion: v1 -kind: Service -metadata: - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: controller-manager - name: example-opentelemetry-operator-webhook - namespace: default -spec: - ports: - - port: 443 - protocol: TCP - targetPort: webhook-server - selector: - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/component: controller-manager - diff --git a/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/serviceaccount.yaml b/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/serviceaccount.yaml deleted file mode 100644 index c6ba25dbac..0000000000 --- a/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/serviceaccount.yaml +++ /dev/null @@ -1,17 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/serviceaccount.yaml -apiVersion: v1 -kind: ServiceAccount -automountServiceAccountToken: true -metadata: - name: opentelemetry-operator - namespace: default - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: controller-manager - diff --git a/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml b/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml deleted file mode 100644 index 9039160e03..0000000000 --- a/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml +++ /dev/null @@ -1,54 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/tests/test-certmanager-connection.yaml -apiVersion: v1 -kind: Pod -metadata: - name: "example-opentelemetry-operator-cert-manager" - namespace: default - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: webhook - annotations: - "helm.sh/hook": test -spec: - containers: - - name: wget - image: "busybox:latest" - env: - - name: CERT_MANAGER_CLUSTERIP - value: "cert-manager-webhook" - - name: CERT_MANAGER_PORT - value: "443" - command: - - sh - - -c - # The following shell script tests if the cert-manager service is up. If the service is up, when we try - # to wget its exposed port, we will get an HTTP error 400. - - | - wget_output=$(wget -q "$CERT_MANAGER_CLUSTERIP:$CERT_MANAGER_PORT") - if wget_output=="wget: server returned error: HTTP/1.0 400 Bad Request" - then exit 0 - else exit 1 - fi - securityContext: - allowPrivilegeEscalation: false - capabilities: - drop: - - ALL - runAsNonRoot: true - seccompProfile: - type: RuntimeDefault - restartPolicy: Never - nodeSelector: - kubernetes.io/os: linux - securityContext: - fsGroup: 65532 - runAsGroup: 65532 - runAsNonRoot: true - runAsUser: 65532 - diff --git a/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/tests/test-service-connection.yaml b/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/tests/test-service-connection.yaml deleted file mode 100644 index 88e0e0bc24..0000000000 --- a/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/tests/test-service-connection.yaml +++ /dev/null @@ -1,107 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/tests/test-service-connection.yaml -apiVersion: v1 -kind: Pod -metadata: - name: "example-opentelemetry-operator-metrics" - namespace: default - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: controller-manager - annotations: - "helm.sh/hook": test -spec: - containers: - - name: wget - image: "busybox:latest" - env: - - name: MANAGER_METRICS_SERVICE_CLUSTERIP - value: "example-opentelemetry-operator" - - name: MANAGER_METRICS_SERVICE_PORT - value: "8443" - command: - - sh - - -c - # The following shell script tests if the controller-manager-metrics-service is up. - # If the service is up, when we try to wget its exposed port, we will get an HTTP error 400. - - | - wget_output=$(wget -q "$MANAGER_METRICS_SERVICE_CLUSTERIP:$MANAGER_METRICS_SERVICE_PORT") - if wget_output=="wget: server returned error: HTTP/1.0 400 Bad Request" - then exit 0 - else exit 1 - fi - securityContext: - allowPrivilegeEscalation: false - capabilities: - drop: - - ALL - runAsNonRoot: true - seccompProfile: - type: RuntimeDefault - restartPolicy: Never - nodeSelector: - kubernetes.io/os: linux - securityContext: - fsGroup: 65532 - runAsGroup: 65532 - runAsNonRoot: true - runAsUser: 65532 ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/tests/test-service-connection.yaml -apiVersion: v1 -kind: Pod -metadata: - name: "example-opentelemetry-operator-webhook" - namespace: default - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: controller-manager - annotations: - "helm.sh/hook": test -spec: - containers: - - name: wget - image: "busybox:latest" - env: - - name: WEBHOOK_SERVICE_CLUSTERIP - value: "example-opentelemetry-operator-webhook" - - name: WEBHOOK_SERVICE_PORT - value: "443" - command: - - sh - - -c - # The following shell script tests if the webhook service is up. If the service is up, when we try - # to wget its exposed port, we will get an HTTP error 400. - - | - wget_output=$(wget -q "$WEBHOOK_SERVICE_CLUSTERIP:$WEBHOOK_SERVICE_PORT") - if wget_output=="wget: server returned error: HTTP/1.0 400 Bad Request" - then exit 0 - else exit 1 - fi - securityContext: - allowPrivilegeEscalation: false - capabilities: - drop: - - ALL - runAsNonRoot: true - seccompProfile: - type: RuntimeDefault - restartPolicy: Never - nodeSelector: - kubernetes.io/os: linux - securityContext: - fsGroup: 65532 - runAsGroup: 65532 - runAsNonRoot: true - runAsUser: 65532 - diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/clusterrole.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/clusterrole.yaml deleted file mode 100644 index 32f102bb70..0000000000 --- a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/clusterrole.yaml +++ /dev/null @@ -1,72 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/templates/clusterrole.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - name: example-collector -rules: -- apiGroups: [""] - resources: - - namespaces - - nodes - - nodes/proxy - - nodes/metrics - - nodes/stats - - services - - endpoints - - pods - - events - - secrets - - persistentvolumeclaims - - persistentvolumes - verbs: ["get", "list", "watch"] -- apiGroups: ["monitoring.coreos.com"] - resources: - - servicemonitors - - podmonitors - - scrapeconfigs - - probes - verbs: ["get", "list", "watch"] -- apiGroups: - - extensions - resources: - - ingresses - verbs: ["get", "list", "watch"] -- apiGroups: - - apps - resources: - - daemonsets - - deployments - - replicasets - - statefulsets - verbs: ["get", "list", "watch"] -- apiGroups: - - networking.k8s.io - resources: - - ingresses - verbs: ["get", "list", "watch"] -- apiGroups: ["discovery.k8s.io"] - resources: - - endpointslices - verbs: ["get", "list", "watch"] -- nonResourceURLs: ["/metrics", "/metrics/cadvisor"] - verbs: ["get"] ---- -# Source: opentelemetry-kube-stack/templates/clusterrole.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding -metadata: - name: example-daemon -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: example-collector -subjects: -- kind: ServiceAccount - # quirk of the Operator - name: "example-daemon-collector" - namespace: default -- kind: ServiceAccount - name: example-daemon-targetallocator - namespace: default - diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/collector.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/collector.yaml deleted file mode 100644 index f7dc54045e..0000000000 --- a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/collector.yaml +++ /dev/null @@ -1,137 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/templates/collector.yaml -apiVersion: opentelemetry.io/v1beta1 -kind: OpenTelemetryCollector -metadata: - name: example-daemon - namespace: default - labels: - helm.sh/chart: opentelemetry-kube-stack-0.16.0 - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - release: "example" - otel-collector-type: daemonset-example -spec: - managementState: managed - mode: daemonset - config: - exporters: - debug: {} - otlp: - endpoint: ingest.example.com:443 - headers: - access-token: ${ACCESS_TOKEN} - processors: - batch: - send_batch_max_size: 1500 - send_batch_size: 1000 - timeout: 1s - resource/hostname: - attributes: - - action: insert - from_attribute: k8s.node.name - key: host.name - resourcedetection/env: - detectors: - - env - - k8snode - override: false - timeout: 2s - receivers: - otlp: - protocols: - grpc: - endpoint: 0.0.0.0:4317 - http: - endpoint: 0.0.0.0:4318 - prometheus: - config: - scrape_configs: [] - service: - pipelines: - logs: - exporters: - - debug - processors: - - resourcedetection/env - - resource/hostname - - batch - receivers: - - otlp - metrics: - exporters: - - debug - - otlp - processors: - - resourcedetection/env - - resource/hostname - - batch - receivers: - - prometheus - traces: - exporters: - - debug - processors: - - resourcedetection/env - - resource/hostname - - batch - receivers: - - otlp - imagePullPolicy: IfNotPresent - upgradeStrategy: automatic - terminationGracePeriodSeconds: 30 - resources: - limits: - cpu: 200m - memory: 500Mi - requests: - cpu: 100m - memory: 250Mi - securityContext: - {} - targetAllocator: - allocationStrategy: per-node - enabled: true - image: ghcr.io/open-telemetry/opentelemetry-operator/target-allocator:main - prometheusCR: - enabled: true - podMonitorSelector: {} - scrapeInterval: 30s - serviceMonitorSelector: {} - env: - - name: K8S_NODE_NAME - valueFrom: - fieldRef: - fieldPath: spec.nodeName - - name: OTEL_K8S_NODE_NAME - valueFrom: - fieldRef: - fieldPath: spec.nodeName - - name: OTEL_K8S_NODE_IP - valueFrom: - fieldRef: - fieldPath: status.hostIP - - name: OTEL_K8S_NAMESPACE - valueFrom: - fieldRef: - apiVersion: v1 - fieldPath: metadata.namespace - - name: OTEL_K8S_POD_NAME - valueFrom: - fieldRef: - apiVersion: v1 - fieldPath: metadata.name - - name: OTEL_K8S_POD_IP - valueFrom: - fieldRef: - apiVersion: v1 - fieldPath: status.podIP - - name: OTEL_RESOURCE_ATTRIBUTES - value: "k8s.pod.name=$(OTEL_K8S_POD_NAME),k8s.namespace.name=$(OTEL_K8S_NAMESPACE),k8s.node.name=$(OTEL_K8S_NODE_NAME),host.name=$(OTEL_K8S_NODE_NAME),k8s.node.ip=$(OTEL_K8S_NODE_IP),k8s.pod.ip=$(OTEL_K8S_POD_IP),k8s.cluster.name=demo" - - - name: ACCESS_TOKEN - valueFrom: - secretKeyRef: - key: access_token - name: otel-collector-secret - diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-api-server/servicemonitor.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-api-server/servicemonitor.yaml deleted file mode 100644 index 1037fe3792..0000000000 --- a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-api-server/servicemonitor.yaml +++ /dev/null @@ -1,38 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/templates/exporters/kube-api-server/servicemonitor.yaml -apiVersion: monitoring.coreos.com/v1 -kind: ServiceMonitor -metadata: - name: example-apiserver - namespace: default - labels: - app: opentelemetry-kube-stack-apiserver - helm.sh/chart: opentelemetry-kube-stack-0.16.0 - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - release: "example" -spec: - - endpoints: - - bearerTokenFile: /var/run/secrets/kubernetes.io/serviceaccount/token - port: https - scheme: https - metricRelabelings: - - action: drop - regex: apiserver_request_duration_seconds_bucket;(0.15|0.2|0.3|0.35|0.4|0.45|0.6|0.7|0.8|0.9|1.25|1.5|1.75|2|3|3.5|4|4.5|6|7|8|9|15|25|40|50) - sourceLabels: - - __name__ - - le - tlsConfig: - caFile: /var/run/secrets/kubernetes.io/serviceaccount/ca.crt - serverName: kubernetes - insecureSkipVerify: false - jobLabel: component - namespaceSelector: - matchNames: - - default - selector: - matchLabels: - component: apiserver - provider: kubernetes - diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-controller-manager/service.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-controller-manager/service.yaml deleted file mode 100644 index 9dcfc972bf..0000000000 --- a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-controller-manager/service.yaml +++ /dev/null @@ -1,25 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/templates/exporters/kube-controller-manager/service.yaml -apiVersion: v1 -kind: Service -metadata: - name: example-kube-controller-manager - labels: - app: opentelemetry-kube-stack-kube-controller-manager - jobLabel: kube-controller-manager - helm.sh/chart: opentelemetry-kube-stack-0.16.0 - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - release: "example" - namespace: kube-system -spec: - clusterIP: None - ports: - - name: http-metrics - port: 10257 - protocol: TCP - targetPort: 10257 - selector: - component: kube-controller-manager - type: ClusterIP - diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-controller-manager/servicemonitor.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-controller-manager/servicemonitor.yaml deleted file mode 100644 index 9ef9dcb9ce..0000000000 --- a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-controller-manager/servicemonitor.yaml +++ /dev/null @@ -1,31 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/templates/exporters/kube-controller-manager/servicemonitor.yaml -apiVersion: monitoring.coreos.com/v1 -kind: ServiceMonitor -metadata: - name: example-kube-controller-manager - namespace: default - labels: - app: opentelemetry-kube-stack-kube-controller-manager - helm.sh/chart: opentelemetry-kube-stack-0.16.0 - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - release: "example" -spec: - jobLabel: jobLabel - - selector: - matchLabels: - app: opentelemetry-kube-stack-kube-controller-manager - release: "example" - namespaceSelector: - matchNames: - - "kube-system" - endpoints: - - port: http-metrics - bearerTokenFile: /var/run/secrets/kubernetes.io/serviceaccount/token - scheme: https - tlsConfig: - caFile: /var/run/secrets/kubernetes.io/serviceaccount/ca.crt - insecureSkipVerify: true - diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-dns/service.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-dns/service.yaml deleted file mode 100644 index 4b6f32aba5..0000000000 --- a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-dns/service.yaml +++ /dev/null @@ -1,28 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/templates/exporters/kube-dns/service.yaml -apiVersion: v1 -kind: Service -metadata: - name: example-kube-dns - labels: - app: opentelemetry-kube-stack-kube-dns - jobLabel: kube-dns - helm.sh/chart: opentelemetry-kube-stack-0.16.0 - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - release: "example" - namespace: kube-system -spec: - clusterIP: None - ports: - - name: http-metrics-dnsmasq - port: 10054 - protocol: TCP - targetPort: 10054 - - name: http-metrics-skydns - port: 10055 - protocol: TCP - targetPort: 10055 - selector: - k8s-app: kube-dns - diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-dns/servicemonitor.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-dns/servicemonitor.yaml deleted file mode 100644 index bda13b20d4..0000000000 --- a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-dns/servicemonitor.yaml +++ /dev/null @@ -1,29 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/templates/exporters/kube-dns/servicemonitor.yaml -apiVersion: monitoring.coreos.com/v1 -kind: ServiceMonitor -metadata: - name: example-kube-dns - namespace: default - labels: - app: opentelemetry-kube-stack-kube-dns - helm.sh/chart: opentelemetry-kube-stack-0.16.0 - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - release: "example" -spec: - jobLabel: jobLabel - - selector: - matchLabels: - app: opentelemetry-kube-stack-kube-dns - release: "example" - namespaceSelector: - matchNames: - - "kube-system" - endpoints: - - port: http-metrics-dnsmasq - bearerTokenFile: /var/run/secrets/kubernetes.io/serviceaccount/token - - port: http-metrics-skydns - bearerTokenFile: /var/run/secrets/kubernetes.io/serviceaccount/token - diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-etcd/service.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-etcd/service.yaml deleted file mode 100644 index ec97d4662b..0000000000 --- a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-etcd/service.yaml +++ /dev/null @@ -1,24 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/templates/exporters/kube-etcd/service.yaml -apiVersion: v1 -kind: Service -metadata: - name: example-kube-etcd - labels: - app: opentelemetry-kube-stack-kube-etcd - jobLabel: kube-etcd - helm.sh/chart: opentelemetry-kube-stack-0.16.0 - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - release: "example" - namespace: kube-system -spec: - clusterIP: None - ports: - - name: http-metrics - port: 2381 - protocol: TCP - targetPort: 2381 - selector: - component: etcd - type: ClusterIP diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-etcd/servicemonitor.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-etcd/servicemonitor.yaml deleted file mode 100644 index 006d61f678..0000000000 --- a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-etcd/servicemonitor.yaml +++ /dev/null @@ -1,27 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/templates/exporters/kube-etcd/servicemonitor.yaml -apiVersion: monitoring.coreos.com/v1 -kind: ServiceMonitor -metadata: - name: example-kube-etcd - namespace: default - labels: - app: opentelemetry-kube-stack-kube-etcd - helm.sh/chart: opentelemetry-kube-stack-0.16.0 - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - release: "example" -spec: - jobLabel: jobLabel - - selector: - matchLabels: - app: opentelemetry-kube-stack-kube-etcd - release: "example" - namespaceSelector: - matchNames: - - "kube-system" - endpoints: - - port: http-metrics - bearerTokenFile: /var/run/secrets/kubernetes.io/serviceaccount/token - diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-proxy/service.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-proxy/service.yaml deleted file mode 100644 index 8af7794d9b..0000000000 --- a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-proxy/service.yaml +++ /dev/null @@ -1,24 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/templates/exporters/kube-proxy/service.yaml -apiVersion: v1 -kind: Service -metadata: - name: example-kube-proxy - labels: - app: opentelemetry-kube-stack-kube-proxy - jobLabel: kube-proxy - helm.sh/chart: opentelemetry-kube-stack-0.16.0 - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - release: "example" - namespace: kube-system -spec: - clusterIP: None - ports: - - name: http-metrics - port: 10249 - protocol: TCP - targetPort: 10249 - selector: - k8s-app: kube-proxy - type: ClusterIP diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-proxy/servicemonitor.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-proxy/servicemonitor.yaml deleted file mode 100644 index 4035b3cc66..0000000000 --- a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-proxy/servicemonitor.yaml +++ /dev/null @@ -1,27 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/templates/exporters/kube-proxy/servicemonitor.yaml -apiVersion: monitoring.coreos.com/v1 -kind: ServiceMonitor -metadata: - name: example-kube-proxy - namespace: default - labels: - app: opentelemetry-kube-stack-kube-proxy - helm.sh/chart: opentelemetry-kube-stack-0.16.0 - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - release: "example" -spec: - jobLabel: jobLabel - - selector: - matchLabels: - app: opentelemetry-kube-stack-kube-proxy - release: "example" - namespaceSelector: - matchNames: - - "kube-system" - endpoints: - - port: http-metrics - bearerTokenFile: /var/run/secrets/kubernetes.io/serviceaccount/token - diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-scheduler/service.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-scheduler/service.yaml deleted file mode 100644 index ef5a5763d7..0000000000 --- a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-scheduler/service.yaml +++ /dev/null @@ -1,24 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/templates/exporters/kube-scheduler/service.yaml -apiVersion: v1 -kind: Service -metadata: - name: example-kube-scheduler - labels: - app: opentelemetry-kube-stack-kube-scheduler - jobLabel: kube-scheduler - helm.sh/chart: opentelemetry-kube-stack-0.16.0 - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - release: "example" - namespace: kube-system -spec: - clusterIP: None - ports: - - name: http-metrics - port: 10259 - protocol: TCP - targetPort: 10259 - selector: - component: kube-scheduler - type: ClusterIP diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-scheduler/servicemonitor.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-scheduler/servicemonitor.yaml deleted file mode 100644 index 8fb50913e1..0000000000 --- a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-scheduler/servicemonitor.yaml +++ /dev/null @@ -1,31 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/templates/exporters/kube-scheduler/servicemonitor.yaml -apiVersion: monitoring.coreos.com/v1 -kind: ServiceMonitor -metadata: - name: example-kube-scheduler - namespace: default - labels: - app: opentelemetry-kube-stack-kube-scheduler - helm.sh/chart: opentelemetry-kube-stack-0.16.0 - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - release: "example" -spec: - jobLabel: jobLabel - - selector: - matchLabels: - app: opentelemetry-kube-stack-kube-scheduler - release: "example" - namespaceSelector: - matchNames: - - "kube-system" - endpoints: - - port: http-metrics - bearerTokenFile: /var/run/secrets/kubernetes.io/serviceaccount/token - scheme: https - tlsConfig: - caFile: /var/run/secrets/kubernetes.io/serviceaccount/ca.crt - insecureSkipVerify: true - diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/hooks.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/hooks.yaml deleted file mode 100644 index df09c1e80b..0000000000 --- a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/hooks.yaml +++ /dev/null @@ -1,65 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/templates/hooks.yaml -apiVersion: v1 -kind: ServiceAccount -metadata: - name: delete-resources-sa - annotations: - "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded ---- -# Source: opentelemetry-kube-stack/templates/hooks.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - name: delete-resources-role - annotations: - "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded -rules: - - apiGroups: - - opentelemetry.io - resources: - - instrumentations - - opampbridges - - opentelemetrycollectors - verbs: - - get - - list - - delete ---- -# Source: opentelemetry-kube-stack/templates/hooks.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding -metadata: - name: delete-resources-rolebinding - annotations: - "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: delete-resources-role -subjects: - - kind: ServiceAccount - name: delete-resources-sa ---- -# Source: opentelemetry-kube-stack/templates/hooks.yaml -apiVersion: batch/v1 -kind: Job -metadata: - name: opentelemetry-kube-stack-pre-delete-job - annotations: - "helm.sh/hook": pre-delete - "helm.sh/hook-delete-policy": hook-succeeded,hook-failed -spec: - template: - spec: - restartPolicy: Never - serviceAccountName: delete-resources-sa - containers: - - name: delete-resources - image: "rancher/kubectl:v1.34.1" - args: - - "delete" - - "instrumentations,opampbridges,opentelemetrycollectors" - - "-l" - - "helm.sh/chart=opentelemetry-kube-stack-0.16.0" - diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/kube-state-metrics/clusterrolebinding.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/kube-state-metrics/clusterrolebinding.yaml deleted file mode 100644 index 5abd833760..0000000000 --- a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/kube-state-metrics/clusterrolebinding.yaml +++ /dev/null @@ -1,23 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/charts/kube-state-metrics/templates/clusterrolebinding.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding -metadata: - labels: - helm.sh/chart: kube-state-metrics-6.3.0 - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/component: metrics - app.kubernetes.io/part-of: kube-state-metrics - app.kubernetes.io/name: kube-state-metrics - app.kubernetes.io/instance: example - app.kubernetes.io/version: "2.17.0" - release: example - name: example-kube-state-metrics -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: example-kube-state-metrics -subjects: -- kind: ServiceAccount - name: example-kube-state-metrics - namespace: default diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/kube-state-metrics/deployment.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/kube-state-metrics/deployment.yaml deleted file mode 100644 index 06bb5ab7d8..0000000000 --- a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/kube-state-metrics/deployment.yaml +++ /dev/null @@ -1,89 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/charts/kube-state-metrics/templates/deployment.yaml -apiVersion: apps/v1 -kind: Deployment -metadata: - name: example-kube-state-metrics - namespace: default - labels: - helm.sh/chart: kube-state-metrics-6.3.0 - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/component: metrics - app.kubernetes.io/part-of: kube-state-metrics - app.kubernetes.io/name: kube-state-metrics - app.kubernetes.io/instance: example - app.kubernetes.io/version: "2.17.0" - release: example -spec: - selector: - matchLabels: - app.kubernetes.io/name: kube-state-metrics - app.kubernetes.io/instance: example - replicas: 1 - strategy: - type: RollingUpdate - revisionHistoryLimit: 10 - template: - metadata: - labels: - helm.sh/chart: kube-state-metrics-6.3.0 - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/component: metrics - app.kubernetes.io/part-of: kube-state-metrics - app.kubernetes.io/name: kube-state-metrics - app.kubernetes.io/instance: example - app.kubernetes.io/version: "2.17.0" - release: example - spec: - automountServiceAccountToken: true - hostNetwork: false - serviceAccountName: example-kube-state-metrics - securityContext: - fsGroup: 65534 - runAsGroup: 65534 - runAsNonRoot: true - runAsUser: 65534 - seccompProfile: - type: RuntimeDefault - dnsPolicy: ClusterFirst - containers: - - name: kube-state-metrics - args: - - --port=8080 - - --resources=certificatesigningrequests,configmaps,cronjobs,daemonsets,deployments,endpoints,horizontalpodautoscalers,ingresses,jobs,leases,limitranges,mutatingwebhookconfigurations,namespaces,networkpolicies,nodes,persistentvolumeclaims,persistentvolumes,poddisruptionbudgets,pods,replicasets,replicationcontrollers,resourcequotas,secrets,services,statefulsets,storageclasses,validatingwebhookconfigurations,volumeattachments - imagePullPolicy: IfNotPresent - image: registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.17.0 - ports: - - containerPort: 8080 - name: http - livenessProbe: - failureThreshold: 3 - httpGet: - httpHeaders: - path: /livez - port: 8080 - scheme: HTTP - initialDelaySeconds: 5 - periodSeconds: 10 - successThreshold: 1 - timeoutSeconds: 5 - readinessProbe: - failureThreshold: 3 - httpGet: - httpHeaders: - path: /readyz - port: 8081 - scheme: HTTP - initialDelaySeconds: 5 - periodSeconds: 10 - successThreshold: 1 - timeoutSeconds: 5 - resources: - {} - securityContext: - allowPrivilegeEscalation: false - capabilities: - drop: - - ALL - readOnlyRootFilesystem: true - diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/kube-state-metrics/role.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/kube-state-metrics/role.yaml deleted file mode 100644 index 96e9f39ebc..0000000000 --- a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/kube-state-metrics/role.yaml +++ /dev/null @@ -1,158 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/charts/kube-state-metrics/templates/role.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - labels: - helm.sh/chart: kube-state-metrics-6.3.0 - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/component: metrics - app.kubernetes.io/part-of: kube-state-metrics - app.kubernetes.io/name: kube-state-metrics - app.kubernetes.io/instance: example - app.kubernetes.io/version: "2.17.0" - release: example - name: example-kube-state-metrics -rules: - -- apiGroups: ["certificates.k8s.io"] - resources: - - certificatesigningrequests - verbs: ["list", "watch"] - -- apiGroups: [""] - resources: - - configmaps - verbs: ["list", "watch"] - -- apiGroups: ["batch"] - resources: - - cronjobs - verbs: ["list", "watch"] - -- apiGroups: ["apps"] - resources: - - daemonsets - verbs: ["list", "watch"] - -- apiGroups: ["apps"] - resources: - - deployments - verbs: ["list", "watch"] - -- apiGroups: [""] - resources: - - endpoints - verbs: ["list", "watch"] - -- apiGroups: ["autoscaling"] - resources: - - horizontalpodautoscalers - verbs: ["list", "watch"] - -- apiGroups: ["networking.k8s.io"] - resources: - - ingresses - verbs: ["list", "watch"] - -- apiGroups: ["batch"] - resources: - - jobs - verbs: ["list", "watch"] - -- apiGroups: ["coordination.k8s.io"] - resources: - - leases - verbs: ["list", "watch"] - -- apiGroups: [""] - resources: - - limitranges - verbs: ["list", "watch"] - -- apiGroups: ["admissionregistration.k8s.io"] - resources: - - mutatingwebhookconfigurations - verbs: ["list", "watch"] - -- apiGroups: [""] - resources: - - namespaces - verbs: ["list", "watch"] - -- apiGroups: ["networking.k8s.io"] - resources: - - networkpolicies - verbs: ["list", "watch"] - -- apiGroups: [""] - resources: - - nodes - verbs: ["list", "watch"] - -- apiGroups: [""] - resources: - - persistentvolumeclaims - verbs: ["list", "watch"] - -- apiGroups: [""] - resources: - - persistentvolumes - verbs: ["list", "watch"] - -- apiGroups: ["policy"] - resources: - - poddisruptionbudgets - verbs: ["list", "watch"] - -- apiGroups: [""] - resources: - - pods - verbs: ["list", "watch"] - -- apiGroups: ["apps"] - resources: - - replicasets - verbs: ["list", "watch"] - -- apiGroups: [""] - resources: - - replicationcontrollers - verbs: ["list", "watch"] - -- apiGroups: [""] - resources: - - resourcequotas - verbs: ["list", "watch"] - -- apiGroups: [""] - resources: - - secrets - verbs: ["list", "watch"] - -- apiGroups: [""] - resources: - - services - verbs: ["list", "watch"] - -- apiGroups: ["apps"] - resources: - - statefulsets - verbs: ["list", "watch"] - -- apiGroups: ["storage.k8s.io"] - resources: - - storageclasses - verbs: ["list", "watch"] - -- apiGroups: ["admissionregistration.k8s.io"] - resources: - - validatingwebhookconfigurations - verbs: ["list", "watch"] - -- apiGroups: ["storage.k8s.io"] - resources: - - volumeattachments - verbs: ["list", "watch"] - - diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/kube-state-metrics/service.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/kube-state-metrics/service.yaml deleted file mode 100644 index 239a6407b8..0000000000 --- a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/kube-state-metrics/service.yaml +++ /dev/null @@ -1,30 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/charts/kube-state-metrics/templates/service.yaml -apiVersion: v1 -kind: Service -metadata: - name: example-kube-state-metrics - namespace: default - labels: - helm.sh/chart: kube-state-metrics-6.3.0 - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/component: metrics - app.kubernetes.io/part-of: kube-state-metrics - app.kubernetes.io/name: kube-state-metrics - app.kubernetes.io/instance: example - app.kubernetes.io/version: "2.17.0" - release: example - annotations: - prometheus.io/scrape: 'true' -spec: - type: "ClusterIP" - ports: - - name: http - protocol: TCP - port: 8080 - targetPort: http - - selector: - app.kubernetes.io/name: kube-state-metrics - app.kubernetes.io/instance: example - diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/kube-state-metrics/serviceaccount.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/kube-state-metrics/serviceaccount.yaml deleted file mode 100644 index 188ece6498..0000000000 --- a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/kube-state-metrics/serviceaccount.yaml +++ /dev/null @@ -1,17 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/charts/kube-state-metrics/templates/serviceaccount.yaml -apiVersion: v1 -kind: ServiceAccount -automountServiceAccountToken: true -metadata: - labels: - helm.sh/chart: kube-state-metrics-6.3.0 - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/component: metrics - app.kubernetes.io/part-of: kube-state-metrics - app.kubernetes.io/name: kube-state-metrics - app.kubernetes.io/instance: example - app.kubernetes.io/version: "2.17.0" - release: example - name: example-kube-state-metrics - namespace: default diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/kube-state-metrics/servicemonitor.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/kube-state-metrics/servicemonitor.yaml deleted file mode 100644 index 7eccbfc900..0000000000 --- a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/kube-state-metrics/servicemonitor.yaml +++ /dev/null @@ -1,26 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/charts/kube-state-metrics/templates/servicemonitor.yaml -apiVersion: monitoring.coreos.com/v1 -kind: ServiceMonitor -metadata: - name: example-kube-state-metrics - namespace: default - labels: - helm.sh/chart: kube-state-metrics-6.3.0 - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/component: metrics - app.kubernetes.io/part-of: kube-state-metrics - app.kubernetes.io/name: kube-state-metrics - app.kubernetes.io/instance: example - app.kubernetes.io/version: "2.17.0" - release: example -spec: - jobLabel: app.kubernetes.io/name - selector: - matchLabels: - app.kubernetes.io/name: kube-state-metrics - app.kubernetes.io/instance: example - endpoints: - - port: http - honorLabels: true - diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml deleted file mode 100644 index 17585fa86a..0000000000 --- a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml +++ /dev/null @@ -1,193 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/admission-webhooks/operator-webhook-with-cert-manager.yaml -apiVersion: admissionregistration.k8s.io/v1 -kind: MutatingWebhookConfiguration -metadata: - annotations: - cert-manager.io/inject-ca-from: default/example-opentelemetry-operator-serving-cert - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: webhook - name: example-opentelemetry-operator-mutation -webhooks: - - admissionReviewVersions: - - v1 - clientConfig: - service: - name: example-opentelemetry-operator-webhook - namespace: default - path: /mutate-opentelemetry-io-v1alpha1-instrumentation - port: 443 - failurePolicy: Ignore - name: minstrumentation.kb.io - rules: - - apiGroups: - - opentelemetry.io - apiVersions: - - v1alpha1 - operations: - - CREATE - - UPDATE - resources: - - instrumentations - scope: Namespaced - sideEffects: None - timeoutSeconds: 10 - - admissionReviewVersions: - - v1 - clientConfig: - service: - name: example-opentelemetry-operator-webhook - namespace: default - path: /mutate-opentelemetry-io-v1beta1-opentelemetrycollector - port: 443 - failurePolicy: Ignore - name: mopentelemetrycollectorbeta.kb.io - rules: - - apiGroups: - - opentelemetry.io - apiVersions: - - v1beta1 - operations: - - CREATE - - UPDATE - resources: - - opentelemetrycollectors - scope: Namespaced - sideEffects: None - timeoutSeconds: 10 - - admissionReviewVersions: - - v1 - clientConfig: - service: - name: example-opentelemetry-operator-webhook - namespace: default - path: /mutate-v1-pod - port: 443 - failurePolicy: Ignore - name: mpod.kb.io - rules: - - apiGroups: - - "" - apiVersions: - - v1 - operations: - - CREATE - resources: - - pods - scope: Namespaced - sideEffects: None - timeoutSeconds: 10 ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/admission-webhooks/operator-webhook-with-cert-manager.yaml -apiVersion: admissionregistration.k8s.io/v1 -kind: ValidatingWebhookConfiguration -metadata: - annotations: - cert-manager.io/inject-ca-from: default/example-opentelemetry-operator-serving-cert - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: webhook - name: example-opentelemetry-operator-validation -webhooks: - - admissionReviewVersions: - - v1 - clientConfig: - service: - name: example-opentelemetry-operator-webhook - namespace: default - path: /validate-opentelemetry-io-v1alpha1-instrumentation - port: 443 - failurePolicy: Ignore - name: vinstrumentationcreateupdate.kb.io - rules: - - apiGroups: - - opentelemetry.io - apiVersions: - - v1alpha1 - operations: - - CREATE - - UPDATE - resources: - - instrumentations - scope: Namespaced - sideEffects: None - timeoutSeconds: 10 - - admissionReviewVersions: - - v1 - clientConfig: - service: - name: example-opentelemetry-operator-webhook - namespace: default - path: /validate-opentelemetry-io-v1alpha1-instrumentation - port: 443 - failurePolicy: Ignore - name: vinstrumentationdelete.kb.io - rules: - - apiGroups: - - opentelemetry.io - apiVersions: - - v1alpha1 - operations: - - DELETE - resources: - - instrumentations - scope: Namespaced - sideEffects: None - timeoutSeconds: 10 - - admissionReviewVersions: - - v1 - clientConfig: - service: - name: example-opentelemetry-operator-webhook - namespace: default - path: /validate-opentelemetry-io-v1beta1-opentelemetrycollector - port: 443 - failurePolicy: Ignore - name: vopentelemetrycollectorcreateupdatebeta.kb.io - rules: - - apiGroups: - - opentelemetry.io - apiVersions: - - v1beta1 - operations: - - CREATE - - UPDATE - resources: - - opentelemetrycollectors - scope: Namespaced - sideEffects: None - timeoutSeconds: 10 - - admissionReviewVersions: - - v1 - clientConfig: - service: - name: example-opentelemetry-operator-webhook - namespace: default - path: /validate-opentelemetry-io-v1beta1-opentelemetrycollector - port: 443 - failurePolicy: Ignore - name: vopentelemetrycollectordeletebeta.kb.io - rules: - - apiGroups: - - opentelemetry.io - apiVersions: - - v1beta1 - operations: - - DELETE - resources: - - opentelemetrycollectors - scope: Namespaced - sideEffects: None - timeoutSeconds: 10 - diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/admission-webhooks/operator-webhook.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/admission-webhooks/operator-webhook.yaml deleted file mode 100644 index 5b9ff5511d..0000000000 --- a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/admission-webhooks/operator-webhook.yaml +++ /dev/null @@ -1,3 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/admission-webhooks/operator-webhook.yaml ---- diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/certmanager.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/certmanager.yaml deleted file mode 100644 index e8615238d0..0000000000 --- a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/certmanager.yaml +++ /dev/null @@ -1,44 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/certmanager.yaml -apiVersion: cert-manager.io/v1 -kind: Certificate -metadata: - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: webhook - name: example-opentelemetry-operator-serving-cert - namespace: default -spec: - dnsNames: - - example-opentelemetry-operator-webhook.default.svc - - example-opentelemetry-operator-webhook.default.svc.cluster.local - issuerRef: - kind: Issuer - name: example-opentelemetry-operator-selfsigned-issuer - secretName: example-opentelemetry-operator-controller-manager-service-cert - subject: - organizationalUnits: - - example-opentelemetry-operator ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/certmanager.yaml -apiVersion: cert-manager.io/v1 -kind: Issuer -metadata: - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: webhook - name: example-opentelemetry-operator-selfsigned-issuer - namespace: default -spec: - selfSigned: {} - diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/clusterrole.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/clusterrole.yaml deleted file mode 100644 index 2037050533..0000000000 --- a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/clusterrole.yaml +++ /dev/null @@ -1,410 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/clusterrole.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: controller-manager - name: example-opentelemetry-operator-manager -rules: - - apiGroups: - - "" - resources: - - configmaps - - persistentvolumeclaims - - persistentvolumes - - pods - - serviceaccounts - - services - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - "" - resources: - - events - verbs: - - create - - get - - list - - patch - - watch - - apiGroups: - - "" - resources: - - namespaces - verbs: - - list - - watch - - apiGroups: - - "" - resources: - - namespaces/status - verbs: - - get - - list - - watch - - apiGroups: - - "" - resources: - - nodes/spec - verbs: - - get - - list - - watch - - apiGroups: - - "" - resources: - - pods/status - verbs: - - get - - list - - watch - - apiGroups: - - "" - resources: - - replicationcontrollers - verbs: - - get - - list - - watch - - apiGroups: - - "" - resources: - - replicationcontrollers/status - verbs: - - get - - list - - watch - - apiGroups: - - "" - resources: - - resourcequotas - verbs: - - get - - list - - watch - - apiGroups: - - apps - resources: - - daemonsets - - deployments - - statefulsets - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - apps - - extensions - resources: - - replicasets - verbs: - - get - - list - - watch - - apiGroups: - - extensions - resources: - - daemonsets - verbs: - - get - - list - - watch - - apiGroups: - - extensions - resources: - - deployments - verbs: - - get - - list - - watch - - apiGroups: - - autoscaling - resources: - - horizontalpodautoscalers - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - batch - resources: - - jobs - verbs: - - get - - list - - watch - - apiGroups: - - batch - resources: - - cronjobs - verbs: - - get - - list - - watch - - apiGroups: - - "" - resources: - - nodes/proxy - verbs: - - get - - apiGroups: - - "" - resources: - - nodes/stats - verbs: - - get - - apiGroups: - - config.openshift.io - resources: - - infrastructures - - infrastructures/status - verbs: - - get - - list - - watch - - apiGroups: - - coordination.k8s.io - resources: - - leases - verbs: - - create - - get - - list - - update - - apiGroups: - - discovery.k8s.io - resources: - - endpointslices - verbs: - - get - - list - - apiGroups: - - events.k8s.io - resources: - - events - verbs: - - create - - list - - patch - - watch - - apiGroups: - - gateway.networking.k8s.io - resources: - - httproutes - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - monitoring.coreos.com - resources: - - podmonitors - - servicemonitors - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - networking.k8s.io - resources: - - ingresses - - networkpolicies - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - opentelemetry.io - resources: - - instrumentations - verbs: - - get - - list - - patch - - update - - watch - - apiGroups: - - opentelemetry.io - resources: - - opampbridges - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - opentelemetry.io - resources: - - opampbridges/finalizers - verbs: - - update - - apiGroups: - - opentelemetry.io - resources: - - opampbridges/status - verbs: - - get - - patch - - update - - apiGroups: - - opentelemetry.io - resources: - - opentelemetrycollectors - verbs: - - get - - list - - patch - - update - - watch - - apiGroups: - - opentelemetry.io - resources: - - opentelemetrycollectors/finalizers - verbs: - - get - - patch - - update - - apiGroups: - - opentelemetry.io - resources: - - opentelemetrycollectors/status - verbs: - - get - - patch - - update - - apiGroups: - - policy - resources: - - poddisruptionbudgets - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - route.openshift.io - resources: - - routes - - routes/custom-host - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - opentelemetry.io - resources: - - targetallocators - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - opentelemetry.io - resources: - - targetallocators/status - verbs: - - get - - patch - - update - - apiGroups: - - opentelemetry.io - resources: - - targetallocators/finalizers - verbs: - - get - - patch - - update - - apiGroups: - - cert-manager.io - resources: - - issuers - - certificaterequests - - certificates - verbs: - - create - - get - - list - - watch - - update - - patch - - delete - - apiGroups: - - authentication.k8s.io - resources: - - tokenreviews - verbs: - - create - - apiGroups: - - authorization.k8s.io - resources: - - subjectaccessreviews - verbs: - - create ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/clusterrole.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: controller-manager - name: example-opentelemetry-operator-metrics -rules: - - nonResourceURLs: - - /metrics - verbs: - - get - - diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/clusterrolebinding.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/clusterrolebinding.yaml deleted file mode 100644 index 4acb7d53f5..0000000000 --- a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/clusterrolebinding.yaml +++ /dev/null @@ -1,24 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/clusterrolebinding.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding -metadata: - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: controller-manager - name: example-opentelemetry-operator-manager -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: example-opentelemetry-operator-manager -subjects: - - kind: ServiceAccount - name: opentelemetry-operator - namespace: default - - diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/deployment.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/deployment.yaml deleted file mode 100644 index c775cd1cf3..0000000000 --- a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/deployment.yaml +++ /dev/null @@ -1,105 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/deployment.yaml -apiVersion: apps/v1 -kind: Deployment -metadata: - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: controller-manager - name: example-opentelemetry-operator - namespace: default -spec: - replicas: 1 - revisionHistoryLimit: 10 - selector: - matchLabels: - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/component: controller-manager - template: - metadata: - annotations: - kubectl.kubernetes.io/default-container: manager - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: controller-manager - spec: - automountServiceAccountToken: true - hostNetwork: false - containers: - - args: - - --metrics-addr=0.0.0.0:8443 - - --metrics-secure=true - - --enable-leader-election - - --health-probe-addr=:8081 - - --webhook-port=9443 - - --collector-image=otel/opentelemetry-collector-k8s:0.151.0 - command: - - /manager - env: - - name: SERVICE_ACCOUNT_NAME - valueFrom: - fieldRef: - fieldPath: spec.serviceAccountName - - name: ENABLE_WEBHOOKS - value: "true" - image: "ghcr.io/open-telemetry/opentelemetry-operator/opentelemetry-operator:0.151.0" - name: manager - imagePullPolicy: IfNotPresent - ports: - - containerPort: 8443 - name: metrics - protocol: TCP - - containerPort: 9443 - name: webhook-server - protocol: TCP - livenessProbe: - httpGet: - path: /healthz - port: 8081 - initialDelaySeconds: 15 - periodSeconds: 20 - readinessProbe: - httpGet: - path: /readyz - port: 8081 - initialDelaySeconds: 5 - periodSeconds: 10 - resources: - {} - volumeMounts: - - mountPath: /tmp/k8s-webhook-server/serving-certs - name: cert - readOnly: true - securityContext: - allowPrivilegeEscalation: false - capabilities: - drop: - - ALL - runAsNonRoot: true - seccompProfile: - type: RuntimeDefault - nodeSelector: - kubernetes.io/os: linux - serviceAccountName: opentelemetry-operator - terminationGracePeriodSeconds: 10 - volumes: - - name: cert - secret: - defaultMode: 420 - secretName: example-opentelemetry-operator-controller-manager-service-cert - securityContext: - fsGroup: 65532 - runAsGroup: 65532 - runAsNonRoot: true - runAsUser: 65532 - diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/role.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/role.yaml deleted file mode 100644 index b5339517a2..0000000000 --- a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/role.yaml +++ /dev/null @@ -1,200 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/role.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: controller-manager - name: example-opentelemetry-operator-leader-election - namespace: default -rules: - - apiGroups: - - "" - resources: - - configmaps - - pods - - serviceaccounts - - services - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - "" - resources: - - events - verbs: - - create - - patch - - apiGroups: - - "" - resources: - - namespaces - - secrets - verbs: - - get - - list - - watch - - apiGroups: - - apps - resources: - - daemonsets - - deployments - - statefulsets - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - apps - resources: - - replicasets - verbs: - - get - - list - - watch - - apiGroups: - - autoscaling - resources: - - horizontalpodautoscalers - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - batch - resources: - - jobs - verbs: - - get - - list - - watch - - apiGroups: - - config.openshift.io - resources: - - infrastructures - - infrastructures/status - verbs: - - get - - list - - watch - - apiGroups: - - coordination.k8s.io - resources: - - leases - verbs: - - create - - get - - list - - update - - apiGroups: - - monitoring.coreos.com - resources: - - podmonitors - - servicemonitors - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - networking.k8s.io - resources: - - ingresses - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - opentelemetry.io - resources: - - instrumentations - - opentelemetrycollectors - verbs: - - get - - list - - patch - - update - - watch - - apiGroups: - - opentelemetry.io - resources: - - opampbridges - - targetallocators - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - opentelemetry.io - resources: - - opampbridges/finalizers - verbs: - - update - - apiGroups: - - opentelemetry.io - resources: - - opampbridges/status - - opentelemetrycollectors/finalizers - - opentelemetrycollectors/status - - targetallocators/status - - targetallocators/finalizers - verbs: - - get - - patch - - update - - apiGroups: - - policy - resources: - - poddisruptionbudgets - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - route.openshift.io - resources: - - routes - - routes/custom-host - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/rolebinding.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/rolebinding.yaml deleted file mode 100644 index ae376e80c9..0000000000 --- a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/rolebinding.yaml +++ /dev/null @@ -1,24 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/rolebinding.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding -metadata: - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: controller-manager - name: example-opentelemetry-operator-leader-election - namespace: default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: example-opentelemetry-operator-leader-election -subjects: - - kind: ServiceAccount - name: opentelemetry-operator - namespace: default - diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/service.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/service.yaml deleted file mode 100644 index 0a3006d80f..0000000000 --- a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/service.yaml +++ /dev/null @@ -1,48 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/service.yaml -apiVersion: v1 -kind: Service -metadata: - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: controller-manager - name: example-opentelemetry-operator - namespace: default -spec: - ports: - - name: metrics - port: 8443 - protocol: TCP - targetPort: metrics - selector: - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/component: controller-manager ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/service.yaml -apiVersion: v1 -kind: Service -metadata: - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: controller-manager - name: example-opentelemetry-operator-webhook - namespace: default -spec: - ports: - - port: 443 - protocol: TCP - targetPort: webhook-server - selector: - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/component: controller-manager - diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/serviceaccount.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/serviceaccount.yaml deleted file mode 100644 index c6ba25dbac..0000000000 --- a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/serviceaccount.yaml +++ /dev/null @@ -1,17 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/serviceaccount.yaml -apiVersion: v1 -kind: ServiceAccount -automountServiceAccountToken: true -metadata: - name: opentelemetry-operator - namespace: default - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: controller-manager - diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml deleted file mode 100644 index 9039160e03..0000000000 --- a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml +++ /dev/null @@ -1,54 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/tests/test-certmanager-connection.yaml -apiVersion: v1 -kind: Pod -metadata: - name: "example-opentelemetry-operator-cert-manager" - namespace: default - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: webhook - annotations: - "helm.sh/hook": test -spec: - containers: - - name: wget - image: "busybox:latest" - env: - - name: CERT_MANAGER_CLUSTERIP - value: "cert-manager-webhook" - - name: CERT_MANAGER_PORT - value: "443" - command: - - sh - - -c - # The following shell script tests if the cert-manager service is up. If the service is up, when we try - # to wget its exposed port, we will get an HTTP error 400. - - | - wget_output=$(wget -q "$CERT_MANAGER_CLUSTERIP:$CERT_MANAGER_PORT") - if wget_output=="wget: server returned error: HTTP/1.0 400 Bad Request" - then exit 0 - else exit 1 - fi - securityContext: - allowPrivilegeEscalation: false - capabilities: - drop: - - ALL - runAsNonRoot: true - seccompProfile: - type: RuntimeDefault - restartPolicy: Never - nodeSelector: - kubernetes.io/os: linux - securityContext: - fsGroup: 65532 - runAsGroup: 65532 - runAsNonRoot: true - runAsUser: 65532 - diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/tests/test-service-connection.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/tests/test-service-connection.yaml deleted file mode 100644 index 88e0e0bc24..0000000000 --- a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/tests/test-service-connection.yaml +++ /dev/null @@ -1,107 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/tests/test-service-connection.yaml -apiVersion: v1 -kind: Pod -metadata: - name: "example-opentelemetry-operator-metrics" - namespace: default - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: controller-manager - annotations: - "helm.sh/hook": test -spec: - containers: - - name: wget - image: "busybox:latest" - env: - - name: MANAGER_METRICS_SERVICE_CLUSTERIP - value: "example-opentelemetry-operator" - - name: MANAGER_METRICS_SERVICE_PORT - value: "8443" - command: - - sh - - -c - # The following shell script tests if the controller-manager-metrics-service is up. - # If the service is up, when we try to wget its exposed port, we will get an HTTP error 400. - - | - wget_output=$(wget -q "$MANAGER_METRICS_SERVICE_CLUSTERIP:$MANAGER_METRICS_SERVICE_PORT") - if wget_output=="wget: server returned error: HTTP/1.0 400 Bad Request" - then exit 0 - else exit 1 - fi - securityContext: - allowPrivilegeEscalation: false - capabilities: - drop: - - ALL - runAsNonRoot: true - seccompProfile: - type: RuntimeDefault - restartPolicy: Never - nodeSelector: - kubernetes.io/os: linux - securityContext: - fsGroup: 65532 - runAsGroup: 65532 - runAsNonRoot: true - runAsUser: 65532 ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/tests/test-service-connection.yaml -apiVersion: v1 -kind: Pod -metadata: - name: "example-opentelemetry-operator-webhook" - namespace: default - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: controller-manager - annotations: - "helm.sh/hook": test -spec: - containers: - - name: wget - image: "busybox:latest" - env: - - name: WEBHOOK_SERVICE_CLUSTERIP - value: "example-opentelemetry-operator-webhook" - - name: WEBHOOK_SERVICE_PORT - value: "443" - command: - - sh - - -c - # The following shell script tests if the webhook service is up. If the service is up, when we try - # to wget its exposed port, we will get an HTTP error 400. - - | - wget_output=$(wget -q "$WEBHOOK_SERVICE_CLUSTERIP:$WEBHOOK_SERVICE_PORT") - if wget_output=="wget: server returned error: HTTP/1.0 400 Bad Request" - then exit 0 - else exit 1 - fi - securityContext: - allowPrivilegeEscalation: false - capabilities: - drop: - - ALL - runAsNonRoot: true - seccompProfile: - type: RuntimeDefault - restartPolicy: Never - nodeSelector: - kubernetes.io/os: linux - securityContext: - fsGroup: 65532 - runAsGroup: 65532 - runAsNonRoot: true - runAsUser: 65532 - diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/prometheus-node-exporter/daemonset.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/prometheus-node-exporter/daemonset.yaml deleted file mode 100644 index 1758e4e4be..0000000000 --- a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/prometheus-node-exporter/daemonset.yaml +++ /dev/null @@ -1,134 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/charts/prometheus-node-exporter/templates/daemonset.yaml -apiVersion: apps/v1 -kind: DaemonSet -metadata: - name: example-prometheus-node-exporter - namespace: default - labels: - helm.sh/chart: prometheus-node-exporter-4.48.0 - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/component: metrics - app.kubernetes.io/part-of: prometheus-node-exporter - app.kubernetes.io/name: prometheus-node-exporter - app.kubernetes.io/instance: example - app.kubernetes.io/version: "1.9.1" - release: example -spec: - selector: - matchLabels: - app.kubernetes.io/name: prometheus-node-exporter - app.kubernetes.io/instance: example - revisionHistoryLimit: 10 - updateStrategy: - rollingUpdate: - maxUnavailable: 1 - type: RollingUpdate - template: - metadata: - annotations: - cluster-autoscaler.kubernetes.io/safe-to-evict: "true" - labels: - helm.sh/chart: prometheus-node-exporter-4.48.0 - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/component: metrics - app.kubernetes.io/part-of: prometheus-node-exporter - app.kubernetes.io/name: prometheus-node-exporter - app.kubernetes.io/instance: example - app.kubernetes.io/version: "1.9.1" - release: example - jobLabel: node-exporter - spec: - automountServiceAccountToken: false - securityContext: - fsGroup: 65534 - runAsGroup: 65534 - runAsNonRoot: true - runAsUser: 65534 - serviceAccountName: example-prometheus-node-exporter - containers: - - name: node-exporter - image: quay.io/prometheus/node-exporter:v1.9.1 - imagePullPolicy: IfNotPresent - args: - - --path.procfs=/host/proc - - --path.sysfs=/host/sys - - --path.rootfs=/host/root - - --path.udev.data=/host/root/run/udev/data - - --web.listen-address=[$(HOST_IP)]:9100 - - --collector.filesystem.mount-points-exclude=^/(dev|proc|sys|var/lib/docker/.+|var/lib/kubelet/.+)($|/) - - --collector.filesystem.fs-types-exclude=^(autofs|binfmt_misc|bpf|cgroup2?|configfs|debugfs|devpts|devtmpfs|fusectl|hugetlbfs|iso9660|mqueue|nsfs|overlay|proc|procfs|pstore|rpc_pipefs|securityfs|selinuxfs|squashfs|sysfs|tracefs)$ - securityContext: - readOnlyRootFilesystem: true - env: - - name: HOST_IP - value: 0.0.0.0 - ports: - - name: http-metrics - containerPort: 9100 - protocol: TCP - livenessProbe: - failureThreshold: 3 - httpGet: - httpHeaders: - path: / - port: http-metrics - scheme: HTTP - initialDelaySeconds: 0 - periodSeconds: 10 - successThreshold: 1 - timeoutSeconds: 1 - readinessProbe: - failureThreshold: 3 - httpGet: - httpHeaders: - path: / - port: http-metrics - scheme: HTTP - initialDelaySeconds: 0 - periodSeconds: 10 - successThreshold: 1 - timeoutSeconds: 1 - volumeMounts: - - name: proc - mountPath: /host/proc - readOnly: true - - name: sys - mountPath: /host/sys - readOnly: true - - name: root - mountPath: /host/root - mountPropagation: HostToContainer - readOnly: true - hostNetwork: true - hostPID: true - hostIPC: false - affinity: - nodeAffinity: - requiredDuringSchedulingIgnoredDuringExecution: - nodeSelectorTerms: - - matchExpressions: - - key: eks.amazonaws.com/compute-type - operator: NotIn - values: - - fargate - - key: type - operator: NotIn - values: - - virtual-kubelet - nodeSelector: - kubernetes.io/os: linux - tolerations: - - effect: NoSchedule - operator: Exists - volumes: - - name: proc - hostPath: - path: /proc - - name: sys - hostPath: - path: /sys - - name: root - hostPath: - path: / - diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/prometheus-node-exporter/service.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/prometheus-node-exporter/service.yaml deleted file mode 100644 index 8b8fd23461..0000000000 --- a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/prometheus-node-exporter/service.yaml +++ /dev/null @@ -1,30 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/charts/prometheus-node-exporter/templates/service.yaml -apiVersion: v1 -kind: Service -metadata: - name: example-prometheus-node-exporter - namespace: default - labels: - helm.sh/chart: prometheus-node-exporter-4.48.0 - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/component: metrics - app.kubernetes.io/part-of: prometheus-node-exporter - app.kubernetes.io/name: prometheus-node-exporter - app.kubernetes.io/instance: example - app.kubernetes.io/version: "1.9.1" - release: example - jobLabel: node-exporter - annotations: - prometheus.io/scrape: "true" -spec: - type: ClusterIP - ports: - - port: 9100 - targetPort: 9100 - protocol: TCP - name: http-metrics - selector: - app.kubernetes.io/name: prometheus-node-exporter - app.kubernetes.io/instance: example - diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/prometheus-node-exporter/serviceaccount.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/prometheus-node-exporter/serviceaccount.yaml deleted file mode 100644 index a3b0f1eddf..0000000000 --- a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/prometheus-node-exporter/serviceaccount.yaml +++ /dev/null @@ -1,17 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/charts/prometheus-node-exporter/templates/serviceaccount.yaml -apiVersion: v1 -kind: ServiceAccount -metadata: - name: example-prometheus-node-exporter - namespace: default - labels: - helm.sh/chart: prometheus-node-exporter-4.48.0 - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/component: metrics - app.kubernetes.io/part-of: prometheus-node-exporter - app.kubernetes.io/name: prometheus-node-exporter - app.kubernetes.io/instance: example - app.kubernetes.io/version: "1.9.1" - release: example -automountServiceAccountToken: false diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/prometheus-node-exporter/servicemonitor.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/prometheus-node-exporter/servicemonitor.yaml deleted file mode 100644 index 6a6ccabf3a..0000000000 --- a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/prometheus-node-exporter/servicemonitor.yaml +++ /dev/null @@ -1,29 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/charts/prometheus-node-exporter/templates/servicemonitor.yaml -apiVersion: monitoring.coreos.com/v1 -kind: ServiceMonitor -metadata: - name: example-prometheus-node-exporter - namespace: default - labels: - helm.sh/chart: prometheus-node-exporter-4.48.0 - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/component: metrics - app.kubernetes.io/part-of: prometheus-node-exporter - app.kubernetes.io/name: prometheus-node-exporter - app.kubernetes.io/instance: example - app.kubernetes.io/version: "1.9.1" - release: example -spec: - jobLabel: jobLabel - - selector: - matchLabels: - app.kubernetes.io/name: prometheus-node-exporter - app.kubernetes.io/instance: example - attachMetadata: - node: false - endpoints: - - port: http-metrics - scheme: http - diff --git a/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/clusterrole.yaml b/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/clusterrole.yaml deleted file mode 100644 index 04fd4b7372..0000000000 --- a/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/clusterrole.yaml +++ /dev/null @@ -1,141 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/templates/clusterrole.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - name: example-collector -rules: -- apiGroups: [""] - resources: - - namespaces - - nodes - - nodes/proxy - - nodes/metrics - - nodes/stats - - services - - endpoints - - pods - - events - - secrets - - persistentvolumeclaims - - persistentvolumes - verbs: ["get", "list", "watch"] -- apiGroups: ["monitoring.coreos.com"] - resources: - - servicemonitors - - podmonitors - - scrapeconfigs - - probes - verbs: ["get", "list", "watch"] -- apiGroups: - - extensions - resources: - - ingresses - verbs: ["get", "list", "watch"] -- apiGroups: - - apps - resources: - - daemonsets - - deployments - - replicasets - - statefulsets - verbs: ["get", "list", "watch"] -- apiGroups: - - networking.k8s.io - resources: - - ingresses - verbs: ["get", "list", "watch"] -- apiGroups: ["discovery.k8s.io"] - resources: - - endpointslices - verbs: ["get", "list", "watch"] -- nonResourceURLs: ["/metrics", "/metrics/cadvisor"] - verbs: ["get"] - -- verbs: - - get - - list - - watch - - create - - update - - patch - - delete - apiGroups: - - coordination.k8s.io - resources: - - leases -- apiGroups: - - "" - resources: - - events - - namespaces - - namespaces/status - - nodes - - nodes/spec - - pods - - pods/status - - replicationcontrollers - - replicationcontrollers/status - - resourcequotas - - services - verbs: - - get - - list - - watch -- apiGroups: - - apps - resources: - - daemonsets - - deployments - - replicasets - - statefulsets - verbs: - - get - - list - - watch -- apiGroups: - - extensions - resources: - - daemonsets - - deployments - - replicasets - verbs: - - get - - list - - watch -- apiGroups: - - batch - resources: - - jobs - - cronjobs - verbs: - - get - - list - - watch -- apiGroups: - - autoscaling - resources: - - horizontalpodautoscalers - verbs: - - get - - list - - watch -- apiGroups: ["events.k8s.io"] - resources: ["events"] - verbs: ["watch", "list"] ---- -# Source: opentelemetry-kube-stack/templates/clusterrole.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding -metadata: - name: example-daemon -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: example-collector -subjects: -- kind: ServiceAccount - # quirk of the Operator - name: "example-daemon-collector" - namespace: default - diff --git a/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/collector.yaml b/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/collector.yaml deleted file mode 100644 index 036ae97b72..0000000000 --- a/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/collector.yaml +++ /dev/null @@ -1,515 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/templates/collector.yaml -apiVersion: opentelemetry.io/v1beta1 -kind: OpenTelemetryCollector -metadata: - name: example-daemon - namespace: default - labels: - helm.sh/chart: opentelemetry-kube-stack-0.16.0 - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - release: "example" -spec: - managementState: managed - mode: daemonset - config: - exporters: - debug: {} - extensions: - k8s_leader_elector/k8s_cluster: - auth_type: serviceAccount - lease_name: k8s.cluster.receiver.opentelemetry.io - lease_namespace: default - k8s_leader_elector/k8s_objects: - auth_type: serviceAccount - lease_name: k8s.objects.receiver.opentelemetry.io - lease_namespace: default - processors: - batch: - send_batch_max_size: 1500 - send_batch_size: 1000 - timeout: 1s - k8sattributes: - extract: - labels: - - from: pod - key: app.kubernetes.io/instance - tag_name: k8s.app.instance - - from: pod - key: app.kubernetes.io/component - tag_name: k8s.app.component - metadata: - - k8s.namespace.name - - k8s.pod.name - - k8s.pod.uid - - k8s.node.name - - k8s.pod.start_time - - k8s.deployment.name - - k8s.replicaset.name - - k8s.replicaset.uid - - k8s.daemonset.name - - k8s.daemonset.uid - - k8s.job.name - - k8s.job.uid - - k8s.container.name - - k8s.cronjob.name - - k8s.statefulset.name - - k8s.statefulset.uid - - container.image.tag - - container.image.name - - k8s.cluster.uid - - service.namespace - - service.name - - service.version - - service.instance.id - otel_annotations: true - filter: - node_from_env_var: OTEL_K8S_NODE_NAME - passthrough: false - pod_association: - - sources: - - from: resource_attribute - name: k8s.pod.uid - - sources: - - from: resource_attribute - name: k8s.pod.name - - from: resource_attribute - name: k8s.namespace.name - - from: resource_attribute - name: k8s.node.name - - sources: - - from: resource_attribute - name: k8s.pod.ip - - sources: - - from: resource_attribute - name: k8s.pod.name - - from: resource_attribute - name: k8s.namespace.name - - sources: - - from: connection - resource/hostname: - attributes: - - action: insert - from_attribute: k8s.node.name - key: host.name - resourcedetection/env: - detectors: - - env - - k8snode - override: false - timeout: 2s - receivers: - filelog: - exclude: [] - include: - - /var/log/pods/*/*/*.log - include_file_name: false - include_file_path: true - operators: - - id: container-parser - max_log_size: 102400 - type: container - retry_on_failure: - enabled: true - start_at: end - hostmetrics: - collection_interval: 10s - root_path: /hostfs - scrapers: - cpu: - metrics: - system.cpu.logical.count: - enabled: true - system.cpu.utilization: - enabled: true - disk: {} - filesystem: - exclude_fs_types: - fs_types: - - autofs - - binfmt_misc - - bpf - - cgroup2 - - configfs - - debugfs - - devpts - - devtmpfs - - fusectl - - hugetlbfs - - iso9660 - - mqueue - - nsfs - - overlay - - proc - - procfs - - pstore - - rpc_pipefs - - securityfs - - selinuxfs - - squashfs - - sysfs - - tracefs - match_type: strict - exclude_mount_points: - match_type: regexp - mount_points: - - /dev/* - - /proc/* - - /sys/* - - /run/k3s/containerd/* - - /var/lib/docker/* - - /var/lib/kubelet/* - - /snap/* - metrics: - system.filesystem.utilization: - enabled: true - load: {} - memory: - metrics: - system.memory.limit: - enabled: true - system.memory.utilization: - enabled: true - network: {} - paging: - metrics: - system.paging.usage: - enabled: true - system: - metrics: - system.uptime: - enabled: true - k8s_cluster: - allocatable_types_to_report: - - cpu - - memory - - storage - auth_type: serviceAccount - collection_interval: 10s - k8s_leader_elector: k8s_leader_elector/k8s_cluster - node_conditions_to_report: - - Ready - - MemoryPressure - - DiskPressure - - NetworkUnavailable - k8sobjects: - k8s_leader_elector: k8s_leader_elector/k8s_objects - objects: - - exclude_watch_type: - - DELETED - group: events.k8s.io - mode: watch - name: events - kubeletstats: - auth_type: serviceAccount - collection_interval: 15s - endpoint: https://${env:OTEL_K8S_NODE_IP}:10250 - extra_metadata_labels: - - container.id - - k8s.volume.type - insecure_skip_verify: true - k8s_api_config: - auth_type: serviceAccount - metric_groups: - - node - - pod - - volume - - container - metrics: - container.cpu.usage: - enabled: true - k8s.node.cpu.usage: - enabled: true - k8s.node.uptime: - enabled: true - k8s.pod.cpu.usage: - enabled: true - k8s.pod.uptime: - enabled: true - otlp: - protocols: - grpc: - endpoint: 0.0.0.0:4317 - http: - endpoint: 0.0.0.0:4318 - prometheus: - config: - scrape_configs: - - job_name: kubernetes-pods - kubernetes_sd_configs: - - role: pod - selectors: - - field: spec.nodeName=${env:OTEL_K8S_NODE_NAME} - role: pod - relabel_configs: - - action: keep - regex: true - source_labels: - - __meta_kubernetes_pod_annotation_prometheus_io_scrape - - action: drop - regex: true - source_labels: - - __meta_kubernetes_pod_annotation_prometheus_io_scrape_slow - - action: replace - regex: (https?) - source_labels: - - __meta_kubernetes_pod_annotation_prometheus_io_scheme - target_label: __scheme__ - - action: replace - regex: (.+) - source_labels: - - __meta_kubernetes_pod_annotation_prometheus_io_path - target_label: __metrics_path__ - - action: replace - regex: ([^:]+)(?::\d+)?;(\d+) - replacement: $$1:$$2 - source_labels: - - __address__ - - __meta_kubernetes_pod_annotation_prometheus_io_port - target_label: __address__ - - action: labelmap - regex: __meta_kubernetes_pod_annotation_prometheus_io_param_(.+) - replacement: __param_$$1 - - action: labelmap - regex: __meta_kubernetes_pod_label_(.+) - - action: replace - source_labels: - - __meta_kubernetes_namespace - target_label: namespace - - action: replace - source_labels: - - __meta_kubernetes_pod_name - target_label: pod - - action: drop - regex: Pending|Succeeded|Failed|Completed - source_labels: - - __meta_kubernetes_pod_phase - - action: replace - source_labels: - - __meta_kubernetes_pod_label_app_kubernetes_io_name - target_label: job - scrape_interval: 30s - - job_name: node-exporter - relabel_configs: - - action: labelmap - regex: __meta_kubernetes_node_label_(.+) - - action: replace - regex: (.*) - replacement: $$1 - separator: ; - source_labels: - - job - target_label: __tmp_prometheus_job_name - scrape_interval: 30s - static_configs: - - targets: - - ${env:OTEL_K8S_NODE_IP}:9100 - - authorization: - credentials_file: /var/run/secrets/kubernetes.io/serviceaccount/token - type: Bearer - follow_redirects: true - honor_labels: true - honor_timestamps: true - job_name: kubelet - kubernetes_sd_configs: - - follow_redirects: true - role: node - selectors: - - field: metadata.name=${env:OTEL_K8S_NODE_NAME} - role: node - metric_relabel_configs: - - action: drop - regex: container_cpu_(load_average_10s|system_seconds_total|user_seconds_total) - replacement: $$1 - separator: ; - source_labels: - - __name__ - - action: drop - regex: container_fs_(io_current|reads_merged_total|sector_reads_total|sector_writes_total|writes_merged_total) - replacement: $$1 - separator: ; - source_labels: - - __name__ - - action: drop - regex: container_memory_(mapped_file|swap) - replacement: $$1 - separator: ; - source_labels: - - __name__ - - action: drop - regex: container_(file_descriptors|tasks_state|threads_max) - replacement: $$1 - separator: ; - source_labels: - - __name__ - - action: drop - regex: container_spec.* - replacement: $$1 - separator: ; - source_labels: - - __name__ - - action: drop - regex: .+; - replacement: $$1 - separator: ; - source_labels: - - id - - pod - metrics_path: /metrics/cadvisor - relabel_configs: - - action: replace - regex: (.*) - replacement: $$1 - separator: ; - source_labels: - - job - target_label: __tmp_prometheus_job_name - - action: replace - replacement: kubelet - target_label: job - - action: replace - regex: (.*) - replacement: $$1 - separator: ; - source_labels: - - __meta_kubernetes_node_name - target_label: node - - action: replace - regex: (.*) - replacement: https-metrics - separator: ; - target_label: endpoint - - action: replace - regex: (.*) - replacement: $$1 - separator: ; - source_labels: - - __metrics_path__ - target_label: metrics_path - - action: hashmod - modulus: 1 - regex: (.*) - replacement: $$1 - separator: ; - source_labels: - - __address__ - target_label: __tmp_hash - - action: keep - regex: $(SHARD) - replacement: $$1 - separator: ; - source_labels: - - __tmp_hash - scheme: https - scrape_interval: 15s - scrape_timeout: 10s - tls_config: - ca_file: /var/run/secrets/kubernetes.io/serviceaccount/ca.crt - insecure_skip_verify: true - service: - extensions: - - k8s_leader_elector/k8s_objects - - k8s_leader_elector/k8s_cluster - pipelines: - logs: - exporters: - - debug - processors: - - k8sattributes - - resourcedetection/env - - resource/hostname - - batch - receivers: - - otlp - - filelog - - k8sobjects - metrics: - exporters: - - debug - processors: - - k8sattributes - - resourcedetection/env - - resource/hostname - - batch - receivers: - - prometheus - - otlp - - hostmetrics - - kubeletstats - - k8s_cluster - traces: - exporters: - - debug - processors: - - k8sattributes - - resourcedetection/env - - resource/hostname - - batch - receivers: - - otlp - imagePullPolicy: IfNotPresent - upgradeStrategy: automatic - terminationGracePeriodSeconds: 30 - resources: - limits: - cpu: 200m - memory: 500Mi - requests: - cpu: 100m - memory: 250Mi - securityContext: - {} - volumeMounts: - - name: varlogpods - mountPath: /var/log/pods - readOnly: true - - name: varlibdockercontainers - mountPath: /var/lib/docker/containers - readOnly: true - - name: hostfs - mountPath: /hostfs - readOnly: true - mountPropagation: HostToContainer - env: - - name: K8S_NODE_NAME - valueFrom: - fieldRef: - fieldPath: spec.nodeName - - name: OTEL_K8S_NODE_NAME - valueFrom: - fieldRef: - fieldPath: spec.nodeName - - name: OTEL_K8S_NODE_IP - valueFrom: - fieldRef: - fieldPath: status.hostIP - - name: OTEL_K8S_NAMESPACE - valueFrom: - fieldRef: - apiVersion: v1 - fieldPath: metadata.namespace - - name: OTEL_K8S_POD_NAME - valueFrom: - fieldRef: - apiVersion: v1 - fieldPath: metadata.name - - name: OTEL_K8S_POD_IP - valueFrom: - fieldRef: - apiVersion: v1 - fieldPath: status.podIP - - name: OTEL_RESOURCE_ATTRIBUTES - value: "k8s.pod.name=$(OTEL_K8S_POD_NAME),k8s.namespace.name=$(OTEL_K8S_NAMESPACE),k8s.node.name=$(OTEL_K8S_NODE_NAME),host.name=$(OTEL_K8S_NODE_NAME),k8s.node.ip=$(OTEL_K8S_NODE_IP),k8s.pod.ip=$(OTEL_K8S_POD_IP),k8s.cluster.name=demo" - - volumes: - - name: varlogpods - hostPath: - path: /var/log/pods - - name: varlibdockercontainers - hostPath: - path: /var/lib/docker/containers - - name: hostfs - hostPath: - path: / - diff --git a/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/extramanifests.yaml b/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/extramanifests.yaml deleted file mode 100644 index ad558c0210..0000000000 --- a/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/extramanifests.yaml +++ /dev/null @@ -1,21 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/templates/extramanifests.yaml -apiVersion: secrets-store.csi.x-k8s.io/v1 -kind: SecretProviderClass -metadata: - name: collector-credentials -spec: - parameters: - objects: | - - secretPath: data/collector-credentials - objectName: token - secretKey: token - vaultAddress: https://your-vault.com - provider: vault - secretObjects: - - data: - - key: ACCESS_TOKEN - objectName: token - secretName: collector-credentials-secret - type: Opaque - diff --git a/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/hooks.yaml b/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/hooks.yaml deleted file mode 100644 index df09c1e80b..0000000000 --- a/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/hooks.yaml +++ /dev/null @@ -1,65 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/templates/hooks.yaml -apiVersion: v1 -kind: ServiceAccount -metadata: - name: delete-resources-sa - annotations: - "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded ---- -# Source: opentelemetry-kube-stack/templates/hooks.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - name: delete-resources-role - annotations: - "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded -rules: - - apiGroups: - - opentelemetry.io - resources: - - instrumentations - - opampbridges - - opentelemetrycollectors - verbs: - - get - - list - - delete ---- -# Source: opentelemetry-kube-stack/templates/hooks.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding -metadata: - name: delete-resources-rolebinding - annotations: - "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: delete-resources-role -subjects: - - kind: ServiceAccount - name: delete-resources-sa ---- -# Source: opentelemetry-kube-stack/templates/hooks.yaml -apiVersion: batch/v1 -kind: Job -metadata: - name: opentelemetry-kube-stack-pre-delete-job - annotations: - "helm.sh/hook": pre-delete - "helm.sh/hook-delete-policy": hook-succeeded,hook-failed -spec: - template: - spec: - restartPolicy: Never - serviceAccountName: delete-resources-sa - containers: - - name: delete-resources - image: "rancher/kubectl:v1.34.1" - args: - - "delete" - - "instrumentations,opampbridges,opentelemetrycollectors" - - "-l" - - "helm.sh/chart=opentelemetry-kube-stack-0.16.0" - diff --git a/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml b/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml deleted file mode 100644 index 17585fa86a..0000000000 --- a/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml +++ /dev/null @@ -1,193 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/admission-webhooks/operator-webhook-with-cert-manager.yaml -apiVersion: admissionregistration.k8s.io/v1 -kind: MutatingWebhookConfiguration -metadata: - annotations: - cert-manager.io/inject-ca-from: default/example-opentelemetry-operator-serving-cert - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: webhook - name: example-opentelemetry-operator-mutation -webhooks: - - admissionReviewVersions: - - v1 - clientConfig: - service: - name: example-opentelemetry-operator-webhook - namespace: default - path: /mutate-opentelemetry-io-v1alpha1-instrumentation - port: 443 - failurePolicy: Ignore - name: minstrumentation.kb.io - rules: - - apiGroups: - - opentelemetry.io - apiVersions: - - v1alpha1 - operations: - - CREATE - - UPDATE - resources: - - instrumentations - scope: Namespaced - sideEffects: None - timeoutSeconds: 10 - - admissionReviewVersions: - - v1 - clientConfig: - service: - name: example-opentelemetry-operator-webhook - namespace: default - path: /mutate-opentelemetry-io-v1beta1-opentelemetrycollector - port: 443 - failurePolicy: Ignore - name: mopentelemetrycollectorbeta.kb.io - rules: - - apiGroups: - - opentelemetry.io - apiVersions: - - v1beta1 - operations: - - CREATE - - UPDATE - resources: - - opentelemetrycollectors - scope: Namespaced - sideEffects: None - timeoutSeconds: 10 - - admissionReviewVersions: - - v1 - clientConfig: - service: - name: example-opentelemetry-operator-webhook - namespace: default - path: /mutate-v1-pod - port: 443 - failurePolicy: Ignore - name: mpod.kb.io - rules: - - apiGroups: - - "" - apiVersions: - - v1 - operations: - - CREATE - resources: - - pods - scope: Namespaced - sideEffects: None - timeoutSeconds: 10 ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/admission-webhooks/operator-webhook-with-cert-manager.yaml -apiVersion: admissionregistration.k8s.io/v1 -kind: ValidatingWebhookConfiguration -metadata: - annotations: - cert-manager.io/inject-ca-from: default/example-opentelemetry-operator-serving-cert - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: webhook - name: example-opentelemetry-operator-validation -webhooks: - - admissionReviewVersions: - - v1 - clientConfig: - service: - name: example-opentelemetry-operator-webhook - namespace: default - path: /validate-opentelemetry-io-v1alpha1-instrumentation - port: 443 - failurePolicy: Ignore - name: vinstrumentationcreateupdate.kb.io - rules: - - apiGroups: - - opentelemetry.io - apiVersions: - - v1alpha1 - operations: - - CREATE - - UPDATE - resources: - - instrumentations - scope: Namespaced - sideEffects: None - timeoutSeconds: 10 - - admissionReviewVersions: - - v1 - clientConfig: - service: - name: example-opentelemetry-operator-webhook - namespace: default - path: /validate-opentelemetry-io-v1alpha1-instrumentation - port: 443 - failurePolicy: Ignore - name: vinstrumentationdelete.kb.io - rules: - - apiGroups: - - opentelemetry.io - apiVersions: - - v1alpha1 - operations: - - DELETE - resources: - - instrumentations - scope: Namespaced - sideEffects: None - timeoutSeconds: 10 - - admissionReviewVersions: - - v1 - clientConfig: - service: - name: example-opentelemetry-operator-webhook - namespace: default - path: /validate-opentelemetry-io-v1beta1-opentelemetrycollector - port: 443 - failurePolicy: Ignore - name: vopentelemetrycollectorcreateupdatebeta.kb.io - rules: - - apiGroups: - - opentelemetry.io - apiVersions: - - v1beta1 - operations: - - CREATE - - UPDATE - resources: - - opentelemetrycollectors - scope: Namespaced - sideEffects: None - timeoutSeconds: 10 - - admissionReviewVersions: - - v1 - clientConfig: - service: - name: example-opentelemetry-operator-webhook - namespace: default - path: /validate-opentelemetry-io-v1beta1-opentelemetrycollector - port: 443 - failurePolicy: Ignore - name: vopentelemetrycollectordeletebeta.kb.io - rules: - - apiGroups: - - opentelemetry.io - apiVersions: - - v1beta1 - operations: - - DELETE - resources: - - opentelemetrycollectors - scope: Namespaced - sideEffects: None - timeoutSeconds: 10 - diff --git a/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/admission-webhooks/operator-webhook.yaml b/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/admission-webhooks/operator-webhook.yaml deleted file mode 100644 index 5b9ff5511d..0000000000 --- a/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/admission-webhooks/operator-webhook.yaml +++ /dev/null @@ -1,3 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/admission-webhooks/operator-webhook.yaml ---- diff --git a/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/certmanager.yaml b/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/certmanager.yaml deleted file mode 100644 index e8615238d0..0000000000 --- a/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/certmanager.yaml +++ /dev/null @@ -1,44 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/certmanager.yaml -apiVersion: cert-manager.io/v1 -kind: Certificate -metadata: - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: webhook - name: example-opentelemetry-operator-serving-cert - namespace: default -spec: - dnsNames: - - example-opentelemetry-operator-webhook.default.svc - - example-opentelemetry-operator-webhook.default.svc.cluster.local - issuerRef: - kind: Issuer - name: example-opentelemetry-operator-selfsigned-issuer - secretName: example-opentelemetry-operator-controller-manager-service-cert - subject: - organizationalUnits: - - example-opentelemetry-operator ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/certmanager.yaml -apiVersion: cert-manager.io/v1 -kind: Issuer -metadata: - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: webhook - name: example-opentelemetry-operator-selfsigned-issuer - namespace: default -spec: - selfSigned: {} - diff --git a/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/clusterrole.yaml b/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/clusterrole.yaml deleted file mode 100644 index 2037050533..0000000000 --- a/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/clusterrole.yaml +++ /dev/null @@ -1,410 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/clusterrole.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: controller-manager - name: example-opentelemetry-operator-manager -rules: - - apiGroups: - - "" - resources: - - configmaps - - persistentvolumeclaims - - persistentvolumes - - pods - - serviceaccounts - - services - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - "" - resources: - - events - verbs: - - create - - get - - list - - patch - - watch - - apiGroups: - - "" - resources: - - namespaces - verbs: - - list - - watch - - apiGroups: - - "" - resources: - - namespaces/status - verbs: - - get - - list - - watch - - apiGroups: - - "" - resources: - - nodes/spec - verbs: - - get - - list - - watch - - apiGroups: - - "" - resources: - - pods/status - verbs: - - get - - list - - watch - - apiGroups: - - "" - resources: - - replicationcontrollers - verbs: - - get - - list - - watch - - apiGroups: - - "" - resources: - - replicationcontrollers/status - verbs: - - get - - list - - watch - - apiGroups: - - "" - resources: - - resourcequotas - verbs: - - get - - list - - watch - - apiGroups: - - apps - resources: - - daemonsets - - deployments - - statefulsets - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - apps - - extensions - resources: - - replicasets - verbs: - - get - - list - - watch - - apiGroups: - - extensions - resources: - - daemonsets - verbs: - - get - - list - - watch - - apiGroups: - - extensions - resources: - - deployments - verbs: - - get - - list - - watch - - apiGroups: - - autoscaling - resources: - - horizontalpodautoscalers - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - batch - resources: - - jobs - verbs: - - get - - list - - watch - - apiGroups: - - batch - resources: - - cronjobs - verbs: - - get - - list - - watch - - apiGroups: - - "" - resources: - - nodes/proxy - verbs: - - get - - apiGroups: - - "" - resources: - - nodes/stats - verbs: - - get - - apiGroups: - - config.openshift.io - resources: - - infrastructures - - infrastructures/status - verbs: - - get - - list - - watch - - apiGroups: - - coordination.k8s.io - resources: - - leases - verbs: - - create - - get - - list - - update - - apiGroups: - - discovery.k8s.io - resources: - - endpointslices - verbs: - - get - - list - - apiGroups: - - events.k8s.io - resources: - - events - verbs: - - create - - list - - patch - - watch - - apiGroups: - - gateway.networking.k8s.io - resources: - - httproutes - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - monitoring.coreos.com - resources: - - podmonitors - - servicemonitors - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - networking.k8s.io - resources: - - ingresses - - networkpolicies - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - opentelemetry.io - resources: - - instrumentations - verbs: - - get - - list - - patch - - update - - watch - - apiGroups: - - opentelemetry.io - resources: - - opampbridges - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - opentelemetry.io - resources: - - opampbridges/finalizers - verbs: - - update - - apiGroups: - - opentelemetry.io - resources: - - opampbridges/status - verbs: - - get - - patch - - update - - apiGroups: - - opentelemetry.io - resources: - - opentelemetrycollectors - verbs: - - get - - list - - patch - - update - - watch - - apiGroups: - - opentelemetry.io - resources: - - opentelemetrycollectors/finalizers - verbs: - - get - - patch - - update - - apiGroups: - - opentelemetry.io - resources: - - opentelemetrycollectors/status - verbs: - - get - - patch - - update - - apiGroups: - - policy - resources: - - poddisruptionbudgets - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - route.openshift.io - resources: - - routes - - routes/custom-host - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - opentelemetry.io - resources: - - targetallocators - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - opentelemetry.io - resources: - - targetallocators/status - verbs: - - get - - patch - - update - - apiGroups: - - opentelemetry.io - resources: - - targetallocators/finalizers - verbs: - - get - - patch - - update - - apiGroups: - - cert-manager.io - resources: - - issuers - - certificaterequests - - certificates - verbs: - - create - - get - - list - - watch - - update - - patch - - delete - - apiGroups: - - authentication.k8s.io - resources: - - tokenreviews - verbs: - - create - - apiGroups: - - authorization.k8s.io - resources: - - subjectaccessreviews - verbs: - - create ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/clusterrole.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: controller-manager - name: example-opentelemetry-operator-metrics -rules: - - nonResourceURLs: - - /metrics - verbs: - - get - - diff --git a/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/clusterrolebinding.yaml b/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/clusterrolebinding.yaml deleted file mode 100644 index 4acb7d53f5..0000000000 --- a/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/clusterrolebinding.yaml +++ /dev/null @@ -1,24 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/clusterrolebinding.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding -metadata: - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: controller-manager - name: example-opentelemetry-operator-manager -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: example-opentelemetry-operator-manager -subjects: - - kind: ServiceAccount - name: opentelemetry-operator - namespace: default - - diff --git a/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/deployment.yaml b/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/deployment.yaml deleted file mode 100644 index c775cd1cf3..0000000000 --- a/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/deployment.yaml +++ /dev/null @@ -1,105 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/deployment.yaml -apiVersion: apps/v1 -kind: Deployment -metadata: - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: controller-manager - name: example-opentelemetry-operator - namespace: default -spec: - replicas: 1 - revisionHistoryLimit: 10 - selector: - matchLabels: - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/component: controller-manager - template: - metadata: - annotations: - kubectl.kubernetes.io/default-container: manager - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: controller-manager - spec: - automountServiceAccountToken: true - hostNetwork: false - containers: - - args: - - --metrics-addr=0.0.0.0:8443 - - --metrics-secure=true - - --enable-leader-election - - --health-probe-addr=:8081 - - --webhook-port=9443 - - --collector-image=otel/opentelemetry-collector-k8s:0.151.0 - command: - - /manager - env: - - name: SERVICE_ACCOUNT_NAME - valueFrom: - fieldRef: - fieldPath: spec.serviceAccountName - - name: ENABLE_WEBHOOKS - value: "true" - image: "ghcr.io/open-telemetry/opentelemetry-operator/opentelemetry-operator:0.151.0" - name: manager - imagePullPolicy: IfNotPresent - ports: - - containerPort: 8443 - name: metrics - protocol: TCP - - containerPort: 9443 - name: webhook-server - protocol: TCP - livenessProbe: - httpGet: - path: /healthz - port: 8081 - initialDelaySeconds: 15 - periodSeconds: 20 - readinessProbe: - httpGet: - path: /readyz - port: 8081 - initialDelaySeconds: 5 - periodSeconds: 10 - resources: - {} - volumeMounts: - - mountPath: /tmp/k8s-webhook-server/serving-certs - name: cert - readOnly: true - securityContext: - allowPrivilegeEscalation: false - capabilities: - drop: - - ALL - runAsNonRoot: true - seccompProfile: - type: RuntimeDefault - nodeSelector: - kubernetes.io/os: linux - serviceAccountName: opentelemetry-operator - terminationGracePeriodSeconds: 10 - volumes: - - name: cert - secret: - defaultMode: 420 - secretName: example-opentelemetry-operator-controller-manager-service-cert - securityContext: - fsGroup: 65532 - runAsGroup: 65532 - runAsNonRoot: true - runAsUser: 65532 - diff --git a/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/role.yaml b/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/role.yaml deleted file mode 100644 index b5339517a2..0000000000 --- a/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/role.yaml +++ /dev/null @@ -1,200 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/role.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: controller-manager - name: example-opentelemetry-operator-leader-election - namespace: default -rules: - - apiGroups: - - "" - resources: - - configmaps - - pods - - serviceaccounts - - services - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - "" - resources: - - events - verbs: - - create - - patch - - apiGroups: - - "" - resources: - - namespaces - - secrets - verbs: - - get - - list - - watch - - apiGroups: - - apps - resources: - - daemonsets - - deployments - - statefulsets - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - apps - resources: - - replicasets - verbs: - - get - - list - - watch - - apiGroups: - - autoscaling - resources: - - horizontalpodautoscalers - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - batch - resources: - - jobs - verbs: - - get - - list - - watch - - apiGroups: - - config.openshift.io - resources: - - infrastructures - - infrastructures/status - verbs: - - get - - list - - watch - - apiGroups: - - coordination.k8s.io - resources: - - leases - verbs: - - create - - get - - list - - update - - apiGroups: - - monitoring.coreos.com - resources: - - podmonitors - - servicemonitors - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - networking.k8s.io - resources: - - ingresses - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - opentelemetry.io - resources: - - instrumentations - - opentelemetrycollectors - verbs: - - get - - list - - patch - - update - - watch - - apiGroups: - - opentelemetry.io - resources: - - opampbridges - - targetallocators - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - opentelemetry.io - resources: - - opampbridges/finalizers - verbs: - - update - - apiGroups: - - opentelemetry.io - resources: - - opampbridges/status - - opentelemetrycollectors/finalizers - - opentelemetrycollectors/status - - targetallocators/status - - targetallocators/finalizers - verbs: - - get - - patch - - update - - apiGroups: - - policy - resources: - - poddisruptionbudgets - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - - apiGroups: - - route.openshift.io - resources: - - routes - - routes/custom-host - verbs: - - create - - delete - - get - - list - - patch - - update - - watch - diff --git a/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/rolebinding.yaml b/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/rolebinding.yaml deleted file mode 100644 index ae376e80c9..0000000000 --- a/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/rolebinding.yaml +++ /dev/null @@ -1,24 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/rolebinding.yaml -apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding -metadata: - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: controller-manager - name: example-opentelemetry-operator-leader-election - namespace: default -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: example-opentelemetry-operator-leader-election -subjects: - - kind: ServiceAccount - name: opentelemetry-operator - namespace: default - diff --git a/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/service.yaml b/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/service.yaml deleted file mode 100644 index 0a3006d80f..0000000000 --- a/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/service.yaml +++ /dev/null @@ -1,48 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/service.yaml -apiVersion: v1 -kind: Service -metadata: - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: controller-manager - name: example-opentelemetry-operator - namespace: default -spec: - ports: - - name: metrics - port: 8443 - protocol: TCP - targetPort: metrics - selector: - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/component: controller-manager ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/service.yaml -apiVersion: v1 -kind: Service -metadata: - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: controller-manager - name: example-opentelemetry-operator-webhook - namespace: default -spec: - ports: - - port: 443 - protocol: TCP - targetPort: webhook-server - selector: - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/component: controller-manager - diff --git a/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/serviceaccount.yaml b/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/serviceaccount.yaml deleted file mode 100644 index c6ba25dbac..0000000000 --- a/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/serviceaccount.yaml +++ /dev/null @@ -1,17 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/serviceaccount.yaml -apiVersion: v1 -kind: ServiceAccount -automountServiceAccountToken: true -metadata: - name: opentelemetry-operator - namespace: default - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: controller-manager - diff --git a/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml b/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml deleted file mode 100644 index 9039160e03..0000000000 --- a/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml +++ /dev/null @@ -1,54 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/tests/test-certmanager-connection.yaml -apiVersion: v1 -kind: Pod -metadata: - name: "example-opentelemetry-operator-cert-manager" - namespace: default - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: webhook - annotations: - "helm.sh/hook": test -spec: - containers: - - name: wget - image: "busybox:latest" - env: - - name: CERT_MANAGER_CLUSTERIP - value: "cert-manager-webhook" - - name: CERT_MANAGER_PORT - value: "443" - command: - - sh - - -c - # The following shell script tests if the cert-manager service is up. If the service is up, when we try - # to wget its exposed port, we will get an HTTP error 400. - - | - wget_output=$(wget -q "$CERT_MANAGER_CLUSTERIP:$CERT_MANAGER_PORT") - if wget_output=="wget: server returned error: HTTP/1.0 400 Bad Request" - then exit 0 - else exit 1 - fi - securityContext: - allowPrivilegeEscalation: false - capabilities: - drop: - - ALL - runAsNonRoot: true - seccompProfile: - type: RuntimeDefault - restartPolicy: Never - nodeSelector: - kubernetes.io/os: linux - securityContext: - fsGroup: 65532 - runAsGroup: 65532 - runAsNonRoot: true - runAsUser: 65532 - diff --git a/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/tests/test-service-connection.yaml b/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/tests/test-service-connection.yaml deleted file mode 100644 index 88e0e0bc24..0000000000 --- a/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/tests/test-service-connection.yaml +++ /dev/null @@ -1,107 +0,0 @@ ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/tests/test-service-connection.yaml -apiVersion: v1 -kind: Pod -metadata: - name: "example-opentelemetry-operator-metrics" - namespace: default - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: controller-manager - annotations: - "helm.sh/hook": test -spec: - containers: - - name: wget - image: "busybox:latest" - env: - - name: MANAGER_METRICS_SERVICE_CLUSTERIP - value: "example-opentelemetry-operator" - - name: MANAGER_METRICS_SERVICE_PORT - value: "8443" - command: - - sh - - -c - # The following shell script tests if the controller-manager-metrics-service is up. - # If the service is up, when we try to wget its exposed port, we will get an HTTP error 400. - - | - wget_output=$(wget -q "$MANAGER_METRICS_SERVICE_CLUSTERIP:$MANAGER_METRICS_SERVICE_PORT") - if wget_output=="wget: server returned error: HTTP/1.0 400 Bad Request" - then exit 0 - else exit 1 - fi - securityContext: - allowPrivilegeEscalation: false - capabilities: - drop: - - ALL - runAsNonRoot: true - seccompProfile: - type: RuntimeDefault - restartPolicy: Never - nodeSelector: - kubernetes.io/os: linux - securityContext: - fsGroup: 65532 - runAsGroup: 65532 - runAsNonRoot: true - runAsUser: 65532 ---- -# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/tests/test-service-connection.yaml -apiVersion: v1 -kind: Pod -metadata: - name: "example-opentelemetry-operator-webhook" - namespace: default - labels: - helm.sh/chart: opentelemetry-operator-0.113.1 - app.kubernetes.io/name: opentelemetry-operator - app.kubernetes.io/version: "0.151.0" - app.kubernetes.io/managed-by: Helm - app.kubernetes.io/part-of: opentelemetry-operator - app.kubernetes.io/instance: example - app.kubernetes.io/component: controller-manager - annotations: - "helm.sh/hook": test -spec: - containers: - - name: wget - image: "busybox:latest" - env: - - name: WEBHOOK_SERVICE_CLUSTERIP - value: "example-opentelemetry-operator-webhook" - - name: WEBHOOK_SERVICE_PORT - value: "443" - command: - - sh - - -c - # The following shell script tests if the webhook service is up. If the service is up, when we try - # to wget its exposed port, we will get an HTTP error 400. - - | - wget_output=$(wget -q "$WEBHOOK_SERVICE_CLUSTERIP:$WEBHOOK_SERVICE_PORT") - if wget_output=="wget: server returned error: HTTP/1.0 400 Bad Request" - then exit 0 - else exit 1 - fi - securityContext: - allowPrivilegeEscalation: false - capabilities: - drop: - - ALL - runAsNonRoot: true - seccompProfile: - type: RuntimeDefault - restartPolicy: Never - nodeSelector: - kubernetes.io/os: linux - securityContext: - fsGroup: 65532 - runAsGroup: 65532 - runAsNonRoot: true - runAsUser: 65532 - From 3eabc6036ad024e3cdcef1136858ed0d8b856dd1 Mon Sep 17 00:00:00 2001 From: Cyrille Le Clerc Date: Thu, 28 May 2026 08:53:09 +0200 Subject: [PATCH 05/11] force recommit generated helm config --- .../examples/cloud-demo/rendered/bridge.yaml | 62 ++ .../cloud-demo/rendered/clusterrole.yaml | 176 +++++ .../cloud-demo/rendered/collector.yaml | 534 +++++++++++++++ .../examples/cloud-demo/rendered/hooks.yaml | 65 ++ .../cloud-demo/rendered/instrumentation.yaml | 35 + .../operator-webhook-with-cert-manager.yaml | 193 ++++++ .../admission-webhooks/operator-webhook.yaml | 3 + .../opentelemetry-operator/certmanager.yaml | 44 ++ .../opentelemetry-operator/clusterrole.yaml | 410 +++++++++++ .../clusterrolebinding.yaml | 24 + .../opentelemetry-operator/deployment.yaml | 105 +++ .../rendered/opentelemetry-operator/role.yaml | 200 ++++++ .../opentelemetry-operator/rolebinding.yaml | 24 + .../opentelemetry-operator/service.yaml | 48 ++ .../serviceaccount.yaml | 17 + .../tests/test-certmanager-connection.yaml | 54 ++ .../tests/test-service-connection.yaml | 107 +++ .../rendered/clusterrole.yaml | 69 ++ .../rendered/collector.yaml | 128 ++++ .../rendered/hooks.yaml | 65 ++ .../operator-webhook-with-cert-manager.yaml | 193 ++++++ .../admission-webhooks/operator-webhook.yaml | 3 + .../opentelemetry-operator/certmanager.yaml | 44 ++ .../opentelemetry-operator/clusterrole.yaml | 410 +++++++++++ .../clusterrolebinding.yaml | 24 + .../opentelemetry-operator/deployment.yaml | 105 +++ .../rendered/opentelemetry-operator/role.yaml | 200 ++++++ .../opentelemetry-operator/rolebinding.yaml | 24 + .../opentelemetry-operator/service.yaml | 48 ++ .../serviceaccount.yaml | 17 + .../tests/test-certmanager-connection.yaml | 54 ++ .../tests/test-service-connection.yaml | 107 +++ .../rendered/clusterrole.yaml | 69 ++ .../rendered/collector.yaml | 126 ++++ .../rendered/hooks.yaml | 65 ++ .../operator-webhook-with-cert-manager.yaml | 193 ++++++ .../admission-webhooks/operator-webhook.yaml | 3 + .../opentelemetry-operator/certmanager.yaml | 44 ++ .../opentelemetry-operator/clusterrole.yaml | 410 +++++++++++ .../clusterrolebinding.yaml | 24 + .../opentelemetry-operator/deployment.yaml | 105 +++ .../rendered/opentelemetry-operator/role.yaml | 200 ++++++ .../opentelemetry-operator/rolebinding.yaml | 24 + .../opentelemetry-operator/service.yaml | 48 ++ .../serviceaccount.yaml | 17 + .../tests/test-certmanager-connection.yaml | 54 ++ .../tests/test-service-connection.yaml | 107 +++ .../rendered/clusterrole.yaml | 69 ++ .../rendered/collector.yaml | 134 ++++ .../rendered/hooks.yaml | 65 ++ .../operator-webhook-with-cert-manager.yaml | 193 ++++++ .../admission-webhooks/operator-webhook.yaml | 3 + .../opentelemetry-operator/certmanager.yaml | 44 ++ .../opentelemetry-operator/clusterrole.yaml | 410 +++++++++++ .../clusterrolebinding.yaml | 24 + .../opentelemetry-operator/deployment.yaml | 105 +++ .../rendered/opentelemetry-operator/role.yaml | 200 ++++++ .../opentelemetry-operator/rolebinding.yaml | 24 + .../opentelemetry-operator/service.yaml | 48 ++ .../serviceaccount.yaml | 17 + .../tests/test-certmanager-connection.yaml | 54 ++ .../tests/test-service-connection.yaml | 107 +++ .../rendered/clusterrole.yaml | 69 ++ .../rendered/collector.yaml | 238 +++++++ .../rendered/hooks.yaml | 65 ++ .../operator-webhook-with-cert-manager.yaml | 193 ++++++ .../admission-webhooks/operator-webhook.yaml | 3 + .../opentelemetry-operator/certmanager.yaml | 44 ++ .../opentelemetry-operator/clusterrole.yaml | 410 +++++++++++ .../clusterrolebinding.yaml | 24 + .../opentelemetry-operator/deployment.yaml | 105 +++ .../rendered/opentelemetry-operator/role.yaml | 200 ++++++ .../opentelemetry-operator/rolebinding.yaml | 24 + .../opentelemetry-operator/service.yaml | 48 ++ .../serviceaccount.yaml | 17 + .../tests/test-certmanager-connection.yaml | 54 ++ .../tests/test-service-connection.yaml | 107 +++ .../default/rendered/clusterrole.yaml | 141 ++++ .../examples/default/rendered/collector.yaml | 515 ++++++++++++++ .../examples/default/rendered/hooks.yaml | 65 ++ .../operator-webhook-with-cert-manager.yaml | 193 ++++++ .../admission-webhooks/operator-webhook.yaml | 3 + .../opentelemetry-operator/certmanager.yaml | 44 ++ .../opentelemetry-operator/clusterrole.yaml | 410 +++++++++++ .../clusterrolebinding.yaml | 24 + .../opentelemetry-operator/deployment.yaml | 105 +++ .../rendered/opentelemetry-operator/role.yaml | 200 ++++++ .../opentelemetry-operator/rolebinding.yaml | 24 + .../opentelemetry-operator/service.yaml | 48 ++ .../serviceaccount.yaml | 17 + .../tests/test-certmanager-connection.yaml | 54 ++ .../tests/test-service-connection.yaml | 107 +++ .../rendered/clusterrole.yaml | 141 ++++ .../rendered/collector.yaml | 487 +++++++++++++ .../rendered/hooks.yaml | 65 ++ .../operator-webhook-with-cert-manager.yaml | 193 ++++++ .../admission-webhooks/operator-webhook.yaml | 3 + .../opentelemetry-operator/certmanager.yaml | 44 ++ .../opentelemetry-operator/clusterrole.yaml | 410 +++++++++++ .../clusterrolebinding.yaml | 24 + .../opentelemetry-operator/deployment.yaml | 105 +++ .../rendered/opentelemetry-operator/role.yaml | 200 ++++++ .../opentelemetry-operator/rolebinding.yaml | 24 + .../opentelemetry-operator/service.yaml | 48 ++ .../serviceaccount.yaml | 17 + .../tests/test-certmanager-connection.yaml | 54 ++ .../tests/test-service-connection.yaml | 107 +++ .../rendered/clusterrole.yaml | 144 ++++ .../rendered/collector.yaml | 647 ++++++++++++++++++ .../rendered/hooks.yaml | 65 ++ .../operator-webhook-with-cert-manager.yaml | 193 ++++++ .../admission-webhooks/operator-webhook.yaml | 3 + .../opentelemetry-operator/certmanager.yaml | 44 ++ .../opentelemetry-operator/clusterrole.yaml | 410 +++++++++++ .../clusterrolebinding.yaml | 24 + .../opentelemetry-operator/deployment.yaml | 105 +++ .../rendered/opentelemetry-operator/role.yaml | 200 ++++++ .../opentelemetry-operator/rolebinding.yaml | 24 + .../opentelemetry-operator/service.yaml | 48 ++ .../serviceaccount.yaml | 17 + .../tests/test-certmanager-connection.yaml | 54 ++ .../tests/test-service-connection.yaml | 107 +++ .../prometheus-otel/rendered/clusterrole.yaml | 72 ++ .../prometheus-otel/rendered/collector.yaml | 137 ++++ .../kube-api-server/servicemonitor.yaml | 38 + .../kube-controller-manager/service.yaml | 25 + .../servicemonitor.yaml | 31 + .../rendered/exporters/kube-dns/service.yaml | 28 + .../exporters/kube-dns/servicemonitor.yaml | 29 + .../rendered/exporters/kube-etcd/service.yaml | 24 + .../exporters/kube-etcd/servicemonitor.yaml | 27 + .../exporters/kube-proxy/service.yaml | 24 + .../exporters/kube-proxy/servicemonitor.yaml | 27 + .../exporters/kube-scheduler/service.yaml | 24 + .../kube-scheduler/servicemonitor.yaml | 31 + .../prometheus-otel/rendered/hooks.yaml | 65 ++ .../clusterrolebinding.yaml | 23 + .../kube-state-metrics/deployment.yaml | 89 +++ .../rendered/kube-state-metrics/role.yaml | 158 +++++ .../rendered/kube-state-metrics/service.yaml | 30 + .../kube-state-metrics/serviceaccount.yaml | 17 + .../kube-state-metrics/servicemonitor.yaml | 26 + .../operator-webhook-with-cert-manager.yaml | 193 ++++++ .../admission-webhooks/operator-webhook.yaml | 3 + .../opentelemetry-operator/certmanager.yaml | 44 ++ .../opentelemetry-operator/clusterrole.yaml | 410 +++++++++++ .../clusterrolebinding.yaml | 24 + .../opentelemetry-operator/deployment.yaml | 105 +++ .../rendered/opentelemetry-operator/role.yaml | 200 ++++++ .../opentelemetry-operator/rolebinding.yaml | 24 + .../opentelemetry-operator/service.yaml | 48 ++ .../serviceaccount.yaml | 17 + .../tests/test-certmanager-connection.yaml | 54 ++ .../tests/test-service-connection.yaml | 107 +++ .../prometheus-node-exporter/daemonset.yaml | 134 ++++ .../prometheus-node-exporter/service.yaml | 30 + .../serviceaccount.yaml | 17 + .../servicemonitor.yaml | 29 + .../rendered/clusterrole.yaml | 141 ++++ .../rendered/collector.yaml | 515 ++++++++++++++ .../rendered/extramanifests.yaml | 21 + .../secrets-csi-driver/rendered/hooks.yaml | 65 ++ .../operator-webhook-with-cert-manager.yaml | 193 ++++++ .../admission-webhooks/operator-webhook.yaml | 3 + .../opentelemetry-operator/certmanager.yaml | 44 ++ .../opentelemetry-operator/clusterrole.yaml | 410 +++++++++++ .../clusterrolebinding.yaml | 24 + .../opentelemetry-operator/deployment.yaml | 105 +++ .../rendered/opentelemetry-operator/role.yaml | 200 ++++++ .../opentelemetry-operator/rolebinding.yaml | 24 + .../opentelemetry-operator/service.yaml | 48 ++ .../serviceaccount.yaml | 17 + .../tests/test-certmanager-connection.yaml | 54 ++ .../tests/test-service-connection.yaml | 107 +++ 174 files changed, 18471 insertions(+) create mode 100644 charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/bridge.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/clusterrole.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/collector.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/hooks.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/instrumentation.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/admission-webhooks/operator-webhook.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/certmanager.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/clusterrole.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/clusterrolebinding.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/deployment.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/role.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/rolebinding.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/service.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/serviceaccount.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/tests/test-service-connection.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/clusterrole.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/collector.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/hooks.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/admission-webhooks/operator-webhook.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/certmanager.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/clusterrole.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/clusterrolebinding.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/deployment.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/role.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/rolebinding.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/service.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/serviceaccount.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/tests/test-service-connection.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/clusterrole.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/collector.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/hooks.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/admission-webhooks/operator-webhook.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/certmanager.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/clusterrole.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/clusterrolebinding.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/deployment.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/role.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/rolebinding.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/service.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/serviceaccount.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/tests/test-service-connection.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/clusterrole.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/collector.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/hooks.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/admission-webhooks/operator-webhook.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/certmanager.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/clusterrole.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/clusterrolebinding.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/deployment.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/role.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/rolebinding.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/service.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/serviceaccount.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/tests/test-service-connection.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/clusterrole.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/collector.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/hooks.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/admission-webhooks/operator-webhook.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/certmanager.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/clusterrole.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/clusterrolebinding.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/deployment.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/role.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/rolebinding.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/service.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/serviceaccount.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/tests/test-service-connection.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/default/rendered/clusterrole.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/default/rendered/collector.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/default/rendered/hooks.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/admission-webhooks/operator-webhook.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/certmanager.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/clusterrole.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/clusterrolebinding.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/deployment.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/role.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/rolebinding.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/service.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/serviceaccount.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/tests/test-service-connection.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/clusterrole.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/collector.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/hooks.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/admission-webhooks/operator-webhook.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/certmanager.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/clusterrole.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/clusterrolebinding.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/deployment.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/role.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/rolebinding.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/service.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/serviceaccount.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/tests/test-service-connection.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/clusterrole.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/collector.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/hooks.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/admission-webhooks/operator-webhook.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/certmanager.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/clusterrole.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/clusterrolebinding.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/deployment.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/role.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/rolebinding.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/service.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/serviceaccount.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/tests/test-service-connection.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/clusterrole.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/collector.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-api-server/servicemonitor.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-controller-manager/service.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-controller-manager/servicemonitor.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-dns/service.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-dns/servicemonitor.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-etcd/service.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-etcd/servicemonitor.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-proxy/service.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-proxy/servicemonitor.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-scheduler/service.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-scheduler/servicemonitor.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/hooks.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/kube-state-metrics/clusterrolebinding.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/kube-state-metrics/deployment.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/kube-state-metrics/role.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/kube-state-metrics/service.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/kube-state-metrics/serviceaccount.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/kube-state-metrics/servicemonitor.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/admission-webhooks/operator-webhook.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/certmanager.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/clusterrole.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/clusterrolebinding.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/deployment.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/role.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/rolebinding.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/service.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/serviceaccount.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/tests/test-service-connection.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/prometheus-node-exporter/daemonset.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/prometheus-node-exporter/service.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/prometheus-node-exporter/serviceaccount.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/prometheus-node-exporter/servicemonitor.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/clusterrole.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/collector.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/extramanifests.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/hooks.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/admission-webhooks/operator-webhook.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/certmanager.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/clusterrole.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/clusterrolebinding.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/deployment.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/role.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/rolebinding.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/service.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/serviceaccount.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml create mode 100644 charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/tests/test-service-connection.yaml diff --git a/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/bridge.yaml b/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/bridge.yaml new file mode 100644 index 0000000000..8150262179 --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/bridge.yaml @@ -0,0 +1,62 @@ +--- +# Source: opentelemetry-kube-stack/templates/bridge.yaml +apiVersion: opentelemetry.io/v1alpha1 +kind: OpAMPBridge +metadata: + name: example + labels: + helm.sh/chart: opentelemetry-kube-stack-0.16.0 + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + release: "example" +spec: + endpoint: http://opamp-server:8080 + capabilities: + AcceptsOpAMPConnectionSettings: true + AcceptsOtherConnectionSettings: true + AcceptsRemoteConfig: true + AcceptsRestartCommand: true + ReportsEffectiveConfig: true + ReportsHealth: true + ReportsOwnLogs: true + ReportsOwnMetrics: true + ReportsOwnTraces: true + ReportsRemoteConfig: true + ReportsStatus: true + replicas: 1 + image: "ghcr.io/open-telemetry/opentelemetry-operator/operator-opamp-bridge:0.151.0" + upgradeStrategy: automatic + securityContext: + runAsNonRoot: true + runAsUser: 1000 + resources: + limits: + cpu: 250m + memory: 256Mi + requests: + cpu: 250m + memory: 256Mi + env: + - name: OTEL_K8S_NODE_NAME + valueFrom: + fieldRef: + fieldPath: spec.nodeName + - name: OTEL_K8S_NAMESPACE + valueFrom: + fieldRef: + apiVersion: v1 + fieldPath: metadata.namespace + - name: OTEL_K8S_POD_NAME + valueFrom: + fieldRef: + apiVersion: v1 + fieldPath: metadata.name + - name: OTEL_K8S_POD_IP + valueFrom: + fieldRef: + apiVersion: v1 + fieldPath: status.podIP + - name: OTEL_RESOURCE_ATTRIBUTES + value: "k8s.cluster.name=demo" + + diff --git a/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/clusterrole.yaml b/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/clusterrole.yaml new file mode 100644 index 0000000000..0f1ed4b2f8 --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/clusterrole.yaml @@ -0,0 +1,176 @@ +--- +# Source: opentelemetry-kube-stack/templates/clusterrole.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + name: example-collector +rules: +- apiGroups: [""] + resources: + - namespaces + - nodes + - nodes/proxy + - nodes/metrics + - nodes/stats + - services + - endpoints + - pods + - events + - secrets + - persistentvolumeclaims + - persistentvolumes + verbs: ["get", "list", "watch"] +- apiGroups: ["monitoring.coreos.com"] + resources: + - servicemonitors + - podmonitors + - scrapeconfigs + - probes + verbs: ["get", "list", "watch"] +- apiGroups: + - extensions + resources: + - ingresses + verbs: ["get", "list", "watch"] +- apiGroups: + - apps + resources: + - daemonsets + - deployments + - replicasets + - statefulsets + verbs: ["get", "list", "watch"] +- apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: ["get", "list", "watch"] +- apiGroups: ["discovery.k8s.io"] + resources: + - endpointslices + verbs: ["get", "list", "watch"] +- nonResourceURLs: ["/metrics", "/metrics/cadvisor"] + verbs: ["get"] + +- verbs: + - get + - list + - watch + - create + - update + - patch + - delete + apiGroups: + - coordination.k8s.io + resources: + - leases +- apiGroups: + - "" + resources: + - events + - namespaces + - namespaces/status + - nodes + - nodes/spec + - pods + - pods/status + - replicationcontrollers + - replicationcontrollers/status + - resourcequotas + - services + verbs: + - get + - list + - watch +- apiGroups: + - apps + resources: + - daemonsets + - deployments + - replicasets + - statefulsets + verbs: + - get + - list + - watch +- apiGroups: + - extensions + resources: + - daemonsets + - deployments + - replicasets + verbs: + - get + - list + - watch +- apiGroups: + - batch + resources: + - jobs + - cronjobs + verbs: + - get + - list + - watch +- apiGroups: + - autoscaling + resources: + - horizontalpodautoscalers + verbs: + - get + - list + - watch +- apiGroups: ["events.k8s.io"] + resources: ["events"] + verbs: ["watch", "list"] +--- +# Source: opentelemetry-kube-stack/templates/clusterrole.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + name: example-bridge +rules: + - apiGroups: + - opentelemetry.io + resources: + - opentelemetrycollectors + verbs: + - "*" + - apiGroups: + - "" + resources: + - pods + verbs: + - 'list' + - 'get' +--- +# Source: opentelemetry-kube-stack/templates/clusterrole.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + name: example-daemon +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: example-collector +subjects: +- kind: ServiceAccount + # quirk of the Operator + name: "example-daemon-collector" + namespace: default +--- +# Source: opentelemetry-kube-stack/templates/clusterrole.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + name: example +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: "example-bridge" +subjects: + - kind: ServiceAccount + # quirk of the Operator + name: "example-opamp-bridge" + namespace: "default" + diff --git a/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/collector.yaml b/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/collector.yaml new file mode 100644 index 0000000000..1c2fa3804c --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/collector.yaml @@ -0,0 +1,534 @@ +--- +# Source: opentelemetry-kube-stack/templates/collector.yaml +apiVersion: opentelemetry.io/v1beta1 +kind: OpenTelemetryCollector +metadata: + name: example-daemon + namespace: default + labels: + helm.sh/chart: opentelemetry-kube-stack-0.16.0 + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + release: "example" + opentelemetry.io/opamp-reporting: "true" +spec: + managementState: managed + mode: daemonset + config: + exporters: + debug: {} + otlp: + endpoint: ingest.example.com:443 + headers: + access-token: ${ACCESS_TOKEN} + extensions: + k8s_leader_elector/k8s_cluster: + auth_type: serviceAccount + lease_name: k8s.cluster.receiver.opentelemetry.io + lease_namespace: default + k8s_leader_elector/k8s_objects: + auth_type: serviceAccount + lease_name: k8s.objects.receiver.opentelemetry.io + lease_namespace: default + processors: + batch: + send_batch_max_size: 1500 + send_batch_size: 1000 + timeout: 1s + k8sattributes: + extract: + labels: + - from: pod + key: app.kubernetes.io/instance + tag_name: k8s.app.instance + - from: pod + key: app.kubernetes.io/component + tag_name: k8s.app.component + metadata: + - k8s.namespace.name + - k8s.pod.name + - k8s.pod.uid + - k8s.node.name + - k8s.pod.start_time + - k8s.deployment.name + - k8s.replicaset.name + - k8s.replicaset.uid + - k8s.daemonset.name + - k8s.daemonset.uid + - k8s.job.name + - k8s.job.uid + - k8s.container.name + - k8s.cronjob.name + - k8s.statefulset.name + - k8s.statefulset.uid + - container.image.tag + - container.image.name + - k8s.cluster.uid + - service.namespace + - service.name + - service.version + - service.instance.id + otel_annotations: true + filter: + node_from_env_var: OTEL_K8S_NODE_NAME + passthrough: false + pod_association: + - sources: + - from: resource_attribute + name: k8s.pod.uid + - sources: + - from: resource_attribute + name: k8s.pod.name + - from: resource_attribute + name: k8s.namespace.name + - from: resource_attribute + name: k8s.node.name + - sources: + - from: resource_attribute + name: k8s.pod.ip + - sources: + - from: resource_attribute + name: k8s.pod.name + - from: resource_attribute + name: k8s.namespace.name + - sources: + - from: connection + resource/hostname: + attributes: + - action: insert + from_attribute: k8s.node.name + key: host.name + resourcedetection/env: + detectors: + - env + - k8snode + override: false + timeout: 2s + receivers: + filelog: + exclude: [] + include: + - /var/log/pods/*/*/*.log + include_file_name: false + include_file_path: true + operators: + - id: container-parser + max_log_size: 102400 + type: container + retry_on_failure: + enabled: true + start_at: end + hostmetrics: + collection_interval: 10s + root_path: /hostfs + scrapers: + cpu: + metrics: + system.cpu.logical.count: + enabled: true + system.cpu.utilization: + enabled: true + disk: {} + filesystem: + exclude_fs_types: + fs_types: + - autofs + - binfmt_misc + - bpf + - cgroup2 + - configfs + - debugfs + - devpts + - devtmpfs + - fusectl + - hugetlbfs + - iso9660 + - mqueue + - nsfs + - overlay + - proc + - procfs + - pstore + - rpc_pipefs + - securityfs + - selinuxfs + - squashfs + - sysfs + - tracefs + match_type: strict + exclude_mount_points: + match_type: regexp + mount_points: + - /dev/* + - /proc/* + - /sys/* + - /run/k3s/containerd/* + - /var/lib/docker/* + - /var/lib/kubelet/* + - /snap/* + metrics: + system.filesystem.utilization: + enabled: true + load: {} + memory: + metrics: + system.memory.limit: + enabled: true + system.memory.utilization: + enabled: true + network: {} + paging: + metrics: + system.paging.usage: + enabled: true + system: + metrics: + system.uptime: + enabled: true + k8s_cluster: + allocatable_types_to_report: + - cpu + - memory + - storage + auth_type: serviceAccount + collection_interval: 10s + k8s_leader_elector: k8s_leader_elector/k8s_cluster + node_conditions_to_report: + - Ready + - MemoryPressure + - DiskPressure + - NetworkUnavailable + k8sobjects: + k8s_leader_elector: k8s_leader_elector/k8s_objects + objects: + - exclude_watch_type: + - DELETED + group: events.k8s.io + mode: watch + name: events + kubeletstats: + auth_type: serviceAccount + collection_interval: 15s + endpoint: https://${env:OTEL_K8S_NODE_IP}:10250 + extra_metadata_labels: + - container.id + - k8s.volume.type + insecure_skip_verify: true + k8s_api_config: + auth_type: serviceAccount + metric_groups: + - node + - pod + - volume + - container + metrics: + container.cpu.usage: + enabled: true + k8s.node.cpu.usage: + enabled: true + k8s.node.uptime: + enabled: true + k8s.pod.cpu.usage: + enabled: true + k8s.pod.uptime: + enabled: true + otlp: + protocols: + grpc: + endpoint: 0.0.0.0:4317 + http: + endpoint: 0.0.0.0:4318 + prometheus: + config: + scrape_configs: + - job_name: kubernetes-pods + kubernetes_sd_configs: + - role: pod + selectors: + - field: spec.nodeName=${env:OTEL_K8S_NODE_NAME} + role: pod + relabel_configs: + - action: keep + regex: true + source_labels: + - __meta_kubernetes_pod_annotation_prometheus_io_scrape + - action: drop + regex: true + source_labels: + - __meta_kubernetes_pod_annotation_prometheus_io_scrape_slow + - action: replace + regex: (https?) + source_labels: + - __meta_kubernetes_pod_annotation_prometheus_io_scheme + target_label: __scheme__ + - action: replace + regex: (.+) + source_labels: + - __meta_kubernetes_pod_annotation_prometheus_io_path + target_label: __metrics_path__ + - action: replace + regex: ([^:]+)(?::\d+)?;(\d+) + replacement: $$1:$$2 + source_labels: + - __address__ + - __meta_kubernetes_pod_annotation_prometheus_io_port + target_label: __address__ + - action: labelmap + regex: __meta_kubernetes_pod_annotation_prometheus_io_param_(.+) + replacement: __param_$$1 + - action: labelmap + regex: __meta_kubernetes_pod_label_(.+) + - action: replace + source_labels: + - __meta_kubernetes_namespace + target_label: namespace + - action: replace + source_labels: + - __meta_kubernetes_pod_name + target_label: pod + - action: drop + regex: Pending|Succeeded|Failed|Completed + source_labels: + - __meta_kubernetes_pod_phase + - action: replace + source_labels: + - __meta_kubernetes_pod_label_app_kubernetes_io_name + target_label: job + scrape_interval: 30s + - job_name: node-exporter + relabel_configs: + - action: labelmap + regex: __meta_kubernetes_node_label_(.+) + - action: replace + regex: (.*) + replacement: $$1 + separator: ; + source_labels: + - job + target_label: __tmp_prometheus_job_name + scrape_interval: 30s + static_configs: + - targets: + - ${env:OTEL_K8S_NODE_IP}:9100 + - authorization: + credentials_file: /var/run/secrets/kubernetes.io/serviceaccount/token + type: Bearer + follow_redirects: true + honor_labels: true + honor_timestamps: true + job_name: kubelet + kubernetes_sd_configs: + - follow_redirects: true + role: node + selectors: + - field: metadata.name=${env:OTEL_K8S_NODE_NAME} + role: node + metric_relabel_configs: + - action: drop + regex: container_cpu_(load_average_10s|system_seconds_total|user_seconds_total) + replacement: $$1 + separator: ; + source_labels: + - __name__ + - action: drop + regex: container_fs_(io_current|reads_merged_total|sector_reads_total|sector_writes_total|writes_merged_total) + replacement: $$1 + separator: ; + source_labels: + - __name__ + - action: drop + regex: container_memory_(mapped_file|swap) + replacement: $$1 + separator: ; + source_labels: + - __name__ + - action: drop + regex: container_(file_descriptors|tasks_state|threads_max) + replacement: $$1 + separator: ; + source_labels: + - __name__ + - action: drop + regex: container_spec.* + replacement: $$1 + separator: ; + source_labels: + - __name__ + - action: drop + regex: .+; + replacement: $$1 + separator: ; + source_labels: + - id + - pod + metrics_path: /metrics/cadvisor + relabel_configs: + - action: replace + regex: (.*) + replacement: $$1 + separator: ; + source_labels: + - job + target_label: __tmp_prometheus_job_name + - action: replace + replacement: kubelet + target_label: job + - action: replace + regex: (.*) + replacement: $$1 + separator: ; + source_labels: + - __meta_kubernetes_node_name + target_label: node + - action: replace + regex: (.*) + replacement: https-metrics + separator: ; + target_label: endpoint + - action: replace + regex: (.*) + replacement: $$1 + separator: ; + source_labels: + - __metrics_path__ + target_label: metrics_path + - action: hashmod + modulus: 1 + regex: (.*) + replacement: $$1 + separator: ; + source_labels: + - __address__ + target_label: __tmp_hash + - action: keep + regex: $(SHARD) + replacement: $$1 + separator: ; + source_labels: + - __tmp_hash + scheme: https + scrape_interval: 15s + scrape_timeout: 10s + tls_config: + ca_file: /var/run/secrets/kubernetes.io/serviceaccount/ca.crt + insecure_skip_verify: true + service: + extensions: + - k8s_leader_elector/k8s_objects + - k8s_leader_elector/k8s_cluster + pipelines: + logs: + exporters: + - debug + - otlp + processors: + - k8sattributes + - resourcedetection/env + - resource/hostname + - batch + receivers: + - otlp + - filelog + - k8sobjects + metrics: + exporters: + - debug + - otlp + processors: + - k8sattributes + - resourcedetection/env + - resource/hostname + - batch + receivers: + - prometheus + - otlp + - hostmetrics + - kubeletstats + - k8s_cluster + traces: + exporters: + - debug + - otlp + processors: + - k8sattributes + - resourcedetection/env + - resource/hostname + - batch + receivers: + - otlp + imagePullPolicy: IfNotPresent + upgradeStrategy: automatic + terminationGracePeriodSeconds: 30 + resources: + limits: + cpu: 200m + memory: 500Mi + requests: + cpu: 100m + memory: 250Mi + securityContext: + {} + volumeMounts: + - name: varlogpods + mountPath: /var/log/pods + readOnly: true + - name: varlibdockercontainers + mountPath: /var/lib/docker/containers + readOnly: true + - name: hostfs + mountPath: /hostfs + readOnly: true + mountPropagation: HostToContainer + ports: + - appProtocol: grpc + hostPort: 4317 + name: otlp-grpc + port: 4317 + protocol: TCP + env: + - name: K8S_NODE_NAME + valueFrom: + fieldRef: + fieldPath: spec.nodeName + - name: OTEL_K8S_NODE_NAME + valueFrom: + fieldRef: + fieldPath: spec.nodeName + - name: OTEL_K8S_NODE_IP + valueFrom: + fieldRef: + fieldPath: status.hostIP + - name: OTEL_K8S_NAMESPACE + valueFrom: + fieldRef: + apiVersion: v1 + fieldPath: metadata.namespace + - name: OTEL_K8S_POD_NAME + valueFrom: + fieldRef: + apiVersion: v1 + fieldPath: metadata.name + - name: OTEL_K8S_POD_IP + valueFrom: + fieldRef: + apiVersion: v1 + fieldPath: status.podIP + - name: OTEL_RESOURCE_ATTRIBUTES + value: "k8s.pod.name=$(OTEL_K8S_POD_NAME),k8s.namespace.name=$(OTEL_K8S_NAMESPACE),k8s.node.name=$(OTEL_K8S_NODE_NAME),host.name=$(OTEL_K8S_NODE_NAME),k8s.node.ip=$(OTEL_K8S_NODE_IP),k8s.pod.ip=$(OTEL_K8S_POD_IP),k8s.cluster.name=demo" + + - name: ACCESS_TOKEN + valueFrom: + secretKeyRef: + key: access_token + name: otel-collector-secret + volumes: + - name: varlogpods + hostPath: + path: /var/log/pods + - name: varlibdockercontainers + hostPath: + path: /var/lib/docker/containers + - name: hostfs + hostPath: + path: / + diff --git a/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/hooks.yaml b/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/hooks.yaml new file mode 100644 index 0000000000..df09c1e80b --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/hooks.yaml @@ -0,0 +1,65 @@ +--- +# Source: opentelemetry-kube-stack/templates/hooks.yaml +apiVersion: v1 +kind: ServiceAccount +metadata: + name: delete-resources-sa + annotations: + "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded +--- +# Source: opentelemetry-kube-stack/templates/hooks.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + name: delete-resources-role + annotations: + "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded +rules: + - apiGroups: + - opentelemetry.io + resources: + - instrumentations + - opampbridges + - opentelemetrycollectors + verbs: + - get + - list + - delete +--- +# Source: opentelemetry-kube-stack/templates/hooks.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + name: delete-resources-rolebinding + annotations: + "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: delete-resources-role +subjects: + - kind: ServiceAccount + name: delete-resources-sa +--- +# Source: opentelemetry-kube-stack/templates/hooks.yaml +apiVersion: batch/v1 +kind: Job +metadata: + name: opentelemetry-kube-stack-pre-delete-job + annotations: + "helm.sh/hook": pre-delete + "helm.sh/hook-delete-policy": hook-succeeded,hook-failed +spec: + template: + spec: + restartPolicy: Never + serviceAccountName: delete-resources-sa + containers: + - name: delete-resources + image: "rancher/kubectl:v1.34.1" + args: + - "delete" + - "instrumentations,opampbridges,opentelemetrycollectors" + - "-l" + - "helm.sh/chart=opentelemetry-kube-stack-0.16.0" + diff --git a/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/instrumentation.yaml b/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/instrumentation.yaml new file mode 100644 index 0000000000..753f63f68b --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/instrumentation.yaml @@ -0,0 +1,35 @@ +--- +# Source: opentelemetry-kube-stack/templates/instrumentation.yaml +apiVersion: opentelemetry.io/v1alpha1 +kind: Instrumentation +metadata: + name: example + labels: + helm.sh/chart: opentelemetry-kube-stack-0.16.0 + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + release: "example" +spec: + exporter: + endpoint: http://${OTEL_K8S_NODE_NAME}:4317 + propagators: + - tracecontext + - baggage + - b3 + - b3multi + - jaeger + - xray + - ottrace + env: + - name: OTEL_K8S_NODE_NAME + valueFrom: + fieldRef: + fieldPath: spec.nodeName + resource: + addK8sUIDAttributes: true + resourceAttributes: {} + python: + env: + - name: OTEL_EXPORTER_OTLP_ENDPOINT + value: http://${OTEL_K8S_NODE_NAME}:4318 + diff --git a/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml b/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml new file mode 100644 index 0000000000..17585fa86a --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml @@ -0,0 +1,193 @@ +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/admission-webhooks/operator-webhook-with-cert-manager.yaml +apiVersion: admissionregistration.k8s.io/v1 +kind: MutatingWebhookConfiguration +metadata: + annotations: + cert-manager.io/inject-ca-from: default/example-opentelemetry-operator-serving-cert + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: webhook + name: example-opentelemetry-operator-mutation +webhooks: + - admissionReviewVersions: + - v1 + clientConfig: + service: + name: example-opentelemetry-operator-webhook + namespace: default + path: /mutate-opentelemetry-io-v1alpha1-instrumentation + port: 443 + failurePolicy: Ignore + name: minstrumentation.kb.io + rules: + - apiGroups: + - opentelemetry.io + apiVersions: + - v1alpha1 + operations: + - CREATE + - UPDATE + resources: + - instrumentations + scope: Namespaced + sideEffects: None + timeoutSeconds: 10 + - admissionReviewVersions: + - v1 + clientConfig: + service: + name: example-opentelemetry-operator-webhook + namespace: default + path: /mutate-opentelemetry-io-v1beta1-opentelemetrycollector + port: 443 + failurePolicy: Ignore + name: mopentelemetrycollectorbeta.kb.io + rules: + - apiGroups: + - opentelemetry.io + apiVersions: + - v1beta1 + operations: + - CREATE + - UPDATE + resources: + - opentelemetrycollectors + scope: Namespaced + sideEffects: None + timeoutSeconds: 10 + - admissionReviewVersions: + - v1 + clientConfig: + service: + name: example-opentelemetry-operator-webhook + namespace: default + path: /mutate-v1-pod + port: 443 + failurePolicy: Ignore + name: mpod.kb.io + rules: + - apiGroups: + - "" + apiVersions: + - v1 + operations: + - CREATE + resources: + - pods + scope: Namespaced + sideEffects: None + timeoutSeconds: 10 +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/admission-webhooks/operator-webhook-with-cert-manager.yaml +apiVersion: admissionregistration.k8s.io/v1 +kind: ValidatingWebhookConfiguration +metadata: + annotations: + cert-manager.io/inject-ca-from: default/example-opentelemetry-operator-serving-cert + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: webhook + name: example-opentelemetry-operator-validation +webhooks: + - admissionReviewVersions: + - v1 + clientConfig: + service: + name: example-opentelemetry-operator-webhook + namespace: default + path: /validate-opentelemetry-io-v1alpha1-instrumentation + port: 443 + failurePolicy: Ignore + name: vinstrumentationcreateupdate.kb.io + rules: + - apiGroups: + - opentelemetry.io + apiVersions: + - v1alpha1 + operations: + - CREATE + - UPDATE + resources: + - instrumentations + scope: Namespaced + sideEffects: None + timeoutSeconds: 10 + - admissionReviewVersions: + - v1 + clientConfig: + service: + name: example-opentelemetry-operator-webhook + namespace: default + path: /validate-opentelemetry-io-v1alpha1-instrumentation + port: 443 + failurePolicy: Ignore + name: vinstrumentationdelete.kb.io + rules: + - apiGroups: + - opentelemetry.io + apiVersions: + - v1alpha1 + operations: + - DELETE + resources: + - instrumentations + scope: Namespaced + sideEffects: None + timeoutSeconds: 10 + - admissionReviewVersions: + - v1 + clientConfig: + service: + name: example-opentelemetry-operator-webhook + namespace: default + path: /validate-opentelemetry-io-v1beta1-opentelemetrycollector + port: 443 + failurePolicy: Ignore + name: vopentelemetrycollectorcreateupdatebeta.kb.io + rules: + - apiGroups: + - opentelemetry.io + apiVersions: + - v1beta1 + operations: + - CREATE + - UPDATE + resources: + - opentelemetrycollectors + scope: Namespaced + sideEffects: None + timeoutSeconds: 10 + - admissionReviewVersions: + - v1 + clientConfig: + service: + name: example-opentelemetry-operator-webhook + namespace: default + path: /validate-opentelemetry-io-v1beta1-opentelemetrycollector + port: 443 + failurePolicy: Ignore + name: vopentelemetrycollectordeletebeta.kb.io + rules: + - apiGroups: + - opentelemetry.io + apiVersions: + - v1beta1 + operations: + - DELETE + resources: + - opentelemetrycollectors + scope: Namespaced + sideEffects: None + timeoutSeconds: 10 + diff --git a/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/admission-webhooks/operator-webhook.yaml b/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/admission-webhooks/operator-webhook.yaml new file mode 100644 index 0000000000..5b9ff5511d --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/admission-webhooks/operator-webhook.yaml @@ -0,0 +1,3 @@ +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/admission-webhooks/operator-webhook.yaml +--- diff --git a/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/certmanager.yaml b/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/certmanager.yaml new file mode 100644 index 0000000000..e8615238d0 --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/certmanager.yaml @@ -0,0 +1,44 @@ +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/certmanager.yaml +apiVersion: cert-manager.io/v1 +kind: Certificate +metadata: + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: webhook + name: example-opentelemetry-operator-serving-cert + namespace: default +spec: + dnsNames: + - example-opentelemetry-operator-webhook.default.svc + - example-opentelemetry-operator-webhook.default.svc.cluster.local + issuerRef: + kind: Issuer + name: example-opentelemetry-operator-selfsigned-issuer + secretName: example-opentelemetry-operator-controller-manager-service-cert + subject: + organizationalUnits: + - example-opentelemetry-operator +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/certmanager.yaml +apiVersion: cert-manager.io/v1 +kind: Issuer +metadata: + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: webhook + name: example-opentelemetry-operator-selfsigned-issuer + namespace: default +spec: + selfSigned: {} + diff --git a/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/clusterrole.yaml b/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/clusterrole.yaml new file mode 100644 index 0000000000..2037050533 --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/clusterrole.yaml @@ -0,0 +1,410 @@ +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/clusterrole.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: controller-manager + name: example-opentelemetry-operator-manager +rules: + - apiGroups: + - "" + resources: + - configmaps + - persistentvolumeclaims + - persistentvolumes + - pods + - serviceaccounts + - services + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - "" + resources: + - events + verbs: + - create + - get + - list + - patch + - watch + - apiGroups: + - "" + resources: + - namespaces + verbs: + - list + - watch + - apiGroups: + - "" + resources: + - namespaces/status + verbs: + - get + - list + - watch + - apiGroups: + - "" + resources: + - nodes/spec + verbs: + - get + - list + - watch + - apiGroups: + - "" + resources: + - pods/status + verbs: + - get + - list + - watch + - apiGroups: + - "" + resources: + - replicationcontrollers + verbs: + - get + - list + - watch + - apiGroups: + - "" + resources: + - replicationcontrollers/status + verbs: + - get + - list + - watch + - apiGroups: + - "" + resources: + - resourcequotas + verbs: + - get + - list + - watch + - apiGroups: + - apps + resources: + - daemonsets + - deployments + - statefulsets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - apps + - extensions + resources: + - replicasets + verbs: + - get + - list + - watch + - apiGroups: + - extensions + resources: + - daemonsets + verbs: + - get + - list + - watch + - apiGroups: + - extensions + resources: + - deployments + verbs: + - get + - list + - watch + - apiGroups: + - autoscaling + resources: + - horizontalpodautoscalers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - batch + resources: + - jobs + verbs: + - get + - list + - watch + - apiGroups: + - batch + resources: + - cronjobs + verbs: + - get + - list + - watch + - apiGroups: + - "" + resources: + - nodes/proxy + verbs: + - get + - apiGroups: + - "" + resources: + - nodes/stats + verbs: + - get + - apiGroups: + - config.openshift.io + resources: + - infrastructures + - infrastructures/status + verbs: + - get + - list + - watch + - apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - get + - list + - update + - apiGroups: + - discovery.k8s.io + resources: + - endpointslices + verbs: + - get + - list + - apiGroups: + - events.k8s.io + resources: + - events + verbs: + - create + - list + - patch + - watch + - apiGroups: + - gateway.networking.k8s.io + resources: + - httproutes + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - monitoring.coreos.com + resources: + - podmonitors + - servicemonitors + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - networking.k8s.io + resources: + - ingresses + - networkpolicies + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - opentelemetry.io + resources: + - instrumentations + verbs: + - get + - list + - patch + - update + - watch + - apiGroups: + - opentelemetry.io + resources: + - opampbridges + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - opentelemetry.io + resources: + - opampbridges/finalizers + verbs: + - update + - apiGroups: + - opentelemetry.io + resources: + - opampbridges/status + verbs: + - get + - patch + - update + - apiGroups: + - opentelemetry.io + resources: + - opentelemetrycollectors + verbs: + - get + - list + - patch + - update + - watch + - apiGroups: + - opentelemetry.io + resources: + - opentelemetrycollectors/finalizers + verbs: + - get + - patch + - update + - apiGroups: + - opentelemetry.io + resources: + - opentelemetrycollectors/status + verbs: + - get + - patch + - update + - apiGroups: + - policy + resources: + - poddisruptionbudgets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - route.openshift.io + resources: + - routes + - routes/custom-host + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - opentelemetry.io + resources: + - targetallocators + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - opentelemetry.io + resources: + - targetallocators/status + verbs: + - get + - patch + - update + - apiGroups: + - opentelemetry.io + resources: + - targetallocators/finalizers + verbs: + - get + - patch + - update + - apiGroups: + - cert-manager.io + resources: + - issuers + - certificaterequests + - certificates + verbs: + - create + - get + - list + - watch + - update + - patch + - delete + - apiGroups: + - authentication.k8s.io + resources: + - tokenreviews + verbs: + - create + - apiGroups: + - authorization.k8s.io + resources: + - subjectaccessreviews + verbs: + - create +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/clusterrole.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: controller-manager + name: example-opentelemetry-operator-metrics +rules: + - nonResourceURLs: + - /metrics + verbs: + - get + + diff --git a/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/clusterrolebinding.yaml b/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/clusterrolebinding.yaml new file mode 100644 index 0000000000..4acb7d53f5 --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/clusterrolebinding.yaml @@ -0,0 +1,24 @@ +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/clusterrolebinding.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: controller-manager + name: example-opentelemetry-operator-manager +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: example-opentelemetry-operator-manager +subjects: + - kind: ServiceAccount + name: opentelemetry-operator + namespace: default + + diff --git a/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/deployment.yaml b/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/deployment.yaml new file mode 100644 index 0000000000..c775cd1cf3 --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/deployment.yaml @@ -0,0 +1,105 @@ +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/deployment.yaml +apiVersion: apps/v1 +kind: Deployment +metadata: + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: controller-manager + name: example-opentelemetry-operator + namespace: default +spec: + replicas: 1 + revisionHistoryLimit: 10 + selector: + matchLabels: + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/component: controller-manager + template: + metadata: + annotations: + kubectl.kubernetes.io/default-container: manager + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: controller-manager + spec: + automountServiceAccountToken: true + hostNetwork: false + containers: + - args: + - --metrics-addr=0.0.0.0:8443 + - --metrics-secure=true + - --enable-leader-election + - --health-probe-addr=:8081 + - --webhook-port=9443 + - --collector-image=otel/opentelemetry-collector-k8s:0.151.0 + command: + - /manager + env: + - name: SERVICE_ACCOUNT_NAME + valueFrom: + fieldRef: + fieldPath: spec.serviceAccountName + - name: ENABLE_WEBHOOKS + value: "true" + image: "ghcr.io/open-telemetry/opentelemetry-operator/opentelemetry-operator:0.151.0" + name: manager + imagePullPolicy: IfNotPresent + ports: + - containerPort: 8443 + name: metrics + protocol: TCP + - containerPort: 9443 + name: webhook-server + protocol: TCP + livenessProbe: + httpGet: + path: /healthz + port: 8081 + initialDelaySeconds: 15 + periodSeconds: 20 + readinessProbe: + httpGet: + path: /readyz + port: 8081 + initialDelaySeconds: 5 + periodSeconds: 10 + resources: + {} + volumeMounts: + - mountPath: /tmp/k8s-webhook-server/serving-certs + name: cert + readOnly: true + securityContext: + allowPrivilegeEscalation: false + capabilities: + drop: + - ALL + runAsNonRoot: true + seccompProfile: + type: RuntimeDefault + nodeSelector: + kubernetes.io/os: linux + serviceAccountName: opentelemetry-operator + terminationGracePeriodSeconds: 10 + volumes: + - name: cert + secret: + defaultMode: 420 + secretName: example-opentelemetry-operator-controller-manager-service-cert + securityContext: + fsGroup: 65532 + runAsGroup: 65532 + runAsNonRoot: true + runAsUser: 65532 + diff --git a/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/role.yaml b/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/role.yaml new file mode 100644 index 0000000000..b5339517a2 --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/role.yaml @@ -0,0 +1,200 @@ +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/role.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: controller-manager + name: example-opentelemetry-operator-leader-election + namespace: default +rules: + - apiGroups: + - "" + resources: + - configmaps + - pods + - serviceaccounts + - services + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - "" + resources: + - events + verbs: + - create + - patch + - apiGroups: + - "" + resources: + - namespaces + - secrets + verbs: + - get + - list + - watch + - apiGroups: + - apps + resources: + - daemonsets + - deployments + - statefulsets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - apps + resources: + - replicasets + verbs: + - get + - list + - watch + - apiGroups: + - autoscaling + resources: + - horizontalpodautoscalers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - batch + resources: + - jobs + verbs: + - get + - list + - watch + - apiGroups: + - config.openshift.io + resources: + - infrastructures + - infrastructures/status + verbs: + - get + - list + - watch + - apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - get + - list + - update + - apiGroups: + - monitoring.coreos.com + resources: + - podmonitors + - servicemonitors + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - opentelemetry.io + resources: + - instrumentations + - opentelemetrycollectors + verbs: + - get + - list + - patch + - update + - watch + - apiGroups: + - opentelemetry.io + resources: + - opampbridges + - targetallocators + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - opentelemetry.io + resources: + - opampbridges/finalizers + verbs: + - update + - apiGroups: + - opentelemetry.io + resources: + - opampbridges/status + - opentelemetrycollectors/finalizers + - opentelemetrycollectors/status + - targetallocators/status + - targetallocators/finalizers + verbs: + - get + - patch + - update + - apiGroups: + - policy + resources: + - poddisruptionbudgets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - route.openshift.io + resources: + - routes + - routes/custom-host + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + diff --git a/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/rolebinding.yaml b/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/rolebinding.yaml new file mode 100644 index 0000000000..ae376e80c9 --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/rolebinding.yaml @@ -0,0 +1,24 @@ +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/rolebinding.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: controller-manager + name: example-opentelemetry-operator-leader-election + namespace: default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: example-opentelemetry-operator-leader-election +subjects: + - kind: ServiceAccount + name: opentelemetry-operator + namespace: default + diff --git a/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/service.yaml b/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/service.yaml new file mode 100644 index 0000000000..0a3006d80f --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/service.yaml @@ -0,0 +1,48 @@ +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/service.yaml +apiVersion: v1 +kind: Service +metadata: + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: controller-manager + name: example-opentelemetry-operator + namespace: default +spec: + ports: + - name: metrics + port: 8443 + protocol: TCP + targetPort: metrics + selector: + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/component: controller-manager +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/service.yaml +apiVersion: v1 +kind: Service +metadata: + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: controller-manager + name: example-opentelemetry-operator-webhook + namespace: default +spec: + ports: + - port: 443 + protocol: TCP + targetPort: webhook-server + selector: + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/component: controller-manager + diff --git a/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/serviceaccount.yaml b/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/serviceaccount.yaml new file mode 100644 index 0000000000..c6ba25dbac --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/serviceaccount.yaml @@ -0,0 +1,17 @@ +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/serviceaccount.yaml +apiVersion: v1 +kind: ServiceAccount +automountServiceAccountToken: true +metadata: + name: opentelemetry-operator + namespace: default + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: controller-manager + diff --git a/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml b/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml new file mode 100644 index 0000000000..9039160e03 --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml @@ -0,0 +1,54 @@ +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/tests/test-certmanager-connection.yaml +apiVersion: v1 +kind: Pod +metadata: + name: "example-opentelemetry-operator-cert-manager" + namespace: default + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: webhook + annotations: + "helm.sh/hook": test +spec: + containers: + - name: wget + image: "busybox:latest" + env: + - name: CERT_MANAGER_CLUSTERIP + value: "cert-manager-webhook" + - name: CERT_MANAGER_PORT + value: "443" + command: + - sh + - -c + # The following shell script tests if the cert-manager service is up. If the service is up, when we try + # to wget its exposed port, we will get an HTTP error 400. + - | + wget_output=$(wget -q "$CERT_MANAGER_CLUSTERIP:$CERT_MANAGER_PORT") + if wget_output=="wget: server returned error: HTTP/1.0 400 Bad Request" + then exit 0 + else exit 1 + fi + securityContext: + allowPrivilegeEscalation: false + capabilities: + drop: + - ALL + runAsNonRoot: true + seccompProfile: + type: RuntimeDefault + restartPolicy: Never + nodeSelector: + kubernetes.io/os: linux + securityContext: + fsGroup: 65532 + runAsGroup: 65532 + runAsNonRoot: true + runAsUser: 65532 + diff --git a/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/tests/test-service-connection.yaml b/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/tests/test-service-connection.yaml new file mode 100644 index 0000000000..88e0e0bc24 --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/tests/test-service-connection.yaml @@ -0,0 +1,107 @@ +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/tests/test-service-connection.yaml +apiVersion: v1 +kind: Pod +metadata: + name: "example-opentelemetry-operator-metrics" + namespace: default + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: controller-manager + annotations: + "helm.sh/hook": test +spec: + containers: + - name: wget + image: "busybox:latest" + env: + - name: MANAGER_METRICS_SERVICE_CLUSTERIP + value: "example-opentelemetry-operator" + - name: MANAGER_METRICS_SERVICE_PORT + value: "8443" + command: + - sh + - -c + # The following shell script tests if the controller-manager-metrics-service is up. + # If the service is up, when we try to wget its exposed port, we will get an HTTP error 400. + - | + wget_output=$(wget -q "$MANAGER_METRICS_SERVICE_CLUSTERIP:$MANAGER_METRICS_SERVICE_PORT") + if wget_output=="wget: server returned error: HTTP/1.0 400 Bad Request" + then exit 0 + else exit 1 + fi + securityContext: + allowPrivilegeEscalation: false + capabilities: + drop: + - ALL + runAsNonRoot: true + seccompProfile: + type: RuntimeDefault + restartPolicy: Never + nodeSelector: + kubernetes.io/os: linux + securityContext: + fsGroup: 65532 + runAsGroup: 65532 + runAsNonRoot: true + runAsUser: 65532 +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/tests/test-service-connection.yaml +apiVersion: v1 +kind: Pod +metadata: + name: "example-opentelemetry-operator-webhook" + namespace: default + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: controller-manager + annotations: + "helm.sh/hook": test +spec: + containers: + - name: wget + image: "busybox:latest" + env: + - name: WEBHOOK_SERVICE_CLUSTERIP + value: "example-opentelemetry-operator-webhook" + - name: WEBHOOK_SERVICE_PORT + value: "443" + command: + - sh + - -c + # The following shell script tests if the webhook service is up. If the service is up, when we try + # to wget its exposed port, we will get an HTTP error 400. + - | + wget_output=$(wget -q "$WEBHOOK_SERVICE_CLUSTERIP:$WEBHOOK_SERVICE_PORT") + if wget_output=="wget: server returned error: HTTP/1.0 400 Bad Request" + then exit 0 + else exit 1 + fi + securityContext: + allowPrivilegeEscalation: false + capabilities: + drop: + - ALL + runAsNonRoot: true + seccompProfile: + type: RuntimeDefault + restartPolicy: Never + nodeSelector: + kubernetes.io/os: linux + securityContext: + fsGroup: 65532 + runAsGroup: 65532 + runAsNonRoot: true + runAsUser: 65532 + diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/clusterrole.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/clusterrole.yaml new file mode 100644 index 0000000000..9d2d1e8211 --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/clusterrole.yaml @@ -0,0 +1,69 @@ +--- +# Source: opentelemetry-kube-stack/templates/clusterrole.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + name: example-collector +rules: +- apiGroups: [""] + resources: + - namespaces + - nodes + - nodes/proxy + - nodes/metrics + - nodes/stats + - services + - endpoints + - pods + - events + - secrets + - persistentvolumeclaims + - persistentvolumes + verbs: ["get", "list", "watch"] +- apiGroups: ["monitoring.coreos.com"] + resources: + - servicemonitors + - podmonitors + - scrapeconfigs + - probes + verbs: ["get", "list", "watch"] +- apiGroups: + - extensions + resources: + - ingresses + verbs: ["get", "list", "watch"] +- apiGroups: + - apps + resources: + - daemonsets + - deployments + - replicasets + - statefulsets + verbs: ["get", "list", "watch"] +- apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: ["get", "list", "watch"] +- apiGroups: ["discovery.k8s.io"] + resources: + - endpointslices + verbs: ["get", "list", "watch"] +- nonResourceURLs: ["/metrics", "/metrics/cadvisor"] + verbs: ["get"] +--- +# Source: opentelemetry-kube-stack/templates/clusterrole.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + name: example-daemon +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: example-collector +subjects: +- kind: ServiceAccount + # quirk of the Operator + name: "example-daemon-collector" + namespace: default + diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/collector.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/collector.yaml new file mode 100644 index 0000000000..2e18381742 --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/collector.yaml @@ -0,0 +1,128 @@ +--- +# Source: opentelemetry-kube-stack/templates/collector.yaml +apiVersion: opentelemetry.io/v1beta1 +kind: OpenTelemetryCollector +metadata: + name: example-daemon + namespace: default + labels: + helm.sh/chart: opentelemetry-kube-stack-0.16.0 + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + release: "example" +spec: + managementState: managed + mode: daemonset + config: + exporters: + debug: {} + extensions: + k8s_observer: + auth_type: serviceAccount + node: ${env:K8S_NODE_NAME} + processors: + batch: + send_batch_max_size: 1500 + send_batch_size: 1000 + timeout: 1s + resource/hostname: + attributes: + - action: insert + from_attribute: k8s.node.name + key: host.name + resourcedetection/env: + detectors: + - env + - k8snode + override: false + timeout: 2s + receivers: + otlp: + protocols: + grpc: + endpoint: 0.0.0.0:4317 + http: + endpoint: 0.0.0.0:4318 + receiver_creator/logs: + discovery: + default_annotations: + io.opentelemetry.discovery.logs/enabled: "true" + enabled: true + watch_observers: + - k8s_observer + service: + extensions: + - k8s_observer + pipelines: + logs: + exporters: + - debug + processors: + - resourcedetection/env + - resource/hostname + - batch + receivers: + - otlp + - receiver_creator/logs + metrics: + exporters: + - debug + processors: + - resourcedetection/env + - resource/hostname + - batch + receivers: + - otlp + traces: + exporters: + - debug + processors: + - resourcedetection/env + - resource/hostname + - batch + receivers: + - otlp + imagePullPolicy: IfNotPresent + upgradeStrategy: automatic + terminationGracePeriodSeconds: 30 + resources: + limits: + cpu: 200m + memory: 500Mi + requests: + cpu: 100m + memory: 250Mi + securityContext: + {} + env: + - name: K8S_NODE_NAME + valueFrom: + fieldRef: + fieldPath: spec.nodeName + - name: OTEL_K8S_NODE_NAME + valueFrom: + fieldRef: + fieldPath: spec.nodeName + - name: OTEL_K8S_NODE_IP + valueFrom: + fieldRef: + fieldPath: status.hostIP + - name: OTEL_K8S_NAMESPACE + valueFrom: + fieldRef: + apiVersion: v1 + fieldPath: metadata.namespace + - name: OTEL_K8S_POD_NAME + valueFrom: + fieldRef: + apiVersion: v1 + fieldPath: metadata.name + - name: OTEL_K8S_POD_IP + valueFrom: + fieldRef: + apiVersion: v1 + fieldPath: status.podIP + - name: OTEL_RESOURCE_ATTRIBUTES + value: "k8s.pod.name=$(OTEL_K8S_POD_NAME),k8s.namespace.name=$(OTEL_K8S_NAMESPACE),k8s.node.name=$(OTEL_K8S_NODE_NAME),host.name=$(OTEL_K8S_NODE_NAME),k8s.node.ip=$(OTEL_K8S_NODE_IP),k8s.pod.ip=$(OTEL_K8S_POD_IP),k8s.cluster.name=unknown_k8s_cluster" + + diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/hooks.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/hooks.yaml new file mode 100644 index 0000000000..df09c1e80b --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/hooks.yaml @@ -0,0 +1,65 @@ +--- +# Source: opentelemetry-kube-stack/templates/hooks.yaml +apiVersion: v1 +kind: ServiceAccount +metadata: + name: delete-resources-sa + annotations: + "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded +--- +# Source: opentelemetry-kube-stack/templates/hooks.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + name: delete-resources-role + annotations: + "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded +rules: + - apiGroups: + - opentelemetry.io + resources: + - instrumentations + - opampbridges + - opentelemetrycollectors + verbs: + - get + - list + - delete +--- +# Source: opentelemetry-kube-stack/templates/hooks.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + name: delete-resources-rolebinding + annotations: + "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: delete-resources-role +subjects: + - kind: ServiceAccount + name: delete-resources-sa +--- +# Source: opentelemetry-kube-stack/templates/hooks.yaml +apiVersion: batch/v1 +kind: Job +metadata: + name: opentelemetry-kube-stack-pre-delete-job + annotations: + "helm.sh/hook": pre-delete + "helm.sh/hook-delete-policy": hook-succeeded,hook-failed +spec: + template: + spec: + restartPolicy: Never + serviceAccountName: delete-resources-sa + containers: + - name: delete-resources + image: "rancher/kubectl:v1.34.1" + args: + - "delete" + - "instrumentations,opampbridges,opentelemetrycollectors" + - "-l" + - "helm.sh/chart=opentelemetry-kube-stack-0.16.0" + diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml new file mode 100644 index 0000000000..17585fa86a --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml @@ -0,0 +1,193 @@ +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/admission-webhooks/operator-webhook-with-cert-manager.yaml +apiVersion: admissionregistration.k8s.io/v1 +kind: MutatingWebhookConfiguration +metadata: + annotations: + cert-manager.io/inject-ca-from: default/example-opentelemetry-operator-serving-cert + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: webhook + name: example-opentelemetry-operator-mutation +webhooks: + - admissionReviewVersions: + - v1 + clientConfig: + service: + name: example-opentelemetry-operator-webhook + namespace: default + path: /mutate-opentelemetry-io-v1alpha1-instrumentation + port: 443 + failurePolicy: Ignore + name: minstrumentation.kb.io + rules: + - apiGroups: + - opentelemetry.io + apiVersions: + - v1alpha1 + operations: + - CREATE + - UPDATE + resources: + - instrumentations + scope: Namespaced + sideEffects: None + timeoutSeconds: 10 + - admissionReviewVersions: + - v1 + clientConfig: + service: + name: example-opentelemetry-operator-webhook + namespace: default + path: /mutate-opentelemetry-io-v1beta1-opentelemetrycollector + port: 443 + failurePolicy: Ignore + name: mopentelemetrycollectorbeta.kb.io + rules: + - apiGroups: + - opentelemetry.io + apiVersions: + - v1beta1 + operations: + - CREATE + - UPDATE + resources: + - opentelemetrycollectors + scope: Namespaced + sideEffects: None + timeoutSeconds: 10 + - admissionReviewVersions: + - v1 + clientConfig: + service: + name: example-opentelemetry-operator-webhook + namespace: default + path: /mutate-v1-pod + port: 443 + failurePolicy: Ignore + name: mpod.kb.io + rules: + - apiGroups: + - "" + apiVersions: + - v1 + operations: + - CREATE + resources: + - pods + scope: Namespaced + sideEffects: None + timeoutSeconds: 10 +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/admission-webhooks/operator-webhook-with-cert-manager.yaml +apiVersion: admissionregistration.k8s.io/v1 +kind: ValidatingWebhookConfiguration +metadata: + annotations: + cert-manager.io/inject-ca-from: default/example-opentelemetry-operator-serving-cert + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: webhook + name: example-opentelemetry-operator-validation +webhooks: + - admissionReviewVersions: + - v1 + clientConfig: + service: + name: example-opentelemetry-operator-webhook + namespace: default + path: /validate-opentelemetry-io-v1alpha1-instrumentation + port: 443 + failurePolicy: Ignore + name: vinstrumentationcreateupdate.kb.io + rules: + - apiGroups: + - opentelemetry.io + apiVersions: + - v1alpha1 + operations: + - CREATE + - UPDATE + resources: + - instrumentations + scope: Namespaced + sideEffects: None + timeoutSeconds: 10 + - admissionReviewVersions: + - v1 + clientConfig: + service: + name: example-opentelemetry-operator-webhook + namespace: default + path: /validate-opentelemetry-io-v1alpha1-instrumentation + port: 443 + failurePolicy: Ignore + name: vinstrumentationdelete.kb.io + rules: + - apiGroups: + - opentelemetry.io + apiVersions: + - v1alpha1 + operations: + - DELETE + resources: + - instrumentations + scope: Namespaced + sideEffects: None + timeoutSeconds: 10 + - admissionReviewVersions: + - v1 + clientConfig: + service: + name: example-opentelemetry-operator-webhook + namespace: default + path: /validate-opentelemetry-io-v1beta1-opentelemetrycollector + port: 443 + failurePolicy: Ignore + name: vopentelemetrycollectorcreateupdatebeta.kb.io + rules: + - apiGroups: + - opentelemetry.io + apiVersions: + - v1beta1 + operations: + - CREATE + - UPDATE + resources: + - opentelemetrycollectors + scope: Namespaced + sideEffects: None + timeoutSeconds: 10 + - admissionReviewVersions: + - v1 + clientConfig: + service: + name: example-opentelemetry-operator-webhook + namespace: default + path: /validate-opentelemetry-io-v1beta1-opentelemetrycollector + port: 443 + failurePolicy: Ignore + name: vopentelemetrycollectordeletebeta.kb.io + rules: + - apiGroups: + - opentelemetry.io + apiVersions: + - v1beta1 + operations: + - DELETE + resources: + - opentelemetrycollectors + scope: Namespaced + sideEffects: None + timeoutSeconds: 10 + diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/admission-webhooks/operator-webhook.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/admission-webhooks/operator-webhook.yaml new file mode 100644 index 0000000000..5b9ff5511d --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/admission-webhooks/operator-webhook.yaml @@ -0,0 +1,3 @@ +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/admission-webhooks/operator-webhook.yaml +--- diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/certmanager.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/certmanager.yaml new file mode 100644 index 0000000000..e8615238d0 --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/certmanager.yaml @@ -0,0 +1,44 @@ +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/certmanager.yaml +apiVersion: cert-manager.io/v1 +kind: Certificate +metadata: + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: webhook + name: example-opentelemetry-operator-serving-cert + namespace: default +spec: + dnsNames: + - example-opentelemetry-operator-webhook.default.svc + - example-opentelemetry-operator-webhook.default.svc.cluster.local + issuerRef: + kind: Issuer + name: example-opentelemetry-operator-selfsigned-issuer + secretName: example-opentelemetry-operator-controller-manager-service-cert + subject: + organizationalUnits: + - example-opentelemetry-operator +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/certmanager.yaml +apiVersion: cert-manager.io/v1 +kind: Issuer +metadata: + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: webhook + name: example-opentelemetry-operator-selfsigned-issuer + namespace: default +spec: + selfSigned: {} + diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/clusterrole.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/clusterrole.yaml new file mode 100644 index 0000000000..2037050533 --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/clusterrole.yaml @@ -0,0 +1,410 @@ +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/clusterrole.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: controller-manager + name: example-opentelemetry-operator-manager +rules: + - apiGroups: + - "" + resources: + - configmaps + - persistentvolumeclaims + - persistentvolumes + - pods + - serviceaccounts + - services + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - "" + resources: + - events + verbs: + - create + - get + - list + - patch + - watch + - apiGroups: + - "" + resources: + - namespaces + verbs: + - list + - watch + - apiGroups: + - "" + resources: + - namespaces/status + verbs: + - get + - list + - watch + - apiGroups: + - "" + resources: + - nodes/spec + verbs: + - get + - list + - watch + - apiGroups: + - "" + resources: + - pods/status + verbs: + - get + - list + - watch + - apiGroups: + - "" + resources: + - replicationcontrollers + verbs: + - get + - list + - watch + - apiGroups: + - "" + resources: + - replicationcontrollers/status + verbs: + - get + - list + - watch + - apiGroups: + - "" + resources: + - resourcequotas + verbs: + - get + - list + - watch + - apiGroups: + - apps + resources: + - daemonsets + - deployments + - statefulsets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - apps + - extensions + resources: + - replicasets + verbs: + - get + - list + - watch + - apiGroups: + - extensions + resources: + - daemonsets + verbs: + - get + - list + - watch + - apiGroups: + - extensions + resources: + - deployments + verbs: + - get + - list + - watch + - apiGroups: + - autoscaling + resources: + - horizontalpodautoscalers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - batch + resources: + - jobs + verbs: + - get + - list + - watch + - apiGroups: + - batch + resources: + - cronjobs + verbs: + - get + - list + - watch + - apiGroups: + - "" + resources: + - nodes/proxy + verbs: + - get + - apiGroups: + - "" + resources: + - nodes/stats + verbs: + - get + - apiGroups: + - config.openshift.io + resources: + - infrastructures + - infrastructures/status + verbs: + - get + - list + - watch + - apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - get + - list + - update + - apiGroups: + - discovery.k8s.io + resources: + - endpointslices + verbs: + - get + - list + - apiGroups: + - events.k8s.io + resources: + - events + verbs: + - create + - list + - patch + - watch + - apiGroups: + - gateway.networking.k8s.io + resources: + - httproutes + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - monitoring.coreos.com + resources: + - podmonitors + - servicemonitors + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - networking.k8s.io + resources: + - ingresses + - networkpolicies + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - opentelemetry.io + resources: + - instrumentations + verbs: + - get + - list + - patch + - update + - watch + - apiGroups: + - opentelemetry.io + resources: + - opampbridges + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - opentelemetry.io + resources: + - opampbridges/finalizers + verbs: + - update + - apiGroups: + - opentelemetry.io + resources: + - opampbridges/status + verbs: + - get + - patch + - update + - apiGroups: + - opentelemetry.io + resources: + - opentelemetrycollectors + verbs: + - get + - list + - patch + - update + - watch + - apiGroups: + - opentelemetry.io + resources: + - opentelemetrycollectors/finalizers + verbs: + - get + - patch + - update + - apiGroups: + - opentelemetry.io + resources: + - opentelemetrycollectors/status + verbs: + - get + - patch + - update + - apiGroups: + - policy + resources: + - poddisruptionbudgets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - route.openshift.io + resources: + - routes + - routes/custom-host + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - opentelemetry.io + resources: + - targetallocators + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - opentelemetry.io + resources: + - targetallocators/status + verbs: + - get + - patch + - update + - apiGroups: + - opentelemetry.io + resources: + - targetallocators/finalizers + verbs: + - get + - patch + - update + - apiGroups: + - cert-manager.io + resources: + - issuers + - certificaterequests + - certificates + verbs: + - create + - get + - list + - watch + - update + - patch + - delete + - apiGroups: + - authentication.k8s.io + resources: + - tokenreviews + verbs: + - create + - apiGroups: + - authorization.k8s.io + resources: + - subjectaccessreviews + verbs: + - create +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/clusterrole.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: controller-manager + name: example-opentelemetry-operator-metrics +rules: + - nonResourceURLs: + - /metrics + verbs: + - get + + diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/clusterrolebinding.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/clusterrolebinding.yaml new file mode 100644 index 0000000000..4acb7d53f5 --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/clusterrolebinding.yaml @@ -0,0 +1,24 @@ +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/clusterrolebinding.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: controller-manager + name: example-opentelemetry-operator-manager +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: example-opentelemetry-operator-manager +subjects: + - kind: ServiceAccount + name: opentelemetry-operator + namespace: default + + diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/deployment.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/deployment.yaml new file mode 100644 index 0000000000..c775cd1cf3 --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/deployment.yaml @@ -0,0 +1,105 @@ +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/deployment.yaml +apiVersion: apps/v1 +kind: Deployment +metadata: + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: controller-manager + name: example-opentelemetry-operator + namespace: default +spec: + replicas: 1 + revisionHistoryLimit: 10 + selector: + matchLabels: + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/component: controller-manager + template: + metadata: + annotations: + kubectl.kubernetes.io/default-container: manager + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: controller-manager + spec: + automountServiceAccountToken: true + hostNetwork: false + containers: + - args: + - --metrics-addr=0.0.0.0:8443 + - --metrics-secure=true + - --enable-leader-election + - --health-probe-addr=:8081 + - --webhook-port=9443 + - --collector-image=otel/opentelemetry-collector-k8s:0.151.0 + command: + - /manager + env: + - name: SERVICE_ACCOUNT_NAME + valueFrom: + fieldRef: + fieldPath: spec.serviceAccountName + - name: ENABLE_WEBHOOKS + value: "true" + image: "ghcr.io/open-telemetry/opentelemetry-operator/opentelemetry-operator:0.151.0" + name: manager + imagePullPolicy: IfNotPresent + ports: + - containerPort: 8443 + name: metrics + protocol: TCP + - containerPort: 9443 + name: webhook-server + protocol: TCP + livenessProbe: + httpGet: + path: /healthz + port: 8081 + initialDelaySeconds: 15 + periodSeconds: 20 + readinessProbe: + httpGet: + path: /readyz + port: 8081 + initialDelaySeconds: 5 + periodSeconds: 10 + resources: + {} + volumeMounts: + - mountPath: /tmp/k8s-webhook-server/serving-certs + name: cert + readOnly: true + securityContext: + allowPrivilegeEscalation: false + capabilities: + drop: + - ALL + runAsNonRoot: true + seccompProfile: + type: RuntimeDefault + nodeSelector: + kubernetes.io/os: linux + serviceAccountName: opentelemetry-operator + terminationGracePeriodSeconds: 10 + volumes: + - name: cert + secret: + defaultMode: 420 + secretName: example-opentelemetry-operator-controller-manager-service-cert + securityContext: + fsGroup: 65532 + runAsGroup: 65532 + runAsNonRoot: true + runAsUser: 65532 + diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/role.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/role.yaml new file mode 100644 index 0000000000..b5339517a2 --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/role.yaml @@ -0,0 +1,200 @@ +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/role.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: controller-manager + name: example-opentelemetry-operator-leader-election + namespace: default +rules: + - apiGroups: + - "" + resources: + - configmaps + - pods + - serviceaccounts + - services + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - "" + resources: + - events + verbs: + - create + - patch + - apiGroups: + - "" + resources: + - namespaces + - secrets + verbs: + - get + - list + - watch + - apiGroups: + - apps + resources: + - daemonsets + - deployments + - statefulsets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - apps + resources: + - replicasets + verbs: + - get + - list + - watch + - apiGroups: + - autoscaling + resources: + - horizontalpodautoscalers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - batch + resources: + - jobs + verbs: + - get + - list + - watch + - apiGroups: + - config.openshift.io + resources: + - infrastructures + - infrastructures/status + verbs: + - get + - list + - watch + - apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - get + - list + - update + - apiGroups: + - monitoring.coreos.com + resources: + - podmonitors + - servicemonitors + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - opentelemetry.io + resources: + - instrumentations + - opentelemetrycollectors + verbs: + - get + - list + - patch + - update + - watch + - apiGroups: + - opentelemetry.io + resources: + - opampbridges + - targetallocators + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - opentelemetry.io + resources: + - opampbridges/finalizers + verbs: + - update + - apiGroups: + - opentelemetry.io + resources: + - opampbridges/status + - opentelemetrycollectors/finalizers + - opentelemetrycollectors/status + - targetallocators/status + - targetallocators/finalizers + verbs: + - get + - patch + - update + - apiGroups: + - policy + resources: + - poddisruptionbudgets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - route.openshift.io + resources: + - routes + - routes/custom-host + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/rolebinding.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/rolebinding.yaml new file mode 100644 index 0000000000..ae376e80c9 --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/rolebinding.yaml @@ -0,0 +1,24 @@ +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/rolebinding.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: controller-manager + name: example-opentelemetry-operator-leader-election + namespace: default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: example-opentelemetry-operator-leader-election +subjects: + - kind: ServiceAccount + name: opentelemetry-operator + namespace: default + diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/service.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/service.yaml new file mode 100644 index 0000000000..0a3006d80f --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/service.yaml @@ -0,0 +1,48 @@ +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/service.yaml +apiVersion: v1 +kind: Service +metadata: + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: controller-manager + name: example-opentelemetry-operator + namespace: default +spec: + ports: + - name: metrics + port: 8443 + protocol: TCP + targetPort: metrics + selector: + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/component: controller-manager +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/service.yaml +apiVersion: v1 +kind: Service +metadata: + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: controller-manager + name: example-opentelemetry-operator-webhook + namespace: default +spec: + ports: + - port: 443 + protocol: TCP + targetPort: webhook-server + selector: + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/component: controller-manager + diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/serviceaccount.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/serviceaccount.yaml new file mode 100644 index 0000000000..c6ba25dbac --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/serviceaccount.yaml @@ -0,0 +1,17 @@ +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/serviceaccount.yaml +apiVersion: v1 +kind: ServiceAccount +automountServiceAccountToken: true +metadata: + name: opentelemetry-operator + namespace: default + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: controller-manager + diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml new file mode 100644 index 0000000000..9039160e03 --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml @@ -0,0 +1,54 @@ +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/tests/test-certmanager-connection.yaml +apiVersion: v1 +kind: Pod +metadata: + name: "example-opentelemetry-operator-cert-manager" + namespace: default + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: webhook + annotations: + "helm.sh/hook": test +spec: + containers: + - name: wget + image: "busybox:latest" + env: + - name: CERT_MANAGER_CLUSTERIP + value: "cert-manager-webhook" + - name: CERT_MANAGER_PORT + value: "443" + command: + - sh + - -c + # The following shell script tests if the cert-manager service is up. If the service is up, when we try + # to wget its exposed port, we will get an HTTP error 400. + - | + wget_output=$(wget -q "$CERT_MANAGER_CLUSTERIP:$CERT_MANAGER_PORT") + if wget_output=="wget: server returned error: HTTP/1.0 400 Bad Request" + then exit 0 + else exit 1 + fi + securityContext: + allowPrivilegeEscalation: false + capabilities: + drop: + - ALL + runAsNonRoot: true + seccompProfile: + type: RuntimeDefault + restartPolicy: Never + nodeSelector: + kubernetes.io/os: linux + securityContext: + fsGroup: 65532 + runAsGroup: 65532 + runAsNonRoot: true + runAsUser: 65532 + diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/tests/test-service-connection.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/tests/test-service-connection.yaml new file mode 100644 index 0000000000..88e0e0bc24 --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/tests/test-service-connection.yaml @@ -0,0 +1,107 @@ +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/tests/test-service-connection.yaml +apiVersion: v1 +kind: Pod +metadata: + name: "example-opentelemetry-operator-metrics" + namespace: default + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: controller-manager + annotations: + "helm.sh/hook": test +spec: + containers: + - name: wget + image: "busybox:latest" + env: + - name: MANAGER_METRICS_SERVICE_CLUSTERIP + value: "example-opentelemetry-operator" + - name: MANAGER_METRICS_SERVICE_PORT + value: "8443" + command: + - sh + - -c + # The following shell script tests if the controller-manager-metrics-service is up. + # If the service is up, when we try to wget its exposed port, we will get an HTTP error 400. + - | + wget_output=$(wget -q "$MANAGER_METRICS_SERVICE_CLUSTERIP:$MANAGER_METRICS_SERVICE_PORT") + if wget_output=="wget: server returned error: HTTP/1.0 400 Bad Request" + then exit 0 + else exit 1 + fi + securityContext: + allowPrivilegeEscalation: false + capabilities: + drop: + - ALL + runAsNonRoot: true + seccompProfile: + type: RuntimeDefault + restartPolicy: Never + nodeSelector: + kubernetes.io/os: linux + securityContext: + fsGroup: 65532 + runAsGroup: 65532 + runAsNonRoot: true + runAsUser: 65532 +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/tests/test-service-connection.yaml +apiVersion: v1 +kind: Pod +metadata: + name: "example-opentelemetry-operator-webhook" + namespace: default + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: controller-manager + annotations: + "helm.sh/hook": test +spec: + containers: + - name: wget + image: "busybox:latest" + env: + - name: WEBHOOK_SERVICE_CLUSTERIP + value: "example-opentelemetry-operator-webhook" + - name: WEBHOOK_SERVICE_PORT + value: "443" + command: + - sh + - -c + # The following shell script tests if the webhook service is up. If the service is up, when we try + # to wget its exposed port, we will get an HTTP error 400. + - | + wget_output=$(wget -q "$WEBHOOK_SERVICE_CLUSTERIP:$WEBHOOK_SERVICE_PORT") + if wget_output=="wget: server returned error: HTTP/1.0 400 Bad Request" + then exit 0 + else exit 1 + fi + securityContext: + allowPrivilegeEscalation: false + capabilities: + drop: + - ALL + runAsNonRoot: true + seccompProfile: + type: RuntimeDefault + restartPolicy: Never + nodeSelector: + kubernetes.io/os: linux + securityContext: + fsGroup: 65532 + runAsGroup: 65532 + runAsNonRoot: true + runAsUser: 65532 + diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/clusterrole.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/clusterrole.yaml new file mode 100644 index 0000000000..9d2d1e8211 --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/clusterrole.yaml @@ -0,0 +1,69 @@ +--- +# Source: opentelemetry-kube-stack/templates/clusterrole.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + name: example-collector +rules: +- apiGroups: [""] + resources: + - namespaces + - nodes + - nodes/proxy + - nodes/metrics + - nodes/stats + - services + - endpoints + - pods + - events + - secrets + - persistentvolumeclaims + - persistentvolumes + verbs: ["get", "list", "watch"] +- apiGroups: ["monitoring.coreos.com"] + resources: + - servicemonitors + - podmonitors + - scrapeconfigs + - probes + verbs: ["get", "list", "watch"] +- apiGroups: + - extensions + resources: + - ingresses + verbs: ["get", "list", "watch"] +- apiGroups: + - apps + resources: + - daemonsets + - deployments + - replicasets + - statefulsets + verbs: ["get", "list", "watch"] +- apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: ["get", "list", "watch"] +- apiGroups: ["discovery.k8s.io"] + resources: + - endpointslices + verbs: ["get", "list", "watch"] +- nonResourceURLs: ["/metrics", "/metrics/cadvisor"] + verbs: ["get"] +--- +# Source: opentelemetry-kube-stack/templates/clusterrole.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + name: example-daemon +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: example-collector +subjects: +- kind: ServiceAccount + # quirk of the Operator + name: "example-daemon-collector" + namespace: default + diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/collector.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/collector.yaml new file mode 100644 index 0000000000..a9b50cce3a --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/collector.yaml @@ -0,0 +1,126 @@ +--- +# Source: opentelemetry-kube-stack/templates/collector.yaml +apiVersion: opentelemetry.io/v1beta1 +kind: OpenTelemetryCollector +metadata: + name: example-daemon + namespace: default + labels: + helm.sh/chart: opentelemetry-kube-stack-0.16.0 + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + release: "example" +spec: + managementState: managed + mode: daemonset + config: + exporters: + debug: {} + extensions: + k8s_observer: + auth_type: serviceAccount + node: ${env:K8S_NODE_NAME} + processors: + batch: + send_batch_max_size: 1500 + send_batch_size: 1000 + timeout: 1s + resource/hostname: + attributes: + - action: insert + from_attribute: k8s.node.name + key: host.name + resourcedetection/env: + detectors: + - env + - k8snode + override: false + timeout: 2s + receivers: + otlp: + protocols: + grpc: + endpoint: 0.0.0.0:4317 + http: + endpoint: 0.0.0.0:4318 + receiver_creator/metrics: + discovery: + enabled: true + watch_observers: + - k8s_observer + service: + extensions: + - k8s_observer + pipelines: + logs: + exporters: + - debug + processors: + - resourcedetection/env + - resource/hostname + - batch + receivers: + - otlp + metrics: + exporters: + - debug + processors: + - resourcedetection/env + - resource/hostname + - batch + receivers: + - otlp + - receiver_creator/metrics + traces: + exporters: + - debug + processors: + - resourcedetection/env + - resource/hostname + - batch + receivers: + - otlp + imagePullPolicy: IfNotPresent + upgradeStrategy: automatic + terminationGracePeriodSeconds: 30 + resources: + limits: + cpu: 200m + memory: 500Mi + requests: + cpu: 100m + memory: 250Mi + securityContext: + {} + env: + - name: K8S_NODE_NAME + valueFrom: + fieldRef: + fieldPath: spec.nodeName + - name: OTEL_K8S_NODE_NAME + valueFrom: + fieldRef: + fieldPath: spec.nodeName + - name: OTEL_K8S_NODE_IP + valueFrom: + fieldRef: + fieldPath: status.hostIP + - name: OTEL_K8S_NAMESPACE + valueFrom: + fieldRef: + apiVersion: v1 + fieldPath: metadata.namespace + - name: OTEL_K8S_POD_NAME + valueFrom: + fieldRef: + apiVersion: v1 + fieldPath: metadata.name + - name: OTEL_K8S_POD_IP + valueFrom: + fieldRef: + apiVersion: v1 + fieldPath: status.podIP + - name: OTEL_RESOURCE_ATTRIBUTES + value: "k8s.pod.name=$(OTEL_K8S_POD_NAME),k8s.namespace.name=$(OTEL_K8S_NAMESPACE),k8s.node.name=$(OTEL_K8S_NODE_NAME),host.name=$(OTEL_K8S_NODE_NAME),k8s.node.ip=$(OTEL_K8S_NODE_IP),k8s.pod.ip=$(OTEL_K8S_POD_IP),k8s.cluster.name=unknown_k8s_cluster" + + diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/hooks.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/hooks.yaml new file mode 100644 index 0000000000..df09c1e80b --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/hooks.yaml @@ -0,0 +1,65 @@ +--- +# Source: opentelemetry-kube-stack/templates/hooks.yaml +apiVersion: v1 +kind: ServiceAccount +metadata: + name: delete-resources-sa + annotations: + "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded +--- +# Source: opentelemetry-kube-stack/templates/hooks.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + name: delete-resources-role + annotations: + "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded +rules: + - apiGroups: + - opentelemetry.io + resources: + - instrumentations + - opampbridges + - opentelemetrycollectors + verbs: + - get + - list + - delete +--- +# Source: opentelemetry-kube-stack/templates/hooks.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + name: delete-resources-rolebinding + annotations: + "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: delete-resources-role +subjects: + - kind: ServiceAccount + name: delete-resources-sa +--- +# Source: opentelemetry-kube-stack/templates/hooks.yaml +apiVersion: batch/v1 +kind: Job +metadata: + name: opentelemetry-kube-stack-pre-delete-job + annotations: + "helm.sh/hook": pre-delete + "helm.sh/hook-delete-policy": hook-succeeded,hook-failed +spec: + template: + spec: + restartPolicy: Never + serviceAccountName: delete-resources-sa + containers: + - name: delete-resources + image: "rancher/kubectl:v1.34.1" + args: + - "delete" + - "instrumentations,opampbridges,opentelemetrycollectors" + - "-l" + - "helm.sh/chart=opentelemetry-kube-stack-0.16.0" + diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml new file mode 100644 index 0000000000..17585fa86a --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml @@ -0,0 +1,193 @@ +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/admission-webhooks/operator-webhook-with-cert-manager.yaml +apiVersion: admissionregistration.k8s.io/v1 +kind: MutatingWebhookConfiguration +metadata: + annotations: + cert-manager.io/inject-ca-from: default/example-opentelemetry-operator-serving-cert + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: webhook + name: example-opentelemetry-operator-mutation +webhooks: + - admissionReviewVersions: + - v1 + clientConfig: + service: + name: example-opentelemetry-operator-webhook + namespace: default + path: /mutate-opentelemetry-io-v1alpha1-instrumentation + port: 443 + failurePolicy: Ignore + name: minstrumentation.kb.io + rules: + - apiGroups: + - opentelemetry.io + apiVersions: + - v1alpha1 + operations: + - CREATE + - UPDATE + resources: + - instrumentations + scope: Namespaced + sideEffects: None + timeoutSeconds: 10 + - admissionReviewVersions: + - v1 + clientConfig: + service: + name: example-opentelemetry-operator-webhook + namespace: default + path: /mutate-opentelemetry-io-v1beta1-opentelemetrycollector + port: 443 + failurePolicy: Ignore + name: mopentelemetrycollectorbeta.kb.io + rules: + - apiGroups: + - opentelemetry.io + apiVersions: + - v1beta1 + operations: + - CREATE + - UPDATE + resources: + - opentelemetrycollectors + scope: Namespaced + sideEffects: None + timeoutSeconds: 10 + - admissionReviewVersions: + - v1 + clientConfig: + service: + name: example-opentelemetry-operator-webhook + namespace: default + path: /mutate-v1-pod + port: 443 + failurePolicy: Ignore + name: mpod.kb.io + rules: + - apiGroups: + - "" + apiVersions: + - v1 + operations: + - CREATE + resources: + - pods + scope: Namespaced + sideEffects: None + timeoutSeconds: 10 +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/admission-webhooks/operator-webhook-with-cert-manager.yaml +apiVersion: admissionregistration.k8s.io/v1 +kind: ValidatingWebhookConfiguration +metadata: + annotations: + cert-manager.io/inject-ca-from: default/example-opentelemetry-operator-serving-cert + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: webhook + name: example-opentelemetry-operator-validation +webhooks: + - admissionReviewVersions: + - v1 + clientConfig: + service: + name: example-opentelemetry-operator-webhook + namespace: default + path: /validate-opentelemetry-io-v1alpha1-instrumentation + port: 443 + failurePolicy: Ignore + name: vinstrumentationcreateupdate.kb.io + rules: + - apiGroups: + - opentelemetry.io + apiVersions: + - v1alpha1 + operations: + - CREATE + - UPDATE + resources: + - instrumentations + scope: Namespaced + sideEffects: None + timeoutSeconds: 10 + - admissionReviewVersions: + - v1 + clientConfig: + service: + name: example-opentelemetry-operator-webhook + namespace: default + path: /validate-opentelemetry-io-v1alpha1-instrumentation + port: 443 + failurePolicy: Ignore + name: vinstrumentationdelete.kb.io + rules: + - apiGroups: + - opentelemetry.io + apiVersions: + - v1alpha1 + operations: + - DELETE + resources: + - instrumentations + scope: Namespaced + sideEffects: None + timeoutSeconds: 10 + - admissionReviewVersions: + - v1 + clientConfig: + service: + name: example-opentelemetry-operator-webhook + namespace: default + path: /validate-opentelemetry-io-v1beta1-opentelemetrycollector + port: 443 + failurePolicy: Ignore + name: vopentelemetrycollectorcreateupdatebeta.kb.io + rules: + - apiGroups: + - opentelemetry.io + apiVersions: + - v1beta1 + operations: + - CREATE + - UPDATE + resources: + - opentelemetrycollectors + scope: Namespaced + sideEffects: None + timeoutSeconds: 10 + - admissionReviewVersions: + - v1 + clientConfig: + service: + name: example-opentelemetry-operator-webhook + namespace: default + path: /validate-opentelemetry-io-v1beta1-opentelemetrycollector + port: 443 + failurePolicy: Ignore + name: vopentelemetrycollectordeletebeta.kb.io + rules: + - apiGroups: + - opentelemetry.io + apiVersions: + - v1beta1 + operations: + - DELETE + resources: + - opentelemetrycollectors + scope: Namespaced + sideEffects: None + timeoutSeconds: 10 + diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/admission-webhooks/operator-webhook.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/admission-webhooks/operator-webhook.yaml new file mode 100644 index 0000000000..5b9ff5511d --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/admission-webhooks/operator-webhook.yaml @@ -0,0 +1,3 @@ +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/admission-webhooks/operator-webhook.yaml +--- diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/certmanager.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/certmanager.yaml new file mode 100644 index 0000000000..e8615238d0 --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/certmanager.yaml @@ -0,0 +1,44 @@ +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/certmanager.yaml +apiVersion: cert-manager.io/v1 +kind: Certificate +metadata: + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: webhook + name: example-opentelemetry-operator-serving-cert + namespace: default +spec: + dnsNames: + - example-opentelemetry-operator-webhook.default.svc + - example-opentelemetry-operator-webhook.default.svc.cluster.local + issuerRef: + kind: Issuer + name: example-opentelemetry-operator-selfsigned-issuer + secretName: example-opentelemetry-operator-controller-manager-service-cert + subject: + organizationalUnits: + - example-opentelemetry-operator +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/certmanager.yaml +apiVersion: cert-manager.io/v1 +kind: Issuer +metadata: + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: webhook + name: example-opentelemetry-operator-selfsigned-issuer + namespace: default +spec: + selfSigned: {} + diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/clusterrole.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/clusterrole.yaml new file mode 100644 index 0000000000..2037050533 --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/clusterrole.yaml @@ -0,0 +1,410 @@ +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/clusterrole.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: controller-manager + name: example-opentelemetry-operator-manager +rules: + - apiGroups: + - "" + resources: + - configmaps + - persistentvolumeclaims + - persistentvolumes + - pods + - serviceaccounts + - services + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - "" + resources: + - events + verbs: + - create + - get + - list + - patch + - watch + - apiGroups: + - "" + resources: + - namespaces + verbs: + - list + - watch + - apiGroups: + - "" + resources: + - namespaces/status + verbs: + - get + - list + - watch + - apiGroups: + - "" + resources: + - nodes/spec + verbs: + - get + - list + - watch + - apiGroups: + - "" + resources: + - pods/status + verbs: + - get + - list + - watch + - apiGroups: + - "" + resources: + - replicationcontrollers + verbs: + - get + - list + - watch + - apiGroups: + - "" + resources: + - replicationcontrollers/status + verbs: + - get + - list + - watch + - apiGroups: + - "" + resources: + - resourcequotas + verbs: + - get + - list + - watch + - apiGroups: + - apps + resources: + - daemonsets + - deployments + - statefulsets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - apps + - extensions + resources: + - replicasets + verbs: + - get + - list + - watch + - apiGroups: + - extensions + resources: + - daemonsets + verbs: + - get + - list + - watch + - apiGroups: + - extensions + resources: + - deployments + verbs: + - get + - list + - watch + - apiGroups: + - autoscaling + resources: + - horizontalpodautoscalers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - batch + resources: + - jobs + verbs: + - get + - list + - watch + - apiGroups: + - batch + resources: + - cronjobs + verbs: + - get + - list + - watch + - apiGroups: + - "" + resources: + - nodes/proxy + verbs: + - get + - apiGroups: + - "" + resources: + - nodes/stats + verbs: + - get + - apiGroups: + - config.openshift.io + resources: + - infrastructures + - infrastructures/status + verbs: + - get + - list + - watch + - apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - get + - list + - update + - apiGroups: + - discovery.k8s.io + resources: + - endpointslices + verbs: + - get + - list + - apiGroups: + - events.k8s.io + resources: + - events + verbs: + - create + - list + - patch + - watch + - apiGroups: + - gateway.networking.k8s.io + resources: + - httproutes + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - monitoring.coreos.com + resources: + - podmonitors + - servicemonitors + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - networking.k8s.io + resources: + - ingresses + - networkpolicies + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - opentelemetry.io + resources: + - instrumentations + verbs: + - get + - list + - patch + - update + - watch + - apiGroups: + - opentelemetry.io + resources: + - opampbridges + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - opentelemetry.io + resources: + - opampbridges/finalizers + verbs: + - update + - apiGroups: + - opentelemetry.io + resources: + - opampbridges/status + verbs: + - get + - patch + - update + - apiGroups: + - opentelemetry.io + resources: + - opentelemetrycollectors + verbs: + - get + - list + - patch + - update + - watch + - apiGroups: + - opentelemetry.io + resources: + - opentelemetrycollectors/finalizers + verbs: + - get + - patch + - update + - apiGroups: + - opentelemetry.io + resources: + - opentelemetrycollectors/status + verbs: + - get + - patch + - update + - apiGroups: + - policy + resources: + - poddisruptionbudgets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - route.openshift.io + resources: + - routes + - routes/custom-host + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - opentelemetry.io + resources: + - targetallocators + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - opentelemetry.io + resources: + - targetallocators/status + verbs: + - get + - patch + - update + - apiGroups: + - opentelemetry.io + resources: + - targetallocators/finalizers + verbs: + - get + - patch + - update + - apiGroups: + - cert-manager.io + resources: + - issuers + - certificaterequests + - certificates + verbs: + - create + - get + - list + - watch + - update + - patch + - delete + - apiGroups: + - authentication.k8s.io + resources: + - tokenreviews + verbs: + - create + - apiGroups: + - authorization.k8s.io + resources: + - subjectaccessreviews + verbs: + - create +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/clusterrole.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: controller-manager + name: example-opentelemetry-operator-metrics +rules: + - nonResourceURLs: + - /metrics + verbs: + - get + + diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/clusterrolebinding.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/clusterrolebinding.yaml new file mode 100644 index 0000000000..4acb7d53f5 --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/clusterrolebinding.yaml @@ -0,0 +1,24 @@ +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/clusterrolebinding.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: controller-manager + name: example-opentelemetry-operator-manager +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: example-opentelemetry-operator-manager +subjects: + - kind: ServiceAccount + name: opentelemetry-operator + namespace: default + + diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/deployment.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/deployment.yaml new file mode 100644 index 0000000000..c775cd1cf3 --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/deployment.yaml @@ -0,0 +1,105 @@ +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/deployment.yaml +apiVersion: apps/v1 +kind: Deployment +metadata: + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: controller-manager + name: example-opentelemetry-operator + namespace: default +spec: + replicas: 1 + revisionHistoryLimit: 10 + selector: + matchLabels: + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/component: controller-manager + template: + metadata: + annotations: + kubectl.kubernetes.io/default-container: manager + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: controller-manager + spec: + automountServiceAccountToken: true + hostNetwork: false + containers: + - args: + - --metrics-addr=0.0.0.0:8443 + - --metrics-secure=true + - --enable-leader-election + - --health-probe-addr=:8081 + - --webhook-port=9443 + - --collector-image=otel/opentelemetry-collector-k8s:0.151.0 + command: + - /manager + env: + - name: SERVICE_ACCOUNT_NAME + valueFrom: + fieldRef: + fieldPath: spec.serviceAccountName + - name: ENABLE_WEBHOOKS + value: "true" + image: "ghcr.io/open-telemetry/opentelemetry-operator/opentelemetry-operator:0.151.0" + name: manager + imagePullPolicy: IfNotPresent + ports: + - containerPort: 8443 + name: metrics + protocol: TCP + - containerPort: 9443 + name: webhook-server + protocol: TCP + livenessProbe: + httpGet: + path: /healthz + port: 8081 + initialDelaySeconds: 15 + periodSeconds: 20 + readinessProbe: + httpGet: + path: /readyz + port: 8081 + initialDelaySeconds: 5 + periodSeconds: 10 + resources: + {} + volumeMounts: + - mountPath: /tmp/k8s-webhook-server/serving-certs + name: cert + readOnly: true + securityContext: + allowPrivilegeEscalation: false + capabilities: + drop: + - ALL + runAsNonRoot: true + seccompProfile: + type: RuntimeDefault + nodeSelector: + kubernetes.io/os: linux + serviceAccountName: opentelemetry-operator + terminationGracePeriodSeconds: 10 + volumes: + - name: cert + secret: + defaultMode: 420 + secretName: example-opentelemetry-operator-controller-manager-service-cert + securityContext: + fsGroup: 65532 + runAsGroup: 65532 + runAsNonRoot: true + runAsUser: 65532 + diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/role.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/role.yaml new file mode 100644 index 0000000000..b5339517a2 --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/role.yaml @@ -0,0 +1,200 @@ +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/role.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: controller-manager + name: example-opentelemetry-operator-leader-election + namespace: default +rules: + - apiGroups: + - "" + resources: + - configmaps + - pods + - serviceaccounts + - services + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - "" + resources: + - events + verbs: + - create + - patch + - apiGroups: + - "" + resources: + - namespaces + - secrets + verbs: + - get + - list + - watch + - apiGroups: + - apps + resources: + - daemonsets + - deployments + - statefulsets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - apps + resources: + - replicasets + verbs: + - get + - list + - watch + - apiGroups: + - autoscaling + resources: + - horizontalpodautoscalers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - batch + resources: + - jobs + verbs: + - get + - list + - watch + - apiGroups: + - config.openshift.io + resources: + - infrastructures + - infrastructures/status + verbs: + - get + - list + - watch + - apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - get + - list + - update + - apiGroups: + - monitoring.coreos.com + resources: + - podmonitors + - servicemonitors + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - opentelemetry.io + resources: + - instrumentations + - opentelemetrycollectors + verbs: + - get + - list + - patch + - update + - watch + - apiGroups: + - opentelemetry.io + resources: + - opampbridges + - targetallocators + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - opentelemetry.io + resources: + - opampbridges/finalizers + verbs: + - update + - apiGroups: + - opentelemetry.io + resources: + - opampbridges/status + - opentelemetrycollectors/finalizers + - opentelemetrycollectors/status + - targetallocators/status + - targetallocators/finalizers + verbs: + - get + - patch + - update + - apiGroups: + - policy + resources: + - poddisruptionbudgets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - route.openshift.io + resources: + - routes + - routes/custom-host + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/rolebinding.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/rolebinding.yaml new file mode 100644 index 0000000000..ae376e80c9 --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/rolebinding.yaml @@ -0,0 +1,24 @@ +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/rolebinding.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: controller-manager + name: example-opentelemetry-operator-leader-election + namespace: default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: example-opentelemetry-operator-leader-election +subjects: + - kind: ServiceAccount + name: opentelemetry-operator + namespace: default + diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/service.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/service.yaml new file mode 100644 index 0000000000..0a3006d80f --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/service.yaml @@ -0,0 +1,48 @@ +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/service.yaml +apiVersion: v1 +kind: Service +metadata: + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: controller-manager + name: example-opentelemetry-operator + namespace: default +spec: + ports: + - name: metrics + port: 8443 + protocol: TCP + targetPort: metrics + selector: + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/component: controller-manager +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/service.yaml +apiVersion: v1 +kind: Service +metadata: + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: controller-manager + name: example-opentelemetry-operator-webhook + namespace: default +spec: + ports: + - port: 443 + protocol: TCP + targetPort: webhook-server + selector: + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/component: controller-manager + diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/serviceaccount.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/serviceaccount.yaml new file mode 100644 index 0000000000..c6ba25dbac --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/serviceaccount.yaml @@ -0,0 +1,17 @@ +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/serviceaccount.yaml +apiVersion: v1 +kind: ServiceAccount +automountServiceAccountToken: true +metadata: + name: opentelemetry-operator + namespace: default + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: controller-manager + diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml new file mode 100644 index 0000000000..9039160e03 --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml @@ -0,0 +1,54 @@ +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/tests/test-certmanager-connection.yaml +apiVersion: v1 +kind: Pod +metadata: + name: "example-opentelemetry-operator-cert-manager" + namespace: default + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: webhook + annotations: + "helm.sh/hook": test +spec: + containers: + - name: wget + image: "busybox:latest" + env: + - name: CERT_MANAGER_CLUSTERIP + value: "cert-manager-webhook" + - name: CERT_MANAGER_PORT + value: "443" + command: + - sh + - -c + # The following shell script tests if the cert-manager service is up. If the service is up, when we try + # to wget its exposed port, we will get an HTTP error 400. + - | + wget_output=$(wget -q "$CERT_MANAGER_CLUSTERIP:$CERT_MANAGER_PORT") + if wget_output=="wget: server returned error: HTTP/1.0 400 Bad Request" + then exit 0 + else exit 1 + fi + securityContext: + allowPrivilegeEscalation: false + capabilities: + drop: + - ALL + runAsNonRoot: true + seccompProfile: + type: RuntimeDefault + restartPolicy: Never + nodeSelector: + kubernetes.io/os: linux + securityContext: + fsGroup: 65532 + runAsGroup: 65532 + runAsNonRoot: true + runAsUser: 65532 + diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/tests/test-service-connection.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/tests/test-service-connection.yaml new file mode 100644 index 0000000000..88e0e0bc24 --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/tests/test-service-connection.yaml @@ -0,0 +1,107 @@ +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/tests/test-service-connection.yaml +apiVersion: v1 +kind: Pod +metadata: + name: "example-opentelemetry-operator-metrics" + namespace: default + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: controller-manager + annotations: + "helm.sh/hook": test +spec: + containers: + - name: wget + image: "busybox:latest" + env: + - name: MANAGER_METRICS_SERVICE_CLUSTERIP + value: "example-opentelemetry-operator" + - name: MANAGER_METRICS_SERVICE_PORT + value: "8443" + command: + - sh + - -c + # The following shell script tests if the controller-manager-metrics-service is up. + # If the service is up, when we try to wget its exposed port, we will get an HTTP error 400. + - | + wget_output=$(wget -q "$MANAGER_METRICS_SERVICE_CLUSTERIP:$MANAGER_METRICS_SERVICE_PORT") + if wget_output=="wget: server returned error: HTTP/1.0 400 Bad Request" + then exit 0 + else exit 1 + fi + securityContext: + allowPrivilegeEscalation: false + capabilities: + drop: + - ALL + runAsNonRoot: true + seccompProfile: + type: RuntimeDefault + restartPolicy: Never + nodeSelector: + kubernetes.io/os: linux + securityContext: + fsGroup: 65532 + runAsGroup: 65532 + runAsNonRoot: true + runAsUser: 65532 +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/tests/test-service-connection.yaml +apiVersion: v1 +kind: Pod +metadata: + name: "example-opentelemetry-operator-webhook" + namespace: default + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: controller-manager + annotations: + "helm.sh/hook": test +spec: + containers: + - name: wget + image: "busybox:latest" + env: + - name: WEBHOOK_SERVICE_CLUSTERIP + value: "example-opentelemetry-operator-webhook" + - name: WEBHOOK_SERVICE_PORT + value: "443" + command: + - sh + - -c + # The following shell script tests if the webhook service is up. If the service is up, when we try + # to wget its exposed port, we will get an HTTP error 400. + - | + wget_output=$(wget -q "$WEBHOOK_SERVICE_CLUSTERIP:$WEBHOOK_SERVICE_PORT") + if wget_output=="wget: server returned error: HTTP/1.0 400 Bad Request" + then exit 0 + else exit 1 + fi + securityContext: + allowPrivilegeEscalation: false + capabilities: + drop: + - ALL + runAsNonRoot: true + seccompProfile: + type: RuntimeDefault + restartPolicy: Never + nodeSelector: + kubernetes.io/os: linux + securityContext: + fsGroup: 65532 + runAsGroup: 65532 + runAsNonRoot: true + runAsUser: 65532 + diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/clusterrole.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/clusterrole.yaml new file mode 100644 index 0000000000..9d2d1e8211 --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/clusterrole.yaml @@ -0,0 +1,69 @@ +--- +# Source: opentelemetry-kube-stack/templates/clusterrole.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + name: example-collector +rules: +- apiGroups: [""] + resources: + - namespaces + - nodes + - nodes/proxy + - nodes/metrics + - nodes/stats + - services + - endpoints + - pods + - events + - secrets + - persistentvolumeclaims + - persistentvolumes + verbs: ["get", "list", "watch"] +- apiGroups: ["monitoring.coreos.com"] + resources: + - servicemonitors + - podmonitors + - scrapeconfigs + - probes + verbs: ["get", "list", "watch"] +- apiGroups: + - extensions + resources: + - ingresses + verbs: ["get", "list", "watch"] +- apiGroups: + - apps + resources: + - daemonsets + - deployments + - replicasets + - statefulsets + verbs: ["get", "list", "watch"] +- apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: ["get", "list", "watch"] +- apiGroups: ["discovery.k8s.io"] + resources: + - endpointslices + verbs: ["get", "list", "watch"] +- nonResourceURLs: ["/metrics", "/metrics/cadvisor"] + verbs: ["get"] +--- +# Source: opentelemetry-kube-stack/templates/clusterrole.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + name: example-daemon +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: example-collector +subjects: +- kind: ServiceAccount + # quirk of the Operator + name: "example-daemon-collector" + namespace: default + diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/collector.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/collector.yaml new file mode 100644 index 0000000000..0a31142426 --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/collector.yaml @@ -0,0 +1,134 @@ +--- +# Source: opentelemetry-kube-stack/templates/collector.yaml +apiVersion: opentelemetry.io/v1beta1 +kind: OpenTelemetryCollector +metadata: + name: example-daemon + namespace: default + labels: + helm.sh/chart: opentelemetry-kube-stack-0.16.0 + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + release: "example" +spec: + managementState: managed + mode: daemonset + config: + exporters: + debug: {} + extensions: + k8s_observer: + auth_type: serviceAccount + node: ${env:K8S_NODE_NAME} + processors: + batch: + send_batch_max_size: 1500 + send_batch_size: 1000 + timeout: 1s + resource/hostname: + attributes: + - action: insert + from_attribute: k8s.node.name + key: host.name + resourcedetection/env: + detectors: + - env + - k8snode + override: false + timeout: 2s + receivers: + otlp: + protocols: + grpc: + endpoint: 0.0.0.0:4317 + http: + endpoint: 0.0.0.0:4318 + receiver_creator/logs: + discovery: + default_annotations: + io.opentelemetry.discovery.logs/enabled: "true" + enabled: true + watch_observers: + - k8s_observer + receiver_creator/metrics: + discovery: + enabled: true + watch_observers: + - k8s_observer + service: + extensions: + - k8s_observer + pipelines: + logs: + exporters: + - debug + processors: + - resourcedetection/env + - resource/hostname + - batch + receivers: + - otlp + - receiver_creator/logs + metrics: + exporters: + - debug + processors: + - resourcedetection/env + - resource/hostname + - batch + receivers: + - otlp + - receiver_creator/metrics + traces: + exporters: + - debug + processors: + - resourcedetection/env + - resource/hostname + - batch + receivers: + - otlp + imagePullPolicy: IfNotPresent + upgradeStrategy: automatic + terminationGracePeriodSeconds: 30 + resources: + limits: + cpu: 200m + memory: 500Mi + requests: + cpu: 100m + memory: 250Mi + securityContext: + {} + env: + - name: K8S_NODE_NAME + valueFrom: + fieldRef: + fieldPath: spec.nodeName + - name: OTEL_K8S_NODE_NAME + valueFrom: + fieldRef: + fieldPath: spec.nodeName + - name: OTEL_K8S_NODE_IP + valueFrom: + fieldRef: + fieldPath: status.hostIP + - name: OTEL_K8S_NAMESPACE + valueFrom: + fieldRef: + apiVersion: v1 + fieldPath: metadata.namespace + - name: OTEL_K8S_POD_NAME + valueFrom: + fieldRef: + apiVersion: v1 + fieldPath: metadata.name + - name: OTEL_K8S_POD_IP + valueFrom: + fieldRef: + apiVersion: v1 + fieldPath: status.podIP + - name: OTEL_RESOURCE_ATTRIBUTES + value: "k8s.pod.name=$(OTEL_K8S_POD_NAME),k8s.namespace.name=$(OTEL_K8S_NAMESPACE),k8s.node.name=$(OTEL_K8S_NODE_NAME),host.name=$(OTEL_K8S_NODE_NAME),k8s.node.ip=$(OTEL_K8S_NODE_IP),k8s.pod.ip=$(OTEL_K8S_POD_IP),k8s.cluster.name=unknown_k8s_cluster" + + diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/hooks.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/hooks.yaml new file mode 100644 index 0000000000..df09c1e80b --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/hooks.yaml @@ -0,0 +1,65 @@ +--- +# Source: opentelemetry-kube-stack/templates/hooks.yaml +apiVersion: v1 +kind: ServiceAccount +metadata: + name: delete-resources-sa + annotations: + "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded +--- +# Source: opentelemetry-kube-stack/templates/hooks.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + name: delete-resources-role + annotations: + "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded +rules: + - apiGroups: + - opentelemetry.io + resources: + - instrumentations + - opampbridges + - opentelemetrycollectors + verbs: + - get + - list + - delete +--- +# Source: opentelemetry-kube-stack/templates/hooks.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + name: delete-resources-rolebinding + annotations: + "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: delete-resources-role +subjects: + - kind: ServiceAccount + name: delete-resources-sa +--- +# Source: opentelemetry-kube-stack/templates/hooks.yaml +apiVersion: batch/v1 +kind: Job +metadata: + name: opentelemetry-kube-stack-pre-delete-job + annotations: + "helm.sh/hook": pre-delete + "helm.sh/hook-delete-policy": hook-succeeded,hook-failed +spec: + template: + spec: + restartPolicy: Never + serviceAccountName: delete-resources-sa + containers: + - name: delete-resources + image: "rancher/kubectl:v1.34.1" + args: + - "delete" + - "instrumentations,opampbridges,opentelemetrycollectors" + - "-l" + - "helm.sh/chart=opentelemetry-kube-stack-0.16.0" + diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml new file mode 100644 index 0000000000..17585fa86a --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml @@ -0,0 +1,193 @@ +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/admission-webhooks/operator-webhook-with-cert-manager.yaml +apiVersion: admissionregistration.k8s.io/v1 +kind: MutatingWebhookConfiguration +metadata: + annotations: + cert-manager.io/inject-ca-from: default/example-opentelemetry-operator-serving-cert + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: webhook + name: example-opentelemetry-operator-mutation +webhooks: + - admissionReviewVersions: + - v1 + clientConfig: + service: + name: example-opentelemetry-operator-webhook + namespace: default + path: /mutate-opentelemetry-io-v1alpha1-instrumentation + port: 443 + failurePolicy: Ignore + name: minstrumentation.kb.io + rules: + - apiGroups: + - opentelemetry.io + apiVersions: + - v1alpha1 + operations: + - CREATE + - UPDATE + resources: + - instrumentations + scope: Namespaced + sideEffects: None + timeoutSeconds: 10 + - admissionReviewVersions: + - v1 + clientConfig: + service: + name: example-opentelemetry-operator-webhook + namespace: default + path: /mutate-opentelemetry-io-v1beta1-opentelemetrycollector + port: 443 + failurePolicy: Ignore + name: mopentelemetrycollectorbeta.kb.io + rules: + - apiGroups: + - opentelemetry.io + apiVersions: + - v1beta1 + operations: + - CREATE + - UPDATE + resources: + - opentelemetrycollectors + scope: Namespaced + sideEffects: None + timeoutSeconds: 10 + - admissionReviewVersions: + - v1 + clientConfig: + service: + name: example-opentelemetry-operator-webhook + namespace: default + path: /mutate-v1-pod + port: 443 + failurePolicy: Ignore + name: mpod.kb.io + rules: + - apiGroups: + - "" + apiVersions: + - v1 + operations: + - CREATE + resources: + - pods + scope: Namespaced + sideEffects: None + timeoutSeconds: 10 +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/admission-webhooks/operator-webhook-with-cert-manager.yaml +apiVersion: admissionregistration.k8s.io/v1 +kind: ValidatingWebhookConfiguration +metadata: + annotations: + cert-manager.io/inject-ca-from: default/example-opentelemetry-operator-serving-cert + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: webhook + name: example-opentelemetry-operator-validation +webhooks: + - admissionReviewVersions: + - v1 + clientConfig: + service: + name: example-opentelemetry-operator-webhook + namespace: default + path: /validate-opentelemetry-io-v1alpha1-instrumentation + port: 443 + failurePolicy: Ignore + name: vinstrumentationcreateupdate.kb.io + rules: + - apiGroups: + - opentelemetry.io + apiVersions: + - v1alpha1 + operations: + - CREATE + - UPDATE + resources: + - instrumentations + scope: Namespaced + sideEffects: None + timeoutSeconds: 10 + - admissionReviewVersions: + - v1 + clientConfig: + service: + name: example-opentelemetry-operator-webhook + namespace: default + path: /validate-opentelemetry-io-v1alpha1-instrumentation + port: 443 + failurePolicy: Ignore + name: vinstrumentationdelete.kb.io + rules: + - apiGroups: + - opentelemetry.io + apiVersions: + - v1alpha1 + operations: + - DELETE + resources: + - instrumentations + scope: Namespaced + sideEffects: None + timeoutSeconds: 10 + - admissionReviewVersions: + - v1 + clientConfig: + service: + name: example-opentelemetry-operator-webhook + namespace: default + path: /validate-opentelemetry-io-v1beta1-opentelemetrycollector + port: 443 + failurePolicy: Ignore + name: vopentelemetrycollectorcreateupdatebeta.kb.io + rules: + - apiGroups: + - opentelemetry.io + apiVersions: + - v1beta1 + operations: + - CREATE + - UPDATE + resources: + - opentelemetrycollectors + scope: Namespaced + sideEffects: None + timeoutSeconds: 10 + - admissionReviewVersions: + - v1 + clientConfig: + service: + name: example-opentelemetry-operator-webhook + namespace: default + path: /validate-opentelemetry-io-v1beta1-opentelemetrycollector + port: 443 + failurePolicy: Ignore + name: vopentelemetrycollectordeletebeta.kb.io + rules: + - apiGroups: + - opentelemetry.io + apiVersions: + - v1beta1 + operations: + - DELETE + resources: + - opentelemetrycollectors + scope: Namespaced + sideEffects: None + timeoutSeconds: 10 + diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/admission-webhooks/operator-webhook.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/admission-webhooks/operator-webhook.yaml new file mode 100644 index 0000000000..5b9ff5511d --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/admission-webhooks/operator-webhook.yaml @@ -0,0 +1,3 @@ +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/admission-webhooks/operator-webhook.yaml +--- diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/certmanager.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/certmanager.yaml new file mode 100644 index 0000000000..e8615238d0 --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/certmanager.yaml @@ -0,0 +1,44 @@ +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/certmanager.yaml +apiVersion: cert-manager.io/v1 +kind: Certificate +metadata: + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: webhook + name: example-opentelemetry-operator-serving-cert + namespace: default +spec: + dnsNames: + - example-opentelemetry-operator-webhook.default.svc + - example-opentelemetry-operator-webhook.default.svc.cluster.local + issuerRef: + kind: Issuer + name: example-opentelemetry-operator-selfsigned-issuer + secretName: example-opentelemetry-operator-controller-manager-service-cert + subject: + organizationalUnits: + - example-opentelemetry-operator +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/certmanager.yaml +apiVersion: cert-manager.io/v1 +kind: Issuer +metadata: + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: webhook + name: example-opentelemetry-operator-selfsigned-issuer + namespace: default +spec: + selfSigned: {} + diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/clusterrole.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/clusterrole.yaml new file mode 100644 index 0000000000..2037050533 --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/clusterrole.yaml @@ -0,0 +1,410 @@ +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/clusterrole.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: controller-manager + name: example-opentelemetry-operator-manager +rules: + - apiGroups: + - "" + resources: + - configmaps + - persistentvolumeclaims + - persistentvolumes + - pods + - serviceaccounts + - services + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - "" + resources: + - events + verbs: + - create + - get + - list + - patch + - watch + - apiGroups: + - "" + resources: + - namespaces + verbs: + - list + - watch + - apiGroups: + - "" + resources: + - namespaces/status + verbs: + - get + - list + - watch + - apiGroups: + - "" + resources: + - nodes/spec + verbs: + - get + - list + - watch + - apiGroups: + - "" + resources: + - pods/status + verbs: + - get + - list + - watch + - apiGroups: + - "" + resources: + - replicationcontrollers + verbs: + - get + - list + - watch + - apiGroups: + - "" + resources: + - replicationcontrollers/status + verbs: + - get + - list + - watch + - apiGroups: + - "" + resources: + - resourcequotas + verbs: + - get + - list + - watch + - apiGroups: + - apps + resources: + - daemonsets + - deployments + - statefulsets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - apps + - extensions + resources: + - replicasets + verbs: + - get + - list + - watch + - apiGroups: + - extensions + resources: + - daemonsets + verbs: + - get + - list + - watch + - apiGroups: + - extensions + resources: + - deployments + verbs: + - get + - list + - watch + - apiGroups: + - autoscaling + resources: + - horizontalpodautoscalers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - batch + resources: + - jobs + verbs: + - get + - list + - watch + - apiGroups: + - batch + resources: + - cronjobs + verbs: + - get + - list + - watch + - apiGroups: + - "" + resources: + - nodes/proxy + verbs: + - get + - apiGroups: + - "" + resources: + - nodes/stats + verbs: + - get + - apiGroups: + - config.openshift.io + resources: + - infrastructures + - infrastructures/status + verbs: + - get + - list + - watch + - apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - get + - list + - update + - apiGroups: + - discovery.k8s.io + resources: + - endpointslices + verbs: + - get + - list + - apiGroups: + - events.k8s.io + resources: + - events + verbs: + - create + - list + - patch + - watch + - apiGroups: + - gateway.networking.k8s.io + resources: + - httproutes + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - monitoring.coreos.com + resources: + - podmonitors + - servicemonitors + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - networking.k8s.io + resources: + - ingresses + - networkpolicies + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - opentelemetry.io + resources: + - instrumentations + verbs: + - get + - list + - patch + - update + - watch + - apiGroups: + - opentelemetry.io + resources: + - opampbridges + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - opentelemetry.io + resources: + - opampbridges/finalizers + verbs: + - update + - apiGroups: + - opentelemetry.io + resources: + - opampbridges/status + verbs: + - get + - patch + - update + - apiGroups: + - opentelemetry.io + resources: + - opentelemetrycollectors + verbs: + - get + - list + - patch + - update + - watch + - apiGroups: + - opentelemetry.io + resources: + - opentelemetrycollectors/finalizers + verbs: + - get + - patch + - update + - apiGroups: + - opentelemetry.io + resources: + - opentelemetrycollectors/status + verbs: + - get + - patch + - update + - apiGroups: + - policy + resources: + - poddisruptionbudgets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - route.openshift.io + resources: + - routes + - routes/custom-host + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - opentelemetry.io + resources: + - targetallocators + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - opentelemetry.io + resources: + - targetallocators/status + verbs: + - get + - patch + - update + - apiGroups: + - opentelemetry.io + resources: + - targetallocators/finalizers + verbs: + - get + - patch + - update + - apiGroups: + - cert-manager.io + resources: + - issuers + - certificaterequests + - certificates + verbs: + - create + - get + - list + - watch + - update + - patch + - delete + - apiGroups: + - authentication.k8s.io + resources: + - tokenreviews + verbs: + - create + - apiGroups: + - authorization.k8s.io + resources: + - subjectaccessreviews + verbs: + - create +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/clusterrole.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: controller-manager + name: example-opentelemetry-operator-metrics +rules: + - nonResourceURLs: + - /metrics + verbs: + - get + + diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/clusterrolebinding.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/clusterrolebinding.yaml new file mode 100644 index 0000000000..4acb7d53f5 --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/clusterrolebinding.yaml @@ -0,0 +1,24 @@ +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/clusterrolebinding.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: controller-manager + name: example-opentelemetry-operator-manager +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: example-opentelemetry-operator-manager +subjects: + - kind: ServiceAccount + name: opentelemetry-operator + namespace: default + + diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/deployment.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/deployment.yaml new file mode 100644 index 0000000000..c775cd1cf3 --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/deployment.yaml @@ -0,0 +1,105 @@ +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/deployment.yaml +apiVersion: apps/v1 +kind: Deployment +metadata: + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: controller-manager + name: example-opentelemetry-operator + namespace: default +spec: + replicas: 1 + revisionHistoryLimit: 10 + selector: + matchLabels: + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/component: controller-manager + template: + metadata: + annotations: + kubectl.kubernetes.io/default-container: manager + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: controller-manager + spec: + automountServiceAccountToken: true + hostNetwork: false + containers: + - args: + - --metrics-addr=0.0.0.0:8443 + - --metrics-secure=true + - --enable-leader-election + - --health-probe-addr=:8081 + - --webhook-port=9443 + - --collector-image=otel/opentelemetry-collector-k8s:0.151.0 + command: + - /manager + env: + - name: SERVICE_ACCOUNT_NAME + valueFrom: + fieldRef: + fieldPath: spec.serviceAccountName + - name: ENABLE_WEBHOOKS + value: "true" + image: "ghcr.io/open-telemetry/opentelemetry-operator/opentelemetry-operator:0.151.0" + name: manager + imagePullPolicy: IfNotPresent + ports: + - containerPort: 8443 + name: metrics + protocol: TCP + - containerPort: 9443 + name: webhook-server + protocol: TCP + livenessProbe: + httpGet: + path: /healthz + port: 8081 + initialDelaySeconds: 15 + periodSeconds: 20 + readinessProbe: + httpGet: + path: /readyz + port: 8081 + initialDelaySeconds: 5 + periodSeconds: 10 + resources: + {} + volumeMounts: + - mountPath: /tmp/k8s-webhook-server/serving-certs + name: cert + readOnly: true + securityContext: + allowPrivilegeEscalation: false + capabilities: + drop: + - ALL + runAsNonRoot: true + seccompProfile: + type: RuntimeDefault + nodeSelector: + kubernetes.io/os: linux + serviceAccountName: opentelemetry-operator + terminationGracePeriodSeconds: 10 + volumes: + - name: cert + secret: + defaultMode: 420 + secretName: example-opentelemetry-operator-controller-manager-service-cert + securityContext: + fsGroup: 65532 + runAsGroup: 65532 + runAsNonRoot: true + runAsUser: 65532 + diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/role.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/role.yaml new file mode 100644 index 0000000000..b5339517a2 --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/role.yaml @@ -0,0 +1,200 @@ +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/role.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: controller-manager + name: example-opentelemetry-operator-leader-election + namespace: default +rules: + - apiGroups: + - "" + resources: + - configmaps + - pods + - serviceaccounts + - services + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - "" + resources: + - events + verbs: + - create + - patch + - apiGroups: + - "" + resources: + - namespaces + - secrets + verbs: + - get + - list + - watch + - apiGroups: + - apps + resources: + - daemonsets + - deployments + - statefulsets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - apps + resources: + - replicasets + verbs: + - get + - list + - watch + - apiGroups: + - autoscaling + resources: + - horizontalpodautoscalers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - batch + resources: + - jobs + verbs: + - get + - list + - watch + - apiGroups: + - config.openshift.io + resources: + - infrastructures + - infrastructures/status + verbs: + - get + - list + - watch + - apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - get + - list + - update + - apiGroups: + - monitoring.coreos.com + resources: + - podmonitors + - servicemonitors + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - opentelemetry.io + resources: + - instrumentations + - opentelemetrycollectors + verbs: + - get + - list + - patch + - update + - watch + - apiGroups: + - opentelemetry.io + resources: + - opampbridges + - targetallocators + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - opentelemetry.io + resources: + - opampbridges/finalizers + verbs: + - update + - apiGroups: + - opentelemetry.io + resources: + - opampbridges/status + - opentelemetrycollectors/finalizers + - opentelemetrycollectors/status + - targetallocators/status + - targetallocators/finalizers + verbs: + - get + - patch + - update + - apiGroups: + - policy + resources: + - poddisruptionbudgets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - route.openshift.io + resources: + - routes + - routes/custom-host + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/rolebinding.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/rolebinding.yaml new file mode 100644 index 0000000000..ae376e80c9 --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/rolebinding.yaml @@ -0,0 +1,24 @@ +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/rolebinding.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: controller-manager + name: example-opentelemetry-operator-leader-election + namespace: default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: example-opentelemetry-operator-leader-election +subjects: + - kind: ServiceAccount + name: opentelemetry-operator + namespace: default + diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/service.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/service.yaml new file mode 100644 index 0000000000..0a3006d80f --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/service.yaml @@ -0,0 +1,48 @@ +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/service.yaml +apiVersion: v1 +kind: Service +metadata: + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: controller-manager + name: example-opentelemetry-operator + namespace: default +spec: + ports: + - name: metrics + port: 8443 + protocol: TCP + targetPort: metrics + selector: + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/component: controller-manager +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/service.yaml +apiVersion: v1 +kind: Service +metadata: + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: controller-manager + name: example-opentelemetry-operator-webhook + namespace: default +spec: + ports: + - port: 443 + protocol: TCP + targetPort: webhook-server + selector: + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/component: controller-manager + diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/serviceaccount.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/serviceaccount.yaml new file mode 100644 index 0000000000..c6ba25dbac --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/serviceaccount.yaml @@ -0,0 +1,17 @@ +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/serviceaccount.yaml +apiVersion: v1 +kind: ServiceAccount +automountServiceAccountToken: true +metadata: + name: opentelemetry-operator + namespace: default + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: controller-manager + diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml new file mode 100644 index 0000000000..9039160e03 --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml @@ -0,0 +1,54 @@ +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/tests/test-certmanager-connection.yaml +apiVersion: v1 +kind: Pod +metadata: + name: "example-opentelemetry-operator-cert-manager" + namespace: default + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: webhook + annotations: + "helm.sh/hook": test +spec: + containers: + - name: wget + image: "busybox:latest" + env: + - name: CERT_MANAGER_CLUSTERIP + value: "cert-manager-webhook" + - name: CERT_MANAGER_PORT + value: "443" + command: + - sh + - -c + # The following shell script tests if the cert-manager service is up. If the service is up, when we try + # to wget its exposed port, we will get an HTTP error 400. + - | + wget_output=$(wget -q "$CERT_MANAGER_CLUSTERIP:$CERT_MANAGER_PORT") + if wget_output=="wget: server returned error: HTTP/1.0 400 Bad Request" + then exit 0 + else exit 1 + fi + securityContext: + allowPrivilegeEscalation: false + capabilities: + drop: + - ALL + runAsNonRoot: true + seccompProfile: + type: RuntimeDefault + restartPolicy: Never + nodeSelector: + kubernetes.io/os: linux + securityContext: + fsGroup: 65532 + runAsGroup: 65532 + runAsNonRoot: true + runAsUser: 65532 + diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/tests/test-service-connection.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/tests/test-service-connection.yaml new file mode 100644 index 0000000000..88e0e0bc24 --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/tests/test-service-connection.yaml @@ -0,0 +1,107 @@ +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/tests/test-service-connection.yaml +apiVersion: v1 +kind: Pod +metadata: + name: "example-opentelemetry-operator-metrics" + namespace: default + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: controller-manager + annotations: + "helm.sh/hook": test +spec: + containers: + - name: wget + image: "busybox:latest" + env: + - name: MANAGER_METRICS_SERVICE_CLUSTERIP + value: "example-opentelemetry-operator" + - name: MANAGER_METRICS_SERVICE_PORT + value: "8443" + command: + - sh + - -c + # The following shell script tests if the controller-manager-metrics-service is up. + # If the service is up, when we try to wget its exposed port, we will get an HTTP error 400. + - | + wget_output=$(wget -q "$MANAGER_METRICS_SERVICE_CLUSTERIP:$MANAGER_METRICS_SERVICE_PORT") + if wget_output=="wget: server returned error: HTTP/1.0 400 Bad Request" + then exit 0 + else exit 1 + fi + securityContext: + allowPrivilegeEscalation: false + capabilities: + drop: + - ALL + runAsNonRoot: true + seccompProfile: + type: RuntimeDefault + restartPolicy: Never + nodeSelector: + kubernetes.io/os: linux + securityContext: + fsGroup: 65532 + runAsGroup: 65532 + runAsNonRoot: true + runAsUser: 65532 +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/tests/test-service-connection.yaml +apiVersion: v1 +kind: Pod +metadata: + name: "example-opentelemetry-operator-webhook" + namespace: default + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: controller-manager + annotations: + "helm.sh/hook": test +spec: + containers: + - name: wget + image: "busybox:latest" + env: + - name: WEBHOOK_SERVICE_CLUSTERIP + value: "example-opentelemetry-operator-webhook" + - name: WEBHOOK_SERVICE_PORT + value: "443" + command: + - sh + - -c + # The following shell script tests if the webhook service is up. If the service is up, when we try + # to wget its exposed port, we will get an HTTP error 400. + - | + wget_output=$(wget -q "$WEBHOOK_SERVICE_CLUSTERIP:$WEBHOOK_SERVICE_PORT") + if wget_output=="wget: server returned error: HTTP/1.0 400 Bad Request" + then exit 0 + else exit 1 + fi + securityContext: + allowPrivilegeEscalation: false + capabilities: + drop: + - ALL + runAsNonRoot: true + seccompProfile: + type: RuntimeDefault + restartPolicy: Never + nodeSelector: + kubernetes.io/os: linux + securityContext: + fsGroup: 65532 + runAsGroup: 65532 + runAsNonRoot: true + runAsUser: 65532 + diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/clusterrole.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/clusterrole.yaml new file mode 100644 index 0000000000..9d2d1e8211 --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/clusterrole.yaml @@ -0,0 +1,69 @@ +--- +# Source: opentelemetry-kube-stack/templates/clusterrole.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + name: example-collector +rules: +- apiGroups: [""] + resources: + - namespaces + - nodes + - nodes/proxy + - nodes/metrics + - nodes/stats + - services + - endpoints + - pods + - events + - secrets + - persistentvolumeclaims + - persistentvolumes + verbs: ["get", "list", "watch"] +- apiGroups: ["monitoring.coreos.com"] + resources: + - servicemonitors + - podmonitors + - scrapeconfigs + - probes + verbs: ["get", "list", "watch"] +- apiGroups: + - extensions + resources: + - ingresses + verbs: ["get", "list", "watch"] +- apiGroups: + - apps + resources: + - daemonsets + - deployments + - replicasets + - statefulsets + verbs: ["get", "list", "watch"] +- apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: ["get", "list", "watch"] +- apiGroups: ["discovery.k8s.io"] + resources: + - endpointslices + verbs: ["get", "list", "watch"] +- nonResourceURLs: ["/metrics", "/metrics/cadvisor"] + verbs: ["get"] +--- +# Source: opentelemetry-kube-stack/templates/clusterrole.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + name: example-daemon +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: example-collector +subjects: +- kind: ServiceAccount + # quirk of the Operator + name: "example-daemon-collector" + namespace: default + diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/collector.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/collector.yaml new file mode 100644 index 0000000000..aac16b8728 --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/collector.yaml @@ -0,0 +1,238 @@ +--- +# Source: opentelemetry-kube-stack/templates/collector.yaml +apiVersion: opentelemetry.io/v1beta1 +kind: OpenTelemetryCollector +metadata: + name: example-daemon + namespace: default + labels: + helm.sh/chart: opentelemetry-kube-stack-0.16.0 + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + release: "example" +spec: + managementState: managed + mode: daemonset + config: + exporters: + debug: {} + processors: + batch: + send_batch_max_size: 1500 + send_batch_size: 1000 + timeout: 1s + resource/hostname: + attributes: + - action: insert + from_attribute: k8s.node.name + key: host.name + resourcedetection/env: + detectors: + - env + - k8snode + override: false + timeout: 2s + receivers: + otlp: + protocols: + grpc: + endpoint: 0.0.0.0:4317 + http: + endpoint: 0.0.0.0:4318 + prometheus/cadvisor: + config: + scrape_configs: + - authorization: + credentials_file: /var/run/secrets/kubernetes.io/serviceaccount/token + type: Bearer + job_name: kubelet + metric_relabel_configs: + - action: drop + regex: container_cpu_(load_average_10s|system_seconds_total|user_seconds_total) + source_labels: + - __name__ + - action: drop + regex: container_fs_(io_current|reads_merged_total|sector_reads_total|sector_writes_total|writes_merged_total) + source_labels: + - __name__ + - action: drop + regex: container_memory_(mapped_file|swap) + source_labels: + - __name__ + - action: drop + regex: container_(file_descriptors|tasks_state|threads_max) + source_labels: + - __name__ + - action: drop + regex: container_spec.* + source_labels: + - __name__ + - action: drop + regex: .+; + source_labels: + - id + - pod + metrics_path: /metrics/cadvisor + relabel_configs: + - replacement: ${env:OTEL_K8S_NODE_NAME} + target_label: node + scheme: https + scrape_interval: 30s + scrape_timeout: 10s + static_configs: + - targets: + - ${env:OTEL_K8S_NODE_IP}:10250 + tls_config: + ca_file: /var/run/secrets/kubernetes.io/serviceaccount/ca.crt + insecure_skip_verify: true + prometheus/node_exporter: + config: + scrape_configs: + - job_name: node-exporter + relabel_configs: + - replacement: ${env:OTEL_K8S_NODE_NAME} + target_label: node + scrape_interval: 30s + scrape_timeout: 10s + static_configs: + - targets: + - ${env:OTEL_K8S_NODE_IP}:9100 + prometheus/pod_annotations: + config: + scrape_configs: + - job_name: kubernetes-pods + kubernetes_sd_configs: + - role: pod + selectors: + - field: spec.nodeName=${env:OTEL_K8S_NODE_NAME} + label: app.kubernetes.io/component!=opentelemetry-collector + role: pod + relabel_configs: + - action: keep + regex: true + source_labels: + - __meta_kubernetes_pod_annotation_prometheus_io_scrape + - action: drop + regex: true + source_labels: + - __meta_kubernetes_pod_annotation_prometheus_io_scrape_slow + - action: replace + regex: (https?) + source_labels: + - __meta_kubernetes_pod_annotation_prometheus_io_scheme + target_label: __scheme__ + - action: replace + regex: (.+) + source_labels: + - __meta_kubernetes_pod_annotation_prometheus_io_path + target_label: __metrics_path__ + - action: replace + regex: ([^:]+)(?::\d+)?;(\d+) + replacement: $$1:$$2 + source_labels: + - __address__ + - __meta_kubernetes_pod_annotation_prometheus_io_port + target_label: __address__ + - action: labelmap + regex: __meta_kubernetes_pod_annotation_prometheus_io_param_(.+) + replacement: __param_$$1 + - action: labelmap + regex: __meta_kubernetes_pod_label_(.+) + - action: replace + source_labels: + - __meta_kubernetes_namespace + target_label: namespace + - action: replace + source_labels: + - __meta_kubernetes_pod_name + target_label: pod + - action: replace + source_labels: + - __meta_kubernetes_pod_node_name + target_label: node + - action: drop + regex: Pending|Succeeded|Failed|Completed + source_labels: + - __meta_kubernetes_pod_phase + - action: replace + source_labels: + - __meta_kubernetes_pod_label_app_kubernetes_io_name + target_label: job + scrape_interval: 30s + scrape_timeout: 10s + service: + pipelines: + logs: + exporters: + - debug + processors: + - resourcedetection/env + - resource/hostname + - batch + receivers: + - otlp + metrics: + exporters: + - debug + processors: + - resourcedetection/env + - resource/hostname + - batch + receivers: + - otlp + - prometheus/node_exporter + - prometheus/cadvisor + - prometheus/pod_annotations + traces: + exporters: + - debug + processors: + - resourcedetection/env + - resource/hostname + - batch + receivers: + - otlp + imagePullPolicy: IfNotPresent + upgradeStrategy: automatic + terminationGracePeriodSeconds: 30 + resources: + limits: + cpu: 200m + memory: 500Mi + requests: + cpu: 100m + memory: 250Mi + securityContext: + {} + env: + - name: K8S_NODE_NAME + valueFrom: + fieldRef: + fieldPath: spec.nodeName + - name: OTEL_K8S_NODE_NAME + valueFrom: + fieldRef: + fieldPath: spec.nodeName + - name: OTEL_K8S_NODE_IP + valueFrom: + fieldRef: + fieldPath: status.hostIP + - name: OTEL_K8S_NAMESPACE + valueFrom: + fieldRef: + apiVersion: v1 + fieldPath: metadata.namespace + - name: OTEL_K8S_POD_NAME + valueFrom: + fieldRef: + apiVersion: v1 + fieldPath: metadata.name + - name: OTEL_K8S_POD_IP + valueFrom: + fieldRef: + apiVersion: v1 + fieldPath: status.podIP + - name: OTEL_RESOURCE_ATTRIBUTES + value: "k8s.pod.name=$(OTEL_K8S_POD_NAME),k8s.namespace.name=$(OTEL_K8S_NAMESPACE),k8s.node.name=$(OTEL_K8S_NODE_NAME),host.name=$(OTEL_K8S_NODE_NAME),k8s.node.ip=$(OTEL_K8S_NODE_IP),k8s.pod.ip=$(OTEL_K8S_POD_IP),k8s.cluster.name=unknown_k8s_cluster" + + diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/hooks.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/hooks.yaml new file mode 100644 index 0000000000..df09c1e80b --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/hooks.yaml @@ -0,0 +1,65 @@ +--- +# Source: opentelemetry-kube-stack/templates/hooks.yaml +apiVersion: v1 +kind: ServiceAccount +metadata: + name: delete-resources-sa + annotations: + "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded +--- +# Source: opentelemetry-kube-stack/templates/hooks.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + name: delete-resources-role + annotations: + "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded +rules: + - apiGroups: + - opentelemetry.io + resources: + - instrumentations + - opampbridges + - opentelemetrycollectors + verbs: + - get + - list + - delete +--- +# Source: opentelemetry-kube-stack/templates/hooks.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + name: delete-resources-rolebinding + annotations: + "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: delete-resources-role +subjects: + - kind: ServiceAccount + name: delete-resources-sa +--- +# Source: opentelemetry-kube-stack/templates/hooks.yaml +apiVersion: batch/v1 +kind: Job +metadata: + name: opentelemetry-kube-stack-pre-delete-job + annotations: + "helm.sh/hook": pre-delete + "helm.sh/hook-delete-policy": hook-succeeded,hook-failed +spec: + template: + spec: + restartPolicy: Never + serviceAccountName: delete-resources-sa + containers: + - name: delete-resources + image: "rancher/kubectl:v1.34.1" + args: + - "delete" + - "instrumentations,opampbridges,opentelemetrycollectors" + - "-l" + - "helm.sh/chart=opentelemetry-kube-stack-0.16.0" + diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml new file mode 100644 index 0000000000..17585fa86a --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml @@ -0,0 +1,193 @@ +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/admission-webhooks/operator-webhook-with-cert-manager.yaml +apiVersion: admissionregistration.k8s.io/v1 +kind: MutatingWebhookConfiguration +metadata: + annotations: + cert-manager.io/inject-ca-from: default/example-opentelemetry-operator-serving-cert + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: webhook + name: example-opentelemetry-operator-mutation +webhooks: + - admissionReviewVersions: + - v1 + clientConfig: + service: + name: example-opentelemetry-operator-webhook + namespace: default + path: /mutate-opentelemetry-io-v1alpha1-instrumentation + port: 443 + failurePolicy: Ignore + name: minstrumentation.kb.io + rules: + - apiGroups: + - opentelemetry.io + apiVersions: + - v1alpha1 + operations: + - CREATE + - UPDATE + resources: + - instrumentations + scope: Namespaced + sideEffects: None + timeoutSeconds: 10 + - admissionReviewVersions: + - v1 + clientConfig: + service: + name: example-opentelemetry-operator-webhook + namespace: default + path: /mutate-opentelemetry-io-v1beta1-opentelemetrycollector + port: 443 + failurePolicy: Ignore + name: mopentelemetrycollectorbeta.kb.io + rules: + - apiGroups: + - opentelemetry.io + apiVersions: + - v1beta1 + operations: + - CREATE + - UPDATE + resources: + - opentelemetrycollectors + scope: Namespaced + sideEffects: None + timeoutSeconds: 10 + - admissionReviewVersions: + - v1 + clientConfig: + service: + name: example-opentelemetry-operator-webhook + namespace: default + path: /mutate-v1-pod + port: 443 + failurePolicy: Ignore + name: mpod.kb.io + rules: + - apiGroups: + - "" + apiVersions: + - v1 + operations: + - CREATE + resources: + - pods + scope: Namespaced + sideEffects: None + timeoutSeconds: 10 +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/admission-webhooks/operator-webhook-with-cert-manager.yaml +apiVersion: admissionregistration.k8s.io/v1 +kind: ValidatingWebhookConfiguration +metadata: + annotations: + cert-manager.io/inject-ca-from: default/example-opentelemetry-operator-serving-cert + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: webhook + name: example-opentelemetry-operator-validation +webhooks: + - admissionReviewVersions: + - v1 + clientConfig: + service: + name: example-opentelemetry-operator-webhook + namespace: default + path: /validate-opentelemetry-io-v1alpha1-instrumentation + port: 443 + failurePolicy: Ignore + name: vinstrumentationcreateupdate.kb.io + rules: + - apiGroups: + - opentelemetry.io + apiVersions: + - v1alpha1 + operations: + - CREATE + - UPDATE + resources: + - instrumentations + scope: Namespaced + sideEffects: None + timeoutSeconds: 10 + - admissionReviewVersions: + - v1 + clientConfig: + service: + name: example-opentelemetry-operator-webhook + namespace: default + path: /validate-opentelemetry-io-v1alpha1-instrumentation + port: 443 + failurePolicy: Ignore + name: vinstrumentationdelete.kb.io + rules: + - apiGroups: + - opentelemetry.io + apiVersions: + - v1alpha1 + operations: + - DELETE + resources: + - instrumentations + scope: Namespaced + sideEffects: None + timeoutSeconds: 10 + - admissionReviewVersions: + - v1 + clientConfig: + service: + name: example-opentelemetry-operator-webhook + namespace: default + path: /validate-opentelemetry-io-v1beta1-opentelemetrycollector + port: 443 + failurePolicy: Ignore + name: vopentelemetrycollectorcreateupdatebeta.kb.io + rules: + - apiGroups: + - opentelemetry.io + apiVersions: + - v1beta1 + operations: + - CREATE + - UPDATE + resources: + - opentelemetrycollectors + scope: Namespaced + sideEffects: None + timeoutSeconds: 10 + - admissionReviewVersions: + - v1 + clientConfig: + service: + name: example-opentelemetry-operator-webhook + namespace: default + path: /validate-opentelemetry-io-v1beta1-opentelemetrycollector + port: 443 + failurePolicy: Ignore + name: vopentelemetrycollectordeletebeta.kb.io + rules: + - apiGroups: + - opentelemetry.io + apiVersions: + - v1beta1 + operations: + - DELETE + resources: + - opentelemetrycollectors + scope: Namespaced + sideEffects: None + timeoutSeconds: 10 + diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/admission-webhooks/operator-webhook.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/admission-webhooks/operator-webhook.yaml new file mode 100644 index 0000000000..5b9ff5511d --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/admission-webhooks/operator-webhook.yaml @@ -0,0 +1,3 @@ +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/admission-webhooks/operator-webhook.yaml +--- diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/certmanager.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/certmanager.yaml new file mode 100644 index 0000000000..e8615238d0 --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/certmanager.yaml @@ -0,0 +1,44 @@ +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/certmanager.yaml +apiVersion: cert-manager.io/v1 +kind: Certificate +metadata: + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: webhook + name: example-opentelemetry-operator-serving-cert + namespace: default +spec: + dnsNames: + - example-opentelemetry-operator-webhook.default.svc + - example-opentelemetry-operator-webhook.default.svc.cluster.local + issuerRef: + kind: Issuer + name: example-opentelemetry-operator-selfsigned-issuer + secretName: example-opentelemetry-operator-controller-manager-service-cert + subject: + organizationalUnits: + - example-opentelemetry-operator +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/certmanager.yaml +apiVersion: cert-manager.io/v1 +kind: Issuer +metadata: + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: webhook + name: example-opentelemetry-operator-selfsigned-issuer + namespace: default +spec: + selfSigned: {} + diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/clusterrole.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/clusterrole.yaml new file mode 100644 index 0000000000..2037050533 --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/clusterrole.yaml @@ -0,0 +1,410 @@ +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/clusterrole.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: controller-manager + name: example-opentelemetry-operator-manager +rules: + - apiGroups: + - "" + resources: + - configmaps + - persistentvolumeclaims + - persistentvolumes + - pods + - serviceaccounts + - services + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - "" + resources: + - events + verbs: + - create + - get + - list + - patch + - watch + - apiGroups: + - "" + resources: + - namespaces + verbs: + - list + - watch + - apiGroups: + - "" + resources: + - namespaces/status + verbs: + - get + - list + - watch + - apiGroups: + - "" + resources: + - nodes/spec + verbs: + - get + - list + - watch + - apiGroups: + - "" + resources: + - pods/status + verbs: + - get + - list + - watch + - apiGroups: + - "" + resources: + - replicationcontrollers + verbs: + - get + - list + - watch + - apiGroups: + - "" + resources: + - replicationcontrollers/status + verbs: + - get + - list + - watch + - apiGroups: + - "" + resources: + - resourcequotas + verbs: + - get + - list + - watch + - apiGroups: + - apps + resources: + - daemonsets + - deployments + - statefulsets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - apps + - extensions + resources: + - replicasets + verbs: + - get + - list + - watch + - apiGroups: + - extensions + resources: + - daemonsets + verbs: + - get + - list + - watch + - apiGroups: + - extensions + resources: + - deployments + verbs: + - get + - list + - watch + - apiGroups: + - autoscaling + resources: + - horizontalpodautoscalers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - batch + resources: + - jobs + verbs: + - get + - list + - watch + - apiGroups: + - batch + resources: + - cronjobs + verbs: + - get + - list + - watch + - apiGroups: + - "" + resources: + - nodes/proxy + verbs: + - get + - apiGroups: + - "" + resources: + - nodes/stats + verbs: + - get + - apiGroups: + - config.openshift.io + resources: + - infrastructures + - infrastructures/status + verbs: + - get + - list + - watch + - apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - get + - list + - update + - apiGroups: + - discovery.k8s.io + resources: + - endpointslices + verbs: + - get + - list + - apiGroups: + - events.k8s.io + resources: + - events + verbs: + - create + - list + - patch + - watch + - apiGroups: + - gateway.networking.k8s.io + resources: + - httproutes + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - monitoring.coreos.com + resources: + - podmonitors + - servicemonitors + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - networking.k8s.io + resources: + - ingresses + - networkpolicies + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - opentelemetry.io + resources: + - instrumentations + verbs: + - get + - list + - patch + - update + - watch + - apiGroups: + - opentelemetry.io + resources: + - opampbridges + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - opentelemetry.io + resources: + - opampbridges/finalizers + verbs: + - update + - apiGroups: + - opentelemetry.io + resources: + - opampbridges/status + verbs: + - get + - patch + - update + - apiGroups: + - opentelemetry.io + resources: + - opentelemetrycollectors + verbs: + - get + - list + - patch + - update + - watch + - apiGroups: + - opentelemetry.io + resources: + - opentelemetrycollectors/finalizers + verbs: + - get + - patch + - update + - apiGroups: + - opentelemetry.io + resources: + - opentelemetrycollectors/status + verbs: + - get + - patch + - update + - apiGroups: + - policy + resources: + - poddisruptionbudgets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - route.openshift.io + resources: + - routes + - routes/custom-host + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - opentelemetry.io + resources: + - targetallocators + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - opentelemetry.io + resources: + - targetallocators/status + verbs: + - get + - patch + - update + - apiGroups: + - opentelemetry.io + resources: + - targetallocators/finalizers + verbs: + - get + - patch + - update + - apiGroups: + - cert-manager.io + resources: + - issuers + - certificaterequests + - certificates + verbs: + - create + - get + - list + - watch + - update + - patch + - delete + - apiGroups: + - authentication.k8s.io + resources: + - tokenreviews + verbs: + - create + - apiGroups: + - authorization.k8s.io + resources: + - subjectaccessreviews + verbs: + - create +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/clusterrole.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: controller-manager + name: example-opentelemetry-operator-metrics +rules: + - nonResourceURLs: + - /metrics + verbs: + - get + + diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/clusterrolebinding.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/clusterrolebinding.yaml new file mode 100644 index 0000000000..4acb7d53f5 --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/clusterrolebinding.yaml @@ -0,0 +1,24 @@ +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/clusterrolebinding.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: controller-manager + name: example-opentelemetry-operator-manager +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: example-opentelemetry-operator-manager +subjects: + - kind: ServiceAccount + name: opentelemetry-operator + namespace: default + + diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/deployment.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/deployment.yaml new file mode 100644 index 0000000000..c775cd1cf3 --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/deployment.yaml @@ -0,0 +1,105 @@ +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/deployment.yaml +apiVersion: apps/v1 +kind: Deployment +metadata: + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: controller-manager + name: example-opentelemetry-operator + namespace: default +spec: + replicas: 1 + revisionHistoryLimit: 10 + selector: + matchLabels: + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/component: controller-manager + template: + metadata: + annotations: + kubectl.kubernetes.io/default-container: manager + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: controller-manager + spec: + automountServiceAccountToken: true + hostNetwork: false + containers: + - args: + - --metrics-addr=0.0.0.0:8443 + - --metrics-secure=true + - --enable-leader-election + - --health-probe-addr=:8081 + - --webhook-port=9443 + - --collector-image=otel/opentelemetry-collector-k8s:0.151.0 + command: + - /manager + env: + - name: SERVICE_ACCOUNT_NAME + valueFrom: + fieldRef: + fieldPath: spec.serviceAccountName + - name: ENABLE_WEBHOOKS + value: "true" + image: "ghcr.io/open-telemetry/opentelemetry-operator/opentelemetry-operator:0.151.0" + name: manager + imagePullPolicy: IfNotPresent + ports: + - containerPort: 8443 + name: metrics + protocol: TCP + - containerPort: 9443 + name: webhook-server + protocol: TCP + livenessProbe: + httpGet: + path: /healthz + port: 8081 + initialDelaySeconds: 15 + periodSeconds: 20 + readinessProbe: + httpGet: + path: /readyz + port: 8081 + initialDelaySeconds: 5 + periodSeconds: 10 + resources: + {} + volumeMounts: + - mountPath: /tmp/k8s-webhook-server/serving-certs + name: cert + readOnly: true + securityContext: + allowPrivilegeEscalation: false + capabilities: + drop: + - ALL + runAsNonRoot: true + seccompProfile: + type: RuntimeDefault + nodeSelector: + kubernetes.io/os: linux + serviceAccountName: opentelemetry-operator + terminationGracePeriodSeconds: 10 + volumes: + - name: cert + secret: + defaultMode: 420 + secretName: example-opentelemetry-operator-controller-manager-service-cert + securityContext: + fsGroup: 65532 + runAsGroup: 65532 + runAsNonRoot: true + runAsUser: 65532 + diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/role.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/role.yaml new file mode 100644 index 0000000000..b5339517a2 --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/role.yaml @@ -0,0 +1,200 @@ +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/role.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: controller-manager + name: example-opentelemetry-operator-leader-election + namespace: default +rules: + - apiGroups: + - "" + resources: + - configmaps + - pods + - serviceaccounts + - services + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - "" + resources: + - events + verbs: + - create + - patch + - apiGroups: + - "" + resources: + - namespaces + - secrets + verbs: + - get + - list + - watch + - apiGroups: + - apps + resources: + - daemonsets + - deployments + - statefulsets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - apps + resources: + - replicasets + verbs: + - get + - list + - watch + - apiGroups: + - autoscaling + resources: + - horizontalpodautoscalers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - batch + resources: + - jobs + verbs: + - get + - list + - watch + - apiGroups: + - config.openshift.io + resources: + - infrastructures + - infrastructures/status + verbs: + - get + - list + - watch + - apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - get + - list + - update + - apiGroups: + - monitoring.coreos.com + resources: + - podmonitors + - servicemonitors + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - opentelemetry.io + resources: + - instrumentations + - opentelemetrycollectors + verbs: + - get + - list + - patch + - update + - watch + - apiGroups: + - opentelemetry.io + resources: + - opampbridges + - targetallocators + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - opentelemetry.io + resources: + - opampbridges/finalizers + verbs: + - update + - apiGroups: + - opentelemetry.io + resources: + - opampbridges/status + - opentelemetrycollectors/finalizers + - opentelemetrycollectors/status + - targetallocators/status + - targetallocators/finalizers + verbs: + - get + - patch + - update + - apiGroups: + - policy + resources: + - poddisruptionbudgets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - route.openshift.io + resources: + - routes + - routes/custom-host + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/rolebinding.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/rolebinding.yaml new file mode 100644 index 0000000000..ae376e80c9 --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/rolebinding.yaml @@ -0,0 +1,24 @@ +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/rolebinding.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: controller-manager + name: example-opentelemetry-operator-leader-election + namespace: default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: example-opentelemetry-operator-leader-election +subjects: + - kind: ServiceAccount + name: opentelemetry-operator + namespace: default + diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/service.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/service.yaml new file mode 100644 index 0000000000..0a3006d80f --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/service.yaml @@ -0,0 +1,48 @@ +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/service.yaml +apiVersion: v1 +kind: Service +metadata: + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: controller-manager + name: example-opentelemetry-operator + namespace: default +spec: + ports: + - name: metrics + port: 8443 + protocol: TCP + targetPort: metrics + selector: + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/component: controller-manager +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/service.yaml +apiVersion: v1 +kind: Service +metadata: + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: controller-manager + name: example-opentelemetry-operator-webhook + namespace: default +spec: + ports: + - port: 443 + protocol: TCP + targetPort: webhook-server + selector: + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/component: controller-manager + diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/serviceaccount.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/serviceaccount.yaml new file mode 100644 index 0000000000..c6ba25dbac --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/serviceaccount.yaml @@ -0,0 +1,17 @@ +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/serviceaccount.yaml +apiVersion: v1 +kind: ServiceAccount +automountServiceAccountToken: true +metadata: + name: opentelemetry-operator + namespace: default + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: controller-manager + diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml new file mode 100644 index 0000000000..9039160e03 --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml @@ -0,0 +1,54 @@ +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/tests/test-certmanager-connection.yaml +apiVersion: v1 +kind: Pod +metadata: + name: "example-opentelemetry-operator-cert-manager" + namespace: default + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: webhook + annotations: + "helm.sh/hook": test +spec: + containers: + - name: wget + image: "busybox:latest" + env: + - name: CERT_MANAGER_CLUSTERIP + value: "cert-manager-webhook" + - name: CERT_MANAGER_PORT + value: "443" + command: + - sh + - -c + # The following shell script tests if the cert-manager service is up. If the service is up, when we try + # to wget its exposed port, we will get an HTTP error 400. + - | + wget_output=$(wget -q "$CERT_MANAGER_CLUSTERIP:$CERT_MANAGER_PORT") + if wget_output=="wget: server returned error: HTTP/1.0 400 Bad Request" + then exit 0 + else exit 1 + fi + securityContext: + allowPrivilegeEscalation: false + capabilities: + drop: + - ALL + runAsNonRoot: true + seccompProfile: + type: RuntimeDefault + restartPolicy: Never + nodeSelector: + kubernetes.io/os: linux + securityContext: + fsGroup: 65532 + runAsGroup: 65532 + runAsNonRoot: true + runAsUser: 65532 + diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/tests/test-service-connection.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/tests/test-service-connection.yaml new file mode 100644 index 0000000000..88e0e0bc24 --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/tests/test-service-connection.yaml @@ -0,0 +1,107 @@ +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/tests/test-service-connection.yaml +apiVersion: v1 +kind: Pod +metadata: + name: "example-opentelemetry-operator-metrics" + namespace: default + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: controller-manager + annotations: + "helm.sh/hook": test +spec: + containers: + - name: wget + image: "busybox:latest" + env: + - name: MANAGER_METRICS_SERVICE_CLUSTERIP + value: "example-opentelemetry-operator" + - name: MANAGER_METRICS_SERVICE_PORT + value: "8443" + command: + - sh + - -c + # The following shell script tests if the controller-manager-metrics-service is up. + # If the service is up, when we try to wget its exposed port, we will get an HTTP error 400. + - | + wget_output=$(wget -q "$MANAGER_METRICS_SERVICE_CLUSTERIP:$MANAGER_METRICS_SERVICE_PORT") + if wget_output=="wget: server returned error: HTTP/1.0 400 Bad Request" + then exit 0 + else exit 1 + fi + securityContext: + allowPrivilegeEscalation: false + capabilities: + drop: + - ALL + runAsNonRoot: true + seccompProfile: + type: RuntimeDefault + restartPolicy: Never + nodeSelector: + kubernetes.io/os: linux + securityContext: + fsGroup: 65532 + runAsGroup: 65532 + runAsNonRoot: true + runAsUser: 65532 +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/tests/test-service-connection.yaml +apiVersion: v1 +kind: Pod +metadata: + name: "example-opentelemetry-operator-webhook" + namespace: default + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: controller-manager + annotations: + "helm.sh/hook": test +spec: + containers: + - name: wget + image: "busybox:latest" + env: + - name: WEBHOOK_SERVICE_CLUSTERIP + value: "example-opentelemetry-operator-webhook" + - name: WEBHOOK_SERVICE_PORT + value: "443" + command: + - sh + - -c + # The following shell script tests if the webhook service is up. If the service is up, when we try + # to wget its exposed port, we will get an HTTP error 400. + - | + wget_output=$(wget -q "$WEBHOOK_SERVICE_CLUSTERIP:$WEBHOOK_SERVICE_PORT") + if wget_output=="wget: server returned error: HTTP/1.0 400 Bad Request" + then exit 0 + else exit 1 + fi + securityContext: + allowPrivilegeEscalation: false + capabilities: + drop: + - ALL + runAsNonRoot: true + seccompProfile: + type: RuntimeDefault + restartPolicy: Never + nodeSelector: + kubernetes.io/os: linux + securityContext: + fsGroup: 65532 + runAsGroup: 65532 + runAsNonRoot: true + runAsUser: 65532 + diff --git a/charts/opentelemetry-kube-stack/examples/default/rendered/clusterrole.yaml b/charts/opentelemetry-kube-stack/examples/default/rendered/clusterrole.yaml new file mode 100644 index 0000000000..04fd4b7372 --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/default/rendered/clusterrole.yaml @@ -0,0 +1,141 @@ +--- +# Source: opentelemetry-kube-stack/templates/clusterrole.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + name: example-collector +rules: +- apiGroups: [""] + resources: + - namespaces + - nodes + - nodes/proxy + - nodes/metrics + - nodes/stats + - services + - endpoints + - pods + - events + - secrets + - persistentvolumeclaims + - persistentvolumes + verbs: ["get", "list", "watch"] +- apiGroups: ["monitoring.coreos.com"] + resources: + - servicemonitors + - podmonitors + - scrapeconfigs + - probes + verbs: ["get", "list", "watch"] +- apiGroups: + - extensions + resources: + - ingresses + verbs: ["get", "list", "watch"] +- apiGroups: + - apps + resources: + - daemonsets + - deployments + - replicasets + - statefulsets + verbs: ["get", "list", "watch"] +- apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: ["get", "list", "watch"] +- apiGroups: ["discovery.k8s.io"] + resources: + - endpointslices + verbs: ["get", "list", "watch"] +- nonResourceURLs: ["/metrics", "/metrics/cadvisor"] + verbs: ["get"] + +- verbs: + - get + - list + - watch + - create + - update + - patch + - delete + apiGroups: + - coordination.k8s.io + resources: + - leases +- apiGroups: + - "" + resources: + - events + - namespaces + - namespaces/status + - nodes + - nodes/spec + - pods + - pods/status + - replicationcontrollers + - replicationcontrollers/status + - resourcequotas + - services + verbs: + - get + - list + - watch +- apiGroups: + - apps + resources: + - daemonsets + - deployments + - replicasets + - statefulsets + verbs: + - get + - list + - watch +- apiGroups: + - extensions + resources: + - daemonsets + - deployments + - replicasets + verbs: + - get + - list + - watch +- apiGroups: + - batch + resources: + - jobs + - cronjobs + verbs: + - get + - list + - watch +- apiGroups: + - autoscaling + resources: + - horizontalpodautoscalers + verbs: + - get + - list + - watch +- apiGroups: ["events.k8s.io"] + resources: ["events"] + verbs: ["watch", "list"] +--- +# Source: opentelemetry-kube-stack/templates/clusterrole.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + name: example-daemon +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: example-collector +subjects: +- kind: ServiceAccount + # quirk of the Operator + name: "example-daemon-collector" + namespace: default + diff --git a/charts/opentelemetry-kube-stack/examples/default/rendered/collector.yaml b/charts/opentelemetry-kube-stack/examples/default/rendered/collector.yaml new file mode 100644 index 0000000000..87cf348759 --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/default/rendered/collector.yaml @@ -0,0 +1,515 @@ +--- +# Source: opentelemetry-kube-stack/templates/collector.yaml +apiVersion: opentelemetry.io/v1beta1 +kind: OpenTelemetryCollector +metadata: + name: example-daemon + namespace: default + labels: + helm.sh/chart: opentelemetry-kube-stack-0.16.0 + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + release: "example" +spec: + managementState: managed + mode: daemonset + config: + exporters: + debug: {} + extensions: + k8s_leader_elector/k8s_cluster: + auth_type: serviceAccount + lease_name: k8s.cluster.receiver.opentelemetry.io + lease_namespace: default + k8s_leader_elector/k8s_objects: + auth_type: serviceAccount + lease_name: k8s.objects.receiver.opentelemetry.io + lease_namespace: default + processors: + batch: + send_batch_max_size: 1500 + send_batch_size: 1000 + timeout: 1s + k8sattributes: + extract: + labels: + - from: pod + key: app.kubernetes.io/instance + tag_name: k8s.app.instance + - from: pod + key: app.kubernetes.io/component + tag_name: k8s.app.component + metadata: + - k8s.namespace.name + - k8s.pod.name + - k8s.pod.uid + - k8s.node.name + - k8s.pod.start_time + - k8s.deployment.name + - k8s.replicaset.name + - k8s.replicaset.uid + - k8s.daemonset.name + - k8s.daemonset.uid + - k8s.job.name + - k8s.job.uid + - k8s.container.name + - k8s.cronjob.name + - k8s.statefulset.name + - k8s.statefulset.uid + - container.image.tag + - container.image.name + - k8s.cluster.uid + - service.namespace + - service.name + - service.version + - service.instance.id + otel_annotations: true + filter: + node_from_env_var: OTEL_K8S_NODE_NAME + passthrough: false + pod_association: + - sources: + - from: resource_attribute + name: k8s.pod.uid + - sources: + - from: resource_attribute + name: k8s.pod.name + - from: resource_attribute + name: k8s.namespace.name + - from: resource_attribute + name: k8s.node.name + - sources: + - from: resource_attribute + name: k8s.pod.ip + - sources: + - from: resource_attribute + name: k8s.pod.name + - from: resource_attribute + name: k8s.namespace.name + - sources: + - from: connection + resource/hostname: + attributes: + - action: insert + from_attribute: k8s.node.name + key: host.name + resourcedetection/env: + detectors: + - env + - k8snode + override: false + timeout: 2s + receivers: + filelog: + exclude: [] + include: + - /var/log/pods/*/*/*.log + include_file_name: false + include_file_path: true + operators: + - id: container-parser + max_log_size: 102400 + type: container + retry_on_failure: + enabled: true + start_at: end + hostmetrics: + collection_interval: 10s + root_path: /hostfs + scrapers: + cpu: + metrics: + system.cpu.logical.count: + enabled: true + system.cpu.utilization: + enabled: true + disk: {} + filesystem: + exclude_fs_types: + fs_types: + - autofs + - binfmt_misc + - bpf + - cgroup2 + - configfs + - debugfs + - devpts + - devtmpfs + - fusectl + - hugetlbfs + - iso9660 + - mqueue + - nsfs + - overlay + - proc + - procfs + - pstore + - rpc_pipefs + - securityfs + - selinuxfs + - squashfs + - sysfs + - tracefs + match_type: strict + exclude_mount_points: + match_type: regexp + mount_points: + - /dev/* + - /proc/* + - /sys/* + - /run/k3s/containerd/* + - /var/lib/docker/* + - /var/lib/kubelet/* + - /snap/* + metrics: + system.filesystem.utilization: + enabled: true + load: {} + memory: + metrics: + system.memory.limit: + enabled: true + system.memory.utilization: + enabled: true + network: {} + paging: + metrics: + system.paging.usage: + enabled: true + system: + metrics: + system.uptime: + enabled: true + k8s_cluster: + allocatable_types_to_report: + - cpu + - memory + - storage + auth_type: serviceAccount + collection_interval: 10s + k8s_leader_elector: k8s_leader_elector/k8s_cluster + node_conditions_to_report: + - Ready + - MemoryPressure + - DiskPressure + - NetworkUnavailable + k8sobjects: + k8s_leader_elector: k8s_leader_elector/k8s_objects + objects: + - exclude_watch_type: + - DELETED + group: events.k8s.io + mode: watch + name: events + kubeletstats: + auth_type: serviceAccount + collection_interval: 15s + endpoint: https://${env:OTEL_K8S_NODE_IP}:10250 + extra_metadata_labels: + - container.id + - k8s.volume.type + insecure_skip_verify: true + k8s_api_config: + auth_type: serviceAccount + metric_groups: + - node + - pod + - volume + - container + metrics: + container.cpu.usage: + enabled: true + k8s.node.cpu.usage: + enabled: true + k8s.node.uptime: + enabled: true + k8s.pod.cpu.usage: + enabled: true + k8s.pod.uptime: + enabled: true + otlp: + protocols: + grpc: + endpoint: 0.0.0.0:4317 + http: + endpoint: 0.0.0.0:4318 + prometheus: + config: + scrape_configs: + - job_name: kubernetes-pods + kubernetes_sd_configs: + - role: pod + selectors: + - field: spec.nodeName=${env:OTEL_K8S_NODE_NAME} + role: pod + relabel_configs: + - action: keep + regex: true + source_labels: + - __meta_kubernetes_pod_annotation_prometheus_io_scrape + - action: drop + regex: true + source_labels: + - __meta_kubernetes_pod_annotation_prometheus_io_scrape_slow + - action: replace + regex: (https?) + source_labels: + - __meta_kubernetes_pod_annotation_prometheus_io_scheme + target_label: __scheme__ + - action: replace + regex: (.+) + source_labels: + - __meta_kubernetes_pod_annotation_prometheus_io_path + target_label: __metrics_path__ + - action: replace + regex: ([^:]+)(?::\d+)?;(\d+) + replacement: $$1:$$2 + source_labels: + - __address__ + - __meta_kubernetes_pod_annotation_prometheus_io_port + target_label: __address__ + - action: labelmap + regex: __meta_kubernetes_pod_annotation_prometheus_io_param_(.+) + replacement: __param_$$1 + - action: labelmap + regex: __meta_kubernetes_pod_label_(.+) + - action: replace + source_labels: + - __meta_kubernetes_namespace + target_label: namespace + - action: replace + source_labels: + - __meta_kubernetes_pod_name + target_label: pod + - action: drop + regex: Pending|Succeeded|Failed|Completed + source_labels: + - __meta_kubernetes_pod_phase + - action: replace + source_labels: + - __meta_kubernetes_pod_label_app_kubernetes_io_name + target_label: job + scrape_interval: 30s + - job_name: node-exporter + relabel_configs: + - action: labelmap + regex: __meta_kubernetes_node_label_(.+) + - action: replace + regex: (.*) + replacement: $$1 + separator: ; + source_labels: + - job + target_label: __tmp_prometheus_job_name + scrape_interval: 30s + static_configs: + - targets: + - ${env:OTEL_K8S_NODE_IP}:9100 + - authorization: + credentials_file: /var/run/secrets/kubernetes.io/serviceaccount/token + type: Bearer + follow_redirects: true + honor_labels: true + honor_timestamps: true + job_name: kubelet + kubernetes_sd_configs: + - follow_redirects: true + role: node + selectors: + - field: metadata.name=${env:OTEL_K8S_NODE_NAME} + role: node + metric_relabel_configs: + - action: drop + regex: container_cpu_(load_average_10s|system_seconds_total|user_seconds_total) + replacement: $$1 + separator: ; + source_labels: + - __name__ + - action: drop + regex: container_fs_(io_current|reads_merged_total|sector_reads_total|sector_writes_total|writes_merged_total) + replacement: $$1 + separator: ; + source_labels: + - __name__ + - action: drop + regex: container_memory_(mapped_file|swap) + replacement: $$1 + separator: ; + source_labels: + - __name__ + - action: drop + regex: container_(file_descriptors|tasks_state|threads_max) + replacement: $$1 + separator: ; + source_labels: + - __name__ + - action: drop + regex: container_spec.* + replacement: $$1 + separator: ; + source_labels: + - __name__ + - action: drop + regex: .+; + replacement: $$1 + separator: ; + source_labels: + - id + - pod + metrics_path: /metrics/cadvisor + relabel_configs: + - action: replace + regex: (.*) + replacement: $$1 + separator: ; + source_labels: + - job + target_label: __tmp_prometheus_job_name + - action: replace + replacement: kubelet + target_label: job + - action: replace + regex: (.*) + replacement: $$1 + separator: ; + source_labels: + - __meta_kubernetes_node_name + target_label: node + - action: replace + regex: (.*) + replacement: https-metrics + separator: ; + target_label: endpoint + - action: replace + regex: (.*) + replacement: $$1 + separator: ; + source_labels: + - __metrics_path__ + target_label: metrics_path + - action: hashmod + modulus: 1 + regex: (.*) + replacement: $$1 + separator: ; + source_labels: + - __address__ + target_label: __tmp_hash + - action: keep + regex: $(SHARD) + replacement: $$1 + separator: ; + source_labels: + - __tmp_hash + scheme: https + scrape_interval: 15s + scrape_timeout: 10s + tls_config: + ca_file: /var/run/secrets/kubernetes.io/serviceaccount/ca.crt + insecure_skip_verify: true + service: + extensions: + - k8s_leader_elector/k8s_objects + - k8s_leader_elector/k8s_cluster + pipelines: + logs: + exporters: + - debug + processors: + - k8sattributes + - resourcedetection/env + - resource/hostname + - batch + receivers: + - otlp + - filelog + - k8sobjects + metrics: + exporters: + - debug + processors: + - k8sattributes + - resourcedetection/env + - resource/hostname + - batch + receivers: + - prometheus + - otlp + - hostmetrics + - kubeletstats + - k8s_cluster + traces: + exporters: + - debug + processors: + - k8sattributes + - resourcedetection/env + - resource/hostname + - batch + receivers: + - otlp + imagePullPolicy: IfNotPresent + upgradeStrategy: automatic + terminationGracePeriodSeconds: 30 + resources: + limits: + cpu: 200m + memory: 500Mi + requests: + cpu: 100m + memory: 250Mi + securityContext: + {} + volumeMounts: + - name: varlogpods + mountPath: /var/log/pods + readOnly: true + - name: varlibdockercontainers + mountPath: /var/lib/docker/containers + readOnly: true + - name: hostfs + mountPath: /hostfs + readOnly: true + mountPropagation: HostToContainer + env: + - name: K8S_NODE_NAME + valueFrom: + fieldRef: + fieldPath: spec.nodeName + - name: OTEL_K8S_NODE_NAME + valueFrom: + fieldRef: + fieldPath: spec.nodeName + - name: OTEL_K8S_NODE_IP + valueFrom: + fieldRef: + fieldPath: status.hostIP + - name: OTEL_K8S_NAMESPACE + valueFrom: + fieldRef: + apiVersion: v1 + fieldPath: metadata.namespace + - name: OTEL_K8S_POD_NAME + valueFrom: + fieldRef: + apiVersion: v1 + fieldPath: metadata.name + - name: OTEL_K8S_POD_IP + valueFrom: + fieldRef: + apiVersion: v1 + fieldPath: status.podIP + - name: OTEL_RESOURCE_ATTRIBUTES + value: "k8s.pod.name=$(OTEL_K8S_POD_NAME),k8s.namespace.name=$(OTEL_K8S_NAMESPACE),k8s.node.name=$(OTEL_K8S_NODE_NAME),host.name=$(OTEL_K8S_NODE_NAME),k8s.node.ip=$(OTEL_K8S_NODE_IP),k8s.pod.ip=$(OTEL_K8S_POD_IP),k8s.cluster.name=unknown_k8s_cluster" + + volumes: + - name: varlogpods + hostPath: + path: /var/log/pods + - name: varlibdockercontainers + hostPath: + path: /var/lib/docker/containers + - name: hostfs + hostPath: + path: / + diff --git a/charts/opentelemetry-kube-stack/examples/default/rendered/hooks.yaml b/charts/opentelemetry-kube-stack/examples/default/rendered/hooks.yaml new file mode 100644 index 0000000000..df09c1e80b --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/default/rendered/hooks.yaml @@ -0,0 +1,65 @@ +--- +# Source: opentelemetry-kube-stack/templates/hooks.yaml +apiVersion: v1 +kind: ServiceAccount +metadata: + name: delete-resources-sa + annotations: + "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded +--- +# Source: opentelemetry-kube-stack/templates/hooks.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + name: delete-resources-role + annotations: + "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded +rules: + - apiGroups: + - opentelemetry.io + resources: + - instrumentations + - opampbridges + - opentelemetrycollectors + verbs: + - get + - list + - delete +--- +# Source: opentelemetry-kube-stack/templates/hooks.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + name: delete-resources-rolebinding + annotations: + "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: delete-resources-role +subjects: + - kind: ServiceAccount + name: delete-resources-sa +--- +# Source: opentelemetry-kube-stack/templates/hooks.yaml +apiVersion: batch/v1 +kind: Job +metadata: + name: opentelemetry-kube-stack-pre-delete-job + annotations: + "helm.sh/hook": pre-delete + "helm.sh/hook-delete-policy": hook-succeeded,hook-failed +spec: + template: + spec: + restartPolicy: Never + serviceAccountName: delete-resources-sa + containers: + - name: delete-resources + image: "rancher/kubectl:v1.34.1" + args: + - "delete" + - "instrumentations,opampbridges,opentelemetrycollectors" + - "-l" + - "helm.sh/chart=opentelemetry-kube-stack-0.16.0" + diff --git a/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml b/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml new file mode 100644 index 0000000000..17585fa86a --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml @@ -0,0 +1,193 @@ +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/admission-webhooks/operator-webhook-with-cert-manager.yaml +apiVersion: admissionregistration.k8s.io/v1 +kind: MutatingWebhookConfiguration +metadata: + annotations: + cert-manager.io/inject-ca-from: default/example-opentelemetry-operator-serving-cert + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: webhook + name: example-opentelemetry-operator-mutation +webhooks: + - admissionReviewVersions: + - v1 + clientConfig: + service: + name: example-opentelemetry-operator-webhook + namespace: default + path: /mutate-opentelemetry-io-v1alpha1-instrumentation + port: 443 + failurePolicy: Ignore + name: minstrumentation.kb.io + rules: + - apiGroups: + - opentelemetry.io + apiVersions: + - v1alpha1 + operations: + - CREATE + - UPDATE + resources: + - instrumentations + scope: Namespaced + sideEffects: None + timeoutSeconds: 10 + - admissionReviewVersions: + - v1 + clientConfig: + service: + name: example-opentelemetry-operator-webhook + namespace: default + path: /mutate-opentelemetry-io-v1beta1-opentelemetrycollector + port: 443 + failurePolicy: Ignore + name: mopentelemetrycollectorbeta.kb.io + rules: + - apiGroups: + - opentelemetry.io + apiVersions: + - v1beta1 + operations: + - CREATE + - UPDATE + resources: + - opentelemetrycollectors + scope: Namespaced + sideEffects: None + timeoutSeconds: 10 + - admissionReviewVersions: + - v1 + clientConfig: + service: + name: example-opentelemetry-operator-webhook + namespace: default + path: /mutate-v1-pod + port: 443 + failurePolicy: Ignore + name: mpod.kb.io + rules: + - apiGroups: + - "" + apiVersions: + - v1 + operations: + - CREATE + resources: + - pods + scope: Namespaced + sideEffects: None + timeoutSeconds: 10 +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/admission-webhooks/operator-webhook-with-cert-manager.yaml +apiVersion: admissionregistration.k8s.io/v1 +kind: ValidatingWebhookConfiguration +metadata: + annotations: + cert-manager.io/inject-ca-from: default/example-opentelemetry-operator-serving-cert + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: webhook + name: example-opentelemetry-operator-validation +webhooks: + - admissionReviewVersions: + - v1 + clientConfig: + service: + name: example-opentelemetry-operator-webhook + namespace: default + path: /validate-opentelemetry-io-v1alpha1-instrumentation + port: 443 + failurePolicy: Ignore + name: vinstrumentationcreateupdate.kb.io + rules: + - apiGroups: + - opentelemetry.io + apiVersions: + - v1alpha1 + operations: + - CREATE + - UPDATE + resources: + - instrumentations + scope: Namespaced + sideEffects: None + timeoutSeconds: 10 + - admissionReviewVersions: + - v1 + clientConfig: + service: + name: example-opentelemetry-operator-webhook + namespace: default + path: /validate-opentelemetry-io-v1alpha1-instrumentation + port: 443 + failurePolicy: Ignore + name: vinstrumentationdelete.kb.io + rules: + - apiGroups: + - opentelemetry.io + apiVersions: + - v1alpha1 + operations: + - DELETE + resources: + - instrumentations + scope: Namespaced + sideEffects: None + timeoutSeconds: 10 + - admissionReviewVersions: + - v1 + clientConfig: + service: + name: example-opentelemetry-operator-webhook + namespace: default + path: /validate-opentelemetry-io-v1beta1-opentelemetrycollector + port: 443 + failurePolicy: Ignore + name: vopentelemetrycollectorcreateupdatebeta.kb.io + rules: + - apiGroups: + - opentelemetry.io + apiVersions: + - v1beta1 + operations: + - CREATE + - UPDATE + resources: + - opentelemetrycollectors + scope: Namespaced + sideEffects: None + timeoutSeconds: 10 + - admissionReviewVersions: + - v1 + clientConfig: + service: + name: example-opentelemetry-operator-webhook + namespace: default + path: /validate-opentelemetry-io-v1beta1-opentelemetrycollector + port: 443 + failurePolicy: Ignore + name: vopentelemetrycollectordeletebeta.kb.io + rules: + - apiGroups: + - opentelemetry.io + apiVersions: + - v1beta1 + operations: + - DELETE + resources: + - opentelemetrycollectors + scope: Namespaced + sideEffects: None + timeoutSeconds: 10 + diff --git a/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/admission-webhooks/operator-webhook.yaml b/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/admission-webhooks/operator-webhook.yaml new file mode 100644 index 0000000000..5b9ff5511d --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/admission-webhooks/operator-webhook.yaml @@ -0,0 +1,3 @@ +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/admission-webhooks/operator-webhook.yaml +--- diff --git a/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/certmanager.yaml b/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/certmanager.yaml new file mode 100644 index 0000000000..e8615238d0 --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/certmanager.yaml @@ -0,0 +1,44 @@ +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/certmanager.yaml +apiVersion: cert-manager.io/v1 +kind: Certificate +metadata: + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: webhook + name: example-opentelemetry-operator-serving-cert + namespace: default +spec: + dnsNames: + - example-opentelemetry-operator-webhook.default.svc + - example-opentelemetry-operator-webhook.default.svc.cluster.local + issuerRef: + kind: Issuer + name: example-opentelemetry-operator-selfsigned-issuer + secretName: example-opentelemetry-operator-controller-manager-service-cert + subject: + organizationalUnits: + - example-opentelemetry-operator +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/certmanager.yaml +apiVersion: cert-manager.io/v1 +kind: Issuer +metadata: + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: webhook + name: example-opentelemetry-operator-selfsigned-issuer + namespace: default +spec: + selfSigned: {} + diff --git a/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/clusterrole.yaml b/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/clusterrole.yaml new file mode 100644 index 0000000000..2037050533 --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/clusterrole.yaml @@ -0,0 +1,410 @@ +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/clusterrole.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: controller-manager + name: example-opentelemetry-operator-manager +rules: + - apiGroups: + - "" + resources: + - configmaps + - persistentvolumeclaims + - persistentvolumes + - pods + - serviceaccounts + - services + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - "" + resources: + - events + verbs: + - create + - get + - list + - patch + - watch + - apiGroups: + - "" + resources: + - namespaces + verbs: + - list + - watch + - apiGroups: + - "" + resources: + - namespaces/status + verbs: + - get + - list + - watch + - apiGroups: + - "" + resources: + - nodes/spec + verbs: + - get + - list + - watch + - apiGroups: + - "" + resources: + - pods/status + verbs: + - get + - list + - watch + - apiGroups: + - "" + resources: + - replicationcontrollers + verbs: + - get + - list + - watch + - apiGroups: + - "" + resources: + - replicationcontrollers/status + verbs: + - get + - list + - watch + - apiGroups: + - "" + resources: + - resourcequotas + verbs: + - get + - list + - watch + - apiGroups: + - apps + resources: + - daemonsets + - deployments + - statefulsets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - apps + - extensions + resources: + - replicasets + verbs: + - get + - list + - watch + - apiGroups: + - extensions + resources: + - daemonsets + verbs: + - get + - list + - watch + - apiGroups: + - extensions + resources: + - deployments + verbs: + - get + - list + - watch + - apiGroups: + - autoscaling + resources: + - horizontalpodautoscalers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - batch + resources: + - jobs + verbs: + - get + - list + - watch + - apiGroups: + - batch + resources: + - cronjobs + verbs: + - get + - list + - watch + - apiGroups: + - "" + resources: + - nodes/proxy + verbs: + - get + - apiGroups: + - "" + resources: + - nodes/stats + verbs: + - get + - apiGroups: + - config.openshift.io + resources: + - infrastructures + - infrastructures/status + verbs: + - get + - list + - watch + - apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - get + - list + - update + - apiGroups: + - discovery.k8s.io + resources: + - endpointslices + verbs: + - get + - list + - apiGroups: + - events.k8s.io + resources: + - events + verbs: + - create + - list + - patch + - watch + - apiGroups: + - gateway.networking.k8s.io + resources: + - httproutes + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - monitoring.coreos.com + resources: + - podmonitors + - servicemonitors + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - networking.k8s.io + resources: + - ingresses + - networkpolicies + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - opentelemetry.io + resources: + - instrumentations + verbs: + - get + - list + - patch + - update + - watch + - apiGroups: + - opentelemetry.io + resources: + - opampbridges + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - opentelemetry.io + resources: + - opampbridges/finalizers + verbs: + - update + - apiGroups: + - opentelemetry.io + resources: + - opampbridges/status + verbs: + - get + - patch + - update + - apiGroups: + - opentelemetry.io + resources: + - opentelemetrycollectors + verbs: + - get + - list + - patch + - update + - watch + - apiGroups: + - opentelemetry.io + resources: + - opentelemetrycollectors/finalizers + verbs: + - get + - patch + - update + - apiGroups: + - opentelemetry.io + resources: + - opentelemetrycollectors/status + verbs: + - get + - patch + - update + - apiGroups: + - policy + resources: + - poddisruptionbudgets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - route.openshift.io + resources: + - routes + - routes/custom-host + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - opentelemetry.io + resources: + - targetallocators + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - opentelemetry.io + resources: + - targetallocators/status + verbs: + - get + - patch + - update + - apiGroups: + - opentelemetry.io + resources: + - targetallocators/finalizers + verbs: + - get + - patch + - update + - apiGroups: + - cert-manager.io + resources: + - issuers + - certificaterequests + - certificates + verbs: + - create + - get + - list + - watch + - update + - patch + - delete + - apiGroups: + - authentication.k8s.io + resources: + - tokenreviews + verbs: + - create + - apiGroups: + - authorization.k8s.io + resources: + - subjectaccessreviews + verbs: + - create +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/clusterrole.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: controller-manager + name: example-opentelemetry-operator-metrics +rules: + - nonResourceURLs: + - /metrics + verbs: + - get + + diff --git a/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/clusterrolebinding.yaml b/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/clusterrolebinding.yaml new file mode 100644 index 0000000000..4acb7d53f5 --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/clusterrolebinding.yaml @@ -0,0 +1,24 @@ +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/clusterrolebinding.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: controller-manager + name: example-opentelemetry-operator-manager +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: example-opentelemetry-operator-manager +subjects: + - kind: ServiceAccount + name: opentelemetry-operator + namespace: default + + diff --git a/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/deployment.yaml b/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/deployment.yaml new file mode 100644 index 0000000000..c775cd1cf3 --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/deployment.yaml @@ -0,0 +1,105 @@ +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/deployment.yaml +apiVersion: apps/v1 +kind: Deployment +metadata: + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: controller-manager + name: example-opentelemetry-operator + namespace: default +spec: + replicas: 1 + revisionHistoryLimit: 10 + selector: + matchLabels: + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/component: controller-manager + template: + metadata: + annotations: + kubectl.kubernetes.io/default-container: manager + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: controller-manager + spec: + automountServiceAccountToken: true + hostNetwork: false + containers: + - args: + - --metrics-addr=0.0.0.0:8443 + - --metrics-secure=true + - --enable-leader-election + - --health-probe-addr=:8081 + - --webhook-port=9443 + - --collector-image=otel/opentelemetry-collector-k8s:0.151.0 + command: + - /manager + env: + - name: SERVICE_ACCOUNT_NAME + valueFrom: + fieldRef: + fieldPath: spec.serviceAccountName + - name: ENABLE_WEBHOOKS + value: "true" + image: "ghcr.io/open-telemetry/opentelemetry-operator/opentelemetry-operator:0.151.0" + name: manager + imagePullPolicy: IfNotPresent + ports: + - containerPort: 8443 + name: metrics + protocol: TCP + - containerPort: 9443 + name: webhook-server + protocol: TCP + livenessProbe: + httpGet: + path: /healthz + port: 8081 + initialDelaySeconds: 15 + periodSeconds: 20 + readinessProbe: + httpGet: + path: /readyz + port: 8081 + initialDelaySeconds: 5 + periodSeconds: 10 + resources: + {} + volumeMounts: + - mountPath: /tmp/k8s-webhook-server/serving-certs + name: cert + readOnly: true + securityContext: + allowPrivilegeEscalation: false + capabilities: + drop: + - ALL + runAsNonRoot: true + seccompProfile: + type: RuntimeDefault + nodeSelector: + kubernetes.io/os: linux + serviceAccountName: opentelemetry-operator + terminationGracePeriodSeconds: 10 + volumes: + - name: cert + secret: + defaultMode: 420 + secretName: example-opentelemetry-operator-controller-manager-service-cert + securityContext: + fsGroup: 65532 + runAsGroup: 65532 + runAsNonRoot: true + runAsUser: 65532 + diff --git a/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/role.yaml b/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/role.yaml new file mode 100644 index 0000000000..b5339517a2 --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/role.yaml @@ -0,0 +1,200 @@ +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/role.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: controller-manager + name: example-opentelemetry-operator-leader-election + namespace: default +rules: + - apiGroups: + - "" + resources: + - configmaps + - pods + - serviceaccounts + - services + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - "" + resources: + - events + verbs: + - create + - patch + - apiGroups: + - "" + resources: + - namespaces + - secrets + verbs: + - get + - list + - watch + - apiGroups: + - apps + resources: + - daemonsets + - deployments + - statefulsets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - apps + resources: + - replicasets + verbs: + - get + - list + - watch + - apiGroups: + - autoscaling + resources: + - horizontalpodautoscalers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - batch + resources: + - jobs + verbs: + - get + - list + - watch + - apiGroups: + - config.openshift.io + resources: + - infrastructures + - infrastructures/status + verbs: + - get + - list + - watch + - apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - get + - list + - update + - apiGroups: + - monitoring.coreos.com + resources: + - podmonitors + - servicemonitors + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - opentelemetry.io + resources: + - instrumentations + - opentelemetrycollectors + verbs: + - get + - list + - patch + - update + - watch + - apiGroups: + - opentelemetry.io + resources: + - opampbridges + - targetallocators + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - opentelemetry.io + resources: + - opampbridges/finalizers + verbs: + - update + - apiGroups: + - opentelemetry.io + resources: + - opampbridges/status + - opentelemetrycollectors/finalizers + - opentelemetrycollectors/status + - targetallocators/status + - targetallocators/finalizers + verbs: + - get + - patch + - update + - apiGroups: + - policy + resources: + - poddisruptionbudgets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - route.openshift.io + resources: + - routes + - routes/custom-host + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + diff --git a/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/rolebinding.yaml b/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/rolebinding.yaml new file mode 100644 index 0000000000..ae376e80c9 --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/rolebinding.yaml @@ -0,0 +1,24 @@ +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/rolebinding.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: controller-manager + name: example-opentelemetry-operator-leader-election + namespace: default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: example-opentelemetry-operator-leader-election +subjects: + - kind: ServiceAccount + name: opentelemetry-operator + namespace: default + diff --git a/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/service.yaml b/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/service.yaml new file mode 100644 index 0000000000..0a3006d80f --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/service.yaml @@ -0,0 +1,48 @@ +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/service.yaml +apiVersion: v1 +kind: Service +metadata: + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: controller-manager + name: example-opentelemetry-operator + namespace: default +spec: + ports: + - name: metrics + port: 8443 + protocol: TCP + targetPort: metrics + selector: + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/component: controller-manager +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/service.yaml +apiVersion: v1 +kind: Service +metadata: + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: controller-manager + name: example-opentelemetry-operator-webhook + namespace: default +spec: + ports: + - port: 443 + protocol: TCP + targetPort: webhook-server + selector: + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/component: controller-manager + diff --git a/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/serviceaccount.yaml b/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/serviceaccount.yaml new file mode 100644 index 0000000000..c6ba25dbac --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/serviceaccount.yaml @@ -0,0 +1,17 @@ +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/serviceaccount.yaml +apiVersion: v1 +kind: ServiceAccount +automountServiceAccountToken: true +metadata: + name: opentelemetry-operator + namespace: default + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: controller-manager + diff --git a/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml b/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml new file mode 100644 index 0000000000..9039160e03 --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml @@ -0,0 +1,54 @@ +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/tests/test-certmanager-connection.yaml +apiVersion: v1 +kind: Pod +metadata: + name: "example-opentelemetry-operator-cert-manager" + namespace: default + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: webhook + annotations: + "helm.sh/hook": test +spec: + containers: + - name: wget + image: "busybox:latest" + env: + - name: CERT_MANAGER_CLUSTERIP + value: "cert-manager-webhook" + - name: CERT_MANAGER_PORT + value: "443" + command: + - sh + - -c + # The following shell script tests if the cert-manager service is up. If the service is up, when we try + # to wget its exposed port, we will get an HTTP error 400. + - | + wget_output=$(wget -q "$CERT_MANAGER_CLUSTERIP:$CERT_MANAGER_PORT") + if wget_output=="wget: server returned error: HTTP/1.0 400 Bad Request" + then exit 0 + else exit 1 + fi + securityContext: + allowPrivilegeEscalation: false + capabilities: + drop: + - ALL + runAsNonRoot: true + seccompProfile: + type: RuntimeDefault + restartPolicy: Never + nodeSelector: + kubernetes.io/os: linux + securityContext: + fsGroup: 65532 + runAsGroup: 65532 + runAsNonRoot: true + runAsUser: 65532 + diff --git a/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/tests/test-service-connection.yaml b/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/tests/test-service-connection.yaml new file mode 100644 index 0000000000..88e0e0bc24 --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/tests/test-service-connection.yaml @@ -0,0 +1,107 @@ +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/tests/test-service-connection.yaml +apiVersion: v1 +kind: Pod +metadata: + name: "example-opentelemetry-operator-metrics" + namespace: default + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: controller-manager + annotations: + "helm.sh/hook": test +spec: + containers: + - name: wget + image: "busybox:latest" + env: + - name: MANAGER_METRICS_SERVICE_CLUSTERIP + value: "example-opentelemetry-operator" + - name: MANAGER_METRICS_SERVICE_PORT + value: "8443" + command: + - sh + - -c + # The following shell script tests if the controller-manager-metrics-service is up. + # If the service is up, when we try to wget its exposed port, we will get an HTTP error 400. + - | + wget_output=$(wget -q "$MANAGER_METRICS_SERVICE_CLUSTERIP:$MANAGER_METRICS_SERVICE_PORT") + if wget_output=="wget: server returned error: HTTP/1.0 400 Bad Request" + then exit 0 + else exit 1 + fi + securityContext: + allowPrivilegeEscalation: false + capabilities: + drop: + - ALL + runAsNonRoot: true + seccompProfile: + type: RuntimeDefault + restartPolicy: Never + nodeSelector: + kubernetes.io/os: linux + securityContext: + fsGroup: 65532 + runAsGroup: 65532 + runAsNonRoot: true + runAsUser: 65532 +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/tests/test-service-connection.yaml +apiVersion: v1 +kind: Pod +metadata: + name: "example-opentelemetry-operator-webhook" + namespace: default + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: controller-manager + annotations: + "helm.sh/hook": test +spec: + containers: + - name: wget + image: "busybox:latest" + env: + - name: WEBHOOK_SERVICE_CLUSTERIP + value: "example-opentelemetry-operator-webhook" + - name: WEBHOOK_SERVICE_PORT + value: "443" + command: + - sh + - -c + # The following shell script tests if the webhook service is up. If the service is up, when we try + # to wget its exposed port, we will get an HTTP error 400. + - | + wget_output=$(wget -q "$WEBHOOK_SERVICE_CLUSTERIP:$WEBHOOK_SERVICE_PORT") + if wget_output=="wget: server returned error: HTTP/1.0 400 Bad Request" + then exit 0 + else exit 1 + fi + securityContext: + allowPrivilegeEscalation: false + capabilities: + drop: + - ALL + runAsNonRoot: true + seccompProfile: + type: RuntimeDefault + restartPolicy: Never + nodeSelector: + kubernetes.io/os: linux + securityContext: + fsGroup: 65532 + runAsGroup: 65532 + runAsNonRoot: true + runAsUser: 65532 + diff --git a/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/clusterrole.yaml b/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/clusterrole.yaml new file mode 100644 index 0000000000..5f316fe954 --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/clusterrole.yaml @@ -0,0 +1,141 @@ +--- +# Source: opentelemetry-kube-stack/templates/clusterrole.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + name: example-collector +rules: +- apiGroups: [""] + resources: + - namespaces + - nodes + - nodes/proxy + - nodes/metrics + - nodes/stats + - services + - endpoints + - pods + - events + - secrets + - persistentvolumeclaims + - persistentvolumes + verbs: ["get", "list", "watch"] +- apiGroups: ["monitoring.coreos.com"] + resources: + - servicemonitors + - podmonitors + - scrapeconfigs + - probes + verbs: ["get", "list", "watch"] +- apiGroups: + - extensions + resources: + - ingresses + verbs: ["get", "list", "watch"] +- apiGroups: + - apps + resources: + - daemonsets + - deployments + - replicasets + - statefulsets + verbs: ["get", "list", "watch"] +- apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: ["get", "list", "watch"] +- apiGroups: ["discovery.k8s.io"] + resources: + - endpointslices + verbs: ["get", "list", "watch"] +- nonResourceURLs: ["/metrics", "/metrics/cadvisor"] + verbs: ["get"] + +- verbs: + - get + - list + - watch + - create + - update + - patch + - delete + apiGroups: + - coordination.k8s.io + resources: + - leases +- apiGroups: + - "" + resources: + - events + - namespaces + - namespaces/status + - nodes + - nodes/spec + - pods + - pods/status + - replicationcontrollers + - replicationcontrollers/status + - resourcequotas + - services + verbs: + - get + - list + - watch +- apiGroups: + - apps + resources: + - daemonsets + - deployments + - replicasets + - statefulsets + verbs: + - get + - list + - watch +- apiGroups: + - extensions + resources: + - daemonsets + - deployments + - replicasets + verbs: + - get + - list + - watch +- apiGroups: + - batch + resources: + - jobs + - cronjobs + verbs: + - get + - list + - watch +- apiGroups: + - autoscaling + resources: + - horizontalpodautoscalers + verbs: + - get + - list + - watch +- apiGroups: ["events.k8s.io"] + resources: ["events"] + verbs: ["watch", "list"] +--- +# Source: opentelemetry-kube-stack/templates/clusterrole.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + name: agent +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: example-collector +subjects: +- kind: ServiceAccount + # quirk of the Operator + name: "agent-collector" + namespace: default + diff --git a/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/collector.yaml b/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/collector.yaml new file mode 100644 index 0000000000..c8ee284931 --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/collector.yaml @@ -0,0 +1,487 @@ +--- +# Source: opentelemetry-kube-stack/templates/collector.yaml +apiVersion: opentelemetry.io/v1beta1 +kind: OpenTelemetryCollector +metadata: + name: agent + namespace: default + labels: + helm.sh/chart: opentelemetry-kube-stack-0.16.0 + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + release: "example" +spec: + managementState: managed + mode: daemonset + config: + exporters: + otlp: + endpoint: gateway-collector.default.svc:4317 + sending_queue: + storage: file_storage/queues + tls: + insecure: true + extensions: + file_storage/queues: + create_directory: true + directory: /var/lib/otelcol/agent/queues + k8s_leader_elector/k8s_objects: + auth_type: serviceAccount + lease_name: k8s.objects.receiver.opentelemetry.io + lease_namespace: default + processors: + k8sattributes: + extract: + labels: + - from: pod + key: app.kubernetes.io/instance + tag_name: k8s.app.instance + - from: pod + key: app.kubernetes.io/component + tag_name: k8s.app.component + metadata: + - k8s.namespace.name + - k8s.pod.name + - k8s.pod.uid + - k8s.node.name + - k8s.pod.start_time + - k8s.deployment.name + - k8s.replicaset.name + - k8s.replicaset.uid + - k8s.daemonset.name + - k8s.daemonset.uid + - k8s.job.name + - k8s.job.uid + - k8s.container.name + - k8s.cronjob.name + - k8s.statefulset.name + - k8s.statefulset.uid + - container.image.tag + - container.image.name + - k8s.cluster.uid + - service.namespace + - service.name + - service.version + - service.instance.id + otel_annotations: true + filter: + node_from_env_var: OTEL_K8S_NODE_NAME + passthrough: false + pod_association: + - sources: + - from: resource_attribute + name: k8s.pod.uid + - sources: + - from: resource_attribute + name: k8s.pod.name + - from: resource_attribute + name: k8s.namespace.name + - from: resource_attribute + name: k8s.node.name + - sources: + - from: resource_attribute + name: k8s.pod.ip + - sources: + - from: resource_attribute + name: k8s.pod.name + - from: resource_attribute + name: k8s.namespace.name + - sources: + - from: connection + receivers: + filelog: + exclude: + - /var/log/pods/default_agent*_*/otc-container/*.log + include: + - /var/log/pods/*/*/*.log + include_file_name: false + include_file_path: true + operators: + - id: container-parser + max_log_size: 102400 + type: container + retry_on_failure: + enabled: true + start_at: end + k8sobjects: + k8s_leader_elector: k8s_leader_elector/k8s_objects + objects: + - exclude_watch_type: + - DELETED + group: events.k8s.io + mode: watch + name: events + otlp: + protocols: + grpc: + endpoint: ${env:OTEL_K8S_POD_IP}:4317 + service: + extensions: + - file_storage/queues + - k8s_leader_elector/k8s_objects + pipelines: + logs: + exporters: + - otlp + processors: + - k8sattributes + receivers: + - otlp + - filelog + - k8sobjects + metrics: + exporters: + - otlp + processors: + - k8sattributes + receivers: + - otlp + traces: + exporters: + - otlp + processors: + - k8sattributes + receivers: + - otlp + imagePullPolicy: IfNotPresent + upgradeStrategy: automatic + terminationGracePeriodSeconds: 30 + resources: + limits: + cpu: 200m + memory: 500Mi + requests: + cpu: 100m + memory: 250Mi + securityContext: + runAsGroup: 0 + runAsUser: 0 + affinity: + podAntiAffinity: + preferredDuringSchedulingIgnoredDuringExecution: + - podAffinityTerm: + labelSelector: + matchLabels: + app.kubernetes.io/component: opentelemetry-collector + app.kubernetes.io/instance: 'default.agent' + topologyKey: kubernetes.io/hostname + weight: 100 + volumeMounts: + - name: varlogpods + mountPath: /var/log/pods + readOnly: true + - name: varlibdockercontainers + mountPath: /var/lib/docker/containers + readOnly: true + - mountPath: /var/lib/otelcol/agent + name: varlibotelcol + env: + - name: K8S_NODE_NAME + valueFrom: + fieldRef: + fieldPath: spec.nodeName + - name: OTEL_K8S_NODE_NAME + valueFrom: + fieldRef: + fieldPath: spec.nodeName + - name: OTEL_K8S_NODE_IP + valueFrom: + fieldRef: + fieldPath: status.hostIP + - name: OTEL_K8S_NAMESPACE + valueFrom: + fieldRef: + apiVersion: v1 + fieldPath: metadata.namespace + - name: OTEL_K8S_POD_NAME + valueFrom: + fieldRef: + apiVersion: v1 + fieldPath: metadata.name + - name: OTEL_K8S_POD_IP + valueFrom: + fieldRef: + apiVersion: v1 + fieldPath: status.podIP + - name: OTEL_RESOURCE_ATTRIBUTES + value: "k8s.pod.name=$(OTEL_K8S_POD_NAME),k8s.namespace.name=$(OTEL_K8S_NAMESPACE),k8s.node.name=$(OTEL_K8S_NODE_NAME),host.name=$(OTEL_K8S_NODE_NAME),k8s.node.ip=$(OTEL_K8S_NODE_IP),k8s.pod.ip=$(OTEL_K8S_POD_IP),k8s.cluster.name=demo" + + tolerations: + - effect: NoExecute + operator: Exists + - effect: NoSchedule + operator: Exists + - effect: PreferNoSchedule + operator: Exists + volumes: + - name: varlogpods + hostPath: + path: /var/log/pods + - name: varlibdockercontainers + hostPath: + path: /var/lib/docker/containers + - hostPath: + path: /var/lib/otelcol/agent + type: DirectoryOrCreate + name: varlibotelcol +--- +# Source: opentelemetry-kube-stack/templates/collector.yaml +apiVersion: opentelemetry.io/v1beta1 +kind: OpenTelemetryCollector +metadata: + name: gateway + namespace: default + labels: + helm.sh/chart: opentelemetry-kube-stack-0.16.0 + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + release: "example" +spec: + managementState: managed + mode: deployment + config: + exporters: + otlp: + endpoint: ingest.example.com:4318 + sending_queue: + storage: file_storage/queues + tls: + insecure: true + extensions: + file_storage/queues: + create_directory: true + directory: /var/lib/otelcol/gateway/queues + processors: + resource/common: + attributes: + - action: insert + key: k8s.cluster.name + value: 'demo' + receivers: + otlp: + protocols: + grpc: + endpoint: ${env:OTEL_K8S_POD_IP}:4317 + service: + extensions: + - file_storage/queues + pipelines: + logs: + exporters: + - otlp + processors: + - resource/common + receivers: + - otlp + metrics: + exporters: + - otlp + processors: + - resource/common + receivers: + - otlp + traces: + exporters: + - otlp + processors: + - resource/common + receivers: + - otlp + replicas: + imagePullPolicy: IfNotPresent + upgradeStrategy: automatic + terminationGracePeriodSeconds: 30 + resources: + limits: + cpu: "1" + memory: 2Gi + requests: + cpu: 500m + memory: 1Gi + securityContext: + runAsGroup: 0 + runAsUser: 0 + affinity: + podAntiAffinity: + preferredDuringSchedulingIgnoredDuringExecution: + - podAffinityTerm: + labelSelector: + matchLabels: + app.kubernetes.io/component: opentelemetry-collector + app.kubernetes.io/instance: 'default.gateway' + topologyKey: kubernetes.io/hostname + weight: 100 + volumeMounts: + - mountPath: /var/lib/otelcol/gateway + name: varlibotelcol + env: + - name: K8S_NODE_NAME + valueFrom: + fieldRef: + fieldPath: spec.nodeName + - name: OTEL_K8S_NODE_NAME + valueFrom: + fieldRef: + fieldPath: spec.nodeName + - name: OTEL_K8S_NODE_IP + valueFrom: + fieldRef: + fieldPath: status.hostIP + - name: OTEL_K8S_NAMESPACE + valueFrom: + fieldRef: + apiVersion: v1 + fieldPath: metadata.namespace + - name: OTEL_K8S_POD_NAME + valueFrom: + fieldRef: + apiVersion: v1 + fieldPath: metadata.name + - name: OTEL_K8S_POD_IP + valueFrom: + fieldRef: + apiVersion: v1 + fieldPath: status.podIP + - name: OTEL_RESOURCE_ATTRIBUTES + value: "k8s.pod.name=$(OTEL_K8S_POD_NAME),k8s.namespace.name=$(OTEL_K8S_NAMESPACE),k8s.node.name=$(OTEL_K8S_NODE_NAME),host.name=$(OTEL_K8S_NODE_NAME),k8s.node.ip=$(OTEL_K8S_NODE_IP),k8s.pod.ip=$(OTEL_K8S_POD_IP),k8s.cluster.name=demo" + + tolerations: + - effect: NoExecute + operator: Exists + - effect: NoSchedule + operator: Exists + - effect: PreferNoSchedule + operator: Exists + volumes: + - hostPath: + path: /var/lib/otelcol/gateway + type: DirectoryOrCreate + name: varlibotelcol +--- +# Source: opentelemetry-kube-stack/templates/collector.yaml +apiVersion: opentelemetry.io/v1beta1 +kind: OpenTelemetryCollector +metadata: + name: ingress + namespace: default + labels: + helm.sh/chart: opentelemetry-kube-stack-0.16.0 + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + release: "example" +spec: + managementState: managed + mode: deployment + config: + exporters: + otlp: + endpoint: gateway-collector.default.svc:4317 + sending_queue: + storage: file_storage/queues + tls: + insecure: true + extensions: + file_storage/queues: + create_directory: true + directory: /var/lib/otelcol/ingress/queues + oidc: + audience: 12345678-1234-5678-1234-567812345678 + issuer_url: https://login.microsoftonline.com/87654321-8765-4321-8765-432187654321/v2.0 + receivers: + otlp: + protocols: + http: + auth: + authenticator: oidc + endpoint: ${env:OTEL_K8S_POD_IP}:4318 + service: + extensions: + - file_storage/queues + - oidc + pipelines: + logs: + exporters: + - otlp + receivers: + - otlp + metrics: + exporters: + - otlp + receivers: + - otlp + traces: + exporters: + - otlp + receivers: + - otlp + replicas: + imagePullPolicy: IfNotPresent + upgradeStrategy: automatic + terminationGracePeriodSeconds: 30 + resources: + limits: + cpu: 200m + memory: 500Mi + requests: + cpu: 100m + memory: 250Mi + securityContext: + runAsGroup: 0 + runAsUser: 0 + affinity: + podAntiAffinity: + preferredDuringSchedulingIgnoredDuringExecution: + - podAffinityTerm: + labelSelector: + matchLabels: + app.kubernetes.io/component: opentelemetry-collector + app.kubernetes.io/instance: 'default.ingress' + topologyKey: kubernetes.io/hostname + weight: 100 + volumeMounts: + - mountPath: /var/lib/otelcol/ingress + name: varlibotelcol + env: + - name: K8S_NODE_NAME + valueFrom: + fieldRef: + fieldPath: spec.nodeName + - name: OTEL_K8S_NODE_NAME + valueFrom: + fieldRef: + fieldPath: spec.nodeName + - name: OTEL_K8S_NODE_IP + valueFrom: + fieldRef: + fieldPath: status.hostIP + - name: OTEL_K8S_NAMESPACE + valueFrom: + fieldRef: + apiVersion: v1 + fieldPath: metadata.namespace + - name: OTEL_K8S_POD_NAME + valueFrom: + fieldRef: + apiVersion: v1 + fieldPath: metadata.name + - name: OTEL_K8S_POD_IP + valueFrom: + fieldRef: + apiVersion: v1 + fieldPath: status.podIP + - name: OTEL_RESOURCE_ATTRIBUTES + value: "k8s.pod.name=$(OTEL_K8S_POD_NAME),k8s.namespace.name=$(OTEL_K8S_NAMESPACE),k8s.node.name=$(OTEL_K8S_NODE_NAME),host.name=$(OTEL_K8S_NODE_NAME),k8s.node.ip=$(OTEL_K8S_NODE_IP),k8s.pod.ip=$(OTEL_K8S_POD_IP),k8s.cluster.name=demo" + + tolerations: + - effect: NoExecute + operator: Exists + - effect: NoSchedule + operator: Exists + - effect: PreferNoSchedule + operator: Exists + volumes: + - hostPath: + path: /var/lib/otelcol/ingress + type: DirectoryOrCreate + name: varlibotelcol + diff --git a/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/hooks.yaml b/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/hooks.yaml new file mode 100644 index 0000000000..df09c1e80b --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/hooks.yaml @@ -0,0 +1,65 @@ +--- +# Source: opentelemetry-kube-stack/templates/hooks.yaml +apiVersion: v1 +kind: ServiceAccount +metadata: + name: delete-resources-sa + annotations: + "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded +--- +# Source: opentelemetry-kube-stack/templates/hooks.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + name: delete-resources-role + annotations: + "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded +rules: + - apiGroups: + - opentelemetry.io + resources: + - instrumentations + - opampbridges + - opentelemetrycollectors + verbs: + - get + - list + - delete +--- +# Source: opentelemetry-kube-stack/templates/hooks.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + name: delete-resources-rolebinding + annotations: + "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: delete-resources-role +subjects: + - kind: ServiceAccount + name: delete-resources-sa +--- +# Source: opentelemetry-kube-stack/templates/hooks.yaml +apiVersion: batch/v1 +kind: Job +metadata: + name: opentelemetry-kube-stack-pre-delete-job + annotations: + "helm.sh/hook": pre-delete + "helm.sh/hook-delete-policy": hook-succeeded,hook-failed +spec: + template: + spec: + restartPolicy: Never + serviceAccountName: delete-resources-sa + containers: + - name: delete-resources + image: "rancher/kubectl:v1.34.1" + args: + - "delete" + - "instrumentations,opampbridges,opentelemetrycollectors" + - "-l" + - "helm.sh/chart=opentelemetry-kube-stack-0.16.0" + diff --git a/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml b/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml new file mode 100644 index 0000000000..17585fa86a --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml @@ -0,0 +1,193 @@ +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/admission-webhooks/operator-webhook-with-cert-manager.yaml +apiVersion: admissionregistration.k8s.io/v1 +kind: MutatingWebhookConfiguration +metadata: + annotations: + cert-manager.io/inject-ca-from: default/example-opentelemetry-operator-serving-cert + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: webhook + name: example-opentelemetry-operator-mutation +webhooks: + - admissionReviewVersions: + - v1 + clientConfig: + service: + name: example-opentelemetry-operator-webhook + namespace: default + path: /mutate-opentelemetry-io-v1alpha1-instrumentation + port: 443 + failurePolicy: Ignore + name: minstrumentation.kb.io + rules: + - apiGroups: + - opentelemetry.io + apiVersions: + - v1alpha1 + operations: + - CREATE + - UPDATE + resources: + - instrumentations + scope: Namespaced + sideEffects: None + timeoutSeconds: 10 + - admissionReviewVersions: + - v1 + clientConfig: + service: + name: example-opentelemetry-operator-webhook + namespace: default + path: /mutate-opentelemetry-io-v1beta1-opentelemetrycollector + port: 443 + failurePolicy: Ignore + name: mopentelemetrycollectorbeta.kb.io + rules: + - apiGroups: + - opentelemetry.io + apiVersions: + - v1beta1 + operations: + - CREATE + - UPDATE + resources: + - opentelemetrycollectors + scope: Namespaced + sideEffects: None + timeoutSeconds: 10 + - admissionReviewVersions: + - v1 + clientConfig: + service: + name: example-opentelemetry-operator-webhook + namespace: default + path: /mutate-v1-pod + port: 443 + failurePolicy: Ignore + name: mpod.kb.io + rules: + - apiGroups: + - "" + apiVersions: + - v1 + operations: + - CREATE + resources: + - pods + scope: Namespaced + sideEffects: None + timeoutSeconds: 10 +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/admission-webhooks/operator-webhook-with-cert-manager.yaml +apiVersion: admissionregistration.k8s.io/v1 +kind: ValidatingWebhookConfiguration +metadata: + annotations: + cert-manager.io/inject-ca-from: default/example-opentelemetry-operator-serving-cert + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: webhook + name: example-opentelemetry-operator-validation +webhooks: + - admissionReviewVersions: + - v1 + clientConfig: + service: + name: example-opentelemetry-operator-webhook + namespace: default + path: /validate-opentelemetry-io-v1alpha1-instrumentation + port: 443 + failurePolicy: Ignore + name: vinstrumentationcreateupdate.kb.io + rules: + - apiGroups: + - opentelemetry.io + apiVersions: + - v1alpha1 + operations: + - CREATE + - UPDATE + resources: + - instrumentations + scope: Namespaced + sideEffects: None + timeoutSeconds: 10 + - admissionReviewVersions: + - v1 + clientConfig: + service: + name: example-opentelemetry-operator-webhook + namespace: default + path: /validate-opentelemetry-io-v1alpha1-instrumentation + port: 443 + failurePolicy: Ignore + name: vinstrumentationdelete.kb.io + rules: + - apiGroups: + - opentelemetry.io + apiVersions: + - v1alpha1 + operations: + - DELETE + resources: + - instrumentations + scope: Namespaced + sideEffects: None + timeoutSeconds: 10 + - admissionReviewVersions: + - v1 + clientConfig: + service: + name: example-opentelemetry-operator-webhook + namespace: default + path: /validate-opentelemetry-io-v1beta1-opentelemetrycollector + port: 443 + failurePolicy: Ignore + name: vopentelemetrycollectorcreateupdatebeta.kb.io + rules: + - apiGroups: + - opentelemetry.io + apiVersions: + - v1beta1 + operations: + - CREATE + - UPDATE + resources: + - opentelemetrycollectors + scope: Namespaced + sideEffects: None + timeoutSeconds: 10 + - admissionReviewVersions: + - v1 + clientConfig: + service: + name: example-opentelemetry-operator-webhook + namespace: default + path: /validate-opentelemetry-io-v1beta1-opentelemetrycollector + port: 443 + failurePolicy: Ignore + name: vopentelemetrycollectordeletebeta.kb.io + rules: + - apiGroups: + - opentelemetry.io + apiVersions: + - v1beta1 + operations: + - DELETE + resources: + - opentelemetrycollectors + scope: Namespaced + sideEffects: None + timeoutSeconds: 10 + diff --git a/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/admission-webhooks/operator-webhook.yaml b/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/admission-webhooks/operator-webhook.yaml new file mode 100644 index 0000000000..5b9ff5511d --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/admission-webhooks/operator-webhook.yaml @@ -0,0 +1,3 @@ +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/admission-webhooks/operator-webhook.yaml +--- diff --git a/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/certmanager.yaml b/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/certmanager.yaml new file mode 100644 index 0000000000..e8615238d0 --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/certmanager.yaml @@ -0,0 +1,44 @@ +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/certmanager.yaml +apiVersion: cert-manager.io/v1 +kind: Certificate +metadata: + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: webhook + name: example-opentelemetry-operator-serving-cert + namespace: default +spec: + dnsNames: + - example-opentelemetry-operator-webhook.default.svc + - example-opentelemetry-operator-webhook.default.svc.cluster.local + issuerRef: + kind: Issuer + name: example-opentelemetry-operator-selfsigned-issuer + secretName: example-opentelemetry-operator-controller-manager-service-cert + subject: + organizationalUnits: + - example-opentelemetry-operator +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/certmanager.yaml +apiVersion: cert-manager.io/v1 +kind: Issuer +metadata: + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: webhook + name: example-opentelemetry-operator-selfsigned-issuer + namespace: default +spec: + selfSigned: {} + diff --git a/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/clusterrole.yaml b/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/clusterrole.yaml new file mode 100644 index 0000000000..2037050533 --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/clusterrole.yaml @@ -0,0 +1,410 @@ +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/clusterrole.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: controller-manager + name: example-opentelemetry-operator-manager +rules: + - apiGroups: + - "" + resources: + - configmaps + - persistentvolumeclaims + - persistentvolumes + - pods + - serviceaccounts + - services + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - "" + resources: + - events + verbs: + - create + - get + - list + - patch + - watch + - apiGroups: + - "" + resources: + - namespaces + verbs: + - list + - watch + - apiGroups: + - "" + resources: + - namespaces/status + verbs: + - get + - list + - watch + - apiGroups: + - "" + resources: + - nodes/spec + verbs: + - get + - list + - watch + - apiGroups: + - "" + resources: + - pods/status + verbs: + - get + - list + - watch + - apiGroups: + - "" + resources: + - replicationcontrollers + verbs: + - get + - list + - watch + - apiGroups: + - "" + resources: + - replicationcontrollers/status + verbs: + - get + - list + - watch + - apiGroups: + - "" + resources: + - resourcequotas + verbs: + - get + - list + - watch + - apiGroups: + - apps + resources: + - daemonsets + - deployments + - statefulsets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - apps + - extensions + resources: + - replicasets + verbs: + - get + - list + - watch + - apiGroups: + - extensions + resources: + - daemonsets + verbs: + - get + - list + - watch + - apiGroups: + - extensions + resources: + - deployments + verbs: + - get + - list + - watch + - apiGroups: + - autoscaling + resources: + - horizontalpodautoscalers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - batch + resources: + - jobs + verbs: + - get + - list + - watch + - apiGroups: + - batch + resources: + - cronjobs + verbs: + - get + - list + - watch + - apiGroups: + - "" + resources: + - nodes/proxy + verbs: + - get + - apiGroups: + - "" + resources: + - nodes/stats + verbs: + - get + - apiGroups: + - config.openshift.io + resources: + - infrastructures + - infrastructures/status + verbs: + - get + - list + - watch + - apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - get + - list + - update + - apiGroups: + - discovery.k8s.io + resources: + - endpointslices + verbs: + - get + - list + - apiGroups: + - events.k8s.io + resources: + - events + verbs: + - create + - list + - patch + - watch + - apiGroups: + - gateway.networking.k8s.io + resources: + - httproutes + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - monitoring.coreos.com + resources: + - podmonitors + - servicemonitors + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - networking.k8s.io + resources: + - ingresses + - networkpolicies + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - opentelemetry.io + resources: + - instrumentations + verbs: + - get + - list + - patch + - update + - watch + - apiGroups: + - opentelemetry.io + resources: + - opampbridges + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - opentelemetry.io + resources: + - opampbridges/finalizers + verbs: + - update + - apiGroups: + - opentelemetry.io + resources: + - opampbridges/status + verbs: + - get + - patch + - update + - apiGroups: + - opentelemetry.io + resources: + - opentelemetrycollectors + verbs: + - get + - list + - patch + - update + - watch + - apiGroups: + - opentelemetry.io + resources: + - opentelemetrycollectors/finalizers + verbs: + - get + - patch + - update + - apiGroups: + - opentelemetry.io + resources: + - opentelemetrycollectors/status + verbs: + - get + - patch + - update + - apiGroups: + - policy + resources: + - poddisruptionbudgets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - route.openshift.io + resources: + - routes + - routes/custom-host + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - opentelemetry.io + resources: + - targetallocators + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - opentelemetry.io + resources: + - targetallocators/status + verbs: + - get + - patch + - update + - apiGroups: + - opentelemetry.io + resources: + - targetallocators/finalizers + verbs: + - get + - patch + - update + - apiGroups: + - cert-manager.io + resources: + - issuers + - certificaterequests + - certificates + verbs: + - create + - get + - list + - watch + - update + - patch + - delete + - apiGroups: + - authentication.k8s.io + resources: + - tokenreviews + verbs: + - create + - apiGroups: + - authorization.k8s.io + resources: + - subjectaccessreviews + verbs: + - create +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/clusterrole.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: controller-manager + name: example-opentelemetry-operator-metrics +rules: + - nonResourceURLs: + - /metrics + verbs: + - get + + diff --git a/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/clusterrolebinding.yaml b/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/clusterrolebinding.yaml new file mode 100644 index 0000000000..4acb7d53f5 --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/clusterrolebinding.yaml @@ -0,0 +1,24 @@ +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/clusterrolebinding.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: controller-manager + name: example-opentelemetry-operator-manager +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: example-opentelemetry-operator-manager +subjects: + - kind: ServiceAccount + name: opentelemetry-operator + namespace: default + + diff --git a/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/deployment.yaml b/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/deployment.yaml new file mode 100644 index 0000000000..c775cd1cf3 --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/deployment.yaml @@ -0,0 +1,105 @@ +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/deployment.yaml +apiVersion: apps/v1 +kind: Deployment +metadata: + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: controller-manager + name: example-opentelemetry-operator + namespace: default +spec: + replicas: 1 + revisionHistoryLimit: 10 + selector: + matchLabels: + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/component: controller-manager + template: + metadata: + annotations: + kubectl.kubernetes.io/default-container: manager + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: controller-manager + spec: + automountServiceAccountToken: true + hostNetwork: false + containers: + - args: + - --metrics-addr=0.0.0.0:8443 + - --metrics-secure=true + - --enable-leader-election + - --health-probe-addr=:8081 + - --webhook-port=9443 + - --collector-image=otel/opentelemetry-collector-k8s:0.151.0 + command: + - /manager + env: + - name: SERVICE_ACCOUNT_NAME + valueFrom: + fieldRef: + fieldPath: spec.serviceAccountName + - name: ENABLE_WEBHOOKS + value: "true" + image: "ghcr.io/open-telemetry/opentelemetry-operator/opentelemetry-operator:0.151.0" + name: manager + imagePullPolicy: IfNotPresent + ports: + - containerPort: 8443 + name: metrics + protocol: TCP + - containerPort: 9443 + name: webhook-server + protocol: TCP + livenessProbe: + httpGet: + path: /healthz + port: 8081 + initialDelaySeconds: 15 + periodSeconds: 20 + readinessProbe: + httpGet: + path: /readyz + port: 8081 + initialDelaySeconds: 5 + periodSeconds: 10 + resources: + {} + volumeMounts: + - mountPath: /tmp/k8s-webhook-server/serving-certs + name: cert + readOnly: true + securityContext: + allowPrivilegeEscalation: false + capabilities: + drop: + - ALL + runAsNonRoot: true + seccompProfile: + type: RuntimeDefault + nodeSelector: + kubernetes.io/os: linux + serviceAccountName: opentelemetry-operator + terminationGracePeriodSeconds: 10 + volumes: + - name: cert + secret: + defaultMode: 420 + secretName: example-opentelemetry-operator-controller-manager-service-cert + securityContext: + fsGroup: 65532 + runAsGroup: 65532 + runAsNonRoot: true + runAsUser: 65532 + diff --git a/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/role.yaml b/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/role.yaml new file mode 100644 index 0000000000..b5339517a2 --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/role.yaml @@ -0,0 +1,200 @@ +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/role.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: controller-manager + name: example-opentelemetry-operator-leader-election + namespace: default +rules: + - apiGroups: + - "" + resources: + - configmaps + - pods + - serviceaccounts + - services + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - "" + resources: + - events + verbs: + - create + - patch + - apiGroups: + - "" + resources: + - namespaces + - secrets + verbs: + - get + - list + - watch + - apiGroups: + - apps + resources: + - daemonsets + - deployments + - statefulsets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - apps + resources: + - replicasets + verbs: + - get + - list + - watch + - apiGroups: + - autoscaling + resources: + - horizontalpodautoscalers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - batch + resources: + - jobs + verbs: + - get + - list + - watch + - apiGroups: + - config.openshift.io + resources: + - infrastructures + - infrastructures/status + verbs: + - get + - list + - watch + - apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - get + - list + - update + - apiGroups: + - monitoring.coreos.com + resources: + - podmonitors + - servicemonitors + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - opentelemetry.io + resources: + - instrumentations + - opentelemetrycollectors + verbs: + - get + - list + - patch + - update + - watch + - apiGroups: + - opentelemetry.io + resources: + - opampbridges + - targetallocators + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - opentelemetry.io + resources: + - opampbridges/finalizers + verbs: + - update + - apiGroups: + - opentelemetry.io + resources: + - opampbridges/status + - opentelemetrycollectors/finalizers + - opentelemetrycollectors/status + - targetallocators/status + - targetallocators/finalizers + verbs: + - get + - patch + - update + - apiGroups: + - policy + resources: + - poddisruptionbudgets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - route.openshift.io + resources: + - routes + - routes/custom-host + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + diff --git a/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/rolebinding.yaml b/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/rolebinding.yaml new file mode 100644 index 0000000000..ae376e80c9 --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/rolebinding.yaml @@ -0,0 +1,24 @@ +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/rolebinding.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: controller-manager + name: example-opentelemetry-operator-leader-election + namespace: default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: example-opentelemetry-operator-leader-election +subjects: + - kind: ServiceAccount + name: opentelemetry-operator + namespace: default + diff --git a/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/service.yaml b/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/service.yaml new file mode 100644 index 0000000000..0a3006d80f --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/service.yaml @@ -0,0 +1,48 @@ +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/service.yaml +apiVersion: v1 +kind: Service +metadata: + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: controller-manager + name: example-opentelemetry-operator + namespace: default +spec: + ports: + - name: metrics + port: 8443 + protocol: TCP + targetPort: metrics + selector: + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/component: controller-manager +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/service.yaml +apiVersion: v1 +kind: Service +metadata: + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: controller-manager + name: example-opentelemetry-operator-webhook + namespace: default +spec: + ports: + - port: 443 + protocol: TCP + targetPort: webhook-server + selector: + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/component: controller-manager + diff --git a/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/serviceaccount.yaml b/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/serviceaccount.yaml new file mode 100644 index 0000000000..c6ba25dbac --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/serviceaccount.yaml @@ -0,0 +1,17 @@ +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/serviceaccount.yaml +apiVersion: v1 +kind: ServiceAccount +automountServiceAccountToken: true +metadata: + name: opentelemetry-operator + namespace: default + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: controller-manager + diff --git a/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml b/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml new file mode 100644 index 0000000000..9039160e03 --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml @@ -0,0 +1,54 @@ +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/tests/test-certmanager-connection.yaml +apiVersion: v1 +kind: Pod +metadata: + name: "example-opentelemetry-operator-cert-manager" + namespace: default + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: webhook + annotations: + "helm.sh/hook": test +spec: + containers: + - name: wget + image: "busybox:latest" + env: + - name: CERT_MANAGER_CLUSTERIP + value: "cert-manager-webhook" + - name: CERT_MANAGER_PORT + value: "443" + command: + - sh + - -c + # The following shell script tests if the cert-manager service is up. If the service is up, when we try + # to wget its exposed port, we will get an HTTP error 400. + - | + wget_output=$(wget -q "$CERT_MANAGER_CLUSTERIP:$CERT_MANAGER_PORT") + if wget_output=="wget: server returned error: HTTP/1.0 400 Bad Request" + then exit 0 + else exit 1 + fi + securityContext: + allowPrivilegeEscalation: false + capabilities: + drop: + - ALL + runAsNonRoot: true + seccompProfile: + type: RuntimeDefault + restartPolicy: Never + nodeSelector: + kubernetes.io/os: linux + securityContext: + fsGroup: 65532 + runAsGroup: 65532 + runAsNonRoot: true + runAsUser: 65532 + diff --git a/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/tests/test-service-connection.yaml b/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/tests/test-service-connection.yaml new file mode 100644 index 0000000000..88e0e0bc24 --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/tests/test-service-connection.yaml @@ -0,0 +1,107 @@ +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/tests/test-service-connection.yaml +apiVersion: v1 +kind: Pod +metadata: + name: "example-opentelemetry-operator-metrics" + namespace: default + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: controller-manager + annotations: + "helm.sh/hook": test +spec: + containers: + - name: wget + image: "busybox:latest" + env: + - name: MANAGER_METRICS_SERVICE_CLUSTERIP + value: "example-opentelemetry-operator" + - name: MANAGER_METRICS_SERVICE_PORT + value: "8443" + command: + - sh + - -c + # The following shell script tests if the controller-manager-metrics-service is up. + # If the service is up, when we try to wget its exposed port, we will get an HTTP error 400. + - | + wget_output=$(wget -q "$MANAGER_METRICS_SERVICE_CLUSTERIP:$MANAGER_METRICS_SERVICE_PORT") + if wget_output=="wget: server returned error: HTTP/1.0 400 Bad Request" + then exit 0 + else exit 1 + fi + securityContext: + allowPrivilegeEscalation: false + capabilities: + drop: + - ALL + runAsNonRoot: true + seccompProfile: + type: RuntimeDefault + restartPolicy: Never + nodeSelector: + kubernetes.io/os: linux + securityContext: + fsGroup: 65532 + runAsGroup: 65532 + runAsNonRoot: true + runAsUser: 65532 +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/tests/test-service-connection.yaml +apiVersion: v1 +kind: Pod +metadata: + name: "example-opentelemetry-operator-webhook" + namespace: default + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: controller-manager + annotations: + "helm.sh/hook": test +spec: + containers: + - name: wget + image: "busybox:latest" + env: + - name: WEBHOOK_SERVICE_CLUSTERIP + value: "example-opentelemetry-operator-webhook" + - name: WEBHOOK_SERVICE_PORT + value: "443" + command: + - sh + - -c + # The following shell script tests if the webhook service is up. If the service is up, when we try + # to wget its exposed port, we will get an HTTP error 400. + - | + wget_output=$(wget -q "$WEBHOOK_SERVICE_CLUSTERIP:$WEBHOOK_SERVICE_PORT") + if wget_output=="wget: server returned error: HTTP/1.0 400 Bad Request" + then exit 0 + else exit 1 + fi + securityContext: + allowPrivilegeEscalation: false + capabilities: + drop: + - ALL + runAsNonRoot: true + seccompProfile: + type: RuntimeDefault + restartPolicy: Never + nodeSelector: + kubernetes.io/os: linux + securityContext: + fsGroup: 65532 + runAsGroup: 65532 + runAsNonRoot: true + runAsUser: 65532 + diff --git a/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/clusterrole.yaml b/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/clusterrole.yaml new file mode 100644 index 0000000000..e936bf24d8 --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/clusterrole.yaml @@ -0,0 +1,144 @@ +--- +# Source: opentelemetry-kube-stack/templates/clusterrole.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + name: example-collector +rules: +- apiGroups: [""] + resources: + - namespaces + - nodes + - nodes/proxy + - nodes/metrics + - nodes/stats + - services + - endpoints + - pods + - events + - secrets + - persistentvolumeclaims + - persistentvolumes + verbs: ["get", "list", "watch"] +- apiGroups: ["monitoring.coreos.com"] + resources: + - servicemonitors + - podmonitors + - scrapeconfigs + - probes + verbs: ["get", "list", "watch"] +- apiGroups: + - extensions + resources: + - ingresses + verbs: ["get", "list", "watch"] +- apiGroups: + - apps + resources: + - daemonsets + - deployments + - replicasets + - statefulsets + verbs: ["get", "list", "watch"] +- apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: ["get", "list", "watch"] +- apiGroups: ["discovery.k8s.io"] + resources: + - endpointslices + verbs: ["get", "list", "watch"] +- nonResourceURLs: ["/metrics", "/metrics/cadvisor"] + verbs: ["get"] + +- apiGroups: + - "" + resources: + - events + - namespaces + - namespaces/status + - nodes + - nodes/spec + - pods + - pods/status + - replicationcontrollers + - replicationcontrollers/status + - resourcequotas + - services + verbs: + - get + - list + - watch +- apiGroups: + - apps + resources: + - daemonsets + - deployments + - replicasets + - statefulsets + verbs: + - get + - list + - watch +- apiGroups: + - extensions + resources: + - daemonsets + - deployments + - replicasets + verbs: + - get + - list + - watch +- apiGroups: + - batch + resources: + - jobs + - cronjobs + verbs: + - get + - list + - watch +- apiGroups: + - autoscaling + resources: + - horizontalpodautoscalers + verbs: + - get + - list + - watch +- apiGroups: ["events.k8s.io"] + resources: ["events"] + verbs: ["watch", "list"] +--- +# Source: opentelemetry-kube-stack/templates/clusterrole.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + name: example-cluster-stats +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: example-collector +subjects: +- kind: ServiceAccount + # quirk of the Operator + name: "example-cluster-stats-collector" + namespace: default +--- +# Source: opentelemetry-kube-stack/templates/clusterrole.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + name: example-daemon +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: example-collector +subjects: +- kind: ServiceAccount + # quirk of the Operator + name: "example-daemon-collector" + namespace: default + diff --git a/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/collector.yaml b/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/collector.yaml new file mode 100644 index 0000000000..42d52cdd0f --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/collector.yaml @@ -0,0 +1,647 @@ +--- +# Source: opentelemetry-kube-stack/templates/collector.yaml +apiVersion: opentelemetry.io/v1beta1 +kind: OpenTelemetryCollector +metadata: + name: example-cluster-stats + namespace: default + labels: + helm.sh/chart: opentelemetry-kube-stack-0.16.0 + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + release: "example" +spec: + managementState: managed + mode: deployment + config: + exporters: + debug: {} + processors: + batch: + send_batch_max_size: 1500 + send_batch_size: 1000 + timeout: 1s + k8sattributes: + extract: + labels: + - from: pod + key: app.kubernetes.io/instance + tag_name: k8s.app.instance + - from: pod + key: app.kubernetes.io/component + tag_name: k8s.app.component + metadata: + - k8s.namespace.name + - k8s.pod.name + - k8s.pod.uid + - k8s.node.name + - k8s.pod.start_time + - k8s.deployment.name + - k8s.replicaset.name + - k8s.replicaset.uid + - k8s.daemonset.name + - k8s.daemonset.uid + - k8s.job.name + - k8s.job.uid + - k8s.container.name + - k8s.cronjob.name + - k8s.statefulset.name + - k8s.statefulset.uid + - container.image.tag + - container.image.name + - k8s.cluster.uid + - service.namespace + - service.name + - service.version + - service.instance.id + otel_annotations: true + passthrough: false + pod_association: + - sources: + - from: resource_attribute + name: k8s.pod.uid + - sources: + - from: resource_attribute + name: k8s.pod.name + - from: resource_attribute + name: k8s.namespace.name + - from: resource_attribute + name: k8s.node.name + - sources: + - from: resource_attribute + name: k8s.pod.ip + - sources: + - from: resource_attribute + name: k8s.pod.name + - from: resource_attribute + name: k8s.namespace.name + - sources: + - from: connection + resourcedetection/env: + detectors: + - env + override: false + timeout: 2s + receivers: + k8s_cluster: + allocatable_types_to_report: + - cpu + - memory + - storage + auth_type: serviceAccount + collection_interval: 10s + node_conditions_to_report: + - Ready + - MemoryPressure + - DiskPressure + - NetworkUnavailable + k8sobjects: + objects: + - exclude_watch_type: + - DELETED + group: events.k8s.io + mode: watch + name: events + service: + pipelines: + logs: + exporters: + - debug + processors: + - k8sattributes + - resourcedetection/env + - batch + receivers: + - k8sobjects + metrics: + exporters: + - debug + processors: + - k8sattributes + - resourcedetection/env + - batch + receivers: + - k8s_cluster + replicas: 1 + imagePullPolicy: IfNotPresent + upgradeStrategy: automatic + terminationGracePeriodSeconds: 30 + resources: + limits: + cpu: 200m + memory: 500Mi + requests: + cpu: 100m + memory: 250Mi + securityContext: + {} + env: + - name: K8S_NODE_NAME + valueFrom: + fieldRef: + fieldPath: spec.nodeName + - name: OTEL_K8S_NODE_NAME + valueFrom: + fieldRef: + fieldPath: spec.nodeName + - name: OTEL_K8S_NODE_IP + valueFrom: + fieldRef: + fieldPath: status.hostIP + - name: OTEL_K8S_NAMESPACE + valueFrom: + fieldRef: + apiVersion: v1 + fieldPath: metadata.namespace + - name: OTEL_K8S_POD_NAME + valueFrom: + fieldRef: + apiVersion: v1 + fieldPath: metadata.name + - name: OTEL_K8S_POD_IP + valueFrom: + fieldRef: + apiVersion: v1 + fieldPath: status.podIP + - name: OTEL_RESOURCE_ATTRIBUTES + value: "k8s.pod.name=$(OTEL_K8S_POD_NAME),k8s.namespace.name=$(OTEL_K8S_NAMESPACE),k8s.node.name=$(OTEL_K8S_NODE_NAME),host.name=$(OTEL_K8S_NODE_NAME),k8s.node.ip=$(OTEL_K8S_NODE_IP),k8s.pod.ip=$(OTEL_K8S_POD_IP),k8s.cluster.name=unknown_k8s_cluster" +--- +# Source: opentelemetry-kube-stack/templates/collector.yaml +apiVersion: opentelemetry.io/v1beta1 +kind: OpenTelemetryCollector +metadata: + name: example-daemon + namespace: default + labels: + helm.sh/chart: opentelemetry-kube-stack-0.16.0 + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + release: "example" +spec: + managementState: managed + mode: daemonset + config: + exporters: + debug: {} + processors: + batch: + send_batch_max_size: 1500 + send_batch_size: 1000 + timeout: 1s + k8sattributes: + extract: + labels: + - from: pod + key: app.kubernetes.io/instance + tag_name: k8s.app.instance + - from: pod + key: app.kubernetes.io/component + tag_name: k8s.app.component + metadata: + - k8s.namespace.name + - k8s.pod.name + - k8s.pod.uid + - k8s.node.name + - k8s.pod.start_time + - k8s.deployment.name + - k8s.replicaset.name + - k8s.replicaset.uid + - k8s.daemonset.name + - k8s.daemonset.uid + - k8s.job.name + - k8s.job.uid + - k8s.container.name + - k8s.cronjob.name + - k8s.statefulset.name + - k8s.statefulset.uid + - container.image.tag + - container.image.name + - k8s.cluster.uid + - service.namespace + - service.name + - service.version + - service.instance.id + otel_annotations: true + filter: + node_from_env_var: OTEL_K8S_NODE_NAME + passthrough: false + pod_association: + - sources: + - from: resource_attribute + name: k8s.pod.uid + - sources: + - from: resource_attribute + name: k8s.pod.name + - from: resource_attribute + name: k8s.namespace.name + - from: resource_attribute + name: k8s.node.name + - sources: + - from: resource_attribute + name: k8s.pod.ip + - sources: + - from: resource_attribute + name: k8s.pod.name + - from: resource_attribute + name: k8s.namespace.name + - sources: + - from: connection + resource/hostname: + attributes: + - action: insert + from_attribute: k8s.node.name + key: host.name + resourcedetection/env: + detectors: + - env + - k8snode + override: false + timeout: 2s + receivers: + filelog: + exclude: [] + include: + - /var/log/pods/*/*/*.log + include_file_name: false + include_file_path: true + operators: + - id: container-parser + max_log_size: 102400 + type: container + retry_on_failure: + enabled: true + start_at: end + hostmetrics: + collection_interval: 10s + root_path: /hostfs + scrapers: + cpu: + metrics: + system.cpu.logical.count: + enabled: true + system.cpu.utilization: + enabled: true + disk: {} + filesystem: + exclude_fs_types: + fs_types: + - autofs + - binfmt_misc + - bpf + - cgroup2 + - configfs + - debugfs + - devpts + - devtmpfs + - fusectl + - hugetlbfs + - iso9660 + - mqueue + - nsfs + - overlay + - proc + - procfs + - pstore + - rpc_pipefs + - securityfs + - selinuxfs + - squashfs + - sysfs + - tracefs + match_type: strict + exclude_mount_points: + match_type: regexp + mount_points: + - /dev/* + - /proc/* + - /sys/* + - /run/k3s/containerd/* + - /var/lib/docker/* + - /var/lib/kubelet/* + - /snap/* + metrics: + system.filesystem.utilization: + enabled: true + load: {} + memory: + metrics: + system.memory.limit: + enabled: true + system.memory.utilization: + enabled: true + network: {} + paging: + metrics: + system.paging.usage: + enabled: true + system: + metrics: + system.uptime: + enabled: true + kubeletstats: + auth_type: serviceAccount + collection_interval: 15s + endpoint: https://${env:OTEL_K8S_NODE_IP}:10250 + extra_metadata_labels: + - container.id + - k8s.volume.type + insecure_skip_verify: true + k8s_api_config: + auth_type: serviceAccount + metric_groups: + - node + - pod + - volume + - container + metrics: + container.cpu.usage: + enabled: true + k8s.node.cpu.usage: + enabled: true + k8s.node.uptime: + enabled: true + k8s.pod.cpu.usage: + enabled: true + k8s.pod.uptime: + enabled: true + otlp: + protocols: + grpc: + endpoint: 0.0.0.0:4317 + http: + endpoint: 0.0.0.0:4318 + prometheus: + config: + scrape_configs: + - job_name: kubernetes-pods + kubernetes_sd_configs: + - role: pod + selectors: + - field: spec.nodeName=${env:OTEL_K8S_NODE_NAME} + role: pod + relabel_configs: + - action: keep + regex: true + source_labels: + - __meta_kubernetes_pod_annotation_prometheus_io_scrape + - action: drop + regex: true + source_labels: + - __meta_kubernetes_pod_annotation_prometheus_io_scrape_slow + - action: replace + regex: (https?) + source_labels: + - __meta_kubernetes_pod_annotation_prometheus_io_scheme + target_label: __scheme__ + - action: replace + regex: (.+) + source_labels: + - __meta_kubernetes_pod_annotation_prometheus_io_path + target_label: __metrics_path__ + - action: replace + regex: ([^:]+)(?::\d+)?;(\d+) + replacement: $$1:$$2 + source_labels: + - __address__ + - __meta_kubernetes_pod_annotation_prometheus_io_port + target_label: __address__ + - action: labelmap + regex: __meta_kubernetes_pod_annotation_prometheus_io_param_(.+) + replacement: __param_$$1 + - action: labelmap + regex: __meta_kubernetes_pod_label_(.+) + - action: replace + source_labels: + - __meta_kubernetes_namespace + target_label: namespace + - action: replace + source_labels: + - __meta_kubernetes_pod_name + target_label: pod + - action: drop + regex: Pending|Succeeded|Failed|Completed + source_labels: + - __meta_kubernetes_pod_phase + - action: replace + source_labels: + - __meta_kubernetes_pod_label_app_kubernetes_io_name + target_label: job + scrape_interval: 30s + - job_name: node-exporter + relabel_configs: + - action: labelmap + regex: __meta_kubernetes_node_label_(.+) + - action: replace + regex: (.*) + replacement: $$1 + separator: ; + source_labels: + - job + target_label: __tmp_prometheus_job_name + scrape_interval: 30s + static_configs: + - targets: + - ${env:OTEL_K8S_NODE_IP}:9100 + - authorization: + credentials_file: /var/run/secrets/kubernetes.io/serviceaccount/token + type: Bearer + follow_redirects: true + honor_labels: true + honor_timestamps: true + job_name: kubelet + kubernetes_sd_configs: + - follow_redirects: true + role: node + selectors: + - field: metadata.name=${env:OTEL_K8S_NODE_NAME} + role: node + metric_relabel_configs: + - action: drop + regex: container_cpu_(load_average_10s|system_seconds_total|user_seconds_total) + replacement: $$1 + separator: ; + source_labels: + - __name__ + - action: drop + regex: container_fs_(io_current|reads_merged_total|sector_reads_total|sector_writes_total|writes_merged_total) + replacement: $$1 + separator: ; + source_labels: + - __name__ + - action: drop + regex: container_memory_(mapped_file|swap) + replacement: $$1 + separator: ; + source_labels: + - __name__ + - action: drop + regex: container_(file_descriptors|tasks_state|threads_max) + replacement: $$1 + separator: ; + source_labels: + - __name__ + - action: drop + regex: container_spec.* + replacement: $$1 + separator: ; + source_labels: + - __name__ + - action: drop + regex: .+; + replacement: $$1 + separator: ; + source_labels: + - id + - pod + metrics_path: /metrics/cadvisor + relabel_configs: + - action: replace + regex: (.*) + replacement: $$1 + separator: ; + source_labels: + - job + target_label: __tmp_prometheus_job_name + - action: replace + replacement: kubelet + target_label: job + - action: replace + regex: (.*) + replacement: $$1 + separator: ; + source_labels: + - __meta_kubernetes_node_name + target_label: node + - action: replace + regex: (.*) + replacement: https-metrics + separator: ; + target_label: endpoint + - action: replace + regex: (.*) + replacement: $$1 + separator: ; + source_labels: + - __metrics_path__ + target_label: metrics_path + - action: hashmod + modulus: 1 + regex: (.*) + replacement: $$1 + separator: ; + source_labels: + - __address__ + target_label: __tmp_hash + - action: keep + regex: $(SHARD) + replacement: $$1 + separator: ; + source_labels: + - __tmp_hash + scheme: https + scrape_interval: 15s + scrape_timeout: 10s + tls_config: + ca_file: /var/run/secrets/kubernetes.io/serviceaccount/ca.crt + insecure_skip_verify: true + service: + pipelines: + logs: + exporters: + - debug + processors: + - k8sattributes + - resourcedetection/env + - resource/hostname + - batch + receivers: + - otlp + - filelog + metrics: + exporters: + - debug + processors: + - k8sattributes + - resourcedetection/env + - resource/hostname + - batch + receivers: + - prometheus + - otlp + - hostmetrics + - kubeletstats + traces: + exporters: + - debug + processors: + - k8sattributes + - resourcedetection/env + - resource/hostname + - batch + receivers: + - otlp + imagePullPolicy: IfNotPresent + upgradeStrategy: automatic + terminationGracePeriodSeconds: 30 + resources: + limits: + cpu: 200m + memory: 500Mi + requests: + cpu: 100m + memory: 250Mi + securityContext: + {} + volumeMounts: + - name: varlogpods + mountPath: /var/log/pods + readOnly: true + - name: varlibdockercontainers + mountPath: /var/lib/docker/containers + readOnly: true + - name: hostfs + mountPath: /hostfs + readOnly: true + mountPropagation: HostToContainer + env: + - name: K8S_NODE_NAME + valueFrom: + fieldRef: + fieldPath: spec.nodeName + - name: OTEL_K8S_NODE_NAME + valueFrom: + fieldRef: + fieldPath: spec.nodeName + - name: OTEL_K8S_NODE_IP + valueFrom: + fieldRef: + fieldPath: status.hostIP + - name: OTEL_K8S_NAMESPACE + valueFrom: + fieldRef: + apiVersion: v1 + fieldPath: metadata.namespace + - name: OTEL_K8S_POD_NAME + valueFrom: + fieldRef: + apiVersion: v1 + fieldPath: metadata.name + - name: OTEL_K8S_POD_IP + valueFrom: + fieldRef: + apiVersion: v1 + fieldPath: status.podIP + - name: OTEL_RESOURCE_ATTRIBUTES + value: "k8s.pod.name=$(OTEL_K8S_POD_NAME),k8s.namespace.name=$(OTEL_K8S_NAMESPACE),k8s.node.name=$(OTEL_K8S_NODE_NAME),host.name=$(OTEL_K8S_NODE_NAME),k8s.node.ip=$(OTEL_K8S_NODE_IP),k8s.pod.ip=$(OTEL_K8S_POD_IP),k8s.cluster.name=unknown_k8s_cluster" + + volumes: + - name: varlogpods + hostPath: + path: /var/log/pods + - name: varlibdockercontainers + hostPath: + path: /var/lib/docker/containers + - name: hostfs + hostPath: + path: / + diff --git a/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/hooks.yaml b/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/hooks.yaml new file mode 100644 index 0000000000..df09c1e80b --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/hooks.yaml @@ -0,0 +1,65 @@ +--- +# Source: opentelemetry-kube-stack/templates/hooks.yaml +apiVersion: v1 +kind: ServiceAccount +metadata: + name: delete-resources-sa + annotations: + "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded +--- +# Source: opentelemetry-kube-stack/templates/hooks.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + name: delete-resources-role + annotations: + "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded +rules: + - apiGroups: + - opentelemetry.io + resources: + - instrumentations + - opampbridges + - opentelemetrycollectors + verbs: + - get + - list + - delete +--- +# Source: opentelemetry-kube-stack/templates/hooks.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + name: delete-resources-rolebinding + annotations: + "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: delete-resources-role +subjects: + - kind: ServiceAccount + name: delete-resources-sa +--- +# Source: opentelemetry-kube-stack/templates/hooks.yaml +apiVersion: batch/v1 +kind: Job +metadata: + name: opentelemetry-kube-stack-pre-delete-job + annotations: + "helm.sh/hook": pre-delete + "helm.sh/hook-delete-policy": hook-succeeded,hook-failed +spec: + template: + spec: + restartPolicy: Never + serviceAccountName: delete-resources-sa + containers: + - name: delete-resources + image: "rancher/kubectl:v1.34.1" + args: + - "delete" + - "instrumentations,opampbridges,opentelemetrycollectors" + - "-l" + - "helm.sh/chart=opentelemetry-kube-stack-0.16.0" + diff --git a/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml b/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml new file mode 100644 index 0000000000..17585fa86a --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml @@ -0,0 +1,193 @@ +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/admission-webhooks/operator-webhook-with-cert-manager.yaml +apiVersion: admissionregistration.k8s.io/v1 +kind: MutatingWebhookConfiguration +metadata: + annotations: + cert-manager.io/inject-ca-from: default/example-opentelemetry-operator-serving-cert + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: webhook + name: example-opentelemetry-operator-mutation +webhooks: + - admissionReviewVersions: + - v1 + clientConfig: + service: + name: example-opentelemetry-operator-webhook + namespace: default + path: /mutate-opentelemetry-io-v1alpha1-instrumentation + port: 443 + failurePolicy: Ignore + name: minstrumentation.kb.io + rules: + - apiGroups: + - opentelemetry.io + apiVersions: + - v1alpha1 + operations: + - CREATE + - UPDATE + resources: + - instrumentations + scope: Namespaced + sideEffects: None + timeoutSeconds: 10 + - admissionReviewVersions: + - v1 + clientConfig: + service: + name: example-opentelemetry-operator-webhook + namespace: default + path: /mutate-opentelemetry-io-v1beta1-opentelemetrycollector + port: 443 + failurePolicy: Ignore + name: mopentelemetrycollectorbeta.kb.io + rules: + - apiGroups: + - opentelemetry.io + apiVersions: + - v1beta1 + operations: + - CREATE + - UPDATE + resources: + - opentelemetrycollectors + scope: Namespaced + sideEffects: None + timeoutSeconds: 10 + - admissionReviewVersions: + - v1 + clientConfig: + service: + name: example-opentelemetry-operator-webhook + namespace: default + path: /mutate-v1-pod + port: 443 + failurePolicy: Ignore + name: mpod.kb.io + rules: + - apiGroups: + - "" + apiVersions: + - v1 + operations: + - CREATE + resources: + - pods + scope: Namespaced + sideEffects: None + timeoutSeconds: 10 +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/admission-webhooks/operator-webhook-with-cert-manager.yaml +apiVersion: admissionregistration.k8s.io/v1 +kind: ValidatingWebhookConfiguration +metadata: + annotations: + cert-manager.io/inject-ca-from: default/example-opentelemetry-operator-serving-cert + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: webhook + name: example-opentelemetry-operator-validation +webhooks: + - admissionReviewVersions: + - v1 + clientConfig: + service: + name: example-opentelemetry-operator-webhook + namespace: default + path: /validate-opentelemetry-io-v1alpha1-instrumentation + port: 443 + failurePolicy: Ignore + name: vinstrumentationcreateupdate.kb.io + rules: + - apiGroups: + - opentelemetry.io + apiVersions: + - v1alpha1 + operations: + - CREATE + - UPDATE + resources: + - instrumentations + scope: Namespaced + sideEffects: None + timeoutSeconds: 10 + - admissionReviewVersions: + - v1 + clientConfig: + service: + name: example-opentelemetry-operator-webhook + namespace: default + path: /validate-opentelemetry-io-v1alpha1-instrumentation + port: 443 + failurePolicy: Ignore + name: vinstrumentationdelete.kb.io + rules: + - apiGroups: + - opentelemetry.io + apiVersions: + - v1alpha1 + operations: + - DELETE + resources: + - instrumentations + scope: Namespaced + sideEffects: None + timeoutSeconds: 10 + - admissionReviewVersions: + - v1 + clientConfig: + service: + name: example-opentelemetry-operator-webhook + namespace: default + path: /validate-opentelemetry-io-v1beta1-opentelemetrycollector + port: 443 + failurePolicy: Ignore + name: vopentelemetrycollectorcreateupdatebeta.kb.io + rules: + - apiGroups: + - opentelemetry.io + apiVersions: + - v1beta1 + operations: + - CREATE + - UPDATE + resources: + - opentelemetrycollectors + scope: Namespaced + sideEffects: None + timeoutSeconds: 10 + - admissionReviewVersions: + - v1 + clientConfig: + service: + name: example-opentelemetry-operator-webhook + namespace: default + path: /validate-opentelemetry-io-v1beta1-opentelemetrycollector + port: 443 + failurePolicy: Ignore + name: vopentelemetrycollectordeletebeta.kb.io + rules: + - apiGroups: + - opentelemetry.io + apiVersions: + - v1beta1 + operations: + - DELETE + resources: + - opentelemetrycollectors + scope: Namespaced + sideEffects: None + timeoutSeconds: 10 + diff --git a/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/admission-webhooks/operator-webhook.yaml b/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/admission-webhooks/operator-webhook.yaml new file mode 100644 index 0000000000..5b9ff5511d --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/admission-webhooks/operator-webhook.yaml @@ -0,0 +1,3 @@ +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/admission-webhooks/operator-webhook.yaml +--- diff --git a/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/certmanager.yaml b/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/certmanager.yaml new file mode 100644 index 0000000000..e8615238d0 --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/certmanager.yaml @@ -0,0 +1,44 @@ +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/certmanager.yaml +apiVersion: cert-manager.io/v1 +kind: Certificate +metadata: + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: webhook + name: example-opentelemetry-operator-serving-cert + namespace: default +spec: + dnsNames: + - example-opentelemetry-operator-webhook.default.svc + - example-opentelemetry-operator-webhook.default.svc.cluster.local + issuerRef: + kind: Issuer + name: example-opentelemetry-operator-selfsigned-issuer + secretName: example-opentelemetry-operator-controller-manager-service-cert + subject: + organizationalUnits: + - example-opentelemetry-operator +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/certmanager.yaml +apiVersion: cert-manager.io/v1 +kind: Issuer +metadata: + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: webhook + name: example-opentelemetry-operator-selfsigned-issuer + namespace: default +spec: + selfSigned: {} + diff --git a/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/clusterrole.yaml b/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/clusterrole.yaml new file mode 100644 index 0000000000..2037050533 --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/clusterrole.yaml @@ -0,0 +1,410 @@ +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/clusterrole.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: controller-manager + name: example-opentelemetry-operator-manager +rules: + - apiGroups: + - "" + resources: + - configmaps + - persistentvolumeclaims + - persistentvolumes + - pods + - serviceaccounts + - services + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - "" + resources: + - events + verbs: + - create + - get + - list + - patch + - watch + - apiGroups: + - "" + resources: + - namespaces + verbs: + - list + - watch + - apiGroups: + - "" + resources: + - namespaces/status + verbs: + - get + - list + - watch + - apiGroups: + - "" + resources: + - nodes/spec + verbs: + - get + - list + - watch + - apiGroups: + - "" + resources: + - pods/status + verbs: + - get + - list + - watch + - apiGroups: + - "" + resources: + - replicationcontrollers + verbs: + - get + - list + - watch + - apiGroups: + - "" + resources: + - replicationcontrollers/status + verbs: + - get + - list + - watch + - apiGroups: + - "" + resources: + - resourcequotas + verbs: + - get + - list + - watch + - apiGroups: + - apps + resources: + - daemonsets + - deployments + - statefulsets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - apps + - extensions + resources: + - replicasets + verbs: + - get + - list + - watch + - apiGroups: + - extensions + resources: + - daemonsets + verbs: + - get + - list + - watch + - apiGroups: + - extensions + resources: + - deployments + verbs: + - get + - list + - watch + - apiGroups: + - autoscaling + resources: + - horizontalpodautoscalers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - batch + resources: + - jobs + verbs: + - get + - list + - watch + - apiGroups: + - batch + resources: + - cronjobs + verbs: + - get + - list + - watch + - apiGroups: + - "" + resources: + - nodes/proxy + verbs: + - get + - apiGroups: + - "" + resources: + - nodes/stats + verbs: + - get + - apiGroups: + - config.openshift.io + resources: + - infrastructures + - infrastructures/status + verbs: + - get + - list + - watch + - apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - get + - list + - update + - apiGroups: + - discovery.k8s.io + resources: + - endpointslices + verbs: + - get + - list + - apiGroups: + - events.k8s.io + resources: + - events + verbs: + - create + - list + - patch + - watch + - apiGroups: + - gateway.networking.k8s.io + resources: + - httproutes + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - monitoring.coreos.com + resources: + - podmonitors + - servicemonitors + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - networking.k8s.io + resources: + - ingresses + - networkpolicies + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - opentelemetry.io + resources: + - instrumentations + verbs: + - get + - list + - patch + - update + - watch + - apiGroups: + - opentelemetry.io + resources: + - opampbridges + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - opentelemetry.io + resources: + - opampbridges/finalizers + verbs: + - update + - apiGroups: + - opentelemetry.io + resources: + - opampbridges/status + verbs: + - get + - patch + - update + - apiGroups: + - opentelemetry.io + resources: + - opentelemetrycollectors + verbs: + - get + - list + - patch + - update + - watch + - apiGroups: + - opentelemetry.io + resources: + - opentelemetrycollectors/finalizers + verbs: + - get + - patch + - update + - apiGroups: + - opentelemetry.io + resources: + - opentelemetrycollectors/status + verbs: + - get + - patch + - update + - apiGroups: + - policy + resources: + - poddisruptionbudgets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - route.openshift.io + resources: + - routes + - routes/custom-host + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - opentelemetry.io + resources: + - targetallocators + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - opentelemetry.io + resources: + - targetallocators/status + verbs: + - get + - patch + - update + - apiGroups: + - opentelemetry.io + resources: + - targetallocators/finalizers + verbs: + - get + - patch + - update + - apiGroups: + - cert-manager.io + resources: + - issuers + - certificaterequests + - certificates + verbs: + - create + - get + - list + - watch + - update + - patch + - delete + - apiGroups: + - authentication.k8s.io + resources: + - tokenreviews + verbs: + - create + - apiGroups: + - authorization.k8s.io + resources: + - subjectaccessreviews + verbs: + - create +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/clusterrole.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: controller-manager + name: example-opentelemetry-operator-metrics +rules: + - nonResourceURLs: + - /metrics + verbs: + - get + + diff --git a/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/clusterrolebinding.yaml b/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/clusterrolebinding.yaml new file mode 100644 index 0000000000..4acb7d53f5 --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/clusterrolebinding.yaml @@ -0,0 +1,24 @@ +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/clusterrolebinding.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: controller-manager + name: example-opentelemetry-operator-manager +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: example-opentelemetry-operator-manager +subjects: + - kind: ServiceAccount + name: opentelemetry-operator + namespace: default + + diff --git a/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/deployment.yaml b/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/deployment.yaml new file mode 100644 index 0000000000..c775cd1cf3 --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/deployment.yaml @@ -0,0 +1,105 @@ +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/deployment.yaml +apiVersion: apps/v1 +kind: Deployment +metadata: + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: controller-manager + name: example-opentelemetry-operator + namespace: default +spec: + replicas: 1 + revisionHistoryLimit: 10 + selector: + matchLabels: + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/component: controller-manager + template: + metadata: + annotations: + kubectl.kubernetes.io/default-container: manager + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: controller-manager + spec: + automountServiceAccountToken: true + hostNetwork: false + containers: + - args: + - --metrics-addr=0.0.0.0:8443 + - --metrics-secure=true + - --enable-leader-election + - --health-probe-addr=:8081 + - --webhook-port=9443 + - --collector-image=otel/opentelemetry-collector-k8s:0.151.0 + command: + - /manager + env: + - name: SERVICE_ACCOUNT_NAME + valueFrom: + fieldRef: + fieldPath: spec.serviceAccountName + - name: ENABLE_WEBHOOKS + value: "true" + image: "ghcr.io/open-telemetry/opentelemetry-operator/opentelemetry-operator:0.151.0" + name: manager + imagePullPolicy: IfNotPresent + ports: + - containerPort: 8443 + name: metrics + protocol: TCP + - containerPort: 9443 + name: webhook-server + protocol: TCP + livenessProbe: + httpGet: + path: /healthz + port: 8081 + initialDelaySeconds: 15 + periodSeconds: 20 + readinessProbe: + httpGet: + path: /readyz + port: 8081 + initialDelaySeconds: 5 + periodSeconds: 10 + resources: + {} + volumeMounts: + - mountPath: /tmp/k8s-webhook-server/serving-certs + name: cert + readOnly: true + securityContext: + allowPrivilegeEscalation: false + capabilities: + drop: + - ALL + runAsNonRoot: true + seccompProfile: + type: RuntimeDefault + nodeSelector: + kubernetes.io/os: linux + serviceAccountName: opentelemetry-operator + terminationGracePeriodSeconds: 10 + volumes: + - name: cert + secret: + defaultMode: 420 + secretName: example-opentelemetry-operator-controller-manager-service-cert + securityContext: + fsGroup: 65532 + runAsGroup: 65532 + runAsNonRoot: true + runAsUser: 65532 + diff --git a/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/role.yaml b/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/role.yaml new file mode 100644 index 0000000000..b5339517a2 --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/role.yaml @@ -0,0 +1,200 @@ +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/role.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: controller-manager + name: example-opentelemetry-operator-leader-election + namespace: default +rules: + - apiGroups: + - "" + resources: + - configmaps + - pods + - serviceaccounts + - services + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - "" + resources: + - events + verbs: + - create + - patch + - apiGroups: + - "" + resources: + - namespaces + - secrets + verbs: + - get + - list + - watch + - apiGroups: + - apps + resources: + - daemonsets + - deployments + - statefulsets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - apps + resources: + - replicasets + verbs: + - get + - list + - watch + - apiGroups: + - autoscaling + resources: + - horizontalpodautoscalers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - batch + resources: + - jobs + verbs: + - get + - list + - watch + - apiGroups: + - config.openshift.io + resources: + - infrastructures + - infrastructures/status + verbs: + - get + - list + - watch + - apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - get + - list + - update + - apiGroups: + - monitoring.coreos.com + resources: + - podmonitors + - servicemonitors + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - opentelemetry.io + resources: + - instrumentations + - opentelemetrycollectors + verbs: + - get + - list + - patch + - update + - watch + - apiGroups: + - opentelemetry.io + resources: + - opampbridges + - targetallocators + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - opentelemetry.io + resources: + - opampbridges/finalizers + verbs: + - update + - apiGroups: + - opentelemetry.io + resources: + - opampbridges/status + - opentelemetrycollectors/finalizers + - opentelemetrycollectors/status + - targetallocators/status + - targetallocators/finalizers + verbs: + - get + - patch + - update + - apiGroups: + - policy + resources: + - poddisruptionbudgets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - route.openshift.io + resources: + - routes + - routes/custom-host + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + diff --git a/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/rolebinding.yaml b/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/rolebinding.yaml new file mode 100644 index 0000000000..ae376e80c9 --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/rolebinding.yaml @@ -0,0 +1,24 @@ +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/rolebinding.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: controller-manager + name: example-opentelemetry-operator-leader-election + namespace: default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: example-opentelemetry-operator-leader-election +subjects: + - kind: ServiceAccount + name: opentelemetry-operator + namespace: default + diff --git a/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/service.yaml b/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/service.yaml new file mode 100644 index 0000000000..0a3006d80f --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/service.yaml @@ -0,0 +1,48 @@ +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/service.yaml +apiVersion: v1 +kind: Service +metadata: + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: controller-manager + name: example-opentelemetry-operator + namespace: default +spec: + ports: + - name: metrics + port: 8443 + protocol: TCP + targetPort: metrics + selector: + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/component: controller-manager +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/service.yaml +apiVersion: v1 +kind: Service +metadata: + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: controller-manager + name: example-opentelemetry-operator-webhook + namespace: default +spec: + ports: + - port: 443 + protocol: TCP + targetPort: webhook-server + selector: + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/component: controller-manager + diff --git a/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/serviceaccount.yaml b/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/serviceaccount.yaml new file mode 100644 index 0000000000..c6ba25dbac --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/serviceaccount.yaml @@ -0,0 +1,17 @@ +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/serviceaccount.yaml +apiVersion: v1 +kind: ServiceAccount +automountServiceAccountToken: true +metadata: + name: opentelemetry-operator + namespace: default + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: controller-manager + diff --git a/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml b/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml new file mode 100644 index 0000000000..9039160e03 --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml @@ -0,0 +1,54 @@ +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/tests/test-certmanager-connection.yaml +apiVersion: v1 +kind: Pod +metadata: + name: "example-opentelemetry-operator-cert-manager" + namespace: default + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: webhook + annotations: + "helm.sh/hook": test +spec: + containers: + - name: wget + image: "busybox:latest" + env: + - name: CERT_MANAGER_CLUSTERIP + value: "cert-manager-webhook" + - name: CERT_MANAGER_PORT + value: "443" + command: + - sh + - -c + # The following shell script tests if the cert-manager service is up. If the service is up, when we try + # to wget its exposed port, we will get an HTTP error 400. + - | + wget_output=$(wget -q "$CERT_MANAGER_CLUSTERIP:$CERT_MANAGER_PORT") + if wget_output=="wget: server returned error: HTTP/1.0 400 Bad Request" + then exit 0 + else exit 1 + fi + securityContext: + allowPrivilegeEscalation: false + capabilities: + drop: + - ALL + runAsNonRoot: true + seccompProfile: + type: RuntimeDefault + restartPolicy: Never + nodeSelector: + kubernetes.io/os: linux + securityContext: + fsGroup: 65532 + runAsGroup: 65532 + runAsNonRoot: true + runAsUser: 65532 + diff --git a/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/tests/test-service-connection.yaml b/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/tests/test-service-connection.yaml new file mode 100644 index 0000000000..88e0e0bc24 --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/tests/test-service-connection.yaml @@ -0,0 +1,107 @@ +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/tests/test-service-connection.yaml +apiVersion: v1 +kind: Pod +metadata: + name: "example-opentelemetry-operator-metrics" + namespace: default + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: controller-manager + annotations: + "helm.sh/hook": test +spec: + containers: + - name: wget + image: "busybox:latest" + env: + - name: MANAGER_METRICS_SERVICE_CLUSTERIP + value: "example-opentelemetry-operator" + - name: MANAGER_METRICS_SERVICE_PORT + value: "8443" + command: + - sh + - -c + # The following shell script tests if the controller-manager-metrics-service is up. + # If the service is up, when we try to wget its exposed port, we will get an HTTP error 400. + - | + wget_output=$(wget -q "$MANAGER_METRICS_SERVICE_CLUSTERIP:$MANAGER_METRICS_SERVICE_PORT") + if wget_output=="wget: server returned error: HTTP/1.0 400 Bad Request" + then exit 0 + else exit 1 + fi + securityContext: + allowPrivilegeEscalation: false + capabilities: + drop: + - ALL + runAsNonRoot: true + seccompProfile: + type: RuntimeDefault + restartPolicy: Never + nodeSelector: + kubernetes.io/os: linux + securityContext: + fsGroup: 65532 + runAsGroup: 65532 + runAsNonRoot: true + runAsUser: 65532 +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/tests/test-service-connection.yaml +apiVersion: v1 +kind: Pod +metadata: + name: "example-opentelemetry-operator-webhook" + namespace: default + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: controller-manager + annotations: + "helm.sh/hook": test +spec: + containers: + - name: wget + image: "busybox:latest" + env: + - name: WEBHOOK_SERVICE_CLUSTERIP + value: "example-opentelemetry-operator-webhook" + - name: WEBHOOK_SERVICE_PORT + value: "443" + command: + - sh + - -c + # The following shell script tests if the webhook service is up. If the service is up, when we try + # to wget its exposed port, we will get an HTTP error 400. + - | + wget_output=$(wget -q "$WEBHOOK_SERVICE_CLUSTERIP:$WEBHOOK_SERVICE_PORT") + if wget_output=="wget: server returned error: HTTP/1.0 400 Bad Request" + then exit 0 + else exit 1 + fi + securityContext: + allowPrivilegeEscalation: false + capabilities: + drop: + - ALL + runAsNonRoot: true + seccompProfile: + type: RuntimeDefault + restartPolicy: Never + nodeSelector: + kubernetes.io/os: linux + securityContext: + fsGroup: 65532 + runAsGroup: 65532 + runAsNonRoot: true + runAsUser: 65532 + diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/clusterrole.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/clusterrole.yaml new file mode 100644 index 0000000000..32f102bb70 --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/clusterrole.yaml @@ -0,0 +1,72 @@ +--- +# Source: opentelemetry-kube-stack/templates/clusterrole.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + name: example-collector +rules: +- apiGroups: [""] + resources: + - namespaces + - nodes + - nodes/proxy + - nodes/metrics + - nodes/stats + - services + - endpoints + - pods + - events + - secrets + - persistentvolumeclaims + - persistentvolumes + verbs: ["get", "list", "watch"] +- apiGroups: ["monitoring.coreos.com"] + resources: + - servicemonitors + - podmonitors + - scrapeconfigs + - probes + verbs: ["get", "list", "watch"] +- apiGroups: + - extensions + resources: + - ingresses + verbs: ["get", "list", "watch"] +- apiGroups: + - apps + resources: + - daemonsets + - deployments + - replicasets + - statefulsets + verbs: ["get", "list", "watch"] +- apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: ["get", "list", "watch"] +- apiGroups: ["discovery.k8s.io"] + resources: + - endpointslices + verbs: ["get", "list", "watch"] +- nonResourceURLs: ["/metrics", "/metrics/cadvisor"] + verbs: ["get"] +--- +# Source: opentelemetry-kube-stack/templates/clusterrole.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + name: example-daemon +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: example-collector +subjects: +- kind: ServiceAccount + # quirk of the Operator + name: "example-daemon-collector" + namespace: default +- kind: ServiceAccount + name: example-daemon-targetallocator + namespace: default + diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/collector.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/collector.yaml new file mode 100644 index 0000000000..f7dc54045e --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/collector.yaml @@ -0,0 +1,137 @@ +--- +# Source: opentelemetry-kube-stack/templates/collector.yaml +apiVersion: opentelemetry.io/v1beta1 +kind: OpenTelemetryCollector +metadata: + name: example-daemon + namespace: default + labels: + helm.sh/chart: opentelemetry-kube-stack-0.16.0 + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + release: "example" + otel-collector-type: daemonset-example +spec: + managementState: managed + mode: daemonset + config: + exporters: + debug: {} + otlp: + endpoint: ingest.example.com:443 + headers: + access-token: ${ACCESS_TOKEN} + processors: + batch: + send_batch_max_size: 1500 + send_batch_size: 1000 + timeout: 1s + resource/hostname: + attributes: + - action: insert + from_attribute: k8s.node.name + key: host.name + resourcedetection/env: + detectors: + - env + - k8snode + override: false + timeout: 2s + receivers: + otlp: + protocols: + grpc: + endpoint: 0.0.0.0:4317 + http: + endpoint: 0.0.0.0:4318 + prometheus: + config: + scrape_configs: [] + service: + pipelines: + logs: + exporters: + - debug + processors: + - resourcedetection/env + - resource/hostname + - batch + receivers: + - otlp + metrics: + exporters: + - debug + - otlp + processors: + - resourcedetection/env + - resource/hostname + - batch + receivers: + - prometheus + traces: + exporters: + - debug + processors: + - resourcedetection/env + - resource/hostname + - batch + receivers: + - otlp + imagePullPolicy: IfNotPresent + upgradeStrategy: automatic + terminationGracePeriodSeconds: 30 + resources: + limits: + cpu: 200m + memory: 500Mi + requests: + cpu: 100m + memory: 250Mi + securityContext: + {} + targetAllocator: + allocationStrategy: per-node + enabled: true + image: ghcr.io/open-telemetry/opentelemetry-operator/target-allocator:main + prometheusCR: + enabled: true + podMonitorSelector: {} + scrapeInterval: 30s + serviceMonitorSelector: {} + env: + - name: K8S_NODE_NAME + valueFrom: + fieldRef: + fieldPath: spec.nodeName + - name: OTEL_K8S_NODE_NAME + valueFrom: + fieldRef: + fieldPath: spec.nodeName + - name: OTEL_K8S_NODE_IP + valueFrom: + fieldRef: + fieldPath: status.hostIP + - name: OTEL_K8S_NAMESPACE + valueFrom: + fieldRef: + apiVersion: v1 + fieldPath: metadata.namespace + - name: OTEL_K8S_POD_NAME + valueFrom: + fieldRef: + apiVersion: v1 + fieldPath: metadata.name + - name: OTEL_K8S_POD_IP + valueFrom: + fieldRef: + apiVersion: v1 + fieldPath: status.podIP + - name: OTEL_RESOURCE_ATTRIBUTES + value: "k8s.pod.name=$(OTEL_K8S_POD_NAME),k8s.namespace.name=$(OTEL_K8S_NAMESPACE),k8s.node.name=$(OTEL_K8S_NODE_NAME),host.name=$(OTEL_K8S_NODE_NAME),k8s.node.ip=$(OTEL_K8S_NODE_IP),k8s.pod.ip=$(OTEL_K8S_POD_IP),k8s.cluster.name=demo" + + - name: ACCESS_TOKEN + valueFrom: + secretKeyRef: + key: access_token + name: otel-collector-secret + diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-api-server/servicemonitor.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-api-server/servicemonitor.yaml new file mode 100644 index 0000000000..1037fe3792 --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-api-server/servicemonitor.yaml @@ -0,0 +1,38 @@ +--- +# Source: opentelemetry-kube-stack/templates/exporters/kube-api-server/servicemonitor.yaml +apiVersion: monitoring.coreos.com/v1 +kind: ServiceMonitor +metadata: + name: example-apiserver + namespace: default + labels: + app: opentelemetry-kube-stack-apiserver + helm.sh/chart: opentelemetry-kube-stack-0.16.0 + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + release: "example" +spec: + + endpoints: + - bearerTokenFile: /var/run/secrets/kubernetes.io/serviceaccount/token + port: https + scheme: https + metricRelabelings: + - action: drop + regex: apiserver_request_duration_seconds_bucket;(0.15|0.2|0.3|0.35|0.4|0.45|0.6|0.7|0.8|0.9|1.25|1.5|1.75|2|3|3.5|4|4.5|6|7|8|9|15|25|40|50) + sourceLabels: + - __name__ + - le + tlsConfig: + caFile: /var/run/secrets/kubernetes.io/serviceaccount/ca.crt + serverName: kubernetes + insecureSkipVerify: false + jobLabel: component + namespaceSelector: + matchNames: + - default + selector: + matchLabels: + component: apiserver + provider: kubernetes + diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-controller-manager/service.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-controller-manager/service.yaml new file mode 100644 index 0000000000..9dcfc972bf --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-controller-manager/service.yaml @@ -0,0 +1,25 @@ +--- +# Source: opentelemetry-kube-stack/templates/exporters/kube-controller-manager/service.yaml +apiVersion: v1 +kind: Service +metadata: + name: example-kube-controller-manager + labels: + app: opentelemetry-kube-stack-kube-controller-manager + jobLabel: kube-controller-manager + helm.sh/chart: opentelemetry-kube-stack-0.16.0 + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + release: "example" + namespace: kube-system +spec: + clusterIP: None + ports: + - name: http-metrics + port: 10257 + protocol: TCP + targetPort: 10257 + selector: + component: kube-controller-manager + type: ClusterIP + diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-controller-manager/servicemonitor.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-controller-manager/servicemonitor.yaml new file mode 100644 index 0000000000..9ef9dcb9ce --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-controller-manager/servicemonitor.yaml @@ -0,0 +1,31 @@ +--- +# Source: opentelemetry-kube-stack/templates/exporters/kube-controller-manager/servicemonitor.yaml +apiVersion: monitoring.coreos.com/v1 +kind: ServiceMonitor +metadata: + name: example-kube-controller-manager + namespace: default + labels: + app: opentelemetry-kube-stack-kube-controller-manager + helm.sh/chart: opentelemetry-kube-stack-0.16.0 + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + release: "example" +spec: + jobLabel: jobLabel + + selector: + matchLabels: + app: opentelemetry-kube-stack-kube-controller-manager + release: "example" + namespaceSelector: + matchNames: + - "kube-system" + endpoints: + - port: http-metrics + bearerTokenFile: /var/run/secrets/kubernetes.io/serviceaccount/token + scheme: https + tlsConfig: + caFile: /var/run/secrets/kubernetes.io/serviceaccount/ca.crt + insecureSkipVerify: true + diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-dns/service.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-dns/service.yaml new file mode 100644 index 0000000000..4b6f32aba5 --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-dns/service.yaml @@ -0,0 +1,28 @@ +--- +# Source: opentelemetry-kube-stack/templates/exporters/kube-dns/service.yaml +apiVersion: v1 +kind: Service +metadata: + name: example-kube-dns + labels: + app: opentelemetry-kube-stack-kube-dns + jobLabel: kube-dns + helm.sh/chart: opentelemetry-kube-stack-0.16.0 + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + release: "example" + namespace: kube-system +spec: + clusterIP: None + ports: + - name: http-metrics-dnsmasq + port: 10054 + protocol: TCP + targetPort: 10054 + - name: http-metrics-skydns + port: 10055 + protocol: TCP + targetPort: 10055 + selector: + k8s-app: kube-dns + diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-dns/servicemonitor.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-dns/servicemonitor.yaml new file mode 100644 index 0000000000..bda13b20d4 --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-dns/servicemonitor.yaml @@ -0,0 +1,29 @@ +--- +# Source: opentelemetry-kube-stack/templates/exporters/kube-dns/servicemonitor.yaml +apiVersion: monitoring.coreos.com/v1 +kind: ServiceMonitor +metadata: + name: example-kube-dns + namespace: default + labels: + app: opentelemetry-kube-stack-kube-dns + helm.sh/chart: opentelemetry-kube-stack-0.16.0 + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + release: "example" +spec: + jobLabel: jobLabel + + selector: + matchLabels: + app: opentelemetry-kube-stack-kube-dns + release: "example" + namespaceSelector: + matchNames: + - "kube-system" + endpoints: + - port: http-metrics-dnsmasq + bearerTokenFile: /var/run/secrets/kubernetes.io/serviceaccount/token + - port: http-metrics-skydns + bearerTokenFile: /var/run/secrets/kubernetes.io/serviceaccount/token + diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-etcd/service.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-etcd/service.yaml new file mode 100644 index 0000000000..ec97d4662b --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-etcd/service.yaml @@ -0,0 +1,24 @@ +--- +# Source: opentelemetry-kube-stack/templates/exporters/kube-etcd/service.yaml +apiVersion: v1 +kind: Service +metadata: + name: example-kube-etcd + labels: + app: opentelemetry-kube-stack-kube-etcd + jobLabel: kube-etcd + helm.sh/chart: opentelemetry-kube-stack-0.16.0 + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + release: "example" + namespace: kube-system +spec: + clusterIP: None + ports: + - name: http-metrics + port: 2381 + protocol: TCP + targetPort: 2381 + selector: + component: etcd + type: ClusterIP diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-etcd/servicemonitor.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-etcd/servicemonitor.yaml new file mode 100644 index 0000000000..006d61f678 --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-etcd/servicemonitor.yaml @@ -0,0 +1,27 @@ +--- +# Source: opentelemetry-kube-stack/templates/exporters/kube-etcd/servicemonitor.yaml +apiVersion: monitoring.coreos.com/v1 +kind: ServiceMonitor +metadata: + name: example-kube-etcd + namespace: default + labels: + app: opentelemetry-kube-stack-kube-etcd + helm.sh/chart: opentelemetry-kube-stack-0.16.0 + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + release: "example" +spec: + jobLabel: jobLabel + + selector: + matchLabels: + app: opentelemetry-kube-stack-kube-etcd + release: "example" + namespaceSelector: + matchNames: + - "kube-system" + endpoints: + - port: http-metrics + bearerTokenFile: /var/run/secrets/kubernetes.io/serviceaccount/token + diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-proxy/service.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-proxy/service.yaml new file mode 100644 index 0000000000..8af7794d9b --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-proxy/service.yaml @@ -0,0 +1,24 @@ +--- +# Source: opentelemetry-kube-stack/templates/exporters/kube-proxy/service.yaml +apiVersion: v1 +kind: Service +metadata: + name: example-kube-proxy + labels: + app: opentelemetry-kube-stack-kube-proxy + jobLabel: kube-proxy + helm.sh/chart: opentelemetry-kube-stack-0.16.0 + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + release: "example" + namespace: kube-system +spec: + clusterIP: None + ports: + - name: http-metrics + port: 10249 + protocol: TCP + targetPort: 10249 + selector: + k8s-app: kube-proxy + type: ClusterIP diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-proxy/servicemonitor.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-proxy/servicemonitor.yaml new file mode 100644 index 0000000000..4035b3cc66 --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-proxy/servicemonitor.yaml @@ -0,0 +1,27 @@ +--- +# Source: opentelemetry-kube-stack/templates/exporters/kube-proxy/servicemonitor.yaml +apiVersion: monitoring.coreos.com/v1 +kind: ServiceMonitor +metadata: + name: example-kube-proxy + namespace: default + labels: + app: opentelemetry-kube-stack-kube-proxy + helm.sh/chart: opentelemetry-kube-stack-0.16.0 + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + release: "example" +spec: + jobLabel: jobLabel + + selector: + matchLabels: + app: opentelemetry-kube-stack-kube-proxy + release: "example" + namespaceSelector: + matchNames: + - "kube-system" + endpoints: + - port: http-metrics + bearerTokenFile: /var/run/secrets/kubernetes.io/serviceaccount/token + diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-scheduler/service.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-scheduler/service.yaml new file mode 100644 index 0000000000..ef5a5763d7 --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-scheduler/service.yaml @@ -0,0 +1,24 @@ +--- +# Source: opentelemetry-kube-stack/templates/exporters/kube-scheduler/service.yaml +apiVersion: v1 +kind: Service +metadata: + name: example-kube-scheduler + labels: + app: opentelemetry-kube-stack-kube-scheduler + jobLabel: kube-scheduler + helm.sh/chart: opentelemetry-kube-stack-0.16.0 + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + release: "example" + namespace: kube-system +spec: + clusterIP: None + ports: + - name: http-metrics + port: 10259 + protocol: TCP + targetPort: 10259 + selector: + component: kube-scheduler + type: ClusterIP diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-scheduler/servicemonitor.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-scheduler/servicemonitor.yaml new file mode 100644 index 0000000000..8fb50913e1 --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-scheduler/servicemonitor.yaml @@ -0,0 +1,31 @@ +--- +# Source: opentelemetry-kube-stack/templates/exporters/kube-scheduler/servicemonitor.yaml +apiVersion: monitoring.coreos.com/v1 +kind: ServiceMonitor +metadata: + name: example-kube-scheduler + namespace: default + labels: + app: opentelemetry-kube-stack-kube-scheduler + helm.sh/chart: opentelemetry-kube-stack-0.16.0 + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + release: "example" +spec: + jobLabel: jobLabel + + selector: + matchLabels: + app: opentelemetry-kube-stack-kube-scheduler + release: "example" + namespaceSelector: + matchNames: + - "kube-system" + endpoints: + - port: http-metrics + bearerTokenFile: /var/run/secrets/kubernetes.io/serviceaccount/token + scheme: https + tlsConfig: + caFile: /var/run/secrets/kubernetes.io/serviceaccount/ca.crt + insecureSkipVerify: true + diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/hooks.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/hooks.yaml new file mode 100644 index 0000000000..df09c1e80b --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/hooks.yaml @@ -0,0 +1,65 @@ +--- +# Source: opentelemetry-kube-stack/templates/hooks.yaml +apiVersion: v1 +kind: ServiceAccount +metadata: + name: delete-resources-sa + annotations: + "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded +--- +# Source: opentelemetry-kube-stack/templates/hooks.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + name: delete-resources-role + annotations: + "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded +rules: + - apiGroups: + - opentelemetry.io + resources: + - instrumentations + - opampbridges + - opentelemetrycollectors + verbs: + - get + - list + - delete +--- +# Source: opentelemetry-kube-stack/templates/hooks.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + name: delete-resources-rolebinding + annotations: + "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: delete-resources-role +subjects: + - kind: ServiceAccount + name: delete-resources-sa +--- +# Source: opentelemetry-kube-stack/templates/hooks.yaml +apiVersion: batch/v1 +kind: Job +metadata: + name: opentelemetry-kube-stack-pre-delete-job + annotations: + "helm.sh/hook": pre-delete + "helm.sh/hook-delete-policy": hook-succeeded,hook-failed +spec: + template: + spec: + restartPolicy: Never + serviceAccountName: delete-resources-sa + containers: + - name: delete-resources + image: "rancher/kubectl:v1.34.1" + args: + - "delete" + - "instrumentations,opampbridges,opentelemetrycollectors" + - "-l" + - "helm.sh/chart=opentelemetry-kube-stack-0.16.0" + diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/kube-state-metrics/clusterrolebinding.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/kube-state-metrics/clusterrolebinding.yaml new file mode 100644 index 0000000000..5abd833760 --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/kube-state-metrics/clusterrolebinding.yaml @@ -0,0 +1,23 @@ +--- +# Source: opentelemetry-kube-stack/charts/kube-state-metrics/templates/clusterrolebinding.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + labels: + helm.sh/chart: kube-state-metrics-6.3.0 + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/component: metrics + app.kubernetes.io/part-of: kube-state-metrics + app.kubernetes.io/name: kube-state-metrics + app.kubernetes.io/instance: example + app.kubernetes.io/version: "2.17.0" + release: example + name: example-kube-state-metrics +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: example-kube-state-metrics +subjects: +- kind: ServiceAccount + name: example-kube-state-metrics + namespace: default diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/kube-state-metrics/deployment.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/kube-state-metrics/deployment.yaml new file mode 100644 index 0000000000..06bb5ab7d8 --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/kube-state-metrics/deployment.yaml @@ -0,0 +1,89 @@ +--- +# Source: opentelemetry-kube-stack/charts/kube-state-metrics/templates/deployment.yaml +apiVersion: apps/v1 +kind: Deployment +metadata: + name: example-kube-state-metrics + namespace: default + labels: + helm.sh/chart: kube-state-metrics-6.3.0 + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/component: metrics + app.kubernetes.io/part-of: kube-state-metrics + app.kubernetes.io/name: kube-state-metrics + app.kubernetes.io/instance: example + app.kubernetes.io/version: "2.17.0" + release: example +spec: + selector: + matchLabels: + app.kubernetes.io/name: kube-state-metrics + app.kubernetes.io/instance: example + replicas: 1 + strategy: + type: RollingUpdate + revisionHistoryLimit: 10 + template: + metadata: + labels: + helm.sh/chart: kube-state-metrics-6.3.0 + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/component: metrics + app.kubernetes.io/part-of: kube-state-metrics + app.kubernetes.io/name: kube-state-metrics + app.kubernetes.io/instance: example + app.kubernetes.io/version: "2.17.0" + release: example + spec: + automountServiceAccountToken: true + hostNetwork: false + serviceAccountName: example-kube-state-metrics + securityContext: + fsGroup: 65534 + runAsGroup: 65534 + runAsNonRoot: true + runAsUser: 65534 + seccompProfile: + type: RuntimeDefault + dnsPolicy: ClusterFirst + containers: + - name: kube-state-metrics + args: + - --port=8080 + - --resources=certificatesigningrequests,configmaps,cronjobs,daemonsets,deployments,endpoints,horizontalpodautoscalers,ingresses,jobs,leases,limitranges,mutatingwebhookconfigurations,namespaces,networkpolicies,nodes,persistentvolumeclaims,persistentvolumes,poddisruptionbudgets,pods,replicasets,replicationcontrollers,resourcequotas,secrets,services,statefulsets,storageclasses,validatingwebhookconfigurations,volumeattachments + imagePullPolicy: IfNotPresent + image: registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.17.0 + ports: + - containerPort: 8080 + name: http + livenessProbe: + failureThreshold: 3 + httpGet: + httpHeaders: + path: /livez + port: 8080 + scheme: HTTP + initialDelaySeconds: 5 + periodSeconds: 10 + successThreshold: 1 + timeoutSeconds: 5 + readinessProbe: + failureThreshold: 3 + httpGet: + httpHeaders: + path: /readyz + port: 8081 + scheme: HTTP + initialDelaySeconds: 5 + periodSeconds: 10 + successThreshold: 1 + timeoutSeconds: 5 + resources: + {} + securityContext: + allowPrivilegeEscalation: false + capabilities: + drop: + - ALL + readOnlyRootFilesystem: true + diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/kube-state-metrics/role.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/kube-state-metrics/role.yaml new file mode 100644 index 0000000000..96e9f39ebc --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/kube-state-metrics/role.yaml @@ -0,0 +1,158 @@ +--- +# Source: opentelemetry-kube-stack/charts/kube-state-metrics/templates/role.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + labels: + helm.sh/chart: kube-state-metrics-6.3.0 + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/component: metrics + app.kubernetes.io/part-of: kube-state-metrics + app.kubernetes.io/name: kube-state-metrics + app.kubernetes.io/instance: example + app.kubernetes.io/version: "2.17.0" + release: example + name: example-kube-state-metrics +rules: + +- apiGroups: ["certificates.k8s.io"] + resources: + - certificatesigningrequests + verbs: ["list", "watch"] + +- apiGroups: [""] + resources: + - configmaps + verbs: ["list", "watch"] + +- apiGroups: ["batch"] + resources: + - cronjobs + verbs: ["list", "watch"] + +- apiGroups: ["apps"] + resources: + - daemonsets + verbs: ["list", "watch"] + +- apiGroups: ["apps"] + resources: + - deployments + verbs: ["list", "watch"] + +- apiGroups: [""] + resources: + - endpoints + verbs: ["list", "watch"] + +- apiGroups: ["autoscaling"] + resources: + - horizontalpodautoscalers + verbs: ["list", "watch"] + +- apiGroups: ["networking.k8s.io"] + resources: + - ingresses + verbs: ["list", "watch"] + +- apiGroups: ["batch"] + resources: + - jobs + verbs: ["list", "watch"] + +- apiGroups: ["coordination.k8s.io"] + resources: + - leases + verbs: ["list", "watch"] + +- apiGroups: [""] + resources: + - limitranges + verbs: ["list", "watch"] + +- apiGroups: ["admissionregistration.k8s.io"] + resources: + - mutatingwebhookconfigurations + verbs: ["list", "watch"] + +- apiGroups: [""] + resources: + - namespaces + verbs: ["list", "watch"] + +- apiGroups: ["networking.k8s.io"] + resources: + - networkpolicies + verbs: ["list", "watch"] + +- apiGroups: [""] + resources: + - nodes + verbs: ["list", "watch"] + +- apiGroups: [""] + resources: + - persistentvolumeclaims + verbs: ["list", "watch"] + +- apiGroups: [""] + resources: + - persistentvolumes + verbs: ["list", "watch"] + +- apiGroups: ["policy"] + resources: + - poddisruptionbudgets + verbs: ["list", "watch"] + +- apiGroups: [""] + resources: + - pods + verbs: ["list", "watch"] + +- apiGroups: ["apps"] + resources: + - replicasets + verbs: ["list", "watch"] + +- apiGroups: [""] + resources: + - replicationcontrollers + verbs: ["list", "watch"] + +- apiGroups: [""] + resources: + - resourcequotas + verbs: ["list", "watch"] + +- apiGroups: [""] + resources: + - secrets + verbs: ["list", "watch"] + +- apiGroups: [""] + resources: + - services + verbs: ["list", "watch"] + +- apiGroups: ["apps"] + resources: + - statefulsets + verbs: ["list", "watch"] + +- apiGroups: ["storage.k8s.io"] + resources: + - storageclasses + verbs: ["list", "watch"] + +- apiGroups: ["admissionregistration.k8s.io"] + resources: + - validatingwebhookconfigurations + verbs: ["list", "watch"] + +- apiGroups: ["storage.k8s.io"] + resources: + - volumeattachments + verbs: ["list", "watch"] + + diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/kube-state-metrics/service.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/kube-state-metrics/service.yaml new file mode 100644 index 0000000000..239a6407b8 --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/kube-state-metrics/service.yaml @@ -0,0 +1,30 @@ +--- +# Source: opentelemetry-kube-stack/charts/kube-state-metrics/templates/service.yaml +apiVersion: v1 +kind: Service +metadata: + name: example-kube-state-metrics + namespace: default + labels: + helm.sh/chart: kube-state-metrics-6.3.0 + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/component: metrics + app.kubernetes.io/part-of: kube-state-metrics + app.kubernetes.io/name: kube-state-metrics + app.kubernetes.io/instance: example + app.kubernetes.io/version: "2.17.0" + release: example + annotations: + prometheus.io/scrape: 'true' +spec: + type: "ClusterIP" + ports: + - name: http + protocol: TCP + port: 8080 + targetPort: http + + selector: + app.kubernetes.io/name: kube-state-metrics + app.kubernetes.io/instance: example + diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/kube-state-metrics/serviceaccount.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/kube-state-metrics/serviceaccount.yaml new file mode 100644 index 0000000000..188ece6498 --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/kube-state-metrics/serviceaccount.yaml @@ -0,0 +1,17 @@ +--- +# Source: opentelemetry-kube-stack/charts/kube-state-metrics/templates/serviceaccount.yaml +apiVersion: v1 +kind: ServiceAccount +automountServiceAccountToken: true +metadata: + labels: + helm.sh/chart: kube-state-metrics-6.3.0 + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/component: metrics + app.kubernetes.io/part-of: kube-state-metrics + app.kubernetes.io/name: kube-state-metrics + app.kubernetes.io/instance: example + app.kubernetes.io/version: "2.17.0" + release: example + name: example-kube-state-metrics + namespace: default diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/kube-state-metrics/servicemonitor.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/kube-state-metrics/servicemonitor.yaml new file mode 100644 index 0000000000..7eccbfc900 --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/kube-state-metrics/servicemonitor.yaml @@ -0,0 +1,26 @@ +--- +# Source: opentelemetry-kube-stack/charts/kube-state-metrics/templates/servicemonitor.yaml +apiVersion: monitoring.coreos.com/v1 +kind: ServiceMonitor +metadata: + name: example-kube-state-metrics + namespace: default + labels: + helm.sh/chart: kube-state-metrics-6.3.0 + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/component: metrics + app.kubernetes.io/part-of: kube-state-metrics + app.kubernetes.io/name: kube-state-metrics + app.kubernetes.io/instance: example + app.kubernetes.io/version: "2.17.0" + release: example +spec: + jobLabel: app.kubernetes.io/name + selector: + matchLabels: + app.kubernetes.io/name: kube-state-metrics + app.kubernetes.io/instance: example + endpoints: + - port: http + honorLabels: true + diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml new file mode 100644 index 0000000000..17585fa86a --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml @@ -0,0 +1,193 @@ +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/admission-webhooks/operator-webhook-with-cert-manager.yaml +apiVersion: admissionregistration.k8s.io/v1 +kind: MutatingWebhookConfiguration +metadata: + annotations: + cert-manager.io/inject-ca-from: default/example-opentelemetry-operator-serving-cert + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: webhook + name: example-opentelemetry-operator-mutation +webhooks: + - admissionReviewVersions: + - v1 + clientConfig: + service: + name: example-opentelemetry-operator-webhook + namespace: default + path: /mutate-opentelemetry-io-v1alpha1-instrumentation + port: 443 + failurePolicy: Ignore + name: minstrumentation.kb.io + rules: + - apiGroups: + - opentelemetry.io + apiVersions: + - v1alpha1 + operations: + - CREATE + - UPDATE + resources: + - instrumentations + scope: Namespaced + sideEffects: None + timeoutSeconds: 10 + - admissionReviewVersions: + - v1 + clientConfig: + service: + name: example-opentelemetry-operator-webhook + namespace: default + path: /mutate-opentelemetry-io-v1beta1-opentelemetrycollector + port: 443 + failurePolicy: Ignore + name: mopentelemetrycollectorbeta.kb.io + rules: + - apiGroups: + - opentelemetry.io + apiVersions: + - v1beta1 + operations: + - CREATE + - UPDATE + resources: + - opentelemetrycollectors + scope: Namespaced + sideEffects: None + timeoutSeconds: 10 + - admissionReviewVersions: + - v1 + clientConfig: + service: + name: example-opentelemetry-operator-webhook + namespace: default + path: /mutate-v1-pod + port: 443 + failurePolicy: Ignore + name: mpod.kb.io + rules: + - apiGroups: + - "" + apiVersions: + - v1 + operations: + - CREATE + resources: + - pods + scope: Namespaced + sideEffects: None + timeoutSeconds: 10 +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/admission-webhooks/operator-webhook-with-cert-manager.yaml +apiVersion: admissionregistration.k8s.io/v1 +kind: ValidatingWebhookConfiguration +metadata: + annotations: + cert-manager.io/inject-ca-from: default/example-opentelemetry-operator-serving-cert + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: webhook + name: example-opentelemetry-operator-validation +webhooks: + - admissionReviewVersions: + - v1 + clientConfig: + service: + name: example-opentelemetry-operator-webhook + namespace: default + path: /validate-opentelemetry-io-v1alpha1-instrumentation + port: 443 + failurePolicy: Ignore + name: vinstrumentationcreateupdate.kb.io + rules: + - apiGroups: + - opentelemetry.io + apiVersions: + - v1alpha1 + operations: + - CREATE + - UPDATE + resources: + - instrumentations + scope: Namespaced + sideEffects: None + timeoutSeconds: 10 + - admissionReviewVersions: + - v1 + clientConfig: + service: + name: example-opentelemetry-operator-webhook + namespace: default + path: /validate-opentelemetry-io-v1alpha1-instrumentation + port: 443 + failurePolicy: Ignore + name: vinstrumentationdelete.kb.io + rules: + - apiGroups: + - opentelemetry.io + apiVersions: + - v1alpha1 + operations: + - DELETE + resources: + - instrumentations + scope: Namespaced + sideEffects: None + timeoutSeconds: 10 + - admissionReviewVersions: + - v1 + clientConfig: + service: + name: example-opentelemetry-operator-webhook + namespace: default + path: /validate-opentelemetry-io-v1beta1-opentelemetrycollector + port: 443 + failurePolicy: Ignore + name: vopentelemetrycollectorcreateupdatebeta.kb.io + rules: + - apiGroups: + - opentelemetry.io + apiVersions: + - v1beta1 + operations: + - CREATE + - UPDATE + resources: + - opentelemetrycollectors + scope: Namespaced + sideEffects: None + timeoutSeconds: 10 + - admissionReviewVersions: + - v1 + clientConfig: + service: + name: example-opentelemetry-operator-webhook + namespace: default + path: /validate-opentelemetry-io-v1beta1-opentelemetrycollector + port: 443 + failurePolicy: Ignore + name: vopentelemetrycollectordeletebeta.kb.io + rules: + - apiGroups: + - opentelemetry.io + apiVersions: + - v1beta1 + operations: + - DELETE + resources: + - opentelemetrycollectors + scope: Namespaced + sideEffects: None + timeoutSeconds: 10 + diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/admission-webhooks/operator-webhook.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/admission-webhooks/operator-webhook.yaml new file mode 100644 index 0000000000..5b9ff5511d --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/admission-webhooks/operator-webhook.yaml @@ -0,0 +1,3 @@ +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/admission-webhooks/operator-webhook.yaml +--- diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/certmanager.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/certmanager.yaml new file mode 100644 index 0000000000..e8615238d0 --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/certmanager.yaml @@ -0,0 +1,44 @@ +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/certmanager.yaml +apiVersion: cert-manager.io/v1 +kind: Certificate +metadata: + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: webhook + name: example-opentelemetry-operator-serving-cert + namespace: default +spec: + dnsNames: + - example-opentelemetry-operator-webhook.default.svc + - example-opentelemetry-operator-webhook.default.svc.cluster.local + issuerRef: + kind: Issuer + name: example-opentelemetry-operator-selfsigned-issuer + secretName: example-opentelemetry-operator-controller-manager-service-cert + subject: + organizationalUnits: + - example-opentelemetry-operator +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/certmanager.yaml +apiVersion: cert-manager.io/v1 +kind: Issuer +metadata: + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: webhook + name: example-opentelemetry-operator-selfsigned-issuer + namespace: default +spec: + selfSigned: {} + diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/clusterrole.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/clusterrole.yaml new file mode 100644 index 0000000000..2037050533 --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/clusterrole.yaml @@ -0,0 +1,410 @@ +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/clusterrole.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: controller-manager + name: example-opentelemetry-operator-manager +rules: + - apiGroups: + - "" + resources: + - configmaps + - persistentvolumeclaims + - persistentvolumes + - pods + - serviceaccounts + - services + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - "" + resources: + - events + verbs: + - create + - get + - list + - patch + - watch + - apiGroups: + - "" + resources: + - namespaces + verbs: + - list + - watch + - apiGroups: + - "" + resources: + - namespaces/status + verbs: + - get + - list + - watch + - apiGroups: + - "" + resources: + - nodes/spec + verbs: + - get + - list + - watch + - apiGroups: + - "" + resources: + - pods/status + verbs: + - get + - list + - watch + - apiGroups: + - "" + resources: + - replicationcontrollers + verbs: + - get + - list + - watch + - apiGroups: + - "" + resources: + - replicationcontrollers/status + verbs: + - get + - list + - watch + - apiGroups: + - "" + resources: + - resourcequotas + verbs: + - get + - list + - watch + - apiGroups: + - apps + resources: + - daemonsets + - deployments + - statefulsets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - apps + - extensions + resources: + - replicasets + verbs: + - get + - list + - watch + - apiGroups: + - extensions + resources: + - daemonsets + verbs: + - get + - list + - watch + - apiGroups: + - extensions + resources: + - deployments + verbs: + - get + - list + - watch + - apiGroups: + - autoscaling + resources: + - horizontalpodautoscalers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - batch + resources: + - jobs + verbs: + - get + - list + - watch + - apiGroups: + - batch + resources: + - cronjobs + verbs: + - get + - list + - watch + - apiGroups: + - "" + resources: + - nodes/proxy + verbs: + - get + - apiGroups: + - "" + resources: + - nodes/stats + verbs: + - get + - apiGroups: + - config.openshift.io + resources: + - infrastructures + - infrastructures/status + verbs: + - get + - list + - watch + - apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - get + - list + - update + - apiGroups: + - discovery.k8s.io + resources: + - endpointslices + verbs: + - get + - list + - apiGroups: + - events.k8s.io + resources: + - events + verbs: + - create + - list + - patch + - watch + - apiGroups: + - gateway.networking.k8s.io + resources: + - httproutes + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - monitoring.coreos.com + resources: + - podmonitors + - servicemonitors + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - networking.k8s.io + resources: + - ingresses + - networkpolicies + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - opentelemetry.io + resources: + - instrumentations + verbs: + - get + - list + - patch + - update + - watch + - apiGroups: + - opentelemetry.io + resources: + - opampbridges + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - opentelemetry.io + resources: + - opampbridges/finalizers + verbs: + - update + - apiGroups: + - opentelemetry.io + resources: + - opampbridges/status + verbs: + - get + - patch + - update + - apiGroups: + - opentelemetry.io + resources: + - opentelemetrycollectors + verbs: + - get + - list + - patch + - update + - watch + - apiGroups: + - opentelemetry.io + resources: + - opentelemetrycollectors/finalizers + verbs: + - get + - patch + - update + - apiGroups: + - opentelemetry.io + resources: + - opentelemetrycollectors/status + verbs: + - get + - patch + - update + - apiGroups: + - policy + resources: + - poddisruptionbudgets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - route.openshift.io + resources: + - routes + - routes/custom-host + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - opentelemetry.io + resources: + - targetallocators + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - opentelemetry.io + resources: + - targetallocators/status + verbs: + - get + - patch + - update + - apiGroups: + - opentelemetry.io + resources: + - targetallocators/finalizers + verbs: + - get + - patch + - update + - apiGroups: + - cert-manager.io + resources: + - issuers + - certificaterequests + - certificates + verbs: + - create + - get + - list + - watch + - update + - patch + - delete + - apiGroups: + - authentication.k8s.io + resources: + - tokenreviews + verbs: + - create + - apiGroups: + - authorization.k8s.io + resources: + - subjectaccessreviews + verbs: + - create +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/clusterrole.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: controller-manager + name: example-opentelemetry-operator-metrics +rules: + - nonResourceURLs: + - /metrics + verbs: + - get + + diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/clusterrolebinding.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/clusterrolebinding.yaml new file mode 100644 index 0000000000..4acb7d53f5 --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/clusterrolebinding.yaml @@ -0,0 +1,24 @@ +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/clusterrolebinding.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: controller-manager + name: example-opentelemetry-operator-manager +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: example-opentelemetry-operator-manager +subjects: + - kind: ServiceAccount + name: opentelemetry-operator + namespace: default + + diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/deployment.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/deployment.yaml new file mode 100644 index 0000000000..c775cd1cf3 --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/deployment.yaml @@ -0,0 +1,105 @@ +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/deployment.yaml +apiVersion: apps/v1 +kind: Deployment +metadata: + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: controller-manager + name: example-opentelemetry-operator + namespace: default +spec: + replicas: 1 + revisionHistoryLimit: 10 + selector: + matchLabels: + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/component: controller-manager + template: + metadata: + annotations: + kubectl.kubernetes.io/default-container: manager + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: controller-manager + spec: + automountServiceAccountToken: true + hostNetwork: false + containers: + - args: + - --metrics-addr=0.0.0.0:8443 + - --metrics-secure=true + - --enable-leader-election + - --health-probe-addr=:8081 + - --webhook-port=9443 + - --collector-image=otel/opentelemetry-collector-k8s:0.151.0 + command: + - /manager + env: + - name: SERVICE_ACCOUNT_NAME + valueFrom: + fieldRef: + fieldPath: spec.serviceAccountName + - name: ENABLE_WEBHOOKS + value: "true" + image: "ghcr.io/open-telemetry/opentelemetry-operator/opentelemetry-operator:0.151.0" + name: manager + imagePullPolicy: IfNotPresent + ports: + - containerPort: 8443 + name: metrics + protocol: TCP + - containerPort: 9443 + name: webhook-server + protocol: TCP + livenessProbe: + httpGet: + path: /healthz + port: 8081 + initialDelaySeconds: 15 + periodSeconds: 20 + readinessProbe: + httpGet: + path: /readyz + port: 8081 + initialDelaySeconds: 5 + periodSeconds: 10 + resources: + {} + volumeMounts: + - mountPath: /tmp/k8s-webhook-server/serving-certs + name: cert + readOnly: true + securityContext: + allowPrivilegeEscalation: false + capabilities: + drop: + - ALL + runAsNonRoot: true + seccompProfile: + type: RuntimeDefault + nodeSelector: + kubernetes.io/os: linux + serviceAccountName: opentelemetry-operator + terminationGracePeriodSeconds: 10 + volumes: + - name: cert + secret: + defaultMode: 420 + secretName: example-opentelemetry-operator-controller-manager-service-cert + securityContext: + fsGroup: 65532 + runAsGroup: 65532 + runAsNonRoot: true + runAsUser: 65532 + diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/role.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/role.yaml new file mode 100644 index 0000000000..b5339517a2 --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/role.yaml @@ -0,0 +1,200 @@ +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/role.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: controller-manager + name: example-opentelemetry-operator-leader-election + namespace: default +rules: + - apiGroups: + - "" + resources: + - configmaps + - pods + - serviceaccounts + - services + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - "" + resources: + - events + verbs: + - create + - patch + - apiGroups: + - "" + resources: + - namespaces + - secrets + verbs: + - get + - list + - watch + - apiGroups: + - apps + resources: + - daemonsets + - deployments + - statefulsets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - apps + resources: + - replicasets + verbs: + - get + - list + - watch + - apiGroups: + - autoscaling + resources: + - horizontalpodautoscalers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - batch + resources: + - jobs + verbs: + - get + - list + - watch + - apiGroups: + - config.openshift.io + resources: + - infrastructures + - infrastructures/status + verbs: + - get + - list + - watch + - apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - get + - list + - update + - apiGroups: + - monitoring.coreos.com + resources: + - podmonitors + - servicemonitors + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - opentelemetry.io + resources: + - instrumentations + - opentelemetrycollectors + verbs: + - get + - list + - patch + - update + - watch + - apiGroups: + - opentelemetry.io + resources: + - opampbridges + - targetallocators + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - opentelemetry.io + resources: + - opampbridges/finalizers + verbs: + - update + - apiGroups: + - opentelemetry.io + resources: + - opampbridges/status + - opentelemetrycollectors/finalizers + - opentelemetrycollectors/status + - targetallocators/status + - targetallocators/finalizers + verbs: + - get + - patch + - update + - apiGroups: + - policy + resources: + - poddisruptionbudgets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - route.openshift.io + resources: + - routes + - routes/custom-host + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/rolebinding.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/rolebinding.yaml new file mode 100644 index 0000000000..ae376e80c9 --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/rolebinding.yaml @@ -0,0 +1,24 @@ +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/rolebinding.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: controller-manager + name: example-opentelemetry-operator-leader-election + namespace: default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: example-opentelemetry-operator-leader-election +subjects: + - kind: ServiceAccount + name: opentelemetry-operator + namespace: default + diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/service.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/service.yaml new file mode 100644 index 0000000000..0a3006d80f --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/service.yaml @@ -0,0 +1,48 @@ +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/service.yaml +apiVersion: v1 +kind: Service +metadata: + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: controller-manager + name: example-opentelemetry-operator + namespace: default +spec: + ports: + - name: metrics + port: 8443 + protocol: TCP + targetPort: metrics + selector: + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/component: controller-manager +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/service.yaml +apiVersion: v1 +kind: Service +metadata: + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: controller-manager + name: example-opentelemetry-operator-webhook + namespace: default +spec: + ports: + - port: 443 + protocol: TCP + targetPort: webhook-server + selector: + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/component: controller-manager + diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/serviceaccount.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/serviceaccount.yaml new file mode 100644 index 0000000000..c6ba25dbac --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/serviceaccount.yaml @@ -0,0 +1,17 @@ +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/serviceaccount.yaml +apiVersion: v1 +kind: ServiceAccount +automountServiceAccountToken: true +metadata: + name: opentelemetry-operator + namespace: default + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: controller-manager + diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml new file mode 100644 index 0000000000..9039160e03 --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml @@ -0,0 +1,54 @@ +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/tests/test-certmanager-connection.yaml +apiVersion: v1 +kind: Pod +metadata: + name: "example-opentelemetry-operator-cert-manager" + namespace: default + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: webhook + annotations: + "helm.sh/hook": test +spec: + containers: + - name: wget + image: "busybox:latest" + env: + - name: CERT_MANAGER_CLUSTERIP + value: "cert-manager-webhook" + - name: CERT_MANAGER_PORT + value: "443" + command: + - sh + - -c + # The following shell script tests if the cert-manager service is up. If the service is up, when we try + # to wget its exposed port, we will get an HTTP error 400. + - | + wget_output=$(wget -q "$CERT_MANAGER_CLUSTERIP:$CERT_MANAGER_PORT") + if wget_output=="wget: server returned error: HTTP/1.0 400 Bad Request" + then exit 0 + else exit 1 + fi + securityContext: + allowPrivilegeEscalation: false + capabilities: + drop: + - ALL + runAsNonRoot: true + seccompProfile: + type: RuntimeDefault + restartPolicy: Never + nodeSelector: + kubernetes.io/os: linux + securityContext: + fsGroup: 65532 + runAsGroup: 65532 + runAsNonRoot: true + runAsUser: 65532 + diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/tests/test-service-connection.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/tests/test-service-connection.yaml new file mode 100644 index 0000000000..88e0e0bc24 --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/tests/test-service-connection.yaml @@ -0,0 +1,107 @@ +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/tests/test-service-connection.yaml +apiVersion: v1 +kind: Pod +metadata: + name: "example-opentelemetry-operator-metrics" + namespace: default + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: controller-manager + annotations: + "helm.sh/hook": test +spec: + containers: + - name: wget + image: "busybox:latest" + env: + - name: MANAGER_METRICS_SERVICE_CLUSTERIP + value: "example-opentelemetry-operator" + - name: MANAGER_METRICS_SERVICE_PORT + value: "8443" + command: + - sh + - -c + # The following shell script tests if the controller-manager-metrics-service is up. + # If the service is up, when we try to wget its exposed port, we will get an HTTP error 400. + - | + wget_output=$(wget -q "$MANAGER_METRICS_SERVICE_CLUSTERIP:$MANAGER_METRICS_SERVICE_PORT") + if wget_output=="wget: server returned error: HTTP/1.0 400 Bad Request" + then exit 0 + else exit 1 + fi + securityContext: + allowPrivilegeEscalation: false + capabilities: + drop: + - ALL + runAsNonRoot: true + seccompProfile: + type: RuntimeDefault + restartPolicy: Never + nodeSelector: + kubernetes.io/os: linux + securityContext: + fsGroup: 65532 + runAsGroup: 65532 + runAsNonRoot: true + runAsUser: 65532 +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/tests/test-service-connection.yaml +apiVersion: v1 +kind: Pod +metadata: + name: "example-opentelemetry-operator-webhook" + namespace: default + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: controller-manager + annotations: + "helm.sh/hook": test +spec: + containers: + - name: wget + image: "busybox:latest" + env: + - name: WEBHOOK_SERVICE_CLUSTERIP + value: "example-opentelemetry-operator-webhook" + - name: WEBHOOK_SERVICE_PORT + value: "443" + command: + - sh + - -c + # The following shell script tests if the webhook service is up. If the service is up, when we try + # to wget its exposed port, we will get an HTTP error 400. + - | + wget_output=$(wget -q "$WEBHOOK_SERVICE_CLUSTERIP:$WEBHOOK_SERVICE_PORT") + if wget_output=="wget: server returned error: HTTP/1.0 400 Bad Request" + then exit 0 + else exit 1 + fi + securityContext: + allowPrivilegeEscalation: false + capabilities: + drop: + - ALL + runAsNonRoot: true + seccompProfile: + type: RuntimeDefault + restartPolicy: Never + nodeSelector: + kubernetes.io/os: linux + securityContext: + fsGroup: 65532 + runAsGroup: 65532 + runAsNonRoot: true + runAsUser: 65532 + diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/prometheus-node-exporter/daemonset.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/prometheus-node-exporter/daemonset.yaml new file mode 100644 index 0000000000..1758e4e4be --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/prometheus-node-exporter/daemonset.yaml @@ -0,0 +1,134 @@ +--- +# Source: opentelemetry-kube-stack/charts/prometheus-node-exporter/templates/daemonset.yaml +apiVersion: apps/v1 +kind: DaemonSet +metadata: + name: example-prometheus-node-exporter + namespace: default + labels: + helm.sh/chart: prometheus-node-exporter-4.48.0 + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/component: metrics + app.kubernetes.io/part-of: prometheus-node-exporter + app.kubernetes.io/name: prometheus-node-exporter + app.kubernetes.io/instance: example + app.kubernetes.io/version: "1.9.1" + release: example +spec: + selector: + matchLabels: + app.kubernetes.io/name: prometheus-node-exporter + app.kubernetes.io/instance: example + revisionHistoryLimit: 10 + updateStrategy: + rollingUpdate: + maxUnavailable: 1 + type: RollingUpdate + template: + metadata: + annotations: + cluster-autoscaler.kubernetes.io/safe-to-evict: "true" + labels: + helm.sh/chart: prometheus-node-exporter-4.48.0 + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/component: metrics + app.kubernetes.io/part-of: prometheus-node-exporter + app.kubernetes.io/name: prometheus-node-exporter + app.kubernetes.io/instance: example + app.kubernetes.io/version: "1.9.1" + release: example + jobLabel: node-exporter + spec: + automountServiceAccountToken: false + securityContext: + fsGroup: 65534 + runAsGroup: 65534 + runAsNonRoot: true + runAsUser: 65534 + serviceAccountName: example-prometheus-node-exporter + containers: + - name: node-exporter + image: quay.io/prometheus/node-exporter:v1.9.1 + imagePullPolicy: IfNotPresent + args: + - --path.procfs=/host/proc + - --path.sysfs=/host/sys + - --path.rootfs=/host/root + - --path.udev.data=/host/root/run/udev/data + - --web.listen-address=[$(HOST_IP)]:9100 + - --collector.filesystem.mount-points-exclude=^/(dev|proc|sys|var/lib/docker/.+|var/lib/kubelet/.+)($|/) + - --collector.filesystem.fs-types-exclude=^(autofs|binfmt_misc|bpf|cgroup2?|configfs|debugfs|devpts|devtmpfs|fusectl|hugetlbfs|iso9660|mqueue|nsfs|overlay|proc|procfs|pstore|rpc_pipefs|securityfs|selinuxfs|squashfs|sysfs|tracefs)$ + securityContext: + readOnlyRootFilesystem: true + env: + - name: HOST_IP + value: 0.0.0.0 + ports: + - name: http-metrics + containerPort: 9100 + protocol: TCP + livenessProbe: + failureThreshold: 3 + httpGet: + httpHeaders: + path: / + port: http-metrics + scheme: HTTP + initialDelaySeconds: 0 + periodSeconds: 10 + successThreshold: 1 + timeoutSeconds: 1 + readinessProbe: + failureThreshold: 3 + httpGet: + httpHeaders: + path: / + port: http-metrics + scheme: HTTP + initialDelaySeconds: 0 + periodSeconds: 10 + successThreshold: 1 + timeoutSeconds: 1 + volumeMounts: + - name: proc + mountPath: /host/proc + readOnly: true + - name: sys + mountPath: /host/sys + readOnly: true + - name: root + mountPath: /host/root + mountPropagation: HostToContainer + readOnly: true + hostNetwork: true + hostPID: true + hostIPC: false + affinity: + nodeAffinity: + requiredDuringSchedulingIgnoredDuringExecution: + nodeSelectorTerms: + - matchExpressions: + - key: eks.amazonaws.com/compute-type + operator: NotIn + values: + - fargate + - key: type + operator: NotIn + values: + - virtual-kubelet + nodeSelector: + kubernetes.io/os: linux + tolerations: + - effect: NoSchedule + operator: Exists + volumes: + - name: proc + hostPath: + path: /proc + - name: sys + hostPath: + path: /sys + - name: root + hostPath: + path: / + diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/prometheus-node-exporter/service.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/prometheus-node-exporter/service.yaml new file mode 100644 index 0000000000..8b8fd23461 --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/prometheus-node-exporter/service.yaml @@ -0,0 +1,30 @@ +--- +# Source: opentelemetry-kube-stack/charts/prometheus-node-exporter/templates/service.yaml +apiVersion: v1 +kind: Service +metadata: + name: example-prometheus-node-exporter + namespace: default + labels: + helm.sh/chart: prometheus-node-exporter-4.48.0 + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/component: metrics + app.kubernetes.io/part-of: prometheus-node-exporter + app.kubernetes.io/name: prometheus-node-exporter + app.kubernetes.io/instance: example + app.kubernetes.io/version: "1.9.1" + release: example + jobLabel: node-exporter + annotations: + prometheus.io/scrape: "true" +spec: + type: ClusterIP + ports: + - port: 9100 + targetPort: 9100 + protocol: TCP + name: http-metrics + selector: + app.kubernetes.io/name: prometheus-node-exporter + app.kubernetes.io/instance: example + diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/prometheus-node-exporter/serviceaccount.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/prometheus-node-exporter/serviceaccount.yaml new file mode 100644 index 0000000000..a3b0f1eddf --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/prometheus-node-exporter/serviceaccount.yaml @@ -0,0 +1,17 @@ +--- +# Source: opentelemetry-kube-stack/charts/prometheus-node-exporter/templates/serviceaccount.yaml +apiVersion: v1 +kind: ServiceAccount +metadata: + name: example-prometheus-node-exporter + namespace: default + labels: + helm.sh/chart: prometheus-node-exporter-4.48.0 + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/component: metrics + app.kubernetes.io/part-of: prometheus-node-exporter + app.kubernetes.io/name: prometheus-node-exporter + app.kubernetes.io/instance: example + app.kubernetes.io/version: "1.9.1" + release: example +automountServiceAccountToken: false diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/prometheus-node-exporter/servicemonitor.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/prometheus-node-exporter/servicemonitor.yaml new file mode 100644 index 0000000000..6a6ccabf3a --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/prometheus-node-exporter/servicemonitor.yaml @@ -0,0 +1,29 @@ +--- +# Source: opentelemetry-kube-stack/charts/prometheus-node-exporter/templates/servicemonitor.yaml +apiVersion: monitoring.coreos.com/v1 +kind: ServiceMonitor +metadata: + name: example-prometheus-node-exporter + namespace: default + labels: + helm.sh/chart: prometheus-node-exporter-4.48.0 + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/component: metrics + app.kubernetes.io/part-of: prometheus-node-exporter + app.kubernetes.io/name: prometheus-node-exporter + app.kubernetes.io/instance: example + app.kubernetes.io/version: "1.9.1" + release: example +spec: + jobLabel: jobLabel + + selector: + matchLabels: + app.kubernetes.io/name: prometheus-node-exporter + app.kubernetes.io/instance: example + attachMetadata: + node: false + endpoints: + - port: http-metrics + scheme: http + diff --git a/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/clusterrole.yaml b/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/clusterrole.yaml new file mode 100644 index 0000000000..04fd4b7372 --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/clusterrole.yaml @@ -0,0 +1,141 @@ +--- +# Source: opentelemetry-kube-stack/templates/clusterrole.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + name: example-collector +rules: +- apiGroups: [""] + resources: + - namespaces + - nodes + - nodes/proxy + - nodes/metrics + - nodes/stats + - services + - endpoints + - pods + - events + - secrets + - persistentvolumeclaims + - persistentvolumes + verbs: ["get", "list", "watch"] +- apiGroups: ["monitoring.coreos.com"] + resources: + - servicemonitors + - podmonitors + - scrapeconfigs + - probes + verbs: ["get", "list", "watch"] +- apiGroups: + - extensions + resources: + - ingresses + verbs: ["get", "list", "watch"] +- apiGroups: + - apps + resources: + - daemonsets + - deployments + - replicasets + - statefulsets + verbs: ["get", "list", "watch"] +- apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: ["get", "list", "watch"] +- apiGroups: ["discovery.k8s.io"] + resources: + - endpointslices + verbs: ["get", "list", "watch"] +- nonResourceURLs: ["/metrics", "/metrics/cadvisor"] + verbs: ["get"] + +- verbs: + - get + - list + - watch + - create + - update + - patch + - delete + apiGroups: + - coordination.k8s.io + resources: + - leases +- apiGroups: + - "" + resources: + - events + - namespaces + - namespaces/status + - nodes + - nodes/spec + - pods + - pods/status + - replicationcontrollers + - replicationcontrollers/status + - resourcequotas + - services + verbs: + - get + - list + - watch +- apiGroups: + - apps + resources: + - daemonsets + - deployments + - replicasets + - statefulsets + verbs: + - get + - list + - watch +- apiGroups: + - extensions + resources: + - daemonsets + - deployments + - replicasets + verbs: + - get + - list + - watch +- apiGroups: + - batch + resources: + - jobs + - cronjobs + verbs: + - get + - list + - watch +- apiGroups: + - autoscaling + resources: + - horizontalpodautoscalers + verbs: + - get + - list + - watch +- apiGroups: ["events.k8s.io"] + resources: ["events"] + verbs: ["watch", "list"] +--- +# Source: opentelemetry-kube-stack/templates/clusterrole.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + name: example-daemon +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: example-collector +subjects: +- kind: ServiceAccount + # quirk of the Operator + name: "example-daemon-collector" + namespace: default + diff --git a/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/collector.yaml b/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/collector.yaml new file mode 100644 index 0000000000..036ae97b72 --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/collector.yaml @@ -0,0 +1,515 @@ +--- +# Source: opentelemetry-kube-stack/templates/collector.yaml +apiVersion: opentelemetry.io/v1beta1 +kind: OpenTelemetryCollector +metadata: + name: example-daemon + namespace: default + labels: + helm.sh/chart: opentelemetry-kube-stack-0.16.0 + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + release: "example" +spec: + managementState: managed + mode: daemonset + config: + exporters: + debug: {} + extensions: + k8s_leader_elector/k8s_cluster: + auth_type: serviceAccount + lease_name: k8s.cluster.receiver.opentelemetry.io + lease_namespace: default + k8s_leader_elector/k8s_objects: + auth_type: serviceAccount + lease_name: k8s.objects.receiver.opentelemetry.io + lease_namespace: default + processors: + batch: + send_batch_max_size: 1500 + send_batch_size: 1000 + timeout: 1s + k8sattributes: + extract: + labels: + - from: pod + key: app.kubernetes.io/instance + tag_name: k8s.app.instance + - from: pod + key: app.kubernetes.io/component + tag_name: k8s.app.component + metadata: + - k8s.namespace.name + - k8s.pod.name + - k8s.pod.uid + - k8s.node.name + - k8s.pod.start_time + - k8s.deployment.name + - k8s.replicaset.name + - k8s.replicaset.uid + - k8s.daemonset.name + - k8s.daemonset.uid + - k8s.job.name + - k8s.job.uid + - k8s.container.name + - k8s.cronjob.name + - k8s.statefulset.name + - k8s.statefulset.uid + - container.image.tag + - container.image.name + - k8s.cluster.uid + - service.namespace + - service.name + - service.version + - service.instance.id + otel_annotations: true + filter: + node_from_env_var: OTEL_K8S_NODE_NAME + passthrough: false + pod_association: + - sources: + - from: resource_attribute + name: k8s.pod.uid + - sources: + - from: resource_attribute + name: k8s.pod.name + - from: resource_attribute + name: k8s.namespace.name + - from: resource_attribute + name: k8s.node.name + - sources: + - from: resource_attribute + name: k8s.pod.ip + - sources: + - from: resource_attribute + name: k8s.pod.name + - from: resource_attribute + name: k8s.namespace.name + - sources: + - from: connection + resource/hostname: + attributes: + - action: insert + from_attribute: k8s.node.name + key: host.name + resourcedetection/env: + detectors: + - env + - k8snode + override: false + timeout: 2s + receivers: + filelog: + exclude: [] + include: + - /var/log/pods/*/*/*.log + include_file_name: false + include_file_path: true + operators: + - id: container-parser + max_log_size: 102400 + type: container + retry_on_failure: + enabled: true + start_at: end + hostmetrics: + collection_interval: 10s + root_path: /hostfs + scrapers: + cpu: + metrics: + system.cpu.logical.count: + enabled: true + system.cpu.utilization: + enabled: true + disk: {} + filesystem: + exclude_fs_types: + fs_types: + - autofs + - binfmt_misc + - bpf + - cgroup2 + - configfs + - debugfs + - devpts + - devtmpfs + - fusectl + - hugetlbfs + - iso9660 + - mqueue + - nsfs + - overlay + - proc + - procfs + - pstore + - rpc_pipefs + - securityfs + - selinuxfs + - squashfs + - sysfs + - tracefs + match_type: strict + exclude_mount_points: + match_type: regexp + mount_points: + - /dev/* + - /proc/* + - /sys/* + - /run/k3s/containerd/* + - /var/lib/docker/* + - /var/lib/kubelet/* + - /snap/* + metrics: + system.filesystem.utilization: + enabled: true + load: {} + memory: + metrics: + system.memory.limit: + enabled: true + system.memory.utilization: + enabled: true + network: {} + paging: + metrics: + system.paging.usage: + enabled: true + system: + metrics: + system.uptime: + enabled: true + k8s_cluster: + allocatable_types_to_report: + - cpu + - memory + - storage + auth_type: serviceAccount + collection_interval: 10s + k8s_leader_elector: k8s_leader_elector/k8s_cluster + node_conditions_to_report: + - Ready + - MemoryPressure + - DiskPressure + - NetworkUnavailable + k8sobjects: + k8s_leader_elector: k8s_leader_elector/k8s_objects + objects: + - exclude_watch_type: + - DELETED + group: events.k8s.io + mode: watch + name: events + kubeletstats: + auth_type: serviceAccount + collection_interval: 15s + endpoint: https://${env:OTEL_K8S_NODE_IP}:10250 + extra_metadata_labels: + - container.id + - k8s.volume.type + insecure_skip_verify: true + k8s_api_config: + auth_type: serviceAccount + metric_groups: + - node + - pod + - volume + - container + metrics: + container.cpu.usage: + enabled: true + k8s.node.cpu.usage: + enabled: true + k8s.node.uptime: + enabled: true + k8s.pod.cpu.usage: + enabled: true + k8s.pod.uptime: + enabled: true + otlp: + protocols: + grpc: + endpoint: 0.0.0.0:4317 + http: + endpoint: 0.0.0.0:4318 + prometheus: + config: + scrape_configs: + - job_name: kubernetes-pods + kubernetes_sd_configs: + - role: pod + selectors: + - field: spec.nodeName=${env:OTEL_K8S_NODE_NAME} + role: pod + relabel_configs: + - action: keep + regex: true + source_labels: + - __meta_kubernetes_pod_annotation_prometheus_io_scrape + - action: drop + regex: true + source_labels: + - __meta_kubernetes_pod_annotation_prometheus_io_scrape_slow + - action: replace + regex: (https?) + source_labels: + - __meta_kubernetes_pod_annotation_prometheus_io_scheme + target_label: __scheme__ + - action: replace + regex: (.+) + source_labels: + - __meta_kubernetes_pod_annotation_prometheus_io_path + target_label: __metrics_path__ + - action: replace + regex: ([^:]+)(?::\d+)?;(\d+) + replacement: $$1:$$2 + source_labels: + - __address__ + - __meta_kubernetes_pod_annotation_prometheus_io_port + target_label: __address__ + - action: labelmap + regex: __meta_kubernetes_pod_annotation_prometheus_io_param_(.+) + replacement: __param_$$1 + - action: labelmap + regex: __meta_kubernetes_pod_label_(.+) + - action: replace + source_labels: + - __meta_kubernetes_namespace + target_label: namespace + - action: replace + source_labels: + - __meta_kubernetes_pod_name + target_label: pod + - action: drop + regex: Pending|Succeeded|Failed|Completed + source_labels: + - __meta_kubernetes_pod_phase + - action: replace + source_labels: + - __meta_kubernetes_pod_label_app_kubernetes_io_name + target_label: job + scrape_interval: 30s + - job_name: node-exporter + relabel_configs: + - action: labelmap + regex: __meta_kubernetes_node_label_(.+) + - action: replace + regex: (.*) + replacement: $$1 + separator: ; + source_labels: + - job + target_label: __tmp_prometheus_job_name + scrape_interval: 30s + static_configs: + - targets: + - ${env:OTEL_K8S_NODE_IP}:9100 + - authorization: + credentials_file: /var/run/secrets/kubernetes.io/serviceaccount/token + type: Bearer + follow_redirects: true + honor_labels: true + honor_timestamps: true + job_name: kubelet + kubernetes_sd_configs: + - follow_redirects: true + role: node + selectors: + - field: metadata.name=${env:OTEL_K8S_NODE_NAME} + role: node + metric_relabel_configs: + - action: drop + regex: container_cpu_(load_average_10s|system_seconds_total|user_seconds_total) + replacement: $$1 + separator: ; + source_labels: + - __name__ + - action: drop + regex: container_fs_(io_current|reads_merged_total|sector_reads_total|sector_writes_total|writes_merged_total) + replacement: $$1 + separator: ; + source_labels: + - __name__ + - action: drop + regex: container_memory_(mapped_file|swap) + replacement: $$1 + separator: ; + source_labels: + - __name__ + - action: drop + regex: container_(file_descriptors|tasks_state|threads_max) + replacement: $$1 + separator: ; + source_labels: + - __name__ + - action: drop + regex: container_spec.* + replacement: $$1 + separator: ; + source_labels: + - __name__ + - action: drop + regex: .+; + replacement: $$1 + separator: ; + source_labels: + - id + - pod + metrics_path: /metrics/cadvisor + relabel_configs: + - action: replace + regex: (.*) + replacement: $$1 + separator: ; + source_labels: + - job + target_label: __tmp_prometheus_job_name + - action: replace + replacement: kubelet + target_label: job + - action: replace + regex: (.*) + replacement: $$1 + separator: ; + source_labels: + - __meta_kubernetes_node_name + target_label: node + - action: replace + regex: (.*) + replacement: https-metrics + separator: ; + target_label: endpoint + - action: replace + regex: (.*) + replacement: $$1 + separator: ; + source_labels: + - __metrics_path__ + target_label: metrics_path + - action: hashmod + modulus: 1 + regex: (.*) + replacement: $$1 + separator: ; + source_labels: + - __address__ + target_label: __tmp_hash + - action: keep + regex: $(SHARD) + replacement: $$1 + separator: ; + source_labels: + - __tmp_hash + scheme: https + scrape_interval: 15s + scrape_timeout: 10s + tls_config: + ca_file: /var/run/secrets/kubernetes.io/serviceaccount/ca.crt + insecure_skip_verify: true + service: + extensions: + - k8s_leader_elector/k8s_objects + - k8s_leader_elector/k8s_cluster + pipelines: + logs: + exporters: + - debug + processors: + - k8sattributes + - resourcedetection/env + - resource/hostname + - batch + receivers: + - otlp + - filelog + - k8sobjects + metrics: + exporters: + - debug + processors: + - k8sattributes + - resourcedetection/env + - resource/hostname + - batch + receivers: + - prometheus + - otlp + - hostmetrics + - kubeletstats + - k8s_cluster + traces: + exporters: + - debug + processors: + - k8sattributes + - resourcedetection/env + - resource/hostname + - batch + receivers: + - otlp + imagePullPolicy: IfNotPresent + upgradeStrategy: automatic + terminationGracePeriodSeconds: 30 + resources: + limits: + cpu: 200m + memory: 500Mi + requests: + cpu: 100m + memory: 250Mi + securityContext: + {} + volumeMounts: + - name: varlogpods + mountPath: /var/log/pods + readOnly: true + - name: varlibdockercontainers + mountPath: /var/lib/docker/containers + readOnly: true + - name: hostfs + mountPath: /hostfs + readOnly: true + mountPropagation: HostToContainer + env: + - name: K8S_NODE_NAME + valueFrom: + fieldRef: + fieldPath: spec.nodeName + - name: OTEL_K8S_NODE_NAME + valueFrom: + fieldRef: + fieldPath: spec.nodeName + - name: OTEL_K8S_NODE_IP + valueFrom: + fieldRef: + fieldPath: status.hostIP + - name: OTEL_K8S_NAMESPACE + valueFrom: + fieldRef: + apiVersion: v1 + fieldPath: metadata.namespace + - name: OTEL_K8S_POD_NAME + valueFrom: + fieldRef: + apiVersion: v1 + fieldPath: metadata.name + - name: OTEL_K8S_POD_IP + valueFrom: + fieldRef: + apiVersion: v1 + fieldPath: status.podIP + - name: OTEL_RESOURCE_ATTRIBUTES + value: "k8s.pod.name=$(OTEL_K8S_POD_NAME),k8s.namespace.name=$(OTEL_K8S_NAMESPACE),k8s.node.name=$(OTEL_K8S_NODE_NAME),host.name=$(OTEL_K8S_NODE_NAME),k8s.node.ip=$(OTEL_K8S_NODE_IP),k8s.pod.ip=$(OTEL_K8S_POD_IP),k8s.cluster.name=demo" + + volumes: + - name: varlogpods + hostPath: + path: /var/log/pods + - name: varlibdockercontainers + hostPath: + path: /var/lib/docker/containers + - name: hostfs + hostPath: + path: / + diff --git a/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/extramanifests.yaml b/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/extramanifests.yaml new file mode 100644 index 0000000000..ad558c0210 --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/extramanifests.yaml @@ -0,0 +1,21 @@ +--- +# Source: opentelemetry-kube-stack/templates/extramanifests.yaml +apiVersion: secrets-store.csi.x-k8s.io/v1 +kind: SecretProviderClass +metadata: + name: collector-credentials +spec: + parameters: + objects: | + - secretPath: data/collector-credentials + objectName: token + secretKey: token + vaultAddress: https://your-vault.com + provider: vault + secretObjects: + - data: + - key: ACCESS_TOKEN + objectName: token + secretName: collector-credentials-secret + type: Opaque + diff --git a/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/hooks.yaml b/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/hooks.yaml new file mode 100644 index 0000000000..df09c1e80b --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/hooks.yaml @@ -0,0 +1,65 @@ +--- +# Source: opentelemetry-kube-stack/templates/hooks.yaml +apiVersion: v1 +kind: ServiceAccount +metadata: + name: delete-resources-sa + annotations: + "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded +--- +# Source: opentelemetry-kube-stack/templates/hooks.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + name: delete-resources-role + annotations: + "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded +rules: + - apiGroups: + - opentelemetry.io + resources: + - instrumentations + - opampbridges + - opentelemetrycollectors + verbs: + - get + - list + - delete +--- +# Source: opentelemetry-kube-stack/templates/hooks.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + name: delete-resources-rolebinding + annotations: + "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: delete-resources-role +subjects: + - kind: ServiceAccount + name: delete-resources-sa +--- +# Source: opentelemetry-kube-stack/templates/hooks.yaml +apiVersion: batch/v1 +kind: Job +metadata: + name: opentelemetry-kube-stack-pre-delete-job + annotations: + "helm.sh/hook": pre-delete + "helm.sh/hook-delete-policy": hook-succeeded,hook-failed +spec: + template: + spec: + restartPolicy: Never + serviceAccountName: delete-resources-sa + containers: + - name: delete-resources + image: "rancher/kubectl:v1.34.1" + args: + - "delete" + - "instrumentations,opampbridges,opentelemetrycollectors" + - "-l" + - "helm.sh/chart=opentelemetry-kube-stack-0.16.0" + diff --git a/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml b/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml new file mode 100644 index 0000000000..17585fa86a --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml @@ -0,0 +1,193 @@ +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/admission-webhooks/operator-webhook-with-cert-manager.yaml +apiVersion: admissionregistration.k8s.io/v1 +kind: MutatingWebhookConfiguration +metadata: + annotations: + cert-manager.io/inject-ca-from: default/example-opentelemetry-operator-serving-cert + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: webhook + name: example-opentelemetry-operator-mutation +webhooks: + - admissionReviewVersions: + - v1 + clientConfig: + service: + name: example-opentelemetry-operator-webhook + namespace: default + path: /mutate-opentelemetry-io-v1alpha1-instrumentation + port: 443 + failurePolicy: Ignore + name: minstrumentation.kb.io + rules: + - apiGroups: + - opentelemetry.io + apiVersions: + - v1alpha1 + operations: + - CREATE + - UPDATE + resources: + - instrumentations + scope: Namespaced + sideEffects: None + timeoutSeconds: 10 + - admissionReviewVersions: + - v1 + clientConfig: + service: + name: example-opentelemetry-operator-webhook + namespace: default + path: /mutate-opentelemetry-io-v1beta1-opentelemetrycollector + port: 443 + failurePolicy: Ignore + name: mopentelemetrycollectorbeta.kb.io + rules: + - apiGroups: + - opentelemetry.io + apiVersions: + - v1beta1 + operations: + - CREATE + - UPDATE + resources: + - opentelemetrycollectors + scope: Namespaced + sideEffects: None + timeoutSeconds: 10 + - admissionReviewVersions: + - v1 + clientConfig: + service: + name: example-opentelemetry-operator-webhook + namespace: default + path: /mutate-v1-pod + port: 443 + failurePolicy: Ignore + name: mpod.kb.io + rules: + - apiGroups: + - "" + apiVersions: + - v1 + operations: + - CREATE + resources: + - pods + scope: Namespaced + sideEffects: None + timeoutSeconds: 10 +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/admission-webhooks/operator-webhook-with-cert-manager.yaml +apiVersion: admissionregistration.k8s.io/v1 +kind: ValidatingWebhookConfiguration +metadata: + annotations: + cert-manager.io/inject-ca-from: default/example-opentelemetry-operator-serving-cert + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: webhook + name: example-opentelemetry-operator-validation +webhooks: + - admissionReviewVersions: + - v1 + clientConfig: + service: + name: example-opentelemetry-operator-webhook + namespace: default + path: /validate-opentelemetry-io-v1alpha1-instrumentation + port: 443 + failurePolicy: Ignore + name: vinstrumentationcreateupdate.kb.io + rules: + - apiGroups: + - opentelemetry.io + apiVersions: + - v1alpha1 + operations: + - CREATE + - UPDATE + resources: + - instrumentations + scope: Namespaced + sideEffects: None + timeoutSeconds: 10 + - admissionReviewVersions: + - v1 + clientConfig: + service: + name: example-opentelemetry-operator-webhook + namespace: default + path: /validate-opentelemetry-io-v1alpha1-instrumentation + port: 443 + failurePolicy: Ignore + name: vinstrumentationdelete.kb.io + rules: + - apiGroups: + - opentelemetry.io + apiVersions: + - v1alpha1 + operations: + - DELETE + resources: + - instrumentations + scope: Namespaced + sideEffects: None + timeoutSeconds: 10 + - admissionReviewVersions: + - v1 + clientConfig: + service: + name: example-opentelemetry-operator-webhook + namespace: default + path: /validate-opentelemetry-io-v1beta1-opentelemetrycollector + port: 443 + failurePolicy: Ignore + name: vopentelemetrycollectorcreateupdatebeta.kb.io + rules: + - apiGroups: + - opentelemetry.io + apiVersions: + - v1beta1 + operations: + - CREATE + - UPDATE + resources: + - opentelemetrycollectors + scope: Namespaced + sideEffects: None + timeoutSeconds: 10 + - admissionReviewVersions: + - v1 + clientConfig: + service: + name: example-opentelemetry-operator-webhook + namespace: default + path: /validate-opentelemetry-io-v1beta1-opentelemetrycollector + port: 443 + failurePolicy: Ignore + name: vopentelemetrycollectordeletebeta.kb.io + rules: + - apiGroups: + - opentelemetry.io + apiVersions: + - v1beta1 + operations: + - DELETE + resources: + - opentelemetrycollectors + scope: Namespaced + sideEffects: None + timeoutSeconds: 10 + diff --git a/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/admission-webhooks/operator-webhook.yaml b/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/admission-webhooks/operator-webhook.yaml new file mode 100644 index 0000000000..5b9ff5511d --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/admission-webhooks/operator-webhook.yaml @@ -0,0 +1,3 @@ +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/admission-webhooks/operator-webhook.yaml +--- diff --git a/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/certmanager.yaml b/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/certmanager.yaml new file mode 100644 index 0000000000..e8615238d0 --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/certmanager.yaml @@ -0,0 +1,44 @@ +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/certmanager.yaml +apiVersion: cert-manager.io/v1 +kind: Certificate +metadata: + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: webhook + name: example-opentelemetry-operator-serving-cert + namespace: default +spec: + dnsNames: + - example-opentelemetry-operator-webhook.default.svc + - example-opentelemetry-operator-webhook.default.svc.cluster.local + issuerRef: + kind: Issuer + name: example-opentelemetry-operator-selfsigned-issuer + secretName: example-opentelemetry-operator-controller-manager-service-cert + subject: + organizationalUnits: + - example-opentelemetry-operator +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/certmanager.yaml +apiVersion: cert-manager.io/v1 +kind: Issuer +metadata: + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: webhook + name: example-opentelemetry-operator-selfsigned-issuer + namespace: default +spec: + selfSigned: {} + diff --git a/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/clusterrole.yaml b/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/clusterrole.yaml new file mode 100644 index 0000000000..2037050533 --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/clusterrole.yaml @@ -0,0 +1,410 @@ +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/clusterrole.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: controller-manager + name: example-opentelemetry-operator-manager +rules: + - apiGroups: + - "" + resources: + - configmaps + - persistentvolumeclaims + - persistentvolumes + - pods + - serviceaccounts + - services + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - "" + resources: + - events + verbs: + - create + - get + - list + - patch + - watch + - apiGroups: + - "" + resources: + - namespaces + verbs: + - list + - watch + - apiGroups: + - "" + resources: + - namespaces/status + verbs: + - get + - list + - watch + - apiGroups: + - "" + resources: + - nodes/spec + verbs: + - get + - list + - watch + - apiGroups: + - "" + resources: + - pods/status + verbs: + - get + - list + - watch + - apiGroups: + - "" + resources: + - replicationcontrollers + verbs: + - get + - list + - watch + - apiGroups: + - "" + resources: + - replicationcontrollers/status + verbs: + - get + - list + - watch + - apiGroups: + - "" + resources: + - resourcequotas + verbs: + - get + - list + - watch + - apiGroups: + - apps + resources: + - daemonsets + - deployments + - statefulsets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - apps + - extensions + resources: + - replicasets + verbs: + - get + - list + - watch + - apiGroups: + - extensions + resources: + - daemonsets + verbs: + - get + - list + - watch + - apiGroups: + - extensions + resources: + - deployments + verbs: + - get + - list + - watch + - apiGroups: + - autoscaling + resources: + - horizontalpodautoscalers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - batch + resources: + - jobs + verbs: + - get + - list + - watch + - apiGroups: + - batch + resources: + - cronjobs + verbs: + - get + - list + - watch + - apiGroups: + - "" + resources: + - nodes/proxy + verbs: + - get + - apiGroups: + - "" + resources: + - nodes/stats + verbs: + - get + - apiGroups: + - config.openshift.io + resources: + - infrastructures + - infrastructures/status + verbs: + - get + - list + - watch + - apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - get + - list + - update + - apiGroups: + - discovery.k8s.io + resources: + - endpointslices + verbs: + - get + - list + - apiGroups: + - events.k8s.io + resources: + - events + verbs: + - create + - list + - patch + - watch + - apiGroups: + - gateway.networking.k8s.io + resources: + - httproutes + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - monitoring.coreos.com + resources: + - podmonitors + - servicemonitors + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - networking.k8s.io + resources: + - ingresses + - networkpolicies + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - opentelemetry.io + resources: + - instrumentations + verbs: + - get + - list + - patch + - update + - watch + - apiGroups: + - opentelemetry.io + resources: + - opampbridges + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - opentelemetry.io + resources: + - opampbridges/finalizers + verbs: + - update + - apiGroups: + - opentelemetry.io + resources: + - opampbridges/status + verbs: + - get + - patch + - update + - apiGroups: + - opentelemetry.io + resources: + - opentelemetrycollectors + verbs: + - get + - list + - patch + - update + - watch + - apiGroups: + - opentelemetry.io + resources: + - opentelemetrycollectors/finalizers + verbs: + - get + - patch + - update + - apiGroups: + - opentelemetry.io + resources: + - opentelemetrycollectors/status + verbs: + - get + - patch + - update + - apiGroups: + - policy + resources: + - poddisruptionbudgets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - route.openshift.io + resources: + - routes + - routes/custom-host + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - opentelemetry.io + resources: + - targetallocators + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - opentelemetry.io + resources: + - targetallocators/status + verbs: + - get + - patch + - update + - apiGroups: + - opentelemetry.io + resources: + - targetallocators/finalizers + verbs: + - get + - patch + - update + - apiGroups: + - cert-manager.io + resources: + - issuers + - certificaterequests + - certificates + verbs: + - create + - get + - list + - watch + - update + - patch + - delete + - apiGroups: + - authentication.k8s.io + resources: + - tokenreviews + verbs: + - create + - apiGroups: + - authorization.k8s.io + resources: + - subjectaccessreviews + verbs: + - create +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/clusterrole.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: controller-manager + name: example-opentelemetry-operator-metrics +rules: + - nonResourceURLs: + - /metrics + verbs: + - get + + diff --git a/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/clusterrolebinding.yaml b/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/clusterrolebinding.yaml new file mode 100644 index 0000000000..4acb7d53f5 --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/clusterrolebinding.yaml @@ -0,0 +1,24 @@ +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/clusterrolebinding.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: controller-manager + name: example-opentelemetry-operator-manager +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: example-opentelemetry-operator-manager +subjects: + - kind: ServiceAccount + name: opentelemetry-operator + namespace: default + + diff --git a/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/deployment.yaml b/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/deployment.yaml new file mode 100644 index 0000000000..c775cd1cf3 --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/deployment.yaml @@ -0,0 +1,105 @@ +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/deployment.yaml +apiVersion: apps/v1 +kind: Deployment +metadata: + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: controller-manager + name: example-opentelemetry-operator + namespace: default +spec: + replicas: 1 + revisionHistoryLimit: 10 + selector: + matchLabels: + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/component: controller-manager + template: + metadata: + annotations: + kubectl.kubernetes.io/default-container: manager + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: controller-manager + spec: + automountServiceAccountToken: true + hostNetwork: false + containers: + - args: + - --metrics-addr=0.0.0.0:8443 + - --metrics-secure=true + - --enable-leader-election + - --health-probe-addr=:8081 + - --webhook-port=9443 + - --collector-image=otel/opentelemetry-collector-k8s:0.151.0 + command: + - /manager + env: + - name: SERVICE_ACCOUNT_NAME + valueFrom: + fieldRef: + fieldPath: spec.serviceAccountName + - name: ENABLE_WEBHOOKS + value: "true" + image: "ghcr.io/open-telemetry/opentelemetry-operator/opentelemetry-operator:0.151.0" + name: manager + imagePullPolicy: IfNotPresent + ports: + - containerPort: 8443 + name: metrics + protocol: TCP + - containerPort: 9443 + name: webhook-server + protocol: TCP + livenessProbe: + httpGet: + path: /healthz + port: 8081 + initialDelaySeconds: 15 + periodSeconds: 20 + readinessProbe: + httpGet: + path: /readyz + port: 8081 + initialDelaySeconds: 5 + periodSeconds: 10 + resources: + {} + volumeMounts: + - mountPath: /tmp/k8s-webhook-server/serving-certs + name: cert + readOnly: true + securityContext: + allowPrivilegeEscalation: false + capabilities: + drop: + - ALL + runAsNonRoot: true + seccompProfile: + type: RuntimeDefault + nodeSelector: + kubernetes.io/os: linux + serviceAccountName: opentelemetry-operator + terminationGracePeriodSeconds: 10 + volumes: + - name: cert + secret: + defaultMode: 420 + secretName: example-opentelemetry-operator-controller-manager-service-cert + securityContext: + fsGroup: 65532 + runAsGroup: 65532 + runAsNonRoot: true + runAsUser: 65532 + diff --git a/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/role.yaml b/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/role.yaml new file mode 100644 index 0000000000..b5339517a2 --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/role.yaml @@ -0,0 +1,200 @@ +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/role.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: controller-manager + name: example-opentelemetry-operator-leader-election + namespace: default +rules: + - apiGroups: + - "" + resources: + - configmaps + - pods + - serviceaccounts + - services + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - "" + resources: + - events + verbs: + - create + - patch + - apiGroups: + - "" + resources: + - namespaces + - secrets + verbs: + - get + - list + - watch + - apiGroups: + - apps + resources: + - daemonsets + - deployments + - statefulsets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - apps + resources: + - replicasets + verbs: + - get + - list + - watch + - apiGroups: + - autoscaling + resources: + - horizontalpodautoscalers + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - batch + resources: + - jobs + verbs: + - get + - list + - watch + - apiGroups: + - config.openshift.io + resources: + - infrastructures + - infrastructures/status + verbs: + - get + - list + - watch + - apiGroups: + - coordination.k8s.io + resources: + - leases + verbs: + - create + - get + - list + - update + - apiGroups: + - monitoring.coreos.com + resources: + - podmonitors + - servicemonitors + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - networking.k8s.io + resources: + - ingresses + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - opentelemetry.io + resources: + - instrumentations + - opentelemetrycollectors + verbs: + - get + - list + - patch + - update + - watch + - apiGroups: + - opentelemetry.io + resources: + - opampbridges + - targetallocators + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - opentelemetry.io + resources: + - opampbridges/finalizers + verbs: + - update + - apiGroups: + - opentelemetry.io + resources: + - opampbridges/status + - opentelemetrycollectors/finalizers + - opentelemetrycollectors/status + - targetallocators/status + - targetallocators/finalizers + verbs: + - get + - patch + - update + - apiGroups: + - policy + resources: + - poddisruptionbudgets + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + - apiGroups: + - route.openshift.io + resources: + - routes + - routes/custom-host + verbs: + - create + - delete + - get + - list + - patch + - update + - watch + diff --git a/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/rolebinding.yaml b/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/rolebinding.yaml new file mode 100644 index 0000000000..ae376e80c9 --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/rolebinding.yaml @@ -0,0 +1,24 @@ +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/rolebinding.yaml +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: controller-manager + name: example-opentelemetry-operator-leader-election + namespace: default +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: example-opentelemetry-operator-leader-election +subjects: + - kind: ServiceAccount + name: opentelemetry-operator + namespace: default + diff --git a/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/service.yaml b/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/service.yaml new file mode 100644 index 0000000000..0a3006d80f --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/service.yaml @@ -0,0 +1,48 @@ +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/service.yaml +apiVersion: v1 +kind: Service +metadata: + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: controller-manager + name: example-opentelemetry-operator + namespace: default +spec: + ports: + - name: metrics + port: 8443 + protocol: TCP + targetPort: metrics + selector: + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/component: controller-manager +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/service.yaml +apiVersion: v1 +kind: Service +metadata: + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: controller-manager + name: example-opentelemetry-operator-webhook + namespace: default +spec: + ports: + - port: 443 + protocol: TCP + targetPort: webhook-server + selector: + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/component: controller-manager + diff --git a/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/serviceaccount.yaml b/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/serviceaccount.yaml new file mode 100644 index 0000000000..c6ba25dbac --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/serviceaccount.yaml @@ -0,0 +1,17 @@ +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/serviceaccount.yaml +apiVersion: v1 +kind: ServiceAccount +automountServiceAccountToken: true +metadata: + name: opentelemetry-operator + namespace: default + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: controller-manager + diff --git a/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml b/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml new file mode 100644 index 0000000000..9039160e03 --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml @@ -0,0 +1,54 @@ +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/tests/test-certmanager-connection.yaml +apiVersion: v1 +kind: Pod +metadata: + name: "example-opentelemetry-operator-cert-manager" + namespace: default + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: webhook + annotations: + "helm.sh/hook": test +spec: + containers: + - name: wget + image: "busybox:latest" + env: + - name: CERT_MANAGER_CLUSTERIP + value: "cert-manager-webhook" + - name: CERT_MANAGER_PORT + value: "443" + command: + - sh + - -c + # The following shell script tests if the cert-manager service is up. If the service is up, when we try + # to wget its exposed port, we will get an HTTP error 400. + - | + wget_output=$(wget -q "$CERT_MANAGER_CLUSTERIP:$CERT_MANAGER_PORT") + if wget_output=="wget: server returned error: HTTP/1.0 400 Bad Request" + then exit 0 + else exit 1 + fi + securityContext: + allowPrivilegeEscalation: false + capabilities: + drop: + - ALL + runAsNonRoot: true + seccompProfile: + type: RuntimeDefault + restartPolicy: Never + nodeSelector: + kubernetes.io/os: linux + securityContext: + fsGroup: 65532 + runAsGroup: 65532 + runAsNonRoot: true + runAsUser: 65532 + diff --git a/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/tests/test-service-connection.yaml b/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/tests/test-service-connection.yaml new file mode 100644 index 0000000000..88e0e0bc24 --- /dev/null +++ b/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/tests/test-service-connection.yaml @@ -0,0 +1,107 @@ +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/tests/test-service-connection.yaml +apiVersion: v1 +kind: Pod +metadata: + name: "example-opentelemetry-operator-metrics" + namespace: default + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: controller-manager + annotations: + "helm.sh/hook": test +spec: + containers: + - name: wget + image: "busybox:latest" + env: + - name: MANAGER_METRICS_SERVICE_CLUSTERIP + value: "example-opentelemetry-operator" + - name: MANAGER_METRICS_SERVICE_PORT + value: "8443" + command: + - sh + - -c + # The following shell script tests if the controller-manager-metrics-service is up. + # If the service is up, when we try to wget its exposed port, we will get an HTTP error 400. + - | + wget_output=$(wget -q "$MANAGER_METRICS_SERVICE_CLUSTERIP:$MANAGER_METRICS_SERVICE_PORT") + if wget_output=="wget: server returned error: HTTP/1.0 400 Bad Request" + then exit 0 + else exit 1 + fi + securityContext: + allowPrivilegeEscalation: false + capabilities: + drop: + - ALL + runAsNonRoot: true + seccompProfile: + type: RuntimeDefault + restartPolicy: Never + nodeSelector: + kubernetes.io/os: linux + securityContext: + fsGroup: 65532 + runAsGroup: 65532 + runAsNonRoot: true + runAsUser: 65532 +--- +# Source: opentelemetry-kube-stack/charts/opentelemetry-operator/templates/tests/test-service-connection.yaml +apiVersion: v1 +kind: Pod +metadata: + name: "example-opentelemetry-operator-webhook" + namespace: default + labels: + helm.sh/chart: opentelemetry-operator-0.113.1 + app.kubernetes.io/name: opentelemetry-operator + app.kubernetes.io/version: "0.151.0" + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/part-of: opentelemetry-operator + app.kubernetes.io/instance: example + app.kubernetes.io/component: controller-manager + annotations: + "helm.sh/hook": test +spec: + containers: + - name: wget + image: "busybox:latest" + env: + - name: WEBHOOK_SERVICE_CLUSTERIP + value: "example-opentelemetry-operator-webhook" + - name: WEBHOOK_SERVICE_PORT + value: "443" + command: + - sh + - -c + # The following shell script tests if the webhook service is up. If the service is up, when we try + # to wget its exposed port, we will get an HTTP error 400. + - | + wget_output=$(wget -q "$WEBHOOK_SERVICE_CLUSTERIP:$WEBHOOK_SERVICE_PORT") + if wget_output=="wget: server returned error: HTTP/1.0 400 Bad Request" + then exit 0 + else exit 1 + fi + securityContext: + allowPrivilegeEscalation: false + capabilities: + drop: + - ALL + runAsNonRoot: true + seccompProfile: + type: RuntimeDefault + restartPolicy: Never + nodeSelector: + kubernetes.io/os: linux + securityContext: + fsGroup: 65532 + runAsGroup: 65532 + runAsNonRoot: true + runAsUser: 65532 + From 613e6215aad0ecb8e6847b22cb706b5a7cdef69e Mon Sep 17 00:00:00 2001 From: Cyrille Le Clerc Date: Thu, 28 May 2026 19:26:59 +0200 Subject: [PATCH 06/11] generate examples with Helm 3 instead of Helm 4 --- .../examples/cloud-demo/rendered/bridge.yaml | 2 -- .../examples/cloud-demo/rendered/clusterrole.yaml | 1 - .../examples/cloud-demo/rendered/collector.yaml | 1 - .../examples/cloud-demo/rendered/hooks.yaml | 1 - .../examples/cloud-demo/rendered/instrumentation.yaml | 1 - .../admission-webhooks/operator-webhook-with-cert-manager.yaml | 1 - .../cloud-demo/rendered/opentelemetry-operator/certmanager.yaml | 1 - .../cloud-demo/rendered/opentelemetry-operator/clusterrole.yaml | 2 -- .../rendered/opentelemetry-operator/clusterrolebinding.yaml | 2 -- .../cloud-demo/rendered/opentelemetry-operator/deployment.yaml | 1 - .../cloud-demo/rendered/opentelemetry-operator/role.yaml | 1 - .../cloud-demo/rendered/opentelemetry-operator/rolebinding.yaml | 1 - .../cloud-demo/rendered/opentelemetry-operator/service.yaml | 1 - .../rendered/opentelemetry-operator/serviceaccount.yaml | 1 - .../tests/test-certmanager-connection.yaml | 1 - .../opentelemetry-operator/tests/test-service-connection.yaml | 1 - .../rendered/clusterrole.yaml | 1 - .../daemonset-annotation-discovery-logs/rendered/collector.yaml | 2 -- .../daemonset-annotation-discovery-logs/rendered/hooks.yaml | 1 - .../admission-webhooks/operator-webhook-with-cert-manager.yaml | 1 - .../rendered/opentelemetry-operator/certmanager.yaml | 1 - .../rendered/opentelemetry-operator/clusterrole.yaml | 2 -- .../rendered/opentelemetry-operator/clusterrolebinding.yaml | 2 -- .../rendered/opentelemetry-operator/deployment.yaml | 1 - .../rendered/opentelemetry-operator/role.yaml | 1 - .../rendered/opentelemetry-operator/rolebinding.yaml | 1 - .../rendered/opentelemetry-operator/service.yaml | 1 - .../rendered/opentelemetry-operator/serviceaccount.yaml | 1 - .../tests/test-certmanager-connection.yaml | 1 - .../opentelemetry-operator/tests/test-service-connection.yaml | 1 - .../rendered/clusterrole.yaml | 1 - .../rendered/collector.yaml | 2 -- .../daemonset-annotation-discovery-metrics/rendered/hooks.yaml | 1 - .../admission-webhooks/operator-webhook-with-cert-manager.yaml | 1 - .../rendered/opentelemetry-operator/certmanager.yaml | 1 - .../rendered/opentelemetry-operator/clusterrole.yaml | 2 -- .../rendered/opentelemetry-operator/clusterrolebinding.yaml | 2 -- .../rendered/opentelemetry-operator/deployment.yaml | 1 - .../rendered/opentelemetry-operator/role.yaml | 1 - .../rendered/opentelemetry-operator/rolebinding.yaml | 1 - .../rendered/opentelemetry-operator/service.yaml | 1 - .../rendered/opentelemetry-operator/serviceaccount.yaml | 1 - .../tests/test-certmanager-connection.yaml | 1 - .../opentelemetry-operator/tests/test-service-connection.yaml | 1 - .../daemonset-annotation-discovery/rendered/clusterrole.yaml | 1 - .../daemonset-annotation-discovery/rendered/collector.yaml | 2 -- .../examples/daemonset-annotation-discovery/rendered/hooks.yaml | 1 - .../admission-webhooks/operator-webhook-with-cert-manager.yaml | 1 - .../rendered/opentelemetry-operator/certmanager.yaml | 1 - .../rendered/opentelemetry-operator/clusterrole.yaml | 2 -- .../rendered/opentelemetry-operator/clusterrolebinding.yaml | 2 -- .../rendered/opentelemetry-operator/deployment.yaml | 1 - .../rendered/opentelemetry-operator/role.yaml | 1 - .../rendered/opentelemetry-operator/rolebinding.yaml | 1 - .../rendered/opentelemetry-operator/service.yaml | 1 - .../rendered/opentelemetry-operator/serviceaccount.yaml | 1 - .../tests/test-certmanager-connection.yaml | 1 - .../opentelemetry-operator/tests/test-service-connection.yaml | 1 - .../daemonset-prometheus-presets/rendered/clusterrole.yaml | 1 - .../daemonset-prometheus-presets/rendered/collector.yaml | 2 -- .../examples/daemonset-prometheus-presets/rendered/hooks.yaml | 1 - .../admission-webhooks/operator-webhook-with-cert-manager.yaml | 1 - .../rendered/opentelemetry-operator/certmanager.yaml | 1 - .../rendered/opentelemetry-operator/clusterrole.yaml | 2 -- .../rendered/opentelemetry-operator/clusterrolebinding.yaml | 2 -- .../rendered/opentelemetry-operator/deployment.yaml | 1 - .../rendered/opentelemetry-operator/role.yaml | 1 - .../rendered/opentelemetry-operator/rolebinding.yaml | 1 - .../rendered/opentelemetry-operator/service.yaml | 1 - .../rendered/opentelemetry-operator/serviceaccount.yaml | 1 - .../tests/test-certmanager-connection.yaml | 1 - .../opentelemetry-operator/tests/test-service-connection.yaml | 1 - .../examples/default/rendered/clusterrole.yaml | 1 - .../examples/default/rendered/collector.yaml | 1 - .../examples/default/rendered/hooks.yaml | 1 - .../admission-webhooks/operator-webhook-with-cert-manager.yaml | 1 - .../default/rendered/opentelemetry-operator/certmanager.yaml | 1 - .../default/rendered/opentelemetry-operator/clusterrole.yaml | 2 -- .../rendered/opentelemetry-operator/clusterrolebinding.yaml | 2 -- .../default/rendered/opentelemetry-operator/deployment.yaml | 1 - .../examples/default/rendered/opentelemetry-operator/role.yaml | 1 - .../default/rendered/opentelemetry-operator/rolebinding.yaml | 1 - .../default/rendered/opentelemetry-operator/service.yaml | 1 - .../default/rendered/opentelemetry-operator/serviceaccount.yaml | 1 - .../tests/test-certmanager-connection.yaml | 1 - .../opentelemetry-operator/tests/test-service-connection.yaml | 1 - .../rendered/clusterrole.yaml | 1 - .../isolated-multicollector-deployment/rendered/collector.yaml | 1 - .../isolated-multicollector-deployment/rendered/hooks.yaml | 1 - .../admission-webhooks/operator-webhook-with-cert-manager.yaml | 1 - .../rendered/opentelemetry-operator/certmanager.yaml | 1 - .../rendered/opentelemetry-operator/clusterrole.yaml | 2 -- .../rendered/opentelemetry-operator/clusterrolebinding.yaml | 2 -- .../rendered/opentelemetry-operator/deployment.yaml | 1 - .../rendered/opentelemetry-operator/role.yaml | 1 - .../rendered/opentelemetry-operator/rolebinding.yaml | 1 - .../rendered/opentelemetry-operator/service.yaml | 1 - .../rendered/opentelemetry-operator/serviceaccount.yaml | 1 - .../tests/test-certmanager-connection.yaml | 1 - .../opentelemetry-operator/tests/test-service-connection.yaml | 1 - .../no-leader-election-extension/rendered/clusterrole.yaml | 1 - .../no-leader-election-extension/rendered/collector.yaml | 1 - .../examples/no-leader-election-extension/rendered/hooks.yaml | 1 - .../admission-webhooks/operator-webhook-with-cert-manager.yaml | 1 - .../rendered/opentelemetry-operator/certmanager.yaml | 1 - .../rendered/opentelemetry-operator/clusterrole.yaml | 2 -- .../rendered/opentelemetry-operator/clusterrolebinding.yaml | 2 -- .../rendered/opentelemetry-operator/deployment.yaml | 1 - .../rendered/opentelemetry-operator/role.yaml | 1 - .../rendered/opentelemetry-operator/rolebinding.yaml | 1 - .../rendered/opentelemetry-operator/service.yaml | 1 - .../rendered/opentelemetry-operator/serviceaccount.yaml | 1 - .../tests/test-certmanager-connection.yaml | 1 - .../opentelemetry-operator/tests/test-service-connection.yaml | 1 - .../examples/prometheus-otel/rendered/clusterrole.yaml | 1 - .../examples/prometheus-otel/rendered/collector.yaml | 1 - .../rendered/exporters/kube-api-server/servicemonitor.yaml | 1 - .../rendered/exporters/kube-controller-manager/service.yaml | 1 - .../exporters/kube-controller-manager/servicemonitor.yaml | 1 - .../prometheus-otel/rendered/exporters/kube-dns/service.yaml | 1 - .../rendered/exporters/kube-dns/servicemonitor.yaml | 1 - .../rendered/exporters/kube-etcd/servicemonitor.yaml | 1 - .../rendered/exporters/kube-proxy/servicemonitor.yaml | 1 - .../rendered/exporters/kube-scheduler/servicemonitor.yaml | 1 - .../examples/prometheus-otel/rendered/hooks.yaml | 1 - .../prometheus-otel/rendered/kube-state-metrics/deployment.yaml | 1 - .../prometheus-otel/rendered/kube-state-metrics/role.yaml | 2 -- .../prometheus-otel/rendered/kube-state-metrics/service.yaml | 1 - .../rendered/kube-state-metrics/servicemonitor.yaml | 1 - .../admission-webhooks/operator-webhook-with-cert-manager.yaml | 1 - .../rendered/opentelemetry-operator/certmanager.yaml | 1 - .../rendered/opentelemetry-operator/clusterrole.yaml | 2 -- .../rendered/opentelemetry-operator/clusterrolebinding.yaml | 2 -- .../rendered/opentelemetry-operator/deployment.yaml | 1 - .../prometheus-otel/rendered/opentelemetry-operator/role.yaml | 1 - .../rendered/opentelemetry-operator/rolebinding.yaml | 1 - .../rendered/opentelemetry-operator/service.yaml | 1 - .../rendered/opentelemetry-operator/serviceaccount.yaml | 1 - .../tests/test-certmanager-connection.yaml | 1 - .../opentelemetry-operator/tests/test-service-connection.yaml | 1 - .../rendered/prometheus-node-exporter/daemonset.yaml | 1 - .../rendered/prometheus-node-exporter/service.yaml | 1 - .../rendered/prometheus-node-exporter/servicemonitor.yaml | 1 - .../examples/secrets-csi-driver/rendered/clusterrole.yaml | 1 - .../examples/secrets-csi-driver/rendered/collector.yaml | 1 - .../examples/secrets-csi-driver/rendered/extramanifests.yaml | 1 - .../examples/secrets-csi-driver/rendered/hooks.yaml | 1 - .../admission-webhooks/operator-webhook-with-cert-manager.yaml | 1 - .../rendered/opentelemetry-operator/certmanager.yaml | 1 - .../rendered/opentelemetry-operator/clusterrole.yaml | 2 -- .../rendered/opentelemetry-operator/clusterrolebinding.yaml | 2 -- .../rendered/opentelemetry-operator/deployment.yaml | 1 - .../rendered/opentelemetry-operator/role.yaml | 1 - .../rendered/opentelemetry-operator/rolebinding.yaml | 1 - .../rendered/opentelemetry-operator/service.yaml | 1 - .../rendered/opentelemetry-operator/serviceaccount.yaml | 1 - .../tests/test-certmanager-connection.yaml | 1 - .../opentelemetry-operator/tests/test-service-connection.yaml | 1 - 158 files changed, 184 deletions(-) diff --git a/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/bridge.yaml b/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/bridge.yaml index 8150262179..4f82c6b7bb 100644 --- a/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/bridge.yaml +++ b/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/bridge.yaml @@ -58,5 +58,3 @@ spec: fieldPath: status.podIP - name: OTEL_RESOURCE_ATTRIBUTES value: "k8s.cluster.name=demo" - - diff --git a/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/clusterrole.yaml b/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/clusterrole.yaml index 0f1ed4b2f8..515a697523 100644 --- a/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/clusterrole.yaml +++ b/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/clusterrole.yaml @@ -173,4 +173,3 @@ subjects: # quirk of the Operator name: "example-opamp-bridge" namespace: "default" - diff --git a/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/collector.yaml b/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/collector.yaml index 1c2fa3804c..0485ac826e 100644 --- a/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/collector.yaml +++ b/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/collector.yaml @@ -531,4 +531,3 @@ spec: - name: hostfs hostPath: path: / - diff --git a/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/hooks.yaml b/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/hooks.yaml index df09c1e80b..b16df5ac8f 100644 --- a/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/hooks.yaml +++ b/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/hooks.yaml @@ -62,4 +62,3 @@ spec: - "instrumentations,opampbridges,opentelemetrycollectors" - "-l" - "helm.sh/chart=opentelemetry-kube-stack-0.16.0" - diff --git a/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/instrumentation.yaml b/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/instrumentation.yaml index 753f63f68b..ee026d337a 100644 --- a/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/instrumentation.yaml +++ b/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/instrumentation.yaml @@ -32,4 +32,3 @@ spec: env: - name: OTEL_EXPORTER_OTLP_ENDPOINT value: http://${OTEL_K8S_NODE_NAME}:4318 - diff --git a/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml b/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml index 17585fa86a..7dbf1665c0 100644 --- a/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml +++ b/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml @@ -190,4 +190,3 @@ webhooks: scope: Namespaced sideEffects: None timeoutSeconds: 10 - diff --git a/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/certmanager.yaml b/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/certmanager.yaml index e8615238d0..b7b5be3ffe 100644 --- a/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/certmanager.yaml +++ b/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/certmanager.yaml @@ -41,4 +41,3 @@ metadata: namespace: default spec: selfSigned: {} - diff --git a/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/clusterrole.yaml b/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/clusterrole.yaml index 2037050533..05d1494af1 100644 --- a/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/clusterrole.yaml +++ b/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/clusterrole.yaml @@ -406,5 +406,3 @@ rules: - /metrics verbs: - get - - diff --git a/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/clusterrolebinding.yaml b/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/clusterrolebinding.yaml index 4acb7d53f5..8259beef16 100644 --- a/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/clusterrolebinding.yaml +++ b/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/clusterrolebinding.yaml @@ -20,5 +20,3 @@ subjects: - kind: ServiceAccount name: opentelemetry-operator namespace: default - - diff --git a/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/deployment.yaml b/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/deployment.yaml index c775cd1cf3..2854112b68 100644 --- a/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/deployment.yaml +++ b/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/deployment.yaml @@ -102,4 +102,3 @@ spec: runAsGroup: 65532 runAsNonRoot: true runAsUser: 65532 - diff --git a/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/role.yaml b/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/role.yaml index b5339517a2..0a015afb82 100644 --- a/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/role.yaml +++ b/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/role.yaml @@ -197,4 +197,3 @@ rules: - patch - update - watch - diff --git a/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/rolebinding.yaml b/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/rolebinding.yaml index ae376e80c9..721fdb0099 100644 --- a/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/rolebinding.yaml +++ b/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/rolebinding.yaml @@ -21,4 +21,3 @@ subjects: - kind: ServiceAccount name: opentelemetry-operator namespace: default - diff --git a/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/service.yaml b/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/service.yaml index 0a3006d80f..bf164a93d7 100644 --- a/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/service.yaml +++ b/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/service.yaml @@ -45,4 +45,3 @@ spec: selector: app.kubernetes.io/name: opentelemetry-operator app.kubernetes.io/component: controller-manager - diff --git a/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/serviceaccount.yaml b/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/serviceaccount.yaml index c6ba25dbac..6abe418372 100644 --- a/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/serviceaccount.yaml +++ b/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/serviceaccount.yaml @@ -14,4 +14,3 @@ metadata: app.kubernetes.io/part-of: opentelemetry-operator app.kubernetes.io/instance: example app.kubernetes.io/component: controller-manager - diff --git a/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml b/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml index 9039160e03..f86f50575c 100644 --- a/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml +++ b/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml @@ -51,4 +51,3 @@ spec: runAsGroup: 65532 runAsNonRoot: true runAsUser: 65532 - diff --git a/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/tests/test-service-connection.yaml b/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/tests/test-service-connection.yaml index 88e0e0bc24..79329c4b9b 100644 --- a/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/tests/test-service-connection.yaml +++ b/charts/opentelemetry-kube-stack/examples/cloud-demo/rendered/opentelemetry-operator/tests/test-service-connection.yaml @@ -104,4 +104,3 @@ spec: runAsGroup: 65532 runAsNonRoot: true runAsUser: 65532 - diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/clusterrole.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/clusterrole.yaml index 9d2d1e8211..2c535f471b 100644 --- a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/clusterrole.yaml +++ b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/clusterrole.yaml @@ -66,4 +66,3 @@ subjects: # quirk of the Operator name: "example-daemon-collector" namespace: default - diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/collector.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/collector.yaml index 2e18381742..f280d0720c 100644 --- a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/collector.yaml +++ b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/collector.yaml @@ -124,5 +124,3 @@ spec: fieldPath: status.podIP - name: OTEL_RESOURCE_ATTRIBUTES value: "k8s.pod.name=$(OTEL_K8S_POD_NAME),k8s.namespace.name=$(OTEL_K8S_NAMESPACE),k8s.node.name=$(OTEL_K8S_NODE_NAME),host.name=$(OTEL_K8S_NODE_NAME),k8s.node.ip=$(OTEL_K8S_NODE_IP),k8s.pod.ip=$(OTEL_K8S_POD_IP),k8s.cluster.name=unknown_k8s_cluster" - - diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/hooks.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/hooks.yaml index df09c1e80b..b16df5ac8f 100644 --- a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/hooks.yaml +++ b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/hooks.yaml @@ -62,4 +62,3 @@ spec: - "instrumentations,opampbridges,opentelemetrycollectors" - "-l" - "helm.sh/chart=opentelemetry-kube-stack-0.16.0" - diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml index 17585fa86a..7dbf1665c0 100644 --- a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml +++ b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml @@ -190,4 +190,3 @@ webhooks: scope: Namespaced sideEffects: None timeoutSeconds: 10 - diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/certmanager.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/certmanager.yaml index e8615238d0..b7b5be3ffe 100644 --- a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/certmanager.yaml +++ b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/certmanager.yaml @@ -41,4 +41,3 @@ metadata: namespace: default spec: selfSigned: {} - diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/clusterrole.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/clusterrole.yaml index 2037050533..05d1494af1 100644 --- a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/clusterrole.yaml +++ b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/clusterrole.yaml @@ -406,5 +406,3 @@ rules: - /metrics verbs: - get - - diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/clusterrolebinding.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/clusterrolebinding.yaml index 4acb7d53f5..8259beef16 100644 --- a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/clusterrolebinding.yaml +++ b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/clusterrolebinding.yaml @@ -20,5 +20,3 @@ subjects: - kind: ServiceAccount name: opentelemetry-operator namespace: default - - diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/deployment.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/deployment.yaml index c775cd1cf3..2854112b68 100644 --- a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/deployment.yaml +++ b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/deployment.yaml @@ -102,4 +102,3 @@ spec: runAsGroup: 65532 runAsNonRoot: true runAsUser: 65532 - diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/role.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/role.yaml index b5339517a2..0a015afb82 100644 --- a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/role.yaml +++ b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/role.yaml @@ -197,4 +197,3 @@ rules: - patch - update - watch - diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/rolebinding.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/rolebinding.yaml index ae376e80c9..721fdb0099 100644 --- a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/rolebinding.yaml +++ b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/rolebinding.yaml @@ -21,4 +21,3 @@ subjects: - kind: ServiceAccount name: opentelemetry-operator namespace: default - diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/service.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/service.yaml index 0a3006d80f..bf164a93d7 100644 --- a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/service.yaml +++ b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/service.yaml @@ -45,4 +45,3 @@ spec: selector: app.kubernetes.io/name: opentelemetry-operator app.kubernetes.io/component: controller-manager - diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/serviceaccount.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/serviceaccount.yaml index c6ba25dbac..6abe418372 100644 --- a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/serviceaccount.yaml +++ b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/serviceaccount.yaml @@ -14,4 +14,3 @@ metadata: app.kubernetes.io/part-of: opentelemetry-operator app.kubernetes.io/instance: example app.kubernetes.io/component: controller-manager - diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml index 9039160e03..f86f50575c 100644 --- a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml +++ b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml @@ -51,4 +51,3 @@ spec: runAsGroup: 65532 runAsNonRoot: true runAsUser: 65532 - diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/tests/test-service-connection.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/tests/test-service-connection.yaml index 88e0e0bc24..79329c4b9b 100644 --- a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/tests/test-service-connection.yaml +++ b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-logs/rendered/opentelemetry-operator/tests/test-service-connection.yaml @@ -104,4 +104,3 @@ spec: runAsGroup: 65532 runAsNonRoot: true runAsUser: 65532 - diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/clusterrole.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/clusterrole.yaml index 9d2d1e8211..2c535f471b 100644 --- a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/clusterrole.yaml +++ b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/clusterrole.yaml @@ -66,4 +66,3 @@ subjects: # quirk of the Operator name: "example-daemon-collector" namespace: default - diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/collector.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/collector.yaml index a9b50cce3a..c5edf11f42 100644 --- a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/collector.yaml +++ b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/collector.yaml @@ -122,5 +122,3 @@ spec: fieldPath: status.podIP - name: OTEL_RESOURCE_ATTRIBUTES value: "k8s.pod.name=$(OTEL_K8S_POD_NAME),k8s.namespace.name=$(OTEL_K8S_NAMESPACE),k8s.node.name=$(OTEL_K8S_NODE_NAME),host.name=$(OTEL_K8S_NODE_NAME),k8s.node.ip=$(OTEL_K8S_NODE_IP),k8s.pod.ip=$(OTEL_K8S_POD_IP),k8s.cluster.name=unknown_k8s_cluster" - - diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/hooks.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/hooks.yaml index df09c1e80b..b16df5ac8f 100644 --- a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/hooks.yaml +++ b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/hooks.yaml @@ -62,4 +62,3 @@ spec: - "instrumentations,opampbridges,opentelemetrycollectors" - "-l" - "helm.sh/chart=opentelemetry-kube-stack-0.16.0" - diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml index 17585fa86a..7dbf1665c0 100644 --- a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml +++ b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml @@ -190,4 +190,3 @@ webhooks: scope: Namespaced sideEffects: None timeoutSeconds: 10 - diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/certmanager.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/certmanager.yaml index e8615238d0..b7b5be3ffe 100644 --- a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/certmanager.yaml +++ b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/certmanager.yaml @@ -41,4 +41,3 @@ metadata: namespace: default spec: selfSigned: {} - diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/clusterrole.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/clusterrole.yaml index 2037050533..05d1494af1 100644 --- a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/clusterrole.yaml +++ b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/clusterrole.yaml @@ -406,5 +406,3 @@ rules: - /metrics verbs: - get - - diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/clusterrolebinding.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/clusterrolebinding.yaml index 4acb7d53f5..8259beef16 100644 --- a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/clusterrolebinding.yaml +++ b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/clusterrolebinding.yaml @@ -20,5 +20,3 @@ subjects: - kind: ServiceAccount name: opentelemetry-operator namespace: default - - diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/deployment.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/deployment.yaml index c775cd1cf3..2854112b68 100644 --- a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/deployment.yaml +++ b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/deployment.yaml @@ -102,4 +102,3 @@ spec: runAsGroup: 65532 runAsNonRoot: true runAsUser: 65532 - diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/role.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/role.yaml index b5339517a2..0a015afb82 100644 --- a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/role.yaml +++ b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/role.yaml @@ -197,4 +197,3 @@ rules: - patch - update - watch - diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/rolebinding.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/rolebinding.yaml index ae376e80c9..721fdb0099 100644 --- a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/rolebinding.yaml +++ b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/rolebinding.yaml @@ -21,4 +21,3 @@ subjects: - kind: ServiceAccount name: opentelemetry-operator namespace: default - diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/service.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/service.yaml index 0a3006d80f..bf164a93d7 100644 --- a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/service.yaml +++ b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/service.yaml @@ -45,4 +45,3 @@ spec: selector: app.kubernetes.io/name: opentelemetry-operator app.kubernetes.io/component: controller-manager - diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/serviceaccount.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/serviceaccount.yaml index c6ba25dbac..6abe418372 100644 --- a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/serviceaccount.yaml +++ b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/serviceaccount.yaml @@ -14,4 +14,3 @@ metadata: app.kubernetes.io/part-of: opentelemetry-operator app.kubernetes.io/instance: example app.kubernetes.io/component: controller-manager - diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml index 9039160e03..f86f50575c 100644 --- a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml +++ b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml @@ -51,4 +51,3 @@ spec: runAsGroup: 65532 runAsNonRoot: true runAsUser: 65532 - diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/tests/test-service-connection.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/tests/test-service-connection.yaml index 88e0e0bc24..79329c4b9b 100644 --- a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/tests/test-service-connection.yaml +++ b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery-metrics/rendered/opentelemetry-operator/tests/test-service-connection.yaml @@ -104,4 +104,3 @@ spec: runAsGroup: 65532 runAsNonRoot: true runAsUser: 65532 - diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/clusterrole.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/clusterrole.yaml index 9d2d1e8211..2c535f471b 100644 --- a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/clusterrole.yaml +++ b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/clusterrole.yaml @@ -66,4 +66,3 @@ subjects: # quirk of the Operator name: "example-daemon-collector" namespace: default - diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/collector.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/collector.yaml index 0a31142426..2394e4fd65 100644 --- a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/collector.yaml +++ b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/collector.yaml @@ -130,5 +130,3 @@ spec: fieldPath: status.podIP - name: OTEL_RESOURCE_ATTRIBUTES value: "k8s.pod.name=$(OTEL_K8S_POD_NAME),k8s.namespace.name=$(OTEL_K8S_NAMESPACE),k8s.node.name=$(OTEL_K8S_NODE_NAME),host.name=$(OTEL_K8S_NODE_NAME),k8s.node.ip=$(OTEL_K8S_NODE_IP),k8s.pod.ip=$(OTEL_K8S_POD_IP),k8s.cluster.name=unknown_k8s_cluster" - - diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/hooks.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/hooks.yaml index df09c1e80b..b16df5ac8f 100644 --- a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/hooks.yaml +++ b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/hooks.yaml @@ -62,4 +62,3 @@ spec: - "instrumentations,opampbridges,opentelemetrycollectors" - "-l" - "helm.sh/chart=opentelemetry-kube-stack-0.16.0" - diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml index 17585fa86a..7dbf1665c0 100644 --- a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml +++ b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml @@ -190,4 +190,3 @@ webhooks: scope: Namespaced sideEffects: None timeoutSeconds: 10 - diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/certmanager.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/certmanager.yaml index e8615238d0..b7b5be3ffe 100644 --- a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/certmanager.yaml +++ b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/certmanager.yaml @@ -41,4 +41,3 @@ metadata: namespace: default spec: selfSigned: {} - diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/clusterrole.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/clusterrole.yaml index 2037050533..05d1494af1 100644 --- a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/clusterrole.yaml +++ b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/clusterrole.yaml @@ -406,5 +406,3 @@ rules: - /metrics verbs: - get - - diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/clusterrolebinding.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/clusterrolebinding.yaml index 4acb7d53f5..8259beef16 100644 --- a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/clusterrolebinding.yaml +++ b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/clusterrolebinding.yaml @@ -20,5 +20,3 @@ subjects: - kind: ServiceAccount name: opentelemetry-operator namespace: default - - diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/deployment.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/deployment.yaml index c775cd1cf3..2854112b68 100644 --- a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/deployment.yaml +++ b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/deployment.yaml @@ -102,4 +102,3 @@ spec: runAsGroup: 65532 runAsNonRoot: true runAsUser: 65532 - diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/role.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/role.yaml index b5339517a2..0a015afb82 100644 --- a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/role.yaml +++ b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/role.yaml @@ -197,4 +197,3 @@ rules: - patch - update - watch - diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/rolebinding.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/rolebinding.yaml index ae376e80c9..721fdb0099 100644 --- a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/rolebinding.yaml +++ b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/rolebinding.yaml @@ -21,4 +21,3 @@ subjects: - kind: ServiceAccount name: opentelemetry-operator namespace: default - diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/service.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/service.yaml index 0a3006d80f..bf164a93d7 100644 --- a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/service.yaml +++ b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/service.yaml @@ -45,4 +45,3 @@ spec: selector: app.kubernetes.io/name: opentelemetry-operator app.kubernetes.io/component: controller-manager - diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/serviceaccount.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/serviceaccount.yaml index c6ba25dbac..6abe418372 100644 --- a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/serviceaccount.yaml +++ b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/serviceaccount.yaml @@ -14,4 +14,3 @@ metadata: app.kubernetes.io/part-of: opentelemetry-operator app.kubernetes.io/instance: example app.kubernetes.io/component: controller-manager - diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml index 9039160e03..f86f50575c 100644 --- a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml +++ b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml @@ -51,4 +51,3 @@ spec: runAsGroup: 65532 runAsNonRoot: true runAsUser: 65532 - diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/tests/test-service-connection.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/tests/test-service-connection.yaml index 88e0e0bc24..79329c4b9b 100644 --- a/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/tests/test-service-connection.yaml +++ b/charts/opentelemetry-kube-stack/examples/daemonset-annotation-discovery/rendered/opentelemetry-operator/tests/test-service-connection.yaml @@ -104,4 +104,3 @@ spec: runAsGroup: 65532 runAsNonRoot: true runAsUser: 65532 - diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/clusterrole.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/clusterrole.yaml index 9d2d1e8211..2c535f471b 100644 --- a/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/clusterrole.yaml +++ b/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/clusterrole.yaml @@ -66,4 +66,3 @@ subjects: # quirk of the Operator name: "example-daemon-collector" namespace: default - diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/collector.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/collector.yaml index aac16b8728..286912e5f0 100644 --- a/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/collector.yaml +++ b/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/collector.yaml @@ -234,5 +234,3 @@ spec: fieldPath: status.podIP - name: OTEL_RESOURCE_ATTRIBUTES value: "k8s.pod.name=$(OTEL_K8S_POD_NAME),k8s.namespace.name=$(OTEL_K8S_NAMESPACE),k8s.node.name=$(OTEL_K8S_NODE_NAME),host.name=$(OTEL_K8S_NODE_NAME),k8s.node.ip=$(OTEL_K8S_NODE_IP),k8s.pod.ip=$(OTEL_K8S_POD_IP),k8s.cluster.name=unknown_k8s_cluster" - - diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/hooks.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/hooks.yaml index df09c1e80b..b16df5ac8f 100644 --- a/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/hooks.yaml +++ b/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/hooks.yaml @@ -62,4 +62,3 @@ spec: - "instrumentations,opampbridges,opentelemetrycollectors" - "-l" - "helm.sh/chart=opentelemetry-kube-stack-0.16.0" - diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml index 17585fa86a..7dbf1665c0 100644 --- a/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml +++ b/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml @@ -190,4 +190,3 @@ webhooks: scope: Namespaced sideEffects: None timeoutSeconds: 10 - diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/certmanager.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/certmanager.yaml index e8615238d0..b7b5be3ffe 100644 --- a/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/certmanager.yaml +++ b/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/certmanager.yaml @@ -41,4 +41,3 @@ metadata: namespace: default spec: selfSigned: {} - diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/clusterrole.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/clusterrole.yaml index 2037050533..05d1494af1 100644 --- a/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/clusterrole.yaml +++ b/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/clusterrole.yaml @@ -406,5 +406,3 @@ rules: - /metrics verbs: - get - - diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/clusterrolebinding.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/clusterrolebinding.yaml index 4acb7d53f5..8259beef16 100644 --- a/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/clusterrolebinding.yaml +++ b/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/clusterrolebinding.yaml @@ -20,5 +20,3 @@ subjects: - kind: ServiceAccount name: opentelemetry-operator namespace: default - - diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/deployment.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/deployment.yaml index c775cd1cf3..2854112b68 100644 --- a/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/deployment.yaml +++ b/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/deployment.yaml @@ -102,4 +102,3 @@ spec: runAsGroup: 65532 runAsNonRoot: true runAsUser: 65532 - diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/role.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/role.yaml index b5339517a2..0a015afb82 100644 --- a/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/role.yaml +++ b/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/role.yaml @@ -197,4 +197,3 @@ rules: - patch - update - watch - diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/rolebinding.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/rolebinding.yaml index ae376e80c9..721fdb0099 100644 --- a/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/rolebinding.yaml +++ b/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/rolebinding.yaml @@ -21,4 +21,3 @@ subjects: - kind: ServiceAccount name: opentelemetry-operator namespace: default - diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/service.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/service.yaml index 0a3006d80f..bf164a93d7 100644 --- a/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/service.yaml +++ b/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/service.yaml @@ -45,4 +45,3 @@ spec: selector: app.kubernetes.io/name: opentelemetry-operator app.kubernetes.io/component: controller-manager - diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/serviceaccount.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/serviceaccount.yaml index c6ba25dbac..6abe418372 100644 --- a/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/serviceaccount.yaml +++ b/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/serviceaccount.yaml @@ -14,4 +14,3 @@ metadata: app.kubernetes.io/part-of: opentelemetry-operator app.kubernetes.io/instance: example app.kubernetes.io/component: controller-manager - diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml index 9039160e03..f86f50575c 100644 --- a/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml +++ b/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml @@ -51,4 +51,3 @@ spec: runAsGroup: 65532 runAsNonRoot: true runAsUser: 65532 - diff --git a/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/tests/test-service-connection.yaml b/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/tests/test-service-connection.yaml index 88e0e0bc24..79329c4b9b 100644 --- a/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/tests/test-service-connection.yaml +++ b/charts/opentelemetry-kube-stack/examples/daemonset-prometheus-presets/rendered/opentelemetry-operator/tests/test-service-connection.yaml @@ -104,4 +104,3 @@ spec: runAsGroup: 65532 runAsNonRoot: true runAsUser: 65532 - diff --git a/charts/opentelemetry-kube-stack/examples/default/rendered/clusterrole.yaml b/charts/opentelemetry-kube-stack/examples/default/rendered/clusterrole.yaml index 04fd4b7372..3379a6a125 100644 --- a/charts/opentelemetry-kube-stack/examples/default/rendered/clusterrole.yaml +++ b/charts/opentelemetry-kube-stack/examples/default/rendered/clusterrole.yaml @@ -138,4 +138,3 @@ subjects: # quirk of the Operator name: "example-daemon-collector" namespace: default - diff --git a/charts/opentelemetry-kube-stack/examples/default/rendered/collector.yaml b/charts/opentelemetry-kube-stack/examples/default/rendered/collector.yaml index 87cf348759..a4b8c44e29 100644 --- a/charts/opentelemetry-kube-stack/examples/default/rendered/collector.yaml +++ b/charts/opentelemetry-kube-stack/examples/default/rendered/collector.yaml @@ -512,4 +512,3 @@ spec: - name: hostfs hostPath: path: / - diff --git a/charts/opentelemetry-kube-stack/examples/default/rendered/hooks.yaml b/charts/opentelemetry-kube-stack/examples/default/rendered/hooks.yaml index df09c1e80b..b16df5ac8f 100644 --- a/charts/opentelemetry-kube-stack/examples/default/rendered/hooks.yaml +++ b/charts/opentelemetry-kube-stack/examples/default/rendered/hooks.yaml @@ -62,4 +62,3 @@ spec: - "instrumentations,opampbridges,opentelemetrycollectors" - "-l" - "helm.sh/chart=opentelemetry-kube-stack-0.16.0" - diff --git a/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml b/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml index 17585fa86a..7dbf1665c0 100644 --- a/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml +++ b/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml @@ -190,4 +190,3 @@ webhooks: scope: Namespaced sideEffects: None timeoutSeconds: 10 - diff --git a/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/certmanager.yaml b/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/certmanager.yaml index e8615238d0..b7b5be3ffe 100644 --- a/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/certmanager.yaml +++ b/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/certmanager.yaml @@ -41,4 +41,3 @@ metadata: namespace: default spec: selfSigned: {} - diff --git a/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/clusterrole.yaml b/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/clusterrole.yaml index 2037050533..05d1494af1 100644 --- a/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/clusterrole.yaml +++ b/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/clusterrole.yaml @@ -406,5 +406,3 @@ rules: - /metrics verbs: - get - - diff --git a/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/clusterrolebinding.yaml b/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/clusterrolebinding.yaml index 4acb7d53f5..8259beef16 100644 --- a/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/clusterrolebinding.yaml +++ b/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/clusterrolebinding.yaml @@ -20,5 +20,3 @@ subjects: - kind: ServiceAccount name: opentelemetry-operator namespace: default - - diff --git a/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/deployment.yaml b/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/deployment.yaml index c775cd1cf3..2854112b68 100644 --- a/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/deployment.yaml +++ b/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/deployment.yaml @@ -102,4 +102,3 @@ spec: runAsGroup: 65532 runAsNonRoot: true runAsUser: 65532 - diff --git a/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/role.yaml b/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/role.yaml index b5339517a2..0a015afb82 100644 --- a/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/role.yaml +++ b/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/role.yaml @@ -197,4 +197,3 @@ rules: - patch - update - watch - diff --git a/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/rolebinding.yaml b/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/rolebinding.yaml index ae376e80c9..721fdb0099 100644 --- a/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/rolebinding.yaml +++ b/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/rolebinding.yaml @@ -21,4 +21,3 @@ subjects: - kind: ServiceAccount name: opentelemetry-operator namespace: default - diff --git a/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/service.yaml b/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/service.yaml index 0a3006d80f..bf164a93d7 100644 --- a/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/service.yaml +++ b/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/service.yaml @@ -45,4 +45,3 @@ spec: selector: app.kubernetes.io/name: opentelemetry-operator app.kubernetes.io/component: controller-manager - diff --git a/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/serviceaccount.yaml b/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/serviceaccount.yaml index c6ba25dbac..6abe418372 100644 --- a/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/serviceaccount.yaml +++ b/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/serviceaccount.yaml @@ -14,4 +14,3 @@ metadata: app.kubernetes.io/part-of: opentelemetry-operator app.kubernetes.io/instance: example app.kubernetes.io/component: controller-manager - diff --git a/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml b/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml index 9039160e03..f86f50575c 100644 --- a/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml +++ b/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml @@ -51,4 +51,3 @@ spec: runAsGroup: 65532 runAsNonRoot: true runAsUser: 65532 - diff --git a/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/tests/test-service-connection.yaml b/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/tests/test-service-connection.yaml index 88e0e0bc24..79329c4b9b 100644 --- a/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/tests/test-service-connection.yaml +++ b/charts/opentelemetry-kube-stack/examples/default/rendered/opentelemetry-operator/tests/test-service-connection.yaml @@ -104,4 +104,3 @@ spec: runAsGroup: 65532 runAsNonRoot: true runAsUser: 65532 - diff --git a/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/clusterrole.yaml b/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/clusterrole.yaml index 5f316fe954..2ed6efe919 100644 --- a/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/clusterrole.yaml +++ b/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/clusterrole.yaml @@ -138,4 +138,3 @@ subjects: # quirk of the Operator name: "agent-collector" namespace: default - diff --git a/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/collector.yaml b/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/collector.yaml index c8ee284931..7cb3bcd04a 100644 --- a/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/collector.yaml +++ b/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/collector.yaml @@ -484,4 +484,3 @@ spec: path: /var/lib/otelcol/ingress type: DirectoryOrCreate name: varlibotelcol - diff --git a/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/hooks.yaml b/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/hooks.yaml index df09c1e80b..b16df5ac8f 100644 --- a/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/hooks.yaml +++ b/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/hooks.yaml @@ -62,4 +62,3 @@ spec: - "instrumentations,opampbridges,opentelemetrycollectors" - "-l" - "helm.sh/chart=opentelemetry-kube-stack-0.16.0" - diff --git a/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml b/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml index 17585fa86a..7dbf1665c0 100644 --- a/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml +++ b/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml @@ -190,4 +190,3 @@ webhooks: scope: Namespaced sideEffects: None timeoutSeconds: 10 - diff --git a/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/certmanager.yaml b/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/certmanager.yaml index e8615238d0..b7b5be3ffe 100644 --- a/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/certmanager.yaml +++ b/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/certmanager.yaml @@ -41,4 +41,3 @@ metadata: namespace: default spec: selfSigned: {} - diff --git a/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/clusterrole.yaml b/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/clusterrole.yaml index 2037050533..05d1494af1 100644 --- a/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/clusterrole.yaml +++ b/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/clusterrole.yaml @@ -406,5 +406,3 @@ rules: - /metrics verbs: - get - - diff --git a/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/clusterrolebinding.yaml b/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/clusterrolebinding.yaml index 4acb7d53f5..8259beef16 100644 --- a/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/clusterrolebinding.yaml +++ b/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/clusterrolebinding.yaml @@ -20,5 +20,3 @@ subjects: - kind: ServiceAccount name: opentelemetry-operator namespace: default - - diff --git a/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/deployment.yaml b/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/deployment.yaml index c775cd1cf3..2854112b68 100644 --- a/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/deployment.yaml +++ b/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/deployment.yaml @@ -102,4 +102,3 @@ spec: runAsGroup: 65532 runAsNonRoot: true runAsUser: 65532 - diff --git a/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/role.yaml b/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/role.yaml index b5339517a2..0a015afb82 100644 --- a/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/role.yaml +++ b/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/role.yaml @@ -197,4 +197,3 @@ rules: - patch - update - watch - diff --git a/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/rolebinding.yaml b/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/rolebinding.yaml index ae376e80c9..721fdb0099 100644 --- a/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/rolebinding.yaml +++ b/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/rolebinding.yaml @@ -21,4 +21,3 @@ subjects: - kind: ServiceAccount name: opentelemetry-operator namespace: default - diff --git a/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/service.yaml b/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/service.yaml index 0a3006d80f..bf164a93d7 100644 --- a/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/service.yaml +++ b/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/service.yaml @@ -45,4 +45,3 @@ spec: selector: app.kubernetes.io/name: opentelemetry-operator app.kubernetes.io/component: controller-manager - diff --git a/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/serviceaccount.yaml b/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/serviceaccount.yaml index c6ba25dbac..6abe418372 100644 --- a/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/serviceaccount.yaml +++ b/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/serviceaccount.yaml @@ -14,4 +14,3 @@ metadata: app.kubernetes.io/part-of: opentelemetry-operator app.kubernetes.io/instance: example app.kubernetes.io/component: controller-manager - diff --git a/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml b/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml index 9039160e03..f86f50575c 100644 --- a/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml +++ b/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml @@ -51,4 +51,3 @@ spec: runAsGroup: 65532 runAsNonRoot: true runAsUser: 65532 - diff --git a/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/tests/test-service-connection.yaml b/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/tests/test-service-connection.yaml index 88e0e0bc24..79329c4b9b 100644 --- a/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/tests/test-service-connection.yaml +++ b/charts/opentelemetry-kube-stack/examples/isolated-multicollector-deployment/rendered/opentelemetry-operator/tests/test-service-connection.yaml @@ -104,4 +104,3 @@ spec: runAsGroup: 65532 runAsNonRoot: true runAsUser: 65532 - diff --git a/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/clusterrole.yaml b/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/clusterrole.yaml index e936bf24d8..ba20b50e83 100644 --- a/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/clusterrole.yaml +++ b/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/clusterrole.yaml @@ -141,4 +141,3 @@ subjects: # quirk of the Operator name: "example-daemon-collector" namespace: default - diff --git a/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/collector.yaml b/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/collector.yaml index 42d52cdd0f..fb60f13e92 100644 --- a/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/collector.yaml +++ b/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/collector.yaml @@ -644,4 +644,3 @@ spec: - name: hostfs hostPath: path: / - diff --git a/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/hooks.yaml b/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/hooks.yaml index df09c1e80b..b16df5ac8f 100644 --- a/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/hooks.yaml +++ b/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/hooks.yaml @@ -62,4 +62,3 @@ spec: - "instrumentations,opampbridges,opentelemetrycollectors" - "-l" - "helm.sh/chart=opentelemetry-kube-stack-0.16.0" - diff --git a/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml b/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml index 17585fa86a..7dbf1665c0 100644 --- a/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml +++ b/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml @@ -190,4 +190,3 @@ webhooks: scope: Namespaced sideEffects: None timeoutSeconds: 10 - diff --git a/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/certmanager.yaml b/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/certmanager.yaml index e8615238d0..b7b5be3ffe 100644 --- a/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/certmanager.yaml +++ b/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/certmanager.yaml @@ -41,4 +41,3 @@ metadata: namespace: default spec: selfSigned: {} - diff --git a/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/clusterrole.yaml b/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/clusterrole.yaml index 2037050533..05d1494af1 100644 --- a/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/clusterrole.yaml +++ b/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/clusterrole.yaml @@ -406,5 +406,3 @@ rules: - /metrics verbs: - get - - diff --git a/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/clusterrolebinding.yaml b/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/clusterrolebinding.yaml index 4acb7d53f5..8259beef16 100644 --- a/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/clusterrolebinding.yaml +++ b/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/clusterrolebinding.yaml @@ -20,5 +20,3 @@ subjects: - kind: ServiceAccount name: opentelemetry-operator namespace: default - - diff --git a/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/deployment.yaml b/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/deployment.yaml index c775cd1cf3..2854112b68 100644 --- a/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/deployment.yaml +++ b/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/deployment.yaml @@ -102,4 +102,3 @@ spec: runAsGroup: 65532 runAsNonRoot: true runAsUser: 65532 - diff --git a/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/role.yaml b/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/role.yaml index b5339517a2..0a015afb82 100644 --- a/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/role.yaml +++ b/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/role.yaml @@ -197,4 +197,3 @@ rules: - patch - update - watch - diff --git a/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/rolebinding.yaml b/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/rolebinding.yaml index ae376e80c9..721fdb0099 100644 --- a/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/rolebinding.yaml +++ b/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/rolebinding.yaml @@ -21,4 +21,3 @@ subjects: - kind: ServiceAccount name: opentelemetry-operator namespace: default - diff --git a/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/service.yaml b/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/service.yaml index 0a3006d80f..bf164a93d7 100644 --- a/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/service.yaml +++ b/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/service.yaml @@ -45,4 +45,3 @@ spec: selector: app.kubernetes.io/name: opentelemetry-operator app.kubernetes.io/component: controller-manager - diff --git a/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/serviceaccount.yaml b/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/serviceaccount.yaml index c6ba25dbac..6abe418372 100644 --- a/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/serviceaccount.yaml +++ b/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/serviceaccount.yaml @@ -14,4 +14,3 @@ metadata: app.kubernetes.io/part-of: opentelemetry-operator app.kubernetes.io/instance: example app.kubernetes.io/component: controller-manager - diff --git a/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml b/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml index 9039160e03..f86f50575c 100644 --- a/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml +++ b/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml @@ -51,4 +51,3 @@ spec: runAsGroup: 65532 runAsNonRoot: true runAsUser: 65532 - diff --git a/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/tests/test-service-connection.yaml b/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/tests/test-service-connection.yaml index 88e0e0bc24..79329c4b9b 100644 --- a/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/tests/test-service-connection.yaml +++ b/charts/opentelemetry-kube-stack/examples/no-leader-election-extension/rendered/opentelemetry-operator/tests/test-service-connection.yaml @@ -104,4 +104,3 @@ spec: runAsGroup: 65532 runAsNonRoot: true runAsUser: 65532 - diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/clusterrole.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/clusterrole.yaml index 32f102bb70..2f258ac609 100644 --- a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/clusterrole.yaml +++ b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/clusterrole.yaml @@ -69,4 +69,3 @@ subjects: - kind: ServiceAccount name: example-daemon-targetallocator namespace: default - diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/collector.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/collector.yaml index f7dc54045e..94eb9454a1 100644 --- a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/collector.yaml +++ b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/collector.yaml @@ -134,4 +134,3 @@ spec: secretKeyRef: key: access_token name: otel-collector-secret - diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-api-server/servicemonitor.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-api-server/servicemonitor.yaml index 1037fe3792..fe7964fbd8 100644 --- a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-api-server/servicemonitor.yaml +++ b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-api-server/servicemonitor.yaml @@ -35,4 +35,3 @@ spec: matchLabels: component: apiserver provider: kubernetes - diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-controller-manager/service.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-controller-manager/service.yaml index 9dcfc972bf..48fad8ddcb 100644 --- a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-controller-manager/service.yaml +++ b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-controller-manager/service.yaml @@ -22,4 +22,3 @@ spec: selector: component: kube-controller-manager type: ClusterIP - diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-controller-manager/servicemonitor.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-controller-manager/servicemonitor.yaml index 9ef9dcb9ce..add508a859 100644 --- a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-controller-manager/servicemonitor.yaml +++ b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-controller-manager/servicemonitor.yaml @@ -28,4 +28,3 @@ spec: tlsConfig: caFile: /var/run/secrets/kubernetes.io/serviceaccount/ca.crt insecureSkipVerify: true - diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-dns/service.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-dns/service.yaml index 4b6f32aba5..8b5323b653 100644 --- a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-dns/service.yaml +++ b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-dns/service.yaml @@ -25,4 +25,3 @@ spec: targetPort: 10055 selector: k8s-app: kube-dns - diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-dns/servicemonitor.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-dns/servicemonitor.yaml index bda13b20d4..837fdb290f 100644 --- a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-dns/servicemonitor.yaml +++ b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-dns/servicemonitor.yaml @@ -26,4 +26,3 @@ spec: bearerTokenFile: /var/run/secrets/kubernetes.io/serviceaccount/token - port: http-metrics-skydns bearerTokenFile: /var/run/secrets/kubernetes.io/serviceaccount/token - diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-etcd/servicemonitor.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-etcd/servicemonitor.yaml index 006d61f678..96ab2eff9b 100644 --- a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-etcd/servicemonitor.yaml +++ b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-etcd/servicemonitor.yaml @@ -24,4 +24,3 @@ spec: endpoints: - port: http-metrics bearerTokenFile: /var/run/secrets/kubernetes.io/serviceaccount/token - diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-proxy/servicemonitor.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-proxy/servicemonitor.yaml index 4035b3cc66..421c615391 100644 --- a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-proxy/servicemonitor.yaml +++ b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-proxy/servicemonitor.yaml @@ -24,4 +24,3 @@ spec: endpoints: - port: http-metrics bearerTokenFile: /var/run/secrets/kubernetes.io/serviceaccount/token - diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-scheduler/servicemonitor.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-scheduler/servicemonitor.yaml index 8fb50913e1..ac1c7e7618 100644 --- a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-scheduler/servicemonitor.yaml +++ b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/exporters/kube-scheduler/servicemonitor.yaml @@ -28,4 +28,3 @@ spec: tlsConfig: caFile: /var/run/secrets/kubernetes.io/serviceaccount/ca.crt insecureSkipVerify: true - diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/hooks.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/hooks.yaml index df09c1e80b..b16df5ac8f 100644 --- a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/hooks.yaml +++ b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/hooks.yaml @@ -62,4 +62,3 @@ spec: - "instrumentations,opampbridges,opentelemetrycollectors" - "-l" - "helm.sh/chart=opentelemetry-kube-stack-0.16.0" - diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/kube-state-metrics/deployment.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/kube-state-metrics/deployment.yaml index 06bb5ab7d8..8e7389c0ff 100644 --- a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/kube-state-metrics/deployment.yaml +++ b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/kube-state-metrics/deployment.yaml @@ -86,4 +86,3 @@ spec: drop: - ALL readOnlyRootFilesystem: true - diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/kube-state-metrics/role.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/kube-state-metrics/role.yaml index 96e9f39ebc..e7c53da37c 100644 --- a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/kube-state-metrics/role.yaml +++ b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/kube-state-metrics/role.yaml @@ -154,5 +154,3 @@ rules: resources: - volumeattachments verbs: ["list", "watch"] - - diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/kube-state-metrics/service.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/kube-state-metrics/service.yaml index 239a6407b8..bac884f9bf 100644 --- a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/kube-state-metrics/service.yaml +++ b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/kube-state-metrics/service.yaml @@ -27,4 +27,3 @@ spec: selector: app.kubernetes.io/name: kube-state-metrics app.kubernetes.io/instance: example - diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/kube-state-metrics/servicemonitor.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/kube-state-metrics/servicemonitor.yaml index 7eccbfc900..8e1c1ac419 100644 --- a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/kube-state-metrics/servicemonitor.yaml +++ b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/kube-state-metrics/servicemonitor.yaml @@ -23,4 +23,3 @@ spec: endpoints: - port: http honorLabels: true - diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml index 17585fa86a..7dbf1665c0 100644 --- a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml +++ b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml @@ -190,4 +190,3 @@ webhooks: scope: Namespaced sideEffects: None timeoutSeconds: 10 - diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/certmanager.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/certmanager.yaml index e8615238d0..b7b5be3ffe 100644 --- a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/certmanager.yaml +++ b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/certmanager.yaml @@ -41,4 +41,3 @@ metadata: namespace: default spec: selfSigned: {} - diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/clusterrole.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/clusterrole.yaml index 2037050533..05d1494af1 100644 --- a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/clusterrole.yaml +++ b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/clusterrole.yaml @@ -406,5 +406,3 @@ rules: - /metrics verbs: - get - - diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/clusterrolebinding.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/clusterrolebinding.yaml index 4acb7d53f5..8259beef16 100644 --- a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/clusterrolebinding.yaml +++ b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/clusterrolebinding.yaml @@ -20,5 +20,3 @@ subjects: - kind: ServiceAccount name: opentelemetry-operator namespace: default - - diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/deployment.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/deployment.yaml index c775cd1cf3..2854112b68 100644 --- a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/deployment.yaml +++ b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/deployment.yaml @@ -102,4 +102,3 @@ spec: runAsGroup: 65532 runAsNonRoot: true runAsUser: 65532 - diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/role.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/role.yaml index b5339517a2..0a015afb82 100644 --- a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/role.yaml +++ b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/role.yaml @@ -197,4 +197,3 @@ rules: - patch - update - watch - diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/rolebinding.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/rolebinding.yaml index ae376e80c9..721fdb0099 100644 --- a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/rolebinding.yaml +++ b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/rolebinding.yaml @@ -21,4 +21,3 @@ subjects: - kind: ServiceAccount name: opentelemetry-operator namespace: default - diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/service.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/service.yaml index 0a3006d80f..bf164a93d7 100644 --- a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/service.yaml +++ b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/service.yaml @@ -45,4 +45,3 @@ spec: selector: app.kubernetes.io/name: opentelemetry-operator app.kubernetes.io/component: controller-manager - diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/serviceaccount.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/serviceaccount.yaml index c6ba25dbac..6abe418372 100644 --- a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/serviceaccount.yaml +++ b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/serviceaccount.yaml @@ -14,4 +14,3 @@ metadata: app.kubernetes.io/part-of: opentelemetry-operator app.kubernetes.io/instance: example app.kubernetes.io/component: controller-manager - diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml index 9039160e03..f86f50575c 100644 --- a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml +++ b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml @@ -51,4 +51,3 @@ spec: runAsGroup: 65532 runAsNonRoot: true runAsUser: 65532 - diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/tests/test-service-connection.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/tests/test-service-connection.yaml index 88e0e0bc24..79329c4b9b 100644 --- a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/tests/test-service-connection.yaml +++ b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/opentelemetry-operator/tests/test-service-connection.yaml @@ -104,4 +104,3 @@ spec: runAsGroup: 65532 runAsNonRoot: true runAsUser: 65532 - diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/prometheus-node-exporter/daemonset.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/prometheus-node-exporter/daemonset.yaml index 1758e4e4be..c27c5df927 100644 --- a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/prometheus-node-exporter/daemonset.yaml +++ b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/prometheus-node-exporter/daemonset.yaml @@ -131,4 +131,3 @@ spec: - name: root hostPath: path: / - diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/prometheus-node-exporter/service.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/prometheus-node-exporter/service.yaml index 8b8fd23461..d4fb44a87b 100644 --- a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/prometheus-node-exporter/service.yaml +++ b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/prometheus-node-exporter/service.yaml @@ -27,4 +27,3 @@ spec: selector: app.kubernetes.io/name: prometheus-node-exporter app.kubernetes.io/instance: example - diff --git a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/prometheus-node-exporter/servicemonitor.yaml b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/prometheus-node-exporter/servicemonitor.yaml index 6a6ccabf3a..1e18808405 100644 --- a/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/prometheus-node-exporter/servicemonitor.yaml +++ b/charts/opentelemetry-kube-stack/examples/prometheus-otel/rendered/prometheus-node-exporter/servicemonitor.yaml @@ -26,4 +26,3 @@ spec: endpoints: - port: http-metrics scheme: http - diff --git a/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/clusterrole.yaml b/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/clusterrole.yaml index 04fd4b7372..3379a6a125 100644 --- a/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/clusterrole.yaml +++ b/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/clusterrole.yaml @@ -138,4 +138,3 @@ subjects: # quirk of the Operator name: "example-daemon-collector" namespace: default - diff --git a/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/collector.yaml b/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/collector.yaml index 036ae97b72..76358c5f88 100644 --- a/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/collector.yaml +++ b/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/collector.yaml @@ -512,4 +512,3 @@ spec: - name: hostfs hostPath: path: / - diff --git a/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/extramanifests.yaml b/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/extramanifests.yaml index ad558c0210..fa01c2bd12 100644 --- a/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/extramanifests.yaml +++ b/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/extramanifests.yaml @@ -18,4 +18,3 @@ spec: objectName: token secretName: collector-credentials-secret type: Opaque - diff --git a/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/hooks.yaml b/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/hooks.yaml index df09c1e80b..b16df5ac8f 100644 --- a/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/hooks.yaml +++ b/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/hooks.yaml @@ -62,4 +62,3 @@ spec: - "instrumentations,opampbridges,opentelemetrycollectors" - "-l" - "helm.sh/chart=opentelemetry-kube-stack-0.16.0" - diff --git a/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml b/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml index 17585fa86a..7dbf1665c0 100644 --- a/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml +++ b/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/admission-webhooks/operator-webhook-with-cert-manager.yaml @@ -190,4 +190,3 @@ webhooks: scope: Namespaced sideEffects: None timeoutSeconds: 10 - diff --git a/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/certmanager.yaml b/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/certmanager.yaml index e8615238d0..b7b5be3ffe 100644 --- a/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/certmanager.yaml +++ b/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/certmanager.yaml @@ -41,4 +41,3 @@ metadata: namespace: default spec: selfSigned: {} - diff --git a/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/clusterrole.yaml b/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/clusterrole.yaml index 2037050533..05d1494af1 100644 --- a/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/clusterrole.yaml +++ b/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/clusterrole.yaml @@ -406,5 +406,3 @@ rules: - /metrics verbs: - get - - diff --git a/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/clusterrolebinding.yaml b/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/clusterrolebinding.yaml index 4acb7d53f5..8259beef16 100644 --- a/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/clusterrolebinding.yaml +++ b/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/clusterrolebinding.yaml @@ -20,5 +20,3 @@ subjects: - kind: ServiceAccount name: opentelemetry-operator namespace: default - - diff --git a/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/deployment.yaml b/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/deployment.yaml index c775cd1cf3..2854112b68 100644 --- a/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/deployment.yaml +++ b/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/deployment.yaml @@ -102,4 +102,3 @@ spec: runAsGroup: 65532 runAsNonRoot: true runAsUser: 65532 - diff --git a/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/role.yaml b/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/role.yaml index b5339517a2..0a015afb82 100644 --- a/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/role.yaml +++ b/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/role.yaml @@ -197,4 +197,3 @@ rules: - patch - update - watch - diff --git a/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/rolebinding.yaml b/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/rolebinding.yaml index ae376e80c9..721fdb0099 100644 --- a/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/rolebinding.yaml +++ b/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/rolebinding.yaml @@ -21,4 +21,3 @@ subjects: - kind: ServiceAccount name: opentelemetry-operator namespace: default - diff --git a/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/service.yaml b/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/service.yaml index 0a3006d80f..bf164a93d7 100644 --- a/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/service.yaml +++ b/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/service.yaml @@ -45,4 +45,3 @@ spec: selector: app.kubernetes.io/name: opentelemetry-operator app.kubernetes.io/component: controller-manager - diff --git a/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/serviceaccount.yaml b/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/serviceaccount.yaml index c6ba25dbac..6abe418372 100644 --- a/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/serviceaccount.yaml +++ b/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/serviceaccount.yaml @@ -14,4 +14,3 @@ metadata: app.kubernetes.io/part-of: opentelemetry-operator app.kubernetes.io/instance: example app.kubernetes.io/component: controller-manager - diff --git a/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml b/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml index 9039160e03..f86f50575c 100644 --- a/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml +++ b/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/tests/test-certmanager-connection.yaml @@ -51,4 +51,3 @@ spec: runAsGroup: 65532 runAsNonRoot: true runAsUser: 65532 - diff --git a/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/tests/test-service-connection.yaml b/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/tests/test-service-connection.yaml index 88e0e0bc24..79329c4b9b 100644 --- a/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/tests/test-service-connection.yaml +++ b/charts/opentelemetry-kube-stack/examples/secrets-csi-driver/rendered/opentelemetry-operator/tests/test-service-connection.yaml @@ -104,4 +104,3 @@ spec: runAsGroup: 65532 runAsNonRoot: true runAsUser: 65532 - From a0d6cef2c284bdce6fd348d217ae6be30abcc290 Mon Sep 17 00:00:00 2001 From: Cyrille Le Clerc Date: Wed, 3 Jun 2026 10:29:33 +0200 Subject: [PATCH 07/11] Improve docs --- charts/opentelemetry-kube-stack/README.md | 45 +++++++-------------- charts/opentelemetry-kube-stack/values.yaml | 2 - 2 files changed, 15 insertions(+), 32 deletions(-) diff --git a/charts/opentelemetry-kube-stack/README.md b/charts/opentelemetry-kube-stack/README.md index bdde44fc0b..3e32558ed7 100644 --- a/charts/opentelemetry-kube-stack/README.md +++ b/charts/opentelemetry-kube-stack/README.md @@ -34,9 +34,9 @@ This chart provides functionality to port an existing scrape configuration from > [!NOTE] > This chart aims to provide compatibility for scrape targets from the kube-prometheus-stack chart. This chart is not responsible for applying Prometheus Rules, Alertmanager, or a Prometheus instance. -#### `presets.prometheus.*` vs. kube-prometheus-stack ServiceMonitors +#### `presets.prometheus.*` -The `presets.prometheus.*` family (`nodeExporter`, `cadvisor`, `podAnnotations`) adds named instances of the prometheus receiver to the daemonset collector's metrics pipeline. They are a DaemonSet-local alternative to the kube-prometheus-stack (KPS) `ServiceMonitor`-based approach and a **replacement** for the `daemon_scrape_configs.yaml` scrape file. The two approaches produce **similar but not identical** time series. +The `presets.prometheus.*` family (`nodeExporter`, `cadvisor`, `podAnnotations`) adds named instances of the prometheus receiver to the daemonset collector's metrics pipeline. They are a **replacement** for the `daemon_scrape_configs.yaml` scrape file. ##### Constraints (chart-enforced) @@ -45,37 +45,22 @@ The presets are gated by template-render assertions; chart rendering fails if th * **Mutually exclusive with `scrape_configs_file`**. The presets replace the scrape file (which by default already has node-exporter, kubelet/cAdvisor, and pod-annotation jobs). Enabling any preset while `scrape_configs_file` is non-empty fails with a clear error. Set `scrape_configs_file: ""` to migrate. * **Require `mode: daemonset`**. The scrape configs reference `${OTEL_K8S_NODE_IP}` / `${OTEL_K8S_NODE_NAME}`, which the OpenTelemetry Operator only injects on daemonset collector pods. -##### Discovery model - -| | kube-prometheus-stack | `presets.prometheus.*` | -|------------------|--------------------------------------------------------------------|------------------------------------------------------------------------------------------------------------------| -| Mechanism | `ServiceMonitor` CRD → Prometheus Operator generates scrape config | Inline Prometheus scrape config inside each daemonset collector | -| Discovery | Kubernetes Endpoints / Pod service discovery | `static_configs` (nodeExporter, cadvisor) or `kubernetes_sd_configs` filtered to the local node (podAnnotations) | -| Who scrapes whom | One central Prometheus scrapes every target cluster-wide | Each daemonset collector scrapes only its own node — sharded by design, no central bottleneck | - ##### Label set -The exact labels attached vary per preset; the table below shows what each `presets.prometheus.*` emits today versus a KPS ServiceMonitor on the equivalent target. +The exact labels attached vary per preset: -| Label | KPS ServiceMonitor | `nodeExporter` | `cadvisor` | `podAnnotations` | -|--------------------------------|------------------------------------------------------------------|-------------------------------|------------------------------------------------|-------------------------------------------------------------| -| `job` | From `ServiceMonitor.jobLabel` (e.g. `node-exporter`, `kubelet`) | `node-exporter` | `kubelet` | `kubernetes-pods`, overridable per pod via the `__meta_kubernetes_pod_label_app_kubernetes_io_name` label | -| `instance` | `:` from Endpoints SD | `:` | `:` | `:` from pod SD | -| `node` | `` from `__meta_kubernetes_pod_node_name` | from `${OTEL_K8S_NODE_NAME}` | from `${OTEL_K8S_NODE_NAME}` | from `__meta_kubernetes_pod_node_name` | -| `namespace` | from Endpoints SD | — | intrinsic (emitted by cAdvisor) | from `__meta_kubernetes_namespace` | -| `pod` | from Endpoints SD | — | intrinsic | from `__meta_kubernetes_pod_name` | -| `container`, `image` | `container` from Endpoints SD | — | intrinsic (`container`, `image` from cAdvisor) | — | -| Pod labels (`labelmap`) | via `ServiceMonitor.podTargetLabels` | — | — | all pod labels mapped via `__meta_kubernetes_pod_label_*` | -| `service`, `endpoint` | from Endpoints SD | — | — | — | +| Label | `nodeExporter` | `cadvisor` | `podAnnotations` | +|-------------------------|------------------------------|------------------------------------------------|-------------------------------------------------------------| +| `job` | `node-exporter` | `kubelet` | `kubernetes-pods`, overridable per pod via the `app.kubernetes.io/name` pod label | +| `instance` | `:` | `:` | `:` from pod SD | +| `node` | from `${OTEL_K8S_NODE_NAME}` | from `${OTEL_K8S_NODE_NAME}` | from `__meta_kubernetes_pod_node_name` | +| `namespace` | — | intrinsic (emitted by cAdvisor) | from `__meta_kubernetes_namespace` | +| `pod` | — | intrinsic | from `__meta_kubernetes_pod_name` | +| `container`, `image` | — | intrinsic (`container`, `image` from cAdvisor) | — | +| Pod labels (`labelmap`) | — | — | all pod labels mapped via `__meta_kubernetes_pod_label_*` | For OTel-aware backends, any missing Kubernetes context is supplied downstream by the `k8sattributes` processor (`presets.kubernetesAttributes.enabled`) as resource attributes rather than Prometheus labels. -###### Why `nodeExporter` emits fewer labels - -node-exporter metrics are **host-scoped** — `node_cpu_seconds_total` describes the kernel of the underlying node, not any specific pod. When kube-prometheus-stack scrapes node-exporter via Endpoints SD, it attaches `namespace`/`pod`/`container` labels that describe the *exporter's own deployment* (`monitoring/prometheus-node-exporter-xyz/node-exporter`). Those labels carry no information about the metric and are easy to misuse (e.g. `sum by (namespace) (node_cpu_seconds_total)` returns one number for whichever namespace node-exporter is deployed in, not per-workload usage). - -The `nodeExporter` preset drops them deliberately; this is a feature, not a parity gap. `cadvisor` and `podAnnotations` series, by contrast, *are* per-workload and so emit `namespace`/`pod`/`container` meaningfully. - ##### Backward compatibility with `daemon_scrape_configs.yaml` Each preset replaces a specific scrape job in `daemon_scrape_configs.yaml`. All three are drop-in compatible — `job` / `instance` / Kubernetes label set are preserved, so existing queries, dashboards, alerts, and recording rules keep working. The remaining differences are either additive (a new `node` label) or default-value tweaks called out per preset below. @@ -86,7 +71,7 @@ Each preset replaces a specific scrape job in `daemon_scrape_configs.yaml`. All ###### `cadvisor` ↔ `kubelet` job -**Drop-in compatible.** The preset uses `job_name: kubelet` for label parity with both `daemon_scrape_configs.yaml` (which force-relabels every series to `job=kubelet`) and kube-prometheus-stack (which derives `job=kubelet` from the kubelet Service's `k8s-app` label). Queries / dashboards / alerts filtering `{job="kubelet"}` keep working unchanged. +**Drop-in compatible.** The preset uses `job_name: kubelet` for label parity with `daemon_scrape_configs.yaml` (which force-relabels every series to `job=kubelet`). Queries / dashboards / alerts filtering `{job="kubelet"}` keep working unchanged. Minor differences (all additive — no broken queries): @@ -106,7 +91,7 @@ Differences from the legacy job (both additive — no broken queries): ##### Customization -KPS exposes `relabelings` and `metricRelabelings` on each `ServiceMonitor`. The presets expose `enabled`, `scrapeInterval`, `scrapeTimeout`, and — for `nodeExporter` / `cadvisor` only — `port`. (`podAnnotations` discovers the port per pod from the `prometheus.io/port` annotation, so a chart-level `port` knob doesn't apply.) For richer relabeling, drop the preset and use `scrape_configs_file` instead — see [scrape_configs_file Details](#scrape_configs_file-details). +The presets expose `enabled`, `scrapeInterval`, `scrapeTimeout`, and — for `nodeExporter` / `cadvisor` only — `port`. (`podAnnotations` discovers the port per pod from the `prometheus.io/port` annotation, so a chart-level `port` knob doesn't apply.) For richer relabeling, drop the preset and use `scrape_configs_file` instead — see [scrape_configs_file Details](#scrape_configs_file-details). ##### Other duplicate-scrape risks @@ -115,7 +100,7 @@ KPS exposes `relabelings` and `metricRelabelings` on each `ServiceMonitor`. The ##### When to use which * **Use the presets** if you want a sharded, DaemonSet-native pipeline with no central Prometheus bottleneck and your dashboards rely primarily on `job` / `instance` / `node` (and, for `podAnnotations`, the standard Kubernetes label set). -* **Use the target allocator + ServiceMonitors** (set `targetAllocator.enabled: true` instead) if you need full KPS label parity (including `service` / `endpoint` / `container`), want CRD-driven dynamic configuration, or are porting existing KPS dashboards/recording rules unchanged. +* **Use the target allocator + ServiceMonitors** (set `targetAllocator.enabled: true` instead) if you need CRD-driven dynamic configuration or want to scrape targets across the cluster rather than per-node. ### Image versioning diff --git a/charts/opentelemetry-kube-stack/values.yaml b/charts/opentelemetry-kube-stack/values.yaml index 755518e01f..9c7b9d506f 100644 --- a/charts/opentelemetry-kube-stack/values.yaml +++ b/charts/opentelemetry-kube-stack/values.yaml @@ -529,8 +529,6 @@ defaultCRConfig: # Distinct from the top-level `nodeExporter.enabled` flag, which controls whether the # prometheus-node-exporter subchart is installed. # - # For comparison with the kube-prometheus-stack ServiceMonitor approach (discovery model, - # label differences), see the "Kube-Prometheus-Stack compatability" section in README.md. prometheus: # Scrapes a Prometheus Node Exporter on the local node via a static_config targeting # `${OTEL_K8S_NODE_IP}:`. Adds a `prometheus/node_exporter` receiver. From 7a96b7a34dd18e48f4bff49a33826d5f5ca6479d Mon Sep 17 00:00:00 2001 From: Cyrille Le Clerc Date: Wed, 3 Jun 2026 14:10:39 +0200 Subject: [PATCH 08/11] Improve docs --- charts/opentelemetry-kube-stack/README.md | 81 +++++++++++++---------- 1 file changed, 47 insertions(+), 34 deletions(-) diff --git a/charts/opentelemetry-kube-stack/README.md b/charts/opentelemetry-kube-stack/README.md index 3e32558ed7..961d551657 100644 --- a/charts/opentelemetry-kube-stack/README.md +++ b/charts/opentelemetry-kube-stack/README.md @@ -34,22 +34,35 @@ This chart provides functionality to port an existing scrape configuration from > [!NOTE] > This chart aims to provide compatibility for scrape targets from the kube-prometheus-stack chart. This chart is not responsible for applying Prometheus Rules, Alertmanager, or a Prometheus instance. -#### `presets.prometheus.*` +#### `presets.prometheus.*` presets -The `presets.prometheus.*` family (`nodeExporter`, `cadvisor`, `podAnnotations`) adds named instances of the prometheus receiver to the daemonset collector's metrics pipeline. They are a **replacement** for the `daemon_scrape_configs.yaml` scrape file. +The `presets.prometheus.*` family (`nodeExporter`, `cadvisor`, `podAnnotations`) configure the OpenTelemetry Collectors to scrape popular Prometheus Kubernetes metrics: +Kubernetes node metrics exposed with [prometheus-node-exporter](https://github.com/prometheus-community/helm-charts/tree/main/charts/prometheus-node-exporter), +[cAdvisor](https://github.com/google/cadvisor) metrics exposed with the [Kube State Metrics](https://github.com/prometheus-community/helm-charts/tree/main/charts/kube-state-metrics) (aka KSM) +and custom pod metrics exposed using the `prometheus.io/scrape=true` Kubernetes annotation. They are a **replacement** for the `daemon_scrape_configs.yaml` scrape file. -##### Constraints (chart-enforced) +The `prometheus.*` presets are implemented adding named instances of the [Prometheus receiver](https://github.com/open-telemetry/opentelemetry-collector-contrib/tree/main/receiver/prometheusreceiver) to the daemonset collector's metrics pipeline. -The presets are gated by template-render assertions; chart rendering fails if these are violated: +
+Constraints (chart-enforced) + +The `prometheus.*` presets are gated; chart rendering fails if these are violated: * **Mutually exclusive with `scrape_configs_file`**. The presets replace the scrape file (which by default already has node-exporter, kubelet/cAdvisor, and pod-annotation jobs). Enabling any preset while `scrape_configs_file` is non-empty fails with a clear error. Set `scrape_configs_file: ""` to migrate. * **Require `mode: daemonset`**. The scrape configs reference `${OTEL_K8S_NODE_IP}` / `${OTEL_K8S_NODE_NAME}`, which the OpenTelemetry Operator only injects on daemonset collector pods. -##### Label set +
+ +#### Prometheus metrics label set + +The `presets.prometheus.*` presets emit the same Prometheus labels as the Kube-Prometheus-Stack. + +
+Details The exact labels attached vary per preset: -| Label | `nodeExporter` | `cadvisor` | `podAnnotations` | +| Prometheus label | `nodeExporter` | `cadvisor` | `podAnnotations` | |-------------------------|------------------------------|------------------------------------------------|-------------------------------------------------------------| | `job` | `node-exporter` | `kubelet` | `kubernetes-pods`, overridable per pod via the `app.kubernetes.io/name` pod label | | `instance` | `:` | `:` | `:` from pod SD | @@ -59,48 +72,54 @@ The exact labels attached vary per preset: | `container`, `image` | — | intrinsic (`container`, `image` from cAdvisor) | — | | Pod labels (`labelmap`) | — | — | all pod labels mapped via `__meta_kubernetes_pod_label_*` | -For OTel-aware backends, any missing Kubernetes context is supplied downstream by the `k8sattributes` processor (`presets.kubernetesAttributes.enabled`) as resource attributes rather than Prometheus labels. +Kubernetes context is supplied downstream by the `k8sattributes` processor (`presets.kubernetesAttributes.enabled`) as resource attributes following OpenTelemetry Semantic Conventions for Kubernetes. +
-##### Backward compatibility with `daemon_scrape_configs.yaml` +##### Differences between `presets.prometheus.*` and `daemon_scrape_configs.yaml` metrics -Each preset replaces a specific scrape job in `daemon_scrape_configs.yaml`. All three are drop-in compatible — `job` / `instance` / Kubernetes label set are preserved, so existing queries, dashboards, alerts, and recording rules keep working. The remaining differences are either additive (a new `node` label) or default-value tweaks called out per preset below. +Each preset replaces a specific scrape job in `daemon_scrape_configs.yaml`. All three preserve the same labels — `job` / `instance` / Kubernetes labels. +The remaining differences are new labels (e.g. a `node` label) or default-value tweaks called out per preset below. -###### `nodeExporter` ↔ `node-exporter` job +
+Details -**Drop-in compatible.** Same scrape target (`${OTEL_K8S_NODE_IP}:9100`), same `job=node-exporter` label, same `scrape_interval: 30s`. The preset additionally emits a `node` label (the legacy job didn't) — purely additive, won't break queries. +###### `presets.prometheus.nodeExporter` ↔ `daemon_scrape_configs.yaml`'s `node-exporter` job -###### `cadvisor` ↔ `kubelet` job +Same scrape target (`${OTEL_K8S_NODE_IP}:9100`), same `job=node-exporter` label, same `scrape_interval: 30s`. The preset additionally emits a `node` label (the legacy job didn't). -**Drop-in compatible.** The preset uses `job_name: kubelet` for label parity with `daemon_scrape_configs.yaml` (which force-relabels every series to `job=kubelet`). Queries / dashboards / alerts filtering `{job="kubelet"}` keep working unchanged. +###### `presets.prometheus.cadvisor` ↔ `daemon_scrape_configs.yaml`'s `kubelet` job -Minor differences (all additive — no broken queries): +Same `job=kubelet` label as `daemon_scrape_configs.yaml` (which force-relabels every series to `job=kubelet`). -* **Scrape interval**: the preset defaults to `30s`, the legacy job uses `15s`. Set `presets.prometheus.cadvisor.scrapeInterval: 15s` to match exactly (affects `rate()` resolution). -* **Dropped helper labels**: the legacy job attaches `endpoint=https-metrics` and `metrics_path=/metrics/cadvisor`; the preset does not. Rarely referenced in queries. +Minor differences: + +* **Scrape interval**: the preset defaults to `30s`, the `daemon_scrape_configs.yaml` job uses `15s`. Set `presets.prometheus.cadvisor.scrapeInterval: 15s` to match exactly (affects `rate()` resolution). +* **Dropped helper labels**: the `daemon_scrape_configs.yaml` job attaches `endpoint=https-metrics` and `metrics_path=/metrics/cadvisor`; the preset does not. * **Intrinsic cAdvisor labels** (`namespace`, `pod`, `container`, `image`, `id`, ...) are identical in both — these come from cAdvisor itself, not from relabel rules. -* **`metric_relabel_configs`**: identical drop list (container_cpu_load_average_10s, container_spec_*, container_fs_io_current, container_memory_mapped_file/swap, container_file_descriptors/tasks_state/threads_max, plus non-pod cgroup rows). +* **`metric_relabel_configs`**: identical drop list (`container_cpu_load_average_10s`, `container_spec_*`, `container_fs_io_current`, `container_memory_mapped_file/swap`, `container_file_descriptors/tasks_state/threads_max`, plus non-pod cgroup rows). -###### `podAnnotations` ↔ `kubernetes-pods` job +###### `presets.prometheus.podAnnotations` ↔ `daemon_scrape_configs.yaml`'s `kubernetes-pods` job -**Drop-in compatible.** Same `job_name: kubernetes-pods` (overridable per pod via the `app.kubernetes.io/name` pod label, in both cases), same label set (`namespace`, `pod`, all pod labels via `labelmap`), same `scrape_interval: 30s`, same annotation-driven scheme/path/port/param handling. +Same `job=kubernetes-pods` (overridable per pod via the `app.kubernetes.io/name` pod label, in both cases), same label set (`namespace`, `pod`, all pod labels via `labelmap`), same `scrape_interval: 30s`, same annotation-driven scheme/path/port/param handling. -Differences from the legacy job (both additive — no broken queries): +Differences from the `daemon_scrape_configs.yaml` job: * **`node` label** added by the preset (sourced from `__meta_kubernetes_pod_node_name`). -* **Self-scrape filter**: the preset's pod selector excludes pods with `app.kubernetes.io/component=opentelemetry-collector` to prevent the collector from scraping itself. The legacy job has no such filter, so it would scrape any collector pod carrying `prometheus.io/scrape: "true"`. +* **Self-scrape filter**: the preset's pod selector excludes pods with `app.kubernetes.io/component=opentelemetry-collector` to prevent the collector from scraping itself. The `daemon_scrape_configs.yaml` job has no such filter, so it would scrape any collector pod carrying `prometheus.io/scrape: "true"`. -##### Customization +
-The presets expose `enabled`, `scrapeInterval`, `scrapeTimeout`, and — for `nodeExporter` / `cadvisor` only — `port`. (`podAnnotations` discovers the port per pod from the `prometheus.io/port` annotation, so a chart-level `port` knob doesn't apply.) For richer relabeling, drop the preset and use `scrape_configs_file` instead — see [scrape_configs_file Details](#scrape_configs_file-details). +#### `scrape_configs_file=daemon_scrape_configs.yaml` -##### Other duplicate-scrape risks +> [!NOTE] +> This parameter only works when running the helm chart locally. When installing the helm chart using the remote repository it is not possible to include "external" scrape config files into the helm structure. This is also true when the chart is used as a subchart, and the scrape config files exists in the parent chart. Ref. [helm docs](https://helm.sh/docs/chart_template_guide/accessing_files/) -* **`prometheus-node-exporter` subchart**: when installed via the top-level `nodeExporter.enabled: true` flag, the subchart creates its own `ServiceMonitor` by default. If a target allocator picks it up, node-exporter is scraped twice — once locally by every daemonset collector and once via the ServiceMonitor through the cluster collector. +By default, the daemonset collector will load in the daemon_scrape_configs.yaml file which collects Prometheus metrics from applications on the same node that have the `prometheus.io/scrape=true` annotation, kubernetes node metrics, and cadvisor metrics. Users can disable this by settings collectors.daemon.scrape_configs_file: "" OR they can provide their own promethues scrape config file for the daemonset by supplying collectors.daemon.scrape_configs_file: ".yaml" -##### When to use which +#### Duplicate-scrape risks -* **Use the presets** if you want a sharded, DaemonSet-native pipeline with no central Prometheus bottleneck and your dashboards rely primarily on `job` / `instance` / `node` (and, for `podAnnotations`, the standard Kubernetes label set). -* **Use the target allocator + ServiceMonitors** (set `targetAllocator.enabled: true` instead) if you need CRD-driven dynamic configuration or want to scrape targets across the cluster rather than per-node. +**`prometheus-node-exporter` subchart**: when installed via the top-level `nodeExporter.enabled: true` flag, the subchart creates its own `ServiceMonitor` by default. +If a target allocator picks it up and `presets.prometheus.nodeExporter.enabled=true` or `scrape_configs_file=daemon_scrape_configs.yaml`, then node-exporter metrics are scraped twice. ### Image versioning @@ -111,12 +130,6 @@ collector.image.tag: 0.103.1 bridge.image.tag: 0.103.0 ``` -### scrape_configs_file Details - -> [!NOTE] -> This parameter only works when running the helm chart locally. When installing the helm chart using the remote repository it is not possible to include "external" scrape config files into the helm structure. This is also true when the chart is used as a subchart, and the scrape config files exists in the parent chart. Ref. [helm docs](https://helm.sh/docs/chart_template_guide/accessing_files/) - -By default, the daemonset collector will load in the daemon_scrape_configs.yaml file which collects prometheus metrics from applications on the same node that have the prometheus.io/scrape=true annotation, kubernetes node metrics, and cadvisor metrics. Users can disable this by settings collectors.daemon.scrape_configs_file: "" OR they can provide their own promethues scrape config file for the daemonset by supplying collectors.daemon.scrape_configs_file: ".yaml" ## Prerequisites From a060599a994f37a98a9a396cc28a714623489b46 Mon Sep 17 00:00:00 2001 From: Cyrille Le Clerc Date: Wed, 3 Jun 2026 15:04:14 +0200 Subject: [PATCH 09/11] Improve docs --- charts/opentelemetry-kube-stack/README.md | 14 ++++++++------ 1 file changed, 8 insertions(+), 6 deletions(-) diff --git a/charts/opentelemetry-kube-stack/README.md b/charts/opentelemetry-kube-stack/README.md index 961d551657..a94032fdb6 100644 --- a/charts/opentelemetry-kube-stack/README.md +++ b/charts/opentelemetry-kube-stack/README.md @@ -37,11 +37,12 @@ This chart provides functionality to port an existing scrape configuration from #### `presets.prometheus.*` presets The `presets.prometheus.*` family (`nodeExporter`, `cadvisor`, `podAnnotations`) configure the OpenTelemetry Collectors to scrape popular Prometheus Kubernetes metrics: -Kubernetes node metrics exposed with [prometheus-node-exporter](https://github.com/prometheus-community/helm-charts/tree/main/charts/prometheus-node-exporter), -[cAdvisor](https://github.com/google/cadvisor) metrics exposed with the [Kube State Metrics](https://github.com/prometheus-community/helm-charts/tree/main/charts/kube-state-metrics) (aka KSM) -and custom pod metrics exposed using the `prometheus.io/scrape=true` Kubernetes annotation. They are a **replacement** for the `daemon_scrape_configs.yaml` scrape file. -The `prometheus.*` presets are implemented adding named instances of the [Prometheus receiver](https://github.com/open-telemetry/opentelemetry-collector-contrib/tree/main/receiver/prometheusreceiver) to the daemonset collector's metrics pipeline. +* `presets.prometheus.nodeExporter`: Kubernetes node metrics exposed with the [prometheus-node-exporter](https://github.com/prometheus-community/helm-charts/tree/main/charts/prometheus-node-exporter), +* `presets.prometheus.cadvisor`: [cAdvisor](https://github.com/google/cadvisor) metrics exposed with the [Kube State Metrics](https://github.com/prometheus-community/helm-charts/tree/main/charts/kube-state-metrics) (aka KSM) +* `presets.prometheus.podAnnotations`: custom pod metrics exposed using the `prometheus.io/scrape=true` Kubernetes annotation. + +The `prometheus.*` presets are implemented adding named instances of the [Prometheus receiver](https://github.com/open-telemetry/opentelemetry-collector-contrib/tree/main/receiver/prometheusreceiver) to the daemonset collector's metrics pipeline, They are a **replacement** for the `daemon_scrape_configs.yaml` scrape file.
Constraints (chart-enforced) @@ -55,7 +56,7 @@ The `prometheus.*` presets are gated; chart rendering fails if these are violate #### Prometheus metrics label set -The `presets.prometheus.*` presets emit the same Prometheus labels as the Kube-Prometheus-Stack. +The `presets.prometheus.*` presets produces the same Prometheus labels as the Kube-Prometheus-Stack.
Details @@ -72,7 +73,8 @@ The exact labels attached vary per preset: | `container`, `image` | — | intrinsic (`container`, `image` from cAdvisor) | — | | Pod labels (`labelmap`) | — | — | all pod labels mapped via `__meta_kubernetes_pod_label_*` | -Kubernetes context is supplied downstream by the `k8sattributes` processor (`presets.kubernetesAttributes.enabled`) as resource attributes following OpenTelemetry Semantic Conventions for Kubernetes. +Kubernetes resource attributes (`k8s.*`) are supplied downstream by the `k8sattributes` processor (`presets.kubernetesAttributes.enabled=true`, recommended). +
##### Differences between `presets.prometheus.*` and `daemon_scrape_configs.yaml` metrics From b5d06dce1ec404000dcdc280a2ad47f71a88f30e Mon Sep 17 00:00:00 2001 From: Cyrille Le Clerc Date: Thu, 4 Jun 2026 09:49:43 +0200 Subject: [PATCH 10/11] Improve docs --- charts/opentelemetry-kube-stack/README.md | 12 +++++++----- 1 file changed, 7 insertions(+), 5 deletions(-) diff --git a/charts/opentelemetry-kube-stack/README.md b/charts/opentelemetry-kube-stack/README.md index a94032fdb6..b44561a19e 100644 --- a/charts/opentelemetry-kube-stack/README.md +++ b/charts/opentelemetry-kube-stack/README.md @@ -42,7 +42,8 @@ The `presets.prometheus.*` family (`nodeExporter`, `cadvisor`, `podAnnotations`) * `presets.prometheus.cadvisor`: [cAdvisor](https://github.com/google/cadvisor) metrics exposed with the [Kube State Metrics](https://github.com/prometheus-community/helm-charts/tree/main/charts/kube-state-metrics) (aka KSM) * `presets.prometheus.podAnnotations`: custom pod metrics exposed using the `prometheus.io/scrape=true` Kubernetes annotation. -The `prometheus.*` presets are implemented adding named instances of the [Prometheus receiver](https://github.com/open-telemetry/opentelemetry-collector-contrib/tree/main/receiver/prometheusreceiver) to the daemonset collector's metrics pipeline, They are a **replacement** for the `daemon_scrape_configs.yaml` scrape file. +The `prometheus.*` presets are implemented adding named instances of the [Prometheus receiver](https://github.com/open-telemetry/opentelemetry-collector-contrib/tree/main/receiver/prometheusreceiver) to the daemonset collector's metrics pipeline (`prometheus/node_exporter`, `prometheus/cadvisor`, and `prometheus/pod_annotations`). +They are a **replacement** for the `daemon_scrape_configs.yaml` scrape file.
Constraints (chart-enforced) @@ -56,7 +57,7 @@ The `prometheus.*` presets are gated; chart rendering fails if these are violate #### Prometheus metrics label set -The `presets.prometheus.*` presets produces the same Prometheus labels as the Kube-Prometheus-Stack. +The `presets.prometheus.*` presets produce the same Prometheus labels as the Kube-Prometheus-Stack.
Details @@ -73,14 +74,15 @@ The exact labels attached vary per preset: | `container`, `image` | — | intrinsic (`container`, `image` from cAdvisor) | — | | Pod labels (`labelmap`) | — | — | all pod labels mapped via `__meta_kubernetes_pod_label_*` | -Kubernetes resource attributes (`k8s.*`) are supplied downstream by the `k8sattributes` processor (`presets.kubernetesAttributes.enabled=true`, recommended). +Prometheus labels are mapped to OpenTelemetry metrics data points and resource attributes according to the `prometheus` receiver [Resource Attribute Mapping](https://github.com/open-telemetry/opentelemetry-collector-contrib/blob/main/receiver/prometheusreceiver/resource_attribute_mapping.md) + +Kubernetes resource attributes (`k8s.*`) are eventually supplied downstream by the `k8sattributes` processor when `presets.kubernetesAttributes.enabled=true` (recommended).
##### Differences between `presets.prometheus.*` and `daemon_scrape_configs.yaml` metrics -Each preset replaces a specific scrape job in `daemon_scrape_configs.yaml`. All three preserve the same labels — `job` / `instance` / Kubernetes labels. -The remaining differences are new labels (e.g. a `node` label) or default-value tweaks called out per preset below. +`presets.prometheus.*` are designed to replace `daemon_scrape_configs.yaml`, with each preset mapping to a specific scrape job in that file. All three presets retain the same labels — `job`, `instance`, and Kubernetes labels. Notable differences include additional labels (e.g. `node`) and default-value adjustments for improved consistency, as described per preset below.
Details From e4ba0167bec0ae5a63fc4aca27e4a46f0c8a27ba Mon Sep 17 00:00:00 2001 From: Cyrille Le Clerc Date: Tue, 9 Jun 2026 18:39:32 +0200 Subject: [PATCH 11/11] Apply suggestion from @dashpole --- charts/opentelemetry-kube-stack/README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/charts/opentelemetry-kube-stack/README.md b/charts/opentelemetry-kube-stack/README.md index 0577e9d253..5908b6525e 100644 --- a/charts/opentelemetry-kube-stack/README.md +++ b/charts/opentelemetry-kube-stack/README.md @@ -39,7 +39,7 @@ This chart provides functionality to port an existing scrape configuration from The `presets.prometheus.*` family (`nodeExporter`, `cadvisor`, `podAnnotations`) configure the OpenTelemetry Collectors to scrape popular Prometheus Kubernetes metrics: * `presets.prometheus.nodeExporter`: Kubernetes node metrics exposed with the [prometheus-node-exporter](https://github.com/prometheus-community/helm-charts/tree/main/charts/prometheus-node-exporter), -* `presets.prometheus.cadvisor`: [cAdvisor](https://github.com/google/cadvisor) metrics exposed with the [Kube State Metrics](https://github.com/prometheus-community/helm-charts/tree/main/charts/kube-state-metrics) (aka KSM) +* `presets.prometheus.cadvisor`: [cAdvisor](https://github.com/google/cadvisor) metrics scraped from the kubelet, * `presets.prometheus.podAnnotations`: custom pod metrics exposed using the `prometheus.io/scrape=true` Kubernetes annotation. The `prometheus.*` presets are implemented adding named instances of the [Prometheus receiver](https://github.com/open-telemetry/opentelemetry-collector-contrib/tree/main/receiver/prometheusreceiver) to the daemonset collector's metrics pipeline (`prometheus/node_exporter`, `prometheus/cadvisor`, and `prometheus/pod_annotations`).