Istio

export DASH0_AUTH_TOKEN="{{token}}"
kubectl create secret generic dash0-secrets --from-literal=dash0-authorization-token=${DASH0_AUTH_TOKEN} --namespace monitoring

helm upgrade --install otel-collector open-telemetry/opentelemetry-collector \
  --namespace monitoring --create-namespace \
  -f values.yaml

mode: deployment
image:
  repository: otel/opentelemetry-collector-k8s

resources:
  limits:
    memory: 512Mi
  requests:
    memory: 256Mi

serviceAccount:
  create: false
  name: otel-collector-sa
extraEnvs:
  - name: DASH0_AUTHORIZATION_TOKEN
    valueFrom:
      secretKeyRef:
        name: dash0-secrets
        key: dash0-authorization-token
  - name: K8S_NODE_NAME
    valueFrom:
      fieldRef:
        fieldPath: spec.nodeName
ports:
  metrics:
    enabled: true
    containerPort: 8888
    servicePort: 8888
    protocol: TCP
config:
  receivers:
    otlp:
      protocols:
        grpc:
          endpoint: 0.0.0.0:4317
        http:
          endpoint: 0.0.0.0:4318
    prometheus:
      config:
        scrape_configs:
          - honor_labels: true
            job_name: kubernetes-pods
            # This specifies that Prometheus should discover targets based on Kubernetes pods.
            kubernetes_sd_configs:
              - role: pod
            relabel_configs:
              - action: keep
                regex: true
                source_labels:
                  - __meta_kubernetes_pod_annotation_prometheus_io_scrape
              - action: drop
                regex: true
                source_labels:
                  - __meta_kubernetes_pod_annotation_prometheus_io_scrape_slow
              - action: replace
                regex: (https?)
                source_labels:
                  - __meta_kubernetes_pod_annotation_prometheus_io_scheme
                target_label: __scheme__
              - action: replace
                regex: (.+)
                source_labels:
                  - __meta_kubernetes_pod_annotation_prometheus_io_path
                target_label: __metrics_path__
              # Set the address for IPv6 pods based on the prometheus.io/port annotation
              - action: replace
                regex: (\d+);(([A-Fa-f0-9[]{1,4}::?){1,7}[A-Fa-f0-9[]{1,4})
                replacement: "[$$2]:$$1"
                source_labels:
                  - __meta_kubernetes_pod_annotation_prometheus_io_port
                  - __meta_kubernetes_pod_ip
                target_label: __address__
              # Set the address for IPv4 pods based on the prometheus.io/port annotation
              - action: replace
                regex: (\d+);((([0-9[]+?)(\.|$$)){4})
                replacement: $$2:$$1
                source_labels:
                  - __meta_kubernetes_pod_annotation_prometheus_io_port
                  - __meta_kubernetes_pod_ip
                target_label: __address__
              - action: labelmap
                regex: __meta_kubernetes_pod_annotation_prometheus_io_param_(.+)
                replacement: __param_$$1
              - action: labelmap
                regex: __meta_kubernetes_pod_label_(.+)
              - action: replace
                source_labels:
                  - __meta_kubernetes_namespace
                target_label: namespace
              - action: replace
                source_labels:
                  - __meta_kubernetes_pod_name
                target_label: pod
              # Drop targets that are in non-running phases: Pending, Succeeded, Failed, Completed
              - action: drop
                regex: Pending|Succeeded|Failed|Completed
                source_labels:
                  - __meta_kubernetes_pod_phase
              # Add node label based on the Kubernetes pod node name
              - action: replace
                source_labels:
                  - __meta_kubernetes_pod_node_name
                target_label: nod
  processors:
    batch:
      send_batch_size: 1000
      timeout: 10s
    memory_limiter:
      check_interval: 5s
      limit_mib: 1000
      spike_limit_mib: 20
  exporters:
    otlp:
      endpoint: { { dash0_otlp_grpc_endpoint } }
      tls:
        insecure: false
      headers:
        Authorization: "Bearer {{DASH0_AUTHORIZATION_TOKEN}}"
      sending_queue:
        enabled: true
        num_consumers: 4
        queue_size: 100
      retry_on_failure:
        enabled: true
        initial_interval: 5s
        max_interval: 30s
        max_elapsed_time: 300s

      service:
        pipelines:
          traces:
            receivers: [otlp]
            processors: [memory_limiter, batch]
            exporters: [otlp]
          metrics:
            receivers: [otlp, prometheus]
            processors: [memory_limiter, batch]
            exporters: [otlp]

prometheus.io/path: /stats/prometheus
prometheus.io/port: "15020"
prometheus.io/scrape: "true"

cat <<EOF | istioctl install -y -f -
apiVersion: install.istio.io/v1alpha1
kind: IstioOperator
spec:
  meshConfig:
    enableTracing: true
    extensionProviders:
    - name: otel-collector
      opentelemetry:
        port: 4317
        service: {{otel_collector_otlp_grpc_endpoint}}
        resource_detectors:
          environment: {}
EOF

kubectl apply -f - <<EOF
apiVersion: telemetry.istio.io/v1
kind: Telemetry
metadata:
  name: otel-tracing
spec:
  tracing:
  - providers:
    - name: otel-collector
    randomSamplingPercentage: 100
    customTags:
      "{{custom_attribute_name}}":
        literal:
          value: "{{custom_attribute_value}}"
EOF

kubectl apply -f - <<EOF
apiVersion: networking.istio.io/v1beta1
kind: ServiceEntry
metadata:
  name: otel-tracing
  namespace: {{istio_namespace}}
spec:
  hosts:
  # This should be the FQDN of opentelemetry-collecotr service
  - {{otel_collector_otlp_grpc_endpoint}}
  ports:
  - number: 4317
    name: grpc-otlp-dash0
    protocol: GRPC
  resolution: DNS
  location: MESH_INTERNAL
EOF