Add platform infrastructure configuration

2026-08-28 17:35:41 +09:00
parent fa76531e5b
commit 16c337bcc9
302 changed files with 83259 additions and 1 deletions
@@ -0,0 +1,125 @@
+global:
+  commonLabels:
+    observability.hyeonworks.com/instance: home
+
+replicas: 1
+
+config: |
+  stream_over_http_enabled: false
+  memberlist:
+    cluster_label: "{{ .Release.Name }}.{{ .Release.Namespace }}"
+  multitenancy_enabled: false
+  usage_report:
+    reporting_enabled: false
+  compactor:
+    compaction:
+      block_retention: 168h
+  distributor:
+    receivers:
+      otlp:
+        protocols:
+          grpc:
+            endpoint: 0.0.0.0:4317
+  ingester:
+    trace_idle_period: 10s
+    max_block_duration: 5m
+    max_block_bytes: 100000000
+    complete_block_timeout: 15m
+    flush_all_on_shutdown: true
+  server:
+    http_listen_port: 3200
+  storage:
+    trace:
+      backend: s3
+      s3:
+        bucket: tempo
+        endpoint: minio.object-storage.svc.cluster.local:80
+        insecure: true
+        forcepathstyle: true
+        access_key: ${AWS_ACCESS_KEY_ID}
+        secret_key: ${AWS_SECRET_ACCESS_KEY}
+      wal:
+        path: /var/tempo/wal
+  querier: {}
+  query_frontend: {}
+  overrides:
+    defaults:
+      ingestion:
+        rate_limit_bytes: 5000000
+        burst_size_bytes: 10000000
+        max_traces_per_user: 5000
+      global:
+        max_bytes_per_trace: 5000000
+
+tempo:
+  registry: docker.io
+  repository: grafana/tempo
+  tag: 2.10.7
+  resources:
+    requests:
+      cpu: 250m
+      memory: 512Mi
+    limits:
+      cpu: "1"
+      memory: 1Gi
+  memBallastSizeMbs: 0
+  reportingEnabled: false
+  metricsGenerator:
+    enabled: false
+  extraArgs:
+    config.expand-env: true
+  extraEnv:
+    - name: AWS_ACCESS_KEY_ID
+      valueFrom:
+        secretKeyRef:
+          name: tempo-object-storage
+          key: access-key-id
+    - name: AWS_SECRET_ACCESS_KEY
+      valueFrom:
+        secretKeyRef:
+          name: tempo-object-storage
+          key: secret-access-key
+  securityContext:
+    runAsNonRoot: true
+    allowPrivilegeEscalation: false
+    readOnlyRootFilesystem: true
+    capabilities:
+      drop:
+        - ALL
+    seccompProfile:
+      type: RuntimeDefault
+
+tempoQuery:
+  enabled: false
+
+securityContext:
+  runAsUser: 10001
+  runAsGroup: 10001
+  runAsNonRoot: true
+  fsGroup: 10001
+  fsGroupChangePolicy: OnRootMismatch
+  seccompProfile:
+    type: RuntimeDefault
+
+serviceAccount:
+  automountServiceAccountToken: false
+
+service:
+  type: ClusterIP
+
+serviceMonitor:
+  enabled: true
+  interval: 30s
+  additionalLabels:
+    observability.hyeonworks.com/instance: home
+
+persistence:
+  enabled: true
+  enableStatefulSetAutoDeletePVC: false
+  storageClassName: ssd-local-observability-tempo-retain
+  accessModes:
+    - ReadWriteOnce
+  size: 5Gi
+
+podLabels:
+  platform.hyeonworks.com/aistor-client: "true"