Merge pull request #43 from openlit/1.15.0

amanagarwal042 · web-flow · commit 47ecbdb817c5 · 2025-11-13T12:30:28.000+05:30
1.15.0
diff --git a/.github/workflows/helm-release.yml b/.github/workflows/helm-release.yml
@@ -104,6 +104,27 @@ jobs:
       - name: Install Helm
         uses: azure/setup-helm@v4
 
+      - name: Add Helm repositories
+        run: |
+          echo "📦 Adding OpenLIT Helm repository"
+          helm repo add openlit https://openlit.github.io/helm/
+          helm repo update
+          echo "✅ Helm repositories added and updated"
+
+      - name: Build chart dependencies
+        run: |
+          echo "📦 Building dependencies for all charts with dependencies"
+          for chart in charts/*/Chart.yaml; do
+            chart_dir=$(dirname "$chart")
+            if [ -f "$chart_dir/Chart.yaml" ] && grep -q "^dependencies:" "$chart_dir/Chart.yaml"; then
+              echo "Building dependencies for $chart_dir"
+              cd "$chart_dir"
+              helm dependency build
+              cd - > /dev/null
+            fi
+          done
+          echo "✅ All chart dependencies built"
+
       - name: Run chart-releaser
         uses: helm/chart-releaser-action@v1.6.0
         with:
diff --git a/.github/workflows/helm-test.yml b/.github/workflows/helm-test.yml
@@ -84,6 +84,13 @@ jobs:
         with:
           version: v3.12.1
 
+      - name: Add Helm repositories
+        run: |
+          echo "📦 Adding OpenLIT Helm repository"
+          helm repo add openlit https://openlit.github.io/helm/
+          helm repo update
+          echo "✅ Helm repositories added and updated"
+
       - name: Enforce version bump for chart changes
         run: |
           CHART_PATH="charts/${{ matrix.chart }}"
@@ -127,6 +134,13 @@ jobs:
             echo "ℹ️  No files changed in $CHART_PATH/ (this shouldn't happen in matrix)"
           fi
 
+      - name: Build chart dependencies
+        run: |
+          echo "📦 Building dependencies for chart: ${{ matrix.chart }}"
+          cd ./charts/${{ matrix.chart }}
+          helm dependency build
+          echo "✅ Dependencies built for ${{ matrix.chart }}"
+
       - name: Run chart linting
         run: |
           echo "🔍 Linting chart: ${{ matrix.chart }}"
diff --git a/charts/openlit/Chart.lock b/charts/openlit/Chart.lock
@@ -0,0 +1,6 @@
+dependencies:
+- name: openlit-operator
+  repository: https://openlit.github.io/helm/
+  version: 0.2.1
+digest: sha256:55d95e7eba90c76f827a7d92c61096a14787d7294a2f7eff3c8cc5a4b83d9336
+generated: "2025-11-13T12:16:01.806058+05:30"
diff --git a/charts/openlit/Chart.yaml b/charts/openlit/Chart.yaml
@@ -2,8 +2,8 @@ apiVersion: v2
 name: openlit
 description: A Helm chart for OpenLIT
 type: application
-version: 1.14.6
-appVersion: 1.14.4
+version: 1.15.0
+appVersion: 1.15.0
 icon: https://avatars.githubusercontent.com/u/149867240?s=200&v=4
 home: https://openlit.io
 sources:
@@ -20,3 +20,10 @@ maintainers:
   - name: OpenLIT Team
     email: contact@openlit.io
     url: https://openlit.io
+dependencies:
+  - name: openlit-operator
+    version: "0.2.1"
+    repository: "https://openlit.github.io/helm/"
+    condition: openlit-operator.enabled
+    tags:
+      - operator
diff --git a/charts/openlit/templates/clickhouse.yml b/charts/openlit/templates/clickhouse.yml
@@ -24,9 +24,20 @@ spec:
         app.kubernetes.io/component: database
     spec:
       terminationGracePeriodSeconds: 10
+      securityContext:
+        runAsUser: 101
+        runAsGroup: 101
+        fsGroup: 101
       containers:
       - name: clickhouse
-        image: clickhouse/clickhouse-server
+        image: "{{ .Values.clickhouse.image.repository }}:{{ .Values.clickhouse.image.tag }}"
+        imagePullPolicy: {{ .Values.clickhouse.image.pullPolicy }}
+        securityContext:
+          allowPrivilegeEscalation: false
+          capabilities:
+            drop:
+              - ALL
+          readOnlyRootFilesystem: false
         ports:
         - containerPort: 9000
         - containerPort: 8123
@@ -40,14 +51,30 @@ spec:
         - name: CLICKHOUSE_USER
           valueFrom:
             secretKeyRef:
-              name: {{ .Values.clickhouse.secret.name }}
+              name: {{ .Values.clickhouse.auth.secret.name }}
               key: {{ default "default" .Values.clickhouse.auth.secret.usernameKey }}
         {{- else }}
         - name: CLICKHOUSE_PASSWORD
           value: {{ .Values.clickhouse.auth.password | quote }}
         - name: CLICKHOUSE_USER
           value: {{ .Values.clickhouse.auth.user | quote }}
         {{- end }}
+        livenessProbe:
+          httpGet:
+            path: /ping
+            port: 8123
+          initialDelaySeconds: 30
+          periodSeconds: 10
+          timeoutSeconds: 5
+          failureThreshold: 3
+        readinessProbe:
+          httpGet:
+            path: /ping
+            port: 8123
+          initialDelaySeconds: 10
+          periodSeconds: 5
+          timeoutSeconds: 3
+          failureThreshold: 3
         resources:
           {{- toYaml .Values.clickhouse.resources | nindent 12 }}
         volumeMounts:
diff --git a/charts/openlit/templates/client.yaml b/charts/openlit/templates/client.yaml
@@ -2,31 +2,33 @@
 apiVersion: v1
 kind: ConfigMap
 metadata:
-  name: openlit-collector-config
+  name: {{ include "openlit.fullname" . }}-otel-config
   labels:
     app: {{ include "openlit.fullname" . }}
-    # {{- include "openlit.labels" . | nindent 4 }}
-    app.kubernetes.io/component: opentelemetry-collector
+    {{- include "openlit.labels" . | nindent 4 }}
+    app.kubernetes.io/component: openlit
 data:
-  opentelemetry-collector-config: |
+  otel-collector-config.yaml: |
     receivers:
       otlp:
         protocols:
           grpc:
             endpoint: 0.0.0.0:4317
           http:
             endpoint: 0.0.0.0:4318
+
     processors:
       batch:
       memory_limiter:
+        # 80% of maximum memory up to 2G
         limit_mib: 1500
+        # 25% of limit up to 2G
         spike_limit_mib: 512
         check_interval: 5s
-    extensions:
-      zpages: {}
+
     exporters:
       clickhouse:
-        endpoint: tcp://${env:INIT_DB_HOST}:${env:INIT_DB_PORT}?dial_timeout=10s
+        endpoint: tcp://${env:INIT_DB_HOST}:9000?dial_timeout=10s
         database: ${env:INIT_DB_DATABASE}
         username: ${env:INIT_DB_USERNAME}
         password: ${env:INIT_DB_PASSWORD}
@@ -40,22 +42,22 @@ data:
           initial_interval: 5s
           max_interval: 30s
           max_elapsed_time: 300s
+
     service:
       pipelines:
         logs:
-          receivers: [ otlp ]
-          processors: [ batch ]
-          exporters: [ clickhouse ]
+          receivers: [otlp]
+          processors: [batch]
+          exporters: [clickhouse]
         traces:
-          receivers: [ otlp ]
+          receivers: [otlp]
           processors: [memory_limiter, batch]
-          exporters: [ clickhouse ]
+          exporters: [clickhouse]
         metrics:
-          receivers: [ otlp ]
+          receivers: [otlp]
           processors: [memory_limiter, batch]
-          exporters: [ clickhouse ]
+          exporters: [clickhouse]
 ---
-
 apiVersion: apps/v1
 kind: StatefulSet
 metadata:
@@ -105,9 +107,24 @@ spec:
       - name: openlit
         image: "{{ .Values.image.repository }}:{{ .Values.image.tag | default .Chart.AppVersion }}"
         imagePullPolicy: {{ .Values.image.pullPolicy }}
+        securityContext:
+          allowPrivilegeEscalation: false
+          capabilities:
+            drop:
+              - ALL
+          readOnlyRootFilesystem: false
         ports:
           - containerPort: {{ .Values.service.port }}
+            name: http
+          - containerPort: 4317
+            name: otlp-grpc
+          - containerPort: 4318
+            name: otlp-http
         env:
+          - name: PORT
+            value: "{{ .Values.service.port }}"
+          - name: HOSTNAME
+            value: "0.0.0.0"
           - name: TELEMETRY_ENABLED
             value: "{{ .Values.config.usageMetrics }}"
           {{- if .Values.clickhouse.enabled }}
@@ -146,68 +163,56 @@ spec:
           - name: DEMO_ACCOUNT_PASSWORD
             value: "{{ .Values.config.preview_mode.account_password }}"
           {{- end }}
+          - name: OPAMP_ENVIRONMENT
+            value: "{{ .Values.config.opamp.environment }}"
+          - name: OPAMP_TLS_INSECURE_SKIP_VERIFY
+            value: "{{ .Values.config.opamp.tlsInsecureSkipVerify }}"
+          - name: OPAMP_TLS_REQUIRE_CLIENT_CERT
+            value: "{{ .Values.config.opamp.tlsRequireClientCert }}"
+          - name: OPAMP_TLS_MIN_VERSION
+            value: "{{ .Values.config.opamp.tlsMinVersion }}"
+          - name: OPAMP_TLS_MAX_VERSION
+            value: "{{ .Values.config.opamp.tlsMaxVersion }}"
+          - name: OPAMP_LOG_LEVEL
+            value: "{{ .Values.config.opamp.logLevel }}"
+        livenessProbe:
+          httpGet:
+            path: /
+            port: http
+          initialDelaySeconds: 60
+          periodSeconds: 10
+          timeoutSeconds: 5
+          failureThreshold: 3
+        readinessProbe:
+          httpGet:
+            path: /
+            port: http
+          initialDelaySeconds: 30
+          periodSeconds: 10
+          timeoutSeconds: 5
+          failureThreshold: 3
         resources:
           {{- toYaml .Values.resources | nindent 10 }}
-        {{- if .Values.persistence.enabled }}
         volumeMounts:
+          {{- if .Values.persistence.enabled }}
           - name: openlit-data
             mountPath: /app/client/data
-        {{- end }}
-      - name: opentelemetry-collector
-        image: otel/opentelemetry-collector-contrib:0.94.0
-        command:
-          - "/otelcol-contrib"
-          - "--config=/conf/opentelemetry-collector-config.yaml"
-        ports:
-          - containerPort: 4317
-          - containerPort: 4318
-        env:
-          {{- if .Values.clickhouse.enabled }}
-          - name: INIT_DB_HOST
-            value: "{{ .Release.Name }}-db.{{ .Release.Namespace }}.svc.cluster.local"
-          {{- else }}
-          - name: INIT_DB_HOST
-            value: "{{ .Values.config.database.host }}"
           {{- end }}
-          - name: INIT_DB_PORT
-            value: "9000"
-          - name: INIT_DB_DATABASE
-            value: "{{ .Values.config.database.name }}"
-          {{ if .Values.config.secret }}
-          - name: INIT_DB_USERNAME
-            valueFrom:
-              secretKeyRef:
-                name: {{ .Values.config.secret.name }}
-                key: {{ .Values.config.secret.usernameKey }}
-          - name: INIT_DB_PASSWORD
-            valueFrom:
-              secretKeyRef:
-                name: {{ .Values.config.secret.name }}
-                key: {{ .Values.config.secret.passwordKey }}
-          {{ else }}
-          - name: INIT_DB_USERNAME
-            value: "{{ .Values.config.database.username }}"
-          - name: INIT_DB_PASSWORD
-            value: "{{ .Values.config.database.password }}"
-          {{- end }}
-        volumeMounts:
-          - name: opentelemetry-collector-config-vol
-            mountPath: /conf
-      volumes:
-        - name: opentelemetry-collector-config-vol
-          configMap:
-            name: openlit-collector-config
-            items:
-              - key: opentelemetry-collector-config
-                path: opentelemetry-collector-config.yaml
+          - name: otel-config
+            mountPath: /etc/otel
+          - name: otel-collector-config
+            mountPath: /etc/otel/otel-collector-config.yaml
+            subPath: otel-collector-config.yaml
       {{- if .Values.imagePullSecrets }}
       imagePullSecrets:
         {{- range .Values.imagePullSecrets }}
         - name: {{ . }}
         {{- end }}
       {{- end }}
+      {{- with .Values.nodeSelector }}
       nodeSelector:
-        {{ toYaml .Values.nodeSelector | nindent 8 }}
+        {{- toYaml . | nindent 8 }}
+      {{- end }}
       {{- if .Values.tolerations }}
       tolerations:
         {{- toYaml .Values.tolerations | nindent 8 }}
@@ -216,6 +221,12 @@ spec:
       affinity:
         {{- toYaml .Values.affinity | nindent 8 }}
       {{- end }}
+      volumes:
+        - name: otel-config
+          emptyDir: {}
+        - name: otel-collector-config
+          configMap:
+            name: {{ include "openlit.fullname" . }}-otel-config
   {{- if .Values.persistence.enabled }}
   volumeClaimTemplates:
   - metadata:
diff --git a/charts/openlit/templates/ingress.yml b/charts/openlit/templates/ingress.yml
@@ -50,11 +50,11 @@ spec:
             backend:
               {{- if semverCompare ">=1.19-0" $.Capabilities.KubeVersion.GitVersion }}
               service:
-                name: openlit
+                name: {{ include "openlit.fullname" $ }}
                 port:
                   number: {{ $svcPort }}
               {{- else }}
-              serviceName: {{ include "openlit.fullname" . }}
+              serviceName: {{ include "openlit.fullname" $ }}
               servicePort: {{ $svcPort }}
               {{- end }}
           {{- end }}
diff --git a/charts/openlit/values.yaml b/charts/openlit/values.yaml
