Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

  1. Configure your deployment custom-values.yaml file

Code Block
kfuse-auth:
  ingestOauthEnabled: true
  oauth2-proxy:
    extraArgs:
      extraJwtIssuers: "Issuer URI=Audience"

...

Code Block
extraJwtIssuers: "https://{okta-domain}.okta.com/oauth2/default=api://defaultyour-audience-id""

Configuration required on the otel collector side in the values.yaml file

...

Code Block
opentelemetry-collector:
  config:
    exporters:
      otlphttp/{deployment-namespace}:
        metrics_endpoint: https://<your<kloudfuse-metrics-endpoint>url>/ingester/otlp/metrics
        traces_endpoint: https://<your-traces-endpoint><kloudfuse-url>/ingester/otlp/traces
        logs_endpoint : https://<kloudfuse-url>/ingester/otlp/v1/traceslogs
        auth: 
          authenticator: oauth2client
  • Replace <your-metrics-endpoint> and <your-traces-endpoint> <kloudfuse-url> with the actual URLs URL of kloudfuse.

  • Replace {deployment-namespace} with the namespace where you are installing the kfuse stack.

  1. Add Required Extensions - Include the oauth2client under the service.extensions section.

...

Code Block
opentelemetry-collector:
  config:
    service:
      pipelines:
        metrics:
          exporters:
          - otlphttp/{deployment-namespace}
        traces:
          exporters:
          - otlphttp/{deployment-namespace}
        logs:
          exporters:
          - otlphttp/{deployment-namespace}