fix: 🐛 add reverse proxy for observatorium bug workaround

Author: Falltrades

charts/observatorium/Chart.yaml

@@ -4,7 +4,7 @@ description: This Helm chart deploy Observatorium API and help to manage tenant
 
 type: application
 
-version: 0.5.2
+version: 0.5.3
 
 appVersion: "main-2025-02-10-1bcf722"
 

charts/observatorium/README.md

@@ -1,6 +1,6 @@
 # observatorium
 
-![Version: 0.5.2](https://img.shields.io/badge/Version-0.5.2-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: main-2025-02-10-1bcf722](https://img.shields.io/badge/AppVersion-main--2025--02--10--1bcf722-informational?style=flat-square)
+![Version: 0.5.3](https://img.shields.io/badge/Version-0.5.3-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: main-2025-02-10-1bcf722](https://img.shields.io/badge/AppVersion-main--2025--02--10--1bcf722-informational?style=flat-square)
 
 This Helm chart deploy Observatorium API and help to manage tenant from values file.
 
@@ -62,6 +62,10 @@ This Helm chart deploy Observatorium API and help to manage tenant from values f
 | rate_limiter.enabled | bool | `false` |  |
 | replicaCount | int | `1` |  |
 | resources | object | `{}` |  |
+| reverseProxy.enabled | bool | `false` | Enables or disables the reverse proxy component. |
+| reverseProxy.image | string | `"nginxinc/nginx-unprivileged:1.28-alpine"` | Container image used for the reverse proxy (default: non-root NGINX image). |
+| reverseProxy.logsHost | string | `""` | Hostname of the logs backend to which requests should be proxied. |
+| reverseProxy.metricsHost | string | `""` | Hostname of the metrics backend to which requests should be proxied. |
 | securityContext | object | `{}` |  |
 | service.port | int | `80` |  |
 | service.type | string | `"ClusterIP"` |  |

charts/observatorium/templates/nginx-configmap.yaml

@@ -0,0 +1,28 @@
+{{- if .Values.reverseProxy.enabled -}}
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  labels:
+     {{- include "observatorium.labels" (dict "ctx" $ "component" "nginx" ) | nindent 4 }}
+  name: {{ include "observatorium.resourceName" (dict "ctx" $ "component" "nginx") }}
+data:
+  nginx.conf: |
+    events {}
+    http {
+      server {
+        listen 8080;
+
+        location /loki/ {
+          proxy_pass http://{{ .Values.reverseProxy.logsHost }}/;
+          proxy_set_header Host {{ .Values.reverseProxy.logsHost }};
+          proxy_ssl_server_name on;
+        }
+
+        location /mimir/ {
+          proxy_pass http://{{ .Values.reverseProxy.metricsHost }}/; 
+          proxy_set_header Host {{ .Values.reverseProxy.metricsHost }}; 
+          proxy_ssl_server_name on;
+        }
+      }
+    }
+{{- end }}

charts/observatorium/templates/nginx-deployment.yaml

@@ -0,0 +1,35 @@
+{{- if .Values.reverseProxy.enabled -}}
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  labels:
+     {{- include "observatorium.labels" (dict "ctx" $ "component" "nginx" ) | nindent 4 }}
+  name: {{ include "observatorium.resourceName" (dict "ctx" $ "component" "nginx") }}
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      {{- include "observatorium.selectorLabels" (dict "ctx" $ "component" "nginx") | nindent 6 }}
+  template:
+    metadata:
+      labels:
+        {{- include "observatorium.selectorLabels" (dict "ctx" $ "component" "nginx") | nindent 8 }}
+    spec:
+      containers:
+        - name: nginx
+          image: {{ .Values.reverseProxy.image }}
+          ports:
+            - containerPort: 8080
+          volumeMounts:
+            - name: config
+              mountPath: /etc/nginx/nginx.conf
+              subPath: nginx.conf
+            - name: run
+              mountPath: /run
+      volumes:
+        - name: config
+          configMap:
+            name: {{ include "observatorium.resourceName" (dict "ctx" $ "component" "nginx") }}
+        - name: run
+          emptyDir: {}
+{{- end }}

charts/observatorium/templates/nginx-service.yaml

@@ -0,0 +1,16 @@
+{{- if .Values.reverseProxy.enabled -}}
+apiVersion: v1
+kind: Service
+metadata:
+  labels:
+     {{- include "observatorium.labels" (dict "ctx" $ "component" "nginx" ) | nindent 4 }}
+  name: {{ include "observatorium.resourceName" (dict "ctx" $ "component" "nginx") }}
+spec:
+  ports:
+  - appProtocol: http
+    name: internal
+    port: 8080
+    targetPort: 8080
+  selector:
+    {{- include "observatorium.selectorLabels" (dict "ctx" $ "component" "nginx") | nindent 4 }}
+{{- end }}

charts/observatorium/values.yaml

@@ -149,3 +149,14 @@ projects: {}
   #         hprod-my-tenant2:
 global:
   projects: null
+
+# Related to https://github.com/observatorium/api/issues/739
+reverseProxy:
+  # -- Enables or disables the reverse proxy component.
+  enabled: false
+  # -- Hostname of the metrics backend to which requests should be proxied.
+  metricsHost: ""
+  # -- Hostname of the logs backend to which requests should be proxied.
+  logsHost: ""
+  # -- Container image used for the reverse proxy (default: non-root NGINX image).
+  image: nginxinc/nginx-unprivileged:1.28-alpine