Add OpenTelemetry Helm chart configuration

Add otel configuration section to values.yaml with environment variables
for OTLP exporter configuration. Update deployment.yaml to inject OTEL
environment variables into the container.

Issue: LFXV2-616

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

Author: bramwelt

charts/lfx-v2-access-check/templates/deployment.yaml

@@ -38,6 +38,30 @@ spec:
               value: "{{ .Values.nats.url }}"
             - name: JWKS_URL
               value: "{{ .Values.heimdall.jwks_url }}"
+            {{- if .Values.otel.serviceName }}
+            - name: OTEL_SERVICE_NAME
+              value: {{ .Values.otel.serviceName | quote }}
+            {{- end }}
+            {{- if .Values.otel.serviceVersion }}
+            - name: OTEL_SERVICE_VERSION
+              value: {{ .Values.otel.serviceVersion | quote }}
+            {{- end }}
+            {{- if .Values.otel.endpoint }}
+            - name: OTEL_EXPORTER_OTLP_ENDPOINT
+              value: {{ .Values.otel.endpoint | quote }}
+            {{- end }}
+            {{- if .Values.otel.protocol }}
+            - name: OTEL_EXPORTER_OTLP_PROTOCOL
+              value: {{ .Values.otel.protocol | quote }}
+            {{- end }}
+            {{- if .Values.otel.insecure }}
+            - name: OTEL_EXPORTER_OTLP_INSECURE
+              value: {{ .Values.otel.insecure | quote }}
+            {{- end }}
+            {{- if .Values.otel.tracesExporter }}
+            - name: OTEL_TRACES_EXPORTER
+              value: {{ .Values.otel.tracesExporter | quote }}
+            {{- end }}
           {{- if .Values.app.resources }}
           resources:
             {{- toYaml .Values.app.resources | nindent 12 }}

charts/lfx-v2-access-check/values.yaml

@@ -50,3 +50,24 @@ heimdall:
   enabled: true
   url: http://lfx-platform-heimdall.lfx.svc.cluster.local:4456
   jwks_url: http://lfx-platform-heimdall:4457/.well-known/jwks
+
+# otel is the configuration for OpenTelemetry tracing
+otel:
+  # serviceName is the service name for OpenTelemetry resource identification
+  # (default: "lfx-v2-access-check")
+  serviceName: ""
+  # serviceVersion is the service version for OpenTelemetry resource identification
+  # (default: "1.0.0")
+  serviceVersion: ""
+  # protocol specifies the OTLP protocol: "grpc" or "http"
+  # (default: "grpc")
+  protocol: "grpc"
+  # endpoint is the OTLP collector endpoint
+  # For gRPC: typically "host:4317", for HTTP: typically "host:4318"
+  endpoint: ""
+  # insecure disables TLS for the OTLP connection
+  # Set to "true" for in-cluster communication without TLS
+  insecure: "false"
+  # tracesExporter specifies the traces exporter: "otlp" or "none"
+  # (default: "none")
+  tracesExporter: "none"