Merge branch 'main' into bramwelt/heidall-trusted-proxies

Signed-off-by: Eric Searcy <[email protected]>

Author: emsearcy

.cspell.json

@@ -14,6 +14,8 @@
     "finalizer",
     "gelf",
     "gjson",
+    "heimdallcfg",
+    "jaegertracing",
     "jetstream",
     "jouve",
     "kubeconform",
@@ -32,6 +34,7 @@
     "swaggerapi",
     "tcsh",
     "totp",
+    "tracecontext",
     "traefik",
     "webauthn",
     "websecure",

charts/lfx-platform/Chart.lock

@@ -4,13 +4,13 @@ dependencies:
   version: 36.2.0
 - name: openfga
   repository: https://openfga.github.io/helm-charts
-  version: 0.2.44
+  version: 0.2.48
 - name: heimdall
   repository: oci://ghcr.io/dadrus/heimdall/chart
   version: 0.15.8
 - name: nats
   repository: https://nats-io.github.io/k8s/helm/charts/
-  version: 1.3.14
+  version: 1.3.16
 - name: opensearch
   repository: https://opensearch-project.github.io/helm-charts/
   version: 2.34.0
@@ -19,7 +19,7 @@ dependencies:
   version: 0.25.2
 - name: authelia
   repository: https://charts.authelia.com
-  version: 0.10.46
+  version: 0.10.49
 - name: nack
   repository: https://nats-io.github.io/k8s/helm/charts/
   version: 0.29.2
@@ -28,7 +28,7 @@ dependencies:
   version: 1.0.0
 - name: cert-manager
   repository: https://charts.jetstack.io
-  version: v1.18.2
+  version: v1.18.3
 - name: trust-manager
   repository: https://charts.jetstack.io
   version: v0.18.0
@@ -37,24 +37,24 @@ dependencies:
   version: 0.4.7
 - name: lfx-v2-project-service
   repository: oci://ghcr.io/linuxfoundation/lfx-v2-project-service/chart
-  version: 0.4.6
+  version: 0.5.1
 - name: lfx-v2-fga-sync
   repository: oci://ghcr.io/linuxfoundation/lfx-v2-fga-sync/chart
-  version: 0.2.3
+  version: 0.2.5
 - name: lfx-v2-access-check
   repository: oci://ghcr.io/linuxfoundation/lfx-v2-access-check/chart
   version: 0.2.4
 - name: lfx-v2-indexer-service
   repository: oci://ghcr.io/linuxfoundation/lfx-v2-indexer-service/chart
-  version: 0.4.4
+  version: 0.4.7
 - name: lfx-v2-committee-service
   repository: oci://ghcr.io/linuxfoundation/lfx-v2-committee-service/chart
-  version: 0.1.1
+  version: 0.2.10
 - name: lfx-v2-meeting-service
   repository: oci://ghcr.io/linuxfoundation/lfx-v2-meeting-service/chart
-  version: 0.1.1
+  version: 0.5.4
 - name: lfx-v2-auth-service
   repository: oci://ghcr.io/linuxfoundation/lfx-v2-auth-service/chart
-  version: 0.2.7
-digest: sha256:f257d04b41319d0d2965ad899e79593afeb766a94dac16333f340db972fb9782
-generated: "2025-10-10T13:37:19.358619-03:00"
+  version: 0.3.1
+digest: sha256:8f37845d3c1e7af228c040a521c9af729c7e9b9c5de474d5c809fb6d8662e66d
+generated: "2025-11-17T10:14:37.78676-08:00"

charts/lfx-platform/Chart.yaml

@@ -5,7 +5,7 @@ apiVersion: v2
 name: lfx-platform
 description: LFX Platform v2 Helm chart
 type: application
-version: 0.3.3
+version: 0.3.10
 icon: https://github.com/linuxfoundation/lfx-v2-helm/raw/main/img/lfx-logo-color.svg
 dependencies:
   - name: traefik
@@ -14,11 +14,11 @@ dependencies:
     condition: traefik.enabled
   - name: openfga
     repository: https://openfga.github.io/helm-charts
-    version: ~0.2.38
+    version: ~0.2.39
     condition: openfga.enabled
   - name: heimdall
     repository: oci://ghcr.io/dadrus/heimdall/chart
-    version: ~0.15.7
+    version: ~0.15.8
     condition: heimdall.enabled
   - name: nats
     repository: https://nats-io.github.io/k8s/helm/charts/
@@ -54,33 +54,33 @@ dependencies:
     condition: trustManagerEnabled
   - name: lfx-v2-query-service
     repository: oci://ghcr.io/linuxfoundation/lfx-v2-query-service/chart
-    version: ~0.4.6
+    version: ~0.4.7
     condition: lfx-v2-query-service.enabled
   - name: lfx-v2-project-service
     repository: oci://ghcr.io/linuxfoundation/lfx-v2-project-service/chart
-    version: ~0.4.3
+    version: ~0.5.1
     condition: lfx-v2-project-service.enabled
   - name: lfx-v2-fga-sync
     repository: oci://ghcr.io/linuxfoundation/lfx-v2-fga-sync/chart
-    version: ~0.2.3
+    version: ~0.2.5
     condition: lfx-v2-fga-sync.enabled
   - name: lfx-v2-access-check
     repository: oci://ghcr.io/linuxfoundation/lfx-v2-access-check/chart
-    version: ~0.2.3
+    version: ~0.2.4
     condition: lfx-v2-access-check.enabled
   - name: lfx-v2-indexer-service
     repository: oci://ghcr.io/linuxfoundation/lfx-v2-indexer-service/chart
-    version: ~0.4.4
+    version: ~0.4.7
     condition: lfx-v2-indexer-service.enabled
   - name: lfx-v2-committee-service
     repository: oci://ghcr.io/linuxfoundation/lfx-v2-committee-service/chart
-    version: ~0.1.0
+    version: ~0.2.10
     condition: lfx-v2-committee-service.enabled
   - name: lfx-v2-meeting-service
     repository: oci://ghcr.io/linuxfoundation/lfx-v2-meeting-service/chart
-    version: ~0.1.0
+    version: ~0.5.4
     condition: lfx-v2-meeting-service.enabled
   - name: lfx-v2-auth-service
     repository: oci://ghcr.io/linuxfoundation/lfx-v2-auth-service/chart
-    version: ~0.2.7
+    version: ~0.3.1
     condition: lfx-v2-auth-service.enabled

charts/lfx-platform/README.md

@@ -156,4 +156,88 @@ openfga:
     existingSecret: openfga-postgresql-client
 ```
 
-## Documentation
+## Jaeger
+
+Jaeger provides distributed tracing capabilities for the LFX platform.
+It should be installed in a separate `observability` namespace.
+
+### Jaeger Prerequisites
+
+Add the Jaeger Helm repository:
+
+```bash
+helm repo add jaegertracing https://jaegertracing.github.io/helm-charts
+helm repo update
+```
+
+### Installing Jaeger
+
+Install Jaeger using the all-in-one chart (suitable for development/testing):
+
+```bash
+helm install jaeger jaegertracing/jaeger \
+  -n observability \
+  --create-namespace \
+  --set allInOne.enabled=true \
+  --set agent.enabled=false \
+  --set collector.enabled=false \
+  --set query.enabled=false \
+  --set storage.type=memory \
+  --set provisionDataStore.cassandra=false
+```
+
+### Set Helm Values
+
+Either update `charts/lfx-platform/values.yaml` directly or create a new
+`tracing-values.yaml` file with the following values to enable traces to
+be sent to Jaeger.
+
+#### Traefik Values
+
+```yaml
+traefik:
+  tracing:
+    otlp:
+      enabled: true
+```
+
+#### OpenFGA Values
+
+```yaml
+openfga:
+  telemetry:
+    trace:
+      enabled: true
+```
+
+#### Heimdall Values
+
+```yaml
+heimdall:
+  env:
+    HEIMDALLCFG_TRACING_ENABLED: "true"
+```
+
+### Upgrade Helm Deployment
+
+Then upgrade the helm deployment.
+
+```bash
+helm upgrade lfx-platform charts/lfx-platform
+```
+
+If using a values file, pass it to the command:
+
+```bash
+helm upgrade -f tracing-values.yaml lfx-platform charts/lfx-platform
+```
+
+### Accessing Jaeger UI
+
+To access the Jaeger UI locally:
+
+```bash
+kubectl port-forward -n observability svc/jaeger-query 16686:16686
+```
+
+Then open `http://localhost:16686` in your browser.