feat: add Jaeger distributed tracing support

charts/lfx-platform/Chart.lock

@@ -4,7 +4,7 @@ dependencies:
   version: 36.2.0
 - name: openfga
   repository: https://openfga.github.io/helm-charts
-  version: 0.2.43
+  version: 0.2.44
 - name: heimdall
   repository: oci://ghcr.io/dadrus/heimdall/chart
   version: 0.15.8
@@ -37,7 +37,7 @@ dependencies:
   version: 0.4.6
 - name: lfx-v2-project-service
   repository: oci://ghcr.io/linuxfoundation/lfx-v2-project-service/chart
-  version: 0.4.3
+  version: 0.4.4
 - name: lfx-v2-fga-sync
   repository: oci://ghcr.io/linuxfoundation/lfx-v2-fga-sync/chart
   version: 0.2.3
@@ -50,5 +50,5 @@ dependencies:
 - name: lfx-v2-auth-service
   repository: oci://ghcr.io/linuxfoundation/lfx-v2-auth-service/chart
   version: 0.2.1
-digest: sha256:4910bb2ac9c059bb3e4beb5067ba6bcca6e7f9b2c76ce91897a7e68d85c680d6
-generated: "2025-09-29T12:29:27.911893-03:00"
+digest: sha256:5c9a937c263a2e9b0a1c0fa423962082510b1dac50c634e8f3ffd408b615adf3
+generated: "2025-09-30T12:04:11.116874553-07:00"

charts/lfx-platform/Chart.yaml

@@ -5,7 +5,7 @@ apiVersion: v2
 name: lfx-platform
 description: LFX Platform v2 Helm chart
 type: application
-version: 0.2.19
+version: 0.2.20
 icon: https://github.com/linuxfoundation/lfx-v2-helm/raw/main/img/lfx-logo-color.svg
 dependencies:
   - name: traefik

charts/lfx-platform/README.md

@@ -156,4 +156,88 @@ openfga:
     existingSecret: openfga-postgresql-client
 ```
 
-## Documentation
+## Jaeger
+
+Jaeger provides distributed tracing capabilities for the LFX platform.
+It should be installed in a separate `observability` namespace.
+
+### Jaeger Prerequisites
+
+Add the Jaeger Helm repository:
+
+```bash
+helm repo add jaegertracing https://jaegertracing.github.io/helm-charts
+helm repo update
+```
+
+### Installing Jaeger
+
+Install Jaeger using the all-in-one chart (suitable for development/testing):
+
+```bash
+helm install jaeger jaegertracing/jaeger \
+  -n observability \
+  --create-namespace \
+  --set allInOne.enabled=true \
+  --set agent.enabled=false \
+  --set collector.enabled=false \
+  --set query.enabled=false \
+  --set storage.type=memory \
+  --set provisionDataStore.cassandra=false
+```
+
+### Set Helm Values
+
+Either update `charts/lfx-platform/values.yaml` directly or create a new
+`tracing-values.yaml` file with the following values to enable traces to
+be sent to Jaeger.
+
+#### Traefik Values
+
+```yaml
+traefik:
+  tracing:
+    otlp:
+      enabled: true
+```
+
+#### OpenFGA Values
+
+```yaml
+openfga:
+  telemetry:
+    trace:
+      enabled: true
+```
+
+#### Heimdall Values
+
+```yaml
+heimdall:
+  env:
+    HEIMDALLCFG_TRACING_ENABLED: "true"
+```
+
+### Upgrade Helm Deployment
+
+Then upgrade the helm deployment.
+
+```bash
+helm upgrade lfx-platform chart/lfx-platform
+```
+
+If using a values file, pass it to the command:
+
+```bash
+helm upgrade -f tracing-values.yaml lfx-platform chart/lfx-platform
+```
+
+### Accessing Jaeger UI
+
+To access the Jaeger UI locally:
+
+```bash
+kubectl port-forward -n observability svc/jaeger-query 16686:16686
+```
+
+Then open `http://localhost:16686` in your browser.

charts/lfx-platform/values.yaml

@@ -61,6 +61,16 @@ fga-operator:
 # Traefik configuration
 traefik:
   enabled: true
+  tracing:
+    otlp:
+      enabled: false
+      grpc:
+        enabled: true
+        endpoint: "jaeger-collector.observability:4317"
+        insecure: true
+  env:
+    - name: OTEL_PROPOGATORS
+      value: tracecontext,baggage,jaeger
   providers:
     # Enable Kubernetes Gateway provider
     kubernetesGateway:
@@ -98,7 +108,6 @@ gateway:
         namespaces:
           from: Same
 
-
 # OpenFGA configuration
 openfga:
   enabled: true
@@ -122,6 +131,16 @@ openfga:
       database: openfga
       existingSecret: openfga-postgresql-server
 
+  # Tracing configuration
+  telemetry:
+    trace:
+      enabled: false
+      otlp:
+        endpoint: "jaeger-collector.observability:4317"
+        tls:
+          enabled: false
+      sampleRatio: 1.0
+
   # Additional OpenFGA configuration
   replicaCount: 1
 
@@ -148,6 +167,12 @@ heimdall:
         mountPath: "/heimdall/cert/"
 
   env:
+    # Tracing Configuration
+    HEIMDALLCFG_TRACING_ENABLED: "false"
+    OTEL_PROPARGATOR: jaeger
+    OTEL_TRACE_EXPORTER: otlp
+    OTEL_EXPORTER_OTLP_TRACES_PROTOCOL: grpc
+    OTEL_EXPORTER_OTLP_TRACES_ENDPOINT: "http://jaeger-collector.observability:4317"
     CLIENT_SECRET:
       secretKeyRef:
         name: authelia-clients