From 589b28f60dc27a5274d59ad0b0542b3360a648ea Mon Sep 17 00:00:00 2001 From: Nick Larsen Date: Thu, 23 Apr 2026 13:37:50 +0200 Subject: [PATCH 1/4] fix(stack/observability): Change tempo port: 3100 -> 3200 Changed in chart 1.21.1: > Breaking Change * In order to be consistent with other projects and documentations, the default port has been changed from 3100 to 3200. --- stacks/observability/grafana.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/stacks/observability/grafana.yaml b/stacks/observability/grafana.yaml index 59759244..5d95da67 100644 --- a/stacks/observability/grafana.yaml +++ b/stacks/observability/grafana.yaml @@ -29,7 +29,7 @@ options: tlsAuthWithCACert: false - name: Tempo type: tempo - url: http://tempo:3100 + url: http://tempo:3200 access: proxy isDefault: false jsonData: From 72737e80af25b5ebf2b934a2ceec16456a76becc Mon Sep 17 00:00:00 2001 From: Nick Larsen Date: Thu, 23 Apr 2026 13:42:53 +0200 Subject: [PATCH 2/4] fix(stack/observability): Change jaeger endpoint jaeger-collector -> jaeger It changed somewhere between chart 3.4.1 and 4.5.0 (massive restructure) --- stacks/observability/opentelemetry-collector-deployment.yaml | 2 +- stacks/observability/opentelemetry-collector-sidecar.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/stacks/observability/opentelemetry-collector-deployment.yaml b/stacks/observability/opentelemetry-collector-deployment.yaml index f7c6ce2c..5c0455f2 100644 --- a/stacks/observability/opentelemetry-collector-deployment.yaml +++ b/stacks/observability/opentelemetry-collector-deployment.yaml @@ -38,7 +38,7 @@ spec: debug: {} # verbosity: detailed otlp/jaeger: - endpoint: jaeger-collector:4317 + endpoint: jaeger:4317 tls: insecure: true otlp/tempo: diff --git a/stacks/observability/opentelemetry-collector-sidecar.yaml b/stacks/observability/opentelemetry-collector-sidecar.yaml index 80be1944..e7a17a35 100644 --- a/stacks/observability/opentelemetry-collector-sidecar.yaml +++ b/stacks/observability/opentelemetry-collector-sidecar.yaml @@ -36,7 +36,7 @@ spec: debug: {} # verbosity: detailed otlp/jaeger: - endpoint: jaeger-collector:4317 + endpoint: jaeger:4317 tls: insecure: true otlp/tempo: From 6770a71c792e2ee4ab2ad698a8e300316fb9ef53 Mon Sep 17 00:00:00 2001 From: Nick Larsen Date: Thu, 23 Apr 2026 15:03:50 +0200 Subject: [PATCH 3/4] chore(stack/observability): Use FQDNs This allows otelcollector configs to be used by pods in any namespace and make it easier to use Secret Operator generated TLS certs so grafana can connect to datasources securely. --- stacks/observability/grafana.yaml | 4 ++-- .../observability/opentelemetry-collector-deployment.yaml | 6 +++--- stacks/observability/opentelemetry-collector-sidecar.yaml | 6 +++--- 3 files changed, 8 insertions(+), 8 deletions(-) diff --git a/stacks/observability/grafana.yaml b/stacks/observability/grafana.yaml index 5d95da67..54c30157 100644 --- a/stacks/observability/grafana.yaml +++ b/stacks/observability/grafana.yaml @@ -22,14 +22,14 @@ options: datasources: - name: Loki type: loki - url: http://loki:3100 + url: http://loki.{{ NAMESPACE }}.svc.cluster.local:3100 access: proxy isDefault: false jsonData: tlsAuthWithCACert: false - name: Tempo type: tempo - url: http://tempo:3200 + url: http://tempo.{{ NAMESPACE }}.svc.cluster.local:3200 access: proxy isDefault: false jsonData: diff --git a/stacks/observability/opentelemetry-collector-deployment.yaml b/stacks/observability/opentelemetry-collector-deployment.yaml index 5c0455f2..a016ebdb 100644 --- a/stacks/observability/opentelemetry-collector-deployment.yaml +++ b/stacks/observability/opentelemetry-collector-deployment.yaml @@ -38,15 +38,15 @@ spec: debug: {} # verbosity: detailed otlp/jaeger: - endpoint: jaeger:4317 + endpoint: jaeger.{{ NAMESPACE }}.svc.cluster.local:4317 tls: insecure: true otlp/tempo: - endpoint: tempo:4317 + endpoint: tempo.{{ NAMESPACE }}.svc.cluster.local:4317 tls: insecure: true otlphttp/loki: - endpoint: http://loki:3100/otlp + endpoint: http://loki.{{ NAMESPACE }}.svc.cluster.local:3100/otlp tls: insecure: true # auth: diff --git a/stacks/observability/opentelemetry-collector-sidecar.yaml b/stacks/observability/opentelemetry-collector-sidecar.yaml index e7a17a35..a28672e0 100644 --- a/stacks/observability/opentelemetry-collector-sidecar.yaml +++ b/stacks/observability/opentelemetry-collector-sidecar.yaml @@ -36,15 +36,15 @@ spec: debug: {} # verbosity: detailed otlp/jaeger: - endpoint: jaeger:4317 + endpoint: jaeger.{{ NAMESPACE }}.svc.cluster.local:4317 tls: insecure: true otlp/tempo: - endpoint: tempo:4317 + endpoint: tempo.{{ NAMESPACE }}.svc.cluster.local:4317 tls: insecure: true otlphttp/loki: - endpoint: http://loki:3100/otlp + endpoint: http://loki.{{ NAMESPACE }}.svc.cluster.local:3100/otlp tls: insecure: true # auth: From dfd1864e07aaf6559b6968a9f9a2faddecbbe481 Mon Sep 17 00:00:00 2001 From: Nick Larsen Date: Thu, 23 Apr 2026 15:12:58 +0200 Subject: [PATCH 4/4] fix: This didn't get bumped at release branch time The script doesn't look for that pattern, so it was missed. We should consider using renovate instead of a script with special (though fragile) rules. See: [slack thread](https://stackable-workspace.slack.com/archives/C0AUHQDF1NE/p1776949735762449) --- stacks/stacks-v2.yaml | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/stacks/stacks-v2.yaml b/stacks/stacks-v2.yaml index 7f36ce8b..679dba9f 100644 --- a/stacks/stacks-v2.yaml +++ b/stacks/stacks-v2.yaml @@ -104,7 +104,8 @@ stacks: default: 3.4.0 - name: stackableReleaseVersion description: The Stackable release to be used for the OpenSearch Dashboards image tag - default: 0.0.0-dev + # TODO (@NickLarsenNZ): Consider using renovate to bump the SDP versions at release branch time. + default: 26.3.0 observability: description: >- An observability stack with auto-injection of the opentelemetry-collector sidecar to receive traces/logs/metrics via OTLP, and send them to Jaeger/Tempo/Loki. @@ -688,7 +689,8 @@ stacks: default: 3.4.0 - name: stackableReleaseVersion description: The Stackable release to be used for the OpenSearch Dashboards image tag - default: 0.0.0-dev + # TODO (@NickLarsenNZ): Consider using renovate to bump the SDP versions at release branch time. + default: 26.3.0 - name: jupyterLabToken description: Token for JupyterLab UI access default: adminadmin