WIP: Adding oauth2 support, adding processors for otlp destinations, adding a test to exercise every auth mode.

Signed-off-by: Pete Wall <pete.wall@grafana.com>

Author: petewall

charts/k8s-monitoring/charts/k8s-monitoring-feature-annotation-autodiscovery-1.0.0.tgz

@@ -20,7 +20,7 @@ proxyURL: ""
 tenantId: ""
 # -- The key for storing the tenant ID in the secret.
 # @section -- General
-tenantIdKey: "tenantId"
+tenantIdKey: tenantId
 # -- Raw config for accessing the tenant ID.
 # @section -- General
 tenantIdFrom: ""
@@ -45,17 +45,16 @@ extraLabelsFrom: {}
 
 auth:
   # -- The type of authentication to do.
-  # Options are "none" (default), "basic", "bearerToken".
-  # @default -- none
+  # Options are "none" (default), "basic", "bearerToken", "oauth2".
   # @section -- Authentication
-  type: ""
+  type: none
 
   # -- The username for basic authentication.
   # @section -- Authentication - Basic
   username: ""
   # -- The key for storing the username in the secret.
   # @section -- Authentication - Basic
-  usernameKey: "username"
+  usernameKey: username
   # -- Raw config for accessing the username.
   # @section -- Authentication - Basic
   usernameFrom: ""
@@ -80,6 +79,52 @@ auth:
   # @section -- Authentication - Bearer Token
   bearerTokenFrom: ""
 
+  # Authenticate to Loki using OAuth2
+  # @section -- Authentication - OAuth2
+  oauth2:
+    # -- OAuth2 client ID
+    # @section -- Authentication - OAuth2
+    clientId: ""
+    # -- The key for the client ID property in the secret
+    # @section -- Authentication - OAuth2
+    clientIdKey: clientId
+    # -- Raw config for accessing the client ID
+    # @section -- Authentication - OAuth2
+    clientIdFrom: ""
+    # -- Prometheus OAuth2 client secret
+    # @section -- Authentication - OAuth2
+    clientSecret: ""
+    # -- The key for the client secret property in the secret
+    # @section -- Authentication - OAuth2
+    clientSecretKey: clientSecret
+    # -- Raw config for accessing the client secret
+    # @section -- Authentication - OAuth2
+    clientSecretFrom: ""
+    # -- File containing the OAuth2 client secret.
+    # @section -- Authentication - OAuth2
+    clientSecretFile: ""
+    # -- Prometheus OAuth2 endpoint parameters
+    # @section -- Authentication - OAuth2
+    endpointParams: {}
+    # -- HTTP proxy to send requests through.
+    # @section -- Authentication - OAuth2
+    proxyURL: ""
+    # -- Comma-separated list of IP addresses, CIDR notations, and domain names to exclude from proxying.
+    # @section -- Authentication - OAuth2
+    noProxy: ""
+    # -- Use the proxy URL indicated by environment variables.
+    # @section -- Authentication - OAuth2
+    proxyFromEnvironment: false
+    # -- Specifies headers to send to proxies during CONNECT requests.
+    # @section -- Authentication - OAuth2
+    proxyConnectHeader: {}
+    # -- List of scopes to authenticate with.
+    # @section -- Authentication - OAuth2
+    scopes: []
+    # -- URL to fetch the token from.
+    # @section -- Authentication - OAuth2
+    tokenURL: ""
+
 secret:
   # -- (bool) Whether to create a secret for this Loki destination.
   # @default -- `true`

charts/k8s-monitoring/charts/k8s-monitoring-feature-application-observability-1.0.0.tgz

@@ -52,17 +52,16 @@ extraHeadersFrom: {}
 
 auth:
   # -- The type of authentication to do.
-  # Options are "none" (default), "basic", "bearerToken".
-  # @default -- none
+  # Options are "none" (default), "basic", "bearerToken", "oauth2".
   # @section -- Authentication
-  type: "none"
+  type: none
 
   # -- The username for basic authentication.
   # @section -- Authentication - Basic
   username: ""
   # -- The key for storing the username in the secret.
   # @section -- Authentication - Basic
-  usernameKey: "username"
+  usernameKey: username
   # -- Raw config for accessing the username.
   # @section -- Authentication - Basic
   usernameFrom: ""
@@ -72,7 +71,7 @@ auth:
   password: ""
   # -- The key for storing the password in the secret.
   # @section -- Authentication - Basic
-  passwordKey: "password"
+  passwordKey: password
   # -- Raw config for accessing the password.
   # @section -- Authentication - Basic
   passwordFrom: ""
@@ -82,11 +81,57 @@ auth:
   bearerToken: ""
   # -- The key for storing the bearer token in the secret.
   # @section -- Authentication - Bearer Token
-  bearerTokenKey: "bearerToken"
+  bearerTokenKey: bearerToken
   # -- Raw config for accessing the bearer token.
   # @section -- Authentication - Bearer Token
   bearerTokenFrom: ""
 
+  # Authenticate to Prometheus using OAuth2
+  # @section -- Authentication - OAuth2
+  oauth2:
+    # -- OAuth2 client ID
+    # @section -- Authentication - OAuth2
+    clientId: ""
+    # -- The key for the client ID property in the secret
+    # @section -- Authentication - OAuth2
+    clientIdKey: clientId
+    # -- Raw config for accessing the client ID
+    # @section -- Authentication - OAuth2
+    clientIdFrom: ""
+    # -- Prometheus OAuth2 client secret
+    # @section -- Authentication - OAuth2
+    clientSecret: ""
+    # -- The key for the client secret property in the secret
+    # @section -- Authentication - OAuth2
+    clientSecretKey: clientSecret
+    # -- Raw config for accessing the client secret
+    # @section -- Authentication - OAuth2
+    clientSecretFrom: ""
+    # -- File containing the OAuth2 client secret.
+    # @section -- Authentication - OAuth2
+    clientSecretFile: ""
+    # -- Prometheus OAuth2 endpoint parameters
+    # @section -- Authentication - OAuth2
+    endpointParams: {}
+    # -- HTTP proxy to send requests through.
+    # @section -- Authentication - OAuth2
+    proxyURL: ""
+    # -- Comma-separated list of IP addresses, CIDR notations, and domain names to exclude from proxying.
+    # @section -- Authentication - OAuth2
+    noProxy: ""
+    # -- Use the proxy URL indicated by environment variables.
+    # @section -- Authentication - OAuth2
+    proxyFromEnvironment: false
+    # -- Specifies headers to send to proxies during CONNECT requests.
+    # @section -- Authentication - OAuth2
+    proxyConnectHeader: {}
+    # -- List of scopes to authenticate with.
+    # @section -- Authentication - OAuth2
+    scopes: []
+    # -- URL to fetch the token from.
+    # @section -- Authentication - OAuth2
+    tokenURL: ""
+
 secret:
   # -- (bool) Whether to create a secret for this Prometheus destination.
   # @default -- `true`
@@ -148,3 +193,54 @@ readBufferSize: ""
 # -- Size of the write buffer the gRPC client to use for writing requests.
 # @section -- General
 writeBufferSize: ""
+
+# -- Processors to apply to the data before sending it.
+processors:
+  batch:
+    # -- Whether to use a batch processor.
+    # @section -- Batch Processor
+    enabled: true
+    # -- Amount of data to buffer before flushing the batch.
+    # @section -- Batch Processor
+    size: 8192
+    # -- Upper limit of a batch size. When set to 0, there is no upper limit.
+    # @section -- Batch Processor
+    maxSize: 0
+    # -- How long to wait before flushing the batch.
+    # @section -- Batch Processor
+    timeout: 2s
+  memoryLimiter:
+    # -- Whether to use a memory limiter.
+    # @section -- Memory Limiter
+    enabled: true
+    # -- How often to check memory usage.
+    # @section -- Memory Limiter
+    checkInterval: 1s
+    # -- Maximum amount of memory targeted to be allocated by the process heap.
+    # @section -- Memory Limiter
+    limit: 0MiB
+  transform:
+    # -- Whether to use a transform processor.
+    # @section -- Transform Processor
+    enabled: false
+
+    # -- Metric transforms
+    # @section -- Transform Processor
+    metrics:
+      resource: []
+      metric: []
+      datapoint: []
+
+    # -- Log transforms
+    # @section -- Transform Processor
+    log:
+      resource: []
+      log: []
+      labels: []
+
+    # -- Trace transforms
+    # @section -- Transform Processor
+    traces:
+      resource: []
+      span: []
+      spanevent: []

charts/k8s-monitoring/charts/k8s-monitoring-feature-auto-instrumentation-1.0.0.tgz

@@ -20,7 +20,7 @@ proxyURL: ""
 tenantId: ""
 # -- The key for storing the tenant ID in the secret.
 # @section -- General
-tenantIdKey: "tenantId"
+tenantIdKey: tenantId
 # -- Raw config for accessing the tenant ID.
 # @section -- General
 tenantIdFrom: ""
@@ -54,17 +54,16 @@ metricProcessingRules: ""
 
 auth:
   # -- The type of authentication to do.
-  # Options are "none" (default), "basic", "bearerToken", "sigv4".
-  # @default -- none
+  # Options are "none" (default), "basic", "bearerToken", "oauth2", "sigv4".
   # @section -- Authentication
-  type: "none"
+  type: none
 
   # -- The username for basic authentication.
   # @section -- Authentication - Basic
   username: ""
   # -- The key for storing the username in the secret.
   # @section -- Authentication - Basic
-  usernameKey: "username"
+  usernameKey: username
   # -- Raw config for accessing the username.
   # @section -- Authentication - Basic
   usernameFrom: ""
@@ -74,7 +73,7 @@ auth:
   password: ""
   # -- The key for storing the password in the secret.
   # @section -- Authentication - Basic
-  passwordKey: "password"
+  passwordKey: password
   # -- Raw config for accessing the password.
   # @section -- Authentication - Basic
   passwordFrom: ""
@@ -84,19 +83,65 @@ auth:
   bearerToken: ""
   # -- The key for storing the bearer token in the secret.
   # @section -- Authentication - Bearer Token
-  bearerTokenKey: "bearerToken"
+  bearerTokenKey: bearerToken
   # -- Raw config for accessing the bearer token.
   # @section -- Authentication - Bearer Token
   bearerTokenFrom: ""
 
+  # Authenticate to Prometheus using OAuth2
+  # @section -- Authentication - OAuth2
+  oauth2:
+    # -- OAuth2 client ID
+    # @section -- Authentication - OAuth2
+    clientId: ""
+    # -- The key for the client ID property in the secret
+    # @section -- Authentication - OAuth2
+    clientIdKey: clientId
+    # -- Raw config for accessing the client ID
+    # @section -- Authentication - OAuth2
+    clientIdFrom: ""
+    # -- Prometheus OAuth2 client secret
+    # @section -- Authentication - OAuth2
+    clientSecret: ""
+    # -- The key for the client secret property in the secret
+    # @section -- Authentication - OAuth2
+    clientSecretKey: clientSecret
+    # -- Raw config for accessing the client secret
+    # @section -- Authentication - OAuth2
+    clientSecretFrom: ""
+    # -- File containing the OAuth2 client secret.
+    # @section -- Authentication - OAuth2
+    clientSecretFile: ""
+    # -- Prometheus OAuth2 endpoint parameters
+    # @section -- Authentication - OAuth2
+    endpointParams: {}
+    # -- HTTP proxy to send requests through.
+    # @section -- Authentication - OAuth2
+    proxyURL: ""
+    # -- Comma-separated list of IP addresses, CIDR notations, and domain names to exclude from proxying.
+    # @section -- Authentication - OAuth2
+    noProxy: ""
+    # -- Use the proxy URL indicated by environment variables.
+    # @section -- Authentication - OAuth2
+    proxyFromEnvironment: false
+    # -- Specifies headers to send to proxies during CONNECT requests.
+    # @section -- Authentication - OAuth2
+    proxyConnectHeader: {}
+    # -- List of scopes to authenticate with.
+    # @section -- Authentication - OAuth2
+    scopes: []
+    # -- URL to fetch the token from.
+    # @section -- Authentication - OAuth2
+    tokenURL: ""
+
   # Authentication using AWS Signature Version 4
   sigv4:
     # -- The access key for sigv4 authentication.
     # @section -- Authentication - SigV4
     accessKey: ""
     # -- The key for storing the access key in the secret.
     # @section -- Authentication - SigV4
-    accessKeyKey: "accessKey"
+    accessKeyKey: accessKey
     # -- Raw config for accessing the access key.
     # @section -- Authentication - SigV4
     accessKeyFrom: ""
@@ -106,7 +151,7 @@ auth:
     secretKey: ""
     # -- The key for storing the secret key in the secret.
     # @section -- Authentication - Sig
-    secretKeyKey: "secretKey"
+    secretKeyKey: secretKey
     # -- Raw config for accessing the secret key.
     # @section -- Authentication - SigV4
     secretKeyFrom: ""