openobserve inimal setup running now with it's own namespace and volumes

infra/vultr-kubernetes/backend.tf

@@ -27,11 +27,14 @@ terraform {
       source  = "hashicorp/helm"
       version = "3.0.2"
     }
-
     tls = {
       source  = "hashicorp/tls"
       version = "4.1.0"
     }
+    random = {
+      source = "hashicorp/random"
+      version = "3.7.2"
+    }
   }
 }
 

infra/vultr-kubernetes/namespaces.tf

@@ -7,11 +7,11 @@ resource kubernetes_namespace playground {
     }
 }
 
-resource kubernetes_namespace dev {
+resource kubernetes_namespace openobserve {
     metadata {
         annotations = {
-            names = "dev"
+            names = "openobserve"
         }
-    name = "dev"
+    name = "openobserve"
     }
 }

infra/vultr-kubernetes/open-observe.tf

@@ -0,0 +1,105 @@
+resource random_password root_password {
+    length = 24
+    special = true
+}
+
+output openobserve_root_password {
+    value = random_password.root_password.result
+    sensitive = true
+
+}
+
+resource kubernetes_stateful_set openobserve {
+    metadata {
+      name = "openobserve"
+      namespace = "openobserve"
+      labels = {
+        "name" = "openobserve"
+      }
+    }
+    spec {
+      service_name = "openobserve"
+      replicas = 1
+      selector {
+        match_labels = {
+          "name" = "openobserve"
+          "app"  = "openobserve"
+        }
+      }
+      template {
+        metadata {
+          labels = {
+            "name" = "openobserve"
+            "app"  = "openobserve"
+          }
+        }
+        spec {
+          security_context {
+            fs_group = 2000
+            run_as_user = 10000
+            run_as_group = 3000
+            run_as_non_root = true
+          }
+          container {
+            name = "openobserve"
+            image = "o2cr.ai/openobserve/openobserve-enterprise:v0.15.3"
+            env {
+              name  = "ZO_ROOT_USER_EMAIL"
+              value = "dev@shockrah.xyz"
+            }
+            env {
+                name = "ZO_ROOT_USER_PASSWORD"
+                value = random_password.root_password.result
+            }
+            env {
+                name = "ZO_DATA_DIR"
+                value = "/data"
+            }
+            image_pull_policy = "Always"
+            resources {
+              limits = {
+                "cpu"    = "1000m"
+                "memory" = "2048Mi"
+              }
+              requests = {
+                "cpu" = "256m"
+                "memory" = "50Mi"
+              }
+            }
+            port {
+              container_port = 5080
+              name = "http"
+            }
+            volume_mount {
+              name = "openobserve-data"
+              mount_path = "/data"
+            }
+          }
+          volume {
+            name = "openobserve-data"
+            persistent_volume_claim {
+              claim_name = kubernetes_persistent_volume_claim_v1.openobserve.metadata[0].name
+            }
+          }
+        }
+      }
+    }
+}
+
+resource kubernetes_service openobserve {
+  metadata {
+    name      = "openobserve"
+    namespace = "openobserve"
+  }
+  spec {
+    selector = {
+      "app" = "openserve"
+    }
+    port {
+      name = "http"
+      port = 5080
+      target_port = 5080
+    }
+  }
+}
+

infra/vultr-kubernetes/variables.tfvars

@@ -5,7 +5,7 @@ cluster = {
   pools = {
     main = {
       node_quantity = 1
-      plan          =  "vc2-1c-2gb"
+      plan          =  "vc2-2c-4gb"
       label         = "main"
       min_nodes     = 1
       max_nodes     = 2

infra/vultr-kubernetes/volumes.tf

@@ -29,4 +29,20 @@ resource kubernetes_persistent_volume_claim_v1 gitea {
         }
       }
     }
-}
+}
+
+resource kubernetes_persistent_volume_claim_v1 openobserve {
+    metadata {
+      name = "openobserve-data"
+      namespace = "openobserve"
+    }
+    spec {
+      volume_mode = "Filesystem"
+      access_modes = [ "ReadWriteOnce"]
+      resources {
+        requests = {
+          storage = "10Gi"
+        }
+      }
+    }
+}