add creds

child/conf/netdata.conf

@@ -6,7 +6,3 @@
   enabled = no
 [ml]
   enabled = no
-[plugins]
-  otel = yes
-[plugin:otel]
-  command options = --otel-endpoint 0.0.0.0:4317 --otel-logs-journal-dir /var/log/netdata/otel/v1

child/daemonset.yaml

@@ -104,9 +104,6 @@ spec:
             - name: configmap
               mountPath: /etc/netdata/go.d/web_log.conf
               subPath: web_log
-            - name: configmap
-              mountPath: /etc/netdata/otel.yaml
-              subPath: otel
             - name: configmap
               mountPath: /etc/netdata/netdata.conf
               subPath: netdata

kustomization.yaml

@@ -28,7 +28,6 @@ configMapGenerator:
       - web_log=child/conf/web_log.yaml
       - netdata=child/conf/netdata.conf
       - stream=child/conf/stream.conf
-      - otel=child/conf/otel.yaml
 
   - name: netdata-child-sd-config-map
     files:
@@ -49,3 +48,4 @@ configMapGenerator:
       - health=parent/conf/health.conf
       - netdata=parent/conf/netdata.conf
       - stream=parent/conf/stream.conf
+      - otel=parent/conf/otel.yaml

parent/conf/netdata.conf

@@ -16,3 +16,4 @@
   proc = no
   idlejitter = no
   diskspace = no
+  otel = yes

parent/conf/otel.yaml

@@ -0,0 +1,26 @@
+# OpenTelemetry Plugin Configuration (otel.plugin)
+# Documented config surface only — see:
+# https://learn.netdata.cloud/docs/collecting-metrics/opentelemetry/opentelemetry-metrics
+#
+# Any field can also be overridden via NETDATA_OTEL_<FIELD> env vars
+# (dots -> underscores, e.g. endpoint.tls_cert_path -> NETDATA_OTEL_ENDPOINT_TLS_CERT_PATH).
+#
+# NOTE: fields like logs.rotation/retention, remote_storage, and auth appeared in an
+# earlier version of this config but are NOT present in the current documented schema.
+# Left out here rather than guessed — reintroduce only once confirmed against the
+# running agent version (e.g. via `otel.plugin --help` in the container, or Ask Nedi).
+
+endpoint:
+  # 0.0.0.0 so traffic arriving via the ClusterIP Service actually reaches the process
+  # (127.0.0.1 would only accept connections from inside the same network namespace).
+  path: "0.0.0.0:4317"
+  tls_cert_path: null
+  tls_key_path: null
+  tls_ca_cert_path: null
+
+metrics:
+  chart_configs_dir: /etc/netdata/otel.d/v1/metrics
+  interval_secs: 10
+  grace_period_secs: 60
+  expiry_duration_secs: 900
+  max_new_charts_per_request: 100

parent/deployment.yaml

@@ -47,6 +47,9 @@ spec:
             - name: http
               containerPort: 19999
               protocol: TCP
+            - name: otel-grpc
+              containerPort: 4317
+              protocol: TCP
           livenessProbe:
             exec:
               command: ["/usr/sbin/netdatacli", "ping"]
@@ -78,6 +81,9 @@ spec:
             - name: configmap
               mountPath: /etc/netdata/stream.conf
               subPath: stream
+            - name: configmap
+              mountPath: /etc/netdata/otel.yaml
+              subPath: otel
             - name: database
               mountPath: /var/cache/netdata
             - name: alarms

parent/service.yaml

@@ -12,6 +12,10 @@ spec:
       targetPort: http
       protocol: TCP
       name: http
+    - port: 4317
+      targetPort: otel-grpc
+      protocol: TCP
+      name: otel-grpc
   selector:
     app: netdata
     role: parent