feat: add perses as optional dashboarding component

README.md

@@ -205,6 +205,7 @@ spec:
     namespace: open-telemetry-operator-system
   openTelemetryCollector:
     namespace: open-telemetry-collector-system
+    clusterName: platform
   prometheusOperator:
     namespace: prometheus-operator-system
   prometheus:
@@ -406,7 +407,95 @@ kubectl get prometheus.monitoring.coreos.com prometheus -n prometheus-system -o
 
 The Prometheus dashboard also shows the connected Alertmanager count under **Status → Runtime & Build Info**.
 
-#### 9. Log Collection and Cross-Cluster Ingestion
+#### 9. Perses Dashboards
+
+[Perses](https://perses.dev) is an optional dashboarding component that provides a Kubernetes-native dashboard UI on top of Prometheus and Victoria Logs. It is disabled by default.
+
+**Enable Perses:**
+
+```bash
+kubectl patch observabilitystack stack -n obs-stack \
+  --type=merge -p '{"spec":{"perses":{"enabled":true}}}'
+```
+
+Or add `perses.enabled: true` to your `ObservabilityStack` spec:
+
+```yaml
+spec:
+  # ... other fields ...
+  perses:
+    enabled: true
+```
+
+Wait for the stack to become ready:
+
+```bash
+kubectl wait observabilitystack stack -n obs-stack \
+  --for=jsonpath='{.status.ready}'=true \
+  --timeout=300s
+```
+
+**Access the UI:**
+
+Perses is exposed through the Observability Gateway. Get the hostname:
+
+```bash
+kubectl get httproute perses -n perses-system -o jsonpath='{.spec.hostnames[0]}'
+```
+
+The URL follows the pattern:
+
+```
+https://dashboards.<gateway-namespace>.<base-domain>:<port>
+```
+
+For local development via port-forward:
+
+```bash
+kubectl port-forward -n perses-system svc/perses 8080:8080
+```
+
+Then open: `http://localhost:8080`
+
+**Pre-provisioned resources:**
+
+The following are provisioned automatically at startup:
+
+| Resource | Name | Details |
+| --- | --- | --- |
+| `GlobalDatasource` | `prometheus` | Default datasource, proxied to `prometheus-operated.prometheus-system.svc:9090` |
+| `GlobalDatasource` | `victoria-logs` | Proxied to `victoria-logs.victoria-logs-system.svc:9428` |
+
+**Configuration options** (all have defaults, only override what you need):
+
+```yaml
+spec:
+  forProvider:
+    namespace: perses-system           # target namespace
+    prometheusRef:
+      namespace: prometheus-system
+      serviceName: prometheus-operated
+      port: 9090
+    victoriaLogsRef:
+      namespace: victoria-logs-system
+      serviceName: victoria-logs
+      port: 9428
+    resources:
+      requests:
+        memory: "128Mi"
+        cpu: "50m"
+      limits:
+        memory: "512Mi"
+        cpu: "500m"
+```
+
+An sample dashboard is included in the [`kustomizations/perses/provisioning/sample-dashboard.yaml`](kustomizations/perses/provisioning/sample-dashboard.yaml) file. You can apply it to the Perses instance:
+
+```bash
+kubectl apply -f kustomizations/perses/provisioning/sample-dashboard.yaml -n perses-system
+```
+
+#### 10. Log Collection and Cross-Cluster Ingestion
 
 Pod logs (stdout/stderr from all containers on every node) are automatically collected by an OpenTelemetry Collector DaemonSet running in `open-telemetry-collector-system`. It reads from `/var/log/pods` on each node and ships logs to Victoria Logs via OTLP HTTP.
 

component-constructor.yaml

@@ -176,3 +176,19 @@ components:
           type: ociImage
           imageReference: "docker.io/victoriametrics/victoria-logs:${VICTORIA_LOGS_IMAGE_VERSION}"
 
+      # perses
+      - name: perses-kustomization
+        version: ${OBSERVABILITY_STACK_VERSION}
+        type: kustomization
+        access:
+          type: ociArtifact
+          imageReference: "${KUSTOMIZATIONS_LOCATION_PREFIX}/perses:${OBSERVABILITY_STACK_VERSION}"
+
+      - name: perses-image
+        version: ${PERSES_IMAGE_VERSION}
+        type: ociImage
+        input:
+          type: ociImage
+          path: "docker.io/persesdev/perses:${PERSES_IMAGE_VERSION}"
+          repository: images/perses
+

component-settings.yaml

@@ -26,6 +26,9 @@ ALERTMANAGER_IMAGE_VERSION: "v0.33.1"
 # victoria logs
 VICTORIA_LOGS_IMAGE_VERSION: "v1.6.0-victorialogs"
 
+# perses
+PERSES_IMAGE_VERSION: "v0.53.1"
+
 
 # E2E Test dependencies
 # Not used for deployment

hack/build-component.py

@@ -77,7 +77,8 @@ def push_kustomizations(repo_root: Path, version: str) -> None:
         ("prometheus", "prometheus"),
         ("metrics", "metrics"),
         ("victoria-logs", "victoria-logs"),
-        ("observability-gateway", "observability-gateway")
+        ("observability-gateway", "observability-gateway"),
+        ("perses", "perses"),
     ]
 
     # Get git information

kustomizations/observability-gateway/gateway.yaml

@@ -41,6 +41,18 @@ spec:
       certificateRefs:
       - kind: Secret
         name: otlp-logs-cert
+  - name: perses
+    port: 8443
+    protocol: HTTPS
+    hostname: "<perses-dnsname>"
+    allowedRoutes:
+      namespaces:
+        from: All
+    tls:
+      mode: Terminate
+      certificateRefs:
+      - kind: Secret
+        name: perses-cert
 ---
 apiVersion: gateway.envoyproxy.io/v1alpha1
 kind: ClientTrafficPolicy
@@ -92,3 +104,20 @@ spec:
       - kind: "Secret"
         group: ""
         name: "observability-client-ca-cert"
+---
+apiVersion: gateway.envoyproxy.io/v1alpha1
+kind: ClientTrafficPolicy
+metadata:
+  name: perses-mtls
+spec:
+  targetRefs:
+  - group: gateway.networking.k8s.io
+    kind: Gateway
+    name: observability-gateway
+    sectionName: perses
+  tls:
+    clientValidation:
+      caCertificateRefs:
+      - kind: "Secret"
+        group: ""
+        name: "observability-client-ca-cert"

kustomizations/observability-gateway/kustomization.yaml

@@ -6,4 +6,5 @@ resources:
   - prometheus-certificates.yaml
   - victoria-logs-certificates.yaml
   - otlp-logs-certificates.yaml
+  - perses-certificates.yaml
   - client-certificates.yaml

kustomizations/observability-gateway/perses-certificates.yaml

@@ -0,0 +1,10 @@
+apiVersion: cert-manager.io/v1
+kind: Certificate
+metadata:
+  name: perses-gateway-cert
+spec:
+  secretName: perses-cert
+  issuerRef:
+    name: gateway-selfsigned-issuer
+    kind: Issuer
+  dnsNames: []

kustomizations/perses/configmap.yaml

@@ -0,0 +1,46 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: perses-config
+data:
+  config.yaml: |
+    database:
+      file:
+        folder: /tmp/perses
+    plugin:
+      path: /tmp/perses-plugins
+    provisioning:
+      folders:
+        - /etc/perses/provisioning
+        - /etc/perses/dashboards
+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: perses-provisioning
+data:
+  datasources.yaml: |
+    kind: GlobalDatasource
+    metadata:
+      name: prometheus
+    spec:
+      default: true
+      plugin:
+        kind: PrometheusDatasource
+        spec:
+          proxy:
+            kind: HTTPProxy
+            spec:
+              url: "http://prometheus-operated.prometheus-system.svc:9090"
+  victoria-logs-datasource.yaml: |
+    kind: GlobalDatasource
+    metadata:
+      name: victoria-logs
+    spec:
+      plugin:
+        kind: VictoriaLogsDatasource
+        spec:
+          proxy:
+            kind: HTTPProxy
+            spec:
+              url: "http://victoria-logs.victoria-logs-system.svc:9428"

kustomizations/perses/deployment.yaml

@@ -0,0 +1,50 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: perses
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app.kubernetes.io/name: perses
+  template:
+    metadata:
+      labels:
+        app.kubernetes.io/name: perses
+    spec:
+      securityContext:
+        fsGroup: 2000
+        runAsNonRoot: true
+        runAsUser: 1000
+      containers:
+        - name: perses
+          args:
+            - --config=/etc/perses/config.yaml
+          ports:
+            - containerPort: 8080
+              name: http
+          volumeMounts:
+            - name: config
+              mountPath: /etc/perses/config.yaml
+              subPath: config.yaml
+            - name: provisioning
+              mountPath: /etc/perses/provisioning
+            - name: dashboards
+              mountPath: /etc/perses/dashboards
+          resources:
+            requests:
+              memory: 128Mi
+              cpu: 50m
+            limits:
+              memory: 512Mi
+              cpu: 500m
+      volumes:
+        - name: config
+          configMap:
+            name: perses-config
+        - name: provisioning
+          configMap:
+            name: perses-provisioning
+        - name: dashboards
+          configMap:
+            name: perses-dashboards

kustomizations/perses/httproute.yaml

@@ -0,0 +1,18 @@
+apiVersion: gateway.networking.k8s.io/v1
+kind: HTTPRoute
+metadata:
+  name: perses
+spec:
+  parentRefs:
+  - name: observability-gateway
+    namespace: observability-gateway-system
+    sectionName: perses
+  hostnames: []
+  rules:
+  - matches:
+    - path:
+        type: PathPrefix
+        value: /
+    backendRefs:
+    - name: perses
+      port: 8080

kustomizations/perses/kustomization.yaml

@@ -0,0 +1,7 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - deployment.yaml
+  - service.yaml
+  - configmap.yaml
+  - httproute.yaml