OpenLIT - TrueFoundry Docs
Documentation Index
Fetch the complete documentation index at: /llms.txt
Use this file to discover all available pages before exploring further.
This guide provides instructions for deploying OpenLIT on TrueFoundry and integrating it with the TrueFoundry AI Gateway to export OpenTelemetry traces and metrics.
What is OpenLIT?
OpenLIT is an open-source, OpenTelemetry-native observability platform purpose-built for LLM applications. It provides zero-code auto-instrumentation, real-time monitoring, and cost tracking for LLM requests across all major providers.
Key Features of OpenLIT
- LLM Tracing: Capture detailed traces of all LLM interactions including inputs, outputs, latency, and token usage with zero-code instrumentation
- Cost Tracking: Track per-model, per-provider token usage and associated costs in real time
- Metrics & Dashboards: Visualize aggregated usage, latency, and error rates across your LLM gateway
Prerequisites
Before integrating OpenLIT with TrueFoundry, ensure you have:
- TrueFoundry Account: Create a TrueFoundry account and follow the instructions in our Gateway Quick Start Guide
- Helm Repository Access: The OpenLIT Helm chart is hosted at
https://openlit.github.io/helm/— make sure to use this exact URL when configuring the Helm deployment
Architecture Overview
OpenLIT on TrueFoundry is deployed as a single Helm release that bundles three components:
[TrueFoundry AI Gateway] → [OpenLIT OTel Collector :4318]
↓
[ClickHouse DB :8123/:9000]
↑
[OpenLIT Dashboard :3000]
All three components run in the same namespace and communicate over internal Kubernetes DNS.
Integration Steps
Create a ClickHouse Secret in TrueFoundry
OpenLIT uses ClickHouse as its database. Store the ClickHouse password securely using TrueFoundry Secrets before deploying.- Go to Secrets in the TrueFoundry left sidebar.
- Create a new secret group called
clickhouse. - Add a key called
CLICKHOUSE_PASSWORDwith your desired password value. - Copy the secret reference — it will look like
tfy-secret://truefoundry:clickhouse:CLICKHOUSE_PASSWORD.
Deploy OpenLIT via Helm
- Go to Deployments → New → Helm in the TrueFoundry dashboard.
- Select Public Helm Repository and fill in:
| Field | Value |
|---|---|
| Helm Repo URL | https://openlit.github.io/helm/ |
| Chart Name | openlit |
| Version | 1.19.1 |
Make sure to use the exact Helm Repo URL above. Using an incorrect URL will result in an “Unable to query charts” error.
- Paste the following in the Values block:
clickhouse:
enabled: true
persistence:
size: 20Gi
enabled: true
auth:
existingSecret: openlit-clickhouse-secret
existingSecretKey: clickhouse-password
openlit:
image:
tag: latest
repository: ghcr.io/openlit/openlit
env:
PORT: '3000'
INIT_DB_HOST: openlit-db.NAMESPACE.svc.cluster.local
INIT_DB_PORT: '8123'
INIT_DB_DATABASE: openlit
INIT_DB_USERNAME: default
envFrom:
- secretRef:
name: openlit-clickhouse-secret
opentelemetry-collector:
enabled: true
ports:
otlp:
enabled: true
containerPort: 4317
otlp-http:
enabled: true
containerPort: 4318
Replace NAMESPACE in INIT_DB_HOST with your actual TrueFoundry workspace namespace (e.g. harsh-ws). You can find this in your workspace settings.
- In the Additional Manifests section, add the following two manifests separately by clicking + Add Additional Manifests for each:
Manifest 1 — ClickHouse Secret:
apiVersion: v1
kind: Secret
type: Opaque
metadata:
name: openlit-clickhouse-secret
namespace: NAMESPACE
stringData:
clickhouse-password: tfy-secret://truefoundry:clickhouse:CLICKHOUSE_PASSWORD
Manifest 2 — VirtualService (to expose the dashboard):
apiVersion: networking.istio.io/v1beta1
kind: VirtualService
metadata:
name: openlit-dashboard-vs
namespace: NAMESPACE
spec:
gateways:
- istio-system/tfy-wildcard
hosts:
- openlit.CLUSTER_DOMAIN
http:
- route:
- destination:
host: openlit.NAMESPACE.svc.cluster.local
port:
number: 3000
weight: 100
Replace the placeholders:
NAMESPACE→ your workspace namespace (e.g.harsh-ws)CLUSTER_DOMAIN→ your cluster’s base domain (e.g.tfy-usea1-ctl.devtest.truefoundry.tech)
- Click Submit to deploy. Once all pods are running, you should see the deployment in TrueFoundry:
Deploy order within the Helm chart is automatic — ClickHouse starts first via an init container that waits for ClickHouse to be healthy before OpenLIT starts.
- Access the OpenLIT Dashboard
Once all pods are running, open the dashboard at:
https://openlit.CLUSTER_DOMAIN
Default login credentials:
| Field | Value |
|---|---|
user@openlit.io |
|
| Password | openlituser |
Change your password immediately after first login: Settings → Account → Change Password.
Configure OTEL Export in TrueFoundry
Now point the TrueFoundry AI Gateway to ship traces and metrics to your OpenLIT instance.- Go to AI Gateway → Controls → Settings in the TrueFoundry dashboard.
Scroll down to the OTEL Config section and click the edit (✏️) button.
Otel Traces Exporter Configuration:
| Field | Value |
|---|---|
| Toggle | Enabled |
| Protocol | HTTP Configuration |
| Endpoint | http://openlit.NAMESPACE.svc.cluster.local:4318/v1/traces |
| Encoding | Proto |
| Headers | None |
Otel Metrics Exporter Configuration:
| Field | Value |
|---|---|
| Toggle | Enabled |
| Protocol | HTTP Configuration |
| Endpoint | http://openlit.NAMESPACE.svc.cluster.local:4318/v1/metrics |
| Encoding | Proto |
| Headers | None |
Replace NAMESPACE with your actual workspace namespace. Click Save to apply.
Verify the Integration
- Make a request through the TrueFoundry AI Gateway.
- Navigate to the Requests tab in the OpenLIT dashboard and confirm traces are appearing.
Navigate to the Metrics tab to confirm aggregated metrics are also flowing in.
Internal Service DNS Reference
Once deployed, the following internal DNS names are available within the cluster:
| Service | Internal DNS | Port |
|---|---|---|
| OTel Collector (HTTP) | openlit.NAMESPACE.svc.cluster.local |
4318 |
| OTel Collector (gRPC) | openlit.NAMESPACE.svc.cluster.local |
4317 |
| ClickHouse (HTTP) | openlit-db.NAMESPACE.svc.cluster.local |
8123 |
| ClickHouse (Native) | openlit-db.NAMESPACE.svc.cluster.local |
9000 |
| Dashboard | openlit.NAMESPACE.svc.cluster.local |
3000 |
Use the internal DNS for OTEL Config endpoints — external URLs are only needed for browser access to the dashboard.
Configuration Reference
| Configuration | Value |
|---|---|
| Helm Repo | https://openlit.github.io/helm/ |
| Chart Name | openlit |
| Traces Endpoint | http://openlit.NAMESPACE.svc.cluster.local:4318/v1/traces |
| Metrics Endpoint | http://openlit.NAMESPACE.svc.cluster.local:4318/v1/metrics |
| Protocol | HTTP |
| Encoding | Proto |
| Auth | None required |
| Dashboard Port | 3000 |
| Default Email | user@openlit.io |
| Default Password | openlituser |