166 lines
3.8 KiB
YAML
166 lines
3.8 KiB
YAML
# --- RBAC configuration ---
|
|
apiVersion: v1
|
|
kind: ServiceAccount
|
|
metadata:
|
|
name: alloy-sa
|
|
namespace: monitoring
|
|
|
|
---
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
kind: ClusterRole
|
|
metadata:
|
|
name: alloy-cluster-role
|
|
rules:
|
|
- apiGroups: [ "" ]
|
|
resources: [ "nodes", "nodes/proxy", "services", "endpoints", "pods" ]
|
|
verbs: [ "get", "list", "watch" ]
|
|
- apiGroups: [ "" ]
|
|
resources: [ "pods/log" ]
|
|
verbs: [ "get", "list", "watch" ]
|
|
|
|
---
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
kind: ClusterRoleBinding
|
|
metadata:
|
|
name: alloy-cluster-binding
|
|
roleRef:
|
|
apiGroup: rbac.authorization.k8s.io
|
|
kind: ClusterRole
|
|
name: alloy-cluster-role
|
|
subjects:
|
|
- kind: ServiceAccount
|
|
name: alloy-sa
|
|
namespace: monitoring
|
|
|
|
---
|
|
# --- Alloy pipeline configuration ---
|
|
apiVersion: v1
|
|
kind: ConfigMap
|
|
metadata:
|
|
name: alloy-config
|
|
namespace: monitoring
|
|
data:
|
|
config.alloy: |
|
|
// 1. Discovery: Find all pods
|
|
discovery.kubernetes "k8s_pods" {
|
|
role = "pod"
|
|
}
|
|
|
|
// 2. Relabeling: Filter for ONLY the blog pods
|
|
discovery.relabel "blog_pods" {
|
|
targets = discovery.kubernetes.k8s_pods.targets
|
|
|
|
rule {
|
|
action = "keep"
|
|
source_labels = ["__meta_kubernetes_pod_label_app"]
|
|
regex = "severed-blog"
|
|
}
|
|
|
|
rule {
|
|
action = "replace"
|
|
source_labels = ["__address__"]
|
|
target_label = "__address__"
|
|
regex = "([^:]+)(?::\\d+)?"
|
|
replacement = "$1:9113"
|
|
}
|
|
}
|
|
|
|
// 3. Direct Nginx Scraper
|
|
prometheus.scrape "nginx_scraper" {
|
|
targets = discovery.relabel.blog_pods.output
|
|
|
|
forward_to = [prometheus.remote_write.metrics_service.receiver]
|
|
job_name = "integrations/nginx"
|
|
}
|
|
|
|
// 4. Host Metrics
|
|
prometheus.exporter.unix "host" {
|
|
rootfs_path = "/host/root"
|
|
sysfs_path = "/host/sys"
|
|
procfs_path = "/host/proc"
|
|
}
|
|
|
|
prometheus.scrape "host_scraper" {
|
|
targets = prometheus.exporter.unix.host.targets
|
|
forward_to = [prometheus.remote_write.metrics_service.receiver]
|
|
}
|
|
|
|
// 5. Remote Write: Send to Prometheus
|
|
prometheus.remote_write "metrics_service" {
|
|
endpoint {
|
|
url = sys.env("PROM_URL")
|
|
}
|
|
}
|
|
|
|
// 6. Logs Pipeline: Send to Loki
|
|
loki.source.kubernetes "pod_logs" {
|
|
targets = discovery.relabel.blog_pods.output
|
|
forward_to = [loki.write.default.receiver]
|
|
}
|
|
|
|
loki.write "default" {
|
|
endpoint {
|
|
url = sys.env("LOKI_URL")
|
|
}
|
|
}
|
|
---
|
|
# --- Agent Deployment (DaemonSet) ---
|
|
apiVersion: apps/v1
|
|
kind: DaemonSet
|
|
metadata:
|
|
name: alloy
|
|
namespace: monitoring
|
|
spec:
|
|
selector:
|
|
matchLabels:
|
|
name: alloy
|
|
template:
|
|
metadata:
|
|
labels:
|
|
name: alloy
|
|
spec:
|
|
serviceAccountName: alloy-sa
|
|
hostNetwork: true
|
|
hostPID: true
|
|
dnsPolicy: ClusterFirstWithHostNet
|
|
containers:
|
|
- name: alloy
|
|
image: grafana/alloy:latest
|
|
args:
|
|
- run
|
|
- --server.http.listen-addr=0.0.0.0:12345
|
|
- /etc/alloy/config.alloy
|
|
envFrom:
|
|
- configMapRef:
|
|
name: monitoring-env
|
|
optional: false
|
|
volumeMounts:
|
|
- name: config
|
|
mountPath: /etc/alloy
|
|
- name: logs
|
|
mountPath: /var/log
|
|
- name: proc
|
|
mountPath: /host/proc
|
|
readOnly: true
|
|
- name: sys
|
|
mountPath: /host/sys
|
|
readOnly: true
|
|
- name: root
|
|
mountPath: /host/root
|
|
readOnly: true
|
|
volumes:
|
|
- name: config
|
|
configMap:
|
|
name: alloy-config
|
|
- name: logs
|
|
hostPath:
|
|
path: /var/log
|
|
- name: proc
|
|
hostPath:
|
|
path: /proc
|
|
- name: sys
|
|
hostPath:
|
|
path: /sys
|
|
- name: root
|
|
hostPath:
|
|
path: / |