Add platform infrastructure configuration

2026-08-28 17:35:41 +09:00
parent fa76531e5b
commit 16c337bcc9
302 changed files with 83259 additions and 1 deletions
@@ -0,0 +1,12 @@
+# Alloy
+
+Grafana Alloy runs as a single-node DaemonSet in `observability-agent`.
+It tails only `/var/log/pods`, writes logs to the in-cluster Loki service, and
+accepts OTLP/gRPC traces on port `4317` for the in-cluster Tempo service.
+
+The deployment deliberately disables host namespaces, automatic service
+account token mounts, CRD creation, the config reloader, public exposure, and
+persistent OpenTelemetry queues. The 2 GiB PVC stores only Alloy file
+positions and local state. Alloy keeps primary UID/GID `473:473`; supplemental
+group `0` permits read-only traversal of k3s' `root:root 0750` Pod log tree
+without changing host permissions or running the container as root.