alloy helm release - kubesearch

alloy helm

No introduction found. Create it?

Install

Install with:

helm repo add alloy oci://ghcr.io/home-operations/charts-mirror/alloy
helm install alloy alloy/alloy -f values.yaml

Examples

See examples from other people.

Major version:

Filter repos who also have:

Top Repositories (1 out of 19)

Name	Repo	Stars	Version	Timestamp
alloy	szinn/k8s-homelab	307	1.11.0	2 months ago

Name

Repo

Stars

Version

Timestamp

alloy

szinn/k8s-homelab

307

1.11.0

2 months ago

Values

See the most popular values for this chart:

Key	Types
serviceMonitor.enabled (16) `true`	boolean
alloy.configMap.create (14) `false`	boolean
alloy.configMap.key (12) `config.alloy`	string
alloy.configMap.name (12) `alloy-configmap`	string
alloy.configMap.content (6) // --------------------------------------------------------------------- // Loki write endpoint (same target promtail used) // --------------------------------------------------------------------- loki.write "default" { endpoint { url = "http://loki-gateway:80/loki/api/v1/push" } } // --------------------------------------------------------------------- // Kubernetes pod logs (replaces promtail chart's implicit default job) // Reproduces promtail's default relabeling so the `app`, `namespace`, // `pod`, `container`, `node_name`, `instance`, `component` and `job` // labels match exactly — the loki alert rules depend on `app`. // --------------------------------------------------------------------- discovery.kubernetes "pods" { role = "pod" } discovery.relabel "pod_logs" { targets = discovery.kubernetes.pods.targets rule { source_labels = ["__meta_kubernetes_pod_controller_name"] regex = "([0-9a-z-.]+?)(-[0-9a-f]{8,10})?" target_label = "__tmp_controller_name" } rule { source_labels = ["__meta_kubernetes_pod_label_app_kubernetes_io_name", "__meta_kubernetes_pod_label_app", "__tmp_controller_name", "__meta_kubernetes_pod_name"] regex = "^;([^;]+)(;.)?quot; target_label = "app" } rule { source_labels = ["__meta_kubernetes_pod_label_app_kubernetes_io_instance", "__meta_kubernetes_pod_label_instance"] regex = "^;([^;]+)(;.)?quot; target_label = "instance" } rule { source_labels = ["__meta_kubernetes_pod_label_app_kubernetes_io_component", "__meta_kubernetes_pod_label_component"] regex = "^;([^;]+)(;.)?quot; target_label = "component" } rule { source_labels = ["__meta_kubernetes_pod_node_name"] target_label = "node_name" } rule { source_labels = ["__meta_kubernetes_namespace"] target_label = "namespace" } rule { source_labels = ["namespace", "app"] separator = "/" target_label = "job" } rule { source_labels = ["__meta_kubernetes_pod_name"] target_label = "pod" } rule { source_labels = ["__meta_kubernetes_pod_container_name"] target_label = "container" } // Standard pods: /var/log/pods/<uid>/<container>/.log rule { source_labels = ["__meta_kubernetes_pod_uid", "__meta_kubernetes_pod_container_name"] separator = "/" replacement = "/var/log/pods/$1/.log" target_label = "__path__" } // Static (control-plane) pods keyed by config hash annotation. rule { source_labels = ["__meta_kubernetes_pod_annotationpresent_kubernetes_io_config_hash", "__meta_kubernetes_pod_annotation_kubernetes_io_config_hash", "__meta_kubernetes_pod_container_name"] separator = "/" regex = "true/(.)" replacement = "/var/log/pods/$1/.log" target_label = "__path__" } } local.file_match "pod_logs" { path_targets = discovery.relabel.pod_logs.output } loki.source.file "pod_logs" { targets = local.file_match.pod_logs.targets forward_to = [loki.process.pod_logs.receiver] } loki.process "pod_logs" { stage.cri {} forward_to = [loki.write.default.receiver] } // --------------------------------------------------------------------- // systemd journal (hostPath /var/log/journal, max_age 12h) // --------------------------------------------------------------------- loki.relabel "journal" { forward_to = [] rule { source_labels = ["__journal__systemd_unit"] target_label = "unit" } rule { source_labels = ["__journal__hostname"] target_label = "hostname" } } loki.source.journal "journal" { path = "/var/log/journal" max_age = "12h" labels = { job = "systemd-journal" } relabel_rules = loki.relabel.journal.rules forward_to = [loki.write.default.receiver] } // --------------------------------------------------------------------- // syslog TCP receiver (external devices push to ${SVC_SYSLOG_ADDR}:1514) // --------------------------------------------------------------------- loki.relabel "syslog" { forward_to = [] rule { source_labels = ["__syslog_message_hostname"] target_label = "host" } rule { source_labels = ["__syslog_message_app_name"] target_label = "app" } } loki.source.syslog "syslog" { listener { address = "0.0.0.0:1514" protocol = "tcp" label_structured_data = true labels = { job = "syslog" } } relabel_rules = loki.relabel.syslog.rules forward_to = [loki.write.default.receiver] }	string
alloy.extraPorts[].name (5) `tcp-syslog`	string
alloy.extraPorts[].port (5) `1514`	number
alloy.extraPorts[].protocol (5) `TCP`	string
alloy.extraPorts[].targetPort (5) `1514`	number
alloy.mounts.extra[].mountPath (4) `/etc/alloy/geoip`	string
alloy.mounts.extra[].name (4) `geoip`	string
alloy.mounts.extra[].readOnly (2) `true`	boolean
alloy.mounts.varlog (4) `true`	boolean
alloy.mounts.dockercontainers (1) `false`	boolean
alloy.resources.limits.memory (4) `512Mi`	string
alloy.resources.limits.cpu (2) `500m`	string
alloy.resources.requests.cpu (4) `25m`	string
alloy.resources.requests.memory (4) `128Mi`	string
alloy.clustering.enabled (2) `false`	boolean
alloy.securityContext.runAsGroup (2) `0`	number
alloy.securityContext.runAsUser (2) `0`	number
alloy.securityContext.allowPrivilegeEscalation (1) `false`	boolean
alloy.securityContext.capabilities.add[] (1) `- SYSLOG`	string
alloy.securityContext.capabilities.drop[] (1) `- ALL`	string
alloy.enableReporting (1) `false`	boolean
alloy.extraEnv[].name (1) `NODE_NAME`	string
alloy.extraEnv[].valueFrom.fieldRef.fieldPath (1) `spec.nodeName`	string
alloy.timeoutSeconds (1) `1`	number
fullnameOverride (13) `alloy`	string
controller.podAnnotations."configmap.reloader.stakater.com/reload" (10) `alloy-configmap`	string
controller.type (5) `daemonset`	string
controller.volumes.extra[].hostPath.path (4) `/var/lib/alloy/geoip`	string
controller.volumes.extra[].hostPath.type (2) `DirectoryOrCreate`	string
controller.volumes.extra[].name (4) `geoip`	string
controller.tolerations[].effect (3) `NoSchedule`	string
controller.tolerations[].operator (3) `Exists Equal`	string
controller.tolerations[].key (2) `node-role.kubernetes.io/master arm`	string
controller.tolerations[].value (2) `true`	string
controller.initContainers[].args[] (2) `- if [ -f /etc/alloy/geoip/GeoLite2-City.mmdb ]; then echo "GeoIP database already exists, skipping download" exit 0 fi exec /usr/bin/geoipupdate`	string
controller.initContainers[].command[] (2) `- /bin/sh - -c`	string
controller.initContainers[].env[].name (2) `GEOIPUPDATE_ACCOUNT_ID GEOIPUPDATE_LICENSE_KEY GEOIPUPDATE_EDITION_IDS GEOIPUPDATE_DB_DIR`	string
controller.initContainers[].env[].value (2) `GeoLite2-City GeoLite2-ASN /etc/alloy/geoip`	string
controller.initContainers[].env[].valueFrom.secretKeyRef.key (2) `GEOIPUPDATE_ACCOUNT_ID GEOIPUPDATE_LICENSE_KEY`	string
controller.initContainers[].env[].valueFrom.secretKeyRef.name (2) `alloy-maxmind-secret alloy-maxmind-secret`	string
controller.initContainers[].image (2) `ghcr.io/maxmind/geoipupdate:v7`	string
controller.initContainers[].name (2) `geoip-download`	string
controller.initContainers[].volumeMounts[].mountPath (2) `/etc/alloy/geoip`	string
controller.initContainers[].volumeMounts[].name (2) `geoip`	string
crds.create (3) `false`	boolean
service.enabled (2) `true`	boolean
annotations."reloader.stakater.com/auto" (1) `true`	string
configReloader.securityContext.allowPrivilegeEscalation (1) `false`	boolean
configReloader.securityContext.capabilities.drop[] (1) `- ALL`	string
extraObjects[].apiVersion (1) `v1`	string
extraObjects[].kind (1) `Service`	string
extraObjects[].metadata.annotations."lbipam.cilium.io/ips" (1) `${ALLOY_SYSLOG}`	string
extraObjects[].metadata.name (1) `alloy-syslog`	string
extraObjects[].metadata.namespace (1) `monitoring`	string
extraObjects[].spec.externalTrafficPolicy (1) `Local`	string
extraObjects[].spec.ports[].name (1) `syslog-tcp syslog-udp`	string
extraObjects[].spec.ports[].port (1) `1514 1514`	number
extraObjects[].spec.ports[].protocol (1) `TCP UDP`	string
extraObjects[].spec.ports[].targetPort (1) `1514 1514`	number
extraObjects[].spec.selector."app.kubernetes.io/name" (1) `alloy`	string
extraObjects[].spec.type (1) `LoadBalancer`	string
global.podSecurityContext.runAsGroup (1) `473`	number
global.podSecurityContext.runAsNonRoot (1) `true`	boolean
global.podSecurityContext.runAsUser (1) `473`	number
global.podSecurityContext.seccompProfile.type (1) `RuntimeDefault`	string

Key

Types

serviceMonitor.enabled (16)

true

boolean

alloy.configMap.create (14)

false

boolean

alloy.configMap.key (12)

config.alloy

string

alloy.configMap.name (12)

alloy-configmap

string

alloy.configMap.content (6)

// ---------------------------------------------------------------------
// Loki write endpoint (same target promtail used)
// ---------------------------------------------------------------------
loki.write "default" {
  endpoint {
    url = "http://loki-gateway:80/loki/api/v1/push"
  }
}

// ---------------------------------------------------------------------
// Kubernetes pod logs (replaces promtail chart's implicit default job)
// Reproduces promtail's default relabeling so the `app`, `namespace`,
// `pod`, `container`, `node_name`, `instance`, `component` and `job`
// labels match exactly — the loki alert rules depend on `app`.
// ---------------------------------------------------------------------
discovery.kubernetes "pods" {
  role = "pod"
}

discovery.relabel "pod_logs" {
  targets = discovery.kubernetes.pods.targets

  rule {
    source_labels = ["__meta_kubernetes_pod_controller_name"]
    regex         = "([0-9a-z-.]+?)(-[0-9a-f]{8,10})?"
    target_label  = "__tmp_controller_name"
  }
  rule {
    source_labels = ["__meta_kubernetes_pod_label_app_kubernetes_io_name", "__meta_kubernetes_pod_label_app", "__tmp_controller_name", "__meta_kubernetes_pod_name"]
    regex         = "^;*([^;]+)(;.*)?quot;
    target_label  = "app"
  }
  rule {
    source_labels = ["__meta_kubernetes_pod_label_app_kubernetes_io_instance", "__meta_kubernetes_pod_label_instance"]
    regex         = "^;*([^;]+)(;.*)?quot;
    target_label  = "instance"
  }
  rule {
    source_labels = ["__meta_kubernetes_pod_label_app_kubernetes_io_component", "__meta_kubernetes_pod_label_component"]
    regex         = "^;*([^;]+)(;.*)?quot;
    target_label  = "component"
  }
  rule {
    source_labels = ["__meta_kubernetes_pod_node_name"]
    target_label  = "node_name"
  }
  rule {
    source_labels = ["__meta_kubernetes_namespace"]
    target_label  = "namespace"
  }
  rule {
    source_labels = ["namespace", "app"]
    separator     = "/"
    target_label  = "job"
  }
  rule {
    source_labels = ["__meta_kubernetes_pod_name"]
    target_label  = "pod"
  }
  rule {
    source_labels = ["__meta_kubernetes_pod_container_name"]
    target_label  = "container"
  }
  // Standard pods: /var/log/pods/<uid>/<container>/*.log
  rule {
    source_labels = ["__meta_kubernetes_pod_uid", "__meta_kubernetes_pod_container_name"]
    separator     = "/"
    replacement   = "/var/log/pods/*$1/*.log"
    target_label  = "__path__"
  }
  // Static (control-plane) pods keyed by config hash annotation.
  rule {
    source_labels = ["__meta_kubernetes_pod_annotationpresent_kubernetes_io_config_hash", "__meta_kubernetes_pod_annotation_kubernetes_io_config_hash", "__meta_kubernetes_pod_container_name"]
    separator     = "/"
    regex         = "true/(.*)"
    replacement   = "/var/log/pods/*$1/*.log"
    target_label  = "__path__"
  }
}

local.file_match "pod_logs" {
  path_targets = discovery.relabel.pod_logs.output
}

loki.source.file "pod_logs" {
  targets    = local.file_match.pod_logs.targets
  forward_to = [loki.process.pod_logs.receiver]
}

loki.process "pod_logs" {
  stage.cri {}
  forward_to = [loki.write.default.receiver]
}

// ---------------------------------------------------------------------
// systemd journal (hostPath /var/log/journal, max_age 12h)
// ---------------------------------------------------------------------
loki.relabel "journal" {
  forward_to = []
  rule {
    source_labels = ["__journal__systemd_unit"]
    target_label  = "unit"
  }
  rule {
    source_labels = ["__journal__hostname"]
    target_label  = "hostname"
  }
}

loki.source.journal "journal" {
  path          = "/var/log/journal"
  max_age       = "12h"
  labels        = { job = "systemd-journal" }
  relabel_rules = loki.relabel.journal.rules
  forward_to    = [loki.write.default.receiver]
}

// ---------------------------------------------------------------------
// syslog TCP receiver (external devices push to ${SVC_SYSLOG_ADDR}:1514)
// ---------------------------------------------------------------------
loki.relabel "syslog" {
  forward_to = []
  rule {
    source_labels = ["__syslog_message_hostname"]
    target_label  = "host"
  }
  rule {
    source_labels = ["__syslog_message_app_name"]
    target_label  = "app"
  }
}

loki.source.syslog "syslog" {
  listener {
    address               = "0.0.0.0:1514"
    protocol              = "tcp"
    label_structured_data = true
    labels                = { job = "syslog" }
  }
  relabel_rules = loki.relabel.syslog.rules
  forward_to    = [loki.write.default.receiver]
}

string

alloy.extraPorts[].name (5)

tcp-syslog

string

alloy.extraPorts[].port (5)

number

alloy.extraPorts[].protocol (5)

TCP

string

alloy.extraPorts[].targetPort (5)

number

alloy.mounts.extra[].mountPath (4)

/etc/alloy/geoip

string

alloy.mounts.extra[].name (4)

geoip

string

alloy.mounts.extra[].readOnly (2)

true

boolean

alloy.mounts.varlog (4)

true

boolean

alloy.mounts.dockercontainers (1)

false

boolean

alloy.resources.limits.memory (4)

512Mi

string

alloy.resources.limits.cpu (2)

500m

string

alloy.resources.requests.cpu (4)

25m

string

alloy.resources.requests.memory (4)

128Mi

string

alloy.clustering.enabled (2)

false

boolean

alloy.securityContext.runAsGroup (2)

number

alloy.securityContext.runAsUser (2)

number

alloy.securityContext.allowPrivilegeEscalation (1)

false

boolean

alloy.securityContext.capabilities.add[] (1)

- SYSLOG

string

alloy.securityContext.capabilities.drop[] (1)

- ALL

string

alloy.enableReporting (1)

false

boolean

alloy.extraEnv[].name (1)

NODE_NAME

string

alloy.extraEnv[].valueFrom.fieldRef.fieldPath (1)

spec.nodeName

string

alloy.timeoutSeconds (1)

number

fullnameOverride (13)

alloy

string

controller.podAnnotations."configmap.reloader.stakater.com/reload" (10)

alloy-configmap

string

controller.type (5)

daemonset

string

controller.volumes.extra[].hostPath.path (4)

/var/lib/alloy/geoip

string

controller.volumes.extra[].hostPath.type (2)

DirectoryOrCreate

string

controller.volumes.extra[].name (4)

geoip

string

controller.tolerations[].effect (3)

NoSchedule

string

controller.tolerations[].operator (3)

Exists
Equal

string

controller.tolerations[].key (2)

node-role.kubernetes.io/master
arm

string

controller.tolerations[].value (2)

true

string

controller.initContainers[].args[] (2)

- if [ -f /etc/alloy/geoip/GeoLite2-City.mmdb ]; then
  echo "GeoIP database already exists, skipping download"
  exit 0
fi
exec /usr/bin/geoipupdate

string

controller.initContainers[].command[] (2)

- /bin/sh
- -c

string

controller.initContainers[].env[].name (2)

GEOIPUPDATE_ACCOUNT_ID
GEOIPUPDATE_LICENSE_KEY
GEOIPUPDATE_EDITION_IDS
GEOIPUPDATE_DB_DIR

string

controller.initContainers[].env[].value (2)

GeoLite2-City GeoLite2-ASN
/etc/alloy/geoip

string

controller.initContainers[].env[].valueFrom.secretKeyRef.key (2)

GEOIPUPDATE_ACCOUNT_ID
GEOIPUPDATE_LICENSE_KEY

string

controller.initContainers[].env[].valueFrom.secretKeyRef.name (2)

alloy-maxmind-secret
alloy-maxmind-secret

string

controller.initContainers[].image (2)

ghcr.io/maxmind/geoipupdate:v7

string

controller.initContainers[].name (2)

geoip-download

string

controller.initContainers[].volumeMounts[].mountPath (2)

/etc/alloy/geoip

string

controller.initContainers[].volumeMounts[].name (2)

geoip

string

crds.create (3)

false

boolean

service.enabled (2)

true

boolean

annotations."reloader.stakater.com/auto" (1)

true

string

configReloader.securityContext.allowPrivilegeEscalation (1)

false

boolean

configReloader.securityContext.capabilities.drop[] (1)

- ALL

string

extraObjects[].apiVersion (1)

v1

string

extraObjects[].kind (1)

Service

string

extraObjects[].metadata.annotations."lbipam.cilium.io/ips" (1)

${ALLOY_SYSLOG}

string

extraObjects[].metadata.name (1)

alloy-syslog

string

extraObjects[].metadata.namespace (1)

monitoring

string

extraObjects[].spec.externalTrafficPolicy (1)

Local

string

extraObjects[].spec.ports[].name (1)

syslog-tcp
syslog-udp

string

extraObjects[].spec.ports[].port (1)

1514
1514

number

extraObjects[].spec.ports[].protocol (1)

TCP
UDP

string

extraObjects[].spec.ports[].targetPort (1)

1514
1514

number

extraObjects[].spec.selector."app.kubernetes.io/name" (1)

alloy

string

extraObjects[].spec.type (1)

LoadBalancer

string

global.podSecurityContext.runAsGroup (1)

number

global.podSecurityContext.runAsNonRoot (1)

true

boolean

global.podSecurityContext.runAsUser (1)

number

global.podSecurityContext.seccompProfile.type (1)

RuntimeDefault

string