diff --git a/docs/reference/kubernetes/apps.md b/docs/reference/kubernetes/apps.md
index 919907e..f584d5a 100644
--- a/docs/reference/kubernetes/apps.md
+++ b/docs/reference/kubernetes/apps.md
@@ -27,7 +27,9 @@ Registry of all applications deployed via [[argocd]].
 | `grafana` | monitoring | Helm chart (forge mirror) | [[grafana]] |
 | `grafana-config` | monitoring | `argocd/manifests/grafana-config/` | [[grafana]] |
 | `immich` | immich | Helm chart | [[immich]] |
+| `tempo` | monitoring | `argocd/manifests/tempo/` | [[tempo]] |
 | `alloy-k8s` | alloy | `argocd/manifests/alloy-k8s/` | [[alloy|Alloy]] |
+| `alloy-tracing-ringtail` | alloy | `argocd/manifests/alloy-tracing-ringtail/` | [[alloy|Alloy]] (eBPF tracing) |
 | `kube-state-metrics` | monitoring | `argocd/manifests/kube-state-metrics/` | K8s metrics |
 | `miniflux` | miniflux | `argocd/manifests/miniflux/` | [[miniflux]] |
 | `kiwix` | kiwix | `argocd/manifests/kiwix/` | [[kiwix]] |
diff --git a/docs/reference/services/grafana.md b/docs/reference/services/grafana.md
index 3cd5ff1..0c62515 100644
--- a/docs/reference/services/grafana.md
+++ b/docs/reference/services/grafana.md
@@ -36,6 +36,7 @@ The OIDC client secret is injected via [[external-secrets]] (`grafana-authentik-
 |------|------|--------|
 | Prometheus | prometheus | `prometheus.monitoring.svc.cluster.local:9090` |
 | Loki | loki | `loki.monitoring.svc.cluster.local:3100` |
+| Tempo | tempo | `tempo.monitoring.svc.cluster.local:3200` |
 | TeslaMate | postgres | `blumeops-pg-rw.databases.svc.cluster.local:5432` |
 
 ## Dashboard Provisioning
@@ -64,4 +65,5 @@ Optional annotation: `grafana_folder: "FolderName"`
 - [[authentik]] - OIDC identity provider for SSO
 - [[prometheus]] - Metrics datasource
 - [[loki]] - Logs datasource
+- [[tempo]] - Traces datasource
 - [[alloy|Alloy]] - Data collector
diff --git a/docs/reference/services/tempo.md b/docs/reference/services/tempo.md
index 3aea029..0050714 100644
--- a/docs/reference/services/tempo.md
+++ b/docs/reference/services/tempo.md
@@ -18,7 +18,7 @@ Distributed tracing backend for BlumeOps infrastructure. Receives traces via OTL
 | **Tailscale URL** | https://tempo.tail8d86e.ts.net |
 | **OTLP Endpoint** | https://tempo-otlp.tail8d86e.ts.net |
 | **Namespace** | `monitoring` |
-| **Image** | `grafana/tempo:2.7.2` |
+| **Image** | `grafana/tempo:2.10.1` |
 | **Storage** | 10Gi PVC (local filesystem) |
 | **Retention** | 7 days |
 
diff --git a/service-versions.yaml b/service-versions.yaml
index 280fb11..3f7d3fe 100644
--- a/service-versions.yaml
+++ b/service-versions.yaml
@@ -68,6 +68,19 @@ services:
     current-version: "v0.5.4"
     upstream-source: https://github.com/0x2142/frigate-notify/releases
 
+  - name: tempo
+    type: argocd
+    last-reviewed: 2026-03-05
+    current-version: "2.10.1"
+    upstream-source: https://github.com/grafana/tempo/releases
+
+  - name: alloy-tracing-ringtail
+    type: argocd
+    last-reviewed: 2026-03-05
+    current-version: "v1.13.1"
+    upstream-source: https://github.com/grafana/alloy/releases
+    notes: Privileged DaemonSet with Beyla eBPF for HTTP tracing on ringtail
+
   - name: alloy-k8s
     type: argocd
     last-reviewed: 2026-02-16