From a4b5a8d917a0a3fbea50da1fbdcecc79b22bb685 Mon Sep 17 00:00:00 2001
From: Erich Blume <blume.erich@gmail.com>
Date: Thu, 26 Mar 2026 15:26:20 -0700
Subject: [PATCH] Mount host /proc and /sys for eBPF kernel symbol access

pyroscope.ebpf needs /proc/kallsyms and tracefs access for eBPF
profiling. Mount host /proc and /sys into the container.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
---
 .../alloy-profiling-ringtail/daemonset.yaml          | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/argocd/manifests/alloy-profiling-ringtail/daemonset.yaml b/argocd/manifests/alloy-profiling-ringtail/daemonset.yaml
index b3dbabf..6c8b09a 100644
--- a/argocd/manifests/alloy-profiling-ringtail/daemonset.yaml
+++ b/argocd/manifests/alloy-profiling-ringtail/daemonset.yaml
@@ -46,6 +46,12 @@ spec:
               mountPath: /var/lib/alloy/data
             - name: tmp
               mountPath: /tmp
+            - name: host-proc
+              mountPath: /host/proc
+              readOnly: true
+            - name: host-sys
+              mountPath: /host/sys
+              readOnly: true
           securityContext:
             privileged: true
       tolerations:
@@ -58,3 +64,9 @@ spec:
           emptyDir: {}
         - name: tmp
           emptyDir: {}
+        - name: host-proc
+          hostPath:
+            path: /proc
+        - name: host-sys
+          hostPath:
+            path: /sys