eblume/blumeops
1
1
Fork 0
Code Issues Pull requests Projects Releases 83 Packages Wiki Activity Actions

Run alloy-tracing as root for eBPF capabilities

Browse source 
The nix-built Alloy image sets User=65534 (nobody). Even with
privileged: true, a non-root user gets no effective capabilities
(CapEff=0). Override with runAsUser: 0 so Beyla gets CAP_BPF and
CAP_SYS_ADMIN needed for eBPF instrumentation.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
This commit is contained in:
Erich Blume 2026-04-18 08:42:26 -07:00
commit c8da243663
1 changed files with 1 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

1
argocd/manifests/alloy-tracing-ringtail/daemonset.yaml
View file

@ -46,6 +46,7 @@ spec:
mountPath: /var/lib/alloy/data mountPath: /var/lib/alloy/data
securityContext: securityContext:
privileged: true privileged: true
runAsUser: 0
tolerations: tolerations:
- operator: Exists - operator: Exists
volumes: volumes: