From 735a7edd6c0cfa69d2f35e562ffec8a4808216b8 Mon Sep 17 00:00:00 2001 From: Erich Blume Date: Fri, 13 Mar 2026 16:03:47 -0700 Subject: [PATCH 1/2] Bump Grafana Alloy to v1.14.0 across all deployments MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Updates alloy-k8s, alloy-ringtail, and alloy-tracing-ringtail image tags from v1.13.1 to v1.14.0. Marks indri alloy (ansible) as reviewed at v1.14.0 — source rebuild needed separately. Adds missing alloy-ringtail entry to service-versions.yaml. Co-Authored-By: Claude Opus 4.6 --- argocd/manifests/alloy-k8s/kustomization.yaml | 2 +- .../alloy-ringtail/kustomization.yaml | 2 +- .../alloy-tracing-ringtail/kustomization.yaml | 2 +- docs/changelog.d/bump-alloy-v1.14.0.infra.md | 1 + docs/reference/services/alloy.md | 4 ++-- service-versions.yaml | 19 +++++++++++++------ 6 files changed, 19 insertions(+), 11 deletions(-) create mode 100644 docs/changelog.d/bump-alloy-v1.14.0.infra.md diff --git a/argocd/manifests/alloy-k8s/kustomization.yaml b/argocd/manifests/alloy-k8s/kustomization.yaml index 1d43d8f..6209a0b 100644 --- a/argocd/manifests/alloy-k8s/kustomization.yaml +++ b/argocd/manifests/alloy-k8s/kustomization.yaml @@ -10,7 +10,7 @@ resources: images: - name: grafana/alloy - newTag: v1.13.1 + newTag: v1.14.0 configMapGenerator: - name: alloy-config diff --git a/argocd/manifests/alloy-ringtail/kustomization.yaml b/argocd/manifests/alloy-ringtail/kustomization.yaml index 1d43d8f..6209a0b 100644 --- a/argocd/manifests/alloy-ringtail/kustomization.yaml +++ b/argocd/manifests/alloy-ringtail/kustomization.yaml @@ -10,7 +10,7 @@ resources: images: - name: grafana/alloy - newTag: v1.13.1 + newTag: v1.14.0 configMapGenerator: - name: alloy-config diff --git a/argocd/manifests/alloy-tracing-ringtail/kustomization.yaml b/argocd/manifests/alloy-tracing-ringtail/kustomization.yaml index 6956f14..fec545b 100644 --- a/argocd/manifests/alloy-tracing-ringtail/kustomization.yaml +++ b/argocd/manifests/alloy-tracing-ringtail/kustomization.yaml @@ -9,7 +9,7 @@ resources: images: - name: grafana/alloy - newTag: v1.13.1 + newTag: v1.14.0 configMapGenerator: - name: alloy-tracing-config diff --git a/docs/changelog.d/bump-alloy-v1.14.0.infra.md b/docs/changelog.d/bump-alloy-v1.14.0.infra.md new file mode 100644 index 0000000..2bd5caa --- /dev/null +++ b/docs/changelog.d/bump-alloy-v1.14.0.infra.md @@ -0,0 +1 @@ +Bump Grafana Alloy to v1.14.0 across all deployments (indri, alloy-k8s, alloy-ringtail, alloy-tracing-ringtail) diff --git a/docs/reference/services/alloy.md b/docs/reference/services/alloy.md index d946be7..d781f2f 100644 --- a/docs/reference/services/alloy.md +++ b/docs/reference/services/alloy.md @@ -1,6 +1,6 @@ --- title: Alloy -modified: 2026-02-08 +modified: 2026-03-13 tags: - service - observability @@ -20,7 +20,7 @@ Unified observability collector for metrics and logs with three deployments: | **Indri Binary** | `~/.local/bin/alloy` | | **Indri Config** | `~/.config/grafana-alloy/config.alloy` | | **K8s Namespace** | `alloy` | -| **K8s Image** | `grafana/alloy:v1.8.2` | +| **K8s Image** | `grafana/alloy:v1.14.0` | | **ArgoCD App** | `alloy-k8s` | | **Fly.io Config** | `fly/alloy.river` | | **Fly.io Image** | `grafana/alloy:v1.5.1` (binary copied into nginx container) | diff --git a/service-versions.yaml b/service-versions.yaml index 83daab1..f060499 100644 --- a/service-versions.yaml +++ b/service-versions.yaml @@ -71,15 +71,22 @@ services: - name: alloy-tracing-ringtail type: argocd - last-reviewed: 2026-03-05 - current-version: "v1.13.1" + last-reviewed: 2026-03-13 + current-version: "v1.14.0" upstream-source: https://github.com/grafana/alloy/releases notes: Privileged DaemonSet with Beyla eBPF for HTTP tracing on ringtail + - name: alloy-ringtail + type: argocd + last-reviewed: 2026-03-13 + current-version: "v1.14.0" + upstream-source: https://github.com/grafana/alloy/releases + notes: DaemonSet on ringtail for host metrics and pod logs + - name: alloy-k8s type: argocd - last-reviewed: 2026-02-16 - current-version: "v1.13.1" + last-reviewed: 2026-03-13 + current-version: "v1.14.0" upstream-source: https://github.com/grafana/alloy/releases - name: tailscale-operator @@ -255,8 +262,8 @@ services: - name: alloy type: ansible - last-reviewed: null - current-version: null + last-reviewed: 2026-03-13 + current-version: "v1.14.0" upstream-source: https://github.com/grafana/alloy/releases notes: Built from source on indri From 2585a960b90ce79a88f4bd3524139705b80263cf Mon Sep 17 00:00:00 2001 From: Erich Blume Date: Fri, 13 Mar 2026 16:20:43 -0700 Subject: [PATCH 2/2] Update alloy build instructions: Go 1.25.7 and codesign step SCP'd binaries from another Mac get com.apple.provenance quarantine and macOS kills them. Ad-hoc codesign (codesign --sign - --force) resolves this without GUI approval. Co-Authored-By: Claude Opus 4.6 --- ansible/roles/alloy/defaults/main.yml | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) diff --git a/ansible/roles/alloy/defaults/main.yml b/ansible/roles/alloy/defaults/main.yml index 8954d87..fa840d4 100644 --- a/ansible/roles/alloy/defaults/main.yml +++ b/ansible/roles/alloy/defaults/main.yml @@ -13,7 +13,7 @@ # git clone ssh://forgejo@forge.ops.eblu.me:2222/mirrors/alloy.git ~/code/3rd/alloy # # 2. Set up build tools via mise: -# cd ~/code/3rd/alloy && mise use go@1.25 node yarn +# cd ~/code/3rd/alloy && mise use go@1.25.7 node yarn # # 3. Build with CGO enabled (default in Makefile): # cd ~/code/3rd/alloy && mise x -- make alloy @@ -21,7 +21,10 @@ # 4. Copy binary to indri: # scp ~/code/3rd/alloy/build/alloy indri:~/.local/bin/alloy # -# 5. Run ansible to deploy config and LaunchAgent +# 5. Ad-hoc codesign on indri (SCP'd binaries get quarantined by macOS): +# ssh indri 'codesign --sign - --force ~/.local/bin/alloy' +# +# 6. Run ansible to deploy config and LaunchAgent # Binary and paths alloy_binary: /Users/erichblume/.local/bin/alloy