Fix Alloy errors on k8s deployments

Author: ppcano

deployments/kubernetes/base/alloy/alloy.yaml

@@ -5,23 +5,23 @@ metadata:
   name: grafana-alloy
 ---
 apiVersion: rbac.authorization.k8s.io/v1
-kind: RoleBinding
+kind: ClusterRoleBinding
 metadata:
   name: grafana-alloy
 roleRef:
   apiGroup: rbac.authorization.k8s.io
   kind: ClusterRole
   name: view
 subjects:
-- kind: ServiceAccount
-  name: grafana-alloy
+  - kind: ServiceAccount
+    name: grafana-alloy
+    namespace: quickpizza
 ---
 apiVersion: apps/v1
 kind: Deployment
 metadata:
   name: grafana-alloy
-  labels: &alloyLabels
-    # application name: groups all related resources
+  labels: &alloyLabels # application name: groups all related resources
     app.k8s.io/name: grafana-alloy
     # component type: defines the role of this deployment
     app.kubernetes.io/component: service
@@ -77,4 +77,4 @@ spec:
       targetPort: grpc
     - port: 4318
       name: http
-      targetPort: http
+      targetPort: http

deployments/kubernetes/cloud/config/config.alloy

@@ -82,6 +82,13 @@ loki.source.kubernetes "application_pods" {
 }
 
 discovery.relabel "application_pods_profiles" {
+
+  // Drop database pods - they don't expose pprof endpoints
+  rule {
+    source_labels = ["__meta_kubernetes_pod_label_app_kubernetes_io_component"]
+    regex = "database"
+    action = "drop"
+  }
   // https://grafana.com/docs/pyroscope/latest/view-and-analyze-profile-data/line-by-line/
   rule {
     target_label = "service_repository"

deployments/terraform/alloy.tf

@@ -18,10 +18,9 @@ resource "kubernetes_service_account_v1" "alloy" {
 
 // Grant the "view" ClusterRole to kubernetes_service_account_v1
 // This allows Alloy (`service_account_name`) to discover application pods and scrape metrics. 
-resource "kubernetes_role_binding_v1" "alloy" {
+resource "kubernetes_cluster_role_binding_v1" "alloy" {
   metadata {
     name      = "alloy"
-    namespace = kubernetes_namespace_v1.quickpizza.id
   }
   role_ref {
     api_group = "rbac.authorization.k8s.io"

deployments/terraform/alloy/config.alloy

@@ -95,6 +95,13 @@ loki.source.kubernetes "application_pods" {
 }
 
 discovery.relabel "application_pods_profiles" {
+
+  // Drop database pods - they don't expose pprof endpoints
+  rule {
+    source_labels = ["__meta_kubernetes_pod_label_app_kubernetes_io_component"]
+    regex = "database"
+    action = "drop"
+  }
   // https://grafana.com/docs/pyroscope/latest/view-and-analyze-profile-data/line-by-line/
   rule {
     target_label = "service_repository"