UNCLASSIFIED - NO CUI

Draft: alloy update to 3.2.1-bb.6

Package Merge Request

Package Changes

https://repo1.dso.mil/big-bang/product/packages/alloy/-/blob/3.2.1-bb.6/CHANGELOG.md

Package MR

big-bang/product/packages/alloy!127 (merged)

For Issue

Closes big-bang/product/packages/alloy#121

Upgrade Notices

Alloy is now leveraging our bb-common integration for network policies and istio-related resources. Please refer to this blog post for additional information on the integration.

Previously, non-default enabled components like alloy-receiver were not included in default-deny policies unless explicitly included via defaultSelectorValues. This update includes all pods in the namespace in he default-deny policy and only permits traffic for alloy-logs by default, if you are enabling alloy-receiver or other components besides alloy-logs you must create additional network policy to permit that traffic.

For instance to enable alloy-receiver and permit ingress traffic to it:

alloy:
  values:
    upstream:
      alloy-receiver:
          enabled: true
          alloy:
            extraPorts:
              - name: "otlp-grpc"
                port: 4317
                targetPort: 4317
                protocol: "TCP"
    networkPolicies:
      ingress:
        to:
          alloy-receiver:4317:
            from:
              k8s:
                "*/*": true
Edited by Rob Ferguson

Merge request reports

Loading