Grafana Alloy采集Kind集群Pod日志至Loki未被发现问题排查

以下是针对你的Kind集群中Grafana Alloy无法采集Pod日志的配置问题排查：

1. Alloy配置文件（alloy-configmap.yaml）格式完全错误 #

你的ConfigMap里重复嵌套了完整的ConfigMap结构，导致Alloy加载的配置无效。正确的ConfigMap应该只保留Alloy的配置内容，修复后的文件如下：

apiVersion: v1
kind: ConfigMap
metadata:
  name: alloy-config
  labels:
     app: alloy
data:
  alloy-config.alloy: |
    discovery.kubernetes "pods" {
      role = "pod"
    }
    
    loki.source.kubernetes "pods" {
      targets    = discovery.kubernetes.pods.targets
      forward_to = [loki.write.local.receiver]
    }
    
    loki.write "local" {
      endpoint {
        url = "http://loki.default.svc.cluster.local:3100/loki/api/v1/push"
      }
    }

2. Loki写入地址使用占位符，未指向实际服务 #

原配置中loki.write的url是http://address:port/loki/api/v1/push占位符，需要替换为Loki Service的集群内部地址：http://loki.default.svc.cluster.local:3100/loki/api/v1/push（Loki在default命名空间，Service名称为loki）。

3. Alloy缺少Kubernetes API访问权限 #

discovery.kubernetes组件需要权限读取Kubernetes的Pod资源，你需要为Alloy创建对应的RBAC资源：

创建ServiceAccount #

apiVersion: v1
kind: ServiceAccount
metadata:
  name: grafana-alloy
  namespace: default

创建ClusterRole #

apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
  name: grafana-alloy-discovery
rules:
- apiGroups: [""]
  resources: ["pods", "nodes", "services"]
  verbs: ["get", "list", "watch"]

创建ClusterRoleBinding #

apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
  name: grafana-alloy-discovery
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: grafana-alloy-discovery
subjects:
- kind: ServiceAccount
  name: grafana-alloy
  namespace: default

更新Alloy Deployment，关联ServiceAccount #

在alloy-deployment.yaml的spec.template.spec下添加serviceAccountName字段：

spec:
  template:
    spec:
      serviceAccountName: grafana-alloy
      containers:
        # 原有容器配置不变

4. 验证修复步骤 #

1. 删除原有错误的Alloy ConfigMap：kubectl delete configmap alloy-config
2. 应用修复后的ConfigMap和RBAC资源
3. 重启Alloy Deployment：kubectl rollout restart deployment grafana-alloy
4. 查看Alloy日志确认是否成功发现Pod：kubectl logs -f deployment/grafana-alloy
5. 在Grafana中配置Loki数据源后，尝试查询Pod日志

内容的提问来源于stack exchange，提问作者ChoclateFactory