From 4589ef37470ad663e38c3a82942986d455f7c21e Mon Sep 17 00:00:00 2001 From: Claude Bot Date: Sat, 7 Nov 2026 22:10:52 +0100 Subject: [PATCH] fix(monitoring): turn off Alloy and InfluxDB usage telemetry Both phone home on a timer: every alloy pod to stats.grafana.org (~135 a day each) and influxd to telemetry.influxdata.com (56 a day). Egress policy denies it, so this only removed log noise and wasted SYNs; switch it off at the source like Loki's reporting_enabled: false. --disable-reporting per the "alloy run" reference (chart alloy.extraArgs); INFLUXD_REPORTING_DISABLED per the InfluxDB v2 config options. S28-41 Co-Authored-By: Claude Opus 5.5 --- kubernetes/apps/influxdb/helmrelease.yaml | 3 +++ kubernetes/apps/monitoring/helmrelease-alloy-syslog.yaml | 3 +++ kubernetes/apps/monitoring/helmrelease-loki.yaml | 3 +++ 3 files changed, 9 insertions(+) diff --git a/kubernetes/apps/influxdb/helmrelease.yaml b/kubernetes/apps/influxdb/helmrelease.yaml index 1cf15989..d862e3d0 100644 --- a/kubernetes/apps/influxdb/helmrelease.yaml +++ b/kubernetes/apps/influxdb/helmrelease.yaml @@ -100,6 +100,9 @@ spec: # Keep tokens unhashed; enable hashing later as its own change. - name: INFLUXD_USE_HASHED_TOKENS value: "false" + # No usage telemetry to telemetry.influxdata.com (egress is denied). + - name: INFLUXD_REPORTING_DISABLED + value: "true" # The chart defaults to liveness/readiness with initialDelaySeconds=0, # so after a crash restart the kubelet kills the pod before shards # finish opening. Give it 10 minutes to come up cleanly. diff --git a/kubernetes/apps/monitoring/helmrelease-alloy-syslog.yaml b/kubernetes/apps/monitoring/helmrelease-alloy-syslog.yaml index 9c83356a..2c05b944 100644 --- a/kubernetes/apps/monitoring/helmrelease-alloy-syslog.yaml +++ b/kubernetes/apps/monitoring/helmrelease-alloy-syslog.yaml @@ -54,6 +54,9 @@ spec: # non-RFC-framed payload). Scoped to this single-purpose receiver # only — the pod-log Alloy DaemonSet stays at default stability. stabilityLevel: experimental + # No usage reporting to stats.grafana.org (egress is denied anyway). + extraArgs: + - --disable-reporting resources: requests: cpu: 20m diff --git a/kubernetes/apps/monitoring/helmrelease-loki.yaml b/kubernetes/apps/monitoring/helmrelease-loki.yaml index a0294741..9e6027e9 100644 --- a/kubernetes/apps/monitoring/helmrelease-loki.yaml +++ b/kubernetes/apps/monitoring/helmrelease-loki.yaml @@ -116,6 +116,9 @@ spec: retries: 3 values: alloy: + # No usage reporting to stats.grafana.org (egress is denied anyway). + extraArgs: + - --disable-reporting configMap: content: | // Discover and collect K8s pod logs -- 2.54.0