Grafana alloy modules

Author: joli-sys

.README.head.md

@@ -0,0 +1,94 @@
+# Grafana Alloy Terraform module
+
+## Usage
+
+```
+module "grafana_agent" {
+  source  = "..."
+  version = "..."
+
+  kubernetes_cluster_name = "somecluster"
+  kubernetes_namespace    = "cluster-apps"
+
+  agent_name         = "clustered"
+  clustering_enabled = true
+  replicas           = 3
+
+  config = [<<-EOF
+    k8s_pods "my" {
+      metrics_output = prometheus.remote_write.default.receiver
+    }
+
+    k8s_services "my" {
+      metrics_output = prometheus.remote_write.default.receiver
+    }
+
+    k8s_cadvisor "my" {
+      metrics_output = prometheus.remote_write.default.receiver
+    }
+
+    k8s_kubelet "my" {
+      metrics_output = prometheus.remote_write.default.receiver
+    }
+    EOF
+  ]
+
+  metrics = {
+    endpoint = "https://mimir.example.com:443/api/v1/push"
+  }
+}
+```
+
+### OTel example
+
+```
+module "grafana_agent" {
+  source  = "..."
+  version = "..."
+
+  kubernetes_cluster_name = "somecluster"
+  kubernetes_namespace    = "cluster-apps"
+
+  agent_name = "otel"
+
+  config = [<<-EOF
+    otel_process "my" {
+      metrics_output = prometheus.remote_write.default.receiver
+      traces_output  = otelcol.exporter.otelhttp.default.receiver
+    }
+    EOF
+  ]
+
+  metrics = {
+    endpoint = "https://mimir.example.com:443/api/v1/push"
+  }
+
+  otel = {
+    enabled  = true
+    endpoint = "https://tempo.example.com:443"
+  }
+}
+```
+
+NOTE: OTel components are not cluster-capable and some require single point of processing (ie. traces)
+
+For working examples, look into the submodules
+
+### Kubernetes usage resources
+
+```
+  agent_resources = {
+    requests = {
+      cpu    = "100m"
+      memory = "100Mi"
+    }
+    limits = {
+      cpu    = "1"
+      memory = "1Gi"
+    }
+  }
+```
+
+Please note, when limits are undefined, requests values are used for limits too.
+
+---

.github/workflows/check.yml

@@ -0,0 +1,59 @@
+name: Check
+on:
+  push:
+    branches:
+      - "**"
+
+jobs:
+  fmt:
+    name: Terraform Format
+    runs-on: ubuntu-latest
+    container:
+      image: ghcr.io/cookielab/container-image-terraform:1.10
+      options: --user root
+      credentials:
+        username: ${{ github.actor }}
+        password: ${{ secrets.GITHUB_TOKEN }}
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+      - name: Check Terraform format
+        run: terraform fmt -check=true
+  lint:
+    name: TF Lint
+    runs-on: ubuntu-latest
+    container:
+      image: ghcr.io/cookielab/container-image-terraform:1.9
+      options: --user root
+      credentials:
+        username: ${{ github.actor }}
+        password: ${{ secrets.GITHUB_TOKEN }}
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+      - name: Check TF lint
+        run: tflint
+  validate:
+    name: Terraform Validate
+    runs-on: ubuntu-latest
+    container:
+      image: ghcr.io/cookielab/container-image-terraform:1.9
+      options: --user root
+      credentials:
+        username: ${{ github.actor }}
+        password: ${{ secrets.GITHUB_TOKEN }}
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+      - name: Inject additional provider
+        uses: "finnp/create-file-action@master"
+        env:
+          FILE_NAME: "test_injection.tf"
+          FILE_DATA: |
+            provider "aws" {
+              alias = "us_east_1"
+            }
+      - name: Terraform init
+        run: terraform init
+      - name: Terraform validate
+        run: terraform validate

.github/workflows/package.yml

@@ -0,0 +1,52 @@
+name: Terraform Package
+
+on:
+  push:
+    tags:
+      - "v*"
+
+jobs:
+  package:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      packages: write
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Set up Terraform
+        uses: hashicorp/setup-terraform@v3
+        with:
+          terraform_version: "1.10.0"
+
+      - name: Initialize Terraform
+        run: |
+          terraform init
+
+      - name: Validate Terraform
+        run: |
+          terraform validate
+
+      - name: Package Module
+        run: |
+          zip -r terraform-kubernetes-grafana-alloy.zip ./* \
+            -x '*.git*' \
+            -x '*.github*' \
+            -x '*.gitignore'
+
+      - name: Get Version
+        id: get_version
+        run: echo "VERSION=${GITHUB_REF#refs/tags/v}" >> $GITHUB_OUTPUT
+
+      - name: Upload Package
+        uses: actions/upload-artifact@v3
+        with:
+          name: terraform-kubernetes-grafana-alloy-${{ steps.get_version.outputs.VERSION }}
+          path: terraform-kubernetes-grafana-alloy.zip
+
+      - name: Create Release
+        uses: softprops/action-gh-release@v1
+        with:
+          files: terraform-kubernetes-grafana-alloy.zip
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

LICENSE.md

@@ -0,0 +1,21 @@
+# The MIT License (MIT)
+
+Copyright © 2025 Cookielab s.r.o.
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+THE SOFTWARE.