Phần 5 — Grafana, Pyroscope, Beyla: UI, profiling và auto-instrumentation

grafana:
  image: grafana/grafana:11.3.0
  environment:
    GF_SECURITY_ADMIN_PASSWORD: changeme
    GF_FEATURE_TOGGLES_ENABLE: "traceqlEditor flameGraph"
  volumes:
    - ./grafana/datasources:/etc/grafana/provisioning/datasources:ro
    - ./grafana/dashboards:/etc/grafana/provisioning/dashboards:ro
    - grafana_data:/var/lib/grafana
  ports: ["3000:3000"]
  networks: [observability-net]

apiVersion: 1
datasources:
  - name: Mimir
    type: prometheus
    uid: mimir
    url: http://mimir:8080/prometheus
    jsonData:
      httpHeaderName1: X-Scope-OrgID
      exemplarTraceIdDestinations:
        - name: trace_id
          datasourceUid: tempo
    secureJsonData:
      httpHeaderValue1: primary_cluster

  - name: Loki
    type: loki
    uid: loki
    url: http://loki:3100
    jsonData:
      httpHeaderName1: X-Scope-OrgID
      derivedFields:
        - name: TraceID
          matcherRegex: "trace_id=(\\w+)"
          url: "$${__value.raw}"
          datasourceUid: tempo
    secureJsonData:
      httpHeaderValue1: primary_cluster

  - name: Tempo
    type: tempo
    uid: tempo
    url: http://tempo:3200
    jsonData:
      tracesToLogsV2:
        datasourceUid: loki
        tags: [{ key: service.name, value: service }]
      tracesToMetrics:
        datasourceUid: mimir
      serviceMap:
        datasourceUid: mimir

  - name: Pyroscope
    type: grafana-pyroscope-datasource
    uid: pyroscope
    url: http://pyroscope:4040

server:
  http_listen_port: 4040

storage:
  backend: s3
  s3:
    endpoint: seaweed-s3:8333
    bucket_name: pyroscope
    access_key_id: test
    secret_access_key: test
    insecure: true

limits:
  max_query_lookback: 30d

pyroscope:
  image: grafana/pyroscope:1.10.0
  command:
    - -config.file=/etc/pyroscope/pyroscope-config.yaml
    - -target=all
  ports: ["4040:4040"]
  volumes:
    - ./pyroscope/pyroscope-config.yaml:/etc/pyroscope/pyroscope-config.yaml:ro
  networks: [observability-net]

import "github.com/grafana/pyroscope-go"

pyroscope.Start(pyroscope.Config{
  ApplicationName: "my-service",
  ServerAddress:   "http://pyroscope:4040",
  Tags:            map[string]string{ "env": "prod" },
  ProfileTypes: []pyroscope.ProfileType{
    pyroscope.ProfileCPU,
    pyroscope.ProfileAllocObjects,
    pyroscope.ProfileInuseSpace,
  },
})

beyla:
  image: grafana/beyla:1.9.0
  pid: "host"
  privileged: true
  cap_add: [SYS_ADMIN]
  environment:
    BEYLA_OPEN_PORT: "8000-9000"
    OTEL_EXPORTER_OTLP_ENDPOINT: "http://alloy:4318"
    OTEL_SERVICE_NAME: "auto-instrumented"
    BEYLA_KUBE_METADATA_ENABLE: "false"
  volumes:
    - /sys/kernel/debug:/sys/kernel/debug
  networks: [observability-net]
  deploy:
    mode: global

BEYLA_DISCOVERY_PROCESSES: "myservice,api-gateway"