Grafana Alloy Helm Chart - Container not starting: exec /bin/alloy: operation not permitted

[Patrick Mischler]

When deploying Grafana Alloy to EKS using the Helm Chart with a podSecurityContext where runAsUser is used the container does not start. The following error is logged:

exec /bin/alloy: operation not permitted

The podSecurityContext was defined like this:

podSecurityContext:
      fsGroup: 2000
      runAsNonRoot: true
      runAsUser: 473

This issue is actually the same as the one reported in the Grafana Alloy repository: grafana/alloy#630

The container must be deployable to an environment where the podSecurityContext is required and where all capabilities mut be droped.

[jwklijnsma]

same issue on openshift

[jwklijnsma]

@PatMis16 grafana/k8s-monitoring-helm@94cd73b#diff-e390381402a45a7097fa2694c01b9dde852ff38b337d0931f57b77ab3d367fc1 is fix there

[Patrick Mischler]

@jwklijnsma
We also need this to be fixed in the alloy Helm Chart.

[Patrick Mischler]

@jwklijnsma
Hi,
Actually now it works with the Helm Chart version 0.3.1 and Alloy version v1.1.0
BR,
Patrick