diff --git a/.github/workflows/platform-test.yml b/.github/workflows/platform-test.yml
index efb4be8f7..b7c2c168f 100644
--- a/.github/workflows/platform-test.yml
+++ b/.github/workflows/platform-test.yml
@@ -42,6 +42,7 @@ jobs:
     name: Platform Test
     needs: list-tests
     runs-on: ubuntu-latest
+    if: ${{ needs.list-tests.outputs.tests != '[]' }}
     strategy:
       matrix:
         test: ${{ fromJson(needs.list-tests.outputs.tests) }}
diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md
index 5d4cde295..7082b4386 100644
--- a/CONTRIBUTING.md
+++ b/CONTRIBUTING.md
@@ -42,10 +42,9 @@ Each component has its own guide for contributing:
 <!-- [Main Helm chart](./charts/k8s-monitoring/README.md#Contributing) -->
 
 -   [Feature subcharts](./charts/k8s-monitoring/docs/Features.md#Contributing)
+-   [Integrations](./charts/feature-integrations/README.md#Contributing)
 -   [Destinations](./charts/k8s-monitoring/docs/destinations/README.md#Contributing)
 
-<!-- [Integrations](./charts/feature-integrations/README.md#Contributing) -->
-
 ## Building
 
 Lots of files in this repository are generated in order to reduce duplication and ensure consistency. To build these
diff --git a/charts/feature-integrations/README.md b/charts/feature-integrations/README.md
index 3f4506446..bd43b4cdf 100644
--- a/charts/feature-integrations/README.md
+++ b/charts/feature-integrations/README.md
@@ -105,3 +105,50 @@ Actual integration testing in a live environment should be done in the main [k8s
 | global.alloyModules.source | string | `"git"` | The source of the Alloy modules. The valid options are "configMap" or "git" |
 | global.maxCacheSize | int | `100000` | Sets the max_cache_size for every prometheus.relabel component. ([docs](https://grafana.com/docs/alloy/latest/reference/components/prometheus/prometheus.relabel/#arguments)) This should be at least 2x-5x your largest scrape target or samples appended rate. |
 | global.scrapeInterval | string | `"60s"` | How frequently to scrape metrics. |
+
+### Integration: MySQL
+
+| Key | Type | Default | Description |
+|-----|------|---------|-------------|
+| mysql | object | `{"instances":[]}` | Scrape metrics from MySQL |
+
+## Contributing
+
+To contribute integrations to this feature, there are a few files that need to be created or modified:
+
+*   `values.yaml` - The main feature chart's values file. Add a section for your integration. It must contain an
+    `instance` array and any settings that apply to every instance of the integration. For example:
+
+    ```yaml
+    <slug>:
+      instances: []
+      globalSetting: value
+    ```
+
+*   `integrations/<slug>-values.yaml` - The values that will be used for each instance. This must include `name` to
+    differentiate it from other instances, and any other settings that are specific to that instance. For example:
+
+    ```yaml
+    name: ""
+    labelSelectors:
+      app.kubernetes.io/name: my-service
+    protocol: http
+    ...
+    ```
+
+*   `templates/_integration<=_<slug>.tpl` - The file that contains template functions that build the configuration to
+    discover, gather, process, and deliver the telemetry data. This file is required to implement the following template
+    functions:
+    *   `integrations.<slug>.type.metrics` - Returns true if this integration scrapes metrics.
+    *   `integrations.<slug>.type.logs` - Returns true if this integration gathers logs.
+    *   `integrations.<slug>.module` - Returns the configuration that is included once if this integration is used. This
+        is typically the module definition.
+    *   `integrations.<slug>.include.metrics` - Returns the configuration that is included for each instance of the
+        integration that scrapes metrics.
+    *   `integrations.<slug>.include.logs` - Returns the configuration that is included for each instance of the
+        integration that gathers logs.
+    *   `integrations.<slug>.exclude.logs` - Returns a rule that can be used by other Log-gathering features to ensure
+        that logs that are gathered from this integration are not collected twice. Typically the inverse of a rule in
+        the `integrations.<slug>.include.logs` function.
+    *   `default-allow-lists/<slug>.yaml` - If the integration scrapes metrics, a common pattern is to provide a list of
+        metrics that should be allowed. This minimizes the amount of metrics delivered to a useful minimal set.
diff --git a/charts/feature-integrations/README.md.gotmpl b/charts/feature-integrations/README.md.gotmpl
index 9158dc327..d8c25334f 100644
--- a/charts/feature-integrations/README.md.gotmpl
+++ b/charts/feature-integrations/README.md.gotmpl
@@ -66,3 +66,44 @@ Actual integration testing in a live environment should be done in the main [k8s
 <!-- markdownlint-enable no-bare-urls -->
 {{ template "chart.requirementsSection" . }}
 {{ template "chart.valuesSection" . }}
+
+## Contributing
+
+To contribute integrations to this feature, there are a few files that need to be created or modified:
+
+*   `values.yaml` - The main feature chart's values file. Add a section for your integration. It must contain an
+    `instance` array and any settings that apply to every instance of the integration. For example:
+
+    ```yaml
+    <slug>:
+      instances: []
+      globalSetting: value
+    ```
+
+*   `integrations/<slug>-values.yaml` - The values that will be used for each instance. This must include `name` to
+    differentiate it from other instances, and any other settings that are specific to that instance. For example:
+
+    ```yaml
+    name: ""
+    labelSelectors:
+      app.kubernetes.io/name: my-service
+    protocol: http
+    ...
+    ```
+
+*   `templates/_integration<=_<slug>.tpl` - The file that contains template functions that build the configuration to
+    discover, gather, process, and deliver the telemetry data. This file is required to implement the following template
+    functions:
+    *   `integrations.<slug>.type.metrics` - Returns true if this integration scrapes metrics.
+    *   `integrations.<slug>.type.logs` - Returns true if this integration gathers logs.
+    *   `integrations.<slug>.module` - Returns the configuration that is included once if this integration is used. This
+        is typically the module definition.
+    *   `integrations.<slug>.include.metrics` - Returns the configuration that is included for each instance of the
+        integration that scrapes metrics.
+    *   `integrations.<slug>.include.logs` - Returns the configuration that is included for each instance of the
+        integration that gathers logs.
+    *   `integrations.<slug>.exclude.logs` - Returns a rule that can be used by other Log-gathering features to ensure
+        that logs that are gathered from this integration are not collected twice. Typically the inverse of a rule in
+        the `integrations.<slug>.include.logs` function.
+    *   `default-allow-lists/<slug>.yaml` - If the integration scrapes metrics, a common pattern is to provide a list of
+        metrics that should be allowed. This minimizes the amount of metrics delivered to a useful minimal set.
diff --git a/charts/feature-integrations/docs/integrations/alloy.md b/charts/feature-integrations/docs/integrations/alloy.md
index 5054f91ed..062e111ca 100644
--- a/charts/feature-integrations/docs/integrations/alloy.md
+++ b/charts/feature-integrations/docs/integrations/alloy.md
@@ -28,4 +28,4 @@
 
 | Key | Type | Default | Description |
 |-----|------|---------|-------------|
-| scrapeInterval | string | `60s` | How frequently to scrape metrics from Windows Exporter. |
+| scrapeInterval | string | `60s` | How frequently to scrape metrics from Alloy. |
diff --git a/charts/feature-integrations/docs/integrations/mysql.md b/charts/feature-integrations/docs/integrations/mysql.md
new file mode 100644
index 000000000..5a2ce7ab1
--- /dev/null
+++ b/charts/feature-integrations/docs/integrations/mysql.md
@@ -0,0 +1,55 @@
+# mysql
+
+## Values
+
+### Exporter Settings
+
+| Key | Type | Default | Description |
+|-----|------|---------|-------------|
+| exporter.collectors | list | `["heartbeat","mysql.user"]` | The list of collectors to enable for the MySQL Exporter ([Documentation](https://grafana.com/docs/alloy/latest/reference/components/prometheus/prometheus.exporter.mysql/#supported-collectors)). |
+| exporter.dataSource | object | `{"auth":{"password":"","passwordFrom":"","passwordKey":"password","username":"","usernameFrom":"","usernameKey":"username"},"host":"","port":3306}` | The data source to use for the MySQL Exporter. |
+| exporter.dataSource.auth.password | string | `""` | The password to use for the MySQL connection. |
+| exporter.dataSource.auth.passwordFrom | string | `""` | Raw config for accessing the password. |
+| exporter.dataSource.auth.passwordKey | string | `"password"` | The key for storing the password in the secret. |
+| exporter.dataSource.auth.username | string | `""` | The username to use for the MySQL connection. |
+| exporter.dataSource.auth.usernameFrom | string | `""` | Raw config for accessing the username. |
+| exporter.dataSource.auth.usernameKey | string | `"username"` | The key for storing the username in the secret. |
+| exporter.dataSource.host | string | `""` | The MySQL host to connect to. |
+| exporter.dataSource.port | int | `3306` | The MySQL port to connect to. |
+| exporter.dataSourceName | string | `""` | The data source string to use for the MySQL Exporter. |
+
+### Logs Settings
+
+| Key | Type | Default | Description |
+|-----|------|---------|-------------|
+| logs.enabled | bool | `true` | Whether to enable special processing of MySQL pod logs. |
+| logs.labelSelectors | object | `{}` | Label selectors to choose the set of pods to gather logs from for this MySQL Instance. Example: `app.kubernetes.io/name: mysql` |
+
+### Metric Processing Settings
+
+| Key | Type | Default | Description |
+|-----|------|---------|-------------|
+| maxCacheSize | string | `100000` | Sets the max_cache_size for prometheus.relabel component. This should be at least 2x-5x your largest scrape target or samples appended rate. ([docs](https://grafana.com/docs/alloy/latest/reference/components/prometheus.relabel/#arguments)) Overrides global.maxCacheSize |
+| metricsTuning.excludeMetrics | list | `[]` | Metrics to drop. Can use regular expressions. |
+| metricsTuning.includeMetrics | list | `[]` | Metrics to keep. Can use regular expressions. |
+
+### General Settings
+
+| Key | Type | Default | Description |
+|-----|------|---------|-------------|
+| name | string | `""` | Name for this MySQL instance. |
+
+### Scrape Settings
+
+| Key | Type | Default | Description |
+|-----|------|---------|-------------|
+| scrapeInterval | string | `60s` | How frequently to scrape metrics from MySQL Exporter. |
+
+### Secret
+
+| Key | Type | Default | Description |
+|-----|------|---------|-------------|
+| secret.create | bool | `true` | Whether to create a secret to store credentials for this MySQL integration instance. |
+| secret.embed | bool | `false` | If true, skip secret creation and embed the credentials directly into the configuration. |
+| secret.name | string | `""` | The name of the secret to create. |
+| secret.namespace | string | `""` | The namespace for the secret. |
diff --git a/charts/feature-integrations/integrations/alloy-values.yaml b/charts/feature-integrations/integrations/alloy-values.yaml
index 6de4e92f5..1b5d367af 100644
--- a/charts/feature-integrations/integrations/alloy-values.yaml
+++ b/charts/feature-integrations/integrations/alloy-values.yaml
@@ -8,7 +8,7 @@ name: ""
 labelSelectors:
   app.kubernetes.io/name: alloy
 
-# -- How frequently to scrape metrics from Windows Exporter.
+# -- How frequently to scrape metrics from Alloy.
 # @default -- `60s`
 # @section -- Scrape Settings
 scrapeInterval:
diff --git a/charts/feature-integrations/integrations/mysql-values.yaml b/charts/feature-integrations/integrations/mysql-values.yaml
new file mode 100644
index 000000000..ce49ce421
--- /dev/null
+++ b/charts/feature-integrations/integrations/mysql-values.yaml
@@ -0,0 +1,94 @@
+---
+# -- Name for this MySQL instance.
+# @section -- General Settings
+name: ""
+
+# Settings for log gathering using the Pod Logs feature
+logs:
+  # -- Whether to enable special processing of MySQL pod logs.
+  # @section -- Logs Settings
+  enabled: true
+
+  # -- Label selectors to choose the set of pods to gather logs from for this MySQL Instance.
+  # Example:
+  # `app.kubernetes.io/name: mysql`
+  # @section -- Logs Settings
+  labelSelectors: {}
+
+# Settings for the Alloy embedded MySQL Exporter
+exporter:
+  # -- The data source string to use for the MySQL Exporter.
+  # @section -- Exporter Settings
+  dataSourceName: ""
+
+  # -- The data source to use for the MySQL Exporter.
+  # @section -- Exporter Settings
+  dataSource:
+    # -- The MySQL host to connect to.
+    # @section -- Exporter Settings
+    host: ""
+    # -- The MySQL port to connect to.
+    # @section -- Exporter Settings
+    port: 3306
+    auth:
+      # -- The username to use for the MySQL connection.
+      # @section -- Exporter Settings
+      username: ""
+      # -- The key for storing the username in the secret.
+      # @section -- Exporter Settings
+      usernameKey: "username"
+      # -- Raw config for accessing the username.
+      # @section -- Exporter Settings
+      usernameFrom: ""
+      # -- The password to use for the MySQL connection.
+      # @section -- Exporter Settings
+      password: ""
+      # -- The key for storing the password in the secret.
+      # @section -- Exporter Settings
+      passwordKey: "password"
+      # -- Raw config for accessing the password.
+      # @section -- Exporter Settings
+      passwordFrom: ""
+
+  # -- The list of collectors to enable for the MySQL Exporter ([Documentation](https://grafana.com/docs/alloy/latest/reference/components/prometheus/prometheus.exporter.mysql/#supported-collectors)).
+  # @section -- Exporter Settings
+  collectors:
+    - heartbeat
+    - mysql.user
+
+secret:
+  # -- (bool) Whether to create a secret to store credentials for this MySQL integration instance.
+  # @default -- `true`
+  # @section -- Secret
+  create:
+  # -- If true, skip secret creation and embed the credentials directly into the configuration.
+  # @section -- Secret
+  embed: false
+  # -- The name of the secret to create.
+  # @section -- Secret
+  name: ""
+  # -- The namespace for the secret.
+  # @section -- Secret
+  namespace: ""
+
+# -- How frequently to scrape metrics from MySQL Exporter.
+# @default -- `60s`
+# @section -- Scrape Settings
+scrapeInterval:
+
+# Adjustments to the scraped metrics to filter the amount of data sent to storage.
+metricsTuning:
+  # -- Metrics to keep. Can use regular expressions.
+  # @section -- Metric Processing Settings
+  includeMetrics: []
+  # -- Metrics to drop. Can use regular expressions.
+  # @section -- Metric Processing Settings
+  excludeMetrics: []
+
+# -- Sets the max_cache_size for prometheus.relabel component.
+# This should be at least 2x-5x your largest scrape target or samples appended rate.
+# ([docs](https://grafana.com/docs/alloy/latest/reference/components/prometheus.relabel/#arguments))
+# Overrides global.maxCacheSize
+# @default -- `100000`
+# @section -- Metric Processing Settings
+maxCacheSize:
diff --git a/charts/feature-integrations/schema-mods/definitions/mysql-integration.schema.json b/charts/feature-integrations/schema-mods/definitions/mysql-integration.schema.json
new file mode 100644
index 000000000..2593881e5
--- /dev/null
+++ b/charts/feature-integrations/schema-mods/definitions/mysql-integration.schema.json
@@ -0,0 +1,105 @@
+{
+    "type": "object",
+    "properties": {
+        "exporter": {
+            "type": "object",
+            "properties": {
+                "collectors": {
+                    "type": "array",
+                    "items": {
+                        "type": "string"
+                    }
+                },
+                "dataSource": {
+                    "type": "object",
+                    "properties": {
+                        "auth": {
+                            "type": "object",
+                            "properties": {
+                                "password": {
+                                    "type": "string"
+                                },
+                                "passwordFrom": {
+                                    "type": "string"
+                                },
+                                "passwordKey": {
+                                    "type": "string"
+                                },
+                                "username": {
+                                    "type": "string"
+                                },
+                                "usernameFrom": {
+                                    "type": "string"
+                                },
+                                "usernameKey": {
+                                    "type": "string"
+                                }
+                            }
+                        },
+                        "host": {
+                            "type": "string"
+                        },
+                        "port": {
+                            "type": "integer"
+                        }
+                    }
+                },
+                "dataSourceName": {
+                    "type": "string"
+                }
+            }
+        },
+        "logs": {
+            "type": "object",
+            "properties": {
+                "enabled": {
+                    "type": "boolean"
+                },
+                "labelSelectors": {
+                    "type": "object"
+                }
+            }
+        },
+        "maxCacheSize": {
+            "type": "null"
+        },
+        "metricsTuning": {
+            "type": "object",
+            "properties": {
+                "excludeMetrics": {
+                    "type": "array"
+                },
+                "includeMetrics": {
+                    "type": "array"
+                }
+            }
+        },
+        "name": {
+            "type": "string"
+        },
+        "scrapeInterval": {
+            "type": "null"
+        },
+        "secret": {
+            "type": "object",
+            "properties": {
+                "create": {
+                    "type": "null"
+                },
+                "embed": {
+                    "type": "boolean"
+                },
+                "name": {
+                    "type": "string"
+                },
+                "namespace": {
+                    "type": "string"
+                }
+            }
+        },
+        "type": {
+            "type": "string",
+            "const": "mysql"
+        }
+    }
+}
diff --git a/charts/feature-integrations/schema-mods/integration-list.json b/charts/feature-integrations/schema-mods/integration-list.json
index fb35e6b87..3fb057e3c 100644
--- a/charts/feature-integrations/schema-mods/integration-list.json
+++ b/charts/feature-integrations/schema-mods/integration-list.json
@@ -6,7 +6,8 @@
         "anyOf": [
           { "$ref": "#/definitions/alloy-integration"},
           { "$ref": "#/definitions/cert-manager-integration"},
-          { "$ref": "#/definitions/etcd-integration"}
+          { "$ref": "#/definitions/etcd-integration"},
+          { "$ref": "#/definitions/mysql-integration"}
         ]
       }
     }
diff --git a/charts/feature-integrations/templates/_helpers.tpl b/charts/feature-integrations/templates/_helpers.tpl
index 273f4a856..04e4c6b70 100644
--- a/charts/feature-integrations/templates/_helpers.tpl
+++ b/charts/feature-integrations/templates/_helpers.tpl
@@ -19,3 +19,11 @@ If release name contains chart name it will be used as a full name.
 {{ define "helper.alloy_name" }}
 {{- . | lower | replace "-" "_" -}}
 {{ end }}
+
+{{- define "escape_label" -}}
+{{ . | replace "-" "_" | replace "." "_" | replace "/" "_" }}
+{{- end }}
+
+{{- define "pod_label" -}}
+{{ printf "__meta_kubernetes_pod_label_%s" (include "escape_label" .) }}
+{{- end }}
diff --git a/charts/feature-integrations/templates/_integration_alloy.tpl b/charts/feature-integrations/templates/_integration_alloy.tpl
index 102ab4ac6..5a4227168 100644
--- a/charts/feature-integrations/templates/_integration_alloy.tpl
+++ b/charts/feature-integrations/templates/_integration_alloy.tpl
@@ -288,7 +288,7 @@ declare "alloy_integration" {
     }
   }
   {{- range $instance := $.Values.alloy.instances }}
-    {{- include "integrations.alloy.include.metrics" (dict "integration" $instance "Values" $.Values "Files" $.Files) | nindent 2 }}
+    {{- include "integrations.alloy.include.metrics" (deepCopy $ | merge (dict "integration" $instance)) | nindent 2 }}
   {{- end }}
 }
 {{- end }}
@@ -297,7 +297,7 @@ declare "alloy_integration" {
 {{/* Inputs: integration (Alloy integration definition), Values (all values), Files (Files object) */}}
 {{- define "integrations.alloy.include.metrics" }}
 {{- $defaultValues := "integrations/alloy-values.yaml" | .Files.Get | fromYaml }}
-{{- with merge .integration $defaultValues }}
+{{- with deepCopy .integration | merge $defaultValues }}
 {{- $metricAllowList := include "integrations.alloy.allowList" (dict "integration" . "Files" $.Files) }}
 {{- $metricDenyList := .excludeMetrics }}
 {{- $labelSelectors := list }}
diff --git a/charts/feature-integrations/templates/_integration_cert-manager.tpl b/charts/feature-integrations/templates/_integration_cert-manager.tpl
index 99a648647..43f9c27b6 100644
--- a/charts/feature-integrations/templates/_integration_cert-manager.tpl
+++ b/charts/feature-integrations/templates/_integration_cert-manager.tpl
@@ -11,7 +11,7 @@ declare "cert_manager_integration" {
   {{- include "alloyModules.load" (deepCopy $ | merge (dict "name" "cert_manager" "path" "modules/kubernetes/cert-manager/metrics.alloy")) | nindent 2 }}
 
   {{- range $instance := (index $.Values "cert-manager").instances }}
-    {{- include "integrations.cert-manager.include.metrics" (dict "integration" $instance "Values" $.Values "Files" $.Files) | nindent 2 }}
+    {{- include "integrations.cert-manager.include.metrics" (deepCopy $ | merge (dict "integration" $instance)) | nindent 2 }}
   {{- end }}
 }
 {{- end }}
@@ -20,7 +20,7 @@ declare "cert_manager_integration" {
 {{/* Inputs: integration (cert-manager integration definition), Values (all values), Files (Files object) */}}
 {{- define "integrations.cert-manager.include.metrics" }}
 {{- $defaultValues := "integrations/cert-manager-values.yaml" | .Files.Get | fromYaml }}
-{{- with merge .integration $defaultValues }}
+{{- with deepCopy .integration | merge $defaultValues }}
 {{- $metricAllowList := .metricsTuning.includeMetrics }}
 {{- $metricDenyList := .metricsTuning.excludeMetrics }}
 {{- $labelSelectors := list }}
diff --git a/charts/feature-integrations/templates/_integration_etcd.tpl b/charts/feature-integrations/templates/_integration_etcd.tpl
index 8230721b5..49baf0147 100644
--- a/charts/feature-integrations/templates/_integration_etcd.tpl
+++ b/charts/feature-integrations/templates/_integration_etcd.tpl
@@ -11,7 +11,7 @@ declare "etcd_integration" {
   {{- include "alloyModules.load" (deepCopy $ | merge (dict "name" "etcd" "path" "modules/databases/kv/etcd/metrics.alloy")) | nindent 2 }}
 
   {{- range $instance := (index $.Values "etcd").instances }}
-    {{- include "integrations.etcd.include.metrics" (dict "integration" $instance "Values" $.Values "Files" $.Files) | nindent 2 }}
+    {{- include "integrations.etcd.include.metrics" (deepCopy $ | merge (dict "integration" $instance)) | nindent 2 }}
   {{- end }}
 }
 {{- end }}
@@ -20,7 +20,7 @@ declare "etcd_integration" {
 {{/* Inputs: integration (etcd integration definition), Values (all values), Files (Files object) */}}
 {{- define "integrations.etcd.include.metrics" }}
 {{- $defaultValues := "integrations/etcd-values.yaml" | .Files.Get | fromYaml }}
-{{- with merge .integration $defaultValues }}
+{{- with deepCopy .integration | merge $defaultValues }}
 {{- $metricAllowList := .metricsTuning.includeMetrics }}
 {{- $metricDenyList := .metricsTuning.excludeMetrics }}
 {{- $labelSelectors := list }}
diff --git a/charts/feature-integrations/templates/_integration_helpers.tpl b/charts/feature-integrations/templates/_integration_helpers.tpl
index 3b7760f41..ef57a6b05 100644
--- a/charts/feature-integrations/templates/_integration_helpers.tpl
+++ b/charts/feature-integrations/templates/_integration_helpers.tpl
@@ -2,7 +2,7 @@
 {{- define "feature.integrations.configured.metrics" }}
   {{- range $type := (include "integrations.types" .) | fromYamlArray }}
     {{- if (index $.Values $type).instances }}
-      {{- if eq (include (printf "integrations.%s.type.metrics" $type) .) "true" }}
+      {{- if eq (include (printf "integrations.%s.type.metrics" $type) $) "true" }}
 - {{ $type }}
       {{- end }}
     {{- end }}
@@ -13,7 +13,7 @@
 {{- define "feature.integrations.configured.logs" }}
   {{- range $type := (include "integrations.types" .) | fromYamlArray }}
     {{- if (index $.Values $type).instances }}
-      {{- if eq (include (printf "integrations.%s.type.logs" $type) .) "true" }}
+      {{- if eq (include (printf "integrations.%s.type.logs" $type) $) "true" }}
 - {{ $type }}
       {{- end }}
     {{- end }}
diff --git a/charts/feature-integrations/templates/_integration_mysql.tpl b/charts/feature-integrations/templates/_integration_mysql.tpl
new file mode 100644
index 000000000..c941fae11
--- /dev/null
+++ b/charts/feature-integrations/templates/_integration_mysql.tpl
@@ -0,0 +1,36 @@
+{{- define "integrations.mysql.validate" }}
+  {{- range $instance := $.Values.mysql.instances }}
+    {{- include "integrations.mysql.instance.validate" (merge $ (dict "instance" $instance)) | nindent 2 }}
+  {{- end }}
+{{- end }}
+
+{{- define "integrations.mysql.instance.validate" }}
+{{- $defaultValues := "integrations/mysql-values.yaml" | .Files.Get | fromYaml }}
+{{- with merge .instance $defaultValues }}
+{{- if .exporter.enabled }}
+  {{- if and (not .exporter.dataSourceName) (not (and .exporter.dataSource.username .exporter.dataSource.password .exporter.dataSource.host)) }}
+    {{- $msg := list "" "Missing data source details for MySQL exporter." }}
+    {{- $msg = append $msg "Please set:" }}
+    {{- $msg = append $msg "integrations:" }}
+    {{- $msg = append $msg "  mysql:" }}
+    {{- $msg = append $msg "    instances:" }}
+    {{- $msg = append $msg (printf "      - name: %s" .name) }}
+    {{- $msg = append $msg "        exporter:" }}
+    {{- $msg = append $msg "          dataSourceName: \"user:pass@database.namespace.svc:3306\"" }}
+    {{- $msg = append $msg "OR" }}
+    {{- $msg = append $msg "        exporter:" }}
+    {{- $msg = append $msg "          dataSource:" }}
+    {{- $msg = append $msg "            username: user" }}
+    {{- $msg = append $msg "            password: pass" }}
+    {{- $msg = append $msg "            host: database.namespace.svc" }}
+    {{- $msg = append $msg "            port: 3306" }}
+    {{- fail (join "\n" $msg) }}
+  {{- end }}
+{{- end }}
+{{- end }}
+{{- end }}
+
+{{- define "secrets.list.integration.mysql" }}
+- exporter.dataSource.auth.username
+- exporter.dataSource.auth.password
+{{- end }}
diff --git a/charts/feature-integrations/templates/_integration_mysql_logs.tpl b/charts/feature-integrations/templates/_integration_mysql_logs.tpl
new file mode 100644
index 000000000..6cc01dbfe
--- /dev/null
+++ b/charts/feature-integrations/templates/_integration_mysql_logs.tpl
@@ -0,0 +1,82 @@
+{{/* Inputs: . (Values) */}}
+{{- define "integrations.mysql.type.logs" }}
+{{- $defaultValues := "integrations/mysql-values.yaml" | .Files.Get | fromYaml }}
+{{- $logsEnabled := false }}
+{{- range $instance := .Values.mysql.instances }}
+  {{- with merge $instance $defaultValues (dict "type" "integration.mysql") }}
+    {{- $logsEnabled = or $logsEnabled $instance.logs.enabled }}
+  {{- end }}
+{{- end }}
+{{- $logsEnabled -}}
+{{- end }}
+
+{{- define "integrations.mysql.logs.discoveryRules" }}
+{{- range $instance := $.Values.mysql.instances }}
+{{- if $instance.logs.enabled }}
+{{- $labelList := list }}
+{{- $valueList := list }}
+{{- $selectors := dict "app.kubernetes.io/name" "mysql" "app.kubernetes.io/instance" $instance.name }}
+{{- if $instance.logs.labelSelectors }}
+  {{- $selectors = $instance.logs.labelSelectors }}
+{{- end }}
+
+{{- range (keys $selectors) }}
+  {{- $labelList = append $labelList (include "pod_label" .) -}}
+  {{- $valueList = append $valueList (index $selectors .) -}}
+{{- end }}
+
+{{- if $instance.logs.enabled }}
+rule {
+  source_labels = {{ $labelList | toJson }}
+  separator = ";"
+  regex = {{ $valueList | join ";" | quote }}
+  target_label = "integration"
+  replacement = "mysql"
+}
+rule {
+  source_labels = {{ $labelList | toJson }}
+  separator = ";"
+  regex = {{ $valueList | join ";" | quote }}
+  target_label = "instance"
+  replacement = {{ $instance.name | quote }}
+}
+{{- end }}
+{{- end }}
+{{- end }}
+{{- end }}
+
+{{- define "integrations.mysql.logs.processingStage" }}
+{{- if eq (include "integrations.mysql.type.logs" .) "true" }}
+// Integration: MySQL
+stage.match {
+  selector = "{integration=\"mysql\"}"
+
+  stage.regex {
+    expression = `(?P<timestamp>.+) (?P<thread>[\d]+) \[(?P<label>.+?)\]( \[(?P<err_code>.+?)\] \[(?P<subsystem>.+?)\])? (?P<msg>.+)`
+  }
+
+  stage.labels {
+    values = {
+      level = "label",
+      err_code = "err_code",
+      subsystem = "subsystem",
+    }
+  }
+
+  stage.drop {
+    expression = "^ *$"
+    drop_counter_reason = "drop empty lines"
+  }
+
+  stage.static_labels {
+    values = {
+      job = "integrations/mysql",
+    }
+  }
+
+  stage.label_drop {
+    values = ["integration"]
+  }
+}
+{{- end }}
+{{- end }}
diff --git a/charts/feature-integrations/templates/_integration_mysql_metrics.tpl b/charts/feature-integrations/templates/_integration_mysql_metrics.tpl
new file mode 100644
index 000000000..ca08fddea
--- /dev/null
+++ b/charts/feature-integrations/templates/_integration_mysql_metrics.tpl
@@ -0,0 +1,77 @@
+{{- define "integrations.mysql.type.metrics" }}true{{- end }}
+
+{{- define "integrations.mysql.module.metrics" }}
+declare "mysql_integration" {
+  argument "metrics_destinations" {
+    comment = "Must be a list of metric destinations where collected metrics should be forwarded to"
+  }
+  {{- range $instance := $.Values.mysql.instances }}
+    {{- include "integrations.mysql.include.metrics" (deepCopy $ | merge (dict "instance" $instance)) | nindent 2 }}
+  {{- end }}
+}
+{{- end }}
+
+{{- define "integrations.mysql.include.metrics" }}
+{{- $defaultValues := "integrations/mysql-values.yaml" | .Files.Get | fromYaml }}
+{{- with merge .instance $defaultValues (dict "type" "integration.mysql") }}
+{{- if eq (include "secrets.usesKubernetesSecret" .) "true" }}
+  {{- include "secret.alloy" (deepCopy $ | merge (dict "object" .)) | nindent 0 }}
+{{- end }}
+prometheus.exporter.mysql {{ include "helper.alloy_name" .name | quote }} {
+{{- if .exporter.dataSourceName }}
+  data_source_name  = {{ .exporter.dataSourceName | quote }}
+{{- else }}
+  {{- if eq (include "secrets.usesSecret" (dict "object" . "key" "exporter.dataSource.auth.username")) "true" }}
+    {{- if eq (include "secrets.usesSecret" (dict "object" . "key" "exporter.dataSource.auth.password")) "true" }}
+  data_source_name = string.format("%s:%s@(%s:%d)/",
+    {{ include "secrets.read" (dict "object" . "key" "exporter.dataSource.auth.username" "nonsensitive" true) }},
+    {{ include "secrets.read" (dict "object" . "key" "exporter.dataSource.auth.password") }},
+    {{ .exporter.dataSource.host | quote }},
+    {{ .exporter.dataSource.port | int }},
+  )
+    {{- else }}
+  data_source_name = string.format("%s@(%s:%d)/",
+    {{ include "secrets.read" (dict "object" . "key" "exporter.dataSource.auth.username" "nonsensitive" true) }},
+    {{ .exporter.dataSource.host | quote }},
+    {{ .exporter.dataSource.port | int }},
+  )
+    {{- end }}
+  {{- else }}
+  data_source_name = string.format("%s:%d/", {{ .exporter.dataSource.host | quote }}, {{ .exporter.dataSource.port | int }})
+  {{- end }}
+{{- end }}
+  enable_collectors = {{ .exporter.collectors | toJson }}
+}
+
+{{- $metricAllowList := .metricsTuning.includeMetrics }}
+{{- $metricDenyList := .metricsTuning.excludeMetrics }}
+prometheus.scrape {{ include "helper.alloy_name" .name | quote }} {
+  targets    = prometheus.exporter.mysql.{{ include "helper.alloy_name" .name }}.targets
+  job_name   = "integration/mysql"
+  forward_to = [prometheus.relabel.{{ include "helper.alloy_name" .name }}.receiver]
+}
+
+prometheus.relabel {{ include "helper.alloy_name" .name | quote }} {
+  max_cache_size = {{ .maxCacheSize | default $.Values.global.maxCacheSize | int }}
+  rule {
+    target_label = "instance"
+    replacement = {{ .name | quote }}
+  }
+{{- if $metricAllowList }}
+  rule {
+    source_labels = ["__name__"]
+    regex = "up|{{ $metricAllowList | fromYamlArray | join "|" }}"
+    action = "keep"
+  }
+{{- end }}
+{{- if $metricDenyList }}
+  rule {
+    source_labels = ["__name__"]
+    regex = {{ $metricDenyList | join "|" | quote }}
+    action = "drop"
+  }
+{{- end }}
+  forward_to = argument.metrics_destinations.value
+}
+{{- end }}
+{{- end }}
diff --git a/charts/feature-integrations/templates/_integration_types.tpl b/charts/feature-integrations/templates/_integration_types.tpl
index ffd5ca59a..ba396daed 100644
--- a/charts/feature-integrations/templates/_integration_types.tpl
+++ b/charts/feature-integrations/templates/_integration_types.tpl
@@ -3,4 +3,5 @@
 - alloy
 - cert-manager
 - etcd
+- mysql
 {{- end -}}
diff --git a/charts/feature-integrations/templates/configmap.yaml b/charts/feature-integrations/templates/configmap.yaml
index 9a042761f..3b6f7e0fd 100644
--- a/charts/feature-integrations/templates/configmap.yaml
+++ b/charts/feature-integrations/templates/configmap.yaml
@@ -1,4 +1,6 @@
 {{- if .Values.deployAsConfigMap }}
+{{- $metricIntegrations := include "feature.integrations.configured.metrics" . | fromYamlArray }}
+{{- $logIntegrations := include "feature.integrations.configured.logs" . | fromYamlArray }}
 ---
 apiVersion: v1
 kind: ConfigMap
@@ -6,10 +8,28 @@ metadata:
   name: {{ include "integrations.fullname" . }}
   namespace: {{ .Release.Namespace }}
 data:
+{{- if $metricIntegrations }}
   metrics.alloy: |-
-{{- range $type := (include "integrations.types" . | fromYamlArray) }}
-  {{- if (index $.Values $type).instances }}
-    {{- include (printf "integrations.%s.module.metrics" $type) (dict "Values" $.Values "Files" $.Files) | indent 4 }}
+{{- range $integration := $metricIntegrations }}
+  {{- if (index $.Values $integration).instances }}
+    {{- include (printf "integrations.%s.module.metrics" $integration) $ | indent 4 }}
   {{- end }}
 {{- end }}
 {{- end }}
+{{- if $logIntegrations }}
+  logs.alloy: |-
+    // Integration rules
+    discovery.relabel "test" {
+{{- range $integration := $logIntegrations }}
+  {{- include (printf "integrations.%s.logs.discoveryRules" $integration) $ | indent 6 }}
+{{- end }}
+    }
+
+    // Processing stages
+    loki.process "test" {
+{{- range $integration := $logIntegrations }}
+  {{- include (printf "integrations.%s.logs.processingStage" $integration) $ | indent 6 }}
+{{- end }}
+    }
+{{- end }}
+{{- end }}
diff --git a/charts/feature-integrations/templates/mysql-secret.yaml b/charts/feature-integrations/templates/mysql-secret.yaml
new file mode 100644
index 000000000..6a425fc18
--- /dev/null
+++ b/charts/feature-integrations/templates/mysql-secret.yaml
@@ -0,0 +1,19 @@
+{{- range $instance := .Values.mysql.instances }}
+  {{- $instance = merge $instance (dict "type" "integration.mysql") }}
+  {{- if eq (include "secrets.shouldCreateKubernetesSecret" $instance ) "true" }}
+---
+apiVersion: v1
+kind: Secret
+metadata:
+  name: {{ include "secrets.kubernetesSecretName" (deepCopy $ | merge (dict "object" $instance)) | quote }}
+  namespace: {{ include "secrets.kubernetesSecretNamespace" (deepCopy $ | merge (dict "object" $instance)) | quote }}
+stringData:
+{{- $secrets := include "secrets.list.integration.mysql" $instance | fromYamlArray }}
+{{- range $secret := $secrets }}
+  {{- $value := include "secrets.getSecretValue" (dict "object" $instance "key" $secret) -}}
+  {{- if $value }}
+  {{ include "secrets.getSecretKey" (dict "object" $instance "key" $secret) }}: {{ $value | quote }}
+  {{- end }}
+{{- end }}
+  {{- end -}}
+{{- end -}}
diff --git a/charts/feature-integrations/templates/secrets/_helpers.tpl b/charts/feature-integrations/templates/secrets/_helpers.tpl
new file mode 100644
index 000000000..49188bcd2
--- /dev/null
+++ b/charts/feature-integrations/templates/secrets/_helpers.tpl
@@ -0,0 +1,143 @@
+{{/* Helper function to return the auth type, defaulting to none */}}
+{{/* Inputs: . (user of the secret, needs name, secret, auth) */}}
+{{- define "secrets.authType" }}
+{{- if hasKey . "auth" }}{{ .auth.type | default "none" }}{{ else }}none{{ end }}
+{{- end }}
+
+{{/* Helper function to determine the secret type */}}
+{{/* Inputs: . (user of the secret, needs name, secret, auth) */}}
+{{- define "secrets.secretType" }}
+{{- if hasKey . "secret" }}
+  {{- if .secret.embed -}}embedded
+  {{- else if eq .secret.create false -}}external
+  {{- end }}
+{{- else -}}
+create
+{{- end }}
+{{- end }}
+
+{{/* Determine if a ___From field has been defined for a secret value */}}
+{{/* Inputs: object (user of the secret, needs name, secret, auth), key (path to secret value) */}}
+{{- define "secrets.getSecretFromRef" -}}
+{{- $value := .object -}}
+{{- range $pathPart := (regexSplit "\\." (printf "%sFrom" .key) -1) -}} {{/* "path.to.auth.password" --> ["path", "to", "auth" "passwordFrom"] */}}
+{{- if hasKey $value $pathPart -}}
+  {{- $value = (index $value $pathPart) -}}
+{{- else -}}
+  {{- $value = "" -}}
+  {{- break -}}
+{{- end -}}
+{{- end -}}
+{{- $value -}}
+{{- end -}}
+
+{{/*Determine the key to access a secret value within a secret component*/}}
+{{/* Inputs: object (user of the secret, needs name, secret, auth), key (path to secret value) */}}
+{{- define "secrets.getSecretKey" -}}
+{{- $value := .object -}}
+{{- $defaultKey := (( regexSplit "\\." .key -1) | last) -}}             {{/* "path.to.auth.password" --> "password" */}}
+{{- range $pathPart := (regexSplit "\\." (printf "%sKey" .key) -1) -}}  {{/* "path.to.auth.password" --> ["path", "to", "auth" "passwordKey"] */}}
+{{- if hasKey $value $pathPart -}}
+  {{- $value = (index $value $pathPart) -}}
+{{- else -}}
+  {{- $value = $defaultKey -}}
+  {{- break -}}
+{{- end -}}
+{{- end -}}
+{{- $value -}}
+{{- end -}}
+
+{{/*Determine the path to the secret value*/}}
+{{/* Inputs: object (user of the secret, needs name, secret, auth), key (path to secret value) */}}
+{{- define "secrets.getSecretValue" }}
+{{- $value := .object -}}
+{{- range $pathPart := (regexSplit "\\." .key -1) -}}  {{/* "path.to.auth.password" --> ["path", "to", "auth" "password"] */}}
+{{- if hasKey $value $pathPart -}}
+  {{- $value = (index $value $pathPart) -}}
+{{- else -}}
+  {{- $value = "" -}}
+  {{- break -}}
+{{- end -}}
+{{- end -}}
+{{- $value -}}
+{{- end }}
+
+{{/* Build the alloy command to read a secret value */}}
+{{/* Inputs: object (user of the secret, needs name, secret, auth), key (path to secret value), nonsensitive */}}
+{{- define "secrets.read" }}
+{{- $credRef := include "secrets.getSecretFromRef" . -}}
+{{- if $credRef -}}
+{{ $credRef }}
+{{- else if eq (include "secrets.secretType" .object) "embedded" -}}
+{{ include "secrets.getSecretValue" (dict "object" .object "key" .key) | quote }}
+{{- else if eq (include "secrets.usesKubernetesSecret" .object) "true" -}}
+{{- $credKey := include "secrets.getSecretKey" (dict "object" .object "key" .key) -}}
+{{- if .nonsensitive -}}
+nonsensitive(remote.kubernetes.secret.{{ include "helper.alloy_name" .object.name }}.data[{{ $credKey | quote }}])
+{{- else -}}
+remote.kubernetes.secret.{{ include "helper.alloy_name" .object.name }}.data[{{ $credKey | quote }}]
+{{- end -}}
+{{- end -}}
+{{- end -}}
+
+{{/* Determines if the object will reference a secret value */}}
+{{/* Inputs: object (user of the secret, needs name, secret, auth), key (path to secret value), nonsensitive */}}
+{{- define "secrets.usesSecret" -}}
+{{- if eq (include "secrets.read" .) "" }}false{{- else -}}true{{- end -}}
+{{- end -}}
+
+{{/* Determines if the object will reference a Kubernetes secret */}}
+{{/* Inputs: . (user of the secret, needs name, secret, auth) */}}
+{{- define "secrets.usesKubernetesSecret" -}}
+{{- $secretType := (include "secrets.secretType" .) }}
+{{- if eq $secretType "embedded" -}}false
+{{- else -}}
+  {{- $usesK8sSecret := false }}
+  {{- range $secret := include (printf "secrets.list.%s" .type) . | fromYamlArray }}
+    {{- $ref := include "secrets.getSecretFromRef" (dict "object" $ "key" $secret) -}}
+    {{- $key := include "secrets.getSecretKey" (dict "object" $ "key" $secret) -}}
+    {{- $value := include "secrets.getSecretValue" (dict "object" $ "key" $secret) -}}
+    {{- if or (and (eq $secretType "external") $key) (and $value (not $ref)) }}
+      {{- $usesK8sSecret = true }}
+    {{- end }}
+  {{- end }}
+{{- $usesK8sSecret -}}
+{{- end -}}
+{{- end -}}
+
+{{/* Determines if the object will need to create a Kubernetes secret. NOTE that this object should be before merging with default values */}}
+{{/* Inputs: object (user of the secret, needs name, secret, auth) */}}
+{{- define "secrets.shouldCreateKubernetesSecret" -}}
+{{- if eq (include "secrets.usesKubernetesSecret" .) "false" }}false
+{{- else if and (hasKey . "secret") (hasKey .secret "create") -}}
+{{ .secret.create }}
+{{- else -}}
+true
+{{- end -}}
+{{- end -}}
+
+{{/* This returns the Kubernetes Secret name for this destination */}}
+{{/* Inputs: $ (top level helm data) object (user of the secret, needs name, secret, auth) */}}
+{{- define "secrets.kubernetesSecretName" -}}
+{{- if and (hasKey .object "secret") (hasKey .object.secret "name") (not (empty .object.secret.name)) -}}
+{{ .object.secret.name }}
+{{- else -}}
+
+{{- if contains .Chart.Name .Release.Name }}
+{{- printf "%s-%s" .object.name .Release.Name | trunc 63 | trimSuffix "-" | lower -}}
+{{- else }}
+{{- printf "%s-%s-%s" .object.name .Release.Name .Chart.Name | trunc 63 | trimSuffix "-" | lower -}}
+{{- end }}
+
+{{- end }}
+{{- end }}
+
+{{/* This returns the Kubernetes Secret namespace for this destination */}}
+{{/* Inputs: $ (top level helm data) object (user of the secret, needs name, secret, auth) */}}
+{{- define "secrets.kubernetesSecretNamespace" -}}
+{{- if and (hasKey .object "secret") (hasKey .object.secret "namespace") (not (empty .object.secret.namespace)) -}}
+{{- .object.secret.namespace -}}
+{{- else -}}
+{{- .Release.Namespace -}}
+{{- end }}
+{{- end }}
diff --git a/charts/feature-integrations/templates/secrets/_secret.alloy.tpl b/charts/feature-integrations/templates/secrets/_secret.alloy.tpl
new file mode 100644
index 000000000..6a002fe44
--- /dev/null
+++ b/charts/feature-integrations/templates/secrets/_secret.alloy.tpl
@@ -0,0 +1,8 @@
+{{/* This builds the remote.kubernetes.secret component for this destination */}}
+{{/* Inputs: $ (top level object) object (user of the secret, needs name, secret, auth) */}}
+{{ define "secret.alloy" }}
+remote.kubernetes.secret {{ include "helper.alloy_name" .object.name | quote }} {
+  name      = {{ include "secrets.kubernetesSecretName" . | quote }}
+  namespace = {{ include "secrets.kubernetesSecretNamespace" . | quote }}
+}
+{{ end }}
diff --git a/charts/feature-integrations/test-values.yaml b/charts/feature-integrations/test-values.yaml
new file mode 100644
index 000000000..9dabf58e0
--- /dev/null
+++ b/charts/feature-integrations/test-values.yaml
@@ -0,0 +1,17 @@
+#deployAsConfigMap: true
+mysql:
+  instances:
+    - name: test-db
+      exporter:
+        dataSource:
+          host: database.test.svc
+    - name: staging-db
+      exporter:
+        dataSourceName: "root:password@database.staging.svc:3306/"
+    - name: prod-db
+      exporter:
+        dataSource:
+          host: database.prod.svc
+          auth:
+            username: db-admin
+            password: db-password
diff --git a/charts/feature-integrations/tests/mysql_test.yaml b/charts/feature-integrations/tests/mysql_test.yaml
new file mode 100644
index 000000000..2f9640d95
--- /dev/null
+++ b/charts/feature-integrations/tests/mysql_test.yaml
@@ -0,0 +1,258 @@
+# yamllint disable rule:document-start rule:line-length rule:trailing-spaces
+suite: Test MySQL integration
+templates:
+  - configmap.yaml
+  - mysql-secret.yaml
+tests:
+  - it: should create the MySQL config
+    set:
+      deployAsConfigMap: true
+      mysql:
+        instances:
+          - name: my-database
+            exporter:
+              dataSource:
+                host: my-db.mysql.svc
+                auth:
+                  username: db-admin
+                  password: db-password
+    asserts:
+      - template: configmap.yaml
+        isKind:
+          of: ConfigMap
+      - template: configmap.yaml
+        equal:
+          path: data["metrics.alloy"]
+          value: |-
+            declare "mysql_integration" {
+              argument "metrics_destinations" {
+                comment = "Must be a list of metric destinations where collected metrics should be forwarded to"
+              }
+            
+            
+              remote.kubernetes.secret "my_database" {
+                name      = "my-database-release-name-k8s-monitoring-feature-integrations"
+                namespace = "NAMESPACE"
+              }
+            
+              prometheus.exporter.mysql "my_database" {
+                data_source_name = string.format("%s:%s@(%s:%d)/",
+                  nonsensitive(remote.kubernetes.secret.my_database.data["username"]),
+                  remote.kubernetes.secret.my_database.data["password"],
+                  "my-db.mysql.svc",
+                  3306,
+                )
+                enable_collectors = ["heartbeat","mysql.user"]
+              }
+              prometheus.scrape "my_database" {
+                targets    = prometheus.exporter.mysql.my_database.targets
+                job_name   = "integration/mysql"
+                forward_to = [prometheus.relabel.my_database.receiver]
+              }
+          
+              prometheus.relabel "my_database" {
+                max_cache_size = 100000
+                rule {
+                  target_label = "instance"
+                  replacement = "my-database"
+                }
+                forward_to = argument.metrics_destinations.value
+              }
+            }
+      - template: mysql-secret.yaml
+        documentIndex: 0
+        containsDocument:
+          apiVersion: v1
+          kind: Secret
+          name: my-database-release-name-k8s-monitoring-feature-integrations
+          namespace: NAMESPACE
+      - template: mysql-secret.yaml
+        equal:
+          path: stringData.username
+          value: db-admin
+      - template: mysql-secret.yaml
+        equal:
+          path: stringData.password
+          value: db-password
+
+  - it: works with multiple MySQL Instances
+    set:
+      deployAsConfigMap: true
+      mysql:
+        instances:
+          - name: test-db
+            exporter:
+              dataSource:
+                host: database.test.svc
+          - name: staging-db
+            exporter:
+              dataSourceName: "root:password@database.staging.svc:3306/"
+          - name: prod-db
+            exporter:
+              dataSource:
+                host: database.prod.svc
+                auth:
+                  username: db-admin
+                  password: db-password
+    asserts:
+      - template: configmap.yaml
+        isKind:
+          of: ConfigMap
+      - template: configmap.yaml
+        equal:
+          path: data["metrics.alloy"]
+          value: |-
+            declare "mysql_integration" {
+              argument "metrics_destinations" {
+                comment = "Must be a list of metric destinations where collected metrics should be forwarded to"
+              }
+            
+              prometheus.exporter.mysql "test_db" {
+                data_source_name = string.format("%s:%d/", "database.test.svc", 3306)
+                enable_collectors = ["heartbeat","mysql.user"]
+              }
+              prometheus.scrape "test_db" {
+                targets    = prometheus.exporter.mysql.test_db.targets
+                job_name   = "integration/mysql"
+                forward_to = [prometheus.relabel.test_db.receiver]
+              }
+            
+              prometheus.relabel "test_db" {
+                max_cache_size = 100000
+                rule {
+                  target_label = "instance"
+                  replacement = "test-db"
+                }
+                forward_to = argument.metrics_destinations.value
+              }
+            
+              prometheus.exporter.mysql "staging_db" {
+                data_source_name  = "root:password@database.staging.svc:3306/"
+                enable_collectors = ["heartbeat","mysql.user"]
+              }
+              prometheus.scrape "staging_db" {
+                targets    = prometheus.exporter.mysql.staging_db.targets
+                job_name   = "integration/mysql"
+                forward_to = [prometheus.relabel.staging_db.receiver]
+              }
+            
+              prometheus.relabel "staging_db" {
+                max_cache_size = 100000
+                rule {
+                  target_label = "instance"
+                  replacement = "staging-db"
+                }
+                forward_to = argument.metrics_destinations.value
+              }
+            
+            
+              remote.kubernetes.secret "prod_db" {
+                name      = "prod-db-release-name-k8s-monitoring-feature-integrations"
+                namespace = "NAMESPACE"
+              }
+            
+              prometheus.exporter.mysql "prod_db" {
+                data_source_name = string.format("%s:%s@(%s:%d)/",
+                  nonsensitive(remote.kubernetes.secret.prod_db.data["username"]),
+                  remote.kubernetes.secret.prod_db.data["password"],
+                  "database.prod.svc",
+                  3306,
+                )
+                enable_collectors = ["heartbeat","mysql.user"]
+              }
+              prometheus.scrape "prod_db" {
+                targets    = prometheus.exporter.mysql.prod_db.targets
+                job_name   = "integration/mysql"
+                forward_to = [prometheus.relabel.prod_db.receiver]
+              }
+            
+              prometheus.relabel "prod_db" {
+                max_cache_size = 100000
+                rule {
+                  target_label = "instance"
+                  replacement = "prod-db"
+                }
+                forward_to = argument.metrics_destinations.value
+              }
+            }
+      - template: mysql-secret.yaml
+        hasDocuments:
+          count: 1  # Only one secret should be created
+      - template: mysql-secret.yaml
+        documentIndex: 0
+        containsDocument:
+          apiVersion: v1
+          kind: Secret
+          name: prod-db-release-name-k8s-monitoring-feature-integrations
+          namespace: NAMESPACE
+      - template: mysql-secret.yaml
+        equal:
+          path: stringData.username
+          value: db-admin
+      - template: mysql-secret.yaml
+        equal:
+          path: stringData.password
+          value: db-password
+
+  - it: works when referencing the MySQL Secret
+    set:
+      deployAsConfigMap: true
+      mysql:
+        instances:
+          - name: test-database
+            exporter:
+              dataSource:
+                host: test-database-mysql.mysql.svc
+                auth:
+                  usernameFrom: "\"root\""
+                  passwordKey: mysql-root-password
+            secret:
+              create: false
+              name: test-database-mysql
+              namespace: mysql
+    asserts:
+      - template: configmap.yaml
+        isKind:
+          of: ConfigMap
+      - template: configmap.yaml
+        equal:
+          path: data["metrics.alloy"]
+          value: |-
+            declare "mysql_integration" {
+              argument "metrics_destinations" {
+                comment = "Must be a list of metric destinations where collected metrics should be forwarded to"
+              }
+            
+            
+              remote.kubernetes.secret "test_database" {
+                name      = "test-database-mysql"
+                namespace = "mysql"
+              }
+            
+              prometheus.exporter.mysql "test_database" {
+                data_source_name = string.format("%s:%s@(%s:%d)/",
+                  "root",
+                  remote.kubernetes.secret.test_database.data["mysql-root-password"],
+                  "test-database-mysql.mysql.svc",
+                  3306,
+                )
+                enable_collectors = ["heartbeat","mysql.user"]
+              }
+              prometheus.scrape "test_database" {
+                targets    = prometheus.exporter.mysql.test_database.targets
+                job_name   = "integration/mysql"
+                forward_to = [prometheus.relabel.test_database.receiver]
+              }
+            
+              prometheus.relabel "test_database" {
+                max_cache_size = 100000
+                rule {
+                  target_label = "instance"
+                  replacement = "test-database"
+                }
+                forward_to = argument.metrics_destinations.value
+              }
+            }
+      - template: mysql-secret.yaml
+        hasDocuments:
+          count: 0  # No secret should be created
diff --git a/charts/feature-integrations/values.schema.json b/charts/feature-integrations/values.schema.json
index 4c4b9fbbb..5dbfc19c9 100644
--- a/charts/feature-integrations/values.schema.json
+++ b/charts/feature-integrations/values.schema.json
@@ -54,6 +54,14 @@
                 }
             }
         },
+        "mysql": {
+            "type": "object",
+            "properties": {
+                "instances": {
+                    "type": "array"
+                }
+            }
+        },
         "nameOverride": {
             "type": "string"
         }
@@ -197,6 +205,111 @@
                 }
             }
         },
+        "mysql-integration": {
+            "type": "object",
+            "properties": {
+                "exporter": {
+                    "type": "object",
+                    "properties": {
+                        "collectors": {
+                            "type": "array",
+                            "items": {
+                                "type": "string"
+                            }
+                        },
+                        "dataSource": {
+                            "type": "object",
+                            "properties": {
+                                "auth": {
+                                    "type": "object",
+                                    "properties": {
+                                        "password": {
+                                            "type": "string"
+                                        },
+                                        "passwordFrom": {
+                                            "type": "string"
+                                        },
+                                        "passwordKey": {
+                                            "type": "string"
+                                        },
+                                        "username": {
+                                            "type": "string"
+                                        },
+                                        "usernameFrom": {
+                                            "type": "string"
+                                        },
+                                        "usernameKey": {
+                                            "type": "string"
+                                        }
+                                    }
+                                },
+                                "host": {
+                                    "type": "string"
+                                },
+                                "port": {
+                                    "type": "integer"
+                                }
+                            }
+                        },
+                        "dataSourceName": {
+                            "type": "string"
+                        }
+                    }
+                },
+                "logs": {
+                    "type": "object",
+                    "properties": {
+                        "enabled": {
+                            "type": "boolean"
+                        },
+                        "labelSelectors": {
+                            "type": "object"
+                        }
+                    }
+                },
+                "maxCacheSize": {
+                    "type": "null"
+                },
+                "metricsTuning": {
+                    "type": "object",
+                    "properties": {
+                        "excludeMetrics": {
+                            "type": "array"
+                        },
+                        "includeMetrics": {
+                            "type": "array"
+                        }
+                    }
+                },
+                "name": {
+                    "type": "string"
+                },
+                "scrapeInterval": {
+                    "type": "null"
+                },
+                "secret": {
+                    "type": "object",
+                    "properties": {
+                        "create": {
+                            "type": "null"
+                        },
+                        "embed": {
+                            "type": "boolean"
+                        },
+                        "name": {
+                            "type": "string"
+                        },
+                        "namespace": {
+                            "type": "string"
+                        }
+                    }
+                },
+                "type": {
+                    "type": "string",
+                    "const": "mysql"
+                }
+            }
+        },
         "integration-list": {
             "type": "array",
             "items": {
@@ -209,6 +322,9 @@
                     },
                     {
                         "$ref": "#/definitions/etcd-integration"
+                    },
+                    {
+                        "$ref": "#/definitions/mysql-integration"
                     }
                 ]
             }
diff --git a/charts/feature-integrations/values.yaml b/charts/feature-integrations/values.yaml
index 3dfa68a31..036e2f01d 100644
--- a/charts/feature-integrations/values.yaml
+++ b/charts/feature-integrations/values.yaml
@@ -41,5 +41,10 @@ cert-manager:
 etcd:
   instances: []
 
+# -- Scrape metrics from MySQL
+# @section -- Integration: MySQL
+mysql:
+  instances: []
+
 # @ignore
 deployAsConfigMap: false
diff --git a/charts/feature-pod-logs/templates/_common.alloy.tpl b/charts/feature-pod-logs/templates/_common.alloy.tpl
deleted file mode 100644
index e69de29bb..000000000
diff --git a/charts/feature-pod-logs/templates/_common_log_processing.alloy.tpl b/charts/feature-pod-logs/templates/_common_log_processing.alloy.tpl
index 1809763cb..b0c8038d4 100644
--- a/charts/feature-pod-logs/templates/_common_log_processing.alloy.tpl
+++ b/charts/feature-pod-logs/templates/_common_log_processing.alloy.tpl
@@ -37,8 +37,8 @@ loki.process "pod_logs" {
     ]
   }
 
-{{- if .Values.extraProcessingStages }}
-{{ tpl .Values.extraProcessingStages $ | indent 2 }}
+{{- if .Values.extraLogProcessingStages }}
+{{ tpl .Values.extraLogProcessingStages $ | indent 2 }}
 {{ end }}
   forward_to = argument.logs_destinations.value
 }
diff --git a/charts/k8s-monitoring/Chart.lock b/charts/k8s-monitoring/Chart.lock
index a15ea1825..608532d55 100644
--- a/charts/k8s-monitoring/Chart.lock
+++ b/charts/k8s-monitoring/Chart.lock
@@ -38,5 +38,5 @@ dependencies:
 - name: alloy
   repository: https://grafana.github.io/helm-charts
   version: 0.9.2
-digest: sha256:96e2aabc44df7e2967da85bec1eb82f599d52c8a20319369affdbc38e1f19901
-generated: "2024-11-06T11:07:22.611298-06:00"
+digest: sha256:f5738b270a715d0fd122f5db19a928aceb4470a21314366cd91b8535fbcdbbee
+generated: "2024-11-06T12:28:29.035309-06:00"
diff --git a/charts/k8s-monitoring/Chart.yaml b/charts/k8s-monitoring/Chart.yaml
index 5a59e0bd4..ea9f7a34c 100644
--- a/charts/k8s-monitoring/Chart.yaml
+++ b/charts/k8s-monitoring/Chart.yaml
@@ -36,7 +36,6 @@ dependencies:
     name: k8s-monitoring-feature-integrations
     repository: file://../feature-integrations
     version: 1.0.0
-    condition: integrations.enabled
   - alias: podLogs
     name: k8s-monitoring-feature-pod-logs
     repository: file://../feature-pod-logs
diff --git a/charts/k8s-monitoring/Makefile b/charts/k8s-monitoring/Makefile
index c0af51d58..8f49f3b51 100644
--- a/charts/k8s-monitoring/Makefile
+++ b/charts/k8s-monitoring/Makefile
@@ -152,6 +152,7 @@ build: README.md alloyModules/LICENSE values.schema.json templates/destinations/
 test: unittest lint-helm lint-configs example-checks
 lint-configs: $(EXAMPLE_ALLOY_FILES)
 	../../scripts/lint-alloy.sh $(EXAMPLE_ALLOY_FILES)
+	rm -rf data-alloy  # Clean up the data-alloy directory, which is created by lint-alloy.sh when it runs Alloy.
 
 lint-helm: build
 	helm repo add grafana https://grafana.github.io/helm-charts
diff --git a/charts/k8s-monitoring/README.md b/charts/k8s-monitoring/README.md
index 811041548..067a42688 100644
--- a/charts/k8s-monitoring/README.md
+++ b/charts/k8s-monitoring/README.md
@@ -325,8 +325,7 @@ podLogs:
 | Key | Type | Default | Description |
 |-----|------|---------|-------------|
 | integrations | object | No integrations enabled | Service Integrations enables gathering telemetry data for common services and applications deployed to Kubernetes. To see the valid options, please see the [Service Integrations documentation](https://github.com/grafana/k8s-monitoring-helm/tree/main/charts/feature-integrations). |
-| integrations.destinations | list | `[]` | The destinations where cluster events will be sent. If empty, all logs-capable destinations will be used. |
-| integrations.enabled | bool | `true` | Enable Service Integrations. |
+| integrations.destinations | list | `[]` | The destinations where integration metrics will be sent. If empty, all metrics-capable destinations will be used. |
 
 ### Features - Pod Logs
 
diff --git a/charts/k8s-monitoring/charts/k8s-monitoring-feature-annotation-autodiscovery-1.0.0.tgz b/charts/k8s-monitoring/charts/k8s-monitoring-feature-annotation-autodiscovery-1.0.0.tgz
index 9d7e75a7c..84bc1b249 100644
Binary files a/charts/k8s-monitoring/charts/k8s-monitoring-feature-annotation-autodiscovery-1.0.0.tgz and b/charts/k8s-monitoring/charts/k8s-monitoring-feature-annotation-autodiscovery-1.0.0.tgz differ
diff --git a/charts/k8s-monitoring/charts/k8s-monitoring-feature-application-observability-1.0.0.tgz b/charts/k8s-monitoring/charts/k8s-monitoring-feature-application-observability-1.0.0.tgz
index 575e66bc6..d2814da49 100644
Binary files a/charts/k8s-monitoring/charts/k8s-monitoring-feature-application-observability-1.0.0.tgz and b/charts/k8s-monitoring/charts/k8s-monitoring-feature-application-observability-1.0.0.tgz differ
diff --git a/charts/k8s-monitoring/charts/k8s-monitoring-feature-cluster-events-1.0.0.tgz b/charts/k8s-monitoring/charts/k8s-monitoring-feature-cluster-events-1.0.0.tgz
index d340fdd29..ff9d8d258 100644
Binary files a/charts/k8s-monitoring/charts/k8s-monitoring-feature-cluster-events-1.0.0.tgz and b/charts/k8s-monitoring/charts/k8s-monitoring-feature-cluster-events-1.0.0.tgz differ
diff --git a/charts/k8s-monitoring/charts/k8s-monitoring-feature-cluster-metrics-1.0.0.tgz b/charts/k8s-monitoring/charts/k8s-monitoring-feature-cluster-metrics-1.0.0.tgz
index 299c1caa4..da02e0ba7 100644
Binary files a/charts/k8s-monitoring/charts/k8s-monitoring-feature-cluster-metrics-1.0.0.tgz and b/charts/k8s-monitoring/charts/k8s-monitoring-feature-cluster-metrics-1.0.0.tgz differ
diff --git a/charts/k8s-monitoring/charts/k8s-monitoring-feature-integrations-1.0.0.tgz b/charts/k8s-monitoring/charts/k8s-monitoring-feature-integrations-1.0.0.tgz
index 6bac4c058..98a73ef45 100644
Binary files a/charts/k8s-monitoring/charts/k8s-monitoring-feature-integrations-1.0.0.tgz and b/charts/k8s-monitoring/charts/k8s-monitoring-feature-integrations-1.0.0.tgz differ
diff --git a/charts/k8s-monitoring/charts/k8s-monitoring-feature-pod-logs-1.0.0.tgz b/charts/k8s-monitoring/charts/k8s-monitoring-feature-pod-logs-1.0.0.tgz
index 10248908b..729d224e8 100644
Binary files a/charts/k8s-monitoring/charts/k8s-monitoring-feature-pod-logs-1.0.0.tgz and b/charts/k8s-monitoring/charts/k8s-monitoring-feature-pod-logs-1.0.0.tgz differ
diff --git a/charts/k8s-monitoring/charts/k8s-monitoring-feature-profiling-1.0.0.tgz b/charts/k8s-monitoring/charts/k8s-monitoring-feature-profiling-1.0.0.tgz
index 6d9ac06d2..bcf022c39 100644
Binary files a/charts/k8s-monitoring/charts/k8s-monitoring-feature-profiling-1.0.0.tgz and b/charts/k8s-monitoring/charts/k8s-monitoring-feature-profiling-1.0.0.tgz differ
diff --git a/charts/k8s-monitoring/charts/k8s-monitoring-feature-prometheus-operator-objects-1.0.0.tgz b/charts/k8s-monitoring/charts/k8s-monitoring-feature-prometheus-operator-objects-1.0.0.tgz
index f3094f919..b4d380da5 100644
Binary files a/charts/k8s-monitoring/charts/k8s-monitoring-feature-prometheus-operator-objects-1.0.0.tgz and b/charts/k8s-monitoring/charts/k8s-monitoring-feature-prometheus-operator-objects-1.0.0.tgz differ
diff --git a/charts/k8s-monitoring/docs/examples/auth/embedded-secrets/alloy-metrics.alloy b/charts/k8s-monitoring/docs/examples/auth/embedded-secrets/alloy-metrics.alloy
index cf97e5fc0..e712e5c50 100644
--- a/charts/k8s-monitoring/docs/examples/auth/embedded-secrets/alloy-metrics.alloy
+++ b/charts/k8s-monitoring/docs/examples/auth/embedded-secrets/alloy-metrics.alloy
@@ -15,6 +15,7 @@ prometheus.remote_write "prometheus" {
     }
     tls_config {
       insecure_skip_verify = false
+      ca_pem = ""
     }
     send_native_histograms = false
     queue_config {
diff --git a/charts/k8s-monitoring/docs/examples/auth/embedded-secrets/alloy-receiver.alloy b/charts/k8s-monitoring/docs/examples/auth/embedded-secrets/alloy-receiver.alloy
index 625f0d0fa..9417dc415 100644
--- a/charts/k8s-monitoring/docs/examples/auth/embedded-secrets/alloy-receiver.alloy
+++ b/charts/k8s-monitoring/docs/examples/auth/embedded-secrets/alloy-receiver.alloy
@@ -15,6 +15,7 @@ prometheus.remote_write "prometheus" {
     }
     tls_config {
       insecure_skip_verify = false
+      ca_pem = ""
     }
     send_native_histograms = false
     queue_config {
diff --git a/charts/k8s-monitoring/docs/examples/auth/embedded-secrets/output.yaml b/charts/k8s-monitoring/docs/examples/auth/embedded-secrets/output.yaml
index 85b147833..717d2802c 100644
--- a/charts/k8s-monitoring/docs/examples/auth/embedded-secrets/output.yaml
+++ b/charts/k8s-monitoring/docs/examples/auth/embedded-secrets/output.yaml
@@ -72,6 +72,7 @@ data:
         }
         tls_config {
           insecure_skip_verify = false
+          ca_pem = ""
         }
         send_native_histograms = false
         queue_config {
@@ -366,6 +367,7 @@ data:
         }
         tls_config {
           insecure_skip_verify = false
+          ca_pem = ""
         }
         send_native_histograms = false
         queue_config {
diff --git a/charts/k8s-monitoring/docs/examples/extra-rules/alloy-logs.alloy b/charts/k8s-monitoring/docs/examples/extra-rules/alloy-logs.alloy
index 64b31d8bb..3d0b891ff 100644
--- a/charts/k8s-monitoring/docs/examples/extra-rules/alloy-logs.alloy
+++ b/charts/k8s-monitoring/docs/examples/extra-rules/alloy-logs.alloy
@@ -127,6 +127,27 @@ declare "pod_logs" {
         "tmp_container_runtime",
       ]
     }
+    stage.json {
+      source = "payload"
+      expressions = {
+        sku = "id",
+        count = "",
+      }
+    }
+    
+    stage.static {
+      values = {
+        site = "lab2",
+      }
+    }
+    
+    stage.labels {
+      values = {
+        sku  = "",
+        count = "",
+      }
+    }
+  
     forward_to = argument.logs_destinations.value
   }
 }
diff --git a/charts/k8s-monitoring/docs/examples/extra-rules/output.yaml b/charts/k8s-monitoring/docs/examples/extra-rules/output.yaml
index cf951ed2e..edacfa731 100644
--- a/charts/k8s-monitoring/docs/examples/extra-rules/output.yaml
+++ b/charts/k8s-monitoring/docs/examples/extra-rules/output.yaml
@@ -709,6 +709,27 @@ data:
             "tmp_container_runtime",
           ]
         }
+        stage.json {
+          source = "payload"
+          expressions = {
+            sku = "id",
+            count = "",
+          }
+        }
+        
+        stage.static {
+          values = {
+            site = "lab2",
+          }
+        }
+        
+        stage.labels {
+          values = {
+            sku  = "",
+            count = "",
+          }
+        }
+      
         forward_to = argument.logs_destinations.value
       }
     }
diff --git a/charts/k8s-monitoring/docs/examples/features/integrations/alloy/alloy-metrics.alloy b/charts/k8s-monitoring/docs/examples/features/integrations/alloy/alloy-metrics.alloy
index dda2b518f..6ed91cec0 100644
--- a/charts/k8s-monitoring/docs/examples/features/integrations/alloy/alloy-metrics.alloy
+++ b/charts/k8s-monitoring/docs/examples/features/integrations/alloy/alloy-metrics.alloy
@@ -311,7 +311,7 @@ declare "alloy_integration" {
   
   alloy_integration_discovery "alloy_metrics" {
     port_name       = "http-metrics"
-    label_selectors = ["app.kubernetes.io/name=alloy-metrics"]
+    label_selectors = ["app.kubernetes.io/name=alloy"]
   }
   
   alloy_integration_scrape  "alloy_metrics" {
diff --git a/charts/k8s-monitoring/docs/examples/features/integrations/alloy/output.yaml b/charts/k8s-monitoring/docs/examples/features/integrations/alloy/output.yaml
index 90855b460..2fd5513d1 100644
--- a/charts/k8s-monitoring/docs/examples/features/integrations/alloy/output.yaml
+++ b/charts/k8s-monitoring/docs/examples/features/integrations/alloy/output.yaml
@@ -336,7 +336,7 @@ data:
       
       alloy_integration_discovery "alloy_metrics" {
         port_name       = "http-metrics"
-        label_selectors = ["app.kubernetes.io/name=alloy-metrics"]
+        label_selectors = ["app.kubernetes.io/name=alloy"]
       }
       
       alloy_integration_scrape  "alloy_metrics" {
diff --git a/charts/k8s-monitoring/docs/examples/features/integrations/mysql/README.md b/charts/k8s-monitoring/docs/examples/features/integrations/mysql/README.md
new file mode 100644
index 000000000..c812eca7d
--- /dev/null
+++ b/charts/k8s-monitoring/docs/examples/features/integrations/mysql/README.md
@@ -0,0 +1,55 @@
+<!--
+(NOTE: Do not edit README.md directly. It is a generated file!)
+(      To make changes, please modify values.yaml or description.txt and run `make examples`)
+-->
+# MySQL Integration
+
+This example shows how to load two MySQL integration instances, which utilize Alloy's [prometheus.exporter.mysql](https://grafana.com/docs/alloy/latest/reference/components/prometheus/prometheus.exporter.mysql/) component
+to scrape metrics from the MySQL database. It also modifies the Pod Logs feature to add special log handling for MySQL
+pods. The username and password for the `prod-db` example are stored in a Kubernetes secret.
+
+## Values
+
+```yaml
+---
+cluster:
+  name: mysql-integration-cluster
+
+destinations:
+  - name: prometheus
+    type: prometheus
+    url: http://prometheus.prometheus.svc:9090/api/v1/write
+  - name: loki
+    type: loki
+    url: http://loki.loki.svc:3100/api/push
+
+integrations:
+  mysql:
+    instances:
+      - name: staging-db
+        exporter:
+          dataSourceName: "root:password@database.staging.svc:3306/"
+        logs:
+          labelSelectors:
+            app.kubernetes.io/instance: staging-db
+
+      - name: prod-db
+        exporter:
+          dataSource:
+            host: database.prod.svc
+            auth:
+              username: db-admin
+              password: db-password
+        logs:
+          labelSelectors:
+            app.kubernetes.io/instance: prod-db
+
+podLogs:
+  enabled: true
+
+alloy-metrics:
+  enabled: true
+
+alloy-logs:
+  enabled: true
+```
diff --git a/charts/k8s-monitoring/docs/examples/features/integrations/mysql/alloy-logs.alloy b/charts/k8s-monitoring/docs/examples/features/integrations/mysql/alloy-logs.alloy
new file mode 100644
index 000000000..cc66111d7
--- /dev/null
+++ b/charts/k8s-monitoring/docs/examples/features/integrations/mysql/alloy-logs.alloy
@@ -0,0 +1,190 @@
+// Destination: loki (loki)
+otelcol.exporter.loki "loki" {
+  forward_to = [loki.write.loki.receiver]
+}
+
+loki.write "loki" {
+  endpoint {
+    url = "http://loki.loki.svc:3100/api/push"
+  }
+  external_labels = {
+    cluster = "mysql-integration-cluster",
+    "k8s_cluster_name" = "mysql-integration-cluster",
+  }
+}
+
+// Feature: Pod Logs
+declare "pod_logs" {
+  argument "logs_destinations" {
+    comment = "Must be a list of log destinations where collected logs should be forwarded to"
+  }
+  
+  discovery.relabel "filtered_pods" {
+    targets = discovery.kubernetes.pods.targets
+    rule {
+      source_labels = ["__meta_kubernetes_namespace"]
+      action = "replace"
+      target_label = "namespace"
+    }
+    rule {
+      source_labels = ["__meta_kubernetes_pod_name"]
+      action = "replace"
+      target_label = "pod"
+    }
+    rule {
+      source_labels = ["__meta_kubernetes_pod_container_name"]
+      action = "replace"
+      target_label = "container"
+    }
+    rule {
+      source_labels = ["__meta_kubernetes_namespace", "__meta_kubernetes_pod_container_name"]
+      separator = "/"
+      action = "replace"
+      replacement = "$1"
+      target_label = "job"
+    }
+  
+    // set the container runtime as a label
+    rule {
+      action = "replace"
+      source_labels = ["__meta_kubernetes_pod_container_id"]
+      regex = "^(\\S+):\\/\\/.+$"
+      replacement = "$1"
+      target_label = "tmp_container_runtime"
+    }
+    rule {
+      source_labels = ["__meta_kubernetes_pod_label_app_kubernetes_io_instance"]
+      separator = ";"
+      regex = "staging-db"
+      target_label = "integration"
+      replacement = "mysql"
+    }
+    rule {
+      source_labels = ["__meta_kubernetes_pod_label_app_kubernetes_io_instance"]
+      separator = ";"
+      regex = "staging-db"
+      target_label = "instance"
+      replacement = "staging-db"
+    }
+    rule {
+      source_labels = ["__meta_kubernetes_pod_label_app_kubernetes_io_instance"]
+      separator = ";"
+      regex = "prod-db"
+      target_label = "integration"
+      replacement = "mysql"
+    }
+    rule {
+      source_labels = ["__meta_kubernetes_pod_label_app_kubernetes_io_instance"]
+      separator = ";"
+      regex = "prod-db"
+      target_label = "instance"
+      replacement = "prod-db"
+    }
+  }
+  
+  discovery.kubernetes "pods" {
+    role = "pod"
+    selectors {
+      role = "pod"
+      field = "spec.nodeName=" + env("HOSTNAME")
+    }
+  }
+  
+  discovery.relabel "filtered_pods_with_paths" {
+    targets = discovery.relabel.filtered_pods.output
+  
+    rule {
+      source_labels = ["__meta_kubernetes_pod_uid", "__meta_kubernetes_pod_container_name"]
+      separator = "/"
+      action = "replace"
+      replacement = "/var/log/pods/*$1/*.log"
+      target_label = "__path__"
+    }
+  }
+  
+  local.file_match "pod_logs" {
+    path_targets = discovery.relabel.filtered_pods_with_paths.output
+  }
+  
+  loki.source.file "pod_logs" {
+    targets    = local.file_match.pod_logs.targets
+    forward_to = [loki.process.pod_logs.receiver]
+  }
+  
+  loki.process "pod_logs" {
+    stage.match {
+      selector = "{tmp_container_runtime=~\"containerd|cri-o\"}"
+      // the cri processing stage extracts the following k/v pairs: log, stream, time, flags
+      stage.cri {}
+  
+      // Set the extract flags and stream values as labels
+      stage.labels {
+        values = {
+          flags  = "",
+          stream  = "",
+        }
+      }
+    }
+  
+    stage.match {
+      selector = "{tmp_container_runtime=\"docker\"}"
+      // the docker processing stage extracts the following k/v pairs: log, stream, time
+      stage.docker {}
+  
+      // Set the extract stream value as a label
+      stage.labels {
+        values = {
+          stream  = "",
+        }
+      }
+    }
+  
+    // Drop the filename label, since it's not really useful in the context of Kubernetes, where we already have cluster,
+    // namespace, pod, and container labels. Drop any structured metadata. Also drop the temporary
+    // container runtime label as it is no longer needed.
+    stage.label_drop {
+      values = [
+        "filename",
+        "tmp_container_runtime",
+      ]
+    }
+    // Integration: MySQL
+    stage.match {
+      selector = "{integration=\"mysql\"}"
+    
+      stage.regex {
+        expression = `(?P<timestamp>.+) (?P<thread>[\d]+) \[(?P<label>.+?)\]( \[(?P<err_code>.+?)\] \[(?P<subsystem>.+?)\])? (?P<msg>.+)`
+      }
+    
+      stage.labels {
+        values = {
+          level = "label",
+          err_code = "err_code",
+          subsystem = "subsystem",
+        }
+      }
+    
+      stage.drop {
+        expression = "^ *$"
+        drop_counter_reason = "drop empty lines"
+      }
+    
+      stage.static_labels {
+        values = {
+          job = "integrations/mysql",
+        }
+      }
+    
+      stage.label_drop {
+        values = ["integration"]
+      }
+    }
+  
+    forward_to = argument.logs_destinations.value
+  }
+}
+pod_logs "feature" {
+  logs_destinations = [
+    loki.write.loki.receiver,
+  ]
+}
diff --git a/charts/k8s-monitoring/docs/examples/features/integrations/mysql/alloy-metrics.alloy b/charts/k8s-monitoring/docs/examples/features/integrations/mysql/alloy-metrics.alloy
new file mode 100644
index 000000000..ab38c0b4b
--- /dev/null
+++ b/charts/k8s-monitoring/docs/examples/features/integrations/mysql/alloy-metrics.alloy
@@ -0,0 +1,142 @@
+// Destination: prometheus (prometheus)
+otelcol.exporter.prometheus "prometheus" {
+  forward_to = [prometheus.remote_write.prometheus.receiver]
+}
+
+prometheus.remote_write "prometheus" {
+  endpoint {
+    url = "http://prometheus.prometheus.svc:9090/api/v1/write"
+    headers = {
+    }
+    tls_config {
+      insecure_skip_verify = false
+    }
+    send_native_histograms = false
+    queue_config {
+      capacity = 10000
+      min_shards = 1
+      max_shards = 50
+      max_samples_per_send = 2000
+      batch_send_deadline = "5s"
+      min_backoff = "30ms"
+      max_backoff = "5s"
+      retry_on_http_429 = true
+      sample_age_limit = "0s"
+    }
+    write_relabel_config {
+      source_labels = ["cluster"]
+      regex = ""
+      replacement = "mysql-integration-cluster"
+      target_label = "cluster"
+    }
+    write_relabel_config {
+      source_labels = ["k8s.cluster.name"]
+      regex = ""
+      replacement = "mysql-integration-cluster"
+      target_label = "cluster"
+    }
+  }
+}
+
+declare "mysql_integration" {
+  argument "metrics_destinations" {
+    comment = "Must be a list of metric destinations where collected metrics should be forwarded to"
+  }
+  
+  prometheus.exporter.mysql "staging_db" {
+    data_source_name  = "root:password@database.staging.svc:3306/"
+    enable_collectors = ["heartbeat","mysql.user"]
+  }
+  prometheus.scrape "staging_db" {
+    targets    = prometheus.exporter.mysql.staging_db.targets
+    job_name   = "integration/mysql"
+    forward_to = [prometheus.relabel.staging_db.receiver]
+  }
+  
+  prometheus.relabel "staging_db" {
+    max_cache_size = 100000
+    rule {
+      target_label = "instance"
+      replacement = "staging-db"
+    }
+    forward_to = argument.metrics_destinations.value
+  }
+  
+  
+  remote.kubernetes.secret "prod_db" {
+    name      = "prod-db-ko-integrations"
+    namespace = "default"
+  }
+  
+  prometheus.exporter.mysql "prod_db" {
+    data_source_name = string.format("%s:%s@(%s:%d)/",
+      nonsensitive(remote.kubernetes.secret.prod_db.data["username"]),
+      remote.kubernetes.secret.prod_db.data["password"],
+      "database.prod.svc",
+      3306,
+    )
+    enable_collectors = ["heartbeat","mysql.user"]
+  }
+  prometheus.scrape "prod_db" {
+    targets    = prometheus.exporter.mysql.prod_db.targets
+    job_name   = "integration/mysql"
+    forward_to = [prometheus.relabel.prod_db.receiver]
+  }
+  
+  prometheus.relabel "prod_db" {
+    max_cache_size = 100000
+    rule {
+      target_label = "instance"
+      replacement = "prod-db"
+    }
+    forward_to = argument.metrics_destinations.value
+  }
+}
+mysql_integration "integration" {
+  metrics_destinations = [
+    prometheus.remote_write.prometheus.receiver,
+  ]
+}
+
+// Self Reporting
+prometheus.exporter.unix "kubernetes_monitoring_telemetry" {
+  set_collectors = ["textfile"]
+  textfile {
+    directory = "/etc/alloy"
+  }
+}
+
+discovery.relabel "kubernetes_monitoring_telemetry" {
+  targets = prometheus.exporter.unix.kubernetes_monitoring_telemetry.targets
+  rule {
+    target_label = "instance"
+    action = "replace"
+    replacement = "ko"
+  }
+  rule {
+    target_label = "job"
+    action = "replace"
+    replacement = "integrations/kubernetes/kubernetes_monitoring_telemetry"
+  }
+}
+
+prometheus.scrape "kubernetes_monitoring_telemetry" {
+  job_name   = "integrations/kubernetes/kubernetes_monitoring_telemetry"
+  targets    = discovery.relabel.kubernetes_monitoring_telemetry.output
+  scrape_interval = "1h"
+  clustering {
+    enabled = true
+  }
+  forward_to = [prometheus.relabel.kubernetes_monitoring_telemetry.receiver]
+}
+
+prometheus.relabel "kubernetes_monitoring_telemetry" {
+  rule {
+    source_labels = ["__name__"]
+    regex = "grafana_kubernetes_monitoring_.*"
+    action = "keep"
+  }
+  forward_to = [
+    prometheus.remote_write.prometheus.receiver,
+  ]
+}
diff --git a/charts/k8s-monitoring/docs/examples/features/integrations/mysql/description.txt b/charts/k8s-monitoring/docs/examples/features/integrations/mysql/description.txt
new file mode 100644
index 000000000..c223e16ce
--- /dev/null
+++ b/charts/k8s-monitoring/docs/examples/features/integrations/mysql/description.txt
@@ -0,0 +1,5 @@
+# MySQL Integration
+
+This example shows how to load two MySQL integration instances, which utilize Alloy's [prometheus.exporter.mysql](https://grafana.com/docs/alloy/latest/reference/components/prometheus/prometheus.exporter.mysql/) component
+to scrape metrics from the MySQL database. It also modifies the Pod Logs feature to add special log handling for MySQL
+pods. The username and password for the `prod-db` example are stored in a Kubernetes secret.
diff --git a/charts/k8s-monitoring/docs/examples/features/integrations/mysql/output.yaml b/charts/k8s-monitoring/docs/examples/features/integrations/mysql/output.yaml
new file mode 100644
index 000000000..8ef1e375d
--- /dev/null
+++ b/charts/k8s-monitoring/docs/examples/features/integrations/mysql/output.yaml
@@ -0,0 +1,956 @@
+---
+# Source: k8s-monitoring/charts/alloy-logs/templates/serviceaccount.yaml
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: ko-alloy-logs
+  namespace: default
+  labels:
+    helm.sh/chart: alloy-logs-0.9.2
+    app.kubernetes.io/name: alloy-logs
+    app.kubernetes.io/instance: ko
+    
+    app.kubernetes.io/version: "v1.4.3"
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/part-of: alloy
+    app.kubernetes.io/component: rbac
+---
+# Source: k8s-monitoring/charts/alloy-metrics/templates/serviceaccount.yaml
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: ko-alloy-metrics
+  namespace: default
+  labels:
+    helm.sh/chart: alloy-metrics-0.9.2
+    app.kubernetes.io/name: alloy-metrics
+    app.kubernetes.io/instance: ko
+    
+    app.kubernetes.io/version: "v1.4.3"
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/part-of: alloy
+    app.kubernetes.io/component: rbac
+---
+# Source: k8s-monitoring/charts/integrations/templates/mysql-secret.yaml
+apiVersion: v1
+kind: Secret
+metadata:
+  name: "prod-db-ko-integrations"
+  namespace: "default"
+stringData:
+  username: "db-admin"
+  password: "db-password"
+---
+# Source: k8s-monitoring/templates/alloy-config.yaml
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: ko-alloy-metrics
+  namespace: default
+data:
+  config.alloy: |-
+    // Destination: prometheus (prometheus)
+    otelcol.exporter.prometheus "prometheus" {
+      forward_to = [prometheus.remote_write.prometheus.receiver]
+    }
+    
+    prometheus.remote_write "prometheus" {
+      endpoint {
+        url = "http://prometheus.prometheus.svc:9090/api/v1/write"
+        headers = {
+        }
+        tls_config {
+          insecure_skip_verify = false
+        }
+        send_native_histograms = false
+        queue_config {
+          capacity = 10000
+          min_shards = 1
+          max_shards = 50
+          max_samples_per_send = 2000
+          batch_send_deadline = "5s"
+          min_backoff = "30ms"
+          max_backoff = "5s"
+          retry_on_http_429 = true
+          sample_age_limit = "0s"
+        }
+        write_relabel_config {
+          source_labels = ["cluster"]
+          regex = ""
+          replacement = "mysql-integration-cluster"
+          target_label = "cluster"
+        }
+        write_relabel_config {
+          source_labels = ["k8s.cluster.name"]
+          regex = ""
+          replacement = "mysql-integration-cluster"
+          target_label = "cluster"
+        }
+      }
+    }
+    
+    declare "mysql_integration" {
+      argument "metrics_destinations" {
+        comment = "Must be a list of metric destinations where collected metrics should be forwarded to"
+      }
+      
+      prometheus.exporter.mysql "staging_db" {
+        data_source_name  = "root:password@database.staging.svc:3306/"
+        enable_collectors = ["heartbeat","mysql.user"]
+      }
+      prometheus.scrape "staging_db" {
+        targets    = prometheus.exporter.mysql.staging_db.targets
+        job_name   = "integration/mysql"
+        forward_to = [prometheus.relabel.staging_db.receiver]
+      }
+      
+      prometheus.relabel "staging_db" {
+        max_cache_size = 100000
+        rule {
+          target_label = "instance"
+          replacement = "staging-db"
+        }
+        forward_to = argument.metrics_destinations.value
+      }
+      
+      
+      remote.kubernetes.secret "prod_db" {
+        name      = "prod-db-ko-integrations"
+        namespace = "default"
+      }
+      
+      prometheus.exporter.mysql "prod_db" {
+        data_source_name = string.format("%s:%s@(%s:%d)/",
+          nonsensitive(remote.kubernetes.secret.prod_db.data["username"]),
+          remote.kubernetes.secret.prod_db.data["password"],
+          "database.prod.svc",
+          3306,
+        )
+        enable_collectors = ["heartbeat","mysql.user"]
+      }
+      prometheus.scrape "prod_db" {
+        targets    = prometheus.exporter.mysql.prod_db.targets
+        job_name   = "integration/mysql"
+        forward_to = [prometheus.relabel.prod_db.receiver]
+      }
+      
+      prometheus.relabel "prod_db" {
+        max_cache_size = 100000
+        rule {
+          target_label = "instance"
+          replacement = "prod-db"
+        }
+        forward_to = argument.metrics_destinations.value
+      }
+    }
+    mysql_integration "integration" {
+      metrics_destinations = [
+        prometheus.remote_write.prometheus.receiver,
+      ]
+    }
+    
+    // Self Reporting
+    prometheus.exporter.unix "kubernetes_monitoring_telemetry" {
+      set_collectors = ["textfile"]
+      textfile {
+        directory = "/etc/alloy"
+      }
+    }
+    
+    discovery.relabel "kubernetes_monitoring_telemetry" {
+      targets = prometheus.exporter.unix.kubernetes_monitoring_telemetry.targets
+      rule {
+        target_label = "instance"
+        action = "replace"
+        replacement = "ko"
+      }
+      rule {
+        target_label = "job"
+        action = "replace"
+        replacement = "integrations/kubernetes/kubernetes_monitoring_telemetry"
+      }
+    }
+    
+    prometheus.scrape "kubernetes_monitoring_telemetry" {
+      job_name   = "integrations/kubernetes/kubernetes_monitoring_telemetry"
+      targets    = discovery.relabel.kubernetes_monitoring_telemetry.output
+      scrape_interval = "1h"
+      clustering {
+        enabled = true
+      }
+      forward_to = [prometheus.relabel.kubernetes_monitoring_telemetry.receiver]
+    }
+    
+    prometheus.relabel "kubernetes_monitoring_telemetry" {
+      rule {
+        source_labels = ["__name__"]
+        regex = "grafana_kubernetes_monitoring_.*"
+        action = "keep"
+      }
+      forward_to = [
+        prometheus.remote_write.prometheus.receiver,
+      ]
+    }
+    
+    
+    
+    
+  self-reporting-metric.prom: |
+    # HELP grafana_kubernetes_monitoring_build_info A metric to report the version of the Kubernetes Monitoring Helm chart
+    # TYPE grafana_kubernetes_monitoring_build_info gauge
+    grafana_kubernetes_monitoring_build_info{version="2.0.0-rc.1", namespace="default", platform=""} 1
+    # HELP grafana_kubernetes_monitoring_feature_info A metric to report the enabled features of the Kubernetes Monitoring Helm chart
+    # TYPE grafana_kubernetes_monitoring_feature_info gauge
+    grafana_kubernetes_monitoring_feature_info{feature="podLogs", method="volumes", version="1.0.0"} 1
+    grafana_kubernetes_monitoring_feature_info{feature="integrations", version="1.0.0"} 1
+---
+# Source: k8s-monitoring/templates/alloy-config.yaml
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: ko-alloy-logs
+  namespace: default
+data:
+  config.alloy: |-
+    // Destination: loki (loki)
+    otelcol.exporter.loki "loki" {
+      forward_to = [loki.write.loki.receiver]
+    }
+    
+    loki.write "loki" {
+      endpoint {
+        url = "http://loki.loki.svc:3100/api/push"
+      }
+      external_labels = {
+        cluster = "mysql-integration-cluster",
+        "k8s_cluster_name" = "mysql-integration-cluster",
+      }
+    }
+    
+    // Feature: Pod Logs
+    declare "pod_logs" {
+      argument "logs_destinations" {
+        comment = "Must be a list of log destinations where collected logs should be forwarded to"
+      }
+      
+      discovery.relabel "filtered_pods" {
+        targets = discovery.kubernetes.pods.targets
+        rule {
+          source_labels = ["__meta_kubernetes_namespace"]
+          action = "replace"
+          target_label = "namespace"
+        }
+        rule {
+          source_labels = ["__meta_kubernetes_pod_name"]
+          action = "replace"
+          target_label = "pod"
+        }
+        rule {
+          source_labels = ["__meta_kubernetes_pod_container_name"]
+          action = "replace"
+          target_label = "container"
+        }
+        rule {
+          source_labels = ["__meta_kubernetes_namespace", "__meta_kubernetes_pod_container_name"]
+          separator = "/"
+          action = "replace"
+          replacement = "$1"
+          target_label = "job"
+        }
+      
+        // set the container runtime as a label
+        rule {
+          action = "replace"
+          source_labels = ["__meta_kubernetes_pod_container_id"]
+          regex = "^(\\S+):\\/\\/.+$"
+          replacement = "$1"
+          target_label = "tmp_container_runtime"
+        }
+        rule {
+          source_labels = ["__meta_kubernetes_pod_label_app_kubernetes_io_instance"]
+          separator = ";"
+          regex = "staging-db"
+          target_label = "integration"
+          replacement = "mysql"
+        }
+        rule {
+          source_labels = ["__meta_kubernetes_pod_label_app_kubernetes_io_instance"]
+          separator = ";"
+          regex = "staging-db"
+          target_label = "instance"
+          replacement = "staging-db"
+        }
+        rule {
+          source_labels = ["__meta_kubernetes_pod_label_app_kubernetes_io_instance"]
+          separator = ";"
+          regex = "prod-db"
+          target_label = "integration"
+          replacement = "mysql"
+        }
+        rule {
+          source_labels = ["__meta_kubernetes_pod_label_app_kubernetes_io_instance"]
+          separator = ";"
+          regex = "prod-db"
+          target_label = "instance"
+          replacement = "prod-db"
+        }
+      }
+      
+      discovery.kubernetes "pods" {
+        role = "pod"
+        selectors {
+          role = "pod"
+          field = "spec.nodeName=" + env("HOSTNAME")
+        }
+      }
+      
+      discovery.relabel "filtered_pods_with_paths" {
+        targets = discovery.relabel.filtered_pods.output
+      
+        rule {
+          source_labels = ["__meta_kubernetes_pod_uid", "__meta_kubernetes_pod_container_name"]
+          separator = "/"
+          action = "replace"
+          replacement = "/var/log/pods/*$1/*.log"
+          target_label = "__path__"
+        }
+      }
+      
+      local.file_match "pod_logs" {
+        path_targets = discovery.relabel.filtered_pods_with_paths.output
+      }
+      
+      loki.source.file "pod_logs" {
+        targets    = local.file_match.pod_logs.targets
+        forward_to = [loki.process.pod_logs.receiver]
+      }
+      
+      loki.process "pod_logs" {
+        stage.match {
+          selector = "{tmp_container_runtime=~\"containerd|cri-o\"}"
+          // the cri processing stage extracts the following k/v pairs: log, stream, time, flags
+          stage.cri {}
+      
+          // Set the extract flags and stream values as labels
+          stage.labels {
+            values = {
+              flags  = "",
+              stream  = "",
+            }
+          }
+        }
+      
+        stage.match {
+          selector = "{tmp_container_runtime=\"docker\"}"
+          // the docker processing stage extracts the following k/v pairs: log, stream, time
+          stage.docker {}
+      
+          // Set the extract stream value as a label
+          stage.labels {
+            values = {
+              stream  = "",
+            }
+          }
+        }
+      
+        // Drop the filename label, since it's not really useful in the context of Kubernetes, where we already have cluster,
+        // namespace, pod, and container labels. Drop any structured metadata. Also drop the temporary
+        // container runtime label as it is no longer needed.
+        stage.label_drop {
+          values = [
+            "filename",
+            "tmp_container_runtime",
+          ]
+        }
+        // Integration: MySQL
+        stage.match {
+          selector = "{integration=\"mysql\"}"
+        
+          stage.regex {
+            expression = `(?P<timestamp>.+) (?P<thread>[\d]+) \[(?P<label>.+?)\]( \[(?P<err_code>.+?)\] \[(?P<subsystem>.+?)\])? (?P<msg>.+)`
+          }
+        
+          stage.labels {
+            values = {
+              level = "label",
+              err_code = "err_code",
+              subsystem = "subsystem",
+            }
+          }
+        
+          stage.drop {
+            expression = "^ *$"
+            drop_counter_reason = "drop empty lines"
+          }
+        
+          stage.static_labels {
+            values = {
+              job = "integrations/mysql",
+            }
+          }
+        
+          stage.label_drop {
+            values = ["integration"]
+          }
+        }
+      
+        forward_to = argument.logs_destinations.value
+      }
+    }
+    pod_logs "feature" {
+      logs_destinations = [
+        loki.write.loki.receiver,
+      ]
+    }
+---
+# Source: k8s-monitoring/charts/alloy-logs/templates/rbac.yaml
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: ko-alloy-logs
+  labels:
+    helm.sh/chart: alloy-logs-0.9.2
+    app.kubernetes.io/name: alloy-logs
+    app.kubernetes.io/instance: ko
+    
+    app.kubernetes.io/version: "v1.4.3"
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/part-of: alloy
+    app.kubernetes.io/component: rbac
+rules:
+  # Rules which allow discovery.kubernetes to function.
+  - apiGroups:
+      - ""
+      - "discovery.k8s.io"
+      - "networking.k8s.io"
+    resources:
+      - endpoints
+      - endpointslices
+      - ingresses
+      - nodes
+      - nodes/proxy
+      - nodes/metrics
+      - pods
+      - services
+    verbs:
+      - get
+      - list
+      - watch
+  # Rules which allow loki.source.kubernetes and loki.source.podlogs to work.
+  - apiGroups:
+      - ""
+    resources:
+      - pods
+      - pods/log
+      - namespaces
+    verbs:
+      - get
+      - list
+      - watch
+  - apiGroups:
+      - "monitoring.grafana.com"
+    resources:
+      - podlogs
+    verbs:
+      - get
+      - list
+      - watch
+  # Rules which allow mimir.rules.kubernetes to work.
+  - apiGroups: ["monitoring.coreos.com"]
+    resources:
+      - prometheusrules
+    verbs:
+      - get
+      - list
+      - watch
+  - nonResourceURLs:
+      - /metrics
+    verbs:
+      - get
+  # Rules for prometheus.kubernetes.*
+  - apiGroups: ["monitoring.coreos.com"]
+    resources:
+      - podmonitors
+      - servicemonitors
+      - probes
+    verbs:
+      - get
+      - list
+      - watch
+  # Rules which allow eventhandler to work.
+  - apiGroups:
+      - ""
+    resources:
+      - events
+    verbs:
+      - get
+      - list
+      - watch
+  # needed for remote.kubernetes.*
+  - apiGroups: [""]
+    resources:
+      - "configmaps"
+      - "secrets"
+    verbs:
+      - get
+      - list
+      - watch
+  # needed for otelcol.processor.k8sattributes
+  - apiGroups: ["apps"]
+    resources: ["replicasets"]
+    verbs: ["get", "list", "watch"]
+  - apiGroups: ["extensions"]
+    resources: ["replicasets"]
+    verbs: ["get", "list", "watch"]
+---
+# Source: k8s-monitoring/charts/alloy-metrics/templates/rbac.yaml
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: ko-alloy-metrics
+  labels:
+    helm.sh/chart: alloy-metrics-0.9.2
+    app.kubernetes.io/name: alloy-metrics
+    app.kubernetes.io/instance: ko
+    
+    app.kubernetes.io/version: "v1.4.3"
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/part-of: alloy
+    app.kubernetes.io/component: rbac
+rules:
+  # Rules which allow discovery.kubernetes to function.
+  - apiGroups:
+      - ""
+      - "discovery.k8s.io"
+      - "networking.k8s.io"
+    resources:
+      - endpoints
+      - endpointslices
+      - ingresses
+      - nodes
+      - nodes/proxy
+      - nodes/metrics
+      - pods
+      - services
+    verbs:
+      - get
+      - list
+      - watch
+  # Rules which allow loki.source.kubernetes and loki.source.podlogs to work.
+  - apiGroups:
+      - ""
+    resources:
+      - pods
+      - pods/log
+      - namespaces
+    verbs:
+      - get
+      - list
+      - watch
+  - apiGroups:
+      - "monitoring.grafana.com"
+    resources:
+      - podlogs
+    verbs:
+      - get
+      - list
+      - watch
+  # Rules which allow mimir.rules.kubernetes to work.
+  - apiGroups: ["monitoring.coreos.com"]
+    resources:
+      - prometheusrules
+    verbs:
+      - get
+      - list
+      - watch
+  - nonResourceURLs:
+      - /metrics
+    verbs:
+      - get
+  # Rules for prometheus.kubernetes.*
+  - apiGroups: ["monitoring.coreos.com"]
+    resources:
+      - podmonitors
+      - servicemonitors
+      - probes
+    verbs:
+      - get
+      - list
+      - watch
+  # Rules which allow eventhandler to work.
+  - apiGroups:
+      - ""
+    resources:
+      - events
+    verbs:
+      - get
+      - list
+      - watch
+  # needed for remote.kubernetes.*
+  - apiGroups: [""]
+    resources:
+      - "configmaps"
+      - "secrets"
+    verbs:
+      - get
+      - list
+      - watch
+  # needed for otelcol.processor.k8sattributes
+  - apiGroups: ["apps"]
+    resources: ["replicasets"]
+    verbs: ["get", "list", "watch"]
+  - apiGroups: ["extensions"]
+    resources: ["replicasets"]
+    verbs: ["get", "list", "watch"]
+---
+# Source: k8s-monitoring/charts/alloy-logs/templates/rbac.yaml
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  name: ko-alloy-logs
+  labels:
+    helm.sh/chart: alloy-logs-0.9.2
+    app.kubernetes.io/name: alloy-logs
+    app.kubernetes.io/instance: ko
+    
+    app.kubernetes.io/version: "v1.4.3"
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/part-of: alloy
+    app.kubernetes.io/component: rbac
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: ko-alloy-logs
+subjects:
+  - kind: ServiceAccount
+    name: ko-alloy-logs
+    namespace: default
+---
+# Source: k8s-monitoring/charts/alloy-metrics/templates/rbac.yaml
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  name: ko-alloy-metrics
+  labels:
+    helm.sh/chart: alloy-metrics-0.9.2
+    app.kubernetes.io/name: alloy-metrics
+    app.kubernetes.io/instance: ko
+    
+    app.kubernetes.io/version: "v1.4.3"
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/part-of: alloy
+    app.kubernetes.io/component: rbac
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: ko-alloy-metrics
+subjects:
+  - kind: ServiceAccount
+    name: ko-alloy-metrics
+    namespace: default
+---
+# Source: k8s-monitoring/charts/alloy-logs/templates/service.yaml
+apiVersion: v1
+kind: Service
+metadata:
+  name: ko-alloy-logs
+  labels:
+    helm.sh/chart: alloy-logs-0.9.2
+    app.kubernetes.io/name: alloy-logs
+    app.kubernetes.io/instance: ko
+    
+    app.kubernetes.io/version: "v1.4.3"
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/part-of: alloy
+    app.kubernetes.io/component: networking
+spec:
+  type: ClusterIP
+  selector:
+    app.kubernetes.io/name: alloy-logs
+    app.kubernetes.io/instance: ko
+  internalTrafficPolicy: Cluster
+  ports:
+    - name: http-metrics
+      port: 12345
+      targetPort: 12345
+      protocol: "TCP"
+---
+# Source: k8s-monitoring/charts/alloy-metrics/templates/cluster_service.yaml
+apiVersion: v1
+kind: Service
+metadata:
+  name: ko-alloy-metrics-cluster
+  labels:
+    helm.sh/chart: alloy-metrics-0.9.2
+    app.kubernetes.io/name: alloy-metrics
+    app.kubernetes.io/instance: ko
+    
+    app.kubernetes.io/version: "v1.4.3"
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/part-of: alloy
+    app.kubernetes.io/component: networking
+spec:
+  type: ClusterIP
+  clusterIP: 'None'
+  publishNotReadyAddresses: true
+  selector:
+    app.kubernetes.io/name: alloy-metrics
+    app.kubernetes.io/instance: ko
+  ports:
+    # Do not include the -metrics suffix in the port name, otherwise metrics
+    # can be double-collected with the non-headless Service if it's also
+    # enabled.
+    #
+    # This service should only be used for clustering, and not metric
+    # collection.
+    - name: http
+      port: 12345
+      targetPort: 12345
+      protocol: "TCP"
+---
+# Source: k8s-monitoring/charts/alloy-metrics/templates/service.yaml
+apiVersion: v1
+kind: Service
+metadata:
+  name: ko-alloy-metrics
+  labels:
+    helm.sh/chart: alloy-metrics-0.9.2
+    app.kubernetes.io/name: alloy-metrics
+    app.kubernetes.io/instance: ko
+    
+    app.kubernetes.io/version: "v1.4.3"
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/part-of: alloy
+    app.kubernetes.io/component: networking
+spec:
+  type: ClusterIP
+  selector:
+    app.kubernetes.io/name: alloy-metrics
+    app.kubernetes.io/instance: ko
+  internalTrafficPolicy: Cluster
+  ports:
+    - name: http-metrics
+      port: 12345
+      targetPort: 12345
+      protocol: "TCP"
+---
+# Source: k8s-monitoring/charts/alloy-logs/templates/controllers/daemonset.yaml
+apiVersion: apps/v1
+kind: DaemonSet
+metadata:
+  name: ko-alloy-logs
+  labels:
+    helm.sh/chart: alloy-logs-0.9.2
+    app.kubernetes.io/name: alloy-logs
+    app.kubernetes.io/instance: ko
+    
+    app.kubernetes.io/version: "v1.4.3"
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/part-of: alloy
+spec:
+  minReadySeconds: 10
+  selector:
+    matchLabels:
+      app.kubernetes.io/name: alloy-logs
+      app.kubernetes.io/instance: ko
+  template:
+    metadata:
+      annotations:
+        kubectl.kubernetes.io/default-container: alloy
+      labels:
+        app.kubernetes.io/name: alloy-logs
+        app.kubernetes.io/instance: ko
+    spec:
+      serviceAccountName: ko-alloy-logs
+      containers:
+        - name: alloy
+          image: docker.io/grafana/alloy:v1.4.3
+          imagePullPolicy: IfNotPresent
+          args:
+            - run
+            - /etc/alloy/config.alloy
+            - --storage.path=/tmp/alloy
+            - --server.http.listen-addr=0.0.0.0:12345
+            - --server.http.ui-path-prefix=/
+            - --stability.level=generally-available
+          env:
+            - name: ALLOY_DEPLOY_MODE
+              value: "helm"
+            - name: HOSTNAME
+              valueFrom:
+                fieldRef:
+                  fieldPath: spec.nodeName
+          ports:
+            - containerPort: 12345
+              name: http-metrics
+          readinessProbe:
+            httpGet:
+              path: /-/ready
+              port: 12345
+              scheme: HTTP
+            initialDelaySeconds: 10
+            timeoutSeconds: 1
+          securityContext:
+            allowPrivilegeEscalation: false
+            capabilities:
+              add:
+              - CHOWN
+              - DAC_OVERRIDE
+              - FOWNER
+              - FSETID
+              - KILL
+              - SETGID
+              - SETUID
+              - SETPCAP
+              - NET_BIND_SERVICE
+              - NET_RAW
+              - SYS_CHROOT
+              - MKNOD
+              - AUDIT_WRITE
+              - SETFCAP
+              drop:
+              - ALL
+            seccompProfile:
+              type: RuntimeDefault
+          volumeMounts:
+            - name: config
+              mountPath: /etc/alloy
+            - name: varlog
+              mountPath: /var/log
+              readOnly: true
+            - name: dockercontainers
+              mountPath: /var/lib/docker/containers
+              readOnly: true
+        - name: config-reloader
+          image: ghcr.io/jimmidyson/configmap-reload:v0.12.0
+          args:
+            - --volume-dir=/etc/alloy
+            - --webhook-url=http://localhost:12345/-/reload
+          volumeMounts:
+            - name: config
+              mountPath: /etc/alloy
+          resources:
+            requests:
+              cpu: 1m
+              memory: 5Mi
+      dnsPolicy: ClusterFirst
+      nodeSelector:
+        kubernetes.io/os: linux
+      volumes:
+        - name: config
+          configMap:
+            name: ko-alloy-logs
+        - name: varlog
+          hostPath:
+            path: /var/log
+        - name: dockercontainers
+          hostPath:
+            path: /var/lib/docker/containers
+---
+# Source: k8s-monitoring/charts/alloy-metrics/templates/controllers/statefulset.yaml
+apiVersion: apps/v1
+kind: StatefulSet
+metadata:
+  name: ko-alloy-metrics
+  labels:
+    helm.sh/chart: alloy-metrics-0.9.2
+    app.kubernetes.io/name: alloy-metrics
+    app.kubernetes.io/instance: ko
+    
+    app.kubernetes.io/version: "v1.4.3"
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/part-of: alloy
+spec:
+  replicas: 1
+  podManagementPolicy: Parallel
+  minReadySeconds: 10
+  serviceName: ko-alloy-metrics
+  selector:
+    matchLabels:
+      app.kubernetes.io/name: alloy-metrics
+      app.kubernetes.io/instance: ko
+  template:
+    metadata:
+      annotations:
+        kubectl.kubernetes.io/default-container: alloy
+        k8s.grafana.com/logs.job: integrations/alloy
+      labels:
+        app.kubernetes.io/name: alloy-metrics
+        app.kubernetes.io/instance: ko
+    spec:
+      serviceAccountName: ko-alloy-metrics
+      containers:
+        - name: alloy
+          image: docker.io/grafana/alloy:v1.4.3
+          imagePullPolicy: IfNotPresent
+          args:
+            - run
+            - /etc/alloy/config.alloy
+            - --storage.path=/tmp/alloy
+            - --server.http.listen-addr=0.0.0.0:12345
+            - --server.http.ui-path-prefix=/
+            - --cluster.enabled=true
+            - --cluster.join-addresses=ko-alloy-metrics-cluster
+            - --cluster.name="alloy-metrics"
+            - --stability.level=generally-available
+          env:
+            - name: ALLOY_DEPLOY_MODE
+              value: "helm"
+            - name: HOSTNAME
+              valueFrom:
+                fieldRef:
+                  fieldPath: spec.nodeName
+          ports:
+            - containerPort: 12345
+              name: http-metrics
+          readinessProbe:
+            httpGet:
+              path: /-/ready
+              port: 12345
+              scheme: HTTP
+            initialDelaySeconds: 10
+            timeoutSeconds: 1
+          securityContext:
+            allowPrivilegeEscalation: false
+            capabilities:
+              add:
+              - CHOWN
+              - DAC_OVERRIDE
+              - FOWNER
+              - FSETID
+              - KILL
+              - SETGID
+              - SETUID
+              - SETPCAP
+              - NET_BIND_SERVICE
+              - NET_RAW
+              - SYS_CHROOT
+              - MKNOD
+              - AUDIT_WRITE
+              - SETFCAP
+              drop:
+              - ALL
+            seccompProfile:
+              type: RuntimeDefault
+          volumeMounts:
+            - name: config
+              mountPath: /etc/alloy
+        - name: config-reloader
+          image: ghcr.io/jimmidyson/configmap-reload:v0.12.0
+          args:
+            - --volume-dir=/etc/alloy
+            - --webhook-url=http://localhost:12345/-/reload
+          volumeMounts:
+            - name: config
+              mountPath: /etc/alloy
+          resources:
+            requests:
+              cpu: 1m
+              memory: 5Mi
+      dnsPolicy: ClusterFirst
+      nodeSelector:
+        kubernetes.io/os: linux
+      volumes:
+        - name: config
+          configMap:
+            name: ko-alloy-metrics
diff --git a/charts/k8s-monitoring/docs/examples/features/integrations/mysql/values.yaml b/charts/k8s-monitoring/docs/examples/features/integrations/mysql/values.yaml
new file mode 100644
index 000000000..1cb12cff3
--- /dev/null
+++ b/charts/k8s-monitoring/docs/examples/features/integrations/mysql/values.yaml
@@ -0,0 +1,41 @@
+---
+cluster:
+  name: mysql-integration-cluster
+
+destinations:
+  - name: prometheus
+    type: prometheus
+    url: http://prometheus.prometheus.svc:9090/api/v1/write
+  - name: loki
+    type: loki
+    url: http://loki.loki.svc:3100/api/push
+
+integrations:
+  mysql:
+    instances:
+      - name: staging-db
+        exporter:
+          dataSourceName: "root:password@database.staging.svc:3306/"
+        logs:
+          labelSelectors:
+            app.kubernetes.io/instance: staging-db
+
+      - name: prod-db
+        exporter:
+          dataSource:
+            host: database.prod.svc
+            auth:
+              username: db-admin
+              password: db-password
+        logs:
+          labelSelectors:
+            app.kubernetes.io/instance: prod-db
+
+podLogs:
+  enabled: true
+
+alloy-metrics:
+  enabled: true
+
+alloy-logs:
+  enabled: true
diff --git a/charts/k8s-monitoring/docs/examples/remote-config/alloy-metrics.alloy b/charts/k8s-monitoring/docs/examples/remote-config/alloy-metrics.alloy
index 0ff8aa1c2..ee1c2ff65 100644
--- a/charts/k8s-monitoring/docs/examples/remote-config/alloy-metrics.alloy
+++ b/charts/k8s-monitoring/docs/examples/remote-config/alloy-metrics.alloy
@@ -1,6 +1,11 @@
 
 
 
+remote.kubernetes.secret "alloy_metrics_remote_cfg" {
+  name      = "alloy-metrics-remote-cfg-ko-k8s-monitoring"
+  namespace = "default"
+}
+
 remotecfg {
   url = "https://remote-config.example.com/alloy"
   basic_auth {
diff --git a/charts/k8s-monitoring/docs/examples/remote-config/output.yaml b/charts/k8s-monitoring/docs/examples/remote-config/output.yaml
index 4f596658c..dc2ee91ab 100644
--- a/charts/k8s-monitoring/docs/examples/remote-config/output.yaml
+++ b/charts/k8s-monitoring/docs/examples/remote-config/output.yaml
@@ -37,6 +37,11 @@ data:
     
     
     
+    remote.kubernetes.secret "alloy_metrics_remote_cfg" {
+      name      = "alloy-metrics-remote-cfg-ko-k8s-monitoring"
+      namespace = "default"
+    }
+    
     remotecfg {
       url = "https://remote-config.example.com/alloy"
       basic_auth {
@@ -341,3 +346,6 @@ spec:
         - name: config
           configMap:
             name: ko-alloy-metrics
+---
+# Source: k8s-monitoring/templates/remote_config_secret.yaml
+# create: true
diff --git a/charts/k8s-monitoring/templates/NOTES.txt b/charts/k8s-monitoring/templates/NOTES.txt
index 7f56f4a44..11f308c54 100644
--- a/charts/k8s-monitoring/templates/NOTES.txt
+++ b/charts/k8s-monitoring/templates/NOTES.txt
@@ -10,7 +10,7 @@ It will:
 {{- range $feature := (include "features.list.enabled" .) | fromYamlArray }}
   {{- if ne $feature "selfReporting" }}
     {{- $task := include (printf "feature.%s.notes.task" $feature) (dict "Values" (index $.Values $feature)) | trim }}
-    {{- $destinations := include (printf "features.%s.destinations" $feature) (dict "Values" $.Values) | fromYamlArray }}
+    {{- $destinations := include (printf "features.%s.destinations" $feature) $ | fromYamlArray }}
 * {{ $task }} and send data to {{ include "english_list" $destinations }}.
   {{- end }}
 {{- end }}
diff --git a/charts/k8s-monitoring/templates/_validations.tpl b/charts/k8s-monitoring/templates/_validations.tpl
index 86a260d04..c9df6ea8f 100644
--- a/charts/k8s-monitoring/templates/_validations.tpl
+++ b/charts/k8s-monitoring/templates/_validations.tpl
@@ -13,7 +13,7 @@
 {{- define "validations.features_enabled" }}
 {{ $aFeatureIsEnabled := false }}
 {{- range $feature := ((include "features.list" .) | fromYamlArray ) }}
-  {{- $aFeatureIsEnabled = or $aFeatureIsEnabled (eq (include (printf "features.%s.enabled" $feature) (dict "Values" $.Values)) "true") }}
+  {{- $aFeatureIsEnabled = or $aFeatureIsEnabled (eq (include (printf "features.%s.enabled" $feature) $) "true") }}
 {{- end }}
 {{- range $collector := ((include "collectors.list" .) | fromYamlArray ) }}
   {{- $aFeatureIsEnabled = or $aFeatureIsEnabled ((index $.Values $collector).remoteConfig.enabled) }}
diff --git a/charts/k8s-monitoring/templates/collectors/_collector_remoteConfig.tpl b/charts/k8s-monitoring/templates/collectors/_collector_remoteConfig.tpl
index 686fda2b7..fbf38dfa4 100644
--- a/charts/k8s-monitoring/templates/collectors/_collector_remoteConfig.tpl
+++ b/charts/k8s-monitoring/templates/collectors/_collector_remoteConfig.tpl
@@ -2,6 +2,9 @@
 {{- $remoteConfigValues := (index .Values .collectorName).remoteConfig }}
 {{- with merge $remoteConfigValues (dict "type" "remoteConfig" "name" (printf "%s-remote-cfg" .collectorName)) }}
 {{- if .enabled }}
+{{- if eq (include "secrets.usesKubernetesSecret" .) "true" }}
+  {{- include "secret.alloy" (deepCopy $ | merge (dict "object" .)) | nindent 0 }}
+{{- end }}
 remotecfg {
   url = {{ .url | quote }}
 {{- if eq (include "secrets.authType" .) "basic" }}
diff --git a/charts/k8s-monitoring/templates/destinations/_destination_prometheus.tpl b/charts/k8s-monitoring/templates/destinations/_destination_prometheus.tpl
index 0e11bb862..78c22dfa0 100644
--- a/charts/k8s-monitoring/templates/destinations/_destination_prometheus.tpl
+++ b/charts/k8s-monitoring/templates/destinations/_destination_prometheus.tpl
@@ -54,7 +54,7 @@ prometheus.remote_write {{ include "helper.alloy_name" .name | quote }} {
 {{- if .tls }}
     tls_config {
       insecure_skip_verify = {{ .tls.insecureSkipVerify | default false }}
-      {{- if eq (include "secrets.usesKubernetesSecret" .) "true" }}
+      {{- if eq (include "secrets.usesSecret" (dict "object" . "key" "tls.ca")) "true" }}
       ca_pem = {{ include "secrets.read" (dict "object" . "key" "tls.ca" "nonsensitive" true) }}
       {{- end }}
       {{- if eq (include "secrets.usesKubernetesSecret" .) "true" }}
diff --git a/charts/k8s-monitoring/templates/features/_feature_helpers.tpl b/charts/k8s-monitoring/templates/features/_feature_helpers.tpl
index a40f4ec18..0e49df667 100644
--- a/charts/k8s-monitoring/templates/features/_feature_helpers.tpl
+++ b/charts/k8s-monitoring/templates/features/_feature_helpers.tpl
@@ -12,7 +12,7 @@
 
 {{- define "features.list.enabled" }}
 {{- range $feature := ((include "features.list" .) | fromYamlArray ) }}
-  {{- if eq (include (printf "features.%s.enabled" $feature) (dict "Values" $.Values)) "true" }}
+  {{- if eq (include (printf "features.%s.enabled" $feature) $) "true" }}
 - {{ $feature }}
   {{- end }}
 {{- end }}
diff --git a/charts/k8s-monitoring/templates/features/_feature_integrations.tpl b/charts/k8s-monitoring/templates/features/_feature_integrations.tpl
index 06c1fda63..ae8a3d524 100644
--- a/charts/k8s-monitoring/templates/features/_feature_integrations.tpl
+++ b/charts/k8s-monitoring/templates/features/_feature_integrations.tpl
@@ -1,26 +1,22 @@
 {{- define "features.integrations.enabled" }}
-{{- $metricIntegrations := include "feature.integrations.configured.metrics" (dict "Values" .Values.integrations) | fromYamlArray }}
-{{- $logIntegrations := include "feature.integrations.configured.logs" (dict "Values" .Values.integrations) | fromYamlArray }}
+{{- $metricIntegrations := include "feature.integrations.configured.metrics" (dict "Values" .Values.integrations "Files" $.Subcharts.integrations.Files) | fromYamlArray }}
+{{- $logIntegrations := include "feature.integrations.configured.logs" (dict "Values" .Values.integrations "Files" $.Subcharts.integrations.Files) | fromYamlArray }}
 {{- if or $metricIntegrations $logIntegrations }}true{{ else }}false{{ end }}
 {{- end }}
 
 {{- define "features.integrations.collectors" }}
 {{- $metricIntegrations := include "feature.integrations.configured.metrics" (dict "Values" .Values.integrations) | fromYamlArray }}
-{{- $logIntegrations := include "feature.integrations.configured.logs" (dict "Values" .Values.integrations) | fromYamlArray }}
 {{- if (not (empty $metricIntegrations)) }}
-- {{ .Values.integrations.collectors.metrics }}
-{{- end }}
-{{- if (not (empty $logIntegrations)) }}
-- {{ .Values.integrations.collectors.logs }}
+- {{ .Values.integrations.collector }}
 {{- end }}
 {{- end }}
 
 {{- define "features.integrations.metrics.include" }}
-{{- $values := dict "Values" .Values.integrations "Files" $.Subcharts.integrations.Files "Release" $.Release }}
-{{- $destinations := include "features.integrations.destinations.metrics" . | fromYamlArray }}
+{{- $values := dict "Chart" $.Subcharts.integrations.Chart "Values" .Values.integrations "Files" $.Subcharts.integrations.Files "Release" $.Release }}
+{{- $destinations := include "features.integrations.destinations" . | fromYamlArray }}
 {{- $integrations := include "feature.integrations.configured.metrics" $values | fromYamlArray }}
 {{- range $integrationType := $integrations }}
-  {{- include (printf "integrations.%s.module.metrics" $integrationType) $values | indent 0 }}
+{{- include (printf "integrations.%s.module.metrics" $integrationType) $values | indent 0 }}
 {{ include "helper.alloy_name" $integrationType }}_integration "integration" {
   metrics_destinations = [
     {{ include "destinations.alloy.targets" (dict "destinations" $.Values.destinations "names" $destinations "type" "metrics" "ecosystem" "prometheus") | indent 4 | trim }}
@@ -29,59 +25,55 @@
 {{- end }}
 {{- end }}
 
-{{- define "features.integrations.logs.include" }}
-{{- $values := dict "Values" .Values.integrations "Files" $.Subcharts.integrations.Files "Release" $.Release }}
-{{- $destinations := include "features.integrations.destinations.logs" . | fromYamlArray }}
-{{- $integrations := include "feature.integrations.configured.logs" $values | fromYamlArray }}
-{{- range $integrationType := $integrations }}
-  {{- include (printf "integrations.%s.module.metrics" $integrationType) $values | indent 0 }}
-{{ include "helper.alloy_name" $integrationType }}_integration "integration" {
-  logs_destinations = [
-    {{ include "destinations.alloy.targets" (dict "destinations" $.Values.destinations "names" $destinations "type" "logs" "ecosystem" "loki") | indent 4 | trim }}
-  ]
-}
-{{- end }}
-{{- end }}
-
 {{- define "features.integrations.include" }}
-{{- if eq .collectorName .Values.integrations.collectors.metrics }}
+{{- if eq .collectorName .Values.integrations.collector }}
   {{ include "features.integrations.metrics.include" . | indent 0 }}
 {{- end }}
-{{- if eq .collectorName .Values.integrations.collectors.logs }}
-  {{ include "features.integrations.logs.include" . | indent 0 }}
-{{- end }}
 {{- end }}
 
 {{- define "features.integrations.destinations" }}
-{{- $metricDestinations := include "features.integrations.destinations.metrics" . | fromYamlArray }}
-{{- $logDestinations := include "features.integrations.destinations.logs" . | fromYamlArray }}
-{{- concat $metricDestinations $logDestinations | uniq | toYaml }}
+{{- include "destinations.get" (dict "destinations" $.Values.destinations "type" "metrics" "ecosystem" "prometheus" "filter" $.Values.integrations.destinations) -}}
 {{- end }}
 
-{{- define "features.integrations.destinations.metrics" }}
-{{- include "destinations.get" (dict "destinations" $.Values.destinations "type" "metrics" "ecosystem" "prometheus" "filter" $.Values.integrations.destinations) -}}
+{{- define "features.integrations.logs.discoveryRules" }}
+{{- $values := (dict "Values" .Values.integrations "Files" $.Subcharts.integrations.Files) }}
+{{- $extraDiscoveryRules := list }}
+{{- $logIntegrations := include "feature.integrations.configured.logs" $values | fromYamlArray }}
+{{- range $integration := $logIntegrations }}
+  {{- $extraDiscoveryRules = append $extraDiscoveryRules ((include (printf "integrations.%s.logs.discoveryRules" $integration) $values) | indent 0) }}
+{{- end }}
+{{ $extraDiscoveryRules | join "\n" }}
 {{- end }}
 
-{{- define "features.integrations.destinations.logs" }}
-[]
+{{- define "features.integrations.logs.logProcessingStages" }}
+{{- $values := (dict "Values" .Values.integrations "Files" $.Subcharts.integrations.Files) }}
+{{- $extraLogProcessingStages := "" }}
+{{- $logIntegrations := include "feature.integrations.configured.logs" $values | fromYamlArray }}
+{{- range $integration := $logIntegrations }}
+  {{- $extraLogProcessingStages = cat $extraLogProcessingStages "\n" (include (printf "integrations.%s.logs.processingStage" $integration) $values) | indent 0 }}
+{{- end }}
+{{ $extraLogProcessingStages }}
 {{- end }}
 
 {{- define "features.integrations.validate" }}
 {{- if eq (include "features.integrations.enabled" .) "true" }}
 {{- $featureName := "Service Integrations" }}
 
-{{- $metricIntegrations := include "feature.integrations.configured.metrics" (dict "Values" .Values.integrations) | fromYamlArray }}
+{{- $metricIntegrations := include "feature.integrations.configured.metrics" (dict "Values" .Values.integrations "Files" $.Subcharts.integrations.Files) | fromYamlArray }}
 {{- if $metricIntegrations }}
-  {{- $metricDestinations := include "features.integrations.destinations.metrics" . | fromYamlArray }}
+  {{- $metricDestinations := include "features.integrations.destinations" . | fromYamlArray }}
   {{- include "destinations.validate_destination_list" (dict "destinations" $metricDestinations "type" "metrics" "ecosystem" "prometheus" "feature" $featureName) }}
   {{- include "collectors.require_collector" (dict "Values" $.Values "name" "alloy-metrics" "feature" $featureName) }}
 {{- end }}
 
-{{- $logIntegrations := include "feature.integrations.configured.logs" (dict "Values" .Values.integrations) | fromYamlArray }}
-{{- if $logIntegrations }}
-  {{- $logDestinations := include "features.integrations.destinations.logs" . | fromYamlArray }}
-  {{- include "destinations.validate_destination_list" (dict "destinations" $logDestinations "type" "log" "ecosystem" "loki" "feature" $featureName) }}
-  {{- include "collectors.require_collector" (dict "Values" $.Values "name" "alloy-logs" "feature" $featureName) }}
+{{- $podLogsEnabled := include "features.podLogs.enabled" $ }}
+{{- $logIntegrations := include "feature.integrations.configured.logs" (dict "Values" .Values.integrations "Files" $.Subcharts.integrations.Files) | fromYamlArray }}
+{{- if and $logIntegrations (ne $podLogsEnabled "true") }}
+  {{- $msg := list "" "Service integrations that include logs requires enabling the Pod Logs feature." }}
+  {{- $msg = append $msg "Please set:" }}
+  {{- $msg = append $msg "podLogs:" }}
+  {{- $msg = append $msg "  enabled: true" }}
+  {{- fail (join "\n" $msg) }}
 {{- end }}
 {{- end }}
 {{- end }}
diff --git a/charts/k8s-monitoring/templates/features/_feature_pod_logs.tpl b/charts/k8s-monitoring/templates/features/_feature_pod_logs.tpl
index db4499544..66c762f40 100644
--- a/charts/k8s-monitoring/templates/features/_feature_pod_logs.tpl
+++ b/charts/k8s-monitoring/templates/features/_feature_pod_logs.tpl
@@ -8,10 +8,13 @@
 
 {{- define "features.podLogs.include" }}
 {{- if .Values.podLogs.enabled -}}
+{{- $extraDiscoveryRules := cat (include "features.integrations.logs.discoveryRules" .) "\n" .Values.podLogs.extraDiscoveryRules | trim }}
+{{- $extraLogProcessingStages := cat (include "features.integrations.logs.logProcessingStages" .) "\n" .Values.podLogs.extraLogProcessingStages | trim }}
+{{- $values := mergeOverwrite .Values.podLogs (dict "extraDiscoveryRules" $extraDiscoveryRules "extraLogProcessingStages" $extraLogProcessingStages) }}
 {{- $destinations := include "features.podLogs.destinations" . | fromYamlArray }}
 
 // Feature: Pod Logs
-{{- include "feature.podLogs.module" (dict "Values" $.Values.podLogs "Files" $.Subcharts.podLogs.Files) }}
+{{- include "feature.podLogs.module" (dict "Values" $values "Files" $.Subcharts.podLogs.Files) }}
 pod_logs "feature" {
   logs_destinations = [
     {{ include "destinations.alloy.targets" (dict "destinations" $.Values.destinations "names" $destinations "type" "logs" "ecosystem" "loki") | indent 4 | trim }}
diff --git a/charts/k8s-monitoring/templates/remote_config_secret.yaml b/charts/k8s-monitoring/templates/remote_config_secret.yaml
index 5ed0d2766..ab2dc733f 100644
--- a/charts/k8s-monitoring/templates/remote_config_secret.yaml
+++ b/charts/k8s-monitoring/templates/remote_config_secret.yaml
@@ -2,6 +2,7 @@
 {{- $remoteConfigValues := merge ((index $.Values $collector).remoteConfig) (dict "type" "remoteConfig" "name" (printf "%s-remote-cfg" $collector)) }}
 {{- with $remoteConfigValues }}
 {{- if .enabled }}
+# create: {{ (include "secrets.shouldCreateKubernetesSecret" . ) }}
 {{- if eq (include "secrets.shouldCreateKubernetesSecret" . ) "true" }}
 ---
 apiVersion: v1
diff --git a/charts/k8s-monitoring/templates/secrets/_helpers.tpl b/charts/k8s-monitoring/templates/secrets/_helpers.tpl
index 9c9196746..49188bcd2 100644
--- a/charts/k8s-monitoring/templates/secrets/_helpers.tpl
+++ b/charts/k8s-monitoring/templates/secrets/_helpers.tpl
@@ -105,7 +105,7 @@ remote.kubernetes.secret.{{ include "helper.alloy_name" .object.name }}.data[{{
 {{- end -}}
 {{- end -}}
 
-{{/* Determines if the object will need to create a Kubernetes secret */}}
+{{/* Determines if the object will need to create a Kubernetes secret. NOTE that this object should be before merging with default values */}}
 {{/* Inputs: object (user of the secret, needs name, secret, auth) */}}
 {{- define "secrets.shouldCreateKubernetesSecret" -}}
 {{- if eq (include "secrets.usesKubernetesSecret" .) "false" }}false
diff --git a/charts/k8s-monitoring/templates/validations.yaml b/charts/k8s-monitoring/templates/validations.yaml
index 90106a88a..acf72adc5 100644
--- a/charts/k8s-monitoring/templates/validations.yaml
+++ b/charts/k8s-monitoring/templates/validations.yaml
@@ -6,7 +6,7 @@
 {{- /* Feature Validations*/}}
 {{- include "validations.features_enabled" . }}
 {{- range $feature := ((include "features.list" .) | fromYamlArray) }}
-  {{- include (printf "features.%s.validate" $feature) (dict "Values" $.Values) }}
+  {{- include (printf "features.%s.validate" $feature) $ }}
 {{- end }}
 
 {{- include "collectors.validate.featuresEnabled" . }}
diff --git a/charts/k8s-monitoring/tests/integration/integration-mysql/prometheus.yaml b/charts/k8s-monitoring/tests/integration/integration-mysql/prometheus.yaml
new file mode 100644
index 000000000..23e225d1b
--- /dev/null
+++ b/charts/k8s-monitoring/tests/integration/integration-mysql/prometheus.yaml
@@ -0,0 +1,30 @@
+---
+server:
+  extraFlags:
+    - enable-feature=remote-write-receiver
+
+  persistentVolume:
+    enabled: false
+
+  service:
+    servicePort: 9090
+
+serverFiles:
+  prometheus.yml:
+    scrape_configs: []
+
+configmapReload:
+  prometheus:
+    enabled: false
+
+alertmanager:
+  enabled: false
+
+kube-state-metrics:
+  enabled: false
+
+prometheus-node-exporter:
+  enabled: false
+
+prometheus-pushgateway:
+  enabled: false
diff --git a/charts/k8s-monitoring/tests/integration/integration-mysql/test-manifest.yaml b/charts/k8s-monitoring/tests/integration/integration-mysql/test-manifest.yaml
new file mode 100644
index 000000000..b4d6169a6
--- /dev/null
+++ b/charts/k8s-monitoring/tests/integration/integration-mysql/test-manifest.yaml
@@ -0,0 +1,45 @@
+---
+prerequisites:
+  - type: helm
+    name: prometheus
+    repo: https://prometheus-community.github.io/helm-charts
+    chart: prometheus
+    namespace: prometheus
+    valuesFile: charts/k8s-monitoring/tests/integration/integration-cert-manager/prometheus.yaml
+
+  - type: helm
+    name: loki
+    repo: https://grafana.github.io/helm-charts
+    chart: loki
+    namespace: loki
+    valuesFile: .configs/loki.yaml
+
+  - type: helm
+    name: test-database
+    chart: oci://registry-1.docker.io/bitnamicharts/mysql
+    namespace: mysql
+
+  - type: helm
+    name: grafana
+    repo: https://grafana.github.io/helm-charts
+    chart: grafana
+    namespace: grafana
+    values:
+      datasources:
+        datasources.yaml:
+          apiVersion: 1
+          datasources:
+            - name: Prometheus
+              type: prometheus
+              url: http://prometheus-server.prometheus.svc:9090
+              isDefault: true
+            - name: Loki
+              type: loki
+              url: http://loki-gateway.loki.svc:8080
+              basicAuth: true
+              basicAuthUser: loki
+              jsonData:
+                httpHeaderName1: X-Scope-OrgID
+              secureJsonData:
+                basicAuthPassword: lokipassword
+                httpHeaderValue1: "1"
diff --git a/charts/k8s-monitoring/tests/integration/integration-mysql/test-values.yaml b/charts/k8s-monitoring/tests/integration/integration-mysql/test-values.yaml
new file mode 100644
index 000000000..12a6bbe0b
--- /dev/null
+++ b/charts/k8s-monitoring/tests/integration/integration-mysql/test-values.yaml
@@ -0,0 +1,23 @@
+---
+tests:
+  - env:
+      PROMETHEUS_URL: http://prometheus-server.prometheus.svc:9090/api/v1/query
+      LOKI_URL: http://loki.loki.svc:3100/loki/api/v1/query
+      LOKI_TENANTID: 1
+      LOKI_USER: loki
+      LOKI_PASS: lokipassword
+
+    queries:
+      # MySQL metrics
+      - query: mysqld_exporter_build_info{cluster="mysql-integration-test", instance="test-database"}
+        type: promql
+
+      - query: count_over_time({cluster="mysql-integration-test", job="integrations/mysql", instance="test-database"}[1h])
+        type: logql
+
+      # DPM check
+      - query: avg(count_over_time(scrape_samples_scraped{cluster="mysql-integration-test"}[1m]))
+        type: promql
+        expect:
+          value: 1
+          operator: ==
diff --git a/charts/k8s-monitoring/tests/integration/integration-mysql/values.yaml b/charts/k8s-monitoring/tests/integration/integration-mysql/values.yaml
new file mode 100644
index 000000000..6a722dd55
--- /dev/null
+++ b/charts/k8s-monitoring/tests/integration/integration-mysql/values.yaml
@@ -0,0 +1,43 @@
+---
+cluster:
+  name: mysql-integration-test
+
+destinations:
+  - name: localPrometheus
+    type: prometheus
+    url: http://prometheus-server.prometheus.svc:9090/api/v1/write
+  - name: localLoki
+    type: loki
+    url: http://loki.loki.svc:3100/loki/api/v1/push
+    tenantId: "1"
+    auth:
+      type: basic
+      username: loki
+      password: lokipassword
+
+integrations:
+  mysql:
+    instances:
+      - name: test-database
+        exporter:
+          dataSource:
+            host: test-database-mysql.mysql.svc
+            auth:
+              usernameFrom: "\"root\""
+              passwordKey: mysql-root-password
+        secret:
+          create: false
+          name: test-database-mysql
+          namespace: mysql
+        logs:
+          labelSelectors:
+            app.kubernetes.io/instance: test-database
+
+podLogs:
+  enabled: true
+
+alloy-metrics:
+  enabled: true
+
+alloy-logs:
+  enabled: true
diff --git a/charts/k8s-monitoring/values.schema.json b/charts/k8s-monitoring/values.schema.json
index ca6a13c72..b3430eed8 100644
--- a/charts/k8s-monitoring/values.schema.json
+++ b/charts/k8s-monitoring/values.schema.json
@@ -946,22 +946,11 @@
         },
         "integrations": {
             "properties": {
-                "collectors": {
-                    "type": "object",
-                    "properties": {
-                        "logs": {
-                            "type": "string"
-                        },
-                        "metrics": {
-                            "type": "string"
-                        }
-                    }
+                "collector": {
+                    "type": "string"
                 },
                 "destinations": {
                     "type": "array"
-                },
-                "enabled": {
-                    "type": "boolean"
                 }
             }
         },
diff --git a/charts/k8s-monitoring/values.yaml b/charts/k8s-monitoring/values.yaml
index 1a9b30792..2e215f520 100644
--- a/charts/k8s-monitoring/values.yaml
+++ b/charts/k8s-monitoring/values.yaml
@@ -179,21 +179,14 @@ profiling:
 # @default -- No integrations enabled
 # @section -- Features - Service Integrations
 integrations:
-  # -- Enable Service Integrations.
-  # @section -- Features - Service Integrations
-  enabled: true
-
-  # -- The destinations where cluster events will be sent. If empty, all logs-capable destinations will be used.
+  # -- The destinations where integration metrics will be sent. If empty, all metrics-capable destinations will be used.
   # @section -- Features - Service Integrations
   destinations: []
 
   # -- Which collectors to assign this feature to. Do not change this unless you are sure of what you are doing.
   # @section -- Features - Service Integrations
   # @ignored
-  collectors:
-    metrics: alloy-metrics
-    logs: alloy-logs
-
+  collector: alloy-metrics
 
 # -- Self-reporting creates a single metric and log that reports anonymized information about how this Helm chart was
 # configured. It reports features enabled, destinations types used, and alloy instances enabled. It does not report any
diff --git a/scripts/lint-alloy.sh b/scripts/lint-alloy.sh
index 750fbfa0a..d80afb01d 100755
--- a/scripts/lint-alloy.sh
+++ b/scripts/lint-alloy.sh
@@ -45,9 +45,12 @@ k8sDiscovery='discovery.kubernetes "lint_config_component" { role = "nodes" }'
 
 for file in "$@";
 do
-  if [[ "${file}" == "--public-preview" ]]; then
+  if grep "${file}" -e "remotecfg {" >/dev/null; then
     STABILITY_LEVEL=public-preview
   fi
+  if grep "${file}" -e "livedebugging {" >/dev/null; then
+    STABILITY_LEVEL=experimental
+  fi
 
   # if the file doesn't exist skip it
   if [[ ! -f "${file}" ]]; then
@@ -120,10 +123,10 @@ do
     fi
 
     checkstyle="${checkstyle}</file>"
-  fi
-  # only override the statusCode if it is 0
-  if [[ "${statusCode}" == 0 ]]; then
-    statusCode="${fmtCode}"
+
+    if [[ "${statusCode}" == 0 ]]; then
+      statusCode=1
+    fi
   fi
 done
 
diff --git a/scripts/run-integration-test.sh b/scripts/run-integration-test.sh
index ad08a89f0..59bb8f11d 100755
--- a/scripts/run-integration-test.sh
+++ b/scripts/run-integration-test.sh
@@ -3,7 +3,6 @@ PARENT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
 source "${PARENT_DIR}/scripts/includes/utils.sh"
 source "${PARENT_DIR}/scripts/includes/logging.sh"
 
-# output the heading
 heading "Kubernetes Monitoring Helm" "Integration Tester"
 
 usage() {
@@ -48,18 +47,17 @@ set -eo pipefail  # Exit immediately if a command fails.
 clusterName=$(yq -r .cluster.name "${valuesFile}")
 
 DEPLOY_GRAFANA=${DEPLOY_GRAFANA:-true}
-DELETE_CLUSTER=${DELETE_CLUSTER:-true}
-CREATE_CLUSTER=${CREATE_CLUSTER:-true}
+DELETE_CLUSTER=${DELETE_CLUSTER:-false}
 cleanup() {
   helm ls -A || true
 
-  if [ "${CREATE_CLUSTER}" == "true" ] && [ "${DELETE_CLUSTER}" == "true" ]; then
+  if [ "${DELETE_CLUSTER}" == "true" ]; then
     kind delete cluster --name "${clusterName}" || true
   fi
 }
 trap cleanup EXIT
 
-if [ "${CREATE_CLUSTER}" == "true" ]; then
+if ! kind get clusters | grep -q "${clusterName}"; then
   echo "Creating cluster..."
   if [ ! -f "${clusterConfig}" ]; then
     kind create cluster --name "${clusterName}"
@@ -94,16 +92,18 @@ for ((i=0; i<prerequisiteCount; i++)); do
       exit 1
     fi
   elif [ "${prereqType}" == "helm" ]; then
-    prereqRepo=$(yq -r .prerequisites[$i].repo "${testManifest}")
+    prereqRepo=$(yq -r ".prerequisites[$i].repo // \"\"" "${testManifest}")
+    prereqRepoArg=""
+    if [ -n "${prereqRepo}" ]; then prereqRepoArg="--repo ${prereqRepo}"; fi
     prereqChart=$(yq -r .prerequisites[$i].chart "${testManifest}")
     prereqValues="$(yq -r ".prerequisites[$i].values // \"\"" "${testManifest}")"
     prereqValuesFile="$(yq -r ".prerequisites[$i].valuesFile // \"\"" "${testManifest}")"
 
     if [ -n "${prereqValuesFile}" ]; then
-      helm upgrade --install "${prereqName}" ${namespaceArg} --create-namespace --repo "${prereqRepo}" "${prereqChart}" -f "${PARENT_DIR}/${prereqValuesFile}" --hide-notes --wait
+      helm upgrade --install "${prereqName}" ${namespaceArg} --create-namespace ${prereqRepoArg} "${prereqChart}" -f "${PARENT_DIR}/${prereqValuesFile}" --hide-notes --wait
     elif [ -n "${prereqChart}" ]; then
       echo "${prereqValues}" > temp-values.yaml
-      helm upgrade --install "${prereqName}" ${namespaceArg} --create-namespace --repo "${prereqRepo}" "${prereqChart}" -f temp-values.yaml --hide-notes --wait
+      helm upgrade --install "${prereqName}" ${namespaceArg} --create-namespace ${prereqRepoArg} "${prereqChart}" -f temp-values.yaml --hide-notes --wait
       rm temp-values.yaml
     else
       helm upgrade --install "${prereqName}" ${namespaceArg} --create-namespace --repo "${prereqRepo}" "${prereqChart}" --hide-notes --wait