feat: add component labeling for heap/CPU profiles

Add pprof goroutine labels to all busybox components so heap and CPU profiles correctly identify which component they're from. Problem: After busybox consolidation (PR #19819), all components report "File: central" in profiles instead of actual component name (e.g., "kubernetes-sensor", "admission-control"). Root cause: Single binary, Go profiler reports binary name not symlink. Solution: Call profiling.SetComponentLabel() early in each component's app.Run() to tag goroutines with component name from os.Args[0]. Components updated: - central - sensor/kubernetes - sensor/admission-control - config-controller - migrator - compliance - roxagent - sensor-upgrader - roxctl This enables filtering profiles by component: go tool pprof -tags component=kubernetes-sensor http://pod:6060/debug/pprof/heap User request: "Can we fix following finding (not only for sensor but for all other components use their args[0] instead of central)" Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
stackrox · janisz · Apr 13, 2026 · Apr 13, 2026 · Apr 13, 2026 · Apr 13, 2026
commit d3de83e0792a1701684149f2b3281c6d3d8e89fc
diff --git a/central/app/app.go b/central/app/app.go
@@ -4,20 +4,21 @@ import (
 	"github.com/stackrox/rox/pkg/logging"
 	"github.com/stackrox/rox/pkg/memlimit"
 	"github.com/stackrox/rox/pkg/premain"
+	"github.com/stackrox/rox/pkg/profiling"
 )
 
 var (
 	log = logging.LoggerForModule()
 )
 
 // Run is the main entry point for the central application.
-// For Phase 1, this just does early initialization.
-// The actual central logic remains in main.CentralRun() until full migration.
+// Performs early initialization and component-specific setup before
+// main.CentralRun() starts the actual central service logic.
 func Run() {
+	profiling.SetComponentLabel()
 	memlimit.SetMemoryLimit()
 	premain.StartMain()
 
-	// Component-specific initialization will be added in Phase 3
 	initMetrics()
 	initCompliance()
 	initGraphQL()

diff --git a/compliance/cmd/compliance/app/app.go b/compliance/cmd/compliance/app/app.go
@@ -11,6 +11,7 @@ import (
 	"github.com/stackrox/rox/pkg/env"
 	"github.com/stackrox/rox/pkg/logging"
 	"github.com/stackrox/rox/pkg/memlimit"
+	"github.com/stackrox/rox/pkg/profiling"
 	"github.com/stackrox/rox/pkg/retry/handler"
 )
 
@@ -20,6 +21,7 @@ var (
 
 // Run is the main entry point for the compliance application.
 func Run() {
+	profiling.SetComponentLabel()
 	memlimit.SetMemoryLimit()
 
 	if err := continuousprofiling.SetupClient(continuousprofiling.DefaultConfig()); err != nil {

diff --git a/compliance/virtualmachines/roxagent/app/app.go b/compliance/virtualmachines/roxagent/app/app.go
@@ -8,12 +8,14 @@ import (
 
 	"github.com/stackrox/rox/compliance/virtualmachines/roxagent/cmd"
 	"github.com/stackrox/rox/pkg/logging"
+	"github.com/stackrox/rox/pkg/profiling"
 )
 
 var log = logging.LoggerForModule()
 
 // Run is the main entry point for the roxagent application.
 func Run() {
+	profiling.SetComponentLabel()
 	// Create a context that is cancellable on the usual command line signals. Double
 	// signal forcefully exits.
 	ctx, cancel := context.WithCancel(context.Background())

diff --git a/config-controller/app/app.go b/config-controller/app/app.go
@@ -27,6 +27,7 @@ import (
 	"github.com/stackrox/rox/config-controller/pkg/client"
 	"github.com/stackrox/rox/pkg/env"
 	"github.com/stackrox/rox/pkg/logging"
+	"github.com/stackrox/rox/pkg/profiling"
 	"github.com/stackrox/rox/pkg/tlsprofile"
 	"k8s.io/apimachinery/pkg/runtime"
 	utilruntime "k8s.io/apimachinery/pkg/util/runtime"
@@ -62,6 +63,7 @@ func init() {
 
 // Run is the main entry point for the config-controller application.
 func Run() {
+	profiling.SetComponentLabel()
 	var metricsAddr string
 	var probeAddr string
 	var secureMetrics bool

@@ -15,12 +15,14 @@ import (
 	"github.com/stackrox/rox/pkg/postgres"
 	"github.com/stackrox/rox/pkg/postgres/pgadmin"
 	"github.com/stackrox/rox/pkg/postgres/pgconfig"
+	"github.com/stackrox/rox/pkg/profiling"
 	"github.com/stackrox/rox/pkg/retry"
 	"github.com/stackrox/rox/pkg/version"
 )
 
 // Run is the main entry point for the migrator application.
 func Run() {
+	profiling.SetComponentLabel()
 	startProfilingServer()
 	if err := run(); err != nil {
 		log.WriteToStderrf("Migrator failed: %+v", err)

diff --git a/pkg/profiling/component.go b/pkg/profiling/component.go
@@ -0,0 +1,20 @@
+package profiling
+
+import (
+	"context"
+	"os"
+	"path/filepath"
+	"runtime/pprof"
+)
+
+// SetComponentLabel tags the current goroutine with the component name
+// derived from os.Args[0]. This ensures heap and CPU profiles correctly
+// identify which component they're from in busybox-style binaries.
+//
+// Call this early in app initialization, before starting goroutines.
+func SetComponentLabel() {
+	componentName := filepath.Base(os.Args[0])
+	labels := pprof.Labels("component", componentName)
+	ctx := pprof.WithLabels(context.Background(), labels)
+	pprof.SetGoroutineLabels(ctx)
+}
@@ -6,6 +6,7 @@ import (
 
 	"github.com/spf13/cobra"
 	"github.com/stackrox/rox/pkg/clientconn"
+	"github.com/stackrox/rox/pkg/profiling"
 	"github.com/stackrox/rox/pkg/sync"
 	"github.com/stackrox/rox/roxctl/common"
 	"github.com/stackrox/rox/roxctl/maincommand"
@@ -17,6 +18,7 @@ import (
 
 // Run is the main entry point for the roxctl application.
 func Run() {
+	profiling.SetComponentLabel()
 	c := maincommand.Command()
 
 	c.SetHelpFunc(utils.FormatHelp)

@@ -19,6 +19,7 @@ import (
 	"github.com/stackrox/rox/pkg/mtls"
 	"github.com/stackrox/rox/pkg/mtls/verifier"
 	"github.com/stackrox/rox/pkg/pods"
+	"github.com/stackrox/rox/pkg/profiling"
 	"github.com/stackrox/rox/pkg/safe"
 	"github.com/stackrox/rox/pkg/utils"
 	"github.com/stackrox/rox/pkg/version"
@@ -41,6 +42,7 @@ var (
 
 // Run is the main entry point for the admission-control application.
 func Run() {
+	profiling.SetComponentLabel()
 	memlimit.SetMemoryLimit()
 	initMetrics()
 

@@ -16,6 +16,7 @@ import (
 	"github.com/stackrox/rox/pkg/memlimit"
 	"github.com/stackrox/rox/pkg/metrics"
 	"github.com/stackrox/rox/pkg/premain"
+	"github.com/stackrox/rox/pkg/profiling"
 	"github.com/stackrox/rox/pkg/utils"
 	"github.com/stackrox/rox/pkg/version"
 	"github.com/stackrox/rox/sensor/common/centralclient"
@@ -35,6 +36,7 @@ var log = logging.LoggerForModule()
 
 // Run is the main entry point for the kubernetes-sensor application.
 func Run() {
+	profiling.SetComponentLabel()
 	memlimit.SetMemoryLimit()
 
 	premain.StartMain()

diff --git a/sensor/upgrader/app/app.go b/sensor/upgrader/app/app.go
@@ -8,6 +8,7 @@ import (
 	"github.com/stackrox/rox/pkg/clientconn"
 	"github.com/stackrox/rox/pkg/features"
 	"github.com/stackrox/rox/pkg/logging"
+	"github.com/stackrox/rox/pkg/profiling"
 	"github.com/stackrox/rox/pkg/utils"
 	"github.com/stackrox/rox/pkg/version"
 	"github.com/stackrox/rox/sensor/upgrader/config"
@@ -25,6 +26,7 @@ var (
 
 // Run is the main entry point for the sensor-upgrader application.
 func Run() {
+	profiling.SetComponentLabel()
 	log.Infof("StackRox Sensor Upgrader, version %s", version.GetMainVersion())
 	features.LogFeatureFlags()