• Home
  • Setup and configuration
  • Set up Dynatrace on container platforms
  • Kubernetes
  • Get started with Kubernetes/OpenShift monitoring
  • DynaKube parameters for Dynatrace Operator on Kubernetes/OpenShift

DynaKube parameters for Dynatrace Operator on Kubernetes/OpenShift

After creating the DynaKube custom resource, Dynatrace Operator deploys various components based on the configuration you chose. Review the available parameters and adapt the DynaKube custom resource according to your requirements. For some working examples, see the Dynakube samples from Github.

You can't enable more than one module (classicFullStack, cloudNativeFullStack, hostMonitoring, or applicationMonitoring).

If you want to revert an argument, you need to set it to empty instead of removing it from the custom resource.

Example:

yaml
args: - "--set-host-group="

Global parameters

The following parameters apply to all configuration options.

ParameterDescriptionDefault valueData type
apiUrlRequired Dynatrace apiUrl, including the /api path at the end.
- For SaaS, set YOUR_ENVIRONMENT_ID to your environment ID.
- For Managed, change the apiUrl address.
For instructions on how to determine the environment ID and how to configure the apiUrl address, see Environment ID.
N/Astring
tokensOptional Name of the secret holding the tokens.Name of custom resource (.metadata.name) if unsetstring
skipCertCheckOptional Disable certificate check for the connection between Dynatrace Operator and the Dynatrace Cluster.
Set to true if you want to skip certification validation checks.
falseboolean
proxyOptional Set custom proxy settings either directly or from a secret with the field proxy.
Note: Only Dynatrace Operator traffic runs through this proxy; ActiveGate traffic doesn't.
N/Astring
trustedCAsOptional Adds custom RootCAs from a configmap. Put the certificate under certs within your configmap.
Note: Applies only to Dynatrace Operator, not to ActiveGate.
N/Astring
networkZoneOptional Sets a network zone for the OneAgent and ActiveGate pods.N/Astring
customPullSecretOptional Defines a custom pull secret in case you use a private registry when pulling images from the Dynatrace environment. To define a custom pull secret, sign in to Docker (see step 1 in Deploy OneAgent instructions). Then, for details, see Create a Secret based on existing credentials.N/Astring
enableIstioOptional When enabled, and if Istio is installed on the Kubernetes environment, Dynatrace Operator will create the corresponding VirtualService and ServiceEntry objects to allow access to the Dynatrace Cluster from the OneAgent or ActiveGate. Disabled by default.falseboolean
namespaceSelectorOptional Applicable only for applicationMonitoring or cloudNativeFullStack configuration types. The namespaces where you want Dynatrace Operator to inject. For more information, see Configure monitoring for namespaces and pods.N/ALabelSelector

classicFullStack deployment

recommended
  • Has a single OneAgent per node via DaemonSet.
  • Injection is performed via the same OneAgent DaemonSet.
ParameterDescriptionDefault valueData type
versionOptional The OneAgent version to be used.The latest version is used by default.string
imageOptional Use a custom OneAgent Docker image. Defaults to the image from the Dynatrace cluster.Name of the image.string
tolerationsOptional Tolerations to include with the OneAgent DaemonSet.
For details, see Taints and Tolerations.
N/A[]Toleration
nodeSelectorOptional Specify the node selector that controls on which nodes OneAgent will be deployed.N/Amap[string]string
priorityClassNameOptional Assign a priority class to the OneAgent pods. By default, no class is set.
For details, see Pod Priority and Preemption.
N/Astring
oneAgentResourcesOptional Resource settings for OneAgent container. Consumption of the OneAgent heavily depends on the workload to monitor. You can use the default settings in the CR.
Note: resource.requests shows the values needed to run; resource.limits shows the maximum limits for the pod.
N/AResourceRequirements

cloudNativeFullStack deployment

  • Has a single OneAgent per node via DaemonSet.
  • dynatrace-webhook injects into application pods based on labeled namespaces.
  • Has a CSI driver per node via DaemonSet to provide binaries to pods.

Note: Using an environment ActiveGate as an apiUrl target in the DynaKube custom resource isn't yet supported. Support starts with ActiveGate version 1.237.

ParameterDescriptionDefault valueData type
imageOptional Use a custom OneAgent Docker image.The image from the Dynatrace cluster.string
codeModulesImageOptional The OneAgent image that is used to inject into PodsN/Astring
versionOptional The OneAgent version to be used.The latest version is used by default.string
tolerationsOptional Tolerations to include with the OneAgent DaemonSet.
For details, see Taints and Tolerations.
N/A[]Toleration
nodeSelectorOptional Specify the node selector that controls on which nodes OneAgent will be deployed.N/Amap[string]string
priorityClassNameOptional Assign a priority class to the OneAgent pods. By default, no class is set.
For details, see Pod Priority and Preemption.
N/Astring
oneAgentResourcesOptional Resource settings for OneAgent container. Consumption of the OneAgent heavily depends on the workload to monitor. You can use the default settings in the CR.
Note: resource.requests shows the values needed to run; resource.limits shows the maximum limits for the pod.
N/AResourceRequirements
autoUpdateOptional Disables automatic restarts of OneAgent pods in case a new version is available. Enabled by default.trueboolean
dnsPolicyOptional Set the DNS Policy for OneAgent pods.
For details, see Pods DNS Policy.
ClusterFirstWithHostNetstring
labelsOptional Your defined labels for OneAgent pods in order to structure workloads as desired.N/Amap[string]string
envOptional Set additional environment variables for the OneAgent pods.N/A[]EnvVar
argsOptional Set additional arguments to the OneAgent installer.
For available options, see Linux custom installation.
For the list of limitations, see Limitations.
N/A[]string
initResourcesOptional Define resources requests and limits for the initContainer. For details, see Managing resources for containers.N/AResourceRequirements

applicationMonitoring deployment

  • dynatrace-webhook injects into application pods based on labeled namespaces.
  • Has an optional CSI driver per node via DaemonSet to provide binaries to pods.
ParameterDescriptionDefault valueData type
codeModulesImageOptional The OneAgent image that is used to inject into PodsN/Astring
versionOptional The OneAgent version to be used.The latest version is used by default.string
useCSIDriverOptional Set if you want to use the CSIDriver. Don't enable it if you do not have access to Kubernetes nodes or if you lack privileges.falseboolean
initResourcesOptional Define resources requests and limits for the initContainer. For details, see Managing resources for containers.N/AResourceRequirements

hostMonitoring deployment

  • Has a single OneAgent per node via DaemonSet.
  • Doesn't inject into application pods.
ParameterDescriptionDefault valueData type
versionOptional The OneAgent version to be used.The latest version is used by default.string
imageOptional Use a custom OneAgent Docker image.The image from the Dynatrace cluster.string
tolerationsOptional Tolerations to include with the OneAgent DaemonSet.
For details, see Taints and Tolerations.
N/A[]Toleration
oneAgentResourcesOptional Resource settings for OneAgent container. Consumption of the OneAgent heavily depends on the workload to monitor. You can use the default settings in the CR.
Note: resource.requests shows the values needed to run; resource.limits shows the maximum limits for the pod.
N/AResourceRequirements
autoupdateOptional Disables automatic restarts of OneAgent pods in case a new version is available. Enabled by default.trueboolean
dnsPolicyOptional Set the DNS Policy for OneAgent pods.
For details, see Pods DNS Policy.
ClusterFirstWithHostNetstring
labelsOptional Your defined labels for OneAgent pods in order to structure workloads as desired.N/Amap[string]string
envOptional Set additional environment variables for the OneAgent pods.N/A[]EnvVar
argsOptional Set additional arguments to the OneAgent installer.
For available options, see Linux custom installation.
For the list of limitations, see Limitations.
N/A[]string

ActiveGate deployment

  • Offers a single pod able to perform many capabilities at once.
  • Can be broken into separate concerns with additional Dynakube configurations.
ParameterDescriptionDefault valueData type
capabilitiesDefines the ActiveGate pod capabilities: what functionality should be enabled (possible values: routing, kubernetes-monitoring, metrics-ingest).N/Astring
imageOptional Use a custom OneAgent Docker image. Defaults to the image from the Dynatrace cluster.N/Astring
replicasOptional Amount of replicas of ActiveGate pods.N/Aint
tolerationsOptional Set tolerations for the ActiveGate pods.
For details, see Taints and Tolerations.
N/A[]Toleration
nodeSelectorOptional Specify the node selector that controls on which nodes ActiveGate will be deployed.N/Amap[string]string
resourcesOptional Resource settings for ActiveGate container. Consumption of the ActiveGate heavily depends on the workload to monitor; adjust values accordingly.N/AResourceRequirements
labelsOptional Your defined labels for ActiveGate pods in order to structure workloads as desired.N/Amap[string]string
envOptional Set additional environment variables for the ActiveGate pods.N/A[]EnvVar
customPropertiesOptional Add a custom properties file by providing it as a value or by referencing it from a secret.
Note: When referencing a custom properties file from a secret, make sure that the key is named customProperties. See How to add a custom properties file for details.
N/Astring
groupOptional Set activation group for ActiveGate. See Customize ActiveGate properties for details.N/Astring
tlsSecretNameOptional Name of a secret containing ActiveGate TLS certificate, key, and password. If not set, a self-signed certificate is used. For details, see How to add a custom certificate for ActiveGate.N/Astring

multipleDynakubes deployment

  • You can choose to which Dynatrace environment you want to send metrics from different namespaces.

Additional parameters required for Anthos, SUSE CaaS, GKE, IKS, and TKGI

classicFullStack

For Anthos, SUSE CaaS, Google Kubernetes Engine, and VMware Tanzu Kubernetes Grid Integrated Edition (formerly PKE), you must add the following additional parameters to the env section in the DynaKube custom resource file.

Note: Starting with Dynatrace Operator version 0.5, when a read-only host file system is used with cloudNativeFullStack or hostMonitoring deployments, these additional parameters aren't needed. They are needed only if the feature is explicitly disabled. For details, see Read-only file systems.

Anthos and GKE
yaml
classicFullStack: # change to `cloudNativeFullStack` or `hostMonitoring` if needed env: - name: ONEAGENT_ENABLE_VOLUME_STORAGE value: "true"
TKGI
yaml
classicFullStack: # change to `cloudNativeFullStack` or `hostMonitoring` if needed env: - name: ONEAGENT_ENABLE_VOLUME_STORAGE value: "true" - name: ONEAGENT_CONTAINER_STORAGE_PATH value: /var/vcap/store
IKS
yaml
classicFullStack: # change to `cloudNativeFullStack` or `hostMonitoring` if needed env: - name: ONEAGENT_ENABLE_VOLUME_STORAGE value: "true" - name: ONEAGENT_CONTAINER_STORAGE_PATH value: /opt
SUSE CaaS
yaml
classicFullStack: # change to `cloudNativeFullStack` or `hostMonitoring` if needed env: - name: ONEAGENT_ENABLE_VOLUME_STORAGE value: "true"
Related topics
  • Kubernetes/OpenShift monitoring

    Monitor Kubernetes/OpenShift with Dynatrace.