• Home
  • Setup and configuration
  • Set up Dynatrace on container platforms
  • Kubernetes
  • Get started with Kubernetes/OpenShift monitoring
  • DynaKube parameters for Dynatrace Operator on Kubernetes/OpenShift

DynaKube parameters for Dynatrace Operator on Kubernetes/OpenShift

After creating the DynaKube custom resource, Dynatrace Operator deploys various components based on the configuration you chose. Review the available parameters and adapt the DynaKube custom resource according to your requirements. For some working examples, see the Dynakube samples from Github.

You can't enable more than one module (classicFullStack, cloudNativeFullStack, hostMonitoring, or applicationMonitoring).

If you want to revert an argument, you need to set it to empty instead of removing it from the custom resource.

Example:

yaml
args: - "--set-host-group="

Global parameters

The following parameters apply to all configuration options.

ParameterDescriptionDefault value
apiUrlRequired Dynatrace apiUrl, including the /api path at the end.
- For SaaS, set YOUR_ENVIRONMENT_ID to your environment ID.
- For Managed, change the apiUrl address.
For instructions on how to determine the environment ID and how to configure the apiUrl address, see Environment ID.
N/A
tokensOptional Name of the secret holding the tokens.Name of custom resource (.metadata.name) if unset
skipCertCheckOptional Disable certificate check for the connection between Dynatrace Operator and the Dynatrace Cluster.
Set to true if you want to skip certification validation checks.
false
proxyOptional Set custom proxy settings either directly or from a secret with the field proxy.
Note: Only Dynatrace Operator traffic runs through this proxy; ActiveGate traffic doesn't.
N/A
trustedCAsOptional Adds custom RootCAs from a configmap. Put the certificate under certs within your configmap.
Note: Applies only to Dynatrace Operator, not to ActiveGate.
N/A
networkZoneOptional Sets a network zone for the OneAgent and ActiveGate pods.N/A
customPullSecretOptional Defines a custom pull secret in case you use a private registry when pulling images from the Dynatrace environment. For details, see Create a Secret based on existing credentials.N/A
enableIstioOptional When enabled, and if Istio is installed on the Kubernetes environment, Dynatrace Operator will create the corresponding VirtualService and ServiceEntry objects to allow access to the Dynatrace Cluster from the OneAgent or ActiveGate. Disabled by default.false
namespaceSelectorOptional Applicable only for applicationMonitoring or cloudNativeFullStack configuration types. The namespaces where you want Dynatrace Operator to inject. For more information, see Configure monitoring for namespaces and pods.N/A

classicFullStack deployment

recommended
  • Has a single OneAgent per node via DaemonSet.
  • Injection is performed via the same OneAgent DaemonSet.
ParameterDescriptionDefault value
versionOptional The OneAgent version to be used.The latest version is used by default.
imageOptional Use a custom OneAgent Docker image. Defaults to the image from the Dynatrace cluster.N/A
tolerationsOptional Tolerations to include with the OneAgent DaemonSet.
For details, see Taints and Tolerations.
N/A
nodeSelectorOptional Specify the node selector that controls on which nodes OneAgent will be deployed.N/A
priorityClassNameOptional Assign a priority class to the OneAgent pods. By default, no class is set.
For details, see Pod Priority and Preemption.
N/A
oneAgentResourcesOptional Resource settings for OneAgent container. Consumption of the OneAgent heavily depends on the workload to monitor. You can use the default settings in the CR.
Note: resource.requests shows the values needed to run; resource.limits shows the maximum limits for the pod.
N/A

cloudNativeFullStack deployment

  • Has a single OneAgent per node via DaemonSet.
  • dynatrace-webhook injects into application pods based on labeled namespaces.
  • Has a CSI driver per node via DaemonSet to provide binaries to pods.

Note: Using an environment ActiveGate as an apiUrl target in the DynaKube custom resource isn't yet supported. Support starts with ActiveGate version 1.237.

ParameterDescriptionDefault value
versionOptional The OneAgent version to be used.The latest version is used by default.
tolerationsOptional Tolerations to include with the OneAgent DaemonSet.
For details, see Taints and Tolerations.
N/A
nodeSelectorOptional Specify the node selector that controls on which nodes OneAgent will be deployed.N/A
priorityClassNameOptional Assign a priority class to the OneAgent pods. By default, no class is set.
For details, see Pod Priority and Preemption.
N/A
oneAgentResourcesOptional Resource settings for OneAgent container. Consumption of the OneAgent heavily depends on the workload to monitor. You can use the default settings in the CR.
Note: resource.requests shows the values needed to run; resource.limits shows the maximum limits for the pod.
N/A
autoUpdateOptional Disables automatic restarts of OneAgent pods in case a new version is available. Enabled by default.true
dnsPolicyOptional Set the DNS Policy for OneAgent pods.
For details, see Pods DNS Policy.
ClusterFirstWithHostNet
labelsOptional Your defined labels for OneAgent pods in order to structure workloads as desired.N/A
envOptional Set additional environment variables for the OneAgent pods.N/A
argsOptional Set additional arguments to the OneAgent installer.
For available options, see Linux custom installation.
For the list of limitations, see Limitations.
N/A
initResourcesOptional Define resources requests and limits for the initContainer. For details, see Managing resources for containers.N/A

applicationMonitoring deployment

  • dynatrace-webhook injects into application pods based on labeled namespaces.
  • Has an optional CSI driver per node via DaemonSet to provide binaries to pods.
ParameterDescriptionDefault value
versionOptional The OneAgent version to be used.The latest version is used by default.
useCSIDriverOptional Set if you want to use the CSIDriver. Don't enable it if you do not have access to Kubernetes nodes or if you lack privileges.false
initResourcesOptional Define resources requests and limits for the initContainer. For details, see Managing resources for containers.N/A

hostMonitoring deployment

  • Has a single OneAgent per node via DaemonSet.
  • Doesn't inject into application pods.
ParameterDescriptionDefault value
versionOptional The OneAgent version to be used.The latest version is used by default.
imageOptional Use a custom OneAgent Docker image. Defaults to the image from the Dynatrace cluster.N/A
tolerationsOptional Tolerations to include with the OneAgent DaemonSet.
For details, see Taints and Tolerations.
N/A
oneAgentResourcesOptional Resource settings for OneAgent container. Consumption of the OneAgent heavily depends on the workload to monitor. You can use the default settings in the CR.
Note: resource.requests shows the values needed to run; resource.limits shows the maximum limits for the pod.
N/A
autoupdateOptional Disables automatic restarts of OneAgent pods in case a new version is available. Enabled by default.true
dnsPolicyOptional Set the DNS Policy for OneAgent pods.
For details, see Pods DNS Policy.
ClusterFirstWithHostNet
labelsOptional Your defined labels for OneAgent pods in order to structure workloads as desired.N/A
envOptional Set additional environment variables for the OneAgent pods.N/A
argsOptional Set additional arguments to the OneAgent installer.
For available options, see Linux custom installation.
For the list of limitations, see Limitations.
N/A

ActiveGate deployment

  • Offers a single pod able to perform many capabilities at once.
  • Can be broken into separate concerns with additional Dynakube configurations.
ParameterDescriptionDefault value
capabilitiesDefines what the ActiveGatePod is capable of. Defines what functionality should be enabled (possible values: routing, kubernetes-monitoring, metrics-ingest).N/A
imageOptional Use a custom OneAgent Docker image. Defaults to the image from the Dynatrace cluster.N/A
replicasOptional Amount of replicas of ActiveGate pods.N/A
tolerationsOptional Tolerations to include with the OneAgent DaemonSet.
For details, see Taints and Tolerations.
N/A
nodeSelectorOptional Specify the node selector that controls on which nodes ActiveGate will be deployed.N/A
resourcesOptional Resource settings for ActiveGate container. Consumption of the ActiveGate heavily depends on the workload to monitor; please adjust values accordingly.N/A
labelsOptional Your defined labels for ActiveGate pods in order to structure workloads as desired.N/A
envOptional Set additional environment variables for the ActiveGate pods.N/A
customPropertiesOptional Add a custom properties file by providing it as a value or by referencing it from a secret.
Note: When referencing a custom properties file from a secret, make sure that the key is named customProperties. See How to add a custom properties file for details.
N/A
groupOptional Set activation group for ActiveGate. See Customize ActiveGate properties for details.N/A
tolerationsOptional Set tolerations for the ActiveGate podsN/A
tlsSecretNameOptional Name of a secret containing ActiveGate TLS certificate, key, and password. If not set, a self-signed certificate is used. For details, see How to add a custom certificate for ActiveGate.N/A

multipleDynakubes deployment

  • You can choose to which Dynatrace environment you want to send metrics from different namespaces.

Additional parameters required for Anthos, SUSE CaaS, GKE, IKS, and TKGI

classicFullStack

For Anthos, SUSE CaaS, Google Kubernetes Engine, and VMware Tanzu Kubernetes Grid Integrated Edition (formerly PKE), you must add the following additional parameters to the env section in the DynaKube custom resource file.

Note: Starting with Dynatrace Operator version 0.5, when a read-only host file system is used with cloudNativeFullStack or hostMonitoring deployments, these additional parameters aren't needed. They are needed only if the feature is explicitly disabled. For details, see Read-only file systems.

Anthos and GKE
yaml
classicFullStack: # change to `cloudNativeFullStack` or `hostMonitoring` if needed env: - name: ONEAGENT_ENABLE_VOLUME_STORAGE value: "true"
TKGI
yaml
classicFullStack: # change to `cloudNativeFullStack` or `hostMonitoring` if needed env: - name: ONEAGENT_ENABLE_VOLUME_STORAGE value: "true" - name: ONEAGENT_CONTAINER_STORAGE_PATH value: /var/vcap/store
IKS
yaml
classicFullStack: # change to `cloudNativeFullStack` or `hostMonitoring` if needed env: - name: ONEAGENT_ENABLE_VOLUME_STORAGE value: "true" - name: ONEAGENT_CONTAINER_STORAGE_PATH value: /opt
SUSE CaaS
yaml
classicFullStack: # change to `cloudNativeFullStack` or `hostMonitoring` if needed env: - name: ONEAGENT_ENABLE_VOLUME_STORAGE value: "true"
Related topics
  • Kubernetes/OpenShift monitoring

    Monitor Kubernetes/OpenShift with Dynatrace.