Set up Kubernetes monitoring

Deploy Dynatrace Operator and enable Kubernetes API monitoring

Use the instructions below to configure Dynatrace Operator to monitor your Kubernetes cluster.

1. Create the necessary objects for Dynatrace Operator.
   Dynatrace Operator acts on its separate namespace, dynatrace. It holds the operator deployment and all dependent objects, such as permissions, custom resources, and the corresponding DaemonSet and StatefulSet. You can also observe the logs of Dynatrace Operator.

kubectl create namespace dynatrace
kubectl apply -f https://github.com/Dynatrace/dynatrace-operator/releases/latest/download/kubernetes.yaml
kubectl -n dynatrace logs -f deployment/dynatrace-operator

2. Create the secret holding API and PaaS tokens for authentication to the Dynatrace Cluster.
   The name of the secret is important in a later step when you configure the custom resource (.spec.tokens). In the following code snippet, the name is dynakube. Be sure to replace API_TOKEN and PAAS_TOKEN with the values explained in the prerequisites.

kubectl -n dynatrace create secret generic dynakube --from-literal="apiToken=API_TOKEN" --from-literal="paasToken=PAAS_TOKEN"

3. Get the DynaKube custom resource from the GitHub repository.

curl -o cr.yaml https://raw.githubusercontent.com/Dynatrace/dynatrace-operator/master/config/samples/cr.yaml

4. Adapt the values of the custom resource as indicated below.

Example of a basic configuration:

apiVersion: dynatrace.com/v1alpha1
kind: DynaKube
metadata:
  name: dynakube
  namespace: dynatrace
spec:
  # Dynatrace apiUrl including the `/api` path at the end.
  # For SaaS, set `YOUR_ENVIRONMENT_ID` to your environment ID.
  # For Managed, change the apiUrl address.
  # For instructions on how to determine the environment ID and how to configure the apiUrl address, see https://www.dynatrace.com/support/help/reference/dynatrace-concepts/environment-id/.
  #
  apiUrl: https://YOUR_ENVIRONMENT_ID.live.dynatrace.com/api

  # Name of the secret holding the API and PaaS tokens.
  # If unset, Dynatrace Operator uses the name of the custom resource.
  #
  # tokens: ""

  # Enables and configures an ActiveGate instance that allows monitoring
  # of Kubernetes environments.
  #
  kubernetesMonitoring:
    #   Enable Kubernetes monitoring functionality.
    #
    enabled: true
  classicFullStack:
    # Enable classic oneagent monitoring
    enabled: true
    tolerations:
      - effect: NoSchedule
        key: node-role.kubernetes.io/master
        operator: Exists

args:
   - "--set-proxy="

For a complete list of parameters, see the list below.

For a complete file with all the properties, see the custom resource file on GitHub.

classicFullStack:
 env:
  - name: ONEAGENT_ENABLE_VOLUME_STORAGE
    value: "true"

classicFullStack:
 env:
  - name: ONEAGENT_ENABLE_VOLUME_STORAGE
    value: "true"
  - name: ONEAGENT_CONTAINER_STORAGE_PATH
    value: /var/vcap/store

classicFullStack:
 env:
  - name: ONEAGENT_ENABLE_VOLUME_STORAGE
    value: "true"
  - name: ONEAGENT_CONTAINER_STORAGE_PATH
    value: /opt

classicFullStack:
 env:
  - name: ONEAGENT_ENABLE_VOLUME_STORAGE
    value: "true"

5. Apply the custom resource.

kubectl apply -f cr.yaml

optional Configure proxy

• You can configure optional parameters like proxy settings in the cr.yaml file in order to
  • Download the OneAgent installer
  • Ensure communication between the OneAgent and your Dynatrace environment
  • Ensure communication between Dynatrace Operator and the Dynatrace API.

There are two ways to provide the proxy, depending on whether your proxy uses credentials.

apiVersion: dynatrace.com/v1alpha1
kind: DynaKube
metadata:  
  name: dynakube  
  namespace: dynatrace
spec:  
  apiUrl: https://environmentid.dynatrace.com/api  
  proxy:    
    value: http://mysuperproxy

kubectl -n dynatrace create secret generic myproxysecret --from-literal="proxy=http://<user>:<password>@<IP>:<PORT>"

apiVersion: dynatrace.com/v1alpha1
kind: DynaKube
metadata:  
  name: dynakube  
  namespace: dynatrace
spec:  
  apiUrl: https://environmentid.dynatrace.com/api  
  proxy:    
    valueFrom: myproxysecret

Connect your Kubernetes cluster to Dynatrace

Some Kubernetes pages require that your Kubernetes cluster is connected to Dynatrace. This connection creates relationships among applications, services, processes, hosts, and Kubernetes objects, such as pods and namespaces.

To connect your cluster

1. Get the Kubernetes API URL.

kubectl config view --minify -o jsonpath='{.clusters[0].cluster.server}'

2. Get the bearer token.

kubectl get secret $(kubectl get sa dynatrace-kubernetes-monitoring -o jsonpath='{.secrets[0].name}' -n dynatrace) -o jsonpath='{.data.token}' -n dynatrace | base64 --decode

kubectl config view --minify -o jsonpath='{.clusters[0].cluster.server}'

3. In Dynatrace, go to Settings > Cloud and virtualization > Kubernetes.
4. Select Connect new cluster.
5. Provide a Name, the Kubernetes API URL, and the Bearer token for the Kubernetes cluster.

Note: For Rancher distributions, you need the bearer token that was created in the Rancher web UI, as described in Special instructions for Rancher distributions to get the API URL and the bearer token above.

6. Enable Enable monitoring and Show workloads and cloud applications.

7. Select Connect to save your configuration.

Monitor large Kubernetes environments

Contact Dynatrace ONE if you want to monitor environments that are larger than:

• 50 Kubernetes clusters per Dynatrace environment
• 500 nodes per Kubernetes cluster
• 50,000 pods per Kubernetes cluster

Uninstall Dynatrace Operator

Remove DynaKube custom resources and clean all remaining Dynatrace Operator–specific objects.

kubectl delete -n dynatrace dynakube --all
kubectl delete -f https://github.com/Dynatrace/dynatrace-operator/releases/latest/download/kubernetes.yaml