Dynatrace / dynatrace-operator

Automate Kubernetes observability with Dynatrace
https://www.dynatrace.com
Apache License 2.0
168 stars 138 forks source link

Helm deployment on Kubernetes should support custom RootCAs to run non-JMX Extension 2.0 on the OneAgents #3179

Closed ericfortinsp closed 6 months ago

ericfortinsp commented 6 months ago

Is your feature request related to a problem? Please describe. Per Dynatrace documentation, for non-JMX Extensions 2.0, we must upload our root.pem certificate into /var/lib/dynatrace/oneagent/agent/config/certificates.

Describe the solution you'd like As a Helm user, I would like my OneAgents pods running on K8s to use my root.pem content that I've provided in my values.yaml file when I've installed the Dyntrace-operator Helm chart on my Kubernetes cluster. That way, I could run non-JMX Extension 2.0 on my cluster.

Describe alternatives you've considered None as it seems the OneAgent are deployed by the dynatrace-operator (outside my control)

chrismuellner commented 6 months ago

You can configure the certificates using the trustedCAs field in the Dynakube: Network configuration guide in official documentation