Application observability with pod runtime injection

Inject OneAgent code modules into a container during its deployment.

This method of application instrumentation may not fully link Kubernetes workloads with monitored containers/processes. For comprehensive relationships and linking, consider using the automatic application-only injection.

Prerequisites

Review the list of supported applications and versions.
Create an access token with PaaS Integration - InstallerDownload scope.
Storage requirements:
- ~325 MB for glibc
- ~290 MB for musl
- ~650 MB for glibc and musl combined

Deploy

To integrate OneAgent into your application at runtime, select one of the options below based on your platform.

OneAgent is made available to the application container via an initContainer—your application image remains unaffected.

To integrate OneAgent into your application at runtime, extend your deployment template as follows.

1# your application containers
2      containers:
3      - name: customer-app
4        image: tomcat
5        env:
6        - name: LD_PRELOAD
7          value: /opt/dynatrace/oneagent/agent/lib64/liboneagentproc.so
8        - name: DT_NETWORK_ZONE
9          value: <your_network_zone>
10        volumeMounts:
11        - mountPath: /opt/dynatrace/oneagent
12          name: oneagent
13
14# initcontainer to download OneAgent
15      initContainers:
16      - name: install-oneagent
17        image: alpine:latest
18        command:
19        - /bin/sh
20        args:
21        - -c
22        - ARCHIVE=$(mktemp) && wget -O $ARCHIVE "$DT_API_URL/v1/deployment/installer/agent/unix/paas/latest?Api-Token=$DT_PAAS_TOKEN&$DT_ONEAGENT_OPTIONS" && unzip -o -d /opt/dynatrace/oneagent $ARCHIVE && rm -f $ARCHIVE
23        env:
24        - name: DT_API_URL
25          value: https://<Your-environment-ID>.live.dynatrace.com/api
26        - name: DT_PAAS_TOKEN
27          value: <paastoken>
28        - name: DT_ONEAGENT_OPTIONS
29          value: flavor=<FLAVOR>&include=<TECHNOLOGY>
30        volumeMounts:
31        - mountPath: /opt/dynatrace/oneagent
32          name: oneagent
33
34# Make OneAgent available as a volume
35      volumes:
36      - name: oneagent
37        emptyDir: {}

In the # initContainer to download OneAgent and # Make OneAgent available as a volume sections, add the initContainer, which will download OneAgent and make it available as a volume.
In the DT_ONEAGENT_OPTIONS section, set the OneAgent code module required for your compiler flavor (FLAVOR) and application (TECHNOLOGY).
- Valid options for flavor are default, musl, or multidistro. Set default to download glibc binaries or set musl to download musl binaries. Set multidistro to download both the musl and glibc binaries and subsequently autodetect which binaries to use. Note that image size will be larger in this case, as it includes both flavors.
- Valid options for technology are all, java, apache, nginx, nodejs, dotnet, php, go, and sdk.
- For ARM, use the following value: flavor=default&arch=arm&include=<TECHNOLOGY>. For other architectures, see the list of valid values (scroll down to the arch parameter).
- If you want to specify several code modules, use the following syntax: &include=technology1&include=technology2.

If you include specific technology-support options rather than 'support for all technologies' options, you'll get a smaller OneAgent package.

What if my Docker image is based on Alpine Linux?

Dynatrace OneAgent supports the flavor musl for Alpine Linux based environments.
Valid options for technology are all, dotnet, go, php, java, apache, nginx, and nodejs.

In the # your application containers section, add the newly created volume to the container of your application. Also add the LD_PRELOAD environment variable.
optional In the # your application containers section, configure network zones:

1containers:
2  env:
3  - name: DT_NETWORK_ZONE
4    value: <your_network_zone>

See network zones for more information.

optional Configure a proxy address.

In case you run an environment with proxy, you need to set the DT_PROXY environment variable in the application container to pass the proxy credentials to OneAgent.

For Alpine Linux-based containers, you might need to update the wget shipped with the Alpine image to allow for proxy authentication for the download of OneAgent.

Update

Each time you want to leverage a new OneAgent version, you only need to redeploy your pods. In runtime injections, OneAgent is downloaded and injected within an initContainer. By default, the latest version of OneAgent is downloaded, but you can control which OneAgent version is downloaded by specifying it in the download URL.

Uninstall

To uninstall OneAgent from application-only monitoring

Remove the install-oneagent YAML from your deployment template.

1# your application containers
2containers:
3  - name: customer-app
4    image: tomcat
5    env:
6      - name: LD_PRELOAD
7        value: /opt/dynatrace/oneagent/agent/lib64/liboneagentproc.so
8    volumeMounts:
9      - mountPath: /opt/dynatrace/oneagent
10        name: oneagent
11
12# initContainer to download OneAgent
13initContainers:
14  - name: install-oneagent
15    image: alpine:3.8
16    command:
17      - /bin/sh
18    args:
19      - -c
20      - ARCHIVE=$(mktemp) && wget -O $ARCHIVE "$DT_API_URL/v1/deployment/installer/agent/unix/paas/latest?Api-Token=$DT_PAAS_TOKEN&$DT_ONEAGENT_OPTIONS" && unzip -o -d /opt/dynatrace/oneagent $ARCHIVE && rm -f $ARCHIVE
21    env:
22      - name: DT_API_URL
23        value: https://<Your-environment-ID>.live.dynatrace.com/api
24      - name: DT_PAAS_TOKEN
25        value: <paastoken>
26      - name: DT_ONEAGENT_OPTIONS
27        value: flavor=<FLAVOR>&include=<TECHNOLOGY>
28    volumeMounts:
29      - mountPath: /opt/dynatrace/oneagent
30        name: oneagent
31
32# Make OneAgent available as a volume
33volumes:
34  - name: oneagent
35    emptyDir: {}

Redeploy your application.