This page will help you to understand and configure the Kubernetes Custom Resource "DynaKube", enabling you to optimize your Dynatrace Operator setup according to your specific requirements.
The following table lists the minimum required Dynatrace Operator versions for each DynaKube API version.
v1beta3
v1beta2
v1beta1
Dynatrace Operator version 1.4.0+
.spec
apiUrl
parameter is required.apiUrl
apiUrl
, including the /api
path at the end.YOUR_ENVIRONMENT_ID
to your environment ID.apiUrl
address.customPullSecret
customPullSecret
.dynatraceApiRequestThreshold
enableIstio
networkZone
proxy
proxy
.skipCertCheck
true
if you want to skip certification validation checks.tokens
trustedCAs
certs
..spec.oneAgent
hostGroup
--set-host-group
argument. If both settings are used, this field takes precedence over the --set-host-group
argument..spec.oneAgent.cloudNativeFullStack
recommended
annotations
args
autoUpdate
true
codeModulesImage
dnsPolicy
ClusterFirstWithHostNet
env
image
initResources
labels
namespaceSelector
nodeSelector
oneAgentResources
resource.requests
shows the values needed to run; resource.limits
shows the maximum limits for the pod.priorityClassName
secCompProfile
tolerations
version
.spec.oneAgent.classicFullStack
annotations
args
autoUpdate
true
dnsPolicy
ClusterFirstWithHostNet
env
image
labels
nodeSelector
oneAgentResources
resource.requests
shows the values needed to run; resource.limits
shows the maximum limits for the pod.priorityClassName
secCompProfile
tolerations
version
.spec.oneAgent.applicationMonitoring
codeModulesImage
initResources
namespaceSelector
version
.spec.oneAgent.hostMonitoring
annotations
args
autoupdate
true
dnsPolicy
ClusterFirstWithHostNet
env
image
labels
nodeSelector
oneAgentResources
resource.requests
shows the values needed to run; resource.limits
shows the maximum limits for the pod.priorityClassName
secCompProfile
tolerations
version
.spec.activeGate
capabilities
parameter is required.resources
and group
parameters are recommended.annotations
capabilities
routing
enables OneAgent routing.kubernetes-monitoring
enables Kubernetes API monitoring.metrics-ingest
1 opens the metrics ingest endpoint on the DynaKube ActiveGate and redirects all pods to it.dynatrace-api
1 enables calling the Dynatrace API via ActiveGate.customProperties
customProperties
. See How to add a custom properties file for details.dnsPolicy
ClusterFirstWithHostNet
env
image
labels
nodeSelector
priorityClassName
replicas
resources
tlsSecretName
tolerations
topologySpreadConstraints
A custom certificate is required for this capability. See the tlsSecretName
parameter for details.
.spec.metadataEnrichment
enabled
true
by default.true
namespaceSelector
.spec.extensions
Available with a future Dynatrace version (CQ2/2025).
Adding this section enables extension support in Kubernetes.
.spec.kspm
Adding this section enables Kubernetes Security Posture Management (KSPM).
.spec.logMonitoring
Available with Dynatrace version 1.306 and OneAgent 1.305
.spec.logMonitoring
are optional.ingestRuleMatchers
.spec.logMonitoring.ingestRuleMatchers {:#log-monitoring-ingest-rule-matchers}
attribute
values
attribute
must match for an ingest rule to apply.ingestRuleMatchers:- attribute: "k8s.namespace.name"values:- "kube-system"- "dynatrace"- "default"- attribute: "k8s.pod.annotation",values:- "logs.dynatrace.com/ingest=true"- "category=security"
.spec.templates
.spec.templates.kspmNodeConfigurationCollector
updateStrategy
labels
annotations
nodeSelector
priorityClassName
resources
nodeAffinity
tolerations
args
env
.spec.templates.kspmNodeConfigurationCollector.imageRef
.spec.templates.logMonitoring
Available with Dynatrace version 1.306 and OneAgent 1.305
imageRef
parameter is required.annotations
labels
nodeSelector
dnsPolicy
ClusterFirst
priorityClassName
secCompProfile
resources
tolerations
args
.spec.templates.logMonitoring.imageRef
Available with Dynatrace version 1.306 and OneAgent 1.305
.spec.templates.extensionExecutionController
Available with a future Dynatrace version in (CQ2/2025).
imageRef
parameter is required..spec.templates.extensionExecutionController.imageRef
Available with a future Dynatrace version (CQ2/2025).
.spec.templates.openTelemetryCollector
Available with a future Dynatrace version (CQ2/2025).
.spec.templates.openTelemetryCollector.imageRef
Available with a future Dynatrace version (CQ2/2025).
public.ecr.aws/dynatrace/dynatrace-otel-collector
latest
Dynatrace Operator version 1.2.0+
.spec
apiUrl
parameter is required.apiUrl
apiUrl
, including the /api
path at the end.YOUR_ENVIRONMENT_ID
to your environment ID.apiUrl
address.customPullSecret
customPullSecret
.dynatraceApiRequestThreshold
enableIstio
networkZone
proxy
proxy
.skipCertCheck
true
if you want to skip certification validation checks.tokens
trustedCAs
certs
..spec.oneAgent
hostGroup
--set-host-group
argument. If both settings are used, this field takes precedence over the --set-host-group
argument..spec.oneAgent.cloudNativeFullStack
recommended
annotations
args
autoUpdate
true
codeModulesImage
dnsPolicy
ClusterFirstWithHostNet
env
image
initResources
labels
namespaceSelector
nodeSelector
oneAgentResources
resource.requests
shows the values needed to run; resource.limits
shows the maximum limits for the pod.priorityClassName
secCompProfile
tolerations
version
.spec.oneAgent.classicFullStack
annotations
args
autoUpdate
true
dnsPolicy
ClusterFirstWithHostNet
env
image
labels
nodeSelector
oneAgentResources
resource.requests
shows the values needed to run; resource.limits
shows the maximum limits for the pod.priorityClassName
secCompProfile
tolerations
version
.spec.oneAgent.applicationMonitoring
codeModulesImage
initResources
namespaceSelector
useCSIDriver
false
version
.spec.oneAgent.hostMonitoring
annotations
args
autoupdate
true
dnsPolicy
ClusterFirstWithHostNet
env
image
labels
nodeSelector
oneAgentResources
resource.requests
shows the values needed to run; resource.limits
shows the maximum limits for the pod.priorityClassName
secCompProfile
tolerations
version
.spec.activeGate
capabilities
parameter is required.resources
and group
parameters are recommended.annotations
capabilities
routing
enables OneAgent routing.kubernetes-monitoring
enables Kubernetes API monitoring.metrics-ingest
1 opens the metrics ingest endpoint on the DynaKube ActiveGate and redirects all pods to it.dynatrace-api
1 enables calling the Dynatrace API via ActiveGate.customProperties
customProperties
. See How to add a custom properties file for details.dnsPolicy
ClusterFirstWithHostNet
env
image
labels
nodeSelector
priorityClassName
replicas
resources
tlsSecretName
tolerations
topologySpreadConstraints
A custom certificate is required for this capability. See the tlsSecretName
parameter for details.
.spec.metadataEnrichment
enabled
true
by default.true
namespaceSelector
.spec
apiUrl
parameter is required.apiUrl
apiUrl
, including the /api
path at the end.YOUR_ENVIRONMENT_ID
to your environment ID.apiUrl
address.tokens
.metadata.name
) if unsetskipCertCheck
true
if you want to skip certification validation checks.false
proxy
proxy
.trustedCAs
certs
within your configmap.networkZone
customPullSecret
customPullSecret
.enableIstio
false
namespaceSelector
applicationMonitoring
or cloudNativeFullStack
configuration types. The namespaces where you want Dynatrace Operator to inject. For more information, see Configure monitoring for namespaces and pods..spec.oneAgent
hostGroup
--set-host-group
argument. If both settings are used, this field takes precedence over the --set-host-group
argument..spec.oneAgent.cloudNativeFullStack
recommended
image
codeModulesImage
version
tolerations
nodeSelector
priorityClassName
oneAgentResources
resource.requests
shows the values needed to run; resource.limits
shows the maximum limits for the pod.autoUpdate
true
dnsPolicy
ClusterFirstWithHostNet
annotations
labels
env
args
initResources
namespaceSelector
.spec.oneAgent.classicFullStack
version
image
tolerations
autoUpdate
true
dnsPolicy
ClusterFirstWithHostNet
annotations
labels
env
args
nodeSelector
priorityClassName
oneAgentResources
resource.requests
shows the values needed to run; resource.limits
shows the maximum limits for the pod..spec.oneAgent.applicationMonitoring
codeModulesImage
version
useCSIDriver
false
initResources
hostGroup
--set-host-group
argument. If both settings are used, this field takes precedence over the --set-host-group
argument.namespaceSelector
.spec.oneAgent.hostMonitoring
version
image
nodeSelector
priorityClassName
tolerations
oneAgentResources
resource.requests
shows the values needed to run; resource.limits
shows the maximum limits for the pod.autoupdate
true
dnsPolicy
ClusterFirstWithHostNet
annotations
labels
env
args
.spec.activeGate
capabilities
parameter is required.resources
and group
parameters are recommended.capabilities
routing
enables OneAgent routing.kubernetes-monitoring
enables Kubernetes API monitoring.metrics-ingest
1 opens the metrics ingest endpoint on the DynaKube ActiveGate and redirects all pods to it.dynatrace-api
1 enables calling the Dynatrace API via ActiveGate.image
replicas
tolerations
nodeSelector
resources
labels
env
customProperties
customProperties
. See How to add a custom properties file for details.tlsSecretName
dnsPolicy
ClusterFirstWithHostNet
priorityClassName
annotations
topologySpreadConstraints
A custom certificate is required for this capability. See the tlsSecretName
parameter for details.