master-node-datadog-values.yaml

# Use this link to get latest images for datadog: https://hub.docker.com/r/datadog/
image:
  tag: 6.14.1-jmx

datadog:
  apmEnabled: true
  logsEnabled: true
  logsConfigContainerCollectAll: true
  nonLocalTraffic: true
  leaderElection: true
  collectEvents: true
  processAgentEnabled: true
  resources:
    limits:
      cpu: 200m
      memory: 512Mi
  podLabelsAsTags:
    app: kube_pod
  logLevel: WARN
  listeners:
    - name: kubelet
  config_providers:
    - name: kubelet
      polling: true
    - name: clusterchecks
      polling: true
  
  ## This is how you provide additional configurations to datadog.
  confd:
    kube_apiserver_metrics.yaml: |-
      instances:
        - prometheus_url: localhost:443/metrics
          scheme: "https"
          bearer_token_auth: true
          bearer_token_path: "/var/run/secrets/kubernetes.io/serviceaccount/token"
          ssl_verify: false
          tags:
            - "api_server"
            - "api_server:%%host%%"

    kube_controller_manager.yaml: |-
      instances:
        - prometheus_url: http://localhost:10252/metrics
          leader_election: true
          prometheus_timeout: 15
          tags:
            - "kube_controller_manager"

    kube_scheduler.yaml: |-
      instances:
        - prometheus_url: http://localhost:10251/metrics
          tags:
            - "kube_scheduler"
          leader_election: true
          prometheus_timeout: 15

    etcd.yaml: |-
      instances:
      - use_preview: true
        url: https://127.0.0.1:4001
        prometheus_url: https://127.0.0.1:4001/metrics
        leader_tag: true

        tags:
        - "app:etcd"
        - "etcdmain"

        ssl_verify: true
        ssl_ca_cert: /etc/datadog-agent/certs/etcd-ca.crt
        ssl_cert: /etc/datadog-agent/certs//etcd-client.crt
        ssl_private_key: /etc/datadog-agent/certs/etcd-client.key

## Mounting certificates to be used for etcd monitoring
  volumes:
    - hostPath:
        path: /etc/kubernetes/pki/kube-apiserver/etcd-ca.crt
        type: File
      name: etcd-ca
    - hostPath:
        path: /etc/kubernetes/pki/kube-apiserver/etcd-client.crt
        type: File
      name: etcd-crt
    - hostPath:
        path: /etc/kubernetes/pki/kube-apiserver/etcd-client.key
        type: File
      name: etcd-private-key

  volumeMounts:
    - mountPath: /etc/datadog-agent/certs/etcd-ca.crt
      name: etcd-ca
      readOnly: true
    - mountPath: /etc/datadog-agent/certs/etcd-client.crt
      name: etcd-crt
      readOnly: true
    - mountPath: /etc/datadog-agent/certs/etcd-client.key
      name: etcd-private-key
      readOnly: true

daemonset:
  updateStrategy: "RollingUpdate"
  useHostNetwork: true
  useHostPort: true
  tolerations:
    - effect: NoSchedule
      key: node-role.kubernetes.io/master
    - key: CriticalAddonsOnly
      operator: Exists
  nodeSelector:
    node-role.kubernetes.io/master: ""


clusterAgent:
  enabled: true  # Make it false if you don't want to use it.
  image:
    tag: 1.3.2
  # This is the token used for communication between cluster-agents
  token: "<ThirtyX2XcharactersXlongXtoken>"
  metricsProvider:
    enabled: true
  resources:
    limits:
      cpu: 250m
      memory: 256Mi