bhaab01/kubernetesmonitor repository overview

kubectl create -f caagent-kubernetesmonitor.yml 

[AGENTMANAGER_URL]  : Agent/EM Connection details - similar to what we provide on IntroscopeAgent.profile
[AGENTMANAGER_CREDENTIAL] : Agent Manager Credentials needed to connect any SaaS instance 
[KUBERNETES_CONNECTION_URL] : Kubernetes connection details . This can be obtained by running  kubectl config view
[APITOKEN] : API Token for the connection URL. You can obtain this through creating a service account with cluster-reader role on the default workspace.

apiVersion: extensions/v1beta1
kind: DaemonSet
metadata:
  name: caagent
  labels:
    tier: monitoring
    app: caagent
    version: v1

spec:
  template:
    metadata:
      labels:
        app: caagent
    spec:
      hostPID: true
      hostIPC: true
      hostNetwork: true
      containers:
        - resources:
          securityContext:
            privileged: true

          env:
            - name: containerflow
              value: enabled
            - name: agentManager_url_1
              value: [AGENTMANAGER_URL]
            - name: agentManager_credential
              value: [AGENTMANAGER_CREDENTIAL]
            - name: type
              value: Kubernetes
            - name: interval
              value: "60"

          name: podmonitor
          image: caapm/kubernetesmonitor:latest
          imagePullPolicy: Always
          resources:
            limits:
              cpu: 500m
              memory: 700Mi
            requests:
              cpu: 200m
              memory: 300Mi

          volumeMounts:
            - name: dockersock
              mountPath: /var/run/docker.sock
            - name: proc
              mountPath: /host/proc
            - name: dev
              mountPath: /host/dev
            - name: sys
              mountPath: /host/sys
            - name: boot
              mountPath: /host/boot
            - name: home
              mountPath: /host/home
            - name: var
              mountPath: /host/var
            - name: run
              mountPath: /host/run
  
      volumes:
        - name: dockersock
          hostPath:
            path: /var/run/docker.sock
        - name: proc
          hostPath:
            path: /proc
        - name: dev
          hostPath:
            path: /dev
        - name: sys
          hostPath:
            path: /sys
        - name: boot
          hostPath:
            path: /boot
        - name: home
          hostPath:
            path: /home
        - name: var
          hostPath:
            path: /var
        - name: run
          hostPath:
            path: /run
---
apiVersion: extensions/v1beta1
kind: Deployment
metadata:
  name: caagent-deployment
  labels:
    tier: monitoring
    app: caagent_v2
    version: v1

spec:
  # oc adm policy add-scc-to-user privileged -z default
  template:
    metadata:
      labels:
        app: caagent_v2
    spec:
      containers:
        - resources:
          securityContext:
            privileged: true

          env:
            - name: agentManager_url_1
              value: [AGENTMANAGER_URL]
            - name: agentManager_credential
              value: [AGENTMANAGER_CREDENTIAL]
            - name: connectionurl
              value: [KUBERNETES_CONNECTION_URL]
            - name: apitoken
              value: [APITOKEN]
            - name: type
              value: Kubernetes
            - name: HostMonitoring
              value: disabled
            - name: MIN_HEAP_VAL_IN_MB
              value: "400"
            - name: MAX_HEAP_VAL_IN_MB
              value: "800"
          name: kubemetainfo
          image: caapm/kubernetesmonitor:latest
          resources:
            limits:
              cpu: 700m
              memory: 1000Mi
            requests:
              cpu: 400m
              memory: 500Mi
          imagePullPolicy: Always

kubectl create sa caapm

kubectl create clusterrolebinding cluster-read --serviceaccount=default:caapm  --clusterrole=cluster-admin

kubectl get secrets|grep caapm-token| cut -f1 -d " "|xargs kubectl describe secret | grep token