Option to exclude worker from Dynatrace monitoring

cmd/tap.go

@@ -60,4 +60,5 @@ func init() {
 	tapCmd.Flags().Bool(configStructs.IgnoreTaintedLabel, defaultTapConfig.IgnoreTainted, "Ignore tainted pods while running Worker DaemonSet")
 	tapCmd.Flags().Bool(configStructs.IngressEnabledLabel, defaultTapConfig.Ingress.Enabled, "Enable Ingress")
 	tapCmd.Flags().Bool(configStructs.TelemetryEnabledLabel, defaultTapConfig.Telemetry.Enabled, "Enable/disable Telemetry")
+	tapCmd.Flags().Bool(configStructs.DynatraceExcludeWorkerLabel, defaultTapConfig.DynatraceExcludeWorker, "Exclude worker from Dynatrace monitoring")
 }

config/configStructs/tapConfig.go

@@ -31,6 +31,7 @@ const (
 	IngressEnabledLabel          = "ingress-enabled"
 	TelemetryEnabledLabel        = "telemetry-enabled"
 	DebugLabel                   = "debug"
+	DynatraceExcludeWorkerLabel  = "dynatrace-exclude-worker"
 	ContainerPort                = 80
 	ContainerPortStr             = "80"
 )
@@ -156,6 +157,7 @@ type TapConfig struct {
 	Metrics                   MetricsConfig         `yaml:"metrics" json:"metrics"`
 	TrafficSampleRate         int                   `yaml:"trafficSampleRate" json:"trafficSampleRate" default:"100"`
 	TcpStreamChannelTimeoutMs int                   `yaml:"tcpStreamChannelTimeoutMs" json:"tcpStreamChannelTimeoutMs" default:"10000"`
+	DynatraceExcludeWorker    bool                  `yaml:"dynatraceExcludeWorker" json:"dynatraceExcludeWorker" default:"false"`
 }
 
 func (config *TapConfig) PodRegex() *regexp.Regexp {

helm-chart/README.md

@@ -144,6 +144,7 @@ Please refer to [metrics](./metrics.md) documentation for details.
 | `tap.tls`                                 | Capture the encrypted/TLS traffic from cryptography libraries like OpenSSL                         | `true`                                                  |
 | `tap.ignoreTainted`                       | Whether to ignore tainted nodes               | `false`                                                 |
 | `tap.labels`                              | Kubernetes labels to apply to all Kubeshark resources  | `{}`                                                    |
+| `tap.dynatraceExcludeWorker`              | Exclude worker from Dynatrace monitoring | `false` |
 | `tap.annotations`                         | Kubernetes annotations to apply to all Kubeshark resources | `{}`                                                |
 | `tap.nodeSelectorTerms`                   | Node selector terms                           | `[{"matchExpressions":[{"key":"kubernetes.io/os","operator":"In","values":["linux"]}]}]` |
 | `tap.auth.enabled`                        | Enable authentication                         | `false`                                                 |

helm-chart/templates/09-worker-daemon-set.yaml

@@ -7,6 +7,9 @@ metadata:
     sidecar.istio.io/inject: "false"
     {{- include "kubeshark.labels" . | nindent 4 }}
   annotations:
+  {{- if .Values.tap.dynatraceExcludeWorker }}
+    oneagent.dynatrace.com/inject: "false"
+  {{- end }}
   {{- if .Values.tap.annotations }}
     {{- toYaml .Values.tap.annotations | nindent 4 }}
   {{- end }}

helm-chart/values.yaml

@@ -50,6 +50,7 @@ tap:
   tls: true
   ignoreTainted: false
   labels: {}
+  dynatraceExcludeWorker: false
   annotations: {}
   nodeSelectorTerms:
   - matchExpressions: