Kubernetes/Istio Datadog

$ helm repo add datadog https://helm.datadoghq.com$ helm install -n datadog --create-namespace --set fullnameOverride="dd-op" mwp-datadog-operator datadog/datadog-operator

$ kubectl create secret generic datadog-secrets --from-literal api-key=<DATADOG_API_KEY> --from-literal app-key=<DATADOG_APP_KEY>

apiVersion: datadoghq.com/v1alpha1kind: DatadogAgentmetadata:  namespace: datadog  name: datadogspec:  credentials:    apiSecret:      secretName: datadog-secrets      keyName: api-key    appSecret:      secretName: datadog-secrets      keyName: app-key  agent:    image:      name: "gcr.io/datadoghq/agent:latest"    config:      hostPort: 8125      collectEvents: true      tolerations:        - operator: Exists      env:      - name: DD_DOGSTATSD_NON_LOCAL_TRAFFIC # Java JVM Metrics           value: "true"    log:      enabled: true      logsConfigContainerCollectAll: true    apm:      enabled: true      hostPort: 8126    process:      enabled: true      processCollectionEnabled: true    systemProbe:      bpfDebugEnabled: true  features:    kubeStateMetricsCore:      enabled: true    networkMonitoring:      enabled: true  clusterAgent:    image:      name: "gcr.io/datadoghq/cluster-agent:latest"    config:      clusterChecksEnabled: true    replicas: 2  clusterChecksRunner:    image:      name: "gcr.io/datadoghq/agent:latest"  clusterName: eks-demo

$ kubectl apply -f datadog-operator.yaml

$ kubectl -n istio-system patch service istiod --patch "$(cat<<EOFmetadata:  annotations:    ad.datadoghq.com/endpoints.check_names: '["istio"]'    ad.datadoghq.com/endpoints.init_configs: '[{}]'    ad.datadoghq.com/endpoints.instances: |      [        {          "istiod_endpoint": "http://%%host%%:15014/metrics",          "send_histograms_buckets": true        }      ]EOF)"

apiVersion: install.istio.io/v1alpha1kind: IstioOperatormetadata:  namespace: istio-system  name: istiocontrolplanespec:  profile: default  components:    egressGateways:    - name: istio-egressgateway      enabled: true      k8s:        hpaSpec:          minReplicas: 2    ingressGateways:    - name: istio-ingressgateway      enabled: true      k8s:        hpaSpec:          minReplicas: 2        service:          type: NodePort        serviceAnnotations:          alb.ingress.kubernetes.io/healthcheck-path: /healthz/ready          alb.ingress.kubernetes.io/healthcheck-port: "32197"    pilot:      enabled: true      k8s:        hpaSpec:          minReplicas: 2  meshConfig:    enableTracing: true    defaultConfig:      holdApplicationUntilProxyStarts: true      tracing:  # Enable Datadog Tracing        datadog:          address: $(HOST_IP):8126        sampling: 100.0  #  request tracing     accessLogFile: /dev/stdout    outboundTrafficPolicy:      mode: REGISTRY_ONLY

$ istioctl install -f istio-operator.yaml