feat: prevent dynatrace one-agent injection

The extra resource consumption of the dynatrace one agent injection
into the containers causes problems with the default resource limits
and causes OOM kills. This prevents the injection.

Author: joshiste

charts/steadybit-extension-jvm/Chart.yaml

@@ -1,7 +1,7 @@
 apiVersion: v2
 name: steadybit-extension-jvm
 description: Steadybit jvm extension Helm chart for Kubernetes.
-version: 1.0.25
+version: 1.0.26
 appVersion: latest
 home: https://www.steadybit.com/
 icon: https://steadybit-website-assets.s3.amazonaws.com/logo-symbol-transparent.png

charts/steadybit-extension-jvm/templates/daemonset.yaml

@@ -34,6 +34,7 @@ spec:
       annotations:
         "container.apparmor.security.beta.kubernetes.io/{{ include "extensionlib.names.name" . }}": unconfined
         {{- include "extensionlib.annotation" (list . .Values.containerPorts.http (.Values.daemonSet.extensionlib.list) ) | nindent 8 }}
+        oneagent.dynatrace.com/injection: "false"
         {{- with .Values.podAnnotations }}
         {{- toYaml . | nindent 8 }}
         {{- end }}

charts/steadybit-extension-jvm/tests/__snapshot__/daemonset_test.yaml.snap

@@ -17,6 +17,7 @@ manifest should match snapshot using containerd and resources:
         metadata:
           annotations:
             container.apparmor.security.beta.kubernetes.io/steadybit-extension-jvm: unconfined
+            oneagent.dynatrace.com/injection: "false"
             steadybit.com/extension-auto-discovery: |
               {"extensions":[{"port":8087,"protocol":"http","types":["ACTION","DISCOVERY"]}]}
           labels:
@@ -137,6 +138,7 @@ manifest should match snapshot using crio using podAnnotations and Labels:
         metadata:
           annotations:
             container.apparmor.security.beta.kubernetes.io/steadybit-extension-jvm: unconfined
+            oneagent.dynatrace.com/injection: "false"
             some-annotation: some-annotation-value
             steadybit.com/extension-auto-discovery: |
               {"extensions":[{"port":8087,"protocol":"http","types":["ACTION","DISCOVERY"]}]}
@@ -259,6 +261,7 @@ manifest should match snapshot using docker:
         metadata:
           annotations:
             container.apparmor.security.beta.kubernetes.io/steadybit-extension-jvm: unconfined
+            oneagent.dynatrace.com/injection: "false"
             steadybit.com/extension-auto-discovery: |
               {"extensions":[{"port":8087,"protocol":"http","types":["ACTION","DISCOVERY"]}]}
           labels:
@@ -379,6 +382,7 @@ manifest should match snapshot with TLS:
         metadata:
           annotations:
             container.apparmor.security.beta.kubernetes.io/steadybit-extension-jvm: unconfined
+            oneagent.dynatrace.com/injection: "false"
             steadybit.com/extension-auto-discovery: |
               {"extensions":[{"port":8087,"protocol":"https","types":["ACTION","DISCOVERY"]}]}
           labels:
@@ -510,6 +514,7 @@ manifest should match snapshot with different containerPorts:
         metadata:
           annotations:
             container.apparmor.security.beta.kubernetes.io/steadybit-extension-jvm: unconfined
+            oneagent.dynatrace.com/injection: "false"
             steadybit.com/extension-auto-discovery: |
               {"extensions":[{"port":9090,"protocol":"http","types":["ACTION","DISCOVERY"]}]}
           labels:
@@ -630,6 +635,7 @@ manifest should match snapshot with extra env vars:
         metadata:
           annotations:
             container.apparmor.security.beta.kubernetes.io/steadybit-extension-jvm: unconfined
+            oneagent.dynatrace.com/injection: "false"
             steadybit.com/extension-auto-discovery: |
               {"extensions":[{"port":8087,"protocol":"http","types":["ACTION","DISCOVERY"]}]}
           labels:
@@ -758,6 +764,7 @@ manifest should match snapshot with extra labels:
         metadata:
           annotations:
             container.apparmor.security.beta.kubernetes.io/steadybit-extension-jvm: unconfined
+            oneagent.dynatrace.com/injection: "false"
             steadybit.com/extension-auto-discovery: |
               {"extensions":[{"port":8087,"protocol":"http","types":["ACTION","DISCOVERY"]}]}
           labels:
@@ -879,6 +886,7 @@ manifest should match snapshot with mutual TLS:
         metadata:
           annotations:
             container.apparmor.security.beta.kubernetes.io/steadybit-extension-jvm: unconfined
+            oneagent.dynatrace.com/injection: "false"
             steadybit.com/extension-auto-discovery: |
               {"extensions":[{"port":8087,"protocol":"https","types":["ACTION","DISCOVERY"]}]}
           labels:
@@ -1019,6 +1027,7 @@ manifest should match snapshot with mutual TLS using containerPaths:
         metadata:
           annotations:
             container.apparmor.security.beta.kubernetes.io/steadybit-extension-jvm: unconfined
+            oneagent.dynatrace.com/injection: "false"
             steadybit.com/extension-auto-discovery: |
               {"extensions":[{"port":8087,"protocol":"https","types":["ACTION","DISCOVERY"]}]}
           labels:
@@ -1145,6 +1154,7 @@ manifest should match snapshot with podSecurityContext:
         metadata:
           annotations:
             container.apparmor.security.beta.kubernetes.io/steadybit-extension-jvm: unconfined
+            oneagent.dynatrace.com/injection: "false"
             steadybit.com/extension-auto-discovery: |
               {"extensions":[{"port":8087,"protocol":"http","types":["ACTION","DISCOVERY"]}]}
           labels:
@@ -1267,6 +1277,7 @@ manifest should match snapshot with priority class:
         metadata:
           annotations:
             container.apparmor.security.beta.kubernetes.io/steadybit-extension-jvm: unconfined
+            oneagent.dynatrace.com/injection: "false"
             steadybit.com/extension-auto-discovery: |
               {"extensions":[{"port":8087,"protocol":"http","types":["ACTION","DISCOVERY"]}]}
           labels:
@@ -1388,6 +1399,7 @@ manifest should match snapshot with update strategy:
         metadata:
           annotations:
             container.apparmor.security.beta.kubernetes.io/steadybit-extension-jvm: unconfined
+            oneagent.dynatrace.com/injection: "false"
             steadybit.com/extension-auto-discovery: |
               {"extensions":[{"port":8087,"protocol":"http","types":["ACTION","DISCOVERY"]}]}
           labels: