topic Re: Proxy config for k8s synthetic metric adapter in Synthetic Monitoring

Proxy config for Kubernetes synthetic metric adapter

Enrico_F — Thu, 18 Dec 2025 11:21:55 GMT

Has anybody had any success with deploying containerized, auto-scalable private synthetic locations in "air-gapped" K8s namespaces where egress to the Dynatrace SaaS cloud is only possible via HTTP proxy?

I'm asking because it seems there are no instructions about how to configure a proxy with the metrics adapter template - only for the location template.

I'm referring to this documentation:

https://docs.dynatrace.com/docs/platform-modules/digital-experience/synthetic-monitoring/private-synthetic-locations/containerized-locations#proxy

As per the generated metric adapter template the deployment "dynatrace-metrics-apiserver" obviously wants to communicate with the public API endpoint on SaaS configured via env var BASE_URL:

apiVersion: apps/v1 kind: Deployment metadata: ... spec: ... template: ... spec: ... containers: - name: dynatrace-metrics-apiserver image: dynatrace/dynatrace-synthetic-adapter:latest env: - name: BASE_URL value: "https://abcdef.live.dynatrace.com/e/abcdef" imagePullPolicy: Always args: - --secure-port=6443 - --cert-dir=/tmp ports: - name: https containerPort: 6443 volumeMounts: - name: temp-vol mountPath: /tmp - name: dynametric mountPath: /var/lib/dynatrace/secrets/dynametric readOnly: true ... ...

On our k8s cluster this will not work as direct egress is not allowed.

Re: Proxy config for k8s synthetic metric adapter

HannahM — Thu, 03 Oct 2024 14:00:56 GMT

I don't believe that it is currently possible to add proxy settings for the metric adapter. I'm checking into it

Re: Proxy config for k8s synthetic metric adapter

Enrico_F — Thu, 03 Oct 2024 14:19:59 GMT

Hi @HannahM

Thanks for looking into this - appreciated!

If a proxy config is not currently supported the other option would be to connect to an internal API endpoint on one of our ActiveGates that is reachable directly from the namespace, but that would require either allowing insecure TLS comms or the configuration of a custom CA in the trust store (since our AG's use a server cert that is signed by a private CA).

Re: Proxy config for k8s synthetic metric adapter

Peter_Youssef — Tue, 08 Oct 2024 11:43:23 GMT

Hi @Enrico_F

have you checked customizing proxy configurations in Dynakube.yaml on the K8s cluster.

BR,

Peter.

Re: Proxy config for k8s synthetic metric adapter

Enrico_F — Tue, 08 Oct 2024 12:01:56 GMT

No, because

our expectation is that containerized, auto-scalable private synthetic locations must be completely decoupled from the Dynatrace operator namespace.
I don't see why that would have any effect as there is no requirement/dependency mentioned with regards to the Dynatrace operator in the documentation.
we don't have direct access to the Dynatrace operator namespace (it's part of the OpenShift PaaS)

Re: Proxy config for k8s synthetic metric adapter

Peter_Youssef — Tue, 08 Oct 2024 12:37:11 GMT

Hello @Enrico_F

You can check the attached configurations: https://docs.dynatrace.com/docs/shortlink/sgw-configure#synth_mod

Hoping it adds value.

BR,

Peter.

Re: Proxy config for k8s synthetic metric adapter

Enrico_F — Tue, 08 Oct 2024 13:02:16 GMT

Thanks. I'm already familiar with the ActivGate properties but IMO this is not really relevant here as my question is not specifically about the ActiveGate itself but rather about the synthetic (metric) adapter component that's required for auto-scaling containerized private locations on K8s.

Re: Proxy config for k8s synthetic metric adapter

Peter_Youssef — Tue, 08 Oct 2024 13:08:06 GMT

Thanks @Enrico_F for feedback.

what about checking this section https://docs.dynatrace.com/docs/shortlink/sgw-proxy-authentication#advanced

Regards,

Re: Proxy config for k8s synthetic metric adapter

Enrico_F — Tue, 08 Oct 2024 13:48:20 GMT

Already checked - none of that applies to the synthetic adapter component. But thanks anyway.

Re: Proxy config for k8s synthetic metric adapter

Enrico_F — Thu, 17 Oct 2024 11:02:32 GMT

FWIW: In the meantime this was acknowledged by support as something that got missed during initial design and will be addressed in sprint 305 (expected for late January 2025).

Re: Proxy config for k8s synthetic metric adapter

Peter_Youssef — Thu, 17 Oct 2024 10:17:13 GMT

Thanks @Enrico_F for the update.

BR,

Peter

Re: Proxy config for k8s synthetic metric adapter

HannahM — Tue, 05 Nov 2024 09:29:30 GMT

Some good news on this one, the fix has been backported to the 303 ActiveGate. So should be available in the next couple of weeks.

Re: Proxy config for k8s synthetic metric adapter

Peter_Youssef — Tue, 05 Nov 2024 09:57:57 GMT

Thanks @HannahM for the good news 🗞😊