DKP Insights Setup and Configuration

This section describes how to enable DKP insights in DKP Essential or DKP Enterprise, and grant user permissions.

Enable DKP Insights Engine in a Networked Environment

Follow these steps:

1. Set the DKP version:

   CODE

   export DKP_VERSION=v2.3.2

2. Add DKP Insights Engine Addon by applying the following YAML from the CLI:

   CODE

   kubectl apply -f - <<EOF
   apiVersion: source.toolkit.fluxcd.io/v1beta1
   kind: GitRepository
   metadata:
     name: insights-catalog-applications
     namespace: kommander
     labels:
       kommander.d2iq.io/gitapps-gitrepository-type: dkp
       kommander.d2iq.io/workspace-default-catalog-repository: "true"
   spec:
     interval: 1m0s
     ref:
       tag: ${DKP_VERSION} 
     timeout: 20s
     url: https://github.com/mesosphere/insights-catalog-applications
   EOF
   

   This grants all Attached clusters the ability to enable the Insights Engine, and to display DKP Insights under Applications.

3. See Deployment of Catalog Applications in Workspaces to deploy Insights Engine.

Enable DKP Insights Engine in an Air-gapped Environment

Follow these steps:

1. Complete Install DKP in an Air-gapped Environment with Catalog Applications.

2. Complete Deployment of Catalog Applications in Workspaces to deploy Insights Engine.

Disable DKP Insights Management

The DKP Insights Management component can be disabled using the instructions for configuring a Kommander installation.

1. Initialize a default configuration file:

   CODE

   dkp install kommander --init > kommander.yaml

2. Delete or comment out the line containing dkp-insights-management:null:

   CODE

   apiVersion: config.kommander.mesosphere.io/v1alpha1
   kind: Installation
   apps:
     # Sections omitted...
     dkp-insights-management: null # Delete or comment out this line.
     # Sections omitted...
   --

3. Install Kommander using the updated configuration file:

   CODE

   dkp install kommander --installer-config kommander.yaml

Grant View Rights to Users

Access control to both Insights summary cards and Insights Alert Details is performed via Kubernetes RBAC on a basis of the namespace to which the Insight Alert is tied.

To allow a user view Insights summary cards in a workspace or a project:

1. Set up Kubernetes permissions on the management cluster, to allow the user access to the insights resource in the dkp-insights.d2iq.io Kubernetes API group in the corresponding workspace/project namespace via the get, list and watch verbs.

2. Refer to Access Control to create a corresponding Kommander Role and role binding.

To allow a user view Insight Alert Details in a workspace/project:

1. Set up Kubernetes permissions on attached clusters, to allow the user access to the insights, rca and solutions resources in the virtual.backend.dkp-insights.d2iq.io Kubernetes API group in the corresponding workspace/project via the get verb.

2. Set up permissions for viewing Insight Alert Details in a workspace.
   Refer to Access Control to configure a corresponding Kommander Cluster Role, and to Workspace Role Bindings to set up a Workspace Role Binding.

3. Set up permissions for viewing Insight Alert Details in a project.
   Refer to Project Roles and to Project Role Bindings .