DKP Insights Setup and Configuration

This section describes how to enable DKP insights in DKP Essential or DKP Enterprise, and grant user permissions.

Enable DKP Insights Engine in a Non-Air-Gapped Environment

Follow these steps:

Set the DKP version:
```
export DKP_VERSION=v2.5.0
```
CODE

Add DKP Insights Engine Addon by applying the following YAML from the CLI:

kubectl apply -f - <<EOF
apiVersion: source.toolkit.fluxcd.io/v1beta1
kind: GitRepository
metadata:
  name: insights-catalog-applications
  namespace: kommander
  labels:
    kommander.d2iq.io/gitapps-gitrepository-type: dkp
    kommander.d2iq.io/workspace-default-catalog-repository: "true"
spec:
  interval: 1m0s
  ref:
    tag: ${DKP_VERSION} 
  timeout: 20s
  url: https://github.com/mesosphere/insights-catalog-applications
EOF

CODE

This grants all Attached clusters the ability to enable the Insights Engine, and to display DKP Insights under Applications.

See Deployment of Catalog Applications in Workspaces to deploy Insights Engine.

Enable DKP Insights Engine in an Air-gapped Environment

Follow these steps:

Complete Install Air-gapped Kommander with DKP Insights and DKP Catalog Applications .
Complete Deployment of Catalog Applications in Workspaces to deploy Insights Engine.

Disable DKP Insights Management

The DKP Insights Management component can be disabled using the instructions for configuring a Kommander installation.

Initialize a default configuration file:

dkp install kommander --init > kommander.yaml

CODE

Delete or comment out the line containing dkp-insights-management:null:

apiVersion: config.kommander.mesosphere.io/v1alpha1
kind: Installation
apps:
  # Sections omitted...
  dkp-insights-management: null # Delete or comment out this line.
  # Sections omitted...
--

CODE

Install Kommander using the updated configuration file:
```
dkp install kommander --installer-config kommander.yaml
```
CODE

Grant View Rights to Users

Access control to both Insights summary cards and Insights Alert Details is performed via Kubernetes RBAC on a basis of the namespace to which the Insight Alert is tied.

To allow a user view Insights summary cards in a workspace or a project:

Set up Kubernetes permissions on the management cluster, to allow the user access to the insights resource in the dkp-insights.d2iq.io Kubernetes API group in the corresponding workspace/project namespace via the get, list and watch verbs.
Refer to Access Control to create a corresponding Kommander Role and role binding.

To allow a user view Insight Alert Details in a workspace/project:

Set up Kubernetes permissions on attached clusters, to allow the user access to the insights, rca and solutions resources in the virtual.backend.dkp-insights.d2iq.io Kubernetes API group in the corresponding workspace/project via the get verb.
Set up permissions for viewing Insight Alert Details in a workspace.
Refer to Access Control to configure a corresponding Kommander Cluster Role, and to Workspace Role Bindings to set up a Workspace Role Binding.
Set up permissions for viewing Insight Alert Details in a project.
Refer to Project Roles and to Project Role Bindings .