Deploy OneAgent on AWS Fargate

To deploy OneAgent on AWS ECS Fargate, read the instructions provided below.

Before you begin

You'll need to

Acquire DESK environment credentials.
Review the list of supported applications and versions.

Generate PaaS token

The first step is to get your environment ID and PaaS token for your DESK environment.

How to get your PaaS token

Login with your DESK account.
Select Deploy DESK from the navigation menu.
Click the Set up PaaS integration button.
Your environment ID appears in the Environment ID text box. You'll need this ID to link your DESK account with your PaaS environment. Click Copy to copy the ID to the clipboard. You can do this at any time by revisiting this page.
To generate a PaaS token, click the Generate new token button. The PaaS token is essentially an API token that's used in combination with your environment ID to download DESK OneAgent. As you'll see, there's also a default InstallerDownload token available that you can alternatively use. However, for security reasons, it's recommended that you create several discrete tokens for each environment you have.
Type in a meaningful name for your PaaS token. A meaningful token name might be the name of the PaaS platform you want to monitor (for example, azure, cloud-foundry, or openshift). To view and manage your existing PaaS tokens, go to Settings -> Integration -> Platform as a Service.
Click Generate to create the PaaS token. The newly created PaaS token will appear in the list below. Click Copy to copy the generated token to the clipboard. You can do this at any time by revisiting this page and clicking Show token next to the relevant PaaS token.

Integrate OneAgent into your application

The following steps explain how to integrate OneAgent with AWS Fargate applications.

1. Integrate OneAgent into the application image

Docker multi-stage image builds

To use this option you need:

Docker version 17.05 or higher.
OneAgent version 1.155 or higher.

Log in to Docker with your DESK environment ID as username and PaaS token as password.
```
docker login -u <environmentID> <ACTIVEGATE-ADDRESS>
```
Add two additional lines of code to the application image, after the last FROM command:
```
COPY --from=<ACTIVEGATE-ADDRESS>/linux/oneagent-codemodules:<TECHNOLOGY> / /
ENV LD_PRELOAD /opt/desk/oneagent/agent/lib64/liboneagentproc.so
```
where:
- <ACTIVEGATE-ADDRESS>: The URL or IP address of your ActiveGate.
  - SaaS {your-environment-id}.live.desk.com¹
  - Managed {your-domain}/e/{your-environment-id}¹
    ¹ If you use your own environment ActiveGate, use the <IP_ADDRESS>:9999 or <HOST_NAME>:9999 format.
- <TECHNOLOGY>: The OneAgent code module required for your application. Valid options are all, java, apache, nginx, nodejs, dotnet, php, and go. You can specify several code modules, separated by hyphen (-), for example java-go. Including specific technology-support options, rather than support for all technology options, results in a smaller OneAgent package.
What if my Docker image is based on Alpine Linux?

DESK OneAgent supports Alpine Linux based environments. Use this syntax:
```
COPY --from=<ACTIVEGATE-ADDRESS>/linux/oneagent-codemodules-musl:<TECHNOLOGY> / /
ENV LD_PRELOAD /opt/desk/oneagent/agent/lib64/liboneagentproc.so
```
Valid options here are all, java, apache, nginx, and nodejs.

Classic integration

Add the following commands to your current Dockerfile to integrate OneAgent and activate instrumentation of your application. Define variables with optional default values using ARG instructions.

ARG DT_API_URL="https://<environmentID>.live.desk.com/api"
ARG DT_API_TOKEN="<token>"
ARG DT_ONEAGENT_OPTIONS="flavor=default&include=<technology1>&include=<technology2>"
ENV DT_HOME="/opt/desk/oneagent"
RUN mkdir -p "$DT_HOME" && \
    wget -O "$DT_HOME/oneagent.zip" "$DT_API_URL/v1/deployment/installer/agent/unix/paas/latest?Api-Token=$DT_API_TOKEN&$DT_ONEAGENT_OPTIONS" && \
    unzip -d "$DT_HOME" "$DT_HOME/oneagent.zip" && \
    rm "$DT_HOME/oneagent.zip"
ENTRYPOINT [ "/opt/desk/oneagent/desk-agent64.sh" ]
CMD [ "executable", "param1", "param2" ] # the command of your application, e.g. java

Note: The commands above that use wget and unzip may fail if they aren't provided by the base image.

Replace <environmentID> with your DESK environment ID. If you're using DESK Managed, you need to provide your DESK Server URL (https://<YourDESKServerURL>/e/<environmentID>/api). Replace <token> with the PaaS token mentioned above.

Technology support is enabled via include parameters. Valid options for flavor=default are all, java, apache, nginx, nodejs, dotnet, php, and go. Including specific technology-support options, rather than support for all technology options, results in a smaller OneAgent package.

What if my Docker image is based on Alpine Linux?

DESK OneAgent supports the flavor musl for Alpine Linux based environments. Valid options for flavor=musl are all, java, apache, nginx, and nodejs.

2. Build your application image

Build the Docker image from your Dockerfile to use it in your Kubernetes environment:

$ docker build -t yourapp .

Note: You can monitor your application containers with a different DESK environment. To do this, read the instructions below:

How to use a different DESK environment for OneAgent enriched images

For OneAgent version 1.139 or higher, if you have an existing application image where you have already added the OneAgent code modules for a specific DESK environment, you can have the OneAgent report to another DESK environment without rebuilding your application image.

For this you need to make a call to the REST endpoint of your second DESK environment. Don't forget to adapt the respective placeholders <environmentID> and <token>.

$ curl "https://<environmentID>.live.desk.com/api/v1/deployment/installer/agent/connectioninfo?Api-Token=<token>"

In return, you get a JSON object that covers the required information that needs to be passed as environment variable to the application container. Make sure you set the environment variables of the application container as described below:

DT_TENANT: equals tenantUUID
DT_TENANTTOKEN: equals tenantToken
DT_CONNECTION_POINT: semi-colon separated list of communicationEndpoints