The External Secrets Operator (ESO) synchronizes secrets from external providers, such as HashiCorp Vault or AWS Secrets Manager, into Kubernetes Secrets. This integration provides visibility into ESO's health and performance, including reconciliation rates, provider API calls, secret sync status, and controller runtime metrics.
If you are using Agent v6.8+ follow the instructions below to install the External Secrets check on your host. See the dedicated Agent guide for installing community integrations to install checks with the Agent Manager or in a Docker environment.
-
Run the following command to install the Agent integration:
datadog-agent integration install -t datadog-external-secrets==<INTEGRATION_VERSION>
-
Configure your integration in the same way as core integrations.
-
Edit the
external_secrets.d/conf.yamlfile in theconf.d/folder at the root of your Agent's configuration directory to start collecting your External Secrets Operator metrics. See the sample external_secrets.d/conf.yaml for all available configuration options.
Run the Agent's status subcommand and look for external_secrets under the Checks section.
See metadata.csv for a list of metrics provided by this integration.
See service_checks.json for a list of service checks provided by this integration.
The External Secrets integration does not include any events.
Need help? Contact Datadog support.