Build, Sign & Deploy

Build Pipeline

Three steps to get your extension into Dynatrace:

1. Lint — Validate your YAML for errors before building
   python3 validate_extension.py ext/
2. Assemble — Package extension.yaml + MIBs into a zip
   dt ext assemble --source ext/ --output extension.zip
3. Sign — Digitally sign the package with your developer certificate
   dt ext sign --src extension.zip --key developer.pem --output bundle.zip

Install dt-cli

python3 -m venv /tmp/dtcli-venv
/tmp/dtcli-venv/bin/pip install dt-cli
export PATH="/tmp/dtcli-venv/bin:$PATH"

Generate Certificates

# CA certificate (one-time)
dt ext genca --no-ca-passphrase

# Developer certificate
printf "Your Name\n" | dt ext generate-developer-pem \
  --ca-crt ca.pem --ca-key ca.key -o developer.pem

Upload to Dynatrace

# Upload the CA cert to credential vault (one-time per environment)
# Do this in the Dynatrace UI: Settings → Credential Vault → Add certificate

# Upload extension via API
curl -X POST "${DT_ENV_URL}/api/v2/extensions" \
  -H "Authorization: Api-Token ${DT_API_TOKEN}" \
  -F "file=@bundle.zip"

# Or via dt-cli
dt ext upload bundle.zip --dtUrl "${DT_ENV_URL}" --apiToken "${DT_API_TOKEN}"

Extensions API Lifecycle

Step  API Call                                          Purpose
────  ──────────────────────────────────────────────────  ──────────────────────
1     POST /api/v2/extensions (multipart)                Upload extension zip
2     GET  /api/v2/extensions/{name}                     List versions
3     POST /api/v2/extensions/{name}/{ver}/envConfig     Activate version
4     POST /api/v2/extensions/{name}/monitoringConfigs   Add monitoring config
5     GET  /api/v2/extensions/{name}/{ver}/envConfig     Check status

Upload to Dynatrace

curl -X POST "https://YOUR-ENV.live.dynatrace.com/api/v2/extensions" \
  -H "Authorization: Api-Token YOUR-TOKEN" \
  -F "file=@bundle.zip"

Pre-Deploy Checklist

Check	What to Verify	Common Mistake
✅ Lint passes	0 errors from validate_extension.py	Ignoring DED018 cross-table warnings
✅ Metric keys match	snmp: keys = metrics: keys	Typo in one section, metric never appears
✅ Screen card keys	Layout keys = chartsCards/entitiesListCards keys	Card shows blank because key doesn't match
✅ MIBs bundled	Vendor MIBs in snmp/ directory	Works in dev (MIB cached), fails on customer AG
✅ CA cert uploaded	Credential Vault + ActiveGate filesystem	Uploaded to vault only, AG rejects signature
✅ API token scope	extensions.write scope on token	Using metrics.read token for upload

What's Next

🎉 You've completed the SNMP track! Continue to Python Extensions to build custom integrations, or jump to Production Skills for alerts and validation.