Please refer to the 7.82.1 tag on integrations-core for the list of changes on the Core Checks
Bug Fixes
Windows: Fixed an issue where an explicit DDAGENTUSERKEEPRIGHTS or DDAGENTUSERNAME value passed as an install argument to a Fleet Automation-triggered Windows Agent install/upgrade could be silently overridden by a stale fallback value (res
Fix an issue where GPU monitoring could trigger a kernel panic on multi-GPU nodes with Hopper/Blackwell GPUs.
<!--Please give us some feedback on your experience writing this PR ! https://app.datadoghq.com/forms/43db4c02-6837-400c-8083-692e141b1b88 !--> ### What does this PR do? [MacOS] Implement health stats for notable-events collector so operators can diagnose a stalled or saturated collector from a flare. ### Motivation This is follow-up of PR #54084. ### Descri
### What does this PR do? Create build files for some non-product manual test tools. ### Motivation They are not on any critical path, but we're adding the BUILD files for completeness.
### What does this PR do? Adds the authenticated OPMS client used by `par-control`: - Signs requests with runner JWT authentication. - Dequeues workflow tasks. - Publishes terminal task outcomes. - Sends task heartbeats. - Performs runner health checks. - Matches the existing Go wire contracts, proxy behavior, TLS settings, and retry pacing. The implementati
<!--Please give us some feedback on your experience writing this PR ! https://app.datadoghq.com/forms/43db4c02-6837-400c-8083-692e141b1b88 !--> ### What does this PR do? Validate `conntrack_path` configuration values are acceptable before initializing the network check to collect metrics from the tool. The allowed values are what we have seen configured for
### What does this PR do? > [!NOTE] > Context: https://github.com/DataDog/datadog-agent/pull/54572 For scorer events, we handled only metrics. This PR formats the metrics derived by logs such that we obtain log patterns instead of metric names. Example: ``` Top contributions: 1. 75% — log: ERROR: connection refused to db.prod:5432 — {service:api} 2. 25% — lo
> **Note:** This PR was created by Claude. ### What does this PR do? Adds NDM Agent workload balancing: a device can be handed from one Agent to another without restarting either one. **The component** (`comp/workloadbalancing`) - `def/` — the `Component` interface and the `Active` / `Standby` / `Unmanaged` states - `impl/` — an `RWMutex`-guarded map of grou
<!--Please give us some feedback on your experience writing this PR ! https://app.datadoghq.com/forms/43db4c02-6837-400c-8083-692e141b1b88 !--> ### What does this PR do? Generates test2json output and UTOF output for Bazel-run tests. ### Motivation We want to switch over to using Bazel for running our unit tests, this helps us produce output that is closer t
### What does this PR do? - Add BUILD file for pkg/network/usm/debugger/cmd - Remove the go tags ### Motivation Cleanup and doing the last .1% of the migration. ### Describe how you validated your changes ``` # bazel run //pkg/network/usm/debugger/cmd:usm_debugger ... INFO: Build completed successfully, 1 total action INFO: Running command line: /root/.cache
### What does this PR do? Makes the new on-demand PAR executor terminate after an idle period. This should be triggered by `par-control` via `dd-procmgrd` so this is really a fallback for the daemon not working properly. Idle period is configured via `private_action_runner.idle_timeout_seconds` with a 60-second default. We use 3x that value as a backstop beh
<!--Please give us some feedback on your experience writing this PR ! https://app.datadoghq.com/forms/43db4c02-6837-400c-8083-692e141b1b88 !--> ### What does this PR do? Adds skeletal implemenation for authored script actions. This is not available to users as the action is behind a feature flag. [This PR](https://github.com/ddoghq/dd-source/pull/48812) ###
<!--Please give us some feedback on your experience writing this PR ! https://app.datadoghq.com/forms/43db4c02-6837-400c-8083-692e141b1b88 !--> ### What does this PR do? A file that matches a log config but gets no tailer because its fingerprint is unusable used to be dropped silently, with no log line at any level. The only clue was an unexplained shortfall
### What does this PR do? Upgrades the Agent's embedded Python interpreter from **3.13.14** to **3.13.15** (patch version update). ### Changes - Updated `omnibus/config/software/python3.rb` with new version and SHA256 - Updated `deps/cpython/cpython.MODULE.bazel` with new version and SHA256 - Updated `test/new-e2e/tests/agent-platform/common/agent_behaviour.
<!--Please give us some feedback on your experience writing this PR ! https://app.datadoghq.com/forms/43db4c02-6837-400c-8083-692e141b1b88 !--> ### What does this PR do? This uses anomaly scorer by default instead of time cluster which is now disabled by default. ### Motivation We want to enable the scorer by default since we rely on it for smart adaptive sa
### What does this PR do? Fixes GH issue #49480 / CONTP-1773: the Agent logs a spurious ERROR on every startup in environments where no workloadmeta collector is applicable (e.g. a container sidecar with no Kubernetes, no container runtime socket, no ECS, no GPU). Root cause: when all collector candidates fail to start with non-retriable "disabled" errors, `
### What does this PR do? Adds **config gates** to dd-procmgr so `processes.d` definitions can use `condition_config_any` to auto-start only when Agent config says they should. Implementation mirrors the Windows legacy SCM startup checks in `dependent_services_windows.go` and Agent config resolution: - YAML lookup (case-insensitive keys, flattened dotted key
### What does this PR do? Resolves `ENC[...]` values during config gate evaluation so dd-procmgr matches Agent secret handling. Adds: - `config_gate/secrets.rs`: resolve handles via `secret_backend_command`, native `secret_backend_type`, and `multi_secret_backends` (same precedence as the core Agent) - Platform secret backend runners (Windows `CreateProcessA
### What does this PR do? Moves Windows **process-agent** supervision to **dd-procmgr** using the same dual-mode pattern as PAR: - Fleet installer writes `processes.d/datadog-agent-process.yaml` (Privileged spawn profile) - Legacy `datadog-process-agent` SCM service is suppressed when procmgr owns process-agent - Agent startup waits on `dd-procmgr-service` b
### What does this PR do? Adds a `DD_LOG_LEVEL` install-time option to set the initial `log_level` in `datadog.yaml`: - The Datadog installer's setup script now maps a `DD_LOG_LEVEL` environment variable to `datadog.yaml`'s `log_level` (cross-platform, in `pkg/fleet/installer/setup`). - On Windows, the Agent MSI installer exposes a `DD_LOG_LEVEL` property (d
### What does this PR do? This PR adds a `PodStateHandler` that emits transition events for pod `.status.phase` and `.status.conditions[*]` changes (except reason changes), using a per-pod shadow map to diff consecutive `workloadmeta` observations. Gated behind the existing `container_lifecycle.extended_set` flag. ### Motivation [CONTINT-5442](https://datado
### What does this PR do? Reshapes Observer telemetry around four experiment questions. #### Ingress and admission - `observer.observations.accepted{kind,source}` counts logs and metrics successfully admitted to the Observer. - `observer.observations.dropped{kind,source}` counts observations rejected because the Observer channel is full. - `observer.logs.acc
<!--Please give us some feedback on your experience writing this PR ! https://app.datadoghq.com/forms/43db4c02-6837-400c-8083-692e141b1b88 !--> ### What does this PR do? Extends the software inventory beyond installed applications with three collectors, under two new software types, `os_update` and `driver`: | Platform | Type | Source | |---|---|---| | Windo
This PR contains the following updates: | Package | Update | Change | |---|---|---| | integrations-core ([changelog](https://redirect.github.com/DataDog/integrations-core/compare/c5443962a337c8283f8b0cab8edbd519fc151c30..1524101b8640b62e6e6f8988f311235208695fad)) | digest | `c544396` → `1524101` | --- > [!WARNING] > Some dependencies could not be looked up.
<!--Please give us some feedback on your experience writing this PR ! https://app.datadoghq.com/forms/43db4c02-6837-400c-8083-692e141b1b88 !--> ### What does this PR do? Let Bazel manage MSYS2 installation. By default, Bazel will check if `bash` exists in `C:\tools\msys64`. In this case Bazel will just keep using it as is. If `bash` hasn't been found there o
<!--Please give us some feedback on your experience writing this PR ! https://app.datadoghq.com/forms/43db4c02-6837-400c-8083-692e141b1b88 !--> ### What does this PR do? Config: ```yaml anomaly_detection: tailer_match_telemetry: enabled: true report_interval: 5m max_tracked_metric_series: 1000 max_event_metric_items: 20 max_event_log_scopes: 20 reporting: ev
### What does this PR do? This PR sets a catch-all .gitattributes line that forces all files that git identifies as "text" (based on `text=auto`) to be checked out with LF endings by default (i.e. anything not matched by any other line in .gitattributes), regardless of platform and `core.autocrlf` setting. The PR also adjusts the .gitattributes file such tha
### What does this PR do? Cleans up `.github/CODEOWNERS`: - Removes two exact-duplicate rules (`/.agents/skills/create-runtime-setting/SKILL.md` and `/pkg/collector/`). - Adds ownership for files that had no matching CODEOWNERS rule: `/datadog-agent.map` (`@DataDog/agent-log-pipelines`), `/flakes.yaml` (`@DataDog/agent-devx`), `/k8s_versions.json` (`@DataDog
<!--Please give us some feedback on your experience writing this PR ! https://app.datadoghq.com/forms/43db4c02-6837-400c-8083-692e141b1b88 !--> ### What does this PR do? "revert" of https://github.com/DataDog/datadog-agent/pull/54709 Try to reintroduce the fake intake usage for RC keys instead of `DD_INTERNAL_PAR_SKIP_TASK_VERIFICATION` The extra latency (wh
### What does this PR do? Adds an experimental Apple Silicon backend to the standard `gpu` core check. The macOS implementation reads AGX device properties through unprivileged public IOKit APIs and emits only Apple-scoped metrics: - `gpu.apple.device.count` - `gpu.apple.core.count` - `gpu.apple.device.utilization` - `gpu.apple.system_memory.allocated` - `gp
### What does this PR do? Sets a repo-wide `GIT_DEPTH: 1` default in `.gitlab-ci.yml` to speed up job checkouts, and adds `GIT_DEPTH: 0` overrides on the jobs whose scripts (or the invoke tasks they call) run history-dependent git operations: - `.gitlab/build/source_test/golang_deps_diff.yml` (`golang_deps_diff` — `git merge-base` via `go-deps.diff`) - `.git
### What does this PR do? Move the `proto.Clone()` call that guards `pbgo.Client` aliasing from `clients.seen()` to `clients.activeClients()`. ### Motivation Follow-up to #54639, discussed with its author beforehand. `seen()` runs on every `ClientGetConfigs` poll from every client, up to twice per request via the bypass path, while `activeClients()` runs onc
## Summary Stacked on #53517, this PR integrates delegated-auth-managed `DELA(...)` additional endpoints into Agent subsystems: - discovers delegated-auth directives in every supported map- and list-shaped additional-endpoints setting - preserves pending directives during startup and excludes them from outbound keys until resolution - updates forwarder, logs
Backport d1520bca29c837ff691f91102b60a32a37c0112c from #54563. ___ ### What does this PR do? Gates the NVML workloadmeta collector on `gpu.enabled`. ### Motivation Avoid NVML collection when GPU monitoring is disabled. ### Describe how you validated your changes Added unit coverage for disabled startup. ### Additional Notes
## Summary - Add `.pi-subagents/` to `.gitignore` so this local tooling directory isn't tracked in the repo. ## Test plan - N/A (gitignore-only change)
<!--Please give us some feedback on your experience writing this PR ! https://app.datadoghq.com/forms/43db4c02-6837-400c-8083-692e141b1b88 !--> ### What does this PR do? Improve cleanup to also cancel running jobs. Move call to stack-cleaner to after_script, which is executed after a "graceful" (not forced) job cancel. Prevent cleanup of whitelisted jobs. ##
### What does this PR do? Adds bounded service/source-scoped anomaly scorers and telemetry to measure input coverage against successfully started file and container log tailers. The global scorer and adaptive-sampling behavior are unchanged; scoped scores are telemetry-only. ### Motivation ### Describe how you validated your changes ### Additional Notes
Prebuilt devcontainer image reference updated to reflect latest config. This automation in driven by the [workspaces-image-builder service](https://mosaic.us1.ddbuild.io/services/workspaces-imagebuilder/details) and the [github-devcontainer-prebuild service](https://mosaic.us1.ddbuild.io/services/github-devcontainer-prebuild/details). For workspaces on-call:
Reads the IOPMUBootFaultInfo IORegistry property to classify the previous boot's PMU fault tokens (thermal, power, crash, watchdog, hardware) and emit a notable event, independent of DiagnosticReports crash collection. Dedup is boot-scoped via a new ShutdownCause bookmark field, keeping the existing bookmark schema version at 1. <!--Please give us some feedb
### What does this PR do? Downloads gpu-burner before GPU integration tests run. ### Motivation Allow the tests to use the gpu-burner mASS artifact. ### Describe how you validated your changes Confirmed the CI rules trigger `tests_gpu` for this file change. ### Additional Notes The referenced branch artifact expires after seven days.
## Description When a Private Action Runner (PAR) rejects an action because it's not in the runner's allowlist, the error message is unhelpful: action <fqn> is not in the allow list. Users have no guidance on how to resolve it.
### What does this PR do? Improves the collector telemetry for the GPU check by adding a new counter for the number of runs per collector, and also adds device-related tags: device name, architecture, NVlink capabilities, MIG/vGPU state. ### Motivation Facilitate debugging and monitoring, with these tags we will be able to understand whether collectors are f
### What does this PR do? Adds an experimental Linux `agent-rollout-gate` binary to the Agent images used by the node Agent. The Operator can place this binary in front of each Agent container. The gate acquires a component-specific host lock before it starts the real process, so a replacement Pod can be pulled, created, and kept sleeping beside the serving
Adds a `dd_config_discovery:true` tag to every check instance scheduled via the Autodiscovery configuration-discovery mechanism (i.e. any `auto_conf.yaml` template with `discovery: {}`, resolved through `comp/core/autodiscovery/impl/configmgr_discovery.go`'s `applyDiscoveredConfigsLocked`). The tag used is `dd_config_discovery:true`, a plain `dd_`-prefixed k
<!--Please give us some feedback on your experience writing this PR ! https://app.datadoghq.com/forms/43db4c02-6837-400c-8083-692e141b1b88 !--> ### What does this PR do? ### Motivation ### Describe how you validated your changes ### Additional Notes
<!--Please give us some feedback on your experience writing this PR ! https://app.datadoghq.com/forms/43db4c02-6837-400c-8083-692e141b1b88 !--> ### What does this PR do? Streams per-Pod resolved workload targets from the Cluster Agent to Node Agents through the Kubernetes metadata stream. - Adds a generic `PodTargetResolver` interface to keep the transport i
<!--Please give us some feedback on your experience writing this PR ! https://app.datadoghq.com/forms/43db4c02-6837-400c-8083-692e141b1b88 !--> ### What does this PR do? Adds a registry and owner-chain resolver for DatadogInstrumentation workload targets. - Models built-in and customer-configured workload profiles using a `target` resource and optional `via`
### What does this PR do? Add support for renamed settings This PR introduce a rename mechanism within the config. It also use the warning from the config to raise error about unknown keys.
### What does this PR do? Adds an MVP rule to create Mac PKG files. - bazel/rules/macos/pkg/pkg_mac_pkg.bzl - materialize srcs to diesk via a pkg_install-generated installer. sub-optimal but equivalent to what omnibus does today. Future work will improve that. - bazel/rules/macos/pkg/build_mac_pkg.sh — the pkgbuild wrapper - Adds packages/agent/macos/BUILD.b