Please refer to the 7.82.1 tag on integrations-core for the list of changes on the Core Checks
Bug Fixes
Windows: Fixed an issue where an explicit DDAGENTUSERKEEPRIGHTS or DDAGENTUSERNAME value passed as an install argument to a Fleet Automation-triggered Windows Agent install/upgrade could be silently overridden by a stale fallback value (res
Fix an issue where GPU monitoring could trigger a kernel panic on multi-GPU nodes with Hopper/Blackwell GPUs.
## Summary Split out of #54062 (which grew to touch too many teams' code in one PR — see [discussion](https://github.com/DataDog/datadog-agent/pull/54062#issuecomment-5104702094)). This is the core mechanism; two follow-on PRs stack on top of this one to extend it to other products. Adds durable-delivery handling for delegated-auth (WIF)-managed domains, mat
### What does this PR do? This draft MVP surfaces runtime integration-check failures in the originating `DatadogInstrumentation` status instead of maintaining integration-specific validation schemas in admission. - Carries the originating DDI namespace, name, UID, generation, and check index through workload-targeted check configurations. - Reports check con
### What does this PR do? This PR cleans up unused Observer correlators. - removes the disabled `cross_signal` correlator - moves `passthrough` out of the production catalog and keeps it as a testbench-only adapter for raw-anomaly evaluation ### Motivation Neither correlator is used in production. `cross_signal` only recognizes three fixed source combination
### What does this PR do? Add BUILD file for pkg/network/protocols/http/gotls/lookup/internal. Remove the `go:build nobuild` tag preventing this from being seen by gazelle. ### Motivation Cleaning up. ### Describe how you validated your changes ``` bazel build //pkg/network/protocols/http/gotls/lookup/internal:generate_luts ```
Backport 623b04cb6c31624398ed401ef0a17fdf6282910c from #54400. ___ ### What does this PR do? Changes how the live debugger finds processes to instrument. It used to look at each process exactly three times, when the process turned 3, 100 and 1000 seconds old. If the tracer inside that process had not announced itself by the third look, that process was never
### What does this PR do? Adds an onError resource hook that retries the ensure-adws-started command when sshd dies mid-command or the command's own PowerShell errors out, without retrying dial-exhaustion failures or the whole stack up. ### Motivation ensure-adws-started fails flakily shortly after domain-controller promotion (WINA-2095) due to transient SSH
Backport bb50da7066b760291cd2c0dbcd51f8d7162025d4 from #54697. ___ ### What does this PR do? Updates findAutoscaler in pod_patcher.go to filter out DatadogPodAutoscaler resources whose ApplyPolicy.Mode is set to Preview. Only autoscalers in `Apply` mode (or with no ApplyPolicy set) are considered when patching pods. ### Motivation It is valid to have multipl
### What does this PR do? Migrates the `python-version` invoke task (`tasks/python_version.py`) to treat the Bazel module file `deps/cpython/cpython.MODULE.bazel` as the single source of truth for the embedded Python version: - `_get_current_python_version()` now reads `PYTHON_VERSION` from the Bazel file instead of `default_version` in `omnibus/config/softw
### What does this PR do? Mutes four flare-related tests in `flakes.yaml` that have started failing intermittently in CI. ### Motivation The following tests have been reported failing via CI monitoring, with tracking tickets: - `test/new-e2e/tests/agent-subcommands.TestLinuxFlareSuite/TestFlareDefaultFiles` — [FLREM-153](https://datadoghq.atlassian.net/brows
Backport 34e4e15f4654a23d43208c68be99fb2dd67ad4e9 from #54476. ___ feat(autoinstrumentation): wire remote-config SSI policies Subscribe the Cluster Agent auto-instrumentation webhook to the APM_POLICIES remote-config product and layer the delivered SSI policies on top of the configuration baseline at runtime. - TargetMutator now holds a base policy set plus
### What does this PR do? In order to run kubernetes version > v1.37.0 we need to use kind v0.32.0 at least and use kubemad API version v1alpha4. generate the correct kubeadm config file depending on the requested version. ### Motivation fix flaky test ### Describe how you validated your changes run the latest job with kube v1.37.0-rc.0 ✅ run the latest job
### What does this PR do? Removes the `SetupSuite` gate in `TestHostTrafficDynamicPathSuite` that waited for the agent's Remote Config poll counter to increase within 2 minutes of pushing the dynamic config. JIRA: [NETPATH-1108](https://datadoghq.atlassian.net/browse/NETPATH-1108) ### Motivation `TestHostTrafficDynamicPathSuite` has been intermittently faili
### What does this PR do? Adds configurable workload targets for DatadogInstrumentation checks and logs. The Cluster Agent now: - Builds a registry from built-in workloads and `instrumentation_crd_controller.custom_workload_targets`. - Resolves Pod controller ownership through configured `via` resources with the dynamic Kubernetes client. - Streams resolved
### What does this PR do? Stops doing real signing and notarization of Macos DMG packages on main. Do it on nightly only so we maintain some testing of the process. ### Motivation We should not be creating notarized, installable packages off of main. That creates artifacts which could appear to be end-user consumable, but are not supported, nor necessarily v
## Summary - Default GitLab jobs to `GIT_DEPTH: 1` so most checkouts are a shallow clone of HEAD only. - Set `GIT_DEPTH: 0` on jobs that actually need git history (merge-base, ancestor walks, `git describe`, `git log` ranges). - `GIT_STRATEGY: clone` is not a full clone; clone with depth 1 is still shallow. Full history requires `GIT_DEPTH: 0`. ## Test plan
### What does this PR do? Disables parallel NVML collector collection by default in the GPU check. Operators can opt in with `gpu.parallel_collectors: true`. ### Motivation #incident-59170 ### Describe how you validated your changes Ran manually, checked that the parallel collectors being disabled removes the issue. ### Additional Notes
<!--Please give us some feedback on your experience writing this PR ! https://app.datadoghq.com/forms/43db4c02-6837-400c-8083-692e141b1b88 !--> ### What does this PR do? ### Motivation ### Describe how you validated your changes ### Additional Notes
### What does this PR do? Adds a deploy=true E2E-framework lab for the `ibm_mq` integration under `test/e2e-framework/scenarios/aws/integrations/ibm_mq`. The scenario self-provisions **IBM MQ Advanced for Developers 9.3** with a configurable number of queue managers and queues on a single amd64 RHEL 8 EC2 host, co-located with the Datadog Agent. A systemd-dr
<!--Please give us some feedback on your experience writing this PR ! https://app.datadoghq.com/forms/43db4c02-6837-400c-8083-692e141b1b88 !--> ### What does this PR do? ### Motivation ### Describe how you validated your changes ### Additional Notes
See if we can hack a way around the `project.extra_package_file` by writing tarballs directly to OMNIBUS_PACKAGE_ARTIFACT_DIR. This would be a temporary solution until the time when we can completely replace the package-artifact.rb. After migration, we'll just depend on these special targets in the srcs of the package target. One of the key motivations is to
### What does this PR do? Adds end-to-end testing infrastructure for the agent health platform feature, including: - Agent health aggregator support in fakeintake for capturing and validating health reports - New E2E test suite (`new-e2e-agent-health`) that validates docker permission issue detection and reporting - GitLab CI configuration to run agent healt
### What does this PR do? Stops code signing on main, and moves it only to nightly. ### Motivation Get back ~7 minutes of wait time on the post merge finalization of every commit. Discussion with delivery team indicates that doing this on nightly is sufficient to keep them alert for potential problems. ### Describe how you validated your changes If basic CI
### What does this PR do? Pick up NCM eviction configurations from the datadog.yaml. Use these values in the eviction function. Call the eviction function after we write to the db to ensure that we do not exceed memory constraints. Evictions are tracked under a new Datadog internal metric: `datadog.ncm.store.configs_evicted` ### Motivation ### Describe how y
### What does this PR do? Makes `procmgr` (`dd-procmgrd`) a first-class Linux service manager in the fleet installer, peer to systemd / upstart / sysvinit, instead of a systemd sub-unit that the installer cannot reason about. - New `service.ProcmgrType`, selected when the init system is systemd, `dd-procmgrd` is installed, and the operator has not opted out.
<!--Please give us some feedback on your experience writing this PR ! https://app.datadoghq.com/forms/43db4c02-6837-400c-8083-692e141b1b88 !--> ### What does this PR do? ### Motivation ### Describe how you validated your changes ### Additional Notes
### What does this PR do? This PR adds a RunCommand action which, if enabled, allows a user to submit commands via PAR to be executed on a remote device. ### Motivation https://datadoghq.atlassian.net/browse/NDINT-652 ### Describe how you validated your changes ### Additional Notes
### What does this PR do? Add BUILD file for tools/retry_file_dump ### Motivation Everything should be buildable with bazel. ### Describe how you validated your changes build and run ``` bazel run //tools/retry_file_dump:retry_file_dump ... INFO: Build completed successfully, 3 total actions INFO: Running command line: /root/.cache/bazel/_bazel_root/81a15fa9
### What does this PR do? Collects NVLink field values independently for each port. ### Motivation A field unsupported on one port should not suppress metrics from supported ports. ### Describe how you validated your changes `dda inv test --targets=./pkg/collector/corechecks/gpu/nvidia` ### Additional Notes
<!--Please give us some feedback on your experience writing this PR ! https://app.datadoghq.com/forms/43db4c02-6837-400c-8083-692e141b1b88 !--> ### What does this PR do? Seeds `datadog.yaml` from `DD_API_KEY`/`DD_SITE`/`DD_HOSTNAME`/`DD_TAGS`/`DD_ENV`/`DD_INFRASTRUCTURE_MODE`/proxy env vars on first install, mirroring the Linux install script. ### Motivation
Documents the approved design for a cross-env dashboard and per-env action loop in e2ectl's interactive mode, plus the generalization needed to keep cmd/e2ectl provisioner/installer-agnostic (moving config-drift interpretation into the Installer interface). Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com><!--Please give us some feedback on your experi
<!--Please give us some feedback on your experience writing this PR ! https://app.datadoghq.com/forms/43db4c02-6837-400c-8083-692e141b1b88 !--> ### What does this PR do? ### Motivation ### Describe how you validated your changes ### Additional Notes
### What does this PR do? In .bazelrc, we run clippy and rustfmt checks in the build step using Bazel's aspects feature when in CI (using --config=ci, added by tools/bazel, which is automatically invoked by bazelisk, if the CI environment variable is present). However, it appears that these are only run when explicitly running the build step, not when, for e
Backport 1dbeb46efe19c82cc0f1f1064ea146467ea92be9 from #54434. ___ ### What does this PR do? Automatically enables the `logon_duration` feature when the Agent is in end-user-device mode (`infrastructure_mode: end_user_device`), so operators no longer have to set `logon_duration.enabled: true` separately. Two changes: 1. **`pkg/config/setup/config.go`** — `ap
### What does this PR do? - Check msiexec's real exit code instead of just whether `Start-Process` launched it. - Retry the AWS CLI install and `aws s3 cp` to handle flaky network. - Collect the msiexec install log into the test artifacts folder on failure. ### Motivation Try to avoid flakes like https://gitlab.ddbuild.io/DataDog/datadog-agent/-/jobs/1914723