[ACTP] add mongodb test connection action (#54583)

<!--Please give us some feedback on your experience writing this PR ! https://app.datadoghq.com/forms/43db4c02-6837-400c-8083-692e141b1b88 !-->

### What does this PR do?

Adds the mongodb "test connection" action

### Motivation

Allow to verify if the PAR has connectivity for executing mongodb action

### Describe how you validated your changes

Ran the action from staging

### Additional Notes


Co-authored-by: gabriel.plassard <gabriel.plassard@datadoghq.com>

Author: dd-gplassard

pkg/privateactionrunner/adapters/config/constants.go

@@ -91,6 +91,7 @@ var DefaultActionFQNs = append([]string{}, defaultCommonActionFQNs...)
 var BundleInheritedAllowedActions = []BundleInheritedAllowedAction{
 	{ActionFQN: "com.datadoghq.gitlab.users.testConnection", ExpectedPrefix: "com.datadoghq.gitlab"},
 	{ActionFQN: "com.datadoghq.kubernetes.core.testConnection", ExpectedPrefix: "com.datadoghq.kubernetes"},
+	{ActionFQN: "com.datadoghq.mongodb.testConnection", ExpectedPrefix: "com.datadoghq.mongodb"},
 	{ActionFQN: "com.datadoghq.script.testConnection", ExpectedPrefix: "com.datadoghq.script"},
 	{ActionFQN: "com.datadoghq.script.enrichScript", ExpectedPrefix: "com.datadoghq.script"},
 	{ActionFQN: "com.datadoghq.http.testConnection", ExpectedPrefix: "com.datadoghq.http"},

pkg/privateactionrunner/adapters/config/transform_test.go

@@ -77,11 +77,13 @@ func TestGetBundleInheritedAllowedActions(t *testing.T) {
 				"com.datadoghq.kubernetes.core": sets.New[string]("action3"),
 				"com.datadoghq.kubernetes.apps": sets.New[string]("action4"),
 				"com.datadoghq.remoteaction":    sets.New[string]("action5"),
+				"com.datadoghq.mongodb":         sets.New[string]("action6"),
 			},
 			expectedInheritedActions: map[string]sets.Set[string]{
 				"com.datadoghq.script":                sets.New[string]("testConnection", "enrichScript"),
 				"com.datadoghq.gitlab.users":          sets.New[string]("testConnection"),
 				"com.datadoghq.kubernetes.core":       sets.New[string]("testConnection"),
+				"com.datadoghq.mongodb":               sets.New[string]("testConnection"),
 				"com.datadoghq.remoteaction":          sets.New[string]("testConnection"),
 				"com.datadoghq.remoteaction.internal": sets.New[string]("prepareEncryption"),
 			},

pkg/privateactionrunner/bundles/mongodb/BUILD.bazel

@@ -13,6 +13,7 @@ go_library(
         "insert_many.go",
         "insert_one.go",
         "replace_one.go",
+        "test_connection.go",
         "update_many.go",
         "update_one.go",
     ],

pkg/privateactionrunner/bundles/mongodb/entrypoint.go

@@ -25,6 +25,7 @@ func NewMongoDB() types.Bundle {
 			"createIndex":    NewCreateIndexHandler(),
 			"findAndModify":  NewFindAndModifyHandler(),
 			"insertMany":     NewInsertManyHandler(),
+			"testConnection": NewTestConnectionHandler(),
 		},
 	}
 }

pkg/privateactionrunner/bundles/mongodb/test_connection.go

@@ -0,0 +1,90 @@
+// Unless explicitly stated otherwise all files in this repository are licensed
+// under the Apache License Version 2.0.
+// This product includes software developed at Datadog (https://www.datadoghq.com/).
+// Copyright 2026-present Datadog, Inc.
+
+package com_datadoghq_mongodb
+
+import (
+	"context"
+	"fmt"
+
+	"go.mongodb.org/mongo-driver/v2/bson"
+	"go.mongodb.org/mongo-driver/v2/mongo"
+
+	log "github.com/DataDog/datadog-agent/pkg/privateactionrunner/adapters/logging"
+	"github.com/DataDog/datadog-agent/pkg/privateactionrunner/libs/privateconnection"
+	"github.com/DataDog/datadog-agent/pkg/privateactionrunner/types"
+)
+
+type TestConnectionHandler struct{}
+
+func NewTestConnectionHandler() *TestConnectionHandler {
+	return &TestConnectionHandler{}
+}
+
+type TestConnectionInputs struct{}
+
+type ServerInfo struct {
+	Version string `json:"version"`
+}
+
+type TestConnectionOutputs struct {
+	ConfigurationValid bool        `json:"configurationValid"`
+	ConnectionValid    bool        `json:"connectionValid"`
+	ServerInfo         *ServerInfo `json:"serverInfo,omitempty"`
+	Errors             []string    `json:"errors"`
+}
+
+func (h *TestConnectionHandler) Run(ctx context.Context, task *types.Task, credential *privateconnection.PrivateCredentials) (interface{}, error) {
+	credentialTokens := credential.AsTokenMap()
+
+	clientOptions, _, err := createMongoClientOptions(ctx, credentialTokens)
+	if err != nil {
+		return &TestConnectionOutputs{
+			ConfigurationValid: false,
+			ConnectionValid:    false,
+			Errors:             []string{err.Error()},
+		}, nil
+	}
+
+	client, err := mongo.Connect(clientOptions)
+	if err != nil {
+		return &TestConnectionOutputs{
+			ConfigurationValid: true,
+			ConnectionValid:    false,
+			Errors:             []string{fmt.Sprintf("Unable to connect to MongoDB: %v", err)},
+		}, nil
+	}
+	defer func() {
+		if err := client.Disconnect(ctx); err != nil {
+			log.FromContext(ctx).Error("Error disconnecting from MongoDB", log.ErrorField(err))
+		}
+	}()
+
+	if err := client.Ping(ctx, nil); err != nil {
+		return &TestConnectionOutputs{
+			ConfigurationValid: true,
+			ConnectionValid:    false,
+			Errors:             []string{fmt.Sprintf("Failed to ping MongoDB server: %v", err)},
+		}, nil
+	}
+
+	var errors []string
+	var serverInfo *ServerInfo
+	var buildInfo struct {
+		Version string `bson:"version"`
+	}
+	if err := client.Database("admin").RunCommand(ctx, bson.D{{Key: "buildInfo", Value: 1}}).Decode(&buildInfo); err != nil {
+		errors = append(errors, fmt.Sprintf("Warning: Failed to get server version: %v", err))
+	} else {
+		serverInfo = &ServerInfo{Version: buildInfo.Version}
+	}
+
+	return &TestConnectionOutputs{
+		ConfigurationValid: true,
+		ConnectionValid:    true,
+		ServerInfo:         serverInfo,
+		Errors:             errors,
+	}, nil
+}

releasenotes/notes/mongodb-private-action-test-connection-e44ce8d6473410d7.yaml

@@ -0,0 +1,4 @@
+---
+enhancements:
+  - |
+    The Private Action Runner can now validate MongoDB connections