Skip to content

Restore static quality gates headroom for #54400 - #54637

Merged
gh-worker-dd-mergequeue-cf854d[bot] merged 1 commit into
mainfrom
regis.desgroppes/sqg-restore-headroom-54400
Aug 10, 2026
Merged

Restore static quality gates headroom for #54400#54637
gh-worker-dd-mergequeue-cf854d[bot] merged 1 commit into
mainfrom
regis.desgroppes/sqg-restore-headroom-54400

Conversation

@rdesgroppes

@rdesgroppes rdesgroppes commented Aug 10, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

What does this PR do?

Bump agent_rpm_arm64/agent_suse_arm64's max_on_disk_size using quality-gates.exception-threshold-bump's fix from #54615: the only two gates PR #54400 is actually short on headroom for.

Also align each RPM/SUSE twin gate pair's max_on_wire_size up to the higher of the two (agent_rpm_amd64_fips, agent_rpm_arm64_fips, agent_suse_arm64, iot_agent_suse_amd64): RPM and SUSE packages are the same format, so a twin pair drifting apart is noise, not signal.

Motivation

#54400 (an incident fix) is blocked by these two gates, both at zero margin on main after #54204's Rust data-security check.
A rebase alone left it short by 34 KiB.

Describe how you validated your changes

Confirmed against #54400's live metrics: it currently fails only agent_rpm_arm64/agent_suse_arm64 on-disk, by 34.26 KiB.
Against these new thresholds, none of its 33 gates fail.

@rdesgroppes rdesgroppes added changelog/no-changelog No changelog entry needed qa/no-code-change No code change in Agent code requiring validation labels Aug 10, 2026
@rdesgroppes
rdesgroppes requested review from a team, aiuto, cmourot and quentinus95 as code owners August 10, 2026 13:48
@dd-octo-sts dd-octo-sts Bot added the internal Identify a non-fork PR label Aug 10, 2026
@github-actions github-actions Bot added the short review PR is simple enough to be reviewed quickly label Aug 10, 2026
@dd-octo-sts dd-octo-sts Bot added team/agent-build team/container-platform The Container Platform Team labels Aug 10, 2026
@rdesgroppes @claude
Restore static quality gates headroom for #54400
d08da9c 
### What does this PR do?
Bump `agent_rpm_arm64`/`agent_suse_arm64`'s `max_on_disk_size` using
`quality-gates.exception-threshold-bump`'s fix from #54615: the only
two gates PR #54400 is actually short on headroom for.

Also align each RPM/SUSE twin gate pair's `max_on_wire_size` up to the
higher of the two (`agent_rpm_amd64_fips`, `agent_rpm_arm64_fips`,
`agent_suse_arm64`, `iot_agent_suse_amd64`): RPM and SUSE packages are
the same format, so a twin pair drifting apart is noise, not signal.

### Motivation
PR #54400 (an incident fix) is blocked by these two gates, both at
zero margin on `main` after #54204's Rust data-security check. A
rebase alone left it short by 34 KiB.

### Describe how you validated your changes
Confirmed against PR #54400's live metrics: it currently fails only
`agent_rpm_arm64`/`agent_suse_arm64` on-disk, by 34.26 KiB; against
these new thresholds, none of its 33 gates fail.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
@rdesgroppes
rdesgroppes force-pushed the regis.desgroppes/sqg-restore-headroom-54400 branch from dc432ca to d08da9c Compare August 10, 2026 14:10
@dd-octo-sts

dd-octo-sts Bot commented Aug 10, 2026

Copy link
Copy Markdown
Contributor

Files inventory check summary

File checks results against ancestor efa5d8ab:

Results for datadog-agent_7.84.0~devel.git.45.d08da9c.pipeline.129954455-1_amd64.deb:

No change detected

Results for datadog-iot-agent_7.84.0~devel.git.45.d08da9c.pipeline.129954455-1_amd64.deb:

No change detected

@dd-octo-sts

dd-octo-sts Bot commented Aug 10, 2026

Copy link
Copy Markdown
Contributor

Static quality checks

✅ Please find below the results from static quality gates
Comparison made with ancestor efa5d8a
📊 Static Quality Gates Dashboard
🔗 SQG Job

32 successful checks with minimal change (< 2 KiB)
Quality gate Current Size
✅ agent_deb_amd64 759.546 MiB
✅ agent_deb_amd64_fips 712.884 MiB
✅ agent_heroku_amd64 312.273 MiB
✅ agent_rpm_amd64 759.530 MiB
✅ agent_rpm_amd64_fips 712.868 MiB
✅ agent_rpm_arm64 735.491 MiB
✅ agent_rpm_arm64_fips 692.100 MiB
✅ agent_suse_amd64 759.530 MiB
✅ agent_suse_amd64_fips 712.868 MiB
✅ agent_suse_arm64 735.491 MiB
✅ agent_suse_arm64_fips 692.100 MiB
✅ docker_agent_amd64 818.158 MiB
✅ docker_agent_arm64 819.162 MiB
✅ docker_agent_jmx_amd64 1009.055 MiB
✅ docker_agent_jmx_arm64 998.712 MiB
✅ docker_cluster_agent_amd64 210.227 MiB
✅ docker_cluster_agent_arm64 223.267 MiB
✅ docker_cws_instrumentation_amd64 7.439 MiB
✅ docker_cws_instrumentation_arm64 6.877 MiB
✅ docker_dogstatsd_amd64 39.479 MiB
✅ docker_dogstatsd_arm64 37.560 MiB
✅ docker_host_profiler_amd64 305.801 MiB
✅ docker_host_profiler_arm64 317.116 MiB
✅ dogstatsd_deb_amd64 30.220 MiB
✅ dogstatsd_deb_arm64 28.243 MiB
✅ dogstatsd_rpm_amd64 30.220 MiB
✅ dogstatsd_suse_amd64 30.220 MiB
✅ iot_agent_deb_amd64 46.416 MiB
✅ iot_agent_deb_arm64 43.091 MiB
✅ iot_agent_deb_armhf 43.871 MiB
✅ iot_agent_rpm_amd64 46.416 MiB
✅ iot_agent_suse_amd64 46.415 MiB

@gh-worker-dd-mergequeue-cf854d
gh-worker-dd-mergequeue-cf854d Bot merged commit 6e8afe6 into main Aug 10, 2026
245 checks passed
@gh-worker-dd-mergequeue-cf854d
gh-worker-dd-mergequeue-cf854d Bot deleted the regis.desgroppes/sqg-restore-headroom-54400 branch August 10, 2026 15:55
@github-actions github-actions Bot added this to the 7.84.0 milestone Aug 10, 2026
@cit-pr-commenter-54b7da

cit-pr-commenter-54b7da Bot commented Aug 10, 2026

Copy link
Copy Markdown

Regression Detector

Regression Detector Results

Metrics dashboard
Target profiles
Run ID: d0d68db9-a0ed-46a9-b22f-29f5b15f0316

Baseline: 1d86ce7
Comparison: 6e8afe6
Diff

Optimization Goals: ✅ No significant changes detected

Fine details of change detection per experiment

perf experiment goal Δ mean % Δ mean % CI trials links
➖ quality_gate_metrics_logs memory utilization +1.56 [+1.30, +1.81] 1 Logs bounds checks dashboard
➖ quality_gate_security_mean_fs_load memory utilization +0.19 [+0.16, +0.22] 1 Logs bounds checks dashboard
➖ quality_gate_idle memory utilization +0.17 [+0.13, +0.22] 1 Logs bounds checks dashboard
➖ quality_gate_security_no_fs_load memory utilization +0.17 [+0.08, +0.26] 1 Logs bounds checks dashboard
➖ quality_gate_security_idle memory utilization +0.08 [+0.02, +0.13] 1 Logs bounds checks dashboard
➖ quality_gate_private_action_runner memory utilization +0.02 [-0.10, +0.15] 1 Logs bounds checks dashboard
➖ quality_gate_idle_all_features memory utilization -0.01 [-0.04, +0.02] 1 Logs bounds checks dashboard
➖ quality_gate_logs % cpu utilization -0.25 [-1.11, +0.60] 1 Logs bounds checks dashboard

Bounds Checks: ✅ Passed

perf experiment bounds_check_name replicates_passed observed_value links
✅ quality_gate_idle intake_connections 10/10 3 ≤ 4 bounds checks dashboard
✅ quality_gate_idle memory_usage 10/10 150.48MiB ≤ 154MiB bounds checks dashboard
✅ quality_gate_idle total_bytes_received 10/10 731.40KiB ≤ 819.20KiB bounds checks dashboard
✅ quality_gate_idle_all_features intake_connections 10/10 3 ≤ 4 bounds checks dashboard
✅ quality_gate_idle_all_features memory_usage 10/10 495.32MiB ≤ 512MiB bounds checks dashboard
✅ quality_gate_idle_all_features total_bytes_received 10/10 1.12MiB ≤ 1.25MiB bounds checks dashboard
✅ quality_gate_logs intake_connections 10/10 17 ≤ 40 bounds checks dashboard
✅ quality_gate_logs memory_usage 10/10 187.01MiB ≤ 195MiB bounds checks dashboard
✅ quality_gate_logs missed_bytes 10/10 0B = 0B bounds checks dashboard
✅ quality_gate_logs total_bytes_received 10/10 264.21MiB ≤ 292MiB bounds checks dashboard
✅ quality_gate_metrics_logs cpu_usage 10/10 417.03 ≤ 2000 bounds checks dashboard
✅ quality_gate_metrics_logs intake_connections 10/10 19 ≤ 40 bounds checks dashboard
✅ quality_gate_metrics_logs memory_usage 10/10 408.79MiB ≤ 430MiB bounds checks dashboard
✅ quality_gate_metrics_logs missed_bytes 10/10 0B = 0B bounds checks dashboard
✅ quality_gate_metrics_logs total_bytes_received 10/10 0.94GiB ≤ 1.04GiB bounds checks dashboard
✅ quality_gate_private_action_runner memory_usage 10/10 71.75MiB ≤ 75MiB bounds checks dashboard
✅ quality_gate_security_idle cpu_usage 10/10 31.01 ≤ 100 bounds checks dashboard
✅ quality_gate_security_idle memory_usage 10/10 301.81MiB ≤ 330MiB bounds checks dashboard
✅ quality_gate_security_mean_fs_load cpu_usage 10/10 62.29 ≤ 200 bounds checks dashboard
✅ quality_gate_security_mean_fs_load memory_usage 10/10 278.10MiB ≤ 310MiB bounds checks dashboard
✅ quality_gate_security_no_fs_load cpu_usage 10/10 22.19 ≤ 100 bounds checks dashboard
✅ quality_gate_security_no_fs_load memory_usage 10/10 284.19MiB ≤ 320MiB bounds checks dashboard

Explanation

Confidence level: 90.00%
Effect size tolerance: |Δ mean %| ≥ 5.00%

Performance changes are noted in the perf column of each table:

  • ✅ = significantly better comparison variant performance
  • ❌ = significantly worse comparison variant performance
  • ➖ = no significant change in performance

A regression test is an A/B test of target performance in a repeatable rig, where "performance" is measured as "comparison variant minus baseline variant" for an optimization goal (e.g., ingress throughput). Due to intrinsic variability in measuring that goal, we can only estimate its mean value for each experiment; we report uncertainty in that value as a 90.00% confidence interval denoted "Δ mean % CI".

For each experiment, we decide whether a change in performance is a "regression" -- a change worth investigating further -- if all of the following criteria are true:

  1. Its estimated |Δ mean %| ≥ 5.00%, indicating the change is big enough to merit a closer look.

  2. Its 90.00% confidence interval "Δ mean % CI" does not contain zero, indicating that if our statistical model is accurate, there is at least a 90.00% chance there is a difference in performance between baseline and comparison variants.

  3. Its configuration does not mark it "erratic".

Replicate Execution Details

We run multiple replicates for each experiment/variant. However, we allow replicates to be automatically retried if there are any failures, up to 8 times, at which point the replicate is marked dead and we are unable to run analysis for the entire experiment. We call each of these attempts at running replicates a replicate execution. This section lists all replicate executions that failed due to the target crashing or being oom killed.

Note: In the below tables we bucket failures by experiment, variant, and failure type. For each of these buckets we list out the replicate indexes that failed with an annotation signifying how many times said replicate failed with the given failure mode. In the below example the baseline variant of the experiment named experiment_with_failures had two replicates that failed by oom kills. Replicate 0, which failed 8 executions, and replicate 1 which failed 6 executions, all with the same failure mode.

Experiment Variant Replicates Failure Logs Debug Dashboard
experiment_with_failures baseline 0 (x8) 1 (x6) Oom killed Debug Dashboard

The debug dashboard links will take you to a debugging dashboard specifically designed to investigate replicate execution failures.

❌ Retried Profiling Replicate Execution Failures (ddprof)

Note: Profiling replicas may still be executing. See the debug dashboard for up to date status.

Experiment Variant Replicates Failure Debug Dashboard
quality_gate_idle_all_features baseline 10 Oom killed Debug Dashboard
quality_gate_logs baseline 10 Oom killed Debug Dashboard
quality_gate_metrics_logs baseline 10 Oom killed Debug Dashboard
quality_gate_metrics_logs comparison 10 Oom killed Debug Dashboard
quality_gate_security_mean_fs_load comparison 10 Crashed (exit code: 134) Debug Dashboard
quality_gate_security_no_fs_load baseline 10 Crashed (exit code: 134) Debug Dashboard
quality_gate_security_no_fs_load comparison 10 Oom killed Debug Dashboard

CI Pass/Fail Decision

✅ Passed. All Quality Gates passed.

  • quality_gate_security_idle, bounds check cpu_usage: 10/10 replicas passed. Gate passed.
  • quality_gate_security_idle, bounds check memory_usage: 10/10 replicas passed. Gate passed.
  • quality_gate_idle, bounds check memory_usage: 10/10 replicas passed. Gate passed.
  • quality_gate_idle, bounds check intake_connections: 10/10 replicas passed. Gate passed.
  • quality_gate_idle, bounds check total_bytes_received: 10/10 replicas passed. Gate passed.
  • quality_gate_metrics_logs, bounds check total_bytes_received: 10/10 replicas passed. Gate passed.
  • quality_gate_metrics_logs, bounds check memory_usage: 10/10 replicas passed. Gate passed.
  • quality_gate_metrics_logs, bounds check intake_connections: 10/10 replicas passed. Gate passed.
  • quality_gate_metrics_logs, bounds check cpu_usage: 10/10 replicas passed. Gate passed.
  • quality_gate_metrics_logs, bounds check missed_bytes: 10/10 replicas passed. Gate passed.
  • quality_gate_idle_all_features, bounds check total_bytes_received: 10/10 replicas passed. Gate passed.
  • quality_gate_idle_all_features, bounds check intake_connections: 10/10 replicas passed. Gate passed.
  • quality_gate_idle_all_features, bounds check memory_usage: 10/10 replicas passed. Gate passed.
  • quality_gate_logs, bounds check total_bytes_received: 10/10 replicas passed. Gate passed.
  • quality_gate_logs, bounds check intake_connections: 10/10 replicas passed. Gate passed.
  • quality_gate_logs, bounds check missed_bytes: 10/10 replicas passed. Gate passed.
  • quality_gate_logs, bounds check memory_usage: 10/10 replicas passed. Gate passed.
  • quality_gate_private_action_runner, bounds check memory_usage: 10/10 replicas passed. Gate passed.
  • quality_gate_security_no_fs_load, bounds check cpu_usage: 10/10 replicas passed. Gate passed.
  • quality_gate_security_no_fs_load, bounds check memory_usage: 10/10 replicas passed. Gate passed.
  • quality_gate_security_mean_fs_load, bounds check cpu_usage: 10/10 replicas passed. Gate passed.
  • quality_gate_security_mean_fs_load, bounds check memory_usage: 10/10 replicas passed. Gate passed.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@aiuto aiuto aiuto approved these changes
@JSGette JSGette JSGette approved these changes
@cmourot cmourot Awaiting requested review from cmourot cmourot is a code owner
@quentinus95 quentinus95 Awaiting requested review from quentinus95 quentinus95 is a code owner

Assignees

No one assigned

Labels

changelog/no-changelog No changelog entry needed internal Identify a non-fork PR qa/no-code-change No code change in Agent code requiring validation short review PR is simple enough to be reviewed quickly team/agent-build team/container-platform The Container Platform Team

Projects

None yet

Milestone

7.84.0

Development

Successfully merging this pull request may close these issues.

3 participants

@rdesgroppes @aiuto @JSGette