feat(external-secrets): add new integration for External Secrets Operator

.github/CODEOWNERS

@@ -71,6 +71,7 @@ code-coverage.datadog.yml                                  @DataDog/agent-integr
 /eppo/                                   @emetelka support@geteppo.com
 /eventstore/                             @Xorima
 /eversql/                                @tomershay team@eversql.com @DataDog/ecosystems-review
+/external_secrets/                       @willianccs willianccs@gmail.com
 /exim/                                   @JeanFred
 /f5-distributed-cloud/                   @GregCoward support@f5.com @DataDog/ecosystems-review @DataDog/saas-integrations
 /fairwinds_insights_ui/                  @rbren insights@fairwinds.com @DataDog/ecosystems-review

.github/workflows/test-all.yml

@@ -291,6 +291,25 @@ jobs:
       test-py3: ${{ inputs.test-py3 }}
       setup-env-vars: "${{ inputs.setup-env-vars }}"
     secrets: inherit
+  jf60ade8:
+    uses: DataDog/integrations-core/.github/workflows/test-target.yml@5f6b58dfb609ea0afb37762612dbb6e2c37d2933
+    with:
+      job-name: External Secrets
+      target: external_secrets
+      platform: linux
+      runner: '["ubuntu-22.04"]'
+      repo: "${{ inputs.repo }}"
+      context: ${{ inputs.context }}
+      python-version: "${{ inputs.python-version }}"
+      latest: ${{ inputs.latest }}
+      agent-image: "${{ inputs.agent-image }}"
+      agent-image-py2: "${{ inputs.agent-image-py2 }}"
+      agent-image-windows: "${{ inputs.agent-image-windows }}"
+      agent-image-windows-py2: "${{ inputs.agent-image-windows-py2 }}"
+      test-py2: ${{ inputs.test-py2 }}
+      test-py3: ${{ inputs.test-py3 }}
+      setup-env-vars: "${{ inputs.setup-env-vars }}"
+    secrets: inherit
   j0180cad:
     uses: DataDog/integrations-core/.github/workflows/test-target.yml@5f6b58dfb609ea0afb37762612dbb6e2c37d2933
     with:

external_secrets/CHANGELOG.md

@@ -0,0 +1,7 @@
+# CHANGELOG - External Secrets
+
+## 0.1.0 / 2025-07-09
+
+***Added***:
+
+* Initial release of the External Secrets integration.

external_secrets/README.md

@@ -0,0 +1,62 @@
+# Agent Check: External Secrets
+
+## Overview
+
+The [External Secrets Operator][13] (ESO) synchronizes secrets from external providers, such as HashiCorp Vault or AWS Secrets Manager, into Kubernetes Secrets. This integration provides visibility into ESO's health and performance, including reconciliation rates, provider API calls, secret sync status, and controller runtime metrics.
+
+## Setup
+
+### Installation
+
+If you are using Agent v6.8+ follow the instructions below to install the External Secrets check on your host. See the dedicated Agent guide for [installing community integrations][1] to install checks with the [Agent Manager][2] or in a [Docker environment][4].
+
+1. [Download and launch the Datadog Agent][3].
+2. Run the following command to install the Agent integration:
+
+   ```shell
+   datadog-agent integration install -t datadog-external-secrets==<INTEGRATION_VERSION>
+   ```
+
+3. Configure your integration in the same way as core [integrations][5].
+
+### Configuration
+
+1. Edit the `external_secrets.d/conf.yaml` file in the `conf.d/` folder at the root of your [Agent's configuration directory][6] to start collecting your External Secrets Operator metrics. See the [sample external_secrets.d/conf.yaml][7] for all available configuration options.
+
+2. [Restart the Agent][8].
+
+### Validation
+
+[Run the Agent's status subcommand][9] and look for `external_secrets` under the Checks section.
+
+## Data Collected
+
+### Metrics
+
+See [metadata.csv][10] for a list of metrics provided by this integration.
+
+### Service Checks
+
+See [service_checks.json][11] for a list of service checks provided by this integration.
+
+### Events
+
+The External Secrets integration does not include any events.
+
+## Troubleshooting
+
+Need help? Contact [Datadog support][12].
+
+[1]: https://docs.datadoghq.com/agent/guide/use-community-integrations/
+[2]: https://docs.datadoghq.com/agent/guide/agent-commands/?tab=agentv6v7#start-stop-and-restart-the-agent
+[3]: https://app.datadoghq.com/account/settings/agent/latest
+[4]: https://docs.datadoghq.com/agent/guide/use-community-integrations/?tab=docker
+[5]: https://docs.datadoghq.com/getting_started/integrations/
+[6]: https://docs.datadoghq.com/agent/guide/agent-configuration-files/#agent-configuration-directory
+[7]: https://github.com/DataDog/integrations-extras/blob/master/external_secrets/datadog_checks/external_secrets/data/conf.yaml.example
+[8]: https://docs.datadoghq.com/agent/guide/agent-commands/#start-stop-and-restart-the-agent
+[9]: https://docs.datadoghq.com/agent/guide/agent-commands/#agent-status-and-information
+[10]: https://github.com/DataDog/integrations-extras/blob/master/external_secrets/metadata.csv
+[11]: https://github.com/DataDog/integrations-extras/blob/master/external_secrets/assets/service_checks.json
+[12]: https://docs.datadoghq.com/help/
+[13]: https://external-secrets.io/

external_secrets/assets/configuration/spec.yaml

@@ -0,0 +1,14 @@
+name: External Secrets
+files:
+- name: external_secrets.yaml
+  options:
+  - template: init_config
+    options:
+    - template: init_config/default
+  - template: instances
+    options:
+    - template: instances/openmetrics
+      overrides:
+        openmetrics_endpoint.value.example: http://localhost:8080/metrics
+        openmetrics_endpoint.description: |
+          Endpoint exposing the External Secrets Operator Prometheus metrics.