chore(ci): base converged Agent image on -full - #1908
chore(ci): base converged Agent image on -full#1908gh-worker-dd-mergequeue-cf854d[bot] merged 4 commits into
Conversation
Renovate's built-in managers only bump docker/Dockerfile.datadog-agent. The macOS test Agent version (Makefile), the otlp-traces correctness baseline images, and the Windows LTSC base image are pinned in files no default manager parses, so they were silently left behind on the 7.80.1 and 7.80.2 bumps and had to be fixed up by hand. Add a regex custom manager that tracks them off the same registry.datadoghq.com/agent dep, capturing only the numeric version so each image-tag suffix is preserved and every pin moves in lockstep with the main Agent image. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
config:recommended (via :ignoreModulesAndTests) ignores **/test/**, and ignored paths are dropped before any manager extracts from them -- so the custom Agent-pin manager never saw test/correctness/cases/*/config.yaml and the OTLP baseline image pins would still drift (caught in review). Override ignorePaths to reproduce the inherited defaults minus **/test/**, and explicitly re-ignore test/antithesis/** (the only test/ files built-in managers recognize: a Dockerfile and a docker-compose) so behavior there is unchanged. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
The two otlp-traces-ottl correctness tests pinned an external registry.datadoghq.com/agent:X-full image for their DDOT baseline, because the converged Agent+ADP image was built on -jmx (no OTel collector). Build the converged image on -full instead -- a superset of -jmx (same JMXFetch jar + Java 11 JRE, plus the DDOT otel-agent) -- and switch the two ottl baselines to the saluki-images/datadog-agent:testing-release placeholder like every other correctness test, so CI injects the bundled converged image for those baselines automatically. That removes the only external Agent image pins left in the test configs, so the renovate custom manager no longer needs to scan test/correctness: revert the ignorePaths override and the test fileMatch added alongside it (the manager now covers just the Makefile and Windows LTSC pins). Trade-off: this enlarges the publicly published converged image, since -full also bundles DDOT/system-probe. Opening for team feedback on whether that's acceptable versus keeping the test-config custom manager. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
There was a problem hiding this comment.
Pull request overview
This PR switches the “converged” Agent+ADP image to build from the Datadog Agent -full variant so that DDOT/otel-agent is available in the standard saluki-images/datadog-agent:testing-release image used by correctness tests. With that in place, the two OTLP OTTL correctness baselines no longer need to pin an external registry.datadoghq.com/agent:<version>-full image, and the Renovate config can be simplified back to not scanning test/correctness.
Changes:
- Update the OTLP OTTL correctness baseline images to use
saluki-images/datadog-agent:testing-release. - Build the bundled/converged Agent image from
registry.datadoghq.com/agent:<version>-full(via Dockerfile default and CI variable). - Simplify
renovate.json5by removing thetest/correctnessscanning support and reverting theignorePathsoverride.
Reviewed changes
Copilot reviewed 5 out of 5 changed files in this pull request and generated no comments.
Show a summary per file
| File | Description |
|---|---|
test/correctness/cases/otlp-traces-ottl-transform/config.yaml |
Switches baseline image from an externally pinned -full Agent to the standard testing-release placeholder. |
test/correctness/cases/otlp-traces-ottl-filtering/config.yaml |
Same baseline image switch as above, enabling CI injection of the bundled converged image. |
renovate.json5 |
Removes ignorePaths override and drops correctness config scanning from the Agent-pin custom manager. |
docker/Dockerfile.datadog-agent |
Changes default DD_AGENT_VERSION to 7.80.1-full so the bundled image includes DDOT/otel-agent. |
.gitlab-ci.yml |
Updates PUBLIC_DD_AGENT_VERSION to 7.80.1-full, affecting the publicly published converged image build. |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
Binary Size Analysis (Agent Data Plane)Baseline: f939603 · Comparison: 56ee863 · diff ✅ Binary size difference within thresholdChanges by Module
Detailed Symbol Changes |
This comment has been minimized.
This comment has been minimized.
Regression Detector (Agent Data Plane)Run ID: Optimization Goals: ✅ No significant changes detectedFine details of change detection per experiment (35)Experiments configured
Bounds Checks: ❌ Failed (5)
ExplanationA change is flagged as a regression when |Δ mean %| > 5.00% in the regressing direction for its optimization goal AND SMP marks the experiment as a regression ( |
webern
left a comment
There was a problem hiding this comment.
Makes sense to me, but wasn't sure about the renovate diff.
| // weekly non-major group) | ||
| "osvVulnerabilityAlerts": true, | ||
|
|
||
| // Paths Renovate skips entirely, before any manager (built-in or custom) extracts from them. |
There was a problem hiding this comment.
Is the renovate diff a mistake in this PR?
There was a problem hiding this comment.
Ah, this is actually expected. Given we no longer have a separate image tag specified in the correctness tests, we no longer need to override the default ignore paths (which include **/test/** by default).
…ent-full-image # Conflicts: # .gitlab-ci.yml # docker/Dockerfile.datadog-agent # renovate.json5 # test/correctness/cases/otlp-traces-ottl-filtering/config.yaml # test/correctness/cases/otlp-traces-ottl-transform/config.yaml
> Stacked on #1906 (`jszwedko/renovate-agent-version-pins`). Review/merge that first; this PR will retarget to `main` automatically once it lands. ## Summary Switch to the `-full` image which contains both JMX and DDOT for correctness tests and the converged image we publish. This removes the need for the OTLP correctness tests to pin to published Agent `-full` images. It also enables deployment of the converged ADP image on internal clusters that also run DDOT. ## Test plan - [x] Verified `-full` includes JMX: both `-jmx` and `-full` carry the same `jmxfetch.jar` + Java 11 JRE; `-full` additionally has `otel-agent`. - [x] Rebuilt the converged `testing-release` image on `-full` and confirmed `otel-agent` (DDOT) is present. - [x] Ran locally on the `-full` converged image — all pass: `otlp-traces-ottl-filtering`, `otlp-traces-ottl-transform` (baseline now runs DDOT from the converged image), plus `otlp-traces`, `otlp-metrics`, and `dsd-plain` to confirm no regression from the base-image change. 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-authored-by: jesse.szwedko <jesse.szwedko@datadoghq.com> f77dc3f
> Stacked on #1906 (`jszwedko/renovate-agent-version-pins`). Review/merge that first; this PR will retarget to `main` automatically once it lands. Switch to the `-full` image which contains both JMX and DDOT for correctness tests and the converged image we publish. This removes the need for the OTLP correctness tests to pin to published Agent `-full` images. It also enables deployment of the converged ADP image on internal clusters that also run DDOT. - [x] Verified `-full` includes JMX: both `-jmx` and `-full` carry the same `jmxfetch.jar` + Java 11 JRE; `-full` additionally has `otel-agent`. - [x] Rebuilt the converged `testing-release` image on `-full` and confirmed `otel-agent` (DDOT) is present. - [x] Ran locally on the `-full` converged image — all pass: `otlp-traces-ottl-filtering`, `otlp-traces-ottl-transform` (baseline now runs DDOT from the converged image), plus `otlp-traces`, `otlp-metrics`, and `dsd-plain` to confirm no regression from the base-image change. 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-authored-by: jesse.szwedko <jesse.szwedko@datadoghq.com>
Summary
Switch to the
-fullimage which contains both JMX and DDOT for correctness tests and the converged image we publish. This removes the need for the OTLP correctness tests to pin to published Agent-fullimages. It also enables deployment of the converged ADP image on internal clusters that also run DDOT.Test plan
-fullincludes JMX: both-jmxand-fullcarry the samejmxfetch.jar+ Java 11 JRE;-fulladditionally hasotel-agent.testing-releaseimage on-fulland confirmedotel-agent(DDOT) is present.-fullconverged image — all pass:otlp-traces-ottl-filtering,otlp-traces-ottl-transform(baseline now runs DDOT from the converged image), plusotlp-traces,otlp-metrics, anddsd-plainto confirm no regression from the base-image change.🤖 Generated with Claude Code