- [IMPROVEMENT] Add ansible managed comment to checks.yaml #602
- [BUGFIX] Fix default APM setup #608
- [BUGFIX] Fix APM injector ownership logic #604
- [IMPROVEMENT] Allow pinned version of the agent with the installer #605
- [BUGFIX] Fix updated list of APM packages to install #607
- [BUGFIX] Fix role crash when pinning the agent version with the installer enabled #609
- [BUGFIX] Don't create system-probe config when it is disabled #611
- [BUGFIX] Fix distribution version detection on Amazon Linux 2023 #612
- [BUGFIX] Process apm list again #600
- [IMPROVEMENT] datadog-installer registry support #596
- [BUGFIX] Fix the datadog-installer on openSUSE #594
- [BUGFIX] Correctly install datadog-installer on RHEL derivatives #587
- [BUGFIX] Enable datadog-installer when remote_updates is true #588
- [BUGFIX] Fix security-agent.yaml generation #591
- [BUGFIX] Don't install datadog-agent when owned by datadog-installer #589
- [BUGFIX] Fix APM config when owned by datadog-installer #590
- [IMPROVEMENT] Speed up conf.d checks #584
- [IMPROVEMENT] Don't sort configuration keys #577
- [FEATURE] creating install.json file related to apm single step instrumation #572
- [FEATURE] add support for datadog-installer #573
- [FEATURE] add new future GPG key following 2024 GPG key rotation #568
- [BUGFIX] Correctly read install.json on remote computer #575
- [BUGFIX] Disable logging of datadog_windows_ddagentuser_password #563. Thanks @a-rhodes
- [BUGFIX] Use install.datadoghq.com instead of the dd-agent bucket link #576
- [BUGFIX] Fix ansible-lint warnings on latest version #578
- [DOCS] Update broken Ansible Galaxy URLs [#580] Thanks @kaveet
- [DOCS] README: fix broken links to ansible-galaxy #571
- [FEATURE] Add version pinning and telemetry for APM tracer libraries #541
- [FEATURE] Allow using proxy for Windows downloads #553
- [IMPROVEMENT] Restrict the Agent version that can be installed on RHEL (and derivatives) < 7 #556
- [IMPROVEMENT] Install old RPM GPG key only when needed on Agent <= 7.35 #561
- [BUGFIX] Change
mode
to use string parameters #528, thanks @janorn - [BUGFIX] Allow 160 character long lines before wrapping #529, thanks @janorn
- [BUGFIX] Properly detect when DEB package is installed #551
- [BUGFIX] Fix idempotency molecule test on Windows #560
- [BUGFIX] Remove
warn
argument that is not supported in newer Ansible versions #566 - [DOCS] Fix inter-readme links for integrations #546, thanks @valscion
- [DOCS] Clarify that role variables are set in the
vars
section of the playbook #550 - [DOCS] [DOCS-7475] Replace install command for Windows #559
- [IMPROVEMENT] Use Get-ItemProperty to retrieve Windows Agent version #536
- [DOCS] Add a note about required API Key since 4.21 #538
- [FEATURE] [Windows] [AP-1946] Force reinstall if configuration changed #509
- [FEATURE] Adding yum repo configuration options #517 thanks @chipselden
- [IMPROVEMENT] Remove usage of datadog-apm-library-all meta package, to make sure Ansible keeps updating the tracer packages if "all" is used in Ansible configuration #532
- [IMPROVEMENT] [CI] add call to importer in the role #515
- [IMPROVEMENT] [AP-2380] Hard fail if api_key is not provided #512, #505 thanks @gopivalleru
- [IMPROVEMENT] Bump XCode version from 13.3.0 to 13.4.1 #511
- [BUGFIX] correct syntax when checking for config changes #523 thanks @TomFromTA
- [DOCS] [DOCS-6354] Update descriptions for APM role values #520
- [DOCS] [README] Add openSUSE/SLES
community.general
install instruction #513
- [CI] Add
empty-string-compare
rule to ansible-lint [#506]
- [FEATURE] Add support for configuring APM injection. See #481.
- [FEATURE] Add support for
compliance_config
. See #488. - [IMPROVEMENT] Add an option to delete example check configs. See #459. Thanks @rockaut.
- [IMPROVEMENT] Add new APT and RPM signing keys for the 2024 key rotation. See #485.
- [BUGFIX] Make the
ansible.windows
collection optional again by refactoring integration-related tasks. See #483. - [BUGFIX] Modify integration updates task to prevent always changed status. See #486.
- [DOCS] Clarifications on downgrade and integrations configuration. See #501.
- [IMPROVEMENT] Ensure user selected for macOS systemwide installation actually exists. See #479.
- [BUGFIX] Refresh Datadog repository cache on Red Hat family systems to ensure DNF properly imports repodata signing keys to its cache. See #478.
- [DEPRECATION] Remove the old RPM GPG key 4172A230 from hosts that still trust it. This also removes the configuration variables
datadog_yum_gpgkey
,datadog_zypper_gpgkey
anddatadog_zypper_gpgkey_sha256sum
. See #466.
- [FEATURE] Add support for Universal Service Monitoring sysprobe configuration. See #458. Thanks @marcus-crane.
- [IMPROVEMENT] Lock Agent version using
includepkgs
in repofiles on Red Hat compatible platforms. See #443. Thanks @sspans-sbp. - [IMPROVEMENT] Prettify and fix yaml indentations. See #448. Thanks @denzhel.
- [IMPROVEMENT] Add the possibility to prevent the zypper repository installation. See #452. Thanks @jb-mayer.
- [IMPROVEMENT] Use
ansible_managed
instead of custom hardcoded message in managed files. See #454. Thanks @jlosito. - [BUGFIX] Fix version comparison tasks when using ansible-core RC version. See #446.
- [BUGFIX] Fix running role multiple times in a row on SUSE compatible platforms. See #453.
- [DOCS] Add troubleshooting instructions about
service_facts
breaking Ubuntu 20.04. See #449. - [DOCS] Clarify
datadog_config
behavior. See #451. Thanks @hestonhoffman.
- [FEATURE] Add macOS support. See #437. Thanks @lc-applause.
- [BUGFIX] Remove temporary directory after APT key import. See #442. Thanks @wisnij.
- [BUGFIX] Prevent security-agent startup if it's not configured. See #438.
- [IMPROVEMENT] Switch Agent start mode to delayed on Windows. See #422.
- [BUGFIX] Fix installation of a newer pinned version by DNF. See #429.
- [FEATURE] Add tasks for creating custom Python checks. See #408. Thanks @snorlaX-sleeps.
- [FEATURE] Support Rocky Linux and AlmaLinux. See #418.
- [BUGFIX] Fix provisioning on Python 3 / Amazon Linux 2. See #412. Thanks @moleskin-smile.
- [BUGFIX] Prevent dependency on
ansible.windows
with non-Windows nodes. See #416. - [BUGFIX] Don't display content of
DDAGENTUSER_PASSWORD
for Windows nodes. See #415. - [BUGFIX] Additional fixes for
jinja2_native = True
setting. See #414.
- [FEATURE] Add datadog_manage_config to disable changing the Agent config files. See #410.
- [BUGFIX] Fix error: dict object has no attribute 'system'. See #409. Thanks @stegar123.
- [FEATURE] Add Cloud Workload Security Agent configuration. See #375. Thanks @alsmola.
- [IMPROVEMENT] Avoid usage of
ansible_lsb
to not depend onlsb-release
package on Debian. See #377. - [IMPROVEMENT] Check that
datadog_checks
is a mapping to avoid misconfiguration. See #384. Thanks @soar. - [IMPROVEMENT] Enable turning off the Agent 6.14 fix for Windows. See #399.
- [DOCS] Mention limitations in enabling NPM on Windows. See #396.
- [BUGFIX] Fix execution with
jinja2_native = True
. See #383. Thanks @soar.
- [IMPROVEMENT] Install datadog-signing-keys package on Debian/Ubuntu. See #372.
- [IMPROVEMENT] Skip install on Linux systems when pinned version is already installed. See #371.
- [IMPROVEMENT] Update 'http' URLs to 'https' wherever possible. See #369.Thanks @rossigee.
- [BUGFIX] Detect existing version in check mode on Windows. See #364. Thanks @camjay.
- [IMPROVEMENT] Make Windows package download behavior in check mode consistent with Linux. See #359. Thanks @camjay.
- [BUGFIX] Remove
indentfirst
in system-probe.yaml.j2, making the role compatible with Jinja2 >= 3. See #361. Thanks @tasktop-teho. - [BUGFIX] Ensure gnupg is installed on Debian/Ubuntu. See #358.
- [IMPROVEMENT] Improvements for APT keys management. See #351.
- By default, get keys from keys.datadoghq.com, not the Ubuntu keyserver.
- Always add the
DATADOG_APT_KEY_CURRENT.public
key (contains key used to sign current repodata). - Add
signed-by
option to all sources list lines. - On Debian >= 9 and Ubuntu >= 16, only add keys to
/usr/share/keyrings/datadog-archive-keyring.gpg
. - On older systems, also add the same keyring to
/etc/apt/trusted.gpg.d
.
- [BUGFIX] Don't set
repo_gpgcheck=1
by default on RHEL/CentOS 8.1 and on custom repos. See #352. - [BUGFIX] Change RPM key URLs to non-SNI versions to ensure the role continues to work with Python <= 2.7.9. See #353.
- [DOCS] Add a note about installing marketplace integrations. See #354.
- [BUGFIX] Another fix for agent not restarting after a configuration change on Windows. See #349.
- [BUGFIX] Fix Agent not restarting after a configuration change on Windows. See #347.
- [FEATURE] Add NPM support for Windows. See #335.
- [IMPROVEMENT] Split Windows handler into its own file, so we don't include anything from ansible.windows on non-Windows; add a note about the dependency on
ansible.windows
. See #337. - [IMPROVEMENT] Turn on
repo_gpgcheck
on RPM repositories by default. See #341. - [IMPROVEMENT] Align Windows agent to Linux so that service is disabled when
datadog_enabled
isfalse
. See #338. Thanks @erikhjensen. - [BUGFIX] Fix system-probe enablement conditions. See #336.
- [CHORE] Fix issues found by linter (fix file permissions, add
role_name
andnamespace
togalaxy_info
, remove pre/post tasks). See #340.
- [BUGFIX] Revert addition of NPM support for Windows, which introduced multiple issues. See #333.
- [FEATURE] Enable configuring
gpgcheck
option on RPM repofiles. See #324. - [FEATURE] Add NPM support for Windows. See #326.
- [IMPROVEMENT] Implement usage of multiple GPG keys in repofiles, use keys from keys.datadoghq.com. See #325.
- [BUGFIX] Use the
dnf
task instead ofyum
when we detect that a Python 3 interpreter is used on a target host. See #301. - [DOCS] Lint README for Documentation style. See #327.
- [FEATURE] Allow removing checks. See #151 and #320. Thanks @Jno21.
- [BUGFIX] Make security-agent also affected by datadog_enabled. See #318.
- [BUGFIX] Change configuration perms on Linux. See #313. Thanks @loliee.
- [CHORE] Do not name the RPM repo file differently depending on the Agent version. See #311.
- [CHORE] Replace facts from 'ansible_*' to using 'ansible_facts' dictionary. See #304. Thanks to @samasc30.
- [FEATURE] (Windows) Adds support for non-default installation and configuration directories. See #295.
- [BUGFIX] Fixes handling of nil vs. defined but empty variables. See #303.
- [BUGFIX] (Windows) Fixes incorrect service name when validating services. See #307.
- [FEATURE] Adds support for the latest package signing keys. See #308.
- [FEATURE] Adds support for the Datadog IOT agent. See #309.
- [BUGFIX] (Windows) Fix compatibility with Ansible 2.10. See #289.
- [FEATURE] Adds support for 3rd party integrations via the
datadog-agent integration
command. See #291. - [BUGFIX] Updates apt cache prior to attempting install. See #297.
- [FEATURE] Record installation information for telemetry and troubleshooting purposes. See #281.
- [BUGFIX] Fix error when facts value doesn't exist on Redhat OS family of the arm architecture. See #283. Thanks to @kanga333.
- [BUGFIX] (Windows) Fix idempotence when reinstalling same pinned version. See #269.
- [BUGFIX] Fix error when checking custom repository file on debian-based systems. See #275.
- [FEATURE] Ensure the start mode when starting on Windows. See #271. Thanks to @DevKyleS.
- The Agent service will now always be started on Windows at the end of an Ansible run
if
datadog_enabled
is set totrue
. Previously, if the Agent was already installed, the start mode of the existing Agent service was used (which meant a disabled Agent service would remain disabled after an Ansible run, even withdatadog_enabled: true
). If you manually disabled the Agent service and want it to remain disabled, setdatadog_enabled
tofalse
.
- The Agent service will now always be started on Windows at the end of an Ansible run
if
- [FEATURE] Remove old INI config files from v6/v7 configuration. See #271. Thanks to @b2jrock.
- [FEATURE] Register result when Agent install task is run. See #268.
- [BUGFIX] Update
datadog_additional_groups
task & doc. See #267. - [BUGFIX] Fix role idempotence on Debian. See #262. Thanks to @jharley.
- [DOCS] README update: system-probe installation steps. See #257.
- [DOCS] README update: minimum Ansible version & various fixes. See #264.
- [DOCS] Documentation (README, CONTRIBUTING) overhaul. See #270.
- [BUGFIX] Add skip check on sysprobe set_fact tasks. See #259
- [BUGFIX] Only try to stop sysprobe if it is installed. See #255. Thanks to @dv9io0o.
- [FEATURE] Fail with explicit message if OS is not supported by the role. See #247
- [BUGFIX] Ensure that system-probe is stopped if it is disabled or not installed. See #249
- [BUGFIX] Change default datadog_agent group to dd-agent. See #248
- [DOCS] Update instructions to use datadog.datadog as the role name. See #246
- [DOCS] Add development guidelines & small kitchen dev environment. See #243
- [BUGFIX] Fix system-probe.yaml.j2 indent filter. See #240
- [BUGFIX] Fix sysprobe service detection for systemd services. See #242
- [OTHER] Improve ansible-galaxy score by following best practices. See #236
- [OTHER] Include names for
include_tasks
. See #226. Thanks to @the-real-cphillips.
This role will install Agent v7 by default. Datadog Agent v7 runs checks with Python 3, so if you were running any custom checks written in Python, they must be compatible with Python 3. If you were not running any custom checks or if your custom checks are already compatible with Python 3, then it is safe to upgrade to Agent v7.
- [MAJOR] Agent 7 support. See #220.
- Refer to the role upgrade section of the docs for the complete list of changes and instructions to upgrade this role from v3 to v4.
- [FEATURE] Infer major version from
datadog_agent_version
. See #239. - [FEATURE] Allow pinned version install on multiple platforms at the same time. See #235.
- [FEATURE] Reset pinned Windows version. See #234.
- [DOCS] Add README instructions for Windows hosts. See #233.
- [META] Update list of platforms supported by the role. See #224.
- [FEATURE] Blacklist installation of 6.14.0 and 6.14.1 on Windows.
- [FEATURE] Run fix + sanity check script before agent install/upgrade on Windows.
- [FEATURE] Adding support for Datadog system-probe (thanks to @jstoja).
- [DEPRECATION] Drop support for EOL version of Ansible (2.5)
- [FEATURE] Add the
datadog_integration resource
to easily control installed integrations.
- [FEATURE] Trust new RPM key on SUSE. See #203.
- [IMPROVEMENT] Windows: Add the ability to specify the 'ddagentuser' name and password in the configuration.
- [FEATURE] Add 'pre_task' and 'post_task' folder for custom user tasks.
- [FEATURE] On Linux: you can now add the Agent's user to additionnal groups.
- [DEPRECATION] Bumping this minimum supported Ansible version from 2.2 to 2.5 (version prior from 2.5 are EOL).
- [IMPROVEMENT] Use 'include_tasks' instead of 'include' which bump minimum ansible version to 2.4 (thanks to @rouge8).
- [FIX] Make sure the Live Process agent and APM agent aren't started when datadog_enabled is set to false (thanks to @pdecat).
- [FEATURE] Add support for managing Windows hosts.
- [IMPROVEMENT] Allow the use of a backup keyserver for apt in case the main one is down.
- [IMPROVEMENT] Fix configuration items order to be the same between playbook runs (thanks to @jpiron).
- [FEATURE] Add support for "site" configuration.
- [IMPROVEMENT] Add retry policy when failing to pull GPG key from keyserver.ubuntu.com
- [FIX] Disabling repo metadata signature check for SUSE/SLES.
- [FEATURE] Add support for SUSE/SLES (thanks to @enarciso).
- [DEPRECATION] Drop support for EOL platform
- [IMPROVEMENT] Harmonize tasks names between agent5 and agent6 (thanks @xp-1000).
- [FEATURE] Support "--check" Ansible option for dry-run.
- [BUGFIX] Fix downgrade on centos.
- [IMPROVEMENT] Update conf paths to respect agent6 best practice (thanks @dbr1993).
- [IMPROVEMENT] Fix YAML cosmetics: standardize syntax everywhere (thanks @tomgoren).
- [DEPRECATION] Drop support for EOL versions of ansible (<2.2).
- [BUGFIX] Removing legacy http apt repos pre-dating usage of HTTPS. See #116
- [BUGFIX] Remove empty brackets from datadog.yaml when datadog_config is empty. See #107
- [BUGFIX] Remove failing import of expired APT key. See #105
- [BUGFIX] Remove failing import of expired APT key. See #105
- [RELEASE] Make Agent6 the default version to install.
- [IMPROVEMENT] Defaulting to HTTPS for apt and yum repo.
- [IMPROVEMENT] Refresh apt cache every hour. See #98
- [FEATURE] Add Agent6 (beta) support on RPM-based distros. See #90 (thanks @brendanlong)
- [FEATURE] Allow specifying custom repo. See #80
- [FEATURE] Add Agent6 (beta) support on debianoids. See #81
- [BUGFIX] Fix incorrect handler name in process task. See #68 (thanks @jeffwidman)
- [SANITY] Improve agent service task name and handler formatting. See #62 and #67 (thanks @jeffwidman)
- [FEATURE] Add support for configuring trace agent. See #45 and #58 (thanks @pmbauer)
- [FEATURE] Allow pinning the version of the Agent. See #61
- [IMPROVEMENT] Pipe
datadog_checks
through list for python3 support. See #51 (thanks @gtrummell) - [IMPROVEMENT] Use
ansible-lint
on the role and use names on all tasks. See #50 (thanks @eplanet) - [BUGFIX] Fix
ini
format of thedatadog.conf
file. See #59
- [FEATURE] Trust new APT and RPM keys. See #30
- [IMPROVEMENT] Change the
state
ofapt-transport-https
fromlatest
topresent
. See #36 - [IMPROVEMENT] Convert config file tasks to proper YAML formatting. See #32 (thanks @jeffwidman)
- [FEATURE] Allow APT repo settings to be user-defined. See #20 (thanks @geoffwright)
Initial release, compatible with Ansible v1 & v2