Update gcr.io/datadoghq/cluster-agent Docker tag to v7.60.1

[renovate]

This PR contains the following updates:

Package	Update	Change
gcr.io/datadoghq/cluster-agent	minor	7.48.0 -> 7.60.1

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

DataDog/datadog-agent (gcr.io/datadoghq/cluster-agent)

v7.60.1

Compare Source

======

.. _Release Notes_7.60.1_Prelude:

Prelude

Release on: 2024-12-19

.. _Release Notes_7.60.1_Security Notes:

Security Notes

• Update golang.org/x/crypto to fix CVE-2024-45337.

.. _Release Notes_7.60.0:

v7.60.0

Compare Source

======

.. _Release Notes_7.60.0_Prelude:

Prelude

Release on: 2024-12-16

• Please refer to the 7.60.0 tag on integrations-core <https://github.com/DataDog/integrations-core/blob/master/AGENT_CHANGELOG.md#datadog-agent-version-7600>_ for the list of changes on the Core Checks

.. _Release Notes_7.60.0_Upgrade Notes:

Upgrade Notes

• • Parameter peer_tags_aggregation (a.k.a. environment variable DD_APM_PEER_TAGS_AGGREGATION) is now enabled by default. This means that aggregation of peer related tags (e.g., peer.service, db.instance, etc.) now happens in the Agent, which enables statistics for Inferred Entities. If you want to disable this feature, set peer_tags_aggregation to false in your Agent configuration.

  • Parameter compute_stats_by_span_kind (a.k.a. environment variable DD_APM_COMPUTE_STATS_BY_SPAN_KIND) is now enabled by default. This means spans with an eligible span.kind will have stats computed. If disabled, only top-level and measured spans will have stats computed. If you want to disable this feature, set compute_stats_by_span_kind to false in your Agent configuration.

    Note: When using peer_tags_aggregation and compute_stats_by_span_kind, a high cardinality of peer tags or APM resources can contribute to higher CPU and memory consumption. If enabling both causes the Agent to consume too many resources, try disabling compute_stats_by_span_kind first.
    It is recommended that you update your tracing libraries according to the instructions here <https://docs.datadoghq.com/tracing/guide/inferred-service-opt-in/?tab=java#apm-tracing-library-configuration>_ and set DD_TRACE_REMOVE_INTEGRATION_SERVICE_NAMES_ENABLED (or dd.trace.remove.integration-service-names.enabled) to true.

• Upgraded JMXFetch to 0.49.5 <https://github.com/DataDog/jmxfetch/releases/0.49.5>_ which adds support for UnloadedClassCount metric
  and IBM J9 gc metrics. See 0.49.5 <https://github.com/DataDog/jmxfetch/releases/tag/0.49.5>_ for more details.

.. _Release Notes_7.60.0_New Features:

New Features

• Inferred Service dependencies <https://docs.datadoghq.com/tracing/guide/inferred-service-opt-in/>_ are now Generally Available (exiting Beta) and enabled by default. Inferred Services of all kinds now have trace metrics and are available in dependency maps. apm_config.peer_tags_aggregation and apm_config.compute_stats_by_span_kind both now default to true unless explicitly set to false.

• Add check_tag_cardinality parameter config check.

  By default check_tag_cardinality is not set which doesn't change the behavior of the checks.
  Once it is set in pod annotaions, it overrides the cardinality value provided in the base agent configuration.
  Example of usage:

  ad.datadoghq.com/redis.checks: |
    {
      "redisdb": {
        "check_tag_cardinality": "high", 
        "instances": [
          {
            "host": "%%host%%",
            "port": "6379"
          }
        ]
      }
    }

• Added a new feature flag enable_receive_resource_spans_v2 in DD_APM_FEATURES that gates a refactored implementation of ReceiveResourceSpans for OTLP.

.. _Release Notes_7.60.0_Enhancement Notes:

Enhancement Notes

• Added information about where the Agent sourced BTF data for eBPF to the Agent flare. When applicable, this will appear in system-probe/ebpf_btf_loader.log.

• The Agent flare now returns NAT debug information from conntrack in the system-probe directory.

• The flare subcommand includes a --provider-timeout option to set a timeout for each file collection (default is 10s), useful for unblocking slow flare creation.

• This change reduces the number of DNS queries made by Network Traffic
  based paths in Network Path.
  A cache of reverse DNS lookups is used to reduce the number of DNS
  queries. Additionally, reverse DNS lookups are now performed only
  for private IPs and not for public IPs.

• Agent flare now includes system-probe telemetry data via system-probe/system_probe_telemetry.log.

• The MSI installer uses 7zr.exe to decompress the embedded Python.

• On Windows, the endpoint /windows_crash_detection/check has been modified to report crashes in
  an asynchronous manner, to allow processing of large crash dumps without blocking or timing out.
  The first check will return a busy status and continue to do so until the processing is completed.

.. _Release Notes_7.60.0_Deprecation Notes:

Deprecation Notes

• Prebuilt eBPF for the network tracer system-probe module has been
  deprecated in favor of CO-RE and runtime compilation variants on Linux
  kernel versions 6+ and RHEL kernel versions 5.14+. To continue to use
  the prebuilt eBPF network tracer, set
  system_probe_config.allow_prebuilt_fallback in the
  system-probe config file, or set the environment variable
  DD_ALLOW_PREBUILT_FALLBACK, to true on these platforms.

• The feature flag service_monitoring_config.enable_http_stats_by_status_code was deprecated and removed.
  No impact on USM's behavior.

.. _Release Notes_7.60.0_Bug Fixes:

Bug Fixes

• Fixes an issue added in 7.50 that causes the Windows event log tailer to drop
  events if it cannot open their publisher metadata.

• Fix a bug in the config parser that broke ignored_ip_addresses from working in NDM Autodiscovery.

• Fixes host tags with a configurable duration so the metric's context hash doesn't change, preventing the aggregator from mistaking it as a new metric.

• Fix could not parse voltage fields error in Nvidia Jetson integration when tegrastats output contains mW units.

• Fix building of Python extension containing native code.

• [oracle] Fix broken activity sampling with an external Oracle client.

• Fix nil pointer error on Oracle DBM query when the check's connection is lost before SELECT statement executes.

• Fix a regression that caused the Agent to not be able to run if its
  capabilities had been modified with the setcap command.

• Fix bug wherein single line truncated logs ended with whitespace characters were not being tagged as truncated.
  Fix issue with the truncation message occasionally causing subsequent logs to think they were truncated when they were not (single line logs only).

.. _Release Notes_7.59.1:

v7.59.1

Compare Source

======

.. _Release Notes_7.59.1_Prelude:

Prelude

Release on: 2024-12-02

.. _Release Notes_7.59.1_Enhancement Notes:

Enhancement Notes

• Setting up a temporary directory for JMXFetch <https://github.com/DataDog/jmxfetch>_ to use
  when it runs. Using the same one the Agent uses when running as this guarantees a directory where
  JMXFetch can write to. This helps when JMXFetch sends metrics over
  Unix Domain Socket <https://docs.datadoghq.com/developers/dogstatsd/unix_socket/?tab=host> as it needs
  access to a temp directory which it can write to.

.. _Release Notes_7.59.0:

v7.59.0

Compare Source

======

.. _Release Notes_7.59.0_Prelude:

Prelude

Release on: 2024-11-07

• Please refer to the 7.59.0 tag on integrations-core <https://github.com/DataDog/integrations-core/blob/master/AGENT_CHANGELOG.md#datadog-agent-version-7590>_ for the list of changes on the Core Checks

.. _Release Notes_7.59.0_Upgrade Notes:

Upgrade Notes

• Removed the deprecated config option otlp_config.debug.loglevel in favor of otlp_config.debug.verbosity:
  • loglevel: debug maps to verbosity: detailed
  • loglevel: info maps to verbosity: normal
  • loglevel: warn/error maps to verbosity: basic
  • loglevel: disabled maps to verbosity: none

.. _Release Notes_7.59.0_New Features:

New Features

• Add ability to run process/container collection on the core Agent (Linux only). This is controlled
  by the process_config.run_in_core_agent.enabled option in datadog.yaml.

• DBM: Add configuration options to SQL obfuscator to customize the obfuscation of SQL statements:

  • KeepJSONPath - option to control whether JSON paths following JSON operators in SQL statements should be obfuscated. This option is only valid when ObfuscationMode is obfuscate_and_normalize.

• APM: Add new 'sqllexer' feature flag for the Trace Agent, which enables
  the sqllexer imprementation of the SQL Obfuscator.

• Introduce new Kubernetes tag gpu_vendor for the GPU resource requested by a container.

.. _Release Notes_7.59.0_Enhancement Notes:

Enhancement Notes

• Added additional Agent telemetry metrics for the log tailer code flow: logs.bytes_sent, logs.encoded_bytes_sent, and logs.bytes_missed

• Datadog may collect environmental, performance, and feature usage
  information about the Datadog Agent. This may include diagnostic
  logs and crash dumps of the Datadog Agent with obfuscated stack
  traces to support and further improve the Datadog Agent.

  More details could be found in the
  docs <https://docs.datadoghq.com/data_security/agent/#telemetry-collection>_

• APM: Updates peer tags for peer.db.system.

• Agents are now built with Go 1.22.7.

• Agents are now built with Go 1.22.8.

• Agents are now built with Go 1.22.8.

• While using the AWS Lambda Extension, when a Lambda Function is invoked by
  a [properly instrumented][1] Step Function, the Lambda Function will create
  its Trace and Parent IDs deterministically based on the Step Function's
  execution context.
  [1]: https://docs.datadoghq.com/serverless/step_functions/installation/?tab=custom "Install Serverless Monitoring for AWS Step Functions"

• Updates default .NET library used for auto-instrumentation from v2 to v3

• The system-probe selinux policy is now installed on Oracle Linux

• Increases the default input channel, processing channel, and context store sizes
  for network traffic paths.

• Adds support for file log collection from Podman rootless containers when logs_config.use_podman_logs is set to true and podman_db_path is configured.

• Allow Python integrations to emit Agent telemetry data.

.. _Release Notes_7.59.0_Security Notes:

Security Notes

• Update OpenSSL to 3.3.2 (on Linux & macOS) in order to mitigate CVE-2024-6119.

.. _Release Notes_7.59.0_Bug Fixes:

Bug Fixes

• Fixes the default configuration template to include the Cloud Security Management configuration options.

• Fixing a bug introduced in 7.55 where in some specific scenarios, checks associated with a deleted container or POD would keep running until the Agent is restarted.

• Fix the forwarder health check so that it reports unhealthy when the API key is invalid.

• Fix the removal of 'non-core' integrations during Agent upgrades.

• Fix Process Agent argument scrubbing to allow scrubbing of quoted arguments.

• Fix Orchestrator argument scrubbing to allow scrubbing of quoted arguments.

• Fixes an issue where TCP traceroute latency was not being calculated correctly.

• Fixes the telemetry type for Oracle metrics.

• APM: Fix obfuscation of SQL queries containing non-numeric prepared statement variables.

.. _Release Notes_7.59.0_Other Notes:

Other Notes

• Adds Postgres integration metrics to cross-org telemetry whitelist.

• The Agent is now built with a custom toolchain that targets our minimally
  supported glibc version (2.17 on x86_64 and 2.23 on aarch64)

• On Windows, the TCP socket transport mechanism for system probe
  communications has been replaced with a named pipe.
  This deprecates the system_probe_config.sysprobe_socket configuration
  entry for Windows.
  The new fixed named pipe path is \.\pipe\dd_system_probe.

.. _Release Notes_7.58.2:

v7.58.2

Compare Source

======

.. _Release Notes_7.58.2_Prelude:

Prelude

Release on: 2024-11-04

.. _Release Notes_7.58.2_Bug Fixes:

Bug Fixes

• Use of cloud-provided hostname as default when running the Agent
  in AKS introduced in 7.56.0 is reverted due to cases where the
  hostname returned is non-unique. This feature will be fixed and
  added again in a future release.

.. _Release Notes_7.58.1:

v7.58.1

Compare Source

======

.. _Release Notes_7.58.1_Prelude:

Prelude

Release on: 2024-10-24

.. _Release Notes_7.58.1_Enhancement Notes:

Enhancement Notes

• Removes a log statement which was causing a lot of noise in the Network Path logs.

.. _Release Notes_7.58.1_Bug Fixes:

Bug Fixes

• [CWS] Fixes an issue where the cws-instrumentation trace command could panic
  before launching the traced executable when running on AWS Fargate.

• [CWS] Fixes an issue where ECS Fargate tags would not be resolved correctly
  on CWS events.

• Fixes an error in system-probe triggered by packet capture in environments with multiple VLANs.

• Fix USM's GO-TLS support for Golang 1.23

.. _Release Notes_7.58.0:

v7.58.0

Compare Source

======

.. _Release Notes_7.58.0_Prelude:

Prelude

Release on: 2024-10-21

• Please refer to the 7.58.0 tag on integrations-core <https://github.com/DataDog/integrations-core/blob/master/AGENT_CHANGELOG.md#datadog-agent-version-7580>_ for the list of changes on the Core Checks

.. _Release Notes_7.58.0_Upgrade Notes:

Upgrade Notes

• Changes behavior of the timeout for Network Path. Previously, the timeout
  signified the total time to wait for a full traceroute to complete. Now,
  the timeout signifies the time to wait for each hop in the traceroute.
  Additionally, the default timeout has been changed to 1000ms.

.. _Release Notes_7.58.0_New Features:

New Features

• Added capability to tag any Kubernetes resource based on labels and annotations.
  This feature can be configured with kubernetes_resources_annotations_as_tags and kubernetes_resources_labels_as_tags.
  These feature configurations are associate group resources with annotations-to-tags (or labels-to-tags) map
  For example, pods can be associated with an annotations-to-tags map to configure annotations as tags for pods.
  Example:
  {pods: {annotationKey1: tag1, annotationKey2: tag2}}

• The Kubernetes State Metrics (KSM) check can now be configured to collect
  pods from the Kubelet in node agents instead of collecting them from the API
  Server in the Cluster Agent or the Cluster check runners. This is useful in
  clusters with a large number of pods where emitting pod metrics from a
  single check instance can cause performance issues due to the large number
  of metrics emitted.

• NPM - adds UDP "Packets Sent" and "Packets Received" to the network telemetry in Linux.

• [oracle] Add the active_session_history configuration parameter to optionally ingest Oracle active session history samples instead of query sampling.

• Added config option logs_config.tag_truncated_logs. When
  enabled, file logs will come with a tag truncated:true if
  they were truncated by the Agent.

.. _Release Notes_7.58.0_Enhancement Notes:

Enhancement Notes

• [DBM] Bump go-sqllexer to 0.0.14 to skip collecting CTE tables as SQL metadata.

• Agents are now built with Go 1.22.7.

• Add the ability to tag cisco-sdwan device and interface metrics with user-defined tags.

• Add support for setting a custom log source from resource attribute or log attribute datadog.log.source.

• The default UDP port for traceroute (port 33434) is now used for Network Traffic based paths, instead of the port detected by NPM.

• [oracle] Add oracle_client_lib_dir config parameter.

• [oracle] Increase tablespace check interval from 1 to 10 minutes.

• [oracle] Don't try to fetch execution plans where plan_hash_value is 0

• The OTLP ingest endpoint now maps the new OTel semantic convention deployment.environment.name to env

• Prevents the use of the process_config.run_in_core_agent.enabled configuration option in unsupported environments.

• APM: Trace payloads are now compressed with zstd by default.

.. _Release Notes_7.58.0_Security Notes:

Security Notes

• Bump embedded Python version to 3.12.6 to address CVE-2024-4030 and CVE-2024-4741.

• Update cURL to 8.9.1.

• Update OpenSSL to 3.3.2 (on Linux & macOS) in order to mitigate CVE-2024-6119.

.. _Release Notes_7.58.0_Bug Fixes:

Bug Fixes

• Adds missing support for the logs config key to work with AD annotations V2.

• Fix agent jmx [command] subcommands for container environments with annotations-based configs.

• Fixed issue with openSUSE 15 RC 6 where the eBPF tracer wouldn't start due to a failed validation of the tcp_sendpage probe.

• Fixed a rare issue where short-lived containers could cause
  logs to be sent with the wrong container ID.

• Fix Windows Process Agent argument stripping to account for spaces in the executable path.

• Fixes issue with the kubelet corecheck where kubernetes.kubelet.volume.* metrics
  were not properly being reported if any matching namespace exclusion filter was present.

• OOM Kill Check now reports the cgroup name of the victim process rather than the triggering process.

• The process agent will no longer exit prematurely when language detection is enabled or
  when there is a misconfiguration stemming from process_config.run_in_core_agent.enabled's
  default enablement in Kubernetes.

• Change the datadog-security-agent Windows service display name from Datadog Security Service to
  Datadog Security Agent for consistency with other Agent services.

• Fix a bug preventing SNMP V3 reconnection.

.. _Release Notes_7.58.0_Other Notes:

Other Notes

• Add metric origins for the Kubeflow integration.

• Add functional tests to Oracle using a Docker service to host the database instance.

• Adds Agent telemetry for Oracle collector.

.. _Release Notes_7.57.2:

v7.57.2

Compare Source

======

.. _Release Notes_7.57.2_Prelude:

Prelude

Release on: 2024-09-24

.. _Release Notes_7.57.2_Enhancement Notes:

Enhancement Notes

• Agents are now built with Go 1.22.7.

.. _Release Notes_7.57.2_Bug Fixes:

Bug Fixes

• Fix OOM error with cluster agent auto instrumentation by increasing default memory request from 20Mi to 100Mi.

• Fixes a panic caused by running the Agent on readonly filesystems. The
  Agent returns integration launchers and handles memory gracefully.

.. _Release Notes_7.57.1:

v7.57.1

Compare Source

======

.. _Release Notes_7.57.1_Prelude:

Prelude

Release on: 2024-09-17

• Please refer to the 7.57.1 tag on integrations-core <https://github.com/DataDog/integrations-core/blob/master/AGENT_CHANGELOG.md#datadog-agent-version-7571>_ for the list of changes on the Core Checks

.. _Release Notes_7.57.1_Bug Fixes:

Bug Fixes

• APM: When the UDS listener cannot be created on the trace-agent, the process will log the error, instead of crashing.
• Fixes memory leak caused by container check.

.. _Release Notes_7.57.0:

v7.57.0

Compare Source

======

.. _Release Notes_7.57.0_Prelude:

Prelude

Release on: 2024-09-09

• Please refer to the 7.57.0 tag on integrations-core <https://github.com/DataDog/integrations-core/blob/master/AGENT_CHANGELOG.md#datadog-agent-version-7570>_ for the list of changes on the Core Checks

.. _Release Notes_7.57.0_Upgrade Notes:

Upgrade Notes

• Update cURL to 8.9.1.

• Update OpenSSL from 3.0.14 to 3.3.1 (on Linux and macOS).

.. _Release Notes_7.57.0_New Features:

New Features

• The agent diagnose command now includes a --json option to output the results in JSON format.

• Add integration value for device metadata.

• APM: In order to allow for automatic instrumentation to work in Kubernetes
  clusters that enforce a Restricted Pod Security Standard <https://kubernetes.io/docs/concepts/security/pod-security-standards/#restricted>_,
  which require all containers to explicitly set a securityContext,
  an option to configure a securityContext to be used for all initContainers
  created by the auto instrumentation has been added.
  | This can be done through the DD_ADMISSION_CONTROLLER_AUTO_INSTRUMENTATION_INIT_SECURITY_CONTEXT
  environment value, or admission_controller.auto_instrumentation.init_security_context configuration -
  in both cases a json string should be supplied.

• Adds a kube_runtime_class tag to metrics associated with Kubernetes
  pods and their containers.

• Expose the Agent's get host tags function to python checks using the new datadog_agent.get_host_tags method.

• Implement static allowlist of Kubernetes events to send by default.
  This feature is only enabled when filtering_enabled is set to
  true in the kubernetes_apiserver integration configuration.

• Adds a new launcher to handle incoming logs from integtrations.

• Add optional reverse DNS enrichment of private IP addresses to NDM NetFlow.

• On Windows, the default value for the service inference feature is now enabled.

.. _Release Notes_7.57.0_Enhancement Notes:

Enhancement Notes

• Turn on Orchestrator Explorer by default in the core agent

• Added new source_host tag to TCP/UDP logs to help users understand where their logs came from.

• Added support to handling UDP/TCP Logs when running the containerized agent.

• APM: Allow custom HTTP client to be provided when instantiating the
  trace-agent configuration. This feature is primarily intended for the
  OpenTelemetry exporter.

• APM: Add default UDS listeners for traces (trace-agent) and
  dogstatsd (core-agent) on /var/run/datadog/apm.socket and
  /var/run/datadog/dsd.socket, respectively.
  These are used in the Single Step APM Instrumentation, improving
  the onboarding experience and minimizing the agent configuration.

• For the Inferred Service Dependencies beta, add two new peer.hostname precursor attributes, out.host and dns.hostname. This will improve coverage of inferred services because some tracer integrations only place the peer hostname in one of those attributes.

• APM stats for internal service overrides are now aggregated by the _dd.base_service tag only, enhancing visibility into specific base services.

• Include spans with span.kind=consumer for aggregation of
  stats on peer tags.

• IP address quantization on all peer tags is done the backend during ingestion. This change updates the Agent to apply the same IP address quantization. This reduces unnecessary aggregation that is currently done on raw IP addresses. And therefore, improves the aggregation performance of stats on peer tags.

• APM: Add new setting to disable the HTTP receiver in the
  trace-agent. This setting should almost never be disabled and
  is only a convenience parameter for OpenTelemetry extensions.
  Disabling the receiver is semantically equivalent to setting the
  receiver_port to 0 and receiver_socket to "".

• Agents are now built with Go 1.22.6.

• [NDM] Adds the option to collect BGP neighbors metrics from Cisco SD-WAN.

• [NDM] Add option to collect cloud application metrics from Cisco SD-WAN.

• [Cisco SD-WAN] Allow enabling/disabling metrics collection.

• Report the hostname of Kubernetes events based on the associated
  pod that the event relates to.

• Introduces a parser to extract tags from integration logs and attach them to outgoing logs.

• Implement External Data environment variable injection in the Admission Controller.
  Format for this new environment variable is it-INIT_CONTAINER,cn-CONTAINER_NAME,pu-POD_UID.
  This new variable is needed for the New Origin Detection spec. It is used for Origin Detection
  in case Local Data are unavailable, for example with Kata Containers and CGroups v2.

• Upgraded JMXFetch to 0.49.3 <https://github.com/DataDog/jmxfetch/releases/0.49.3>_ which adds support for jsr77 j2ee statistics
  and custom ConnectionFactory. See 0.49.3 <https://github.com/DataDog/jmxfetch/releases/tag/0.49.3>_ for more details.

• Windows Agent Installer gives a better error message when a gMSA
  account is provided for ddagentuser that Windows does not recognize.

• Uninstalling the Windows Agent MSI Installer removes specific
  subdirectories of the install path to help prevent data loss when
  PROJECTLOCATION is misconfigured to an existing directory.

• Adds a default upper limit of 10000 to the number of network traffic
  paths that are captured at a single time. The user can increase or
  decrease this limit as needed.

• Language detection can run on the core Agent without needing a gRPC server.

• Add Hostname and ExtraTags to CollectorECSTask.

• Collect SystemInfo for Pods and ECS Tasks.

• Implement API that allows Python checks to send logs for
  eventual submission.

• Users can use DD_ORCHESTRATOR_EXPLORER_CUSTOM_SENSITIVE_ANNOTATIONS_LABELS to remove sensitive annotations and labels.
  For example: DD_ORCHESTRATOR_EXPLORER_CUSTOM_SENSITIVE_ANNOTATIONS_LABELS="sensitive-key-1 sensitive-key-2".
  Keys should be separated by spaces. The agent removes any annotations and labels matching these keys.

• Add the ability to tag interface metrics with user-defined tags.

.. _Release Notes_7.57.0_Security Notes:

Security Notes

• Fix CVE-2024-41110.

.. _Release Notes_7.57.0_Bug Fixes:

Bug Fixes

• Results of agent config did not reflect the actual runtime config for the other services. This will have other Datadog Agent services (e.g. trace-agent) running as a systemd service read the same environment variables from a text file /etc/datadog-agent/environment as the core Agent process.

• [DBM] Bump go-sqllexer to 0.0.13 to fix a bug where the table name is incorrectly collected on PostgreSQL SELECT ONLY statement.

• [Cisco SD-WAN] Do not collect unspecified IP addresses.

• Fix container.net.* metrics accuracy on Linux. Currently container.net.* metrics are always emitted with high cardinality tags while the values may not represent actual container-level values but POD-level values (multiple containers in a pod) or host-level values (containers running in host network). With this bug fix, the container.net.* metrics aren't emitted for containers running in host network and a single timeseries is emitted by pods when running multiple containers. Finally, in non-Kubernetes environments, if multiple containers share the same network namespace, container.net.* metrics won't be emitted.

• Fix duplicate logging in Process Agent component's Enabled() method.

• Fixed bug in kubelet check when running in core agent that
  was causing kubernetes.kubelet.container.log_filesystem.used_bytes
  to be reported by the check for excluded/non-existing containers.
  The metric was being reported in this case without tags.
  This bug does not exist in the python integration version of the
  kubelet check.

• Fixes a bug on Windows in the driver installation custom actions that could prevent rollback from working properly if an installation failed or was canceled.

• Update pro-bing library to include fix for a Windows specific issue with large ICMP packets

• [oracle] Fix wrong durations for cloud databases.

• Stop chunking outputs in manual checks for container, process, and process_discovery checks to allow JSON unmarshaler to parse output.

• Remove the original pod annotation on consul

• Fix pod status for pods using native sidecars.

• Fix a regression where the Agent would fail to start on systems with SysVinit.

• APM: Fixes issue where the number of HTTP decoders was incorrectly set if setting GOMAXPROCS to milli-cpu values.

.. _Release Notes_7.57.0_Other Notes:

Other Notes

• Add metrics origins for vLLM integration.

• Add deprecation warnings when running process checks on the Process Agent in Linux.
  This change prepares for the deprecation of processes and container collection in the Process Agent, occurring in a future release.

• Add metric origin for the AWS Neuron integration

.. _Release Notes_7.56.2:

v7.56.2

Compare Source

======

.. _Release Notes_7.56.2_Prelude:

Prelude

Release on: 2024-09-02

• Please refer to the 7.56.2 tag on integrations-core <https://github.com/DataDog/integrations-core/blob/master/AGENT_CHANGELOG.md#datadog-agent-version-7562>_ for the list of changes on the Core Checks

.. _Release Notes_7.56.2_Bug Fixes:

Bug Fixes

• Fix issue causing GUI to fail when opening with Internet Explorer on Windows.

.. _Release Notes_7.56.1:

v7.56.1

Compare Source

======

.. _Release Notes_7.56.1_Prelude:

Prelude

Release on: 2024-08-29

• Please refer to the 7.56.1 tag on integrations-core <https://github.com/DataDog/integrations-core/blob/master/AGENT_CHANGELOG.md#datadog-agent-version-7561>_ for the list of changes on the Core Checks

.. _Release Notes_7.56.1_Bug Fixes:

Bug Fixes

• Fixed a nil pointer dereference issue in the Tailer.DidRotate function that was causing the Agent to panic.

.. _Release Notes_7.56.0:

v7.56.0

Compare Source

======

.. _Release Notes_7.56.0_Prelude:

Prelude

Release on: 2024-08-16

• Please refer to the 7.56.0 tag on integrations-core <https://github.com/DataDog/integrations-core/blob/master/AGENT_CHANGELOG.md#datadog-agent-version-7560>_ for the list of changes on the Core Checks

.. _Release Notes_7.56.0_Upgrade Notes:

Upgrade Notes

• Change default bind address in OTLP ingest from 0.0.0.0 to localhost. Please refer to the following blog post: https://opentelemetry.io/blog/2024/hardening-the-collector-one for additional information around this change.

• Update cURL to 8.7.1.

.. _Release Notes_7.56.0_New Features:

New Features

• The core Agent now supports multiple configuration files in addition to the main datadog.yaml file.
  The -E flag can be used to specify additional configuration files to be loaded sequentially after the main datadog.yaml.

• When DD_SERVERLESS_STREAM_LOGS is enabled, DD_EXTENSION
  prints collected logs like agent stream-logs.

• Add full support of CIS Amazon Linux 2 Benchmark in CSPM.

• Add full support of CIS Amazon Linux 2023 Benchmark in CSPM.

• NPM - Adds the capability to track and report failed TCP connections to the Datadog backend. This feature is disabled by default.

.. _Release Notes_7.56.0_Enhancement Notes:

Enhancement Notes

• Add the use_apiserver_cache option to the kubernetes_state_metrics check
  to reduce the pressure on the underlying storage engine etcd. Requires Kubernetes 1.19+.

• APM: Add obfuscation support for OpenSearch statements within span metadata. This feature works in the same way as the existing Elasticsearch one, and is enabled by default. It is configured by binding apm_config.obfuscation.opensearch.* parameters to new obfuscation environment variables. In particular, bind:
  apm_config.obfuscation.opensearch.enabled to DD_APM_OBFUSCATION_OPENSEARCH_ENABLED:
  It accepts a boolean value with default value true.

  apm_config.obfuscation.opensearch.keep_values to DD_APM_OBFUSCATION_OPENSEARCH_KEEP_VALUES
  It accepts a list of strings of the form ["id1", "id2"].

  apm_config.obfuscation.opensearch.obfuscate_sql_values to DD_APM_OBFUSCATION_OPENSEARCH_OBFUSCATE_SQL_VALUES
  It accepts a list of strings of the form ["key1", "key2"].

• Agents are now built with Go 1.22.4.

• Agents are now built with Go 1.22.5.

• Bump dependency msodbcsql18 to version 18.3.3.1.

• Adds config kubernetes_events_source_detection.enabled which is
  false by default. When set to true, this sets the source of kubernetes
  events to specific integrations based on the name of the controller
  that emitted it. All kubernetes events will have the tag
  orchestrator:kubernetes. For controller names that do not match
  any of the known integrations, the source will still be set to
  kubernetes by default.

• Introduces a bundle_unspecifed_events config to the docker integration.
  When bundle_unspecifed_events and unbundle_events are true,
  Docker events are unbundled according to collected_event_types and
  the remaining events are bundled after excluding the filtered_event_types and collected_event_types.

• The Agent will now ignore empty configuration files in conf.d. Users can
  use this functionality to avoid creating broken integrations when deploying
  agents with provisioning systems that do not allow skipping files entirely.

• Introduces an bundle_unspecified_events config to the kubernetes_apiserver
  integration. When bundle_unspecified_events and unbundle_events are true,
  Kubernetes events are unbundled according to collected_event_types and
  the remaining events are bundled.

• Improve utility functions that start or stop a service to better manage the SERVICE_START_PENDING and SERVICE_STOP_PENDING states by waiting for the service transition to complete. This will improve handling of concurrent execution of agent.exe start and agent.exe restart commands for the Windows Agent.

• Make the oom_kill check capture the OOM score and the OOM score adjustment of the process being killed.

• Oracle integration will now auto-adjust the size of the SQL substring requested by the activity sampler
  to better support users with multi-byte character sets, for example, Korean, Arabic, etc. This should
  alleviate crashes caused by long queries using these characters.

• The OTLP ingestion endpoint now supports the same settings and protocol as
  the OpenTelemetry Collector OTLP receiver v0.103.0.

• APM: Probabilistic Sampler now only looks at the lower 64 bits of a trace ID by default to improve compatibility in distributed systems where some apps may truncate the trace ID. To maintain the previous behavior use the feature flag probabilistic_sampler_full_trace_id.

• Adds the source of the payload for Processes-owned messages.

• Add tags to CollectorManifest

• Add image and imageID fields to pods ContainerStatuses.

• The orchestrator check can now scrub sensitive data from probes in pods specifications.

• The Agent now populates the git.repository_url and git.commit.sha tags from the values of the DD_GIT_REPOSITORY_URL and DD_GIT_COMMIT_SHA container environment variables.

• Implement the kubernetes_persistent_volume_claims_as_tags configuration that allows
  users to disable PersistentVolumeClaim for Kubernetes resources.

• Upgrade the NTP check client library 'beevik/ntp' from v0.3.0 to v1.3.4

• Use cloud-provided hostname as default when running the Agent
  in AKS.

• APM: Enabled zstd compression by default on trace payloads.

.. _Release Notes_7.56.0_Deprecation Notes:

Deprecation Notes

• APM: DD_APM_MAX_TPS config setting is deprecated in favor of the more
  accurate DD_APM_TARGET_TPS. Accordingly, when configured through YAML,
  max_traces_per_second is deprecated in favor of target_traces_per_second.
  The setting behavior remains the same, only the name is changed to more
  accurately reflect the existing logic.

.. _Release Notes_7.56.0_Security Notes:

Security Notes

• Updating OpenSSL to 3.0.14 to address CVE-2024-4741 (on Linux and macOS).

.. _Release Notes_7.56.0_Bug Fixes:

Bug Fixes

• Upgrades the pro-bing library to fix a Windows-only bug with too-long ICMP packets being received

• Fix ExtraTags mapping for CollectorManifest.

• Fix a bug in the Agent where it could potentially fetch logs of short-lived Kubernetes jobs twice if the CRI is Docker.

• Re-enable printing of checks metadata in the datadog-agent status collector section.

• Fix OTLP status output not being displayed in the GUI.

• Fix issue where init config for ping took priority over instance config.

• Fix diagnose command for logs endpoints and related warnings about unknown config keys.

• Fixes oracle.tablespace.offline metric not emitting 1 when tablespace is offline.

• APM: Show probabilistic sampling configuration in Agent status when enabled.

• Add a field to differentiate between empty and undefined podSelector or namespaceSelector for network policies.

• Fixed a bug where the file tailing position is always set to the beginning, this fix allows
  users to explicitly set a starting position.

• All datadog public endpoints have the maximum requirements to close idle
  connections after 60s being idle. If a given client keeps it for longer,
  the server will close it, and the client will likely see the issue during
  the next write, leading to a connection reset error. The idle timeout
  should be therefore set under a minute.
  This PR is reducing the timeout from 90 to 30s.

• Windows: Added driver rollback properties to ensure that all services and drivers are uninstalled or rolled back after an installation or upgrade failure.

.. _Release Notes_7.56.0_Other Notes:

Other Notes

• Add metric origins for community Python integrations.

.. _Release Notes_7.55.3:

v7.55.3

Compare Source

================

.. _Release Notes_7.55.3_Prelude:

Prelude

Release on: 2024-08-01

• Please refer to the 7.55.3 tag on integrations-core <https://github.com/DataDog/integrations-core/blob/master/AGENT_CHANGELOG.md#datadog-agent-version-7553>_ for the list of changes on the Core Checks

.. _Release Notes_7.55.3_Enhancement Notes:

Enhancement Notes

• Agents are now built with Go 1.21.12.

.. _Release Notes_7.55.3_Security Notes:

Security Notes

• Fix CVE-2024-41110.

.. _Release Notes_7.55.2:

v7.55.2

Compare Source

================

.. _Release Notes_7.55.2_Prelude:

Prelude

Release on: 2024-07-25

• Please refer to the 7.55.2 tag on integrations-core <https://github.com/DataDog/integrations-core/blob/master/AGENT_CHANGELOG.md#datadog-agent-version-7552>_ for the list of changes on the Core Checks

.. _Release Notes_7.55.2_Security Notes:

Security Notes

• Fix CVE-2024-6257.

.. _Release Notes_7.55.2_Bug Fixes:

Bug Fixes

• Fixes an issue introduced in 7.55.0 with container metrics. In some rare cases, container metrics (cpu, memory, limits, etc.) could be incorrect and not reflect actual resources usage.

.. _Release Notes_7.55.1:

v7.55.1

Compare Source

================

.. _Release Notes_7.55.1_Prelude:

Prelude

Release on: 2024-07-12

• Please refer to the 7.55.1 tag on integrations-core <https://github.com/DataDog/integrations-core/blob/master/AGENT_CHANGELOG.md#datadog-agent-version-7551>_ for the list of changes on the Core Checks

.. _Release Notes_7.55.1_Bug Fixes:

Bug Fixes

• Fix a regression where the agent would fail to start on systems with SysVinit

.. _Release Notes_7.55.0:

v7.55.0

Compare Source

======

.. _Release Notes_7.55.0_Prelude:

Prelude

Release on: 2024-07-11

• Please refer to the 7.55.0 tag on integrations-core <https://github.com/DataDog/integrations-core/blob/master/AGENT_CHANGELOG.md#datadog-agent-version-7550>_ for the list of changes on the Core Checks

.. _Release Notes_7.55.0_New Features:

New Features

• Add new parameter djm_config.enabled to enable Data Jobs Monitoring

• You can now set the buffering configuration of Lambda Logs API
  using DD_LOGS_CONFIG_LAMBDA_LOGS_BUFFERING_TIMEOUT_MS,
  DD_LOGS_CONFIG_LAMBDA_LOGS_BUFFERING_MAX_BYTES, and
  DD_LOGS_CONFIG_LAMBDA_LOGS_BUFFERING_MAX_ITEMS.

• Adds the new service_discovery check, which is currently only supported on Linux.

• APM: OTLP: Added an API in pkg/trace/stats that converts eligible OTLP spans to the input to APM stats concentrator.

• Experimental support of SBOM generation on Windows.

• Expose the Agent's MongoDB command string obfuscation to Python checks using the new datadog_agent.obfuscate_mongodb_string method.

• [network path] Add feature to traceroute network connections.

• Implement OpenTelemetry SDK resource attributes as unified service rags.

• CSM captures and generates events based on IMDS traffic

• Add support for kubernetes_namespace_annotations_as_tags.
  This new option is equivalent to the existing kubernetes_namespace_labels_as_tags,
  but it considers namespace annotations instead of namespace labels.
  With this new option, users can enrich tagging based namespace annotations.

.. _Release Notes_7.55.0_Enhancement Notes:

Enhancement Notes

• Add a section in the Agent status to show device profile parsing errors.

• Add Go execution traces to Agent Flare.

• Introducing the port conflict suite to the Agent diagnose command.
  Adding this for MacOS only first. Will incrementally add support for Linux and Windows.
  The Agent might need particular permissions to read information about processes using ports.

• Agents are now built with Go 1.21.11.

• [NDM] Add option to collect hardware status from Cisco SD-WAN.

• Fix concurrency handling by Agent restart-service CLI command when the Agent
  starts and simultaneously restarts. The Agent may start and restart concurrently
  during the Agent's installation or upgrade.

• OOM kill events in the OOM kill check are now reported at ERROR level instead of INFO level.

• Improve concurrency handling for Agent start/simultaneous restart.
  Agent starting and restarting concurrent execution may happen during the
  Agent's installation or upgrade.

• Add support for parsing pool and peer directives in
  locally defined configuration files in the NTP check.

• Improve error handling in the Lambda Logs API handler
  not to ignore error details

• Improve NTP check log messages.

• Also add kube_service tag to pods that run with hostNetwork: true.

• Added a new -l flag to the datadog-agent status command. This flag allows users to print all available sections.

• Improve NTP check error messages to show the specific hosts that are failing.

• Store SNMP device tags on disk to avoid losing them when the agent restarts.

• The Datadog agent container image is now using Ubuntu 24.04 noble
  as the base image.

• Improve GUI security authorization flow.

.. _Release Notes_7.55.0_Deprecation Notes:

Deprecation Notes

• Deprecated datadog-agent status component [section] in favor of datadog-agent status [section].

.. _Release Notes_7.55.0_Security Notes:

Security Notes

• Current GPG keys that are used to sign new releases of the Agent package are about to expire.
  Following our 2024 GPG key rotation plan, we rotated RPM and APT GPG keys.

.. _Release Notes_7.55.0_Bug Fixes:

Bug Fixes

• Fixes the validation of permissions for the secret backend helper.

• APM Stats type for is_trace_root flag is now renamed to trilean.

• [DBM] Bump go-sqllexer to 0.0.12 to fix a bug where table name is incorrectly collected on statement CREATE TABLE IF NOT EXISTS.

• Correct log level of trace writer log message

• Fix an issue introduced in Agent 7.51 for Windows that would cause a panic during Agent shutdown
  if the etwtracer component failed to initialize.

• Fixed an issue where the datadog-agent status and datadog-agent flare commands could hang while trying to reach other agent processes.

• Fix an issue where the Agent incorrectly reports JMX integrations as having issues.

• Fix leader election error when running checks manually from the
  Cluster Agent.

• [oracle] Fix missing query metrics.

• Fix metric reporting for process checks on the core Agent.

• Fix the status date so that it is computed for every request.

• Fix a bug where containerd container metrics and container tags were not being
  collected for containers with arbitrary container IDs.

.. _Release Notes_7.55.0_Other Notes:

Other Notes

• Added metrics origins for python integrations.

• Added metrics origins for the most recent python integrations.

.. _Release Notes_7.54.1:

v7.54.1

================

.. _Release Notes_7.54.1_Prelude:

Prelude

Release on: 2024-06-18

• Please refer to the 7.54.1 tag on integrations-core <https://github.com/DataDog/integrations-core/blob/master/AGENT_CHANGELOG.md#datadog-agent-version-7541>_ for the list of changes on the Core Checks

.. _Release Notes_7.54.0:

v7.54.0

================

.. _Release Notes_7.54.0_Prelude:

Prelude

Release on: 2024-05-29

• Please refer to the 7.54.0 tag on integrations-core <https://github.com/DataDog/integrations-core/blob/master/AGENT_CHANGELOG.md#datadog-agent-version-7540>_ for the list of changes on the Core Checks

.. _Release Notes_7.54.0_Upgrade Notes:

Upgrade Notes

• Upgraded JMXFetch to 0.49.1 <https://github.com/DataDog/jmxfetch/releases/tag/0.49.1>_ which adds support for
  ZGC Major and Minor Cycles and ZGC Major and Minor Pauses beans.

• Add a configuration option admission_controller.inject_config.inject_container_name to
  retrieve the container tags for dogstatsd metrics and apm traces in setups where origin detection is
  not supported (windows, nested virtualization with cgroupv2...).
  This option will inject the container name along with the pod uid in DD_ENTITY_ID if it was not set manually.
  Note that this option is disabled by default and is incompatible with prior versions of the agent . Thus, we
  recommend enabling it only if you are using the latest version of the agent.
  In case a rollback to an incompatible version is needed, it will be necessary to delete the pods in which
  DD_ENTITY_ID was injected by the latest agent to preserve pod tags in dogstatsd metrics and traces.

.. _Release Notes_7.54.0_New Features:

New Features

• APM: Add a new Probabilistic Sampler sampling mechanism, which is
  compatible with OpenTelemetry's Probabilistic Sampling Processor.

• CWS: Add support for write events on Windows.

• CWS: Add support for delete event on Windows.

• CWS: Add chdir, mount and umount in ptracer mode.

• CWS: Add APM spans in ptracer mode.

• CWS: Add support for file hashing in ptracer mode.

• CWS: Allow writing rules for rename events on Windows.

• Set kubelet core check to be enabled by default.

• Add dogstatsd_pipeline_autoadjust_strategy setting with max_throughput and per_origin
  strategies. max_throughput is the already existing strategy (when dogstatsd_pipeline_autoadjust
  is true). per_origin will let you create an arbitrary number of pipelines (based on dogstatsd_pipeline_count),
  and will try to isolate containers based on their advertised origin. This will improve compression.

• [NDM] Add Cisco SD-WAN integration.

• In the Logs Agent, add support for the Sensitive Data Scanner
  library to process logs.

• USM now captures TLS traffic from NodeJS applications.

.. _Release Notes_7.54.0_Enhancement Notes:

Enhancement Notes

• This change allows DBM Autodiscovery users to optionally set the region for where their aurora clusters are running.
  This can be used in lieu of relying on IMDS to discover the region through instance metadata. This is a nicer experience for users
  running in Docker, who would be required to complete extra steps in their instance metadata configuration to allow the Docker container
  access to the instance metadata.

• Activate the autodiscovery automatically if at least one configuration is given in network_devices.autodiscovery. Remove the listeners: -snmp requirement.

• Updates the Agent status output to show if a check is in a cancelling state. Once
  canceled, the check is removed from the status output.

• Report EKS Fargate configuration to the Agent metadata payload.

• Adding dirname tag for full filepath log configurations. This tag
  was only added previously if using a wildcard filepath log configuration.

• Agents are now built with Go 1.21.9.

• Collect clusters' extended resources capacity and allocatable.

• Collect all node resource capacities and allocatable metrics for cluster management.

• Collect pod limits and requests.

• CWS: Always snapshot memory mapped files in activity dumps. This allows easier mapping of workload to loaded shared libraries.

• CWS: Normalize Windows filenames before going through glob matching.

• CWS: Support non seccomp mode in ptracer mode.

• Add agent status [name] subcommand to fetch only a given section status (for example, ``datadog-agent status forwarder``` to get forwarder status).

• dogstatsd: Implement new config option origin_detection_unified.
  This new option will allow users to configure the origin detection behavior for DogStatsD.
  When enabled, the DogStatsD server will use the default Origin Detection logic.

• snmp_listener now lives under network_devices with the name network_devices.autodiscovery. While the old configuration will continue to work, if both configurations are present, the new one will take priority.

• [oracle] Add oracle.user_sessions metric.

• The OTLP ingestion endpoint now supports the same settings and protocol as the OpenTelemetry Collector OTLP receiver v0.97.0.

• Supports Podman newer versions (4.8+) using SQLite instead of BoltDB for the containers database backend.
  Setting podman_db_path to the path with the db.sql file (e.g. /var/lib/containers/storage/db.sql) will make the Datadog Agent use the SQLite format.
  Note: If podman_db_path is not set (default), the Datadog Agent attempts to use the default file libpod/bolt_state.db and db.sql from /var/lib/containers/storage.

• Allow certain Process Agent checks to be run from the core agent using the processchecks
  subcommand.

• check output from the Process Agent component are added to the flare when used in the core agent.

• expvars from the Process Agent component are added to the flare when used in the core Agent.

• Status of the Process Agent component will be shown when used in the core Agent.

• NDM: SNMP devices are now tagged by device_ip and device_id.

.. _Release Notes_7.54.0_Deprecation Notes:

Deprecation Notes

• The datadog-agent status component [name] syntax will be replaced by datadog-agent status [name] in Datadog Agent 7.55

• Removed log that was noisy when Process Agent was running on ECS Fargate.

• The flare_stripped_keys configuration is now deprecated. Use scrubber.additional_keys instead.

.. _Release Notes_7.54.0_Bug Fixes:

Bug Fixes

• APM: Fix potential connection issues by ensuring connection semaphore release
  during errors.

• APM: Removed unsupported configuration parameter apm_config.log_throttling from code and documentation.

• Disables the creation of build-id files in RPM packages. These are
  provided for debugging tools, but can lead to conflicts when multiple
  packages have the same build-id files. This conflict prevents the second
  package from being installed.

• Fix a race condition that could prevent JMX checks from running.

• OTLP ingest for traces now supports stable (v1.23.0+) semantic conventions for HTTP Spans.
  Old (v1.20.0 and older) semantic conventions are still supported. When both are reported,
  the new semantic conventions take precedence and old semantic conventions are ignored.

• Don't log when failing to fetch config of other Agents

• The User-Agent header is now set to datadog-agent/<version> for logs
  forwarding requests to /api/v2/logs. Previously it was set to
  Go-http-client/1.1.

• APM: Fixes issue where match-all replace tags rules could inadvertently affect required datadog tags. It is still possible to redact specific Datadog tags by targeting them explicitly.

• Fixes containers file-based log collection when using the k8s-file podman log driver and the logs_config.use_podman_logs parameter.

• The Process Agent no longer crashes when pidMode is misconfigured on ECS Fargate. A warning is logged instead.

• Fix panic when running process checks in the core Agent with telemetry enabled.

• The Agent health check will now continue running even if the API key validation endpoint returns a 403 response code. Because this can occur due to transient issues, retrying will allow the Agent health indicator to recover in some cases.

• Fix type conversion error while generating the trace-agent status.

• APM: fix a bug where the Trace Agent would ignore proxy.no_proxy configuration values

• Create missing default configuration files during the upgrade, change, and repair actions of the Windows Installer.

.. _Release Notes_7.54.0_Other Notes:

Other Notes

• APM: While adding another sampler, we have modified the Rare sampler
  so that it no longer has a separate TTL for priority traces, meaning
  it no longer distinguishes between traces with priority > 0 and
  priority <= 0. It is necessary to detangle the various samplers so
  they can work independently from each other, in this case, so the
  Rare sampler can work with the Probabilistic Sampler. This should not
  have a noticeable impact on users.

• CWS: Allow fim_enabled to explicitly be set to false on Windows to enable process monitoring only.

.. _Release Notes_7.53.0:

v7.53.0

================

.. _Release Notes_7.53.0_Prelude:

Prelude

Release on: 2024-04-30

• Please refer to the 7.53.0 tag on integrations-core <https://github.com/DataDog/integrations-core/blob/master/AGENT_CHANGELOG.md#datadog-agent-version-7530>_ for the list of changes on the Core Checks

.. _Release Notes_7.53.0_New Features:

New Features

• Support database-monitoring autodiscovery for Aurora cluster instances. Adds a new configuration listener to poll
  for a specific set of Aurora cluster IDs and then create a new database-monitoring supported check
  configuration for each endpoint. This allows for monitoring of endpoints that scale dynamically.

• Add new core check orchestrator_ecs to collect running ECS tasks

• APM stats now include an is_trace_root field to indicate if the stats are from the root span of a trace.

• The cluster-agent now collects network policies from the cluster.

• Enable 'host_benchmarks' by default when running the security-agent compliance module.

• OTLP ingest now has a feature flag to identify top-level spans by span kind. This new logic can be enabled by adding enable_otlp_compute_top_level_by_span_kind in DD_APM_FEATURES.

  • With this new logic, root spans and spans with a server or consumer span.kind will be marked as top-level. Additionally, spans with a client or producer span.kind will have stats computed.

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.