Releases: DataDog/datadog-operator
Releases · DataDog/datadog-operator
Release list
v1.29.0-rc.1
Changelog
- 0206a27 ADMS: vuln minor upgrades — 7 packages (minor: 4 · patch: 3) [test/e2e] (#3147)
- 7ec2499 Add AKS cluster provider detection (#3218)
- dfafc08 Add DatadogInstrumentation logs config (#3198)
- d14263b Add EKS, AKS provider golden files (#3215)
- 626f773 Add GKE COS NVIDIA driver library mount for GPU feature (#3213)
- b76c1ba Add GitHub teams to Slack and Jira mapping (#3039)
- cbf23ed Add appProtocol to OTLP gRPC services (#3208)
- 1260bc7 Add codex to gitignore (#3188)
- 04ff744 Add dd-octo-sts trust policy for release-dashboard-api on us1.ddbuild.io (#3197)
- 75154e1 Add env var overrides for controller enable flags (#3181)
- 96a937e Add jmx container env var when jmx image used (#3193)
- 0286aa5 Add kubernetes-actions feature + required rbac (#3099)
- 9f2359f Add shared dependencies (#3183)
- b7f11f3 Bump DataDog/dd-octo-sts-action from 1.0.3 to 1.0.4 (#2813)
- 72bc0a0 Bump
controller-runtimetov0.23.3(#3142) - 7d2fdc8 Bump github.com/olekukonko/tablewriter from 0.0.5 to 1.1.3 (#2543)
- b170ba3 Consolidate dependabot bumps: actions, go-containerregistry, k8s alpha.2 (e2e) (#3204)
- 9903c3d Do not set process-agent AppArmor for NPM fallback (#3185)
- 5760e61 Drop empty provider label from DDAI agent override (#3217)
- 8cf0aa8 Enable hostPID for the GPU feature (#3220)
- 68287b2 Exposes the ApiServerCache option in the datadog operator (#3072)
- d0a7240 Extend introspection and support DDAI code path (#3108)
- ef74881 Fix controller test (#3136)
- 1bb52a8 Fix unit tests following empty provider label removal (#3236)
- 19e90a6 Follow-up to 1.27 bundle merge (#3092)
- f39edf8 Include api module in unit tests (#3140)
- 67d4b84 Merge 1.27.1 bundle in main (#3126)
- e71cfc3 No-op: Remove unnecessary nil check (#3091)
- 9b25dab No-op: make e2e job timeout 60mn to allow e2e tests to completion (#3149)
- 09d97b8 Publish internal latest image tags (#3221)
- c97788f Refactor GKE Autopilot support to use capabilities framework (#3137)
- 8735c9d Rename provider annotation key to agent.datadoghq.com/cluster-provider (#3219)
- 25f2b43 Support volume/volumeMounts in DatadogAgentProfile (#3194)
- 6a4ee2d Update EKS addon for 1.28.0 (#3226)
- c3faf04 Update EKS addon to 1.27.1 (#3128)
- 0e81e3e Update FIPS proxy version references to 1.1.28 (#3235)
- d69d111 Update GCP marketplace chart and operator image to 1.27.0 (#3101)
- 97da1f4 Update GCP marketplace chart and operator image to 1.27.1 (#3127)
- 5cf0aa8 Update GCP marketplace chart and operator image to 1.28.0 (#3225)
- 51d278d Update Operator Release Workflows (#3060)
- 92788bf Update agent image to 7.80.2 (#3155)
- 85f6337 Update customconfigurations description (#3191)
- cc685b7 Update default Agent/ClusterAgent/DdotCollector image version to 7.80.4 (#3238)
- 319a724 Update default CSI driver daemonset image to 1.3.0 (#3227)
- 2e6ac4d Use allowlist for dap validation (#3130)
- 373fed8 Use tmpl-v4 for internal image -> move to GBI distroless (#3203)
- 91c31b5 [ACTP] Extend PAR k8s RBAC in DCA for kubetray use cases (#3222)
- c1be0e4 [CASCL-1292] Point the no-private-subnet error at all the install options (#3056)
- ee54d3e [CASCL-1304] Add e2e assertion for
dd-cluster-infoConfigMap (#3025) - 847d0dd [CASCL-1386] (1/11) Add evict-legacy-nodes command skeleton (#3160)
- 0442077 [CASCL-1386] (10/11) Evict Karpenter user NodePools (#3177)
- 5d97771 [CASCL-1386] (11/11) Create temporary PodDisruptionBudgets during eviction (#3178)
- 84605ab [CASCL-1386] (2/11) Build the evict-legacy-nodes execution plan (#3161)
- 9699623 [CASCL-1386] (3/11) Display the eviction plan and confirmation prompt (#3162)
- 306e23a [CASCL-1386] (4/11) Add evict-legacy-nodes preflight warnings (#3163)
- 987f3af [CASCL-1386] (5/11) Scale down the cluster-autoscaler before eviction (#3164)
- b38bcfe [CASCL-1386] (6/11) Extract shared EC2 instance-ID helper to common/aws (#3173)
- c9436c4 [CASCL-1386] (6½/11) Implement shared node cordon and drain primitives (#3207)
- 9f6c015 [CASCL-1386] (7/11) Evict EKS managed node groups (#3174)
- 110b9f5 [CASCL-1386] (8/11) Add node drain primitives and evict ASG nodes (#3175)
- e95a33a [CASCL-1386] (9/11) Evict standalone EC2 nodes (#3176)
- be56559 [CASCL-1386] Harmonize impact-list bullet styles in cluster uninstall (#3172)
- 250343a [CONTP-1587] DatadogGenericResource docs: soft deprecate other controllers and graduate out of preview (#3152)
- 270fde8 [CONTP-1608] enrich untaint controller metrics with tags (#3184)
- 39d6bd3 [CONTP-1609] Auto-inject agent toleration when untaint controller is enabled (#3086)
- 8df2250 [CONTP-1610][CONTP-1611] Wait for CSI driver node server pod readiness in untaint controller if csi feature is enabled (#3096)
- 3b09cf8 [CONTP-1702] Support CSI mode in GKE Autopilot (#3094)
- 25a5943 [CONTP-1709] Support enabling datadoginstrumentation crd controller (#3002)
- f36836a [CONTP-1715] Align Operator to Helm csi daemonset and include csidrivers RBAC for DCA (#3093)
- a64eed4 [CONTP-1758] Improve DatadogGenericResource reconciliation at scale (#3143)
- 45c4b00 [CONTP-1785] Replace container image with name in DDI check section (#3196)
- df55a51 [Host Profiler] Remove seccomp configmap and use profile baked into image (#3061)
- 7656117 [codex] Use reachable git tag for build version (#3115)
- 34b1fdb [docs] Add GKE Autopilot operator support documentation (#3104)
- ef0d1cf [profiles] Add apm feature override (#3073)
- 194f686 [renderer] support controller log, CRD status outputs and configurable k8s version (#3211)
- 3748b72 aks provider support (#3150)
- 58d8ffb chore(bundle): regenerate for v1.29.0-rc.1 (#3239)
- 08348c6 chore(deps): Bump go directive to 1.25.11 (#3114)
- 76b428d chore(deps): Bump to v0.55.0 (#3105)
- 1072511 chore(instrumentationCrd): bump minimum version to 7.82 (#3223)
- 5fcb7f8 chore: remove CodeCov upload from CI (#3182)
- f52949d ci(issue-triage): add reusable workflow from DataDog/issue-triage-action (#3187)
- eba44d2 ci: bump issue-triage-action to v1.0.1 (#3212)
- d06e2cb discovery: remove networkStats option (#3117)
- 5c6a923 enable CNM direct send by default (#3045)
- 6e4ddc3 fix issuer and subject also in prod (#3088)
- 43b0089 fix(appsec): correct envoyproxy RBAC resource typo backend -> backends (#3116)
- db2335b fix(deps): vuln minor upgrades — 6 packages (minor: 2 · patch: 4) (#3148)
- 9d4cf55 fix: include version in the operator's Kubernetes client User-Agent (#3159)
- 68e2ee9 never let PodTemplateSpec rewrite Host Profiler seccomp init container (#3135)
- fe786ce support nested SGC config options (#3120)
- d5cdf64 update agent image to 7.80.1 (#3134)
- 39274d6 update bundle for 1.28.0 (#3237)
- 6f94adb update golden files (#3233)
v1.28.0
Changelog
- 9c31609 Add RBAC for Gateway API, service mesh, and ingress controller CRDs (#2874)
- 4e59e1d Add make bundle workflow (#3023)
- 20ecb9e Add missing flock workspace checksum (#3019)
- 65b9d19 Align otel collector config mount with Helm (#3031)
- c86d5e5 Bump default Agent version to 7.79.2 (#3077)
- 7dfe2e5 Do not set process-agent AppArmor for NPM fallback (#3185) (#3189)
- a4fd8d9 Drop provider arg from Feature interface methods (#3007)
- 03e4b46 E2E Dogstatsd validation (#3033)
- 5301a0c E2E improvements: remove gotoolchain hack, share go cache, stream test output (#3074)
- 1e1aeff Emit Kubernetes events for FA experiment transitions (#3037)
- 079486f Expose workload autoscaling in-place vertical scaling (#3055)
- c85321f FA rollout experiment fixes (#3035)
- 913e801 Fix CVE 2026-39820: bump golang (#3003)
- 6ef503a Fix E2e tests on main (#3064)
- fa3049c Make CNM team owner of the npm feature, not ndm-core (#2998)
- c7d49fe No-op: allow containers-tee to use MQ (#3069)
- 19c5d3f Operator manifest renderer (#2947)
- bd0f5e2 Provider capabilities basic framework and eks.ec2.useHostnameFromFile support (#3009)
- 0ec9665 Reduce operator image chmod layers (#3087)
- 3df38d6 Refactor experiment signals (#2944)
- 071c3fa Release EKS-addon v1.26.0 (#2974)
- 93e1cb6 Release v1.26.0 Google Marketplace and add scripts to update the CRDs from a given tag (#2973)
- 8e0b1e8 Remove non-existent setsidaccept4 syscall from seccomp allowlist (#2992)
- 4d64420 Remove operatorrelease chainguard STS policies (#2993)
- d9789bb Rename agent-all to agent-community-eng (#3089)
- a580b06 Restore system-probe DSD socket volumeMount (#3001)
- 6d3740a Revert "feat: Add APM to DatadogInstrumentation CRD (#2984)" (#3015)
- 3579eb4 Secret management sollutions (#3052)
- 491d342 Stop mounting debugfs in process-agent (#2996)
- f49eb24 Support oomKill, tcpQueueLength features on GKE COS via provider annotation (#3011)
- b2a60a9 Undefined replica count remains undefined (#3036)
- d60ff16 Untaint controller (#2753)
- bed889f Update FIPS proxy version references to 1.1.24 (#2997)
- f70667d Update FIPS proxy version references to 1.1.25 (#3044)
- cab73c6 Update FIPS proxy version references to 1.1.26 (#3067)
- bd00a4a Update Golang to 1.25.11 (#3085)
- 49937bd Update agent image to 7.80.2 (#3155) (#3156)
- dbe65ff Update default agent version to 7.79.1 (#3054)
- 7a0a7a8 Use Ubuntu 26.04 GBI for internal build (#3038)
- 097216f [CASCL-1292] Wire Karpenter check as endpoint check on Fargate (#2999)
- b9f5936 [CASCL-1304] Fix Fargate profile name in
dd-cluster-infoConfigMap (#3000) - 2c675b3 [CASCL-1304]
kubectl-datadog: enrichdd-cluster-infoConfigMap (#2980) - b1ebe71 [CONTP-1585] Add SLO support to DatadogGenericResource (#3070)
- ed139da [CONTP-1589] Add DDGR force sync period configuration (#3043)
- 6b4b5f7 [CONTP-1596]Improve GKE Autopilot support (#3013)
- da5cd49 [CONTP-1639] Refactor CRD metadata collection to use informer (#2979)
- 4d241e3 [CONTP-1702] Support CSI mode in GKE Autopilot (#3094) (#3133)
- 68d9802 [CONTP-1709] Support enabling datadoginstrumentation crd controller (#3002) (#3125)
- 762837d [CONTP-1715] Align Operator to Helm csi daemonset and include csidrivers RBAC for DCA (#3093) (#3132)
- 4a8f342 [Host Profiler] Remove seccomp configmap and use profile baked into image (#3061) (#3107)
- 82a75d4 [Host Profiler] Tighten seccomp profile (#3042)
- f636740 [PROF-14068] Remove privileges for host-profiler (#2953)
- 104bcf9 [codex] Use reachable git tag for build version (#3115) (#3119)
- 7f86fa0
kubectl-datadog: redistribute autoscaling cluster packages by concern (#3012) - c30557a add octo sts policies for release dashboard (#3066)
- 33d6508 chore(deps): Bump to v0.55.0 (#3105) (#3111)
- f6aeb7b correct policy issuer in staging for release-dashboard-api to ticino (#3071)
- ad3447a discovery: remove networkStats option (#3117) (#3123)
- f7ac48f enable CNM direct send by default (#3045) (#3103)
- 47e8393 enforce min agent version for CNM direct send (#3010)
- 7ef174d feat(appsec): add ingress-nginx proxy injection support (#3053)
- 8b39974 feat(ddgr): surface Datadog Monitor state in CR status (#3047)
- d97a3dc feat: Add APM to DatadogInstrumentation CRD (#2984)
- a1cbe91 fix issuer to vault and correct subject (#3084)
- dad893d fix monitor recreate (#3050)
- 1a48339 fix(appsec): correct envoyproxy RBAC resource typo backend -> backends (#3116) (#3121)
- efb068e fix(dogstatsd): always set DSD environment variables on Core Agent container (#3032)
- 1f58351 fix(rbac): remove stale gateways entry from orchestrator explorer RBAC (#3075)
- 6416ca2 fix: make apm config a pointer (#2995)
- 88d9f7a never let PodTemplateSpec rewrite Host Profiler seccomp init container (#3135) (#3145)
- 9189730 release v1.28.0 (#3210)
- 5ac71e6 release v1.28.0-rc.1 (#3095)
- 1d862cd release v1.28.0-rc.2 (#3141)
- 9ca69f3 release v1.28.0-rc.3 (#3157)
- 4a3f4bc release v1.28.0-rc.4 (#3190)
- 04424c1 update agent image to 7.80.1 (#3134) (#3139)
- e62a2b2 update bundle for 1.27 (#3081)
v1.28.0-rc.4
Changelog
- 9c31609 Add RBAC for Gateway API, service mesh, and ingress controller CRDs (#2874)
- 4e59e1d Add make bundle workflow (#3023)
- 20ecb9e Add missing flock workspace checksum (#3019)
- 65b9d19 Align otel collector config mount with Helm (#3031)
- c86d5e5 Bump default Agent version to 7.79.2 (#3077)
- 7dfe2e5 Do not set process-agent AppArmor for NPM fallback (#3185) (#3189)
- a4fd8d9 Drop provider arg from Feature interface methods (#3007)
- 03e4b46 E2E Dogstatsd validation (#3033)
- 5301a0c E2E improvements: remove gotoolchain hack, share go cache, stream test output (#3074)
- 1e1aeff Emit Kubernetes events for FA experiment transitions (#3037)
- 079486f Expose workload autoscaling in-place vertical scaling (#3055)
- c85321f FA rollout experiment fixes (#3035)
- 913e801 Fix CVE 2026-39820: bump golang (#3003)
- 6ef503a Fix E2e tests on main (#3064)
- fa3049c Make CNM team owner of the npm feature, not ndm-core (#2998)
- c7d49fe No-op: allow containers-tee to use MQ (#3069)
- 19c5d3f Operator manifest renderer (#2947)
- bd0f5e2 Provider capabilities basic framework and eks.ec2.useHostnameFromFile support (#3009)
- 0ec9665 Reduce operator image chmod layers (#3087)
- 3df38d6 Refactor experiment signals (#2944)
- 071c3fa Release EKS-addon v1.26.0 (#2974)
- 93e1cb6 Release v1.26.0 Google Marketplace and add scripts to update the CRDs from a given tag (#2973)
- 8e0b1e8 Remove non-existent setsidaccept4 syscall from seccomp allowlist (#2992)
- 4d64420 Remove operatorrelease chainguard STS policies (#2993)
- d9789bb Rename agent-all to agent-community-eng (#3089)
- a580b06 Restore system-probe DSD socket volumeMount (#3001)
- 6d3740a Revert "feat: Add APM to DatadogInstrumentation CRD (#2984)" (#3015)
- 3579eb4 Secret management sollutions (#3052)
- 491d342 Stop mounting debugfs in process-agent (#2996)
- f49eb24 Support oomKill, tcpQueueLength features on GKE COS via provider annotation (#3011)
- b2a60a9 Undefined replica count remains undefined (#3036)
- d60ff16 Untaint controller (#2753)
- bed889f Update FIPS proxy version references to 1.1.24 (#2997)
- f70667d Update FIPS proxy version references to 1.1.25 (#3044)
- cab73c6 Update FIPS proxy version references to 1.1.26 (#3067)
- bd00a4a Update Golang to 1.25.11 (#3085)
- 49937bd Update agent image to 7.80.2 (#3155) (#3156)
- dbe65ff Update default agent version to 7.79.1 (#3054)
- 7a0a7a8 Use Ubuntu 26.04 GBI for internal build (#3038)
- 097216f [CASCL-1292] Wire Karpenter check as endpoint check on Fargate (#2999)
- b9f5936 [CASCL-1304] Fix Fargate profile name in
dd-cluster-infoConfigMap (#3000) - 2c675b3 [CASCL-1304]
kubectl-datadog: enrichdd-cluster-infoConfigMap (#2980) - b1ebe71 [CONTP-1585] Add SLO support to DatadogGenericResource (#3070)
- ed139da [CONTP-1589] Add DDGR force sync period configuration (#3043)
- 6b4b5f7 [CONTP-1596]Improve GKE Autopilot support (#3013)
- da5cd49 [CONTP-1639] Refactor CRD metadata collection to use informer (#2979)
- 4d241e3 [CONTP-1702] Support CSI mode in GKE Autopilot (#3094) (#3133)
- 68d9802 [CONTP-1709] Support enabling datadoginstrumentation crd controller (#3002) (#3125)
- 762837d [CONTP-1715] Align Operator to Helm csi daemonset and include csidrivers RBAC for DCA (#3093) (#3132)
- 4a8f342 [Host Profiler] Remove seccomp configmap and use profile baked into image (#3061) (#3107)
- 82a75d4 [Host Profiler] Tighten seccomp profile (#3042)
- f636740 [PROF-14068] Remove privileges for host-profiler (#2953)
- 104bcf9 [codex] Use reachable git tag for build version (#3115) (#3119)
- 7f86fa0
kubectl-datadog: redistribute autoscaling cluster packages by concern (#3012) - c30557a add octo sts policies for release dashboard (#3066)
- 33d6508 chore(deps): Bump to v0.55.0 (#3105) (#3111)
- f6aeb7b correct policy issuer in staging for release-dashboard-api to ticino (#3071)
- ad3447a discovery: remove networkStats option (#3117) (#3123)
- f7ac48f enable CNM direct send by default (#3045) (#3103)
- 47e8393 enforce min agent version for CNM direct send (#3010)
- 7ef174d feat(appsec): add ingress-nginx proxy injection support (#3053)
- 8b39974 feat(ddgr): surface Datadog Monitor state in CR status (#3047)
- d97a3dc feat: Add APM to DatadogInstrumentation CRD (#2984)
- a1cbe91 fix issuer to vault and correct subject (#3084)
- dad893d fix monitor recreate (#3050)
- 1a48339 fix(appsec): correct envoyproxy RBAC resource typo backend -> backends (#3116) (#3121)
- efb068e fix(dogstatsd): always set DSD environment variables on Core Agent container (#3032)
- 1f58351 fix(rbac): remove stale gateways entry from orchestrator explorer RBAC (#3075)
- 6416ca2 fix: make apm config a pointer (#2995)
- 88d9f7a never let PodTemplateSpec rewrite Host Profiler seccomp init container (#3135) (#3145)
- 5ac71e6 release v1.28.0-rc.1 (#3095)
- 1d862cd release v1.28.0-rc.2 (#3141)
- 9ca69f3 release v1.28.0-rc.3 (#3157)
- 4a3f4bc release v1.28.0-rc.4 (#3190)
- 04424c1 update agent image to 7.80.1 (#3134) (#3139)
- e62a2b2 update bundle for 1.27 (#3081)
v1.28.0-rc.3
Changelog
- 9c31609 Add RBAC for Gateway API, service mesh, and ingress controller CRDs (#2874)
- 4e59e1d Add make bundle workflow (#3023)
- 20ecb9e Add missing flock workspace checksum (#3019)
- 65b9d19 Align otel collector config mount with Helm (#3031)
- c86d5e5 Bump default Agent version to 7.79.2 (#3077)
- a4fd8d9 Drop provider arg from Feature interface methods (#3007)
- 03e4b46 E2E Dogstatsd validation (#3033)
- 5301a0c E2E improvements: remove gotoolchain hack, share go cache, stream test output (#3074)
- 1e1aeff Emit Kubernetes events for FA experiment transitions (#3037)
- 079486f Expose workload autoscaling in-place vertical scaling (#3055)
- c85321f FA rollout experiment fixes (#3035)
- 913e801 Fix CVE 2026-39820: bump golang (#3003)
- 6ef503a Fix E2e tests on main (#3064)
- fa3049c Make CNM team owner of the npm feature, not ndm-core (#2998)
- c7d49fe No-op: allow containers-tee to use MQ (#3069)
- 19c5d3f Operator manifest renderer (#2947)
- bd0f5e2 Provider capabilities basic framework and eks.ec2.useHostnameFromFile support (#3009)
- 0ec9665 Reduce operator image chmod layers (#3087)
- 3df38d6 Refactor experiment signals (#2944)
- 071c3fa Release EKS-addon v1.26.0 (#2974)
- 93e1cb6 Release v1.26.0 Google Marketplace and add scripts to update the CRDs from a given tag (#2973)
- 8e0b1e8 Remove non-existent setsidaccept4 syscall from seccomp allowlist (#2992)
- 4d64420 Remove operatorrelease chainguard STS policies (#2993)
- d9789bb Rename agent-all to agent-community-eng (#3089)
- a580b06 Restore system-probe DSD socket volumeMount (#3001)
- 6d3740a Revert "feat: Add APM to DatadogInstrumentation CRD (#2984)" (#3015)
- 3579eb4 Secret management sollutions (#3052)
- 491d342 Stop mounting debugfs in process-agent (#2996)
- f49eb24 Support oomKill, tcpQueueLength features on GKE COS via provider annotation (#3011)
- b2a60a9 Undefined replica count remains undefined (#3036)
- d60ff16 Untaint controller (#2753)
- bed889f Update FIPS proxy version references to 1.1.24 (#2997)
- f70667d Update FIPS proxy version references to 1.1.25 (#3044)
- cab73c6 Update FIPS proxy version references to 1.1.26 (#3067)
- bd00a4a Update Golang to 1.25.11 (#3085)
- 49937bd Update agent image to 7.80.2 (#3155) (#3156)
- dbe65ff Update default agent version to 7.79.1 (#3054)
- 7a0a7a8 Use Ubuntu 26.04 GBI for internal build (#3038)
- 097216f [CASCL-1292] Wire Karpenter check as endpoint check on Fargate (#2999)
- b9f5936 [CASCL-1304] Fix Fargate profile name in
dd-cluster-infoConfigMap (#3000) - 2c675b3 [CASCL-1304]
kubectl-datadog: enrichdd-cluster-infoConfigMap (#2980) - b1ebe71 [CONTP-1585] Add SLO support to DatadogGenericResource (#3070)
- ed139da [CONTP-1589] Add DDGR force sync period configuration (#3043)
- 6b4b5f7 [CONTP-1596]Improve GKE Autopilot support (#3013)
- da5cd49 [CONTP-1639] Refactor CRD metadata collection to use informer (#2979)
- 4d241e3 [CONTP-1702] Support CSI mode in GKE Autopilot (#3094) (#3133)
- 68d9802 [CONTP-1709] Support enabling datadoginstrumentation crd controller (#3002) (#3125)
- 762837d [CONTP-1715] Align Operator to Helm csi daemonset and include csidrivers RBAC for DCA (#3093) (#3132)
- 4a8f342 [Host Profiler] Remove seccomp configmap and use profile baked into image (#3061) (#3107)
- 82a75d4 [Host Profiler] Tighten seccomp profile (#3042)
- f636740 [PROF-14068] Remove privileges for host-profiler (#2953)
- 104bcf9 [codex] Use reachable git tag for build version (#3115) (#3119)
- 7f86fa0
kubectl-datadog: redistribute autoscaling cluster packages by concern (#3012) - c30557a add octo sts policies for release dashboard (#3066)
- 33d6508 chore(deps): Bump to v0.55.0 (#3105) (#3111)
- f6aeb7b correct policy issuer in staging for release-dashboard-api to ticino (#3071)
- ad3447a discovery: remove networkStats option (#3117) (#3123)
- f7ac48f enable CNM direct send by default (#3045) (#3103)
- 47e8393 enforce min agent version for CNM direct send (#3010)
- 7ef174d feat(appsec): add ingress-nginx proxy injection support (#3053)
- 8b39974 feat(ddgr): surface Datadog Monitor state in CR status (#3047)
- d97a3dc feat: Add APM to DatadogInstrumentation CRD (#2984)
- a1cbe91 fix issuer to vault and correct subject (#3084)
- dad893d fix monitor recreate (#3050)
- 1a48339 fix(appsec): correct envoyproxy RBAC resource typo backend -> backends (#3116) (#3121)
- efb068e fix(dogstatsd): always set DSD environment variables on Core Agent container (#3032)
- 1f58351 fix(rbac): remove stale gateways entry from orchestrator explorer RBAC (#3075)
- 6416ca2 fix: make apm config a pointer (#2995)
- 88d9f7a never let PodTemplateSpec rewrite Host Profiler seccomp init container (#3135) (#3145)
- 5ac71e6 release v1.28.0-rc.1 (#3095)
- 1d862cd release v1.28.0-rc.2 (#3141)
- 9ca69f3 release v1.28.0-rc.3 (#3157)
- 04424c1 update agent image to 7.80.1 (#3134) (#3139)
- e62a2b2 update bundle for 1.27 (#3081)
v1.28.0-rc.2
Changelog
- 9c31609 Add RBAC for Gateway API, service mesh, and ingress controller CRDs (#2874)
- 4e59e1d Add make bundle workflow (#3023)
- 20ecb9e Add missing flock workspace checksum (#3019)
- 65b9d19 Align otel collector config mount with Helm (#3031)
- c86d5e5 Bump default Agent version to 7.79.2 (#3077)
- a4fd8d9 Drop provider arg from Feature interface methods (#3007)
- 03e4b46 E2E Dogstatsd validation (#3033)
- 5301a0c E2E improvements: remove gotoolchain hack, share go cache, stream test output (#3074)
- 1e1aeff Emit Kubernetes events for FA experiment transitions (#3037)
- 079486f Expose workload autoscaling in-place vertical scaling (#3055)
- c85321f FA rollout experiment fixes (#3035)
- 913e801 Fix CVE 2026-39820: bump golang (#3003)
- 6ef503a Fix E2e tests on main (#3064)
- fa3049c Make CNM team owner of the npm feature, not ndm-core (#2998)
- c7d49fe No-op: allow containers-tee to use MQ (#3069)
- 19c5d3f Operator manifest renderer (#2947)
- bd0f5e2 Provider capabilities basic framework and eks.ec2.useHostnameFromFile support (#3009)
- 0ec9665 Reduce operator image chmod layers (#3087)
- 3df38d6 Refactor experiment signals (#2944)
- 071c3fa Release EKS-addon v1.26.0 (#2974)
- 93e1cb6 Release v1.26.0 Google Marketplace and add scripts to update the CRDs from a given tag (#2973)
- 8e0b1e8 Remove non-existent setsidaccept4 syscall from seccomp allowlist (#2992)
- 4d64420 Remove operatorrelease chainguard STS policies (#2993)
- d9789bb Rename agent-all to agent-community-eng (#3089)
- a580b06 Restore system-probe DSD socket volumeMount (#3001)
- 6d3740a Revert "feat: Add APM to DatadogInstrumentation CRD (#2984)" (#3015)
- 3579eb4 Secret management sollutions (#3052)
- 491d342 Stop mounting debugfs in process-agent (#2996)
- f49eb24 Support oomKill, tcpQueueLength features on GKE COS via provider annotation (#3011)
- b2a60a9 Undefined replica count remains undefined (#3036)
- d60ff16 Untaint controller (#2753)
- bed889f Update FIPS proxy version references to 1.1.24 (#2997)
- f70667d Update FIPS proxy version references to 1.1.25 (#3044)
- cab73c6 Update FIPS proxy version references to 1.1.26 (#3067)
- bd00a4a Update Golang to 1.25.11 (#3085)
- dbe65ff Update default agent version to 7.79.1 (#3054)
- 7a0a7a8 Use Ubuntu 26.04 GBI for internal build (#3038)
- 097216f [CASCL-1292] Wire Karpenter check as endpoint check on Fargate (#2999)
- b9f5936 [CASCL-1304] Fix Fargate profile name in
dd-cluster-infoConfigMap (#3000) - 2c675b3 [CASCL-1304]
kubectl-datadog: enrichdd-cluster-infoConfigMap (#2980) - b1ebe71 [CONTP-1585] Add SLO support to DatadogGenericResource (#3070)
- ed139da [CONTP-1589] Add DDGR force sync period configuration (#3043)
- 6b4b5f7 [CONTP-1596]Improve GKE Autopilot support (#3013)
- da5cd49 [CONTP-1639] Refactor CRD metadata collection to use informer (#2979)
- 4d241e3 [CONTP-1702] Support CSI mode in GKE Autopilot (#3094) (#3133)
- 68d9802 [CONTP-1709] Support enabling datadoginstrumentation crd controller (#3002) (#3125)
- 762837d [CONTP-1715] Align Operator to Helm csi daemonset and include csidrivers RBAC for DCA (#3093) (#3132)
- 4a8f342 [Host Profiler] Remove seccomp configmap and use profile baked into image (#3061) (#3107)
- 82a75d4 [Host Profiler] Tighten seccomp profile (#3042)
- f636740 [PROF-14068] Remove privileges for host-profiler (#2953)
- 104bcf9 [codex] Use reachable git tag for build version (#3115) (#3119)
- 7f86fa0
kubectl-datadog: redistribute autoscaling cluster packages by concern (#3012) - c30557a add octo sts policies for release dashboard (#3066)
- 33d6508 chore(deps): Bump to v0.55.0 (#3105) (#3111)
- f6aeb7b correct policy issuer in staging for release-dashboard-api to ticino (#3071)
- ad3447a discovery: remove networkStats option (#3117) (#3123)
- f7ac48f enable CNM direct send by default (#3045) (#3103)
- 47e8393 enforce min agent version for CNM direct send (#3010)
- 7ef174d feat(appsec): add ingress-nginx proxy injection support (#3053)
- 8b39974 feat(ddgr): surface Datadog Monitor state in CR status (#3047)
- d97a3dc feat: Add APM to DatadogInstrumentation CRD (#2984)
- a1cbe91 fix issuer to vault and correct subject (#3084)
- dad893d fix monitor recreate (#3050)
- 1a48339 fix(appsec): correct envoyproxy RBAC resource typo backend -> backends (#3116) (#3121)
- efb068e fix(dogstatsd): always set DSD environment variables on Core Agent container (#3032)
- 1f58351 fix(rbac): remove stale gateways entry from orchestrator explorer RBAC (#3075)
- 6416ca2 fix: make apm config a pointer (#2995)
- 5ac71e6 release v1.28.0-rc.1 (#3095)
- 1d862cd release v1.28.0-rc.2 (#3141)
- 04424c1 update agent image to 7.80.1 (#3134) (#3139)
- e62a2b2 update bundle for 1.27 (#3081)
v1.27.1
v1.27.1-rc.1
v1.28.0-rc.1
Changelog
- 9c31609 Add RBAC for Gateway API, service mesh, and ingress controller CRDs (#2874)
- 4e59e1d Add make bundle workflow (#3023)
- 20ecb9e Add missing flock workspace checksum (#3019)
- 65b9d19 Align otel collector config mount with Helm (#3031)
- c86d5e5 Bump default Agent version to 7.79.2 (#3077)
- a4fd8d9 Drop provider arg from Feature interface methods (#3007)
- 03e4b46 E2E Dogstatsd validation (#3033)
- 5301a0c E2E improvements: remove gotoolchain hack, share go cache, stream test output (#3074)
- 1e1aeff Emit Kubernetes events for FA experiment transitions (#3037)
- 079486f Expose workload autoscaling in-place vertical scaling (#3055)
- c85321f FA rollout experiment fixes (#3035)
- 913e801 Fix CVE 2026-39820: bump golang (#3003)
- 6ef503a Fix E2e tests on main (#3064)
- fa3049c Make CNM team owner of the npm feature, not ndm-core (#2998)
- c7d49fe No-op: allow containers-tee to use MQ (#3069)
- 19c5d3f Operator manifest renderer (#2947)
- bd0f5e2 Provider capabilities basic framework and eks.ec2.useHostnameFromFile support (#3009)
- 0ec9665 Reduce operator image chmod layers (#3087)
- 3df38d6 Refactor experiment signals (#2944)
- 071c3fa Release EKS-addon v1.26.0 (#2974)
- 93e1cb6 Release v1.26.0 Google Marketplace and add scripts to update the CRDs from a given tag (#2973)
- 8e0b1e8 Remove non-existent setsidaccept4 syscall from seccomp allowlist (#2992)
- 4d64420 Remove operatorrelease chainguard STS policies (#2993)
- d9789bb Rename agent-all to agent-community-eng (#3089)
- a580b06 Restore system-probe DSD socket volumeMount (#3001)
- 6d3740a Revert "feat: Add APM to DatadogInstrumentation CRD (#2984)" (#3015)
- 3579eb4 Secret management sollutions (#3052)
- 491d342 Stop mounting debugfs in process-agent (#2996)
- f49eb24 Support oomKill, tcpQueueLength features on GKE COS via provider annotation (#3011)
- b2a60a9 Undefined replica count remains undefined (#3036)
- d60ff16 Untaint controller (#2753)
- bed889f Update FIPS proxy version references to 1.1.24 (#2997)
- f70667d Update FIPS proxy version references to 1.1.25 (#3044)
- cab73c6 Update FIPS proxy version references to 1.1.26 (#3067)
- bd00a4a Update Golang to 1.25.11 (#3085)
- dbe65ff Update default agent version to 7.79.1 (#3054)
- 7a0a7a8 Use Ubuntu 26.04 GBI for internal build (#3038)
- 097216f [CASCL-1292] Wire Karpenter check as endpoint check on Fargate (#2999)
- b9f5936 [CASCL-1304] Fix Fargate profile name in
dd-cluster-infoConfigMap (#3000) - 2c675b3 [CASCL-1304]
kubectl-datadog: enrichdd-cluster-infoConfigMap (#2980) - b1ebe71 [CONTP-1585] Add SLO support to DatadogGenericResource (#3070)
- ed139da [CONTP-1589] Add DDGR force sync period configuration (#3043)
- 6b4b5f7 [CONTP-1596]Improve GKE Autopilot support (#3013)
- da5cd49 [CONTP-1639] Refactor CRD metadata collection to use informer (#2979)
- 82a75d4 [Host Profiler] Tighten seccomp profile (#3042)
- f636740 [PROF-14068] Remove privileges for host-profiler (#2953)
- 7f86fa0
kubectl-datadog: redistribute autoscaling cluster packages by concern (#3012) - c30557a add octo sts policies for release dashboard (#3066)
- f6aeb7b correct policy issuer in staging for release-dashboard-api to ticino (#3071)
- 47e8393 enforce min agent version for CNM direct send (#3010)
- 7ef174d feat(appsec): add ingress-nginx proxy injection support (#3053)
- 8b39974 feat(ddgr): surface Datadog Monitor state in CR status (#3047)
- d97a3dc feat: Add APM to DatadogInstrumentation CRD (#2984)
- a1cbe91 fix issuer to vault and correct subject (#3084)
- dad893d fix monitor recreate (#3050)
- efb068e fix(dogstatsd): always set DSD environment variables on Core Agent container (#3032)
- 1f58351 fix(rbac): remove stale gateways entry from orchestrator explorer RBAC (#3075)
- 6416ca2 fix: make apm config a pointer (#2995)
- 5ac71e6 release v1.28.0-rc.1 (#3095)
- e62a2b2 update bundle for 1.27 (#3081)
v1.27.0
Changelog
- 79c0824 (No-op) SA1019: Remove deprecated functions usage (#2478)
- c08166e Add KILL capability to CSPM container (#2931)
- ab3acdb Add SBOM enrichment usage CRD field for "package in use" feature (#2908)
- f41ef99 Add cache namespace options for DatadogCSIDriver controller (#2934)
- c7b7f58 Add code-coverage.datadog.yml (#2893)
- 0dcbf67 Add experiment signals to fleet remote config (#2872)
- 97a7761 Add writev and shutdown to system-probe seccomp profile (#2986)
- 540be47 Align tmp/run volume names and remove system-probe DogStatsD mount (#2985)
- 41dddf7 Always clean DDA before next test to avoid races (#2954)
- d09fcb3 Avoid RBAC errors when Operator can't list or watch ConfigMaps (#2889)
- dc24a2c Bump default Agent version to 7.79.2 (#3077) (#3078)
- 039572f Comment out flaky test (#2932)
- d67ed03 Emit Kubernetes events for FA experiment transitions (#3037) (#3051)
- 68f6e13 FA rollout experiment fixes (#3035) (#3049)
- 9678903 Fix AppArmor annotations for absent containers in annotation overrides (#2897)
- a97d1de Fix CVE 2026-39820: bump golang (#3003) (#3005)
- ea99112 Fix E2e tests on main (#3064) (#3068)
- 658de74 Migrate
kubectl-datadog autoscaling clustertoclient-gopager(#2960) - 881aa65 Refactor experiment signals (#2944) (#3016)
- d94085f Remove DatadogAgentEnabled flag (#2912)
- b066672 Restore system-probe DSD socket volumeMount (#3001) (#3006)
- 8653f51 Revert "feat: Add APM to DatadogInstrumentation CRD (#2984)" (#3015) (#3017)
- 4e9c1ab Sync operator 1.26.0 bundle to main (#2972)
- 59f9e3d Update Chaingaurd for Release Worker (#2977)
- 6714de3 Update FIPS proxy version references to 1.1.25 (#3044) (#3046)
- a4b7a6d Update FIPS proxy version references to 1.1.26 (#3067) (#3076)
- 56159c6 Update
CLAUDE.mdto referenceAGENTS.mdand lean outAGENTS.mdreplacingagent.md(#2905) - ef88adb Update code-owners to otel-agent team and move QA cards to their board (#2895)
- d5f00bf Update default Agent version to 7.78.1 and update CSI default tag to 1.2.2 (#2939)
- 091cc87 Update default agent version to 7.79.1 (#3054) (#3058)
- 4c230b1 Update the documented fips-proxy image tag to latest 1.1.23 release (#2951)
- c2069ff Upgrade karpenter-provider-aws from v1.3.6 to v1.9.0 (#2888)
- 34d375a Use Ubuntu 26.04 GBI for internal build (#3038) (#3041)
- c816592 Use dd-sts OIDC token exchange instead of DD_API_KEY repo secret (#2873)
- b0aad13 Validate AWS account consistency before Karpenter operations (#2892)
- 94725a1 [CASCL-1292] Add Fargate mode to kubectl-datadog install (#2891)
- 654839d [CASCL-1304] Snapshot node managers in ConfigMap during install (#2945)
- 099f33f [CASCL-1305] No-op kubectl-datadog install on a foreign Karpenter (#2949)
- d3652e6 [CASCL-1323] Add
updatesubcommand tokubectl-datadog autoscaling cluster(#2976) - aad76e3 [CASCL-1323] Extract generic
FindKarpenterInstallationhelper (#2970) - 35814b5 [CASCL-1323] chore(kubectl-datadog): split autoscaling install.go into smaller files (#2968)
- abc96a5 [CONS-8253] Propagate DDGR finalizer error (#2919)
- 927e76e [CONTP-1335] organize finalizers (#2879)
- 4fe811a [CONTP-1502] chore: Refresh secrets on reconcile instead of callbacks (#2916)
- e3f69bf [CONTP-1504] Manage DatadogCSIDriver from DatadogAgent (#2857)
- a646370 [CONTP-1547] Push rc-latest mutable image tags from Operator GitLab pipeline (#2903)
- 99a6fc8 [CONTP-1604] When user updates k8s genericresource, force re-create if deleted (#2909)
- 6e2c0c9 [CONTP-1605] [DDGR] Use context based logging and reconcile once, no double get (#2910)
- dcbf3bf [CONTP-1606] [DDGR] Reduce boilerplate: CreateResult, stateful handlers, handler registry (#2911)
- 3628a15 [CONTP-1656] Add datadog instrumentation crd rbac perms (#2975)
- d1d2b65 [CONTP-1656] feat: Add DatadogInstrumentation CRD (#2962)
- 3c567c5 [DOCS-14086] Use dynamic site parameter in Operator config docs (#2978)
- 4c40cf4 [VULN-62334] Update
helm.sh/helm/v3dependency to v3.20.2 (#2969) - f1faf64 [datadog-operator] Release EKS-addon v1.25.0 (#2881)
- ed1b311 [datadog-operator] Release v1.25.0 Google Marketplace (#2896)
- 1ed0fbc [feature][autoscaling] add Spot scheduling feature and update RBAC (#2957)
- e49c18f
kubectl-datadog: delegate OCI image parsing togo-containerregistry(#2971) - 78490c3 chore: OperatorRelease worker permissions (#2943)
- f11b43c chore: transfer dataplane feature ownership and register agent-data-plane team (#2929)
- 6be3f12 discovery: enable by default on agents >= 7.78 (#2915)
- d3e7b0d dogstatsd: drop DD_USE_DOGSTATSD=false override when dataPlane handles DSD (#2965)
- 953ade2 enhancement: default dataPlane.dogstatsd.enabled to true (#2935)
- 9c04e3d feat(DPA): Add options.burstable + CPURequestsRemoveLimitsMemoryRequestsAndLimits controlled values (#2902)
- 7c966f8 feat(ddgr): add dashboard support (#2906)
- 849be07 feat: Add APM to DatadogInstrumentation CRD (#2984) (#2994)
- 1607b6c fix(dogstatsd): always set DSD environment variables on Core Agent container (#3032) (#3034)
- b6fdaa5 refacto: rename full-host-profiler to host-profiler (#2901)
- 2d50488 release v1.27.0 (#3079)
- 083623f release v1.27.0-rc.1 (#2989)
- 8e158b7 release v1.27.0-rc.2 (#3018)
- 1ad9264 release v1.27.0-rc.3 (#3059)
v1.27.0-rc.3
Changelog
- 79c0824 (No-op) SA1019: Remove deprecated functions usage (#2478)
- c08166e Add KILL capability to CSPM container (#2931)
- ab3acdb Add SBOM enrichment usage CRD field for "package in use" feature (#2908)
- f41ef99 Add cache namespace options for DatadogCSIDriver controller (#2934)
- c7b7f58 Add code-coverage.datadog.yml (#2893)
- 0dcbf67 Add experiment signals to fleet remote config (#2872)
- 97a7761 Add writev and shutdown to system-probe seccomp profile (#2986)
- 540be47 Align tmp/run volume names and remove system-probe DogStatsD mount (#2985)
- 41dddf7 Always clean DDA before next test to avoid races (#2954)
- d09fcb3 Avoid RBAC errors when Operator can't list or watch ConfigMaps (#2889)
- 039572f Comment out flaky test (#2932)
- d67ed03 Emit Kubernetes events for FA experiment transitions (#3037) (#3051)
- 68f6e13 FA rollout experiment fixes (#3035) (#3049)
- 9678903 Fix AppArmor annotations for absent containers in annotation overrides (#2897)
- a97d1de Fix CVE 2026-39820: bump golang (#3003) (#3005)
- 658de74 Migrate
kubectl-datadog autoscaling clustertoclient-gopager(#2960) - 881aa65 Refactor experiment signals (#2944) (#3016)
- d94085f Remove DatadogAgentEnabled flag (#2912)
- b066672 Restore system-probe DSD socket volumeMount (#3001) (#3006)
- 8653f51 Revert "feat: Add APM to DatadogInstrumentation CRD (#2984)" (#3015) (#3017)
- 4e9c1ab Sync operator 1.26.0 bundle to main (#2972)
- 59f9e3d Update Chaingaurd for Release Worker (#2977)
- 6714de3 Update FIPS proxy version references to 1.1.25 (#3044) (#3046)
- 56159c6 Update
CLAUDE.mdto referenceAGENTS.mdand lean outAGENTS.mdreplacingagent.md(#2905) - ef88adb Update code-owners to otel-agent team and move QA cards to their board (#2895)
- d5f00bf Update default Agent version to 7.78.1 and update CSI default tag to 1.2.2 (#2939)
- 091cc87 Update default agent version to 7.79.1 (#3054) (#3058)
- 4c230b1 Update the documented fips-proxy image tag to latest 1.1.23 release (#2951)
- c2069ff Upgrade karpenter-provider-aws from v1.3.6 to v1.9.0 (#2888)
- 34d375a Use Ubuntu 26.04 GBI for internal build (#3038) (#3041)
- c816592 Use dd-sts OIDC token exchange instead of DD_API_KEY repo secret (#2873)
- b0aad13 Validate AWS account consistency before Karpenter operations (#2892)
- 94725a1 [CASCL-1292] Add Fargate mode to kubectl-datadog install (#2891)
- 654839d [CASCL-1304] Snapshot node managers in ConfigMap during install (#2945)
- 099f33f [CASCL-1305] No-op kubectl-datadog install on a foreign Karpenter (#2949)
- d3652e6 [CASCL-1323] Add
updatesubcommand tokubectl-datadog autoscaling cluster(#2976) - aad76e3 [CASCL-1323] Extract generic
FindKarpenterInstallationhelper (#2970) - 35814b5 [CASCL-1323] chore(kubectl-datadog): split autoscaling install.go into smaller files (#2968)
- abc96a5 [CONS-8253] Propagate DDGR finalizer error (#2919)
- 927e76e [CONTP-1335] organize finalizers (#2879)
- 4fe811a [CONTP-1502] chore: Refresh secrets on reconcile instead of callbacks (#2916)
- e3f69bf [CONTP-1504] Manage DatadogCSIDriver from DatadogAgent (#2857)
- a646370 [CONTP-1547] Push rc-latest mutable image tags from Operator GitLab pipeline (#2903)
- 99a6fc8 [CONTP-1604] When user updates k8s genericresource, force re-create if deleted (#2909)
- 6e2c0c9 [CONTP-1605] [DDGR] Use context based logging and reconcile once, no double get (#2910)
- dcbf3bf [CONTP-1606] [DDGR] Reduce boilerplate: CreateResult, stateful handlers, handler registry (#2911)
- 3628a15 [CONTP-1656] Add datadog instrumentation crd rbac perms (#2975)
- d1d2b65 [CONTP-1656] feat: Add DatadogInstrumentation CRD (#2962)
- 3c567c5 [DOCS-14086] Use dynamic site parameter in Operator config docs (#2978)
- 4c40cf4 [VULN-62334] Update
helm.sh/helm/v3dependency to v3.20.2 (#2969) - f1faf64 [datadog-operator] Release EKS-addon v1.25.0 (#2881)
- ed1b311 [datadog-operator] Release v1.25.0 Google Marketplace (#2896)
- 1ed0fbc [feature][autoscaling] add Spot scheduling feature and update RBAC (#2957)
- e49c18f
kubectl-datadog: delegate OCI image parsing togo-containerregistry(#2971) - 78490c3 chore: OperatorRelease worker permissions (#2943)
- f11b43c chore: transfer dataplane feature ownership and register agent-data-plane team (#2929)
- 6be3f12 discovery: enable by default on agents >= 7.78 (#2915)
- d3e7b0d dogstatsd: drop DD_USE_DOGSTATSD=false override when dataPlane handles DSD (#2965)
- 953ade2 enhancement: default dataPlane.dogstatsd.enabled to true (#2935)
- 9c04e3d feat(DPA): Add options.burstable + CPURequestsRemoveLimitsMemoryRequestsAndLimits controlled values (#2902)
- 7c966f8 feat(ddgr): add dashboard support (#2906)
- 849be07 feat: Add APM to DatadogInstrumentation CRD (#2984) (#2994)
- 1607b6c fix(dogstatsd): always set DSD environment variables on Core Agent container (#3032) (#3034)
- b6fdaa5 refacto: rename full-host-profiler to host-profiler (#2901)
- 083623f release v1.27.0-rc.1 (#2989)
- 8e158b7 release v1.27.0-rc.2 (#3018)
- 1ad9264 release v1.27.0-rc.3 (#3059)