v1.31.0

Changelog

• 262dac7 ADMS: vuln minor upgrades — 4 packages (minor: 2 · patch: 2) [test/e2e] (#3360)
• f32a0bc Add Agent Check Runner container to the node agent (#3440)
• 3e256ba Add Talos provider support (#3406)
• 185c701 Add apm non local traffic env var to local service (#3224)
• 0ea42dc Add cluster_id tag in remote service callback (#3376)
• 86ad758 Add code-review-action workflow (#3447)
• c38351c Add detection for Talos provider (#3410)
• 14dd1a8 Bump max goroutines to 500 (#3356)
• 4b1368c Doc url fixes (#3369)
• 6bd5391 Document feature support in DAP doc (#3466)
• 1acef42 Document migration from ExtendedDaemonSet (#3389)
• 28f185e Drop Retries for Permanent Failures on Resource-Creating Controllers (#3429)
• 3209b94 Empty objectives are fine for DPA manifest (#3400)
• 3e86172 Enable additional golangci-lint checks (#3415)
• 93367b6 Enable config sync by default when CNM direct send is enabled (#3368)
• 052a4da Enable staticcheck style checks (#3416)
• 5f8a876 Fix DDAI metrics forwarder ignoring Operator-level credentials (#3354)
• c61719d Fix E2E lint for local module replacements (#3425)
• 3b66bcc Fix EKS add-on lookup handling (#3441)
• 3203374 Fix PAR split configuration propagation to the Core Agent (#3469)
• 96de46d Fix YAML mapper for helm2dda for Helm's configmap based configurations (#3373)
• 16eca47 Fix concurrent access to enabled features in metrics forwarder (#3412)
• 3ae8ece Migrate k8s-datadog-agent-ops to the ddoghq GitHub org (#3470) (#3499)
• cd5f120 Private Action Runner split mode support (#3450)
• c79c1d2 Raise default Data Plane minimum Agent version to 7.84 (#3544) (#3547)
• ca2c2a7 Reapply "move CI to ddoghq/images instead of DataDog/images (#3446)" (#3455) (#3476) (#3480)
• 8e411a9 Rename functions that use v2 or v3 (#3378)
• d27c6dd Revert "move CI to ddoghq/images instead of DataDog/images (#3446)" (#3455)
• d19bc4d Skip e2e stage on release-bundle branches (#3343)
• 03688c5 Update FIPS proxy version references to 1.1.30 (#3419)
• 0658952 Update GCP marketplace chart and operator image to 1.30.0 (#3459)
• 39d06cb Update Golang to 1.26.6 (#3358)
• ae9eacd Update Golang to 1.26.7 (#3392)
• 31b07dd Update dd-pkg image to 134352415-c1633320 (#3424)
• 1131b17 Update default Agent to 7.83.0 (#3426)
• 018509d Update default Agent to 7.84.1 (#3545) (#3546)
• 2c30181 Update generated DaemonSet API documentation (#3388)
• 460e232 Update go dependencies and fix lint (#3443)
• 9708f04 Update module google.golang.org/grpc to v1.83.1 [SECURITY] (#3417)
• 65a53da Use dedicated secret for managed EKS credentials (#3398)
• 2007222 Use default permissions in Dockerfile binaries and pin the owner group to root (#3525) (#3528)
• 0eb2e0f [ACIX-1926] chore(ci): pin GitHub Actions to commit SHAs (#3328)
• 727b053 [ACTP] allow dev images for PAR split mode (#3533) (#3534)
• 76c74ab [CASCL-1645] Fix Karpenter IAM policy size limit (#3315)
• 5bfd6be [CONTP-1569] [CONTINT-5553] Add podCollectionMode field on kubeStateMetricsCore for node-side pod collection (#3027)
• 0161979 [CONTP-1895] Remove ExtendedDaemonSet runtime support (#3387)
• 3bd3a40 [CONTP-2021] Support Software Catalog entities (service definitions) in DatadogGenericResource (#3448)
• 9720c44 [CONTP-2023] Improve DatadogMonitor reconciliation at scale (#3381)
• 8b73d53 [CONTP-2039] Untaint controller: Operator, DCA and CLC must tolerate the agent-not-ready startup taint (#3465)
• afd288a [CONTP-2087] feat: Add APM to DatadogInstrumentation CRD (#3192)
• cd9ee78 [CONTP-2101] Decouple internal rc-latest publishing (#3481) (#3482)
• 24127f2 [CONTP-2114] send config in helm metadata as json vs yaml (#3500) (#3510)
• 3377210 [DADP-182] Enable ADP by default for Linux Operator workloads (#3401)
• 425a06f [PROF-15646] selinux annotation on install-seccomp (#3391)
• bf9fb87 [TON-742] Support managed DatadogAgent creation and removal (#3268)
• e271ea3 [TON-743] Add managed DatadogAgent settings to the EKS add-on chart (#3269)
• 4b72af1 [VULN-91845] fix(deps): update cel-go to v0.30.0 (#3405)
• 589c032 [docs] replace internal references with public docs (#3367)
• 007a456 [orchestrator] Grant networkpolicies to the orchestrator-explorer ClusterRole (#3382)
• a4936cc [publish-community-bundles] Do everything except create PR (#3456)
• 0b58b65 add component for dynamic instrumentation team (#3344)
• 7a23b6a add host profiler doc for annotations (#3399)
• 78965ad add slo corrections support (#3414)
• db6a88c chore(bundle): regenerate for v1.31.0 (#3571)
• 64a8c6e chore(bundle): regenerate for v1.31.0-rc.1 (#3472)
• 6fd3242 chore(bundle): regenerate for v1.31.0-rc.2 (#3520)
• 8d159f8 chore(bundle): regenerate for v1.31.0-rc.3 (#3555)
• f7d101e chore(bundle): sync bundle to v1.29.0 on main (#3338)
• 77fb7ed chore(eks-addon): release operator-eks-addon 0.1.31 for Operator 1.30.0 (#3454)
• 4166679 enable CNM direct send if version unknown (#3353)
• 8f6720e feat(appsec): migrate injector config to spec.features.appsec.injector and add GKE Gateway support (#3337)
• d9ca7ce feat(csi): support private APM registries (#3345)
• b1a24ea feat(orchestrator): grant Gateway and Inference API collection RBAC (#3438)
• 05457ee feat(orchestrator): grant KServe collection RBAC (#3427)
• 043265c feat(orchestrator): grant KubeAI collection RBAC (#3439)
• 5c27b0a feat(orchestrator): grant Ray and Dynamo collection RBAC (#3421)
• 8a3c8f6 fix(ci): forward image merge strategy (#3434)
• 34e8a62 fix(clusterchecksrunner): preserve packaged conf.d assets (e.g. SNMP … (#3374)
• 3dcd425 fix(code-review): Use the correct expected secret name (#3468)
• 535f418 fix(cspm): set compliance config env vars on all node agent containers (#3403)
• 12a4825 fix(deps): keep API Kubernetes dependencies Agent-compatible (#3458)
• 61a07d0 fix(deps): update OpenTelemetry to v1.45.0 (#3493) (#3495)
• d14c607 fix(deps): vuln golang.org/x/crypto (minor → v0.56.0) [all go.mod files] (#3444)
• 55db531 fix(deps): vuln minor upgrades — 4 packages (minor: 2 · patch: 2) (#3361)
• 2e78244 fix(gpu): force disable eBPF probes (#3302)
• 44022c3 fix(kubectl-datadog): treat any ResourceNotFoundException as "no Pod Identity addon" (#3560) (#3564)
• a34b58e fix: always grant csidrivers RBAC to the DCA (#3485) (#3507)
• 59f65ad fix: disable service discovery on cluster checks runners (#3532) (#3535)
• 97c4b8a fix: route process checks to process-agent on Windows (#3474) (#3483)
• 6ae8e19 include selinux-type annotation to dap (#3402)
• 1549c93 move CI to ddoghq/images instead of DataDog/images (#3446)
• 072a745 remove functions that were never used (#3365)
• c40db5d remove unused builder files (#3364)
• 184ccc8 remove unused functions after 2912 (#3370)
• f0365d3 remove unused functions since #1286 (#3366)
• 8b833c2 rename files (#3377)
• 9b7ce95 update docs after rename (#3386)