v1.32.0-rc.1

Changelog

• 44b22e4 Add BYOC and Worker defaults and runtime validation (#3554)
• 8e3c1d2 Add BYOC controller (#3562)
• 4f78aed Add BYOC release and image resolution (#3527)
• 324dd04 Add BYOC resource generation (#3556)
• 1c20803 Add DatadogBYOCCluster API and CRD (#3501)
• 754ee46 Add Kueue feature (#3563)
• b152e10 Add Observability Pipelines Worker CRD and named BYOC pipelines (#3531)
• c458aed Add Observability Pipelines Worker controller (#3587)
• 7dd75bb Add Observability Pipelines Worker resource generation (#3569)
• ea4ecc1 Add apm-backend to merge queue authorized teams [BYOCAPM-173] (#3612)
• 6092cbd Add config value for KSM sharding (#3625)
• 94841e1 Add kubeactions par + rc config (#3618)
• 6cada9b Add logs-cloudprem as code owner for BYOC and OPW (#3582)
• d4d1a42 Add operator user agent to Datadog API clients (#3658)
• 4b96dfe Always mount /opt/datadog-agent/run in all Agent containers (#3502)
• 91973a9 Avoid Go-specific JSON diagnostics in annotation validation tests (#3616)
• bb7df0a Avoid metricsForwarder connection pile-up under network pressure (#3498)
• bc91d51 BARX-2051: publish Red Hat images with the redhat tag instead of the registry id (#3515)
• 1e5d5ba Bump Go to 1.26.9 (#3606)
• 7bbf499 Bump golang.org/x/net to v0.60.0 (#3608)
• 7a54239 Bump golang.org/x/net to v0.61.0 and related dependencies (#3629)
• 7a30c78 Bump golangci-lint to v2.15.0 for Go 1.27 support (#3620)
• 149651e Check DDAI reconciliation errors in operator check (#3548)
• d917a21 Default PAR to split mode with explicit opt-out and monolithic fallback below Agent 7.84 (#3600)
• 466f351 Enable config sync when CWS or CSPM sends from the system-probe (#3599)
• fff1cb2 Expose configuration for event collection mode (#3642)
• eff21e4 Extend openshift provider-based config overrides (#3511)
• 0f5dbf4 Fleet experiment decoupling from ControllerRevision (#3433)
• e418672 Make managed EKS installation site-agnostic (#3572)
• b0cc1ef Make publish_community_operators only depend on publish_redhat_public_tag (#3584)
• 2c6674a Manage the kubectl-datadog OIDC provider in the CloudFormation stack (#3632)
• 31b4b92 Migrate k8s-datadog-agent-ops to the ddoghq GitHub org (#3470)
• 71c6651 Move FHP config to CRD (#3591)
• 781d560 Native SGC support for the operator (#3231)
• 648904f Raise BYOC startup probe budget to 5 minutes (#3621)
• aefecd2 Raise default Data Plane minimum Agent version to 7.84 (#3544)
• 421bd47 Reapply "move CI to ddoghq/images instead of DataDog/images (#3446)" (#3455) (#3476)
• 1d5728d Reconcile Observability Pipelines Workers from DatadogBYOCCluster pipelines (#3617)
• 099b860 Remove dormant DatadogAgent deployment reconciliation (#3659)
• 64deddd Reorganize BYOC resources package files (#3660)
• cd8deec Restore shared Go dependency and build caches for E2E jobs (#3637)
• 12f1f86 Revert "Always mount /opt/datadog-agent/run in all Agent containers (#3502)" (#3503)
• c341dd8 Scope profile label removal on nodes to deleted profile only in DDAI (#3643)
• f9af115 Split BYOC component workloads behind a workload interface (#3656)
• 85ac832 Support Control Plane Monitoring for Talos provider (#3542)
• 216cd5b Sync operator 1.31.2 bundle to main (#3646)
• 079275a Update EKS addon to 1.31.2 (#3647)
• c505ab2 Update FIPS proxy version references to 1.1.31 (#3540)
• 258d7a5 Update FIPS proxy version references to 1.1.32 (#3626)
• 86ebcb7 Update GCP marketplace chart and operator image to 1.31.0 (#3581)
• a433d7f Update Golang to 1.26.10 (#3627)
• 183f2de Update default Agent to 7.84.1 (#3545)
• 6016a55 Update go dependencies (#3517)
• b5a1d9a Use Datadog Operator product name in API user agent (#3662)
• eb6a3d0 Use default permissions in Dockerfile binaries and pin the owner group to root (#3525)
• 7ff161f Use only the system-probe by default for CWS and CSPM (#3467)
• 682d713 [ACTP] allow dev images for PAR split mode (#3533)
• 8b6b4b1 [BYOCAPM-159] Add DatadogBYOCCluster spec.signal for traces clusters (#3576)
• c4da283 [CASCL-1386] Document the autoscaling cluster sub-commands (#3404)
• 535c2f6 [CONS-11950] Apply global.registry to the managed CSI driver image (#3486)
• db02a57 [CONTP-1777] Run nightly Autopilot QA in a detached pipeline (#3668)
• 3ebd184 [CONTP-2030] Operator monitors DCA and CLC health (#3487)
• defe717 [CONTP-2031] Implement e2e tests for Component Health (#3592)
• 628bcb6 [CONTP-2091] fix: grant DCA access to the default sidecar secret (#3509)
• 96f9842 [CONTP-2101] Decouple internal rc-latest publishing (#3481)
• 55bb4bc [CONTP-2114] send config in helm metadata as json vs yaml (#3500)
• 4f36a3d [CONTP-2118] Reapply "Always mount /opt/datadog-agent/run in all Agent containers … (#3506)
• 0e4c809 [CONTP-2125] Add opt-in APM tracing for DDA and DDAI reconciles (#3537)
• 438d545 [CONTP-2136] Implement componenthealth snapshot emitter (#3536)
• 691fc70 [CONTP-2142] Use context logging throughout the DatadogAgent controller (#3649)
• 0acc03d [CONTP-2159] Align Operator profiling and tracing service names (#3648)
• f2a6d73 [CONTP-2166] Add opt-in jemalloc feature for node Agents (#3613)
• e19042a [CONTP-2213] Extend GKE Autopilot collection E2E coverage (#3640)
• df9ea95 [Host Profiler][PROF-15459] Add annotation to deploy as dd-agent (#3430)
• a71cc66 [Host-Profiler] Carry over annotation-enabled seccomp profile to overrides (#3539)
• 722ab7a [chore] Update go-license to v2 for perf (#3512)
• 4b4a1d4 [tooling] Consolidate core CI checks in one pod (#3513)
• 5d6bb90 add node agent feature errors to ddai status (#3652)
• 2cd33b2 chore(bundle): regenerate for v1.32.0-rc.1 (#3670)
• 7d55605 chore(bundle): sync bundle to v1.31.0 on main (#3580)
• a27e50c chore(deps): batch renovate dependency upgrades (github-actions major, otel security) (#3604)
• debbb1b chore(e2e): test Kubernetes 1.36 (#3496)
• a054dcb chore(eks-addon): release operator-eks-addon 0.1.32 for Operator 1.31.0 (#3579)
• b5af0bd chore: remove jmxMetrics fields (#3575)
• cb0aca0 chore: remove manual eMudhra CA workaround (#3655)
• dbe132e ci: use images tmpl-v5 for the operator image (#3577)
• 5ea3d30 delete unschedulable pods that don't match node profile (#3644)
• 510d670 enhance: add autodiscovery check fields. (#3568)
• 151d1b5 feat(apm): add on-demand SSI for Cluster Agent (#3372)
• 6d3d7af feat(csi): expose APM registry allow list (#3543)
• 9658c1c feat(kubectl-datadog): refuse long cluster names (#3578)
• 3e90dd3 feat(nodeagent): add DD_POD_NAME as env var (#3641)
• 042298f feat: add NodeSelector for host-profiler deployments (#3479)
• 2758f33 fix(acr): enable ADP check source when ACR is enable (#3471)
• 97ab698 fix(ci): fix broken e2e skip for release-bundle merge-queue PRs (#3488)
• 5131d33 fix(deps): update OpenTelemetry to v1.45.0 (#3493)
• ddb9385 fix(kubectl-datadog): treat any ResourceNotFoundException as "no Pod Identity addon" (#3560)
• e45ccf1 fix: always grant csidrivers RBAC to the DCA (#3485)
• 2e5375a fix: disable service discovery on cluster checks runners (#3532)
• b53421d fix: distrust roots used by compromised eMudhra intermediates (#3635)
• fec79b1 fix: preserve remote resource IDs on stale status conflicts (#3654)
• b0fd759 fix: route process checks to process-agent on Windows (#3474)
• f342f3d test(e2e): run autoscaling suite on a max-length cluster name (#3557)