Skip to content

[AI-6502] migrate test-target to dd-sts #24025

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
sarah-witt merged 7 commits into from
Jul 15, 2026
Merged

[AI-6502] migrate test-target to dd-sts #24025

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
7 commits
Select commit Hold shift + click to select a range
46c9c85
migrate test-target to dd-sts
sarah-witt Jun 11, 2026
1a4dcbe
Merge branch 'master' into sarah.witt/migrate-test-target-dd-sts
sarah-witt Jun 15, 2026
be64879
Merge branch 'master' into sarah.witt/migrate-test-target-dd-sts
sarah-witt Jun 23, 2026
6e4a570
add permissions
sarah-witt Jun 24, 2026
80ff38e
Merge branch 'sarah.witt/migrate-test-target-dd-sts' of github.com:Da…
sarah-witt Jun 24, 2026
0cf17d2
fix
sarah-witt Jun 24, 2026
bab7a13
add to callers
sarah-witt Jun 26, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 2 additions & 0 deletions .github/workflows/flaky-tests-windows.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -34,6 +34,8 @@ jobs:
permissions:
# needed for compute-matrix in test-target.yml
contents: read
# needed for dd-sts in test-target.yml
id-token: write

publish-test-results:
needs:
Expand Down
2 changes: 2 additions & 0 deletions .github/workflows/flaky-tests.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -38,6 +38,8 @@ jobs:
permissions:
# needed for compute-matrix in test-target.yml
contents: read
# needed for dd-sts in test-target.yml
id-token: write

publish-test-results:
needs:
Expand Down
2 changes: 2 additions & 0 deletions .github/workflows/master-windows.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -52,6 +52,8 @@ jobs:
permissions:
# needed for compute-matrix in test-target.yml
contents: read
# needed for dd-sts in test-target.yml
id-token: write

publish-test-results:

Expand Down
2 changes: 2 additions & 0 deletions .github/workflows/master.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -50,6 +50,8 @@ jobs:
permissions:
# needed for compute-matrix in test-target.yml
contents: read
# needed for dd-sts in test-target.yml
id-token: write

publish-test-results:
needs:
Expand Down
2 changes: 2 additions & 0 deletions .github/workflows/nightly-base-package-windows.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -19,6 +19,8 @@ jobs:
permissions:
# needed for compute-matrix in test-target.yml
contents: read
# needed for dd-sts in test-target.yml
id-token: write

with:
repo: core
Expand Down
2 changes: 2 additions & 0 deletions .github/workflows/nightly-base-package.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -17,6 +17,8 @@ jobs:
permissions:
# needed for compute-matrix in test-target.yml
contents: read
# needed for dd-sts in test-target.yml
id-token: write

with:
repo: core
Expand Down
2 changes: 2 additions & 0 deletions .github/workflows/pr-all-windows.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -28,6 +28,8 @@ jobs:
permissions:
# needed for compute-matrix in test-target.yml
contents: read
# needed for dd-sts in test-target.yml
id-token: write

with:
repo: core
Expand Down
2 changes: 2 additions & 0 deletions .github/workflows/pr-all.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -29,6 +29,8 @@ jobs:
permissions:
# needed for compute-matrix in test-target.yml
contents: read
# needed for dd-sts in test-target.yml
id-token: write

with:
repo: core
Expand Down
10 changes: 10 additions & 0 deletions .github/workflows/pr-test.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -61,6 +61,11 @@ jobs:
python-version: "${{ inputs.python-version }}"
pytest-args: ${{ inputs.pytest-args }}
secrets: inherit
permissions:
# needed for compute-matrix in test-target.yml
contents: read
# needed for dd-sts in test-target.yml
id-token: write

test-minimum-base-package:
needs:
Expand Down Expand Up @@ -93,6 +98,11 @@ jobs:
pytest-args: ${{ inputs.pytest-args }}
context: "pr"
secrets: inherit
permissions:
# needed for compute-matrix in test-target.yml
contents: read
# needed for dd-sts in test-target.yml
id-token: write

save-event:
needs:
Expand Down
2 changes: 2 additions & 0 deletions .github/workflows/test-agent-target.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -65,3 +65,5 @@ jobs:
permissions:
# needed for compute-matrix in test-target.yml
contents: read
# needed for dd-sts in test-target.yml
id-token: write
2 changes: 2 additions & 0 deletions .github/workflows/test-agent-windows.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -53,3 +53,5 @@ jobs:
permissions:
# needed for compute-matrix in test-target.yml
contents: read
# needed for dd-sts in test-target.yml
id-token: write
2 changes: 2 additions & 0 deletions .github/workflows/test-agent.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -53,3 +53,5 @@ jobs:
permissions:
# needed for compute-matrix in test-target.yml
contents: read
# needed for dd-sts in test-target.yml
id-token: write
6 changes: 6 additions & 0 deletions .github/workflows/test-all-windows.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -63,6 +63,12 @@ on:
default: "standard"
type: string

permissions:
# needed for compute-matrix in test-target.yml
contents: read
# needed for dd-sts in test-target.yml
id-token: write

jobs:
j6712d43:
uses: ./.github/workflows/test-target.yml
Expand Down
6 changes: 6 additions & 0 deletions .github/workflows/test-all.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -61,6 +61,12 @@ on:
default: "standard"
type: string

permissions:
# needed for compute-matrix in test-target.yml
contents: read
# needed for dd-sts in test-target.yml
id-token: write

jobs:
jd316aba:
uses: ./.github/workflows/test-target.yml
Expand Down
15 changes: 12 additions & 3 deletions .github/workflows/test-target.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -102,6 +102,8 @@ jobs:
permissions:
# needed for compute-matrix in test-target.yml
contents: read
# needed for dd-sts to fetch a temporary API key via OIDC
id-token: write
Comment thread
sarah-witt marked this conversation as resolved.
Comment thread
sarah-witt marked this conversation as resolved.
Comment thread
sarah-witt marked this conversation as resolved.
steps:

- name: Set up Windows
Expand Down Expand Up @@ -159,6 +161,13 @@ jobs:
# Use a specific sub-folder
path: core-temp

- name: Get Datadog credentials
if: github.event.pull_request.head.repo.fork != true
Comment thread
sarah-witt marked this conversation as resolved.
Comment thread
sarah-witt marked this conversation as resolved.
id: dd-sts
uses: DataDog/dd-sts-action@2e8187910199bd93129520183c093e19aa585c75 # v1.0.0
with:
policy: integrations-test-target-api-key

- name: Install workflow scripts (core)
if: inputs.repo == 'core'
uses: ./.github/actions/setup-test-target-scripts
Expand Down Expand Up @@ -220,7 +229,7 @@ jobs:
INPUT_JOB_NAME: "${{ inputs.job-name }}${{ inputs.target-env && format('-{0}', inputs.target-env) || '' }}"
INPUT_PYTEST_ARGS: ${{ inputs.pytest-args }}
INPUT_IS_FORK: ${{ github.event.pull_request.head.repo.fork || false }}
DD_API_KEY_SECRET: ${{ secrets.DD_API_KEY }}
DD_API_KEY_SECRET: ${{ steps.dd-sts.outputs.api_key }}
SETUP_ENV_VARS: ${{ inputs.setup-env-vars }}
DOCKER_USERNAME: ${{ secrets.DOCKER_USERNAME }}
DOCKER_ACCESS_TOKEN: ${{ secrets.DOCKER_ACCESS_TOKEN }}
Expand All @@ -230,12 +239,12 @@ jobs:
DD_GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

- name: Tag job for CI Visibility
# Skip on fork PRs and non-core repos since secrets won't be available
# Skip on fork PRs and non-core repos since dd-sts credentials won't be available
if: env.INPUT_IS_FORK != 'true' && env.INPUT_REPO == 'core'
uses: ./.github/actions/tag-job
with:
tags: ${{ env.DD_TAGS }}
dd_api_key: ${{ secrets.DD_API_KEY }}
dd_api_key: ${{ steps.dd-sts.outputs.api_key }}
dd_site: ${{ env.DD_SITE }}

- name: Set up Python 2.7
Expand Down
2 changes: 2 additions & 0 deletions .github/workflows/weekly-latest-windows.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -20,3 +20,5 @@ jobs:
permissions:
# needed for compute-matrix in test-target.yml
contents: read
# needed for dd-sts in test-target.yml
id-token: write
2 changes: 2 additions & 0 deletions .github/workflows/weekly-latest.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -18,3 +18,5 @@ jobs:
permissions:
# needed for compute-matrix in test-target.yml
contents: read
# needed for dd-sts in test-target.yml
id-token: write
Loading