otel(packetbeat): add OTel status reporting and integration tests

[mauri870]

Proposed commit message

Thread the OTel status factory wrapper so the receiver can report per-input StatusOK events to the OTel host. Add SetStatusReporter to processor so the wrapper can inject a sub-reporter after runner creation.

Also add integration test coverage for the packetbeat OTel receiver:

• Rewrite pbreceiver unit tests to replay pre-recorded pcap files (no root/npcap required); add MockHost event history so TestReceiverStatus can verify StatusOK was reported even when the pcap finishes fast

• Add docker-compose.yml, GoIntegTest mage target, and CI pipeline step

• Add tests/integration/otel_test.go with pcap-based E2E tests (single receiver, multiple receivers, standalone-vs-receiver ES comparison) and explicit live-interface tests that skip without root

Checklist

• My code follows the style guidelines of this project
• I have commented my code, particularly in hard-to-understand areas
• I have made corresponding changes to the documentation
• I have made corresponding change to the default configuration files
• I have added tests that prove my fix is effective or that my feature works. Where relevant, I have used the stresstest.sh script to run them under stress conditions and race detector to verify their stability.
• I have added an entry in ./changelog/fragments using the changelog tool.

How to test this PR locally

cd x-pack/packetbeat
mage docker:composeUp
mage goIntegTest

# Live tests that don't run on CI, capturing packets from a network interface (requires sudo)
(go test -c -tags integration -o x-pack/packetbeat/tests/integration/pb_integration.test ./x-pack/packetbeat/tests/integration/ && cd x-pack/packetbeat/tests/integration && sudo ./pb_integration.test -test.run 'TestPacketbeatOTelLiveInterfaceE2E|TestPacketbeatOTelLiveInterfaceMultipleReceiversE2E' && echo $?)

Related issues

• For https://github.com/elastic/ingest-dev/issues/7385.

[github-actions]

🤖 GitHub comments

Just comment with:

• run docs-build : Re-trigger the docs validation. (use unformatted text in the comment!)
• /test : Run the Buildkite pipeline.

[infra-vault-gh-plugin-prod]

Pinging @elastic/elastic-agent-data-plane (Team:Elastic-Agent-Data-Plane)

[coderabbitai]

Note

Reviews paused

It looks like this branch is under active development. To avoid overwhelming you with review comments due to an influx of new commits, CodeRabbit has automatically paused this review. You can configure this behavior by changing the reviews.auto_review.auto_pause_after_reviewed_commits setting.

Use the following commands to manage reviews:

• @coderabbitai resume to resume automatic reviews.
• @coderabbitai review to trigger a single review.

Use the checkboxes below for quick actions:

• ▶️ Resume reviews
• 🔍 Trigger review

📝 Walkthrough

Walkthrough

The PR wires OTel status reporting through the Packetbeat beater layer: packetbeat.go stores the beat's logger, builds a cfgfile.RunnerFactory with optional OTel wrapping, and passes it into refactored runStatic/runManaged (both now accept the interface type); runManaged replaces Manager.Start() with PreInit/PostInit. processor.go adds a sync.RWMutex around status reporter access. reloader.go accepts cfgfile.RunnerFactory. The oteltest.MockHost gains full event history tracking and CheckReceivers validates against that history. pbreceiver tests switch to pcap-based inputs with LogsSink assertions and a new TestReceiverStatus. A new E2E integration suite, Docker Compose setup, GoIntegTest mage target, and CI pipeline step complete the change.

🚥 Pre-merge checks | ✅ 2

✅ Passed checks (2 passed)

Check name	Status	Explanation
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests

• 🛠️ Update Documentation

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[coderabbitai]

Caution

Failed to replace (edit) comment. This is likely due to insufficient permissions or the comment being deleted.

Error details

{}

[mauri870]

@elastic/sec-linux-platform Can I get a review from your team? Thanks.

[nicholasberlin]

LGTM (and the bot)

[mauri870]

@leehinman Could you take a look when you have a chance? Thanks!