v1.27.0-rc.2

Changelog

• 79c0824 (No-op) SA1019: Remove deprecated functions usage (#2478)
• c08166e Add KILL capability to CSPM container (#2931)
• ab3acdb Add SBOM enrichment usage CRD field for "package in use" feature (#2908)
• f41ef99 Add cache namespace options for DatadogCSIDriver controller (#2934)
• c7b7f58 Add code-coverage.datadog.yml (#2893)
• 0dcbf67 Add experiment signals to fleet remote config (#2872)
• 97a7761 Add writev and shutdown to system-probe seccomp profile (#2986)
• 540be47 Align tmp/run volume names and remove system-probe DogStatsD mount (#2985)
• 41dddf7 Always clean DDA before next test to avoid races (#2954)
• d09fcb3 Avoid RBAC errors when Operator can't list or watch ConfigMaps (#2889)
• 039572f Comment out flaky test (#2932)
• 9678903 Fix AppArmor annotations for absent containers in annotation overrides (#2897)
• a97d1de Fix CVE 2026-39820: bump golang (#3003) (#3005)
• 658de74 Migrate kubectl-datadog autoscaling cluster to client-go pager (#2960)
• 881aa65 Refactor experiment signals (#2944) (#3016)
• d94085f Remove DatadogAgentEnabled flag (#2912)
• b066672 Restore system-probe DSD socket volumeMount (#3001) (#3006)
• 8653f51 Revert "feat: Add APM to DatadogInstrumentation CRD (#2984)" (#3015) (#3017)
• 4e9c1ab Sync operator 1.26.0 bundle to main (#2972)
• 59f9e3d Update Chaingaurd for Release Worker (#2977)
• 56159c6 Update CLAUDE.md to reference AGENTS.md and lean out AGENTS.md replacing agent.md (#2905)
• ef88adb Update code-owners to otel-agent team and move QA cards to their board (#2895)
• d5f00bf Update default Agent version to 7.78.1 and update CSI default tag to 1.2.2 (#2939)
• 4c230b1 Update the documented fips-proxy image tag to latest 1.1.23 release (#2951)
• c2069ff Upgrade karpenter-provider-aws from v1.3.6 to v1.9.0 (#2888)
• c816592 Use dd-sts OIDC token exchange instead of DD_API_KEY repo secret (#2873)
• b0aad13 Validate AWS account consistency before Karpenter operations (#2892)
• 94725a1 [CASCL-1292] Add Fargate mode to kubectl-datadog install (#2891)
• 654839d [CASCL-1304] Snapshot node managers in ConfigMap during install (#2945)
• 099f33f [CASCL-1305] No-op kubectl-datadog install on a foreign Karpenter (#2949)
• d3652e6 [CASCL-1323] Add update subcommand to kubectl-datadog autoscaling cluster (#2976)
• aad76e3 [CASCL-1323] Extract generic FindKarpenterInstallation helper (#2970)
• 35814b5 [CASCL-1323] chore(kubectl-datadog): split autoscaling install.go into smaller files (#2968)
• abc96a5 [CONS-8253] Propagate DDGR finalizer error (#2919)
• 927e76e [CONTP-1335] organize finalizers (#2879)
• 4fe811a [CONTP-1502] chore: Refresh secrets on reconcile instead of callbacks (#2916)
• e3f69bf [CONTP-1504] Manage DatadogCSIDriver from DatadogAgent (#2857)
• a646370 [CONTP-1547] Push rc-latest mutable image tags from Operator GitLab pipeline (#2903)
• 99a6fc8 [CONTP-1604] When user updates k8s genericresource, force re-create if deleted (#2909)
• 6e2c0c9 [CONTP-1605] [DDGR] Use context based logging and reconcile once, no double get (#2910)
• dcbf3bf [CONTP-1606] [DDGR] Reduce boilerplate: CreateResult, stateful handlers, handler registry (#2911)
• 3628a15 [CONTP-1656] Add datadog instrumentation crd rbac perms (#2975)
• d1d2b65 [CONTP-1656] feat: Add DatadogInstrumentation CRD (#2962)
• 3c567c5 [DOCS-14086] Use dynamic site parameter in Operator config docs (#2978)
• 4c40cf4 [VULN-62334] Update helm.sh/helm/v3 dependency to v3.20.2 (#2969)
• f1faf64 [datadog-operator] Release EKS-addon v1.25.0 (#2881)
• ed1b311 [datadog-operator] Release v1.25.0 Google Marketplace (#2896)
• 1ed0fbc [feature][autoscaling] add Spot scheduling feature and update RBAC (#2957)
• e49c18f kubectl-datadog: delegate OCI image parsing to go-containerregistry (#2971)
• 78490c3 chore: OperatorRelease worker permissions (#2943)
• f11b43c chore: transfer dataplane feature ownership and register agent-data-plane team (#2929)
• 6be3f12 discovery: enable by default on agents >= 7.78 (#2915)
• d3e7b0d dogstatsd: drop DD_USE_DOGSTATSD=false override when dataPlane handles DSD (#2965)
• 953ade2 enhancement: default dataPlane.dogstatsd.enabled to true (#2935)
• 9c04e3d feat(DPA): Add options.burstable + CPURequestsRemoveLimitsMemoryRequestsAndLimits controlled values (#2902)
• 7c966f8 feat(ddgr): add dashboard support (#2906)
• 849be07 feat: Add APM to DatadogInstrumentation CRD (#2984) (#2994)
• b6fdaa5 refacto: rename full-host-profiler to host-profiler (#2901)
• 083623f release v1.27.0-rc.1 (#2989)
• 8e158b7 release v1.27.0-rc.2 (#3018)

v1.27.0-rc.1

Changelog

• 79c0824 (No-op) SA1019: Remove deprecated functions usage (#2478)
• c08166e Add KILL capability to CSPM container (#2931)
• ab3acdb Add SBOM enrichment usage CRD field for "package in use" feature (#2908)
• f41ef99 Add cache namespace options for DatadogCSIDriver controller (#2934)
• c7b7f58 Add code-coverage.datadog.yml (#2893)
• 0dcbf67 Add experiment signals to fleet remote config (#2872)
• 97a7761 Add writev and shutdown to system-probe seccomp profile (#2986)
• 540be47 Align tmp/run volume names and remove system-probe DogStatsD mount (#2985)
• 41dddf7 Always clean DDA before next test to avoid races (#2954)
• d09fcb3 Avoid RBAC errors when Operator can't list or watch ConfigMaps (#2889)
• 039572f Comment out flaky test (#2932)
• 9678903 Fix AppArmor annotations for absent containers in annotation overrides (#2897)
• 658de74 Migrate kubectl-datadog autoscaling cluster to client-go pager (#2960)
• d94085f Remove DatadogAgentEnabled flag (#2912)
• 4e9c1ab Sync operator 1.26.0 bundle to main (#2972)
• 59f9e3d Update Chaingaurd for Release Worker (#2977)
• 56159c6 Update CLAUDE.md to reference AGENTS.md and lean out AGENTS.md replacing agent.md (#2905)
• ef88adb Update code-owners to otel-agent team and move QA cards to their board (#2895)
• d5f00bf Update default Agent version to 7.78.1 and update CSI default tag to 1.2.2 (#2939)
• 4c230b1 Update the documented fips-proxy image tag to latest 1.1.23 release (#2951)
• c2069ff Upgrade karpenter-provider-aws from v1.3.6 to v1.9.0 (#2888)
• c816592 Use dd-sts OIDC token exchange instead of DD_API_KEY repo secret (#2873)
• b0aad13 Validate AWS account consistency before Karpenter operations (#2892)
• 94725a1 [CASCL-1292] Add Fargate mode to kubectl-datadog install (#2891)
• 654839d [CASCL-1304] Snapshot node managers in ConfigMap during install (#2945)
• 099f33f [CASCL-1305] No-op kubectl-datadog install on a foreign Karpenter (#2949)
• d3652e6 [CASCL-1323] Add update subcommand to kubectl-datadog autoscaling cluster (#2976)
• aad76e3 [CASCL-1323] Extract generic FindKarpenterInstallation helper (#2970)
• 35814b5 [CASCL-1323] chore(kubectl-datadog): split autoscaling install.go into smaller files (#2968)
• abc96a5 [CONS-8253] Propagate DDGR finalizer error (#2919)
• 927e76e [CONTP-1335] organize finalizers (#2879)
• 4fe811a [CONTP-1502] chore: Refresh secrets on reconcile instead of callbacks (#2916)
• e3f69bf [CONTP-1504] Manage DatadogCSIDriver from DatadogAgent (#2857)
• a646370 [CONTP-1547] Push rc-latest mutable image tags from Operator GitLab pipeline (#2903)
• 99a6fc8 [CONTP-1604] When user updates k8s genericresource, force re-create if deleted (#2909)
• 6e2c0c9 [CONTP-1605] [DDGR] Use context based logging and reconcile once, no double get (#2910)
• dcbf3bf [CONTP-1606] [DDGR] Reduce boilerplate: CreateResult, stateful handlers, handler registry (#2911)
• 3628a15 [CONTP-1656] Add datadog instrumentation crd rbac perms (#2975)
• d1d2b65 [CONTP-1656] feat: Add DatadogInstrumentation CRD (#2962)
• 3c567c5 [DOCS-14086] Use dynamic site parameter in Operator config docs (#2978)
• 4c40cf4 [VULN-62334] Update helm.sh/helm/v3 dependency to v3.20.2 (#2969)
• f1faf64 [datadog-operator] Release EKS-addon v1.25.0 (#2881)
• ed1b311 [datadog-operator] Release v1.25.0 Google Marketplace (#2896)
• 1ed0fbc [feature][autoscaling] add Spot scheduling feature and update RBAC (#2957)
• e49c18f kubectl-datadog: delegate OCI image parsing to go-containerregistry (#2971)
• 78490c3 chore: OperatorRelease worker permissions (#2943)
• f11b43c chore: transfer dataplane feature ownership and register agent-data-plane team (#2929)
• 6be3f12 discovery: enable by default on agents >= 7.78 (#2915)
• d3e7b0d dogstatsd: drop DD_USE_DOGSTATSD=false override when dataPlane handles DSD (#2965)
• 953ade2 enhancement: default dataPlane.dogstatsd.enabled to true (#2935)
• 9c04e3d feat(DPA): Add options.burstable + CPURequestsRemoveLimitsMemoryRequestsAndLimits controlled values (#2902)
• 7c966f8 feat(ddgr): add dashboard support (#2906)
• b6fdaa5 refacto: rename full-host-profiler to host-profiler (#2901)
• 083623f release v1.27.0-rc.1 (#2989)

v1.26.0

Changelog

• ae90bec (fleet) add Fleet daemon boilerplate (#2670)
• d574470 Add 'otelAgentGateway' to list of override targets (#2790)
• 3d96136 Add DDA rollback functionality (#2838)
• 8931a7b Add Datadog code coverage upload (#2773)
• cb82673 Add IPC env vars to host profiler (#2806)
• 75232bf Add cache namespace options for DatadogCSIDriver controller (#2934) (#2940)
• e4190c2 Add deployment_type gateway (#2745)
• ed2b4df Add error-tracking monitor option to DatadogMonitor CRD. #2775 (#2843)
• 651ae77 Add experiment signals to fleet remote config (#2872) (#2920)
• b03c3fd Add feature codeowners (#2763)
• 21a8087 Add fleet as codeowners (#2777)
• bea964a Add flightrecorder feature to the operator (#2785)
• 8c060c4 Add host volume mounts and NET_RAW capability to PAR container (#2799)
• 61e7c1b Add standalone DatadogCSIDriver controller (#2856)
• 23b1350 Add support of vsock for intra agents communications (#2336)
• 62fdb06 Add time_slice SLO type support (#2875)
• 8fa2be8 Allow using FIPS variants of ddot-collector and agent -full images (#2605)
• 354f6ec Always clean DDA before next test to avoid races (#2954) (#2955)
• 35f861a Avoid RBAC errors when Operator can't list or watch ConfigMaps (#2889) (#2900)
• 444f938 Avoid RBAC errors when Operator can't list or watch Secrets (#2793)
• b9f0028 Bump actions/download-artifact from 8.0.0 to 8.0.1 (#2769)
• 567252b Bump codecov/codecov-action from 5.5.2 to 5.5.3 (#2814)
• 6785cc7 Bump go and grpc versions (#2789)
• b931f03 Bump golang to 1.25.8 (#2830)
• 284ce70 Bump otel dependencies, CVE-2026-24051 (#2869)
• bceb41f Bump softprops/action-gh-release from 2.5.0 to 2.6.1 (#2768)
• 40eb5c8 Clarify CSPM host benchmarks configuration hierarchy (#2765)
• 554029b Comment out flaky test (#2932) (#2933)
• 2eab729 Configure Renovate (#2833)
• a1206ff Create controller revisions for DDAs (#2767)
• a3c9251 DDQA config for Operator repo (#2762)
• 161fd4f Drop qa/skip-qa label in backport PRs (#2835)
• d7029b7 EKS add-on release for Operator 1.24.0 (#2757)
• 7d61c8e Fix AppArmor annotations for absent containers in annotation overrides (#2897) (#2899)
• f662670 Fix PAR cluster agent: use Args instead of Command for -E flag (#2864)
• eac82b0 Fix component logging and downgrade to debug (#2820)
• a312b88 Fix missing workqueue_* metrics in /metrics endpoint (#2772)
• 3e75166 Fix nightly (#2748)
• 5c29d8d Github workflow to add codeowner team labels (#2802)
• e0ba90e Improve Dockerfile to fasten build time (#2740)
• fa251de Improve Makefile: fix redundancies and optimize CI (#2741)
• 0887e50 Introduce DatadogPodAutoscalerClusterProfile CRD (#2794)
• 489abca Migrate deprecated runner tags (#2784)
• 951b12a No-op: remove EDS replace directive (#2749)
• a0dc8c0 Only add the AppArmor annotation if the container actually exists (#2834)
• 6145a19 Only use operator_nightly variable (#2755)
• 8669701 Pass context for ddai (#2759)
• 62a1d4b Reduce logging and use same logging format as other logs (#2870)
• e0fbfce Remove Dependabot configuration (#2812)
• 4a814a5 Remove NetworkStats sub-option from ServiceDiscovery feature (#2822)
• e7b30e7 Remove collector config from host profiler. (#2807)
• f6bad2a Remove default ResizePendingPeriod and RolloutFallbackDelay (#2801)
• 7b97864 Remove run subcommand from host profiler (#2808)
• 2655785 Replace Mode field of DPA with addition to Strategy field (#2787)
• 2b3594e Trim metadata logging and add logging fields (#2725)
• 4239d45 Update GCP marketplace chart and operator image to 1.24.0 (#2747)
• 5adfc81 Update base os from RHEL9 to RHEL10 (#2882)
• 8c58559 Update default Agent version to 7.78.1 and update CSI default tag to 1.2.2 (#2939) (#2941)
• 7fae85c Update golangci lint to latest (2.11.3) and fix violations (#2742)
• 75603ae Update repository.datadog.yml for MQ teams (#2845)
• 395974a Update to Go 1.25.9 (#2877)
• 6a0f976 [ACTP] Add k8s remediation RBAC rules for private action runner (#2770)
• 9b607f1 [ACTP] Fix PAR ConfigMap name for profile DDAIs (#2796)
• d134930 [ACTP] Fix PAR self_enroll Secret RBAC promoted to cluster-wide scope (#2781)
• f4f827e [AGENTRUN-1193] Update FIPS proxy version references to 1.1.22 (#2863)
• 40e907c [ARTSEC-INT] Update datadog-agent-buildimages to v102144341-64dad9f8 (#2779)
• 82e5a30 [CONS-8186] Implement DD_SLO_FORCE_SYNC_PERIOD for DatadogSLO (#2811)
• 3a7029c [CONTINT-5126] DPA and autoscaling RBAC updates (#2743)
• c0654ea [CONTP-1259] Add kubernetese use endpoint slices global with default true (#2825)
• 1b39bf6 [CONTP-1397] add admission controller probe configuration (#2720)
• 692c028 [CONTP-1428] Set necessary env vars on Cluster Agent when UDS is enabled. (#2839)
• e5cf461 [CONTP-1504] Manage DatadogCSIDriver from DatadogAgent (#2857) (#2938)
• c3d0d96 [CONTP-1547] Push rc-latest mutable image tags from Operator GitLab pipeline (#2903) (#2907)
• 8f7f141 [CXP-2639] Remove run_in_core_agent envvar override and cleanup (#2841)
• 15a35f5 [DatadogMonitor] Unregister metrics forwarder on finalization (#2804)
• 3ef9c91 [No-op] Use k8s utils ptr (#2865)
• 189f12c [OTAGENT-920] Set DD_OTELCOLLECTOR_INSTALLATION_METHOD on otel-agent container (#2846)
• c58e5d1 [PROF-14075] add profiling preset to upstream otel Helm config follow up (#2840)
• 52ba052 [datadog-operator] Expose DCA Agent Sidecar TLS Config (#2700)
• 60a4b9c [datadog-operator] Operator v1.25.0 Bundle Updates (#2876)
• 251c4d0 [datadog-operator] Update agent version v7.77.0 (#2788)
• 14f2c96 [datadog-operator] Update stable agent to v7.77.2 (#2860)
• 3c95679 add back ddr_workflow_id (#2756)
• de229a4 chore(deps): eol major upgrades — 10 packages (major: 1 · unstable: 4 · minor: 1 · patch: 4) (#2851)
• 8996e09 chore(deps): minor upgrades — 4 packages (minor: 1 · patch: 3) [api] (#2852)
• badcf9f chore(deps): minor upgrades — 7 packages (minor: 3 · patch: 4) [test/e2e] (#2853)
• 44f4524 feat(appsec): forward sidecar injection mode and istio-gateway config to cluster-agent (#2774)
• a350a29 fix(renovate): Adjust minimum release age condition (#2858)
• cd1a28a fix(renovate): Ignore unresolvable dependencies (#2859)
• 2f61357 release v1.26.0 (#2966)
• 6c7d6e8 release v1.26.0-rc.1 (#2884)
• 974005b release v1.26.0-rc.2 (#2921)
• d7d73cf release v1.26.0-rc.3 (#2942)

v1.26.0-rc.3

Changelog

• ae90bec (fleet) add Fleet daemon boilerplate (#2670)
• d574470 Add 'otelAgentGateway' to list of override targets (#2790)
• 3d96136 Add DDA rollback functionality (#2838)
• 8931a7b Add Datadog code coverage upload (#2773)
• cb82673 Add IPC env vars to host profiler (#2806)
• 75232bf Add cache namespace options for DatadogCSIDriver controller (#2934) (#2940)
• e4190c2 Add deployment_type gateway (#2745)
• ed2b4df Add error-tracking monitor option to DatadogMonitor CRD. #2775 (#2843)
• 651ae77 Add experiment signals to fleet remote config (#2872) (#2920)
• b03c3fd Add feature codeowners (#2763)
• 21a8087 Add fleet as codeowners (#2777)
• bea964a Add flightrecorder feature to the operator (#2785)
• 8c060c4 Add host volume mounts and NET_RAW capability to PAR container (#2799)
• 61e7c1b Add standalone DatadogCSIDriver controller (#2856)
• 23b1350 Add support of vsock for intra agents communications (#2336)
• 62fdb06 Add time_slice SLO type support (#2875)
• 8fa2be8 Allow using FIPS variants of ddot-collector and agent -full images (#2605)
• 35f861a Avoid RBAC errors when Operator can't list or watch ConfigMaps (#2889) (#2900)
• 444f938 Avoid RBAC errors when Operator can't list or watch Secrets (#2793)
• b9f0028 Bump actions/download-artifact from 8.0.0 to 8.0.1 (#2769)
• 567252b Bump codecov/codecov-action from 5.5.2 to 5.5.3 (#2814)
• 6785cc7 Bump go and grpc versions (#2789)
• b931f03 Bump golang to 1.25.8 (#2830)
• 284ce70 Bump otel dependencies, CVE-2026-24051 (#2869)
• bceb41f Bump softprops/action-gh-release from 2.5.0 to 2.6.1 (#2768)
• 40eb5c8 Clarify CSPM host benchmarks configuration hierarchy (#2765)
• 554029b Comment out flaky test (#2932) (#2933)
• 2eab729 Configure Renovate (#2833)
• a1206ff Create controller revisions for DDAs (#2767)
• a3c9251 DDQA config for Operator repo (#2762)
• 161fd4f Drop qa/skip-qa label in backport PRs (#2835)
• d7029b7 EKS add-on release for Operator 1.24.0 (#2757)
• 7d61c8e Fix AppArmor annotations for absent containers in annotation overrides (#2897) (#2899)
• f662670 Fix PAR cluster agent: use Args instead of Command for -E flag (#2864)
• eac82b0 Fix component logging and downgrade to debug (#2820)
• a312b88 Fix missing workqueue_* metrics in /metrics endpoint (#2772)
• 3e75166 Fix nightly (#2748)
• 5c29d8d Github workflow to add codeowner team labels (#2802)
• e0ba90e Improve Dockerfile to fasten build time (#2740)
• fa251de Improve Makefile: fix redundancies and optimize CI (#2741)
• 0887e50 Introduce DatadogPodAutoscalerClusterProfile CRD (#2794)
• 489abca Migrate deprecated runner tags (#2784)
• 951b12a No-op: remove EDS replace directive (#2749)
• a0dc8c0 Only add the AppArmor annotation if the container actually exists (#2834)
• 6145a19 Only use operator_nightly variable (#2755)
• 8669701 Pass context for ddai (#2759)
• 62a1d4b Reduce logging and use same logging format as other logs (#2870)
• e0fbfce Remove Dependabot configuration (#2812)
• 4a814a5 Remove NetworkStats sub-option from ServiceDiscovery feature (#2822)
• e7b30e7 Remove collector config from host profiler. (#2807)
• f6bad2a Remove default ResizePendingPeriod and RolloutFallbackDelay (#2801)
• 7b97864 Remove run subcommand from host profiler (#2808)
• 2655785 Replace Mode field of DPA with addition to Strategy field (#2787)
• 2b3594e Trim metadata logging and add logging fields (#2725)
• 4239d45 Update GCP marketplace chart and operator image to 1.24.0 (#2747)
• 5adfc81 Update base os from RHEL9 to RHEL10 (#2882)
• 8c58559 Update default Agent version to 7.78.1 and update CSI default tag to 1.2.2 (#2939) (#2941)
• 7fae85c Update golangci lint to latest (2.11.3) and fix violations (#2742)
• 75603ae Update repository.datadog.yml for MQ teams (#2845)
• 395974a Update to Go 1.25.9 (#2877)
• 6a0f976 [ACTP] Add k8s remediation RBAC rules for private action runner (#2770)
• 9b607f1 [ACTP] Fix PAR ConfigMap name for profile DDAIs (#2796)
• d134930 [ACTP] Fix PAR self_enroll Secret RBAC promoted to cluster-wide scope (#2781)
• f4f827e [AGENTRUN-1193] Update FIPS proxy version references to 1.1.22 (#2863)
• 40e907c [ARTSEC-INT] Update datadog-agent-buildimages to v102144341-64dad9f8 (#2779)
• 82e5a30 [CONS-8186] Implement DD_SLO_FORCE_SYNC_PERIOD for DatadogSLO (#2811)
• 3a7029c [CONTINT-5126] DPA and autoscaling RBAC updates (#2743)
• c0654ea [CONTP-1259] Add kubernetese use endpoint slices global with default true (#2825)
• 1b39bf6 [CONTP-1397] add admission controller probe configuration (#2720)
• 692c028 [CONTP-1428] Set necessary env vars on Cluster Agent when UDS is enabled. (#2839)
• e5cf461 [CONTP-1504] Manage DatadogCSIDriver from DatadogAgent (#2857) (#2938)
• c3d0d96 [CONTP-1547] Push rc-latest mutable image tags from Operator GitLab pipeline (#2903) (#2907)
• 8f7f141 [CXP-2639] Remove run_in_core_agent envvar override and cleanup (#2841)
• 15a35f5 [DatadogMonitor] Unregister metrics forwarder on finalization (#2804)
• 3ef9c91 [No-op] Use k8s utils ptr (#2865)
• 189f12c [OTAGENT-920] Set DD_OTELCOLLECTOR_INSTALLATION_METHOD on otel-agent container (#2846)
• c58e5d1 [PROF-14075] add profiling preset to upstream otel Helm config follow up (#2840)
• 52ba052 [datadog-operator] Expose DCA Agent Sidecar TLS Config (#2700)
• 60a4b9c [datadog-operator] Operator v1.25.0 Bundle Updates (#2876)
• 251c4d0 [datadog-operator] Update agent version v7.77.0 (#2788)
• 14f2c96 [datadog-operator] Update stable agent to v7.77.2 (#2860)
• 3c95679 add back ddr_workflow_id (#2756)
• de229a4 chore(deps): eol major upgrades — 10 packages (major: 1 · unstable: 4 · minor: 1 · patch: 4) (#2851)
• 8996e09 chore(deps): minor upgrades — 4 packages (minor: 1 · patch: 3) [api] (#2852)
• badcf9f chore(deps): minor upgrades — 7 packages (minor: 3 · patch: 4) [test/e2e] (#2853)
• 44f4524 feat(appsec): forward sidecar injection mode and istio-gateway config to cluster-agent (#2774)
• a350a29 fix(renovate): Adjust minimum release age condition (#2858)
• cd1a28a fix(renovate): Ignore unresolvable dependencies (#2859)
• 6c7d6e8 release v1.26.0-rc.1 (#2884)
• 974005b release v1.26.0-rc.2 (#2921)
• d7d73cf release v1.26.0-rc.3 (#2942)

v1.26.0-rc.2

Changelog

• ae90bec (fleet) add Fleet daemon boilerplate (#2670)
• d574470 Add 'otelAgentGateway' to list of override targets (#2790)
• 3d96136 Add DDA rollback functionality (#2838)
• 8931a7b Add Datadog code coverage upload (#2773)
• cb82673 Add IPC env vars to host profiler (#2806)
• e4190c2 Add deployment_type gateway (#2745)
• ed2b4df Add error-tracking monitor option to DatadogMonitor CRD. #2775 (#2843)
• 651ae77 Add experiment signals to fleet remote config (#2872) (#2920)
• b03c3fd Add feature codeowners (#2763)
• 21a8087 Add fleet as codeowners (#2777)
• bea964a Add flightrecorder feature to the operator (#2785)
• 8c060c4 Add host volume mounts and NET_RAW capability to PAR container (#2799)
• 61e7c1b Add standalone DatadogCSIDriver controller (#2856)
• 23b1350 Add support of vsock for intra agents communications (#2336)
• 62fdb06 Add time_slice SLO type support (#2875)
• 8fa2be8 Allow using FIPS variants of ddot-collector and agent -full images (#2605)
• 35f861a Avoid RBAC errors when Operator can't list or watch ConfigMaps (#2889) (#2900)
• 444f938 Avoid RBAC errors when Operator can't list or watch Secrets (#2793)
• b9f0028 Bump actions/download-artifact from 8.0.0 to 8.0.1 (#2769)
• 567252b Bump codecov/codecov-action from 5.5.2 to 5.5.3 (#2814)
• 6785cc7 Bump go and grpc versions (#2789)
• b931f03 Bump golang to 1.25.8 (#2830)
• 284ce70 Bump otel dependencies, CVE-2026-24051 (#2869)
• bceb41f Bump softprops/action-gh-release from 2.5.0 to 2.6.1 (#2768)
• 40eb5c8 Clarify CSPM host benchmarks configuration hierarchy (#2765)
• 2eab729 Configure Renovate (#2833)
• a1206ff Create controller revisions for DDAs (#2767)
• a3c9251 DDQA config for Operator repo (#2762)
• 161fd4f Drop qa/skip-qa label in backport PRs (#2835)
• d7029b7 EKS add-on release for Operator 1.24.0 (#2757)
• 7d61c8e Fix AppArmor annotations for absent containers in annotation overrides (#2897) (#2899)
• f662670 Fix PAR cluster agent: use Args instead of Command for -E flag (#2864)
• eac82b0 Fix component logging and downgrade to debug (#2820)
• a312b88 Fix missing workqueue_* metrics in /metrics endpoint (#2772)
• 3e75166 Fix nightly (#2748)
• 5c29d8d Github workflow to add codeowner team labels (#2802)
• e0ba90e Improve Dockerfile to fasten build time (#2740)
• fa251de Improve Makefile: fix redundancies and optimize CI (#2741)
• 0887e50 Introduce DatadogPodAutoscalerClusterProfile CRD (#2794)
• 489abca Migrate deprecated runner tags (#2784)
• 951b12a No-op: remove EDS replace directive (#2749)
• a0dc8c0 Only add the AppArmor annotation if the container actually exists (#2834)
• 6145a19 Only use operator_nightly variable (#2755)
• 8669701 Pass context for ddai (#2759)
• 62a1d4b Reduce logging and use same logging format as other logs (#2870)
• e0fbfce Remove Dependabot configuration (#2812)
• 4a814a5 Remove NetworkStats sub-option from ServiceDiscovery feature (#2822)
• e7b30e7 Remove collector config from host profiler. (#2807)
• f6bad2a Remove default ResizePendingPeriod and RolloutFallbackDelay (#2801)
• 7b97864 Remove run subcommand from host profiler (#2808)
• 2655785 Replace Mode field of DPA with addition to Strategy field (#2787)
• 2b3594e Trim metadata logging and add logging fields (#2725)
• 4239d45 Update GCP marketplace chart and operator image to 1.24.0 (#2747)
• 5adfc81 Update base os from RHEL9 to RHEL10 (#2882)
• 7fae85c Update golangci lint to latest (2.11.3) and fix violations (#2742)
• 75603ae Update repository.datadog.yml for MQ teams (#2845)
• 395974a Update to Go 1.25.9 (#2877)
• 6a0f976 [ACTP] Add k8s remediation RBAC rules for private action runner (#2770)
• 9b607f1 [ACTP] Fix PAR ConfigMap name for profile DDAIs (#2796)
• d134930 [ACTP] Fix PAR self_enroll Secret RBAC promoted to cluster-wide scope (#2781)
• f4f827e [AGENTRUN-1193] Update FIPS proxy version references to 1.1.22 (#2863)
• 40e907c [ARTSEC-INT] Update datadog-agent-buildimages to v102144341-64dad9f8 (#2779)
• 82e5a30 [CONS-8186] Implement DD_SLO_FORCE_SYNC_PERIOD for DatadogSLO (#2811)
• 3a7029c [CONTINT-5126] DPA and autoscaling RBAC updates (#2743)
• c0654ea [CONTP-1259] Add kubernetese use endpoint slices global with default true (#2825)
• 1b39bf6 [CONTP-1397] add admission controller probe configuration (#2720)
• 692c028 [CONTP-1428] Set necessary env vars on Cluster Agent when UDS is enabled. (#2839)
• c3d0d96 [CONTP-1547] Push rc-latest mutable image tags from Operator GitLab pipeline (#2903) (#2907)
• 8f7f141 [CXP-2639] Remove run_in_core_agent envvar override and cleanup (#2841)
• 15a35f5 [DatadogMonitor] Unregister metrics forwarder on finalization (#2804)
• 3ef9c91 [No-op] Use k8s utils ptr (#2865)
• 189f12c [OTAGENT-920] Set DD_OTELCOLLECTOR_INSTALLATION_METHOD on otel-agent container (#2846)
• c58e5d1 [PROF-14075] add profiling preset to upstream otel Helm config follow up (#2840)
• 52ba052 [datadog-operator] Expose DCA Agent Sidecar TLS Config (#2700)
• 60a4b9c [datadog-operator] Operator v1.25.0 Bundle Updates (#2876)
• 251c4d0 [datadog-operator] Update agent version v7.77.0 (#2788)
• 14f2c96 [datadog-operator] Update stable agent to v7.77.2 (#2860)
• 3c95679 add back ddr_workflow_id (#2756)
• de229a4 chore(deps): eol major upgrades — 10 packages (major: 1 · unstable: 4 · minor: 1 · patch: 4) (#2851)
• 8996e09 chore(deps): minor upgrades — 4 packages (minor: 1 · patch: 3) [api] (#2852)
• badcf9f chore(deps): minor upgrades — 7 packages (minor: 3 · patch: 4) [test/e2e] (#2853)
• 44f4524 feat(appsec): forward sidecar injection mode and istio-gateway config to cluster-agent (#2774)
• a350a29 fix(renovate): Adjust minimum release age condition (#2858)
• cd1a28a fix(renovate): Ignore unresolvable dependencies (#2859)
• 6c7d6e8 release v1.26.0-rc.1 (#2884)
• 974005b release v1.26.0-rc.2 (#2921)

v1.26.0-rc.1

Changelog

• ae90bec (fleet) add Fleet daemon boilerplate (#2670)
• d574470 Add 'otelAgentGateway' to list of override targets (#2790)
• 3d96136 Add DDA rollback functionality (#2838)
• 8931a7b Add Datadog code coverage upload (#2773)
• cb82673 Add IPC env vars to host profiler (#2806)
• e4190c2 Add deployment_type gateway (#2745)
• ed2b4df Add error-tracking monitor option to DatadogMonitor CRD. #2775 (#2843)
• b03c3fd Add feature codeowners (#2763)
• 21a8087 Add fleet as codeowners (#2777)
• bea964a Add flightrecorder feature to the operator (#2785)
• 8c060c4 Add host volume mounts and NET_RAW capability to PAR container (#2799)
• 61e7c1b Add standalone DatadogCSIDriver controller (#2856)
• 23b1350 Add support of vsock for intra agents communications (#2336)
• 62fdb06 Add time_slice SLO type support (#2875)
• 8fa2be8 Allow using FIPS variants of ddot-collector and agent -full images (#2605)
• 444f938 Avoid RBAC errors when Operator can't list or watch Secrets (#2793)
• b9f0028 Bump actions/download-artifact from 8.0.0 to 8.0.1 (#2769)
• 567252b Bump codecov/codecov-action from 5.5.2 to 5.5.3 (#2814)
• 6785cc7 Bump go and grpc versions (#2789)
• b931f03 Bump golang to 1.25.8 (#2830)
• 284ce70 Bump otel dependencies, CVE-2026-24051 (#2869)
• bceb41f Bump softprops/action-gh-release from 2.5.0 to 2.6.1 (#2768)
• 40eb5c8 Clarify CSPM host benchmarks configuration hierarchy (#2765)
• 2eab729 Configure Renovate (#2833)
• a1206ff Create controller revisions for DDAs (#2767)
• a3c9251 DDQA config for Operator repo (#2762)
• 161fd4f Drop qa/skip-qa label in backport PRs (#2835)
• d7029b7 EKS add-on release for Operator 1.24.0 (#2757)
• f662670 Fix PAR cluster agent: use Args instead of Command for -E flag (#2864)
• eac82b0 Fix component logging and downgrade to debug (#2820)
• a312b88 Fix missing workqueue_* metrics in /metrics endpoint (#2772)
• 3e75166 Fix nightly (#2748)
• 5c29d8d Github workflow to add codeowner team labels (#2802)
• e0ba90e Improve Dockerfile to fasten build time (#2740)
• fa251de Improve Makefile: fix redundancies and optimize CI (#2741)
• 0887e50 Introduce DatadogPodAutoscalerClusterProfile CRD (#2794)
• 489abca Migrate deprecated runner tags (#2784)
• 951b12a No-op: remove EDS replace directive (#2749)
• a0dc8c0 Only add the AppArmor annotation if the container actually exists (#2834)
• 6145a19 Only use operator_nightly variable (#2755)
• 8669701 Pass context for ddai (#2759)
• 62a1d4b Reduce logging and use same logging format as other logs (#2870)
• e0fbfce Remove Dependabot configuration (#2812)
• 4a814a5 Remove NetworkStats sub-option from ServiceDiscovery feature (#2822)
• e7b30e7 Remove collector config from host profiler. (#2807)
• f6bad2a Remove default ResizePendingPeriod and RolloutFallbackDelay (#2801)
• 7b97864 Remove run subcommand from host profiler (#2808)
• 2655785 Replace Mode field of DPA with addition to Strategy field (#2787)
• 2b3594e Trim metadata logging and add logging fields (#2725)
• 4239d45 Update GCP marketplace chart and operator image to 1.24.0 (#2747)
• 5adfc81 Update base os from RHEL9 to RHEL10 (#2882)
• 7fae85c Update golangci lint to latest (2.11.3) and fix violations (#2742)
• 75603ae Update repository.datadog.yml for MQ teams (#2845)
• 395974a Update to Go 1.25.9 (#2877)
• 6a0f976 [ACTP] Add k8s remediation RBAC rules for private action runner (#2770)
• 9b607f1 [ACTP] Fix PAR ConfigMap name for profile DDAIs (#2796)
• d134930 [ACTP] Fix PAR self_enroll Secret RBAC promoted to cluster-wide scope (#2781)
• f4f827e [AGENTRUN-1193] Update FIPS proxy version references to 1.1.22 (#2863)
• 40e907c [ARTSEC-INT] Update datadog-agent-buildimages to v102144341-64dad9f8 (#2779)
• 82e5a30 [CONS-8186] Implement DD_SLO_FORCE_SYNC_PERIOD for DatadogSLO (#2811)
• 3a7029c [CONTINT-5126] DPA and autoscaling RBAC updates (#2743)
• c0654ea [CONTP-1259] Add kubernetese use endpoint slices global with default true (#2825)
• 1b39bf6 [CONTP-1397] add admission controller probe configuration (#2720)
• 692c028 [CONTP-1428] Set necessary env vars on Cluster Agent when UDS is enabled. (#2839)
• 8f7f141 [CXP-2639] Remove run_in_core_agent envvar override and cleanup (#2841)
• 15a35f5 [DatadogMonitor] Unregister metrics forwarder on finalization (#2804)
• 3ef9c91 [No-op] Use k8s utils ptr (#2865)
• 189f12c [OTAGENT-920] Set DD_OTELCOLLECTOR_INSTALLATION_METHOD on otel-agent container (#2846)
• c58e5d1 [PROF-14075] add profiling preset to upstream otel Helm config follow up (#2840)
• 52ba052 [datadog-operator] Expose DCA Agent Sidecar TLS Config (#2700)
• 60a4b9c [datadog-operator] Operator v1.25.0 Bundle Updates (#2876)
• 251c4d0 [datadog-operator] Update agent version v7.77.0 (#2788)
• 14f2c96 [datadog-operator] Update stable agent to v7.77.2 (#2860)
• 3c95679 add back ddr_workflow_id (#2756)
• de229a4 chore(deps): eol major upgrades — 10 packages (major: 1 · unstable: 4 · minor: 1 · patch: 4) (#2851)
• 8996e09 chore(deps): minor upgrades — 4 packages (minor: 1 · patch: 3) [api] (#2852)
• badcf9f chore(deps): minor upgrades — 7 packages (minor: 3 · patch: 4) [test/e2e] (#2853)
• 44f4524 feat(appsec): forward sidecar injection mode and istio-gateway config to cluster-agent (#2774)
• a350a29 fix(renovate): Adjust minimum release age condition (#2858)
• cd1a28a fix(renovate): Ignore unresolvable dependencies (#2859)
• 6c7d6e8 release v1.26.0-rc.1 (#2884)

v1.25.0

Changelog

• 088f6ad Add 10-minute heartbeat to CRD metadata forwarder to prevent backend TTL expiration (#2609)
• 052c983 Add DDAI doc and note about opt-out timeline (#2677)
• a577ddc Add EKS auto-mode pre-flight check to kubectl plugin install command (#2717)
• c7eb86e Add IPC env vars to host profiler (#2806) (#2827)
• d40ca9e Add Operator env var to default to Datadog registry (#2669)
• 2bf03a4 Add a warning for upcoming removal of datadogAgentInternalEnabled flag (#2660)
• f52c174 Add autoscaling cluster to kubectl-plugin (#2678)
• 081482d Add container autoscaling as codeowners for kubectl plugin doc (#2699)
• 60007ef Add host volume mounts and NET_RAW capability to PAR container (#2799) (#2828)
• 12a8d8c Allow e2e-autoscaling test to use Github token to avoid rate limits (#2707)
• a821a6d Allow injection-platform team to use MQ (#2708)
• 2889a34 Avoid RBAC errors when Operator can't list or watch Secrets (#2793) (#2800)
• 6fb0dc7 Bump EKS wrapper chart version to 0.1.24 (#2606)
• 2ced916 Bump github.com/DataDog/datadog-agent/test/e2e-framework in /test/e2e (#2647)
• aecae30 Bump github.com/DataDog/datadog-api-client-go/v2 from 2.34.0 to 2.55.0 (#2636)
• 232e661 Bump github.com/aws/aws-sdk-go-v2/service/cloudformation in /test/e2e (#2694)
• f391e33 Bump github.com/aws/smithy-go from 1.23.2 to 1.24.0 (#2545)
• a786298 Bump go and grpc versions (#2789) (#2792)
• 3e8b16b Bump golang to 1.25.8 (#2830) (#2831)
• 6fbf327 Bump k8s.io/apimachinery from 0.33.3 to 0.35.0 (#2540)
• 1eed71b Bump k8s.io/apimachinery in /test/e2e (#2566)
• 4cde134 Check milestone latest state and trigger workflow (#2619)
• b3e0783 Cleanup Host Profiler (#2485)
• 8b8f03b Cleanup stale Agents not matching DAP when DDAI is enabled (#2657)
• 808adb9 Component reconcile refactor (#2434)
• 65d8f90 Component reconciler refactor for DDAI (#2630)
• 4f12d4e Disable e2e-autoscaling test when pushing images to staging (#2672)
• dc9dda7 Fix component logging and downgrade to debug (#2820) (#2821)
• 1091668 Fix e2e_autoscaling CI failures (#2632)
• bb829df Fix missing workqueue_* metrics in /metrics endpoint (#2772) (#2776)
• 960eb2b Ignore local claude settings (#2624)
• dba26b8 Increase testInstall context timeout from 15m to 25m (#2666)
• 741c728 Move rules ordering to disable e2e-autoscaling on nightlies + also disable check-golang (#2627)
• bcac537 Operator version v1.25.0 (#2862)
• e9a6dec Reenable controller tests and drop focus (#2650)
• 09fb447 Release Operator v1.25.0-rc.3 (#2829)
• 5695dbb Release v1.25.0-rc.1 (#2738)
• cfa1fae Remove collector config from host profiler. (#2807) (#2815)
• 966082d Remove run subcommand from host profiler (#2808) (#2823)
• c9802c5 Revert "[CXP-2639][datadog-operator] Remove envvar ovveride for controlling w…" (#2629)
• 0b27d7c Simplify public operator configuration options (#2706)
• f978413 Skip component registry reconciliation for profile DDAIs (#2668)
• 1934f7e Update GCP marketplace chart and operator image to 1.23.1 (#2604)
• 16329f7 Update bundle for 1.24.0 (#2721)
• 2cfd498 Update codeowners for container ecosystem and co-own autoscaling (#2622)
• 6489f08 Update default Agent version to 7.76.1 (#2661)
• a2fb04f Update system-probe seccomp profile (#2719)
• 08e6a48 Use context based logger (#2698)
• 355ade2 VULN-18084 bump go.opentelemetry.io dependencies (#2683)
• 545d27d [ACTP] Fix PAR ConfigMap name for profile DDAIs (#2796) (#2798)
• 2c0faf0 [ACTP] Install the private action runner in the cluster agent via the operator (#2611)
• 782748b [ACTP] Use Config maps for par deploy in dca (#2659)
• 99404e1 [ACTP] Use extra path to load sequentially (#2649)
• bdfc654 [ACTP] update config key after rename (#2612)
• 2b3234f [AGENTONB-2759] Use k8s informer for helm metadata (#2488)
• 95205f3 [AGENTRUN-1051] Update FIPS proxy version references to 1.1.21 (#2628)
• cebb33f [Backport v1.25] [ACTP] Add k8s remediation RBAC rules for private action runner (#2780)
• 7dc11cc [Backport v1.25] [datadog-operator] Bump Stable Agent v7.77.2 (#2861)
• 7309d7a [CASCL-876][orchestrator] Add support for EKS NodeClass CRD collection (#2616)
• d57a7fb [CONTP-1328] Remove conflict condition from status if no conflict (#2634)
• e60a172 [CONTP-1340] Delete previous OTEL Gateway deployment to properly support name override (#2651)
• 5f75d74 [CONTP-1363] feat(rbac): Add EndpointSlices read RBAC to clsuter agent (#2705)
• ca44d56 [DatadogAgent] Copy annotations change to DDAI when DDAI enabled (#2667)
• 1dd69d7 [DatadogMonitor] Unregister metrics forwarder on finalization (#2804) (#2824)
• c645079 [autoscaling] DPA Improvements: add vertical control + minor fixes (#2583)
• 9def9d0 [chore] Consolidate dependabot dependency updates (#2615)
• b297f80 [chore] Consolidate dependabot dependency updates - Batch 2 (#2653)
• fb32ce2 [chore] Replace deprecated name_template with version_template in goreleaser snapshot (#2607)
• 60ab135 [container autoscaling] add update verb to rbac (#2673)
• 5c1ada7 [datadog-operator] Update agent version v7.77.0 (#2788) (#2818)
• 8acad77 [introspection] Fix agent daemonset scheduling on EKS nodes (#2520)
• 2febcaa add support for secret backend type and config options (#2587)
• 998b529 chore: Consolidate Dependabot updates - Batch 3 (#2703)
• 71418f7 disable e2e_autoscaling test in nightly deployment (#2620)
• 3dcd5c4 enhancement: add feature-based support for Agent Data Plane (#2572)
• 8d2388c feat: add support for SSI injectionMode (#2655)
• 776b124 release v1.25.0-rc.2 (#2819)
• 0b896c4 remove process-agent debugfs volumeMount from tcpq and oomkill (#2656)

v1.25.0-rc.3

Changelog

• 088f6ad Add 10-minute heartbeat to CRD metadata forwarder to prevent backend TTL expiration (#2609)
• 052c983 Add DDAI doc and note about opt-out timeline (#2677)
• a577ddc Add EKS auto-mode pre-flight check to kubectl plugin install command (#2717)
• c7eb86e Add IPC env vars to host profiler (#2806) (#2827)
• d40ca9e Add Operator env var to default to Datadog registry (#2669)
• 2bf03a4 Add a warning for upcoming removal of datadogAgentInternalEnabled flag (#2660)
• f52c174 Add autoscaling cluster to kubectl-plugin (#2678)
• 081482d Add container autoscaling as codeowners for kubectl plugin doc (#2699)
• 60007ef Add host volume mounts and NET_RAW capability to PAR container (#2799) (#2828)
• 12a8d8c Allow e2e-autoscaling test to use Github token to avoid rate limits (#2707)
• a821a6d Allow injection-platform team to use MQ (#2708)
• 2889a34 Avoid RBAC errors when Operator can't list or watch Secrets (#2793) (#2800)
• 6fb0dc7 Bump EKS wrapper chart version to 0.1.24 (#2606)
• 2ced916 Bump github.com/DataDog/datadog-agent/test/e2e-framework in /test/e2e (#2647)
• aecae30 Bump github.com/DataDog/datadog-api-client-go/v2 from 2.34.0 to 2.55.0 (#2636)
• 232e661 Bump github.com/aws/aws-sdk-go-v2/service/cloudformation in /test/e2e (#2694)
• f391e33 Bump github.com/aws/smithy-go from 1.23.2 to 1.24.0 (#2545)
• a786298 Bump go and grpc versions (#2789) (#2792)
• 3e8b16b Bump golang to 1.25.8 (#2830) (#2831)
• 6fbf327 Bump k8s.io/apimachinery from 0.33.3 to 0.35.0 (#2540)
• 1eed71b Bump k8s.io/apimachinery in /test/e2e (#2566)
• 4cde134 Check milestone latest state and trigger workflow (#2619)
• b3e0783 Cleanup Host Profiler (#2485)
• 8b8f03b Cleanup stale Agents not matching DAP when DDAI is enabled (#2657)
• 808adb9 Component reconcile refactor (#2434)
• 65d8f90 Component reconciler refactor for DDAI (#2630)
• 4f12d4e Disable e2e-autoscaling test when pushing images to staging (#2672)
• dc9dda7 Fix component logging and downgrade to debug (#2820) (#2821)
• 1091668 Fix e2e_autoscaling CI failures (#2632)
• bb829df Fix missing workqueue_* metrics in /metrics endpoint (#2772) (#2776)
• 960eb2b Ignore local claude settings (#2624)
• dba26b8 Increase testInstall context timeout from 15m to 25m (#2666)
• 741c728 Move rules ordering to disable e2e-autoscaling on nightlies + also disable check-golang (#2627)
• e9a6dec Reenable controller tests and drop focus (#2650)
• 09fb447 Release Operator v1.25.0-rc.3 (#2829)
• 5695dbb Release v1.25.0-rc.1 (#2738)
• cfa1fae Remove collector config from host profiler. (#2807) (#2815)
• 966082d Remove run subcommand from host profiler (#2808) (#2823)
• c9802c5 Revert "[CXP-2639][datadog-operator] Remove envvar ovveride for controlling w…" (#2629)
• 0b27d7c Simplify public operator configuration options (#2706)
• f978413 Skip component registry reconciliation for profile DDAIs (#2668)
• 1934f7e Update GCP marketplace chart and operator image to 1.23.1 (#2604)
• 16329f7 Update bundle for 1.24.0 (#2721)
• 2cfd498 Update codeowners for container ecosystem and co-own autoscaling (#2622)
• 6489f08 Update default Agent version to 7.76.1 (#2661)
• a2fb04f Update system-probe seccomp profile (#2719)
• 08e6a48 Use context based logger (#2698)
• 355ade2 VULN-18084 bump go.opentelemetry.io dependencies (#2683)
• 545d27d [ACTP] Fix PAR ConfigMap name for profile DDAIs (#2796) (#2798)
• 2c0faf0 [ACTP] Install the private action runner in the cluster agent via the operator (#2611)
• 782748b [ACTP] Use Config maps for par deploy in dca (#2659)
• 99404e1 [ACTP] Use extra path to load sequentially (#2649)
• bdfc654 [ACTP] update config key after rename (#2612)
• 2b3234f [AGENTONB-2759] Use k8s informer for helm metadata (#2488)
• 95205f3 [AGENTRUN-1051] Update FIPS proxy version references to 1.1.21 (#2628)
• cebb33f [Backport v1.25] [ACTP] Add k8s remediation RBAC rules for private action runner (#2780)
• 7309d7a [CASCL-876][orchestrator] Add support for EKS NodeClass CRD collection (#2616)
• d57a7fb [CONTP-1328] Remove conflict condition from status if no conflict (#2634)
• e60a172 [CONTP-1340] Delete previous OTEL Gateway deployment to properly support name override (#2651)
• 5f75d74 [CONTP-1363] feat(rbac): Add EndpointSlices read RBAC to clsuter agent (#2705)
• ca44d56 [DatadogAgent] Copy annotations change to DDAI when DDAI enabled (#2667)
• 1dd69d7 [DatadogMonitor] Unregister metrics forwarder on finalization (#2804) (#2824)
• c645079 [autoscaling] DPA Improvements: add vertical control + minor fixes (#2583)
• 9def9d0 [chore] Consolidate dependabot dependency updates (#2615)
• b297f80 [chore] Consolidate dependabot dependency updates - Batch 2 (#2653)
• fb32ce2 [chore] Replace deprecated name_template with version_template in goreleaser snapshot (#2607)
• 60ab135 [container autoscaling] add update verb to rbac (#2673)
• 5c1ada7 [datadog-operator] Update agent version v7.77.0 (#2788) (#2818)
• 8acad77 [introspection] Fix agent daemonset scheduling on EKS nodes (#2520)
• 2febcaa add support for secret backend type and config options (#2587)
• 998b529 chore: Consolidate Dependabot updates - Batch 3 (#2703)
• 71418f7 disable e2e_autoscaling test in nightly deployment (#2620)
• 3dcd5c4 enhancement: add feature-based support for Agent Data Plane (#2572)
• 8d2388c feat: add support for SSI injectionMode (#2655)
• 776b124 release v1.25.0-rc.2 (#2819)
• 0b896c4 remove process-agent debugfs volumeMount from tcpq and oomkill (#2656)

v1.25.0-rc.2

Changelog

• 088f6ad Add 10-minute heartbeat to CRD metadata forwarder to prevent backend TTL expiration (#2609)
• 052c983 Add DDAI doc and note about opt-out timeline (#2677)
• a577ddc Add EKS auto-mode pre-flight check to kubectl plugin install command (#2717)
• d40ca9e Add Operator env var to default to Datadog registry (#2669)
• 2bf03a4 Add a warning for upcoming removal of datadogAgentInternalEnabled flag (#2660)
• f52c174 Add autoscaling cluster to kubectl-plugin (#2678)
• 081482d Add container autoscaling as codeowners for kubectl plugin doc (#2699)
• 12a8d8c Allow e2e-autoscaling test to use Github token to avoid rate limits (#2707)
• a821a6d Allow injection-platform team to use MQ (#2708)
• 2889a34 Avoid RBAC errors when Operator can't list or watch Secrets (#2793) (#2800)
• 6fb0dc7 Bump EKS wrapper chart version to 0.1.24 (#2606)
• 2ced916 Bump github.com/DataDog/datadog-agent/test/e2e-framework in /test/e2e (#2647)
• aecae30 Bump github.com/DataDog/datadog-api-client-go/v2 from 2.34.0 to 2.55.0 (#2636)
• 232e661 Bump github.com/aws/aws-sdk-go-v2/service/cloudformation in /test/e2e (#2694)
• f391e33 Bump github.com/aws/smithy-go from 1.23.2 to 1.24.0 (#2545)
• a786298 Bump go and grpc versions (#2789) (#2792)
• 6fbf327 Bump k8s.io/apimachinery from 0.33.3 to 0.35.0 (#2540)
• 1eed71b Bump k8s.io/apimachinery in /test/e2e (#2566)
• 4cde134 Check milestone latest state and trigger workflow (#2619)
• b3e0783 Cleanup Host Profiler (#2485)
• 8b8f03b Cleanup stale Agents not matching DAP when DDAI is enabled (#2657)
• 808adb9 Component reconcile refactor (#2434)
• 65d8f90 Component reconciler refactor for DDAI (#2630)
• 4f12d4e Disable e2e-autoscaling test when pushing images to staging (#2672)
• dc9dda7 Fix component logging and downgrade to debug (#2820) (#2821)
• 1091668 Fix e2e_autoscaling CI failures (#2632)
• bb829df Fix missing workqueue_* metrics in /metrics endpoint (#2772) (#2776)
• 960eb2b Ignore local claude settings (#2624)
• dba26b8 Increase testInstall context timeout from 15m to 25m (#2666)
• 741c728 Move rules ordering to disable e2e-autoscaling on nightlies + also disable check-golang (#2627)
• e9a6dec Reenable controller tests and drop focus (#2650)
• 5695dbb Release v1.25.0-rc.1 (#2738)
• cfa1fae Remove collector config from host profiler. (#2807) (#2815)
• 966082d Remove run subcommand from host profiler (#2808) (#2823)
• c9802c5 Revert "[CXP-2639][datadog-operator] Remove envvar ovveride for controlling w…" (#2629)
• 0b27d7c Simplify public operator configuration options (#2706)
• f978413 Skip component registry reconciliation for profile DDAIs (#2668)
• 1934f7e Update GCP marketplace chart and operator image to 1.23.1 (#2604)
• 16329f7 Update bundle for 1.24.0 (#2721)
• 2cfd498 Update codeowners for container ecosystem and co-own autoscaling (#2622)
• 6489f08 Update default Agent version to 7.76.1 (#2661)
• a2fb04f Update system-probe seccomp profile (#2719)
• 08e6a48 Use context based logger (#2698)
• 355ade2 VULN-18084 bump go.opentelemetry.io dependencies (#2683)
• 545d27d [ACTP] Fix PAR ConfigMap name for profile DDAIs (#2796) (#2798)
• 2c0faf0 [ACTP] Install the private action runner in the cluster agent via the operator (#2611)
• 782748b [ACTP] Use Config maps for par deploy in dca (#2659)
• 99404e1 [ACTP] Use extra path to load sequentially (#2649)
• bdfc654 [ACTP] update config key after rename (#2612)
• 2b3234f [AGENTONB-2759] Use k8s informer for helm metadata (#2488)
• 95205f3 [AGENTRUN-1051] Update FIPS proxy version references to 1.1.21 (#2628)
• cebb33f [Backport v1.25] [ACTP] Add k8s remediation RBAC rules for private action runner (#2780)
• 7309d7a [CASCL-876][orchestrator] Add support for EKS NodeClass CRD collection (#2616)
• d57a7fb [CONTP-1328] Remove conflict condition from status if no conflict (#2634)
• e60a172 [CONTP-1340] Delete previous OTEL Gateway deployment to properly support name override (#2651)
• 5f75d74 [CONTP-1363] feat(rbac): Add EndpointSlices read RBAC to clsuter agent (#2705)
• ca44d56 [DatadogAgent] Copy annotations change to DDAI when DDAI enabled (#2667)
• c645079 [autoscaling] DPA Improvements: add vertical control + minor fixes (#2583)
• 9def9d0 [chore] Consolidate dependabot dependency updates (#2615)
• b297f80 [chore] Consolidate dependabot dependency updates - Batch 2 (#2653)
• fb32ce2 [chore] Replace deprecated name_template with version_template in goreleaser snapshot (#2607)
• 60ab135 [container autoscaling] add update verb to rbac (#2673)
• 5c1ada7 [datadog-operator] Update agent version v7.77.0 (#2788) (#2818)
• 8acad77 [introspection] Fix agent daemonset scheduling on EKS nodes (#2520)
• 2febcaa add support for secret backend type and config options (#2587)
• 998b529 chore: Consolidate Dependabot updates - Batch 3 (#2703)
• 71418f7 disable e2e_autoscaling test in nightly deployment (#2620)
• 3dcd5c4 enhancement: add feature-based support for Agent Data Plane (#2572)
• 8d2388c feat: add support for SSI injectionMode (#2655)
• 776b124 release v1.25.0-rc.2 (#2819)
• 0b896c4 remove process-agent debugfs volumeMount from tcpq and oomkill (#2656)

v1.25.0-rc.1

Changelog

• 088f6ad Add 10-minute heartbeat to CRD metadata forwarder to prevent backend TTL expiration (#2609)
• 052c983 Add DDAI doc and note about opt-out timeline (#2677)
• a577ddc Add EKS auto-mode pre-flight check to kubectl plugin install command (#2717)
• d40ca9e Add Operator env var to default to Datadog registry (#2669)
• 2bf03a4 Add a warning for upcoming removal of datadogAgentInternalEnabled flag (#2660)
• f52c174 Add autoscaling cluster to kubectl-plugin (#2678)
• 081482d Add container autoscaling as codeowners for kubectl plugin doc (#2699)
• 12a8d8c Allow e2e-autoscaling test to use Github token to avoid rate limits (#2707)
• a821a6d Allow injection-platform team to use MQ (#2708)
• 6fb0dc7 Bump EKS wrapper chart version to 0.1.24 (#2606)
• 2ced916 Bump github.com/DataDog/datadog-agent/test/e2e-framework in /test/e2e (#2647)
• aecae30 Bump github.com/DataDog/datadog-api-client-go/v2 from 2.34.0 to 2.55.0 (#2636)
• 232e661 Bump github.com/aws/aws-sdk-go-v2/service/cloudformation in /test/e2e (#2694)
• f391e33 Bump github.com/aws/smithy-go from 1.23.2 to 1.24.0 (#2545)
• 6fbf327 Bump k8s.io/apimachinery from 0.33.3 to 0.35.0 (#2540)
• 1eed71b Bump k8s.io/apimachinery in /test/e2e (#2566)
• 4cde134 Check milestone latest state and trigger workflow (#2619)
• b3e0783 Cleanup Host Profiler (#2485)
• 8b8f03b Cleanup stale Agents not matching DAP when DDAI is enabled (#2657)
• 808adb9 Component reconcile refactor (#2434)
• 65d8f90 Component reconciler refactor for DDAI (#2630)
• 4f12d4e Disable e2e-autoscaling test when pushing images to staging (#2672)
• 1091668 Fix e2e_autoscaling CI failures (#2632)
• 960eb2b Ignore local claude settings (#2624)
• dba26b8 Increase testInstall context timeout from 15m to 25m (#2666)
• 741c728 Move rules ordering to disable e2e-autoscaling on nightlies + also disable check-golang (#2627)
• e9a6dec Reenable controller tests and drop focus (#2650)
• 5695dbb Release v1.25.0-rc.1 (#2738)
• c9802c5 Revert "[CXP-2639][datadog-operator] Remove envvar ovveride for controlling w…" (#2629)
• 0b27d7c Simplify public operator configuration options (#2706)
• f978413 Skip component registry reconciliation for profile DDAIs (#2668)
• 1934f7e Update GCP marketplace chart and operator image to 1.23.1 (#2604)
• 16329f7 Update bundle for 1.24.0 (#2721)
• 2cfd498 Update codeowners for container ecosystem and co-own autoscaling (#2622)
• 6489f08 Update default Agent version to 7.76.1 (#2661)
• a2fb04f Update system-probe seccomp profile (#2719)
• 08e6a48 Use context based logger (#2698)
• 355ade2 VULN-18084 bump go.opentelemetry.io dependencies (#2683)
• 2c0faf0 [ACTP] Install the private action runner in the cluster agent via the operator (#2611)
• 782748b [ACTP] Use Config maps for par deploy in dca (#2659)
• 99404e1 [ACTP] Use extra path to load sequentially (#2649)
• bdfc654 [ACTP] update config key after rename (#2612)
• 2b3234f [AGENTONB-2759] Use k8s informer for helm metadata (#2488)
• 95205f3 [AGENTRUN-1051] Update FIPS proxy version references to 1.1.21 (#2628)
• 7309d7a [CASCL-876][orchestrator] Add support for EKS NodeClass CRD collection (#2616)
• d57a7fb [CONTP-1328] Remove conflict condition from status if no conflict (#2634)
• e60a172 [CONTP-1340] Delete previous OTEL Gateway deployment to properly support name override (#2651)
• 5f75d74 [CONTP-1363] feat(rbac): Add EndpointSlices read RBAC to clsuter agent (#2705)
• ca44d56 [DatadogAgent] Copy annotations change to DDAI when DDAI enabled (#2667)
• c645079 [autoscaling] DPA Improvements: add vertical control + minor fixes (#2583)
• 9def9d0 [chore] Consolidate dependabot dependency updates (#2615)
• b297f80 [chore] Consolidate dependabot dependency updates - Batch 2 (#2653)
• fb32ce2 [chore] Replace deprecated name_template with version_template in goreleaser snapshot (#2607)
• 60ab135 [container autoscaling] add update verb to rbac (#2673)
• 8acad77 [introspection] Fix agent daemonset scheduling on EKS nodes (#2520)
• 2febcaa add support for secret backend type and config options (#2587)
• 998b529 chore: Consolidate Dependabot updates - Batch 3 (#2703)
• 71418f7 disable e2e_autoscaling test in nightly deployment (#2620)
• 3dcd5c4 enhancement: add feature-based support for Agent Data Plane (#2572)
• 8d2388c feat: add support for SSI injectionMode (#2655)
• 0b896c4 remove process-agent debugfs volumeMount from tcpq and oomkill (#2656)