Make RC proxy filter products like the proper agent (#7175)

Author: bwoebi

manifests/ruby.yml

@@ -2392,7 +2392,7 @@ manifest:
   tests/remote_config/test_remote_configuration.py::Test_RemoteConfigurationExtraServices: missing_feature
   tests/remote_config/test_remote_configuration.py::Test_RemoteConfigurationUpdateSequenceASMDD: v1.13.0
   tests/remote_config/test_remote_configuration.py::Test_RemoteConfigurationUpdateSequenceASMDDNoCache: missing_feature
-  tests/remote_config/test_remote_configuration.py::Test_RemoteConfigurationUpdateSequenceFeatures: v1.13.0
+  tests/remote_config/test_remote_configuration.py::Test_RemoteConfigurationUpdateSequenceFeatures: missing_feature
   tests/remote_config/test_remote_configuration.py::Test_RemoteConfigurationUpdateSequenceFeaturesNoCache: missing_feature
   tests/remote_config/test_remote_configuration.py::Test_RemoteConfigurationUpdateSequenceLiveDebugging: v1.13.0
   tests/serverless/span_pointers/aws/test_s3_span_pointers.py::Test_CopyObject: missing_feature

utils/proxy/mocked_response.py

@@ -160,6 +160,42 @@ def send(self) -> None:
         """Send instruction to the proxy at /mocked_tracer_responses endpoint."""
         self._send_to_endpoint(MOCKED_TRACER_RESPONSES_PATH)
 
+    @staticmethod
+    def _gate_rc_response_by_products(response: dict, request_content: dict) -> dict:
+        """Restrict a /v0.7/config response to the products the client subscribed to.
+
+        The real Datadog agent only returns configs for products listed in the
+        request's ``client.products``. Mirror the real-world behaviour here.
+        """
+        if not isinstance(response, dict):
+            return response
+        client_configs = response.get("client_configs")
+        if not isinstance(client_configs, list):
+            return response
+        try:
+            products = request_content["client"]["products"]
+        except (KeyError, TypeError):
+            return response
+        if not isinstance(products, list):
+            return response
+        allowed = set(products)
+
+        def product_of(path: str) -> str | None:
+            # datadog/<org_id>/<PRODUCT>/<config_id>/<name> or employee/<PRODUCT>/<config_id>/<name>
+            parts = path.split("/")
+            return parts[-3]
+
+        kept = [path for path in client_configs if product_of(path) in allowed]
+        if kept == client_configs:
+            return response
+        filtered = dict(response)
+        filtered["client_configs"] = kept
+        target_files = response.get("target_files")
+        if isinstance(target_files, list):
+            kept_paths = set(kept)
+            filtered["target_files"] = [tf for tf in target_files if tf.get("path") in kept_paths]
+        return filtered
+
 
 class StaticJsonMockedTracerResponse(MockedTracerResponse):
     """Always overwrites the same static JSON content on request made on the given path."""
@@ -175,7 +211,15 @@ def _apply_status_code(self, flow: HTTPFlow) -> None:
 
     def execute(self, flow: HTTPFlow) -> None:
         super().execute(flow)
-        flow.response.content = json.dumps(self.mocked_json).encode()
+        response = self.mocked_json
+        if self.path == "/v0.7/config" and isinstance(response, dict):
+            try:
+                request_content = json.loads(flow.request.content)
+            except (ValueError, TypeError):
+                request_content = None
+            if isinstance(request_content, dict):
+                response = self._gate_rc_response_by_products(response, request_content)
+        flow.response.content = json.dumps(response).encode()
 
     def to_json(self) -> dict:
         return {
@@ -203,7 +247,7 @@ def execute(self, flow: HTTPFlow) -> None:
         request_content = json.loads(flow.request.content)
         runtime_id = request_content["client"]["client_tracer"]["runtime_id"]
         nth_api_command = self._runtime_ids_request_count[runtime_id]
-        response = self.mocked_json_sequence[nth_api_command]
+        response = self._gate_rc_response_by_products(self.mocked_json_sequence[nth_api_command], request_content)
 
         flow.response.content = json.dumps(response).encode()
         flow.response.headers["st-proxy-overwrite-rc-response"] = f"{nth_api_command}"