Skip to content

appsec: blocking unavailable + update Envoy contrib#3298

Merged
eliottness merged 7 commits into
mainfrom
flavien/v2/blocking-unavailable
Apr 14, 2025
Merged

appsec: blocking unavailable + update Envoy contrib#3298
eliottness merged 7 commits into
mainfrom
flavien/v2/blocking-unavailable

Conversation

@e-n-0

@e-n-0 e-n-0 commented Mar 13, 2025

Copy link
Copy Markdown
Member

What does this PR do?

  • Implement a new internal environment variable _DD_APPSEC_BLOCKING_UNAVAILABLE that will configure the tracer to not send the blocking capabilities to Remote Config
  • Implement a new environment variable DD_SERVICE_EXTENSION_OBSERVABILITY_MODE in the GCP SE callout image that allow to switch to async analysis.
  • Update the Envoy/GCP SE contrib integration to reflect observability mode and blocking state

Motivation

When running the GCP Service Extension in observability mode (async analysis), it's not possible to block but we still want to get remote rules from RC. Not sending the blocking capabilities will made the backend to only send monitoring rules.

The configuration of appsec from the public tracing package is not possible (only from internal package).

Reviewer's Checklist

  • Changed code has unit tests for its functionality at or near 100% coverage.
  • System-Tests covering this feature have been added and enabled with the va.b.c-dev version tag.
  • There is a benchmark for any new code, or changes to existing code.
  • If this interacts with the agent in a new way, a system test has been added.
  • Add an appropriate team label so this PR gets put in the right place for the release notes.
  • Non-trivial go.mod changes, e.g. adding new modules, are reviewed by @DataDog/dd-trace-go-guild.
  • For internal contributors, a matching PR should be created to the v2-dev branch and reviewed by @DataDog/apm-go.

Unsure? Have a question? Request a review!

@github-actions github-actions Bot added the apm:ecosystem contrib/* related feature requests or bugs label Mar 13, 2025
@datadog-datadog-prod-us1

datadog-datadog-prod-us1 Bot commented Mar 13, 2025

Copy link
Copy Markdown

Datadog Report

Branch report: flavien/v2/blocking-unavailable
Commit report: 31b9d8a
Test service: dd-trace-go

✅ 0 Failed, 4477 Passed, 64 Skipped, 3m 47.67s Total Time

@pr-commenter

pr-commenter Bot commented Mar 13, 2025

Copy link
Copy Markdown

Benchmarks

Benchmark execution time: 2025-04-11 15:11:30

Comparing candidate commit 993f327 in PR branch flavien/v2/blocking-unavailable with baseline commit b4ef47f in branch main.

Found 1 performance improvements and 0 performance regressions! Performance is the same for 54 metrics, 1 unstable metrics.

scenario:BenchmarkInjectW3C-24

  • 🟩 execution_time [-178.124ns; -147.076ns] or [-4.263%; -3.520%]

@e-n-0
e-n-0 changed the base branch from main to v2-dev March 14, 2025 09:33
@e-n-0
e-n-0 force-pushed the flavien/v2/blocking-unavailable branch 3 times, most recently from 736d4df to 0e89e4a Compare April 3, 2025 12:27
@e-n-0 e-n-0 changed the title appsec: blocking unavailable appsec: blocking unavailable + update Envoy contrib Apr 3, 2025
@e-n-0
e-n-0 marked this pull request as ready for review April 3, 2025 12:39
@e-n-0
e-n-0 requested review from a team as code owners April 3, 2025 12:39
@e-n-0
e-n-0 force-pushed the flavien/v2/blocking-unavailable branch 2 times, most recently from ba7fb4e to 2169f61 Compare April 8, 2025 14:07
Comment thread ddtrace/tracer/tracer.go Outdated
Comment thread internal/appsec/remoteconfig.go Outdated
Comment thread internal/appsec/remoteconfig_test.go Outdated
Comment thread internal/appsec/remoteconfig.go
@e-n-0
e-n-0 changed the base branch from v2-dev to main April 11, 2025 13:35
@e-n-0
e-n-0 requested review from a team as code owners April 11, 2025 13:35
@e-n-0
e-n-0 requested a review from gnufede April 11, 2025 13:35
@e-n-0
e-n-0 force-pushed the flavien/v2/blocking-unavailable branch from 2169f61 to 7b4f440 Compare April 11, 2025 13:40
@e-n-0
e-n-0 requested a review from eliottness April 11, 2025 14:41
@eliottness
eliottness merged commit aa39e91 into main Apr 14, 2025
@eliottness
eliottness deleted the flavien/v2/blocking-unavailable branch April 14, 2025 11:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

apm:ecosystem contrib/* related feature requests or bugs

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants