Skip to content

Mount run socket for host profiler/ ddot #2802

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
gh-worker-dd-mergequeue-cf854d merged 13 commits into from
Jul 27, 2026
Merged

Mount run socket for host profiler/ ddot #2802

Show file tree
Hide file tree
Changes from 9 commits
Commits
Show all changes
13 commits
Select commit Hold shift + click to select a range
76b959b
Mount run socket for host profiler/ ddot
mackjmr Jul 20, 2026
d0c7104
chore: update charts
dd-octo-sts[bot] Jul 20, 2026
3d8ea69
version
mackjmr Jul 20, 2026
cb9c90f
feedback
mackjmr Jul 20, 2026
ca3c758
fix ci
mackjmr Jul 20, 2026
288f2f2
gke
mackjmr Jul 21, 2026
9745498
chore: update charts
dd-octo-sts[bot] Jul 21, 2026
c9d5313
remove
mackjmr Jul 22, 2026
2399ce3
gate gke
mackjmr Jul 27, 2026
7e02598
remove exemption 1.0.6
mackjmr Jul 27, 2026
dd51338
Merge branch 'main' into mackjmr/socket-vol-otel
mackjmr Jul 27, 2026
f8ece4e
update version based on merge request failure
mackjmr Jul 27, 2026
36cc546
chore: update charts
dd-octo-sts[bot] Jul 27, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
3 changes: 3 additions & 0 deletions charts/datadog/CHANGELOG.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,4 +1,7 @@
# Datadog changelog
## 3.231.6

* Mount run socket for host profiler/ ddot ([#2802](https://github.com/DataDog/helm-charts/pull/2802)).

## 3.231.5

Expand Down
2 changes: 1 addition & 1 deletion charts/datadog/Chart.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
---
apiVersion: v1
name: datadog
version: 3.231.5
version: 3.231.6
appVersion: "7"
description: Datadog Agent
keywords:
Expand Down
4 changes: 3 additions & 1 deletion charts/datadog/README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
# Datadog

![Version: 3.231.5](https://img.shields.io/badge/Version-3.231.5-informational?style=flat-square) ![AppVersion: 7](https://img.shields.io/badge/AppVersion-7-informational?style=flat-square)
![Version: 3.231.6](https://img.shields.io/badge/Version-3.231.6-informational?style=flat-square) ![AppVersion: 7](https://img.shields.io/badge/AppVersion-7-informational?style=flat-square)

> [!WARNING]
> The Datadog Operator is now enabled by default since version [3.157.0](https://github.com/DataDog/helm-charts/blob/main/charts/datadog/CHANGELOG.md#31570) to collect chart metadata for display in [Fleet Automation](https://docs.datadoghq.com/agent/fleet_automation/). We are aware of issues affecting some environments and are actively working on fixes. We apologize for the inconvenience and appreciate your patience while we address these issues.
Expand Down Expand Up @@ -672,6 +672,7 @@ helm install <RELEASE_NAME> \
| clusterAgent.podSecurity.securityContextConstraints.create | bool | `false` | If true, create a SCC resource for Cluster Agent pods |
| clusterAgent.priorityClassName | string | `nil` | Name of the priorityClass to apply to the Cluster Agent |
| clusterAgent.privateActionRunner.actionsAllowlist | list | `[]` | List of actions executable by the Private Action Runner |
| clusterAgent.privateActionRunner.apiKeyOnlyEnrollment | bool | `false` | Enroll using only the API key, without requiring an app key |
| clusterAgent.privateActionRunner.enabled | bool | `false` | Enable the Private Action Runner to execute workflow actions |
| clusterAgent.privateActionRunner.identityFromExistingSecret | string | `nil` | Use existing Secret which stores the Private Action Runner URN and private key # The secret should contain 'urn' and 'private_key' keys # If set, this parameter takes precedence over "urn" and "privateKey" |
| clusterAgent.privateActionRunner.identitySecretName | string | `"datadog-private-action-runner-identity"` | Name of the Kubernetes secret used to store PAR identity when self-enrollment is enabled # The Cluster Agent will create and manage this secret for storing the enrolled runner's URN and private key # RBAC permissions are granted specifically for this secret name |
Expand Down Expand Up @@ -952,6 +953,7 @@ helm install <RELEASE_NAME> \
| datadog.podAnnotationsAsTags | object | `{}` | Provide a mapping of Kubernetes Annotations to Datadog Tags |
| datadog.podLabelsAsTags | object | `{}` | Provide a mapping of Kubernetes Labels to Datadog Tags |
| datadog.privateActionRunner.actionsAllowlist | list | `[]` | List of actions executable by the Private Action Runner |
| datadog.privateActionRunner.apiKeyOnlyEnrollment | bool | `false` | Enroll using only the API key, without requiring an app key |
| datadog.privateActionRunner.enabled | bool | `false` | Enable the Private Action Runner on the node agent to execute workflow actions |
| datadog.privateActionRunner.identityFromExistingSecret | string | `nil` | Use existing Secret which stores the Private Action Runner URN and private key # The secret should contain 'urn' and 'private_key' keys # If set, this parameter takes precedence over "urn" and "privateKey" |
| datadog.privateActionRunner.privateKey | string | `nil` | Private key for the Private Action Runner (required if selfEnroll is false) # This key is used to authenticate the runner with Datadog |
Expand Down
5 changes: 5 additions & 0 deletions charts/datadog/templates/_container-host-profiler.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -51,6 +51,11 @@
mountPath: {{ template "datadog.confPath" . }}/auth
readOnly: true
{{- end }}
{{- if not (or .Values.providers.gke.autopilot .Values.providers.gke.gdc) }}
- name: {{ include "datadog.agentRunVolumeName" . }}
mountPath: /opt/datadog-agent/run
readOnly: false
{{- end }}
- name: tmpdir
mountPath: /tmp
readOnly: false # Need RW for tmp directory
Expand Down
5 changes: 5 additions & 0 deletions charts/datadog/templates/_container-otel-agent.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -104,6 +104,11 @@
mountPath: {{ template "datadog.otelconfPath" . }}
readOnly: true
{{- if eq .Values.targetSystem "linux" }}
{{- if not (or .Values.providers.gke.autopilot .Values.providers.gke.gdc) }}
- name: {{ include "datadog.agentRunVolumeName" . }}
mountPath: /opt/datadog-agent/run
readOnly: false
Comment on lines +110 to +112

@chatgpt-codex-connector chatgpt-codex-connector Bot Jul 20, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P2 Badge Gate the run mount for Windows otel-agent pods

When targetSystem=windows and datadog.otelCollector.enabled=true with log collection left at its default disabled state, this helper expands to datadogrun, but daemonset-volumes-windows never defines a datadogrun volume; it only creates pointerdir when logs are enabled. The rendered DaemonSet therefore contains an otel-agent volumeMount with no matching volume and Kubernetes will reject the pod, so this mount needs a Windows-specific volume/path or should be limited to Linux.

Useful? React with 👍 / 👎.

@mackjmr mackjmr Jul 20, 2026

Copy link
Copy Markdown
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

cb9c90f

{{- end }}
{{- if not .Values.providers.gke.autopilot }}
- name: procdir
mountPath: /host/proc
Expand Down
1 change: 1 addition & 0 deletions charts/datadog/templates/gke_autopilot_allowlist_synchronizer.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -13,4 +13,5 @@ spec:
- Datadog/datadog/datadog-datadog-daemonset-exemption-v1.0.3.yaml
- Datadog/datadog/datadog-datadog-daemonset-exemption-v1.0.4.yaml
- Datadog/datadog/datadog-datadog-daemonset-exemption-v1.0.5.yaml
- Datadog/datadog/datadog-datadog-daemonset-exemption-v1.0.6.yaml
{{- end }}
3 changes: 3 additions & 0 deletions test/datadog/baseline/manifests/otel-agent_config_ports.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -2485,6 +2485,9 @@ spec:
- mountPath: /etc/otel-agent
name: otelconfig
readOnly: true
- mountPath: /opt/datadog-agent/run
name: datadogrun
readOnly: false
- mountPath: /host/proc
mountPropagation: None
name: procdir
Expand Down
3 changes: 3 additions & 0 deletions test/datadog/baseline/manifests/otel-agent_configmap.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -2404,6 +2404,9 @@ spec:
- mountPath: /etc/otel-agent
name: otelconfig
readOnly: true
- mountPath: /opt/datadog-agent/run
name: datadogrun
readOnly: false
- mountPath: /host/proc
mountPropagation: None
name: procdir
Expand Down
3 changes: 3 additions & 0 deletions test/datadog/baseline/manifests/otel-agent_container_ports.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -2479,6 +2479,9 @@ spec:
- mountPath: /etc/otel-agent
name: otelconfig
readOnly: true
- mountPath: /opt/datadog-agent/run
name: datadogrun
readOnly: false
- mountPath: /host/proc
mountPropagation: None
name: procdir
Expand Down
3 changes: 3 additions & 0 deletions test/datadog/baseline/manifests/otel-agent_full.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -1940,6 +1940,9 @@ spec:
- mountPath: /etc/otel-agent
name: otelconfig
readOnly: true
- mountPath: /opt/datadog-agent/run
name: datadogrun
readOnly: false
- mountPath: /host/proc
mountPropagation: None
name: procdir
Expand Down
3 changes: 3 additions & 0 deletions test/datadog/baseline/manifests/otel-agent_full_fips.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -1940,6 +1940,9 @@ spec:
- mountPath: /etc/otel-agent
name: otelconfig
readOnly: true
- mountPath: /opt/datadog-agent/run
name: datadogrun
readOnly: false
- mountPath: /host/proc
mountPropagation: None
name: procdir
Expand Down
3 changes: 3 additions & 0 deletions test/datadog/baseline/manifests/otel-agent_gateway.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -1997,6 +1997,9 @@ spec:
- mountPath: /etc/otel-agent
name: otelconfig
readOnly: true
- mountPath: /opt/datadog-agent/run
name: datadogrun
readOnly: false
- mountPath: /host/proc
mountPropagation: None
name: procdir
Expand Down
3 changes: 3 additions & 0 deletions test/datadog/baseline/manifests/otel-agent_gateway_fips.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -1997,6 +1997,9 @@ spec:
- mountPath: /etc/otel-agent
name: otelconfig
readOnly: true
- mountPath: /opt/datadog-agent/run
name: datadogrun
readOnly: false
- mountPath: /host/proc
mountPropagation: None
name: procdir
Expand Down
3 changes: 3 additions & 0 deletions test/datadog/baseline/manifests/otel-agent_logs_collection.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -2427,6 +2427,9 @@ spec:
- mountPath: /etc/otel-agent
name: otelconfig
readOnly: true
- mountPath: /opt/datadog-agent/run
name: datadogrun
readOnly: false
- mountPath: /host/proc
mountPropagation: None
name: procdir
Expand Down
3 changes: 3 additions & 0 deletions test/datadog/baseline/manifests/otel-agent_volume_mounts.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -2475,6 +2475,9 @@ spec:
- mountPath: /etc/otel-agent
name: otelconfig
readOnly: true
- mountPath: /opt/datadog-agent/run
name: datadogrun
readOnly: false
- mountPath: /host/proc
mountPropagation: None
name: procdir
Expand Down
3 changes: 3 additions & 0 deletions test/datadog/baseline/manifests/otel_enabled.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -2475,6 +2475,9 @@ spec:
- mountPath: /etc/otel-agent
name: otelconfig
readOnly: true
- mountPath: /opt/datadog-agent/run
name: datadogrun
readOnly: false
- mountPath: /host/proc
mountPropagation: None
name: procdir
Expand Down
Loading