Skip to content

dd-sts migration#6679

Draft
nccatoni wants to merge 1 commit intomainfrom
nccatoni/dd-sts-migration
Draft

dd-sts migration#6679
nccatoni wants to merge 1 commit intomainfrom
nccatoni/dd-sts-migration

Conversation

@nccatoni
Copy link
Copy Markdown
Collaborator

@nccatoni nccatoni commented Apr 2, 2026

Motivation

Changes

Workflow

  1. ⚠️ Create your PR as draft ⚠️
  2. Work on you PR until the CI passes
  3. Mark it as ready for review
    • Test logic is modified? -> Get a review from RFC owner.
    • Framework is modified, or non obvious usage of it -> get a review from R&P team

🚀 Once your PR is reviewed and the CI green, you can merge it!

🛟 #apm-shared-testing 🛟

Reviewer checklist

  • Anything but tests/ or manifests/ is modified ? I have the approval from R&P team
  • A docker base image is modified?
    • the relevant build-XXX-image label is present
  • A scenario is added, removed or renamed?

@github-actions
Copy link
Copy Markdown
Contributor

github-actions bot commented Apr 2, 2026

CODEOWNERS have been resolved as:

.github/actions/push_to_test_optim/action.yml                           @DataDog/system-tests-core
.github/workflows/ci.yml                                                @DataDog/system-tests-core
.github/workflows/run-end-to-end.yml                                    @DataDog/system-tests-core
.github/workflows/run-parametric.yml                                    @DataDog/system-tests-core
.github/workflows/system-tests.yml                                      @DataDog/system-tests-core

@nccatoni nccatoni force-pushed the nccatoni/dd-sts-migration branch 5 times, most recently from 7935ce3 to b3a6f0c Compare April 2, 2026 15:33
@nccatoni nccatoni changed the title dd sts migration dd-sts migration Apr 2, 2026
secrets: inherit
permissions:
contents: read
id-token: write
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The permission block is not needed here: id-token: write is specified line 74, and contents: read should be defined in the policy


on:
workflow_call:
inputs:
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

it will also need a permission block with id-token: write since this workflow calls DataDog/dd-sts-action

with:
repository: 'DataDog/system-tests'
ref: ${{ steps.compute_ref.outputs.ref }}
- name: Get Datadog credentials
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

will need id-token: write permissions to invoke DataDog/dd-sts-action

default: "datadoghq.com"
required: false
type: string
dd_sts_policy:
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

will need id-token: write permissions to invoke DataDog/dd-sts-action

@nccatoni nccatoni force-pushed the nccatoni/dd-sts-migration branch 6 times, most recently from 7a4fc9b to 107bbb0 Compare April 3, 2026 13:01
@nccatoni nccatoni force-pushed the nccatoni/dd-sts-migration branch from 107bbb0 to b4b5967 Compare April 3, 2026 13:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants