Repository: DataDog/datadog-agent
Pull request #34398: [NPM-4170] Add e2e test for cilium conntracker
Author: login: hmahmood
Labels: name: changelog/no-changelog
description: No changelog entry needed
name: [deprecated] team/networks
name: qa/done
description: QA done before merge and regressions are covered by tests
name: medium review
description: PR review might take time
Created: 2025-02-25T00:11:03Z | Merged: 2025-03-12T22:01:12Z

<!--
* Contributors are encouraged to read our [CONTRIBUTING](/CONTRIBUTING.md) documentation.
* Both Contributor and Reviewer Checklists are available at https://datadoghq.dev/datadog-agent/guidelines/contributing/#pull-requests.
* The pull request:
  * Should only fix one issue or add one feature at a time.
  * Must update the test suite for the relevant functionality.
  * Should pass all status checks before being reviewed or merged.
* Commit titles should be prefixed with general area of pull request's change.
* Please fill the below sections if possible with relevant information or links.
-->
### What does this PR do?
Adds a new e2e test for testing the currently released versions of Cilium against the [Cilium LB conntracker](https://github.com/DataDog/datadog-agent/blob/main/pkg/network/tracer/cilium_lb.go).

Companion PR: https://github.com/DataDog/test-infra-definitions/pull/1444

### Motivation

### Describe how you validated your changes
Running e2e tests locally as well as CI.

### Possible Drawbacks / Trade-offs

### Additional Notes
<!--
* Anything else we should know when reviewing?
* Include benchmarking information here whenever possible.
* Include info about alternatives that were considered and why the proposed
  version was chosen.
-->


Diff:
diff --git a/.gitlab/e2e/e2e.yml b/.gitlab/e2e/e2e.yml
index 4b76a496671b..4cdd6e6fb563 100644
--- a/.gitlab/e2e/e2e.yml
+++ b/.gitlab/e2e/e2e.yml
@@ -344,6 +344,20 @@ new-e2e-npm-eks:
     E2E_PRE_INITIALIZED: "true"
     ON_NIGHTLY_FIPS: "true"
 
+new-e2e-npm:
+  extends: .new_e2e_template
+  rules:
+    - !reference [.on_npm_or_e2e_changes]
+    - !reference [.manual]
+  needs:
+    - !reference [.needs_new_e2e_template]
+    - qa_agent
+    - qa_dca
+  variables:
+    TARGETS: ./tests/npm
+    TEAM: network-performance-monitoring
+    EXTRA_PARAMS: --run TestCiliumLBConntracker
+
 new-e2e-amp:
   extends: .new_e2e_template
   needs:
diff --git a/test/new-e2e/pkg/provisioners/aws/kubernetes/kind.go b/test/new-e2e/pkg/provisioners/aws/kubernetes/kind.go
index 44976853e8e9..70a3682bc917 100644
--- a/test/new-e2e/pkg/provisioners/aws/kubernetes/kind.go
+++ b/test/new-e2e/pkg/provisioners/aws/kubernetes/kind.go
@@ -9,17 +9,17 @@ package awskubernetes
 import (
 	"context"
 	"fmt"
-	"github.com/DataDog/test-infra-definitions/common/utils"
-	"github.com/DataDog/test-infra-definitions/components/datadog/agent"
-	"github.com/DataDog/test-infra-definitions/components/datadog/agentwithoperatorparams"
-	"github.com/DataDog/test-infra-definitions/components/datadog/operator"
-	"github.com/DataDog/test-infra-definitions/components/datadog/operatorparams"
+
+	"github.com/pulumi/pulumi-kubernetes/sdk/v4/go/kubernetes"
+	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
 
 	"github.com/DataDog/datadog-agent/test/new-e2e/pkg/environments"
 	"github.com/DataDog/datadog-agent/test/new-e2e/pkg/provisioners"
 	"github.com/DataDog/datadog-agent/test/new-e2e/pkg/utils/optional"
-
+	"github.com/DataDog/test-infra-definitions/common/utils"
+	"github.com/DataDog/test-infra-definitions/components/datadog/agent"
 	"github.com/DataDog/test-infra-definitions/components/datadog/agent/helm"
+	"github.com/DataDog/test-infra-definitions/components/datadog/agentwithoperatorparams"
 	"github.com/DataDog/test-infra-definitions/components/datadog/apps/cpustress"
 	"github.com/DataDog/test-infra-definitions/components/datadog/apps/dogstatsd"
 	"github.com/DataDog/test-infra-definitions/components/datadog/apps/mutatedbyadmissioncontroller"
@@ -30,15 +30,14 @@ import (
 	dogstatsdstandalone "github.com/DataDog/test-infra-definitions/components/datadog/dogstatsd-standalone"
 	fakeintakeComp "github.com/DataDog/test-infra-definitions/components/datadog/fakeintake"
 	"github.com/DataDog/test-infra-definitions/components/datadog/kubernetesagentparams"
+	"github.com/DataDog/test-infra-definitions/components/datadog/operator"
+	"github.com/DataDog/test-infra-definitions/components/datadog/operatorparams"
 	kubeComp "github.com/DataDog/test-infra-definitions/components/kubernetes"
+	"github.com/DataDog/test-infra-definitions/components/kubernetes/cilium"
 	"github.com/DataDog/test-infra-definitions/components/kubernetes/vpa"
 	"github.com/DataDog/test-infra-definitions/resources/aws"
 	"github.com/DataDog/test-infra-definitions/scenarios/aws/ec2"
 	"github.com/DataDog/test-infra-definitions/scenarios/aws/fakeintake"
-
-	"github.com/pulumi/pulumi-kubernetes/sdk/v4/go/kubernetes"
-
-	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
 )
 
 const (
@@ -92,7 +91,13 @@ func KindRunFunc(ctx *pulumi.Context, env *environments.Kubernetes, params *Prov
 		return err
 	}
 
-	kindCluster, err := kubeComp.NewKindCluster(&awsEnv, host, params.name, awsEnv.KubernetesVersion(), utils.PulumiDependsOn(installEcrCredsHelperCmd))
+	var kindCluster *kubeComp.Cluster
+	if len(params.ciliumOptions) > 0 {
+		kindCluster, err = cilium.NewKindCluster(&awsEnv, host, params.name, awsEnv.KubernetesVersion(), params.ciliumOptions, utils.PulumiDependsOn(installEcrCredsHelperCmd))
+	} else {
+		kindCluster, err = kubeComp.NewKindCluster(&awsEnv, host, params.name, awsEnv.KubernetesVersion(), utils.PulumiDependsOn(installEcrCredsHelperCmd))
+	}
+
 	if err != nil {
 		return err
 	}
@@ -116,6 +121,19 @@ func KindRunFunc(ctx *pulumi.Context, env *environments.Kubernetes, params *Prov
 	}
 	dependsOnVPA := utils.PulumiDependsOn(vpaCrd)
 
+	if len(params.ciliumOptions) > 0 {
+		// deploy cilium
+		ciliumParams, err := cilium.NewParams(params.ciliumOptions...)
+		if err != nil {
+			return err
+		}
+
+		_, err = cilium.NewHelmInstallation(&awsEnv, kindCluster, ciliumParams, pulumi.Provider(kubeProvider))
+		if err != nil {
+			return err
+		}
+	}
+
 	var fakeIntake *fakeintakeComp.Fakeintake
 	if params.fakeintakeOptions != nil {
 		fakeintakeOpts := []fakeintake.Option{fakeintake.WithLoadBalancer()}
diff --git a/test/new-e2e/pkg/provisioners/aws/kubernetes/params.go b/test/new-e2e/pkg/provisioners/aws/kubernetes/params.go
index 833899ce7b1f..b60424c21f79 100644
--- a/test/new-e2e/pkg/provisioners/aws/kubernetes/params.go
+++ b/test/new-e2e/pkg/provisioners/aws/kubernetes/params.go
@@ -8,21 +8,21 @@ package awskubernetes
 
 import (
 	"fmt"
-	"github.com/DataDog/test-infra-definitions/components/datadog/agentwithoperatorparams"
-	"github.com/DataDog/test-infra-definitions/components/datadog/operatorparams"
+
+	"github.com/pulumi/pulumi-kubernetes/sdk/v4/go/kubernetes"
 
 	"github.com/DataDog/datadog-agent/test/new-e2e/pkg/runner"
 	"github.com/DataDog/datadog-agent/test/new-e2e/pkg/utils/optional"
-
 	"github.com/DataDog/test-infra-definitions/common/config"
+	"github.com/DataDog/test-infra-definitions/components/datadog/agentwithoperatorparams"
 	"github.com/DataDog/test-infra-definitions/components/datadog/kubernetesagentparams"
+	"github.com/DataDog/test-infra-definitions/components/datadog/operatorparams"
 	kubeComp "github.com/DataDog/test-infra-definitions/components/kubernetes"
+	"github.com/DataDog/test-infra-definitions/components/kubernetes/cilium"
 	"github.com/DataDog/test-infra-definitions/resources/aws"
 	"github.com/DataDog/test-infra-definitions/scenarios/aws/ec2"
 	"github.com/DataDog/test-infra-definitions/scenarios/aws/eks"
 	"github.com/DataDog/test-infra-definitions/scenarios/aws/fakeintake"
-
-	"github.com/pulumi/pulumi-kubernetes/sdk/v4/go/kubernetes"
 )
 
 // ProvisionerParams contains all the parameters needed to create the environment
@@ -36,6 +36,7 @@ type ProvisionerParams struct {
 	workloadAppFuncs   []WorkloadAppFunc
 	operatorOptions    []operatorparams.Option
 	operatorDDAOptions []agentwithoperatorparams.Option
+	ciliumOptions      []cilium.Option
 
 	eksLinuxNodeGroup        bool
 	eksLinuxARMNodeGroup     bool
@@ -212,3 +213,11 @@ func WithoutDDA() ProvisionerOption {
 		return nil
 	}
 }
+
+// WithCiliumOptions adds a cilium installation option
+func WithCiliumOptions(opts ...cilium.Option) ProvisionerOption {
+	return func(params *ProvisionerParams) error {
+		params.ciliumOptions = opts
+		return nil
+	}
+}
diff --git a/test/new-e2e/pkg/provisioners/local/kubernetes/kind.go b/test/new-e2e/pkg/provisioners/local/kubernetes/kind.go
index e754b6f57af9..7cb22c6432f2 100644
--- a/test/new-e2e/pkg/provisioners/local/kubernetes/kind.go
+++ b/test/new-e2e/pkg/provisioners/local/kubernetes/kind.go
@@ -9,22 +9,20 @@ package localkubernetes
 import (
 	"fmt"
 
+	"github.com/pulumi/pulumi-kubernetes/sdk/v4/go/kubernetes"
+	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
+
 	"github.com/DataDog/datadog-agent/test/new-e2e/pkg/environments"
 	"github.com/DataDog/datadog-agent/test/new-e2e/pkg/provisioners"
 	"github.com/DataDog/datadog-agent/test/new-e2e/pkg/runner"
 	"github.com/DataDog/datadog-agent/test/new-e2e/pkg/utils/optional"
-
 	"github.com/DataDog/test-infra-definitions/common/config"
 	"github.com/DataDog/test-infra-definitions/components/datadog/agent/helm"
-	"github.com/DataDog/test-infra-definitions/resources/local"
-
 	fakeintakeComp "github.com/DataDog/test-infra-definitions/components/datadog/fakeintake"
 	"github.com/DataDog/test-infra-definitions/components/datadog/kubernetesagentparams"
 	kubeComp "github.com/DataDog/test-infra-definitions/components/kubernetes"
+	"github.com/DataDog/test-infra-definitions/resources/local"
 	"github.com/DataDog/test-infra-definitions/scenarios/aws/fakeintake"
-
-	"github.com/pulumi/pulumi-kubernetes/sdk/v4/go/kubernetes"
-	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
 )
 
 const (
diff --git a/test/new-e2e/tests/npm/cilium_lb_conntracker_test.go b/test/new-e2e/tests/npm/cilium_lb_conntracker_test.go
new file mode 100644
index 000000000000..0f3c6fa4f4f0
--- /dev/null
+++ b/test/new-e2e/tests/npm/cilium_lb_conntracker_test.go
@@ -0,0 +1,218 @@
+// Unless explicitly stated otherwise all files in this repository are licensed
+// under the Apache License Version 2.0.
+// This product includes software developed at Datadog (https://www.datadoghq.com/).
+// Copyright 2016-present Datadog, Inc.
+
+package npm
+
+import (
+	"context"
+	"encoding/json"
+	"fmt"
+	"strings"
+	"testing"
+	"time"
+
+	"github.com/DataDog/agent-payload/v5/process"
+	"github.com/pulumi/pulumi-kubernetes/sdk/v4/go/kubernetes"
+	corev1 "github.com/pulumi/pulumi-kubernetes/sdk/v4/go/kubernetes/core/v1"
+	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
+	"github.com/stretchr/testify/assert"
+	"github.com/stretchr/testify/require"
+	v1 "k8s.io/apimachinery/pkg/apis/meta/v1"
+
+	"github.com/DataDog/datadog-agent/test/new-e2e/pkg/e2e"
+	"github.com/DataDog/datadog-agent/test/new-e2e/pkg/environments"
+	awskubernetes "github.com/DataDog/datadog-agent/test/new-e2e/pkg/provisioners/aws/kubernetes"
+	"github.com/DataDog/test-infra-definitions/common/config"
+	npmtools "github.com/DataDog/test-infra-definitions/components/datadog/apps/npm-tools"
+	"github.com/DataDog/test-infra-definitions/components/datadog/kubernetesagentparams"
+	kubeComp "github.com/DataDog/test-infra-definitions/components/kubernetes"
+	"github.com/DataDog/test-infra-definitions/components/kubernetes/cilium"
+	"github.com/DataDog/test-infra-definitions/components/kubernetes/istio"
+)
+
+type ciliumLBConntrackerTestSuite struct {
+	e2e.BaseSuite[environments.Kubernetes]
+
+	httpBinService *corev1.Service
+}
+
+func TestCiliumLBConntracker(t *testing.T) {
+	// TODO: find a way to update this list dynamically
+	versionsToTest := []string{"1.15.14", "1.16.7", "1.17.1"}
+	for _, v := range versionsToTest {
+		t.Run(fmt.Sprintf("version %s", v), func(_t *testing.T) {
+			_t.Parallel()
+
+			testCiliumLBConntracker(t, v)
+		})
+	}
+}
+
+func testCiliumLBConntracker(t *testing.T, ciliumVersion string) {
+	t.Helper()
+
+	suite := &ciliumLBConntrackerTestSuite{}
+
+	httpBinServiceInstall := func(e config.Env, kubeProvider *kubernetes.Provider) (*kubeComp.Workload, error) {
+		var err error
+		suite.httpBinService, err = istio.NewHttpbinServiceInstallation(e, pulumi.Provider(kubeProvider))
+		return &kubeComp.Workload{}, err
+	}
+
+	npmToolsWorkload := func(e config.Env, kubeProvider *kubernetes.Provider) (*kubeComp.Workload, error) {
+		// NPM tools Workload
+		return npmtools.K8sAppDefinition(e, kubeProvider, "npmtools", "http://httpbin.default.svc.cluster.local:8000")
+	}
+
+	ciliumHelmValues := map[string]pulumi.Input{
+		"kubeProxyReplacement": pulumi.BoolPtr(true),
+		"ipam": pulumi.Map{
+			"method": pulumi.StringPtr("kubernetes"),
+		},
+		"socketLB": pulumi.Map{
+			"hostNamespaceOnly": pulumi.BoolPtr(true),
+		},
+		"image": pulumi.Map{
+			"tag": pulumi.StringPtr(ciliumVersion),
+		},
+	}
+
+	name := strings.ReplaceAll(fmt.Sprintf("cilium-lb-%s", ciliumVersion), ".", "-")
+	e2e.Run(t, suite,
+		e2e.WithStackName(fmt.Sprintf("stack-%s", name)),
+		e2e.WithProvisioner(
+			awskubernetes.KindProvisioner(
+				awskubernetes.WithName(name),
+				awskubernetes.WithCiliumOptions(cilium.WithHelmValues(ciliumHelmValues), cilium.WithVersion(ciliumVersion)),
+				awskubernetes.WithAgentOptions(kubernetesagentparams.WithHelmValues(systemProbeConfigWithCiliumLB)),
+				awskubernetes.WithWorkloadApp(httpBinServiceInstall),
+				awskubernetes.WithWorkloadApp(npmToolsWorkload),
+			),
+		),
+	)
+}
+
+// BeforeTest will be called before each test
+func (suite *ciliumLBConntrackerTestSuite) BeforeTest(suiteName, testName string) {
+	suite.BaseSuite.BeforeTest(suiteName, testName)
+	// default is to reset the current state of the fakeintake aggregators
+	if !suite.BaseSuite.IsDevMode() {
+		suite.Env().FakeIntake.Client().FlushServerAndResetAggregators()
+	}
+}
+
+// AfterTest will be called after each test
+func (suite *ciliumLBConntrackerTestSuite) AfterTest(suiteName, testName string) {
+	test1HostFakeIntakeNPMDumpInfo(suite.T(), suite.Env().FakeIntake)
+
+	suite.BaseSuite.AfterTest(suiteName, testName)
+}
+
+func (suite *ciliumLBConntrackerTestSuite) TestCiliumConntracker() {
+	fakeIntake := suite.Env().FakeIntake
+
+	var hostname string
+	suite.Require().EventuallyWithT(func(collect *assert.CollectT) {
+		names, err := fakeIntake.Client().GetConnectionsNames()
+		if assert.NoError(collect, err, "error getting connection names") &&
+			assert.NotEmpty(collect, names) {
+			hostname = names[0]
+		}
+	}, time.Minute, time.Second, "timed out getting connection names")
+
+	var svcConns []*process.Connection
+	suite.Require().EventuallyWithT(func(collect *assert.CollectT) {
+		cnx, err := fakeIntake.Client().GetConnections()
+		require.NoError(collect, err, "error getting connections")
+		payloads := cnx.GetPayloadsByName(hostname)
+		// only look at the last two payloads
+		require.Greater(collect, len(payloads), 1, "at least 2 payloads not present")
+
+		svcConns = nil
+		for _, c := range append(payloads[len(payloads)-2].Connections, payloads[len(payloads)-1].Connections...) {
+			if c.Raddr.Port != 8000 {
+				return
+			}
+
+			if !assert.NotNil(collect, c.IpTranslation, "ip translation is nil for service connection") {
+				return
+			}
+
+			svcConns = append(svcConns, c)
+		}
+
+		assert.NotEmpty(collect, svcConns, "no connections for service found")
+	}, time.Minute, time.Second, "could not find connections for service")
+
+	backends, frontendIP := suite.httpBinCiliumService()
+	for _, c := range svcConns {
+		suite.Assert().Equalf(frontendIP, c.Raddr.Ip, "front end address not equal to connection raddr")
+		suite.Assert().Conditionf(func() bool {
+			for _, be := range backends {
+				if be.ip == c.IpTranslation.ReplSrcIP && be.port == uint16(c.IpTranslation.ReplSrcPort) {
+					return true
+				}
+			}
+
+			return false
+		}, "")
+	}
+}
+
+type ciliumBackend struct {
+	ip   string
+	port uint16
+}
+
+func (suite *ciliumLBConntrackerTestSuite) httpBinCiliumService() (backends []ciliumBackend, frontendIP string) {
+	t := suite.T()
+	t.Helper()
+
+	var stdout string
+	require.EventuallyWithT(t, func(collect *assert.CollectT) {
+		ciliumPods, err := suite.Env().KubernetesCluster.Client().CoreV1().Pods("kube-system").List(context.Background(), v1.ListOptions{
+			LabelSelector: "k8s-app=cilium",
+		})
+		require.NoError(collect, err, "could no get cilium pods")
+		require.NotNil(collect, ciliumPods, "cilium pods object is nil")
+		require.NotEmpty(collect, ciliumPods.Items, "no cilium pods found")
+
+		pod := ciliumPods.Items[0]
+		var stderr string
+		stdout, stderr, err = suite.Env().KubernetesCluster.KubernetesClient.PodExec("kube-system", pod.Name, "cilium-agent", []string{"cilium-dbg", "service", "list", "-o", "json"})
+		require.NoError(collect, err, "error getting cilium service list")
+		require.Empty(collect, stderr, "got output on stderr from cilium service list command", stderr)
+		require.NotEmpty(collect, stdout, "empty output from cilium-dbg service list command")
+	}, 20*time.Second, time.Second, "could not get cilium-agent pod")
+
+	var services []interface{}
+	err := json.Unmarshal([]byte(stdout), &services)
+	suite.Require().NoError(err, "error deserializing output of cilium-dbg service list command")
+	for _, svc := range services {
+		spec := svc.(map[string]interface{})["spec"].(map[string]interface{})
+		frontendAddr := spec["frontend-address"].(map[string]interface{})
+		if frontendAddrPort := frontendAddr["port"].(float64); frontendAddrPort != 8000 {
+			continue
+		}
+		if frontendAddrProto, ok := frontendAddr["protocol"]; ok && frontendAddrProto.(string) != "TCP" {
+			continue
+		}
+
+		frontendIP = frontendAddr["ip"].(string)
+		_backendAddrs := spec["backend-addresses"].([]interface{})
+		for _, be := range _backendAddrs {
+			be := be.(map[string]interface{})
+			backends = append(backends, ciliumBackend{
+				ip:   be["ip"].(string),
+				port: uint16(be["port"].(float64)),
+			})
+		}
+
+		break
+	}
+
+	return backends, frontendIP
+
+}
diff --git a/test/new-e2e/tests/npm/config.go b/test/new-e2e/tests/npm/config.go
index 549bcee4660f..d834bc7f7419 100644
--- a/test/new-e2e/tests/npm/config.go
+++ b/test/new-e2e/tests/npm/config.go
@@ -9,8 +9,9 @@ package npm
 import (
 	_ "embed"
 
-	"github.com/DataDog/test-infra-definitions/components/datadog/dockeragentparams"
 	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
+
+	"github.com/DataDog/test-infra-definitions/components/datadog/dockeragentparams"
 )
 
 // systemProbeConfigNPM define the embedded minimal configuration for NPM
@@ -29,3 +30,6 @@ func systemProbeConfigNPMEnv() []dockeragentparams.Option {
 		dockeragentparams.WithAgentServiceEnvVariable("DD_SYSTEM_PROBE_NETWORK_ENABLED", pulumi.StringPtr("true")),
 	}
 }
+
+//go:embed config/npm-helm-cilium-lb-values.yaml
+var systemProbeConfigWithCiliumLB string
diff --git a/test/new-e2e/tests/npm/config/npm-helm-cilium-lb-values.yaml b/test/new-e2e/tests/npm/config/npm-helm-cilium-lb-values.yaml
new file mode 100644
index 000000000000..0589d8494e97
--- /dev/null
+++ b/test/new-e2e/tests/npm/config/npm-helm-cilium-lb-values.yaml
@@ -0,0 +1,10 @@
+datadog:
+  networkMonitoring:
+    enabled: true
+
+agents:
+  containers:
+    systemProbe:
+      env:
+        - name: DD_NETWORK_CONFIG_ENABLE_CILIUM_LB_CONNTRACKER
+          value: "true"
diff --git a/test/new-e2e/tests/npm/eks_1host_test.go b/test/new-e2e/tests/npm/eks_1host_test.go
index bfdd551266b8..dc0b6517358b 100644
--- a/test/new-e2e/tests/npm/eks_1host_test.go
+++ b/test/new-e2e/tests/npm/eks_1host_test.go
@@ -8,8 +8,14 @@ package npm
 import (
 	"testing"
 
+	"github.com/pulumi/pulumi-kubernetes/sdk/v4/go/kubernetes"
 	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
 
+	"github.com/DataDog/datadog-agent/test/new-e2e/pkg/components"
+	"github.com/DataDog/datadog-agent/test/new-e2e/pkg/e2e"
+	"github.com/DataDog/datadog-agent/test/new-e2e/pkg/environments"
+	"github.com/DataDog/datadog-agent/test/new-e2e/pkg/provisioners"
+	envkube "github.com/DataDog/datadog-agent/test/new-e2e/pkg/provisioners/aws/kubernetes"
 	"github.com/DataDog/test-infra-definitions/common/config"
 	npmtools "github.com/DataDog/test-infra-definitions/components/datadog/apps/npm-tools"
 	"github.com/DataDog/test-infra-definitions/components/datadog/kubernetesagentparams"
@@ -18,14 +24,6 @@ import (
 	"github.com/DataDog/test-infra-definitions/resources/aws"
 	"github.com/DataDog/test-infra-definitions/scenarios/aws/ec2"
 	"github.com/DataDog/test-infra-definitions/scenarios/aws/eks"
-
-	"github.com/DataDog/datadog-agent/test/new-e2e/pkg/components"
-	"github.com/DataDog/datadog-agent/test/new-e2e/pkg/e2e"
-	"github.com/DataDog/datadog-agent/test/new-e2e/pkg/environments"
-	"github.com/DataDog/datadog-agent/test/new-e2e/pkg/provisioners"
-	envkube "github.com/DataDog/datadog-agent/test/new-e2e/pkg/provisioners/aws/kubernetes"
-
-	"github.com/pulumi/pulumi-kubernetes/sdk/v4/go/kubernetes"
 )
 
 type eksHttpbinEnv struct {


Reviews:
user: login: AmitaiBl
state: APPROVED
author_association: CONTRIBUTOR
submitted_at: 2025-03-11T01:01:33Z
user: login: CelianR
state: APPROVED
author_association: CONTRIBUTOR
submitted_at: 2025-03-11T08:25:30Z
user: login: L3n41c
body: 👍🏻 LGTM for files owned by @DataDog/container-integrations.
state: APPROVED
author_association: MEMBER
submitted_at: 2025-03-11T09:33:59Z
user: login: hmahmood
state: COMMENTED
author_association: CONTRIBUTOR
submitted_at: 2025-03-11T14:54:06Z

Review comments:
diff_hunk: @@ -0,0 +1,219 @@
+// Unless explicitly stated otherwise all files in this repository are licensed
+// under the Apache License Version 2.0.
+// This product includes software developed at Datadog (https://www.datadoghq.com/).
+// Copyright 2016-present Datadog, Inc.
+
+package npm
+
+import (
+	"context"
+	"encoding/json"
+	"fmt"
+	"strings"
+	"testing"
+	"time"
+
+	"github.com/DataDog/agent-payload/v5/process"
+	"github.com/pulumi/pulumi-kubernetes/sdk/v4/go/kubernetes"
+	corev1 "github.com/pulumi/pulumi-kubernetes/sdk/v4/go/kubernetes/core/v1"
+	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
+	"github.com/stretchr/testify/assert"
+	"github.com/stretchr/testify/require"
+	v1 "k8s.io/apimachinery/pkg/apis/meta/v1"
+
+	"github.com/DataDog/datadog-agent/test/new-e2e/pkg/e2e"
+	"github.com/DataDog/datadog-agent/test/new-e2e/pkg/environments"
+	awskubernetes "github.com/DataDog/datadog-agent/test/new-e2e/pkg/provisioners/aws/kubernetes"
+	"github.com/DataDog/test-infra-definitions/common/config"
+	npmtools "github.com/DataDog/test-infra-definitions/components/datadog/apps/npm-tools"
+	"github.com/DataDog/test-infra-definitions/components/datadog/kubernetesagentparams"
+	kubeComp "github.com/DataDog/test-infra-definitions/components/kubernetes"
+	"github.com/DataDog/test-infra-definitions/components/kubernetes/cilium"
+	"github.com/DataDog/test-infra-definitions/components/kubernetes/istio"
+)
+
+type ciliumLBConntrackerTestSuite struct {
+	e2e.BaseSuite[environments.Kubernetes]
+
+	httpBinService *corev1.Service
+}
+
+func TestCiliumLBConntracker(t *testing.T) {
+	// TODO: find a way to update this list dynamically
+	versionsToTest := []string{"1.15.14", "1.16.7", "1.17.1"}
+	for _, v := range versionsToTest {
+		v := v
path: test/new-e2e/tests/npm/cilium_lb_conntracker_test.go
user: login: L3n41c
body: This should be useless since Go 1.22: https://go.dev/doc/go1.22#language
created_at: 2025-03-11T09:28:28Z
author_association: MEMBER
diff_hunk: @@ -0,0 +1,219 @@
+// Unless explicitly stated otherwise all files in this repository are licensed
+// under the Apache License Version 2.0.
+// This product includes software developed at Datadog (https://www.datadoghq.com/).
+// Copyright 2016-present Datadog, Inc.
+
+package npm
+
+import (
+	"context"
+	"encoding/json"
+	"fmt"
+	"strings"
+	"testing"
+	"time"
+
+	"github.com/DataDog/agent-payload/v5/process"
+	"github.com/pulumi/pulumi-kubernetes/sdk/v4/go/kubernetes"
+	corev1 "github.com/pulumi/pulumi-kubernetes/sdk/v4/go/kubernetes/core/v1"
+	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
+	"github.com/stretchr/testify/assert"
+	"github.com/stretchr/testify/require"
+	v1 "k8s.io/apimachinery/pkg/apis/meta/v1"
+
+	"github.com/DataDog/datadog-agent/test/new-e2e/pkg/e2e"
+	"github.com/DataDog/datadog-agent/test/new-e2e/pkg/environments"
+	awskubernetes "github.com/DataDog/datadog-agent/test/new-e2e/pkg/provisioners/aws/kubernetes"
+	"github.com/DataDog/test-infra-definitions/common/config"
+	npmtools "github.com/DataDog/test-infra-definitions/components/datadog/apps/npm-tools"
+	"github.com/DataDog/test-infra-definitions/components/datadog/kubernetesagentparams"
+	kubeComp "github.com/DataDog/test-infra-definitions/components/kubernetes"
+	"github.com/DataDog/test-infra-definitions/components/kubernetes/cilium"
+	"github.com/DataDog/test-infra-definitions/components/kubernetes/istio"
+)
+
+type ciliumLBConntrackerTestSuite struct {
+	e2e.BaseSuite[environments.Kubernetes]
+
+	httpBinService *corev1.Service
+}
+
+func TestCiliumLBConntracker(t *testing.T) {
+	// TODO: find a way to update this list dynamically
+	versionsToTest := []string{"1.15.14", "1.16.7", "1.17.1"}
+	for _, v := range versionsToTest {
+		v := v
path: test/new-e2e/tests/npm/cilium_lb_conntracker_test.go
user: login: hmahmood
body: Cool, thanks
created_at: 2025-03-11T14:54:06Z
author_association: CONTRIBUTOR

PR comments:
user: login: agent-platform-auto-pr[bot]
created_at: 2025-02-25T00:37:09Z
body: 
[Fast Unit Tests Report]

On pipeline [58612935](https://gitlab.ddbuild.io/DataDog/datadog-agent/-/pipelines/58612935) ([CI Visibility](https://app.datadoghq.com/ci/pipeline-executions?query=ci_level%3Apipeline%20%40ci.pipeline.name%3ADataDog%2Fdatadog-agent%20%40ci.pipeline.id%3A58612935&fromUser=false&index=cipipeline)). The following jobs did not run any unit tests:

<details>
<summary>Jobs:</summary>

  - tests_deb-arm64-py3
  - tests_deb-x64-py3
  - tests_flavor_dogstatsd_deb-x64
  - tests_flavor_heroku_deb-x64
  - tests_flavor_iot_deb-x64
  - tests_rpm-arm64-py3
  - tests_rpm-x64-py3
  - tests_windows-x64
</details>

If you modified Go files and expected unit tests to run in these jobs, please double check the job logs. If you think tests should have been executed reach out to #agent-devx-help
author_association: CONTRIBUTOR
user: login: cit-pr-commenter[bot]
created_at: 2025-02-25T01:00:42Z
body: ## Regression Detector

# Regression Detector Results

[Metrics dashboard](https://app.datadoghq.com/dashboard/ykh-ua8-vcu/SMP-Regression-Detector-Metrics?fromUser=true&refresh_mode=paused&tpl_var_run-id%5B0%5D=bf9f42ba-1c48-45a7-bf7e-1535bc83ea44&view=spans&from_ts=1741804068000&to_ts=1741804668000&live=false)  
[Target profiles](https://app.datadoghq.com/profiling/explorer?query=env%3Asingle-machine-performance%20service%3Adatadog-agent%20job_id%3Abf9f42ba-1c48-45a7-bf7e-1535bc83ea44&agg_m=count&agg_m_source=base&agg_t=count&fromUser=false&viz=stream&start=1741796868000&end=1741808268000&paused=true)  
Run ID: bf9f42ba-1c48-45a7-bf7e-1535bc83ea44

Baseline: 126a940afa49fc1e8f70fd4acf1d902238b9cd40
Comparison: ffce0a305f0c00a57ff892848f97a3aa6f97ada0
[Diff](126a940afa49fc1e8f70fd4acf1d902238b9cd40...ffce0a305f0c00a57ff892848f97a3aa6f97ada0)



## Optimization Goals: ✅ Improvement(s) detected

| perf | experiment                                 | goal               | Δ mean % | Δ mean % CI    | trials | links                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                |
|------|--------------------------------------------|--------------------|----------|----------------|--------|------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
| ✅   | uds_dogstatsd_20mb_12k_contexts_20_senders | memory utilization | -6.37    | [-6.42, -6.32] | 1      | [Logs](https://app.datadoghq.com/logs?query=experiment%3Auds_dogstatsd_20mb_12k_contexts_20_senders%20run_id%3Abf9f42ba-1c48-45a7-bf7e-1535bc83ea44&agg_m=count&agg_m_source=base&agg_q=%40span.url&agg_q_source=base&agg_t=count&fromUser=true&index=single-machine-performance-target-logs&messageDisplay=inline&refresh_mode=paused&storage=hot&stream_sort=time%2Cdesc&top_n=100&top_o=top&viz=stream&x_missing=true&from_ts=1741796868000&to_ts=1741808268000&live=false)                                                                                                                                                                                                                                                                                                                       |
| ✅   | quality_gate_idle                          | memory utilization | -7.66    | [-7.73, -7.58] | 1      | [Logs](https://app.datadoghq.com/logs?query=experiment%3Aquality_gate_idle%20run_id%3Abf9f42ba-1c48-45a7-bf7e-1535bc83ea44&agg_m=count&agg_m_source=base&agg_q=%40span.url&agg_q_source=base&agg_t=count&fromUser=true&index=single-machine-performance-target-logs&messageDisplay=inline&refresh_mode=paused&storage=hot&stream_sort=time%2Cdesc&top_n=100&top_o=top&viz=stream&x_missing=true&from_ts=1741796868000&to_ts=1741808268000&live=false) [bounds checks dashboard](https://app.datadoghq.com/dashboard/vz3-jd5-bdi?fromUser=true&refresh_mode=paused&tpl_var_experiment%5B0%5D=quality_gate_idle&tpl_var_job_id%5B0%5D=bf9f42ba-1c48-45a7-bf7e-1535bc83ea44&tpl_var_run-id%5B0%5D=bf9f42ba-1c48-45a7-bf7e-1535bc83ea44&view=spans&from_ts=1741804068000&to_ts=1741804668000&live=false) |



<details>
<summary><h2>
Fine details of change detection per experiment
</h2></summary>

| perf | experiment                                   | goal               | Δ mean % | Δ mean % CI    | trials | links                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          |
|------|----------------------------------------------|--------------------|----------|----------------|--------|--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
| ➖   | tcp_syslog_to_blackhole                      | ingress throughput | +1.68    | [+1.62, +1.74] | 1      | [Logs](https://app.datadoghq.com/logs?query=experiment%3Atcp_syslog_to_blackhole%20run_id%3Abf9f42ba-1c48-45a7-bf7e-1535bc83ea44&agg_m=count&agg_m_source=base&agg_q=%40span.url&agg_q_source=base&agg_t=count&fromUser=true&index=single-machine-performance-target-logs&messageDisplay=inline&refresh_mode=paused&storage=hot&stream_sort=time%2Cdesc&top_n=100&top_o=top&viz=stream&x_missing=true&from_ts=1741796868000&to_ts=1741808268000&live=false)                                                                                                                                                                                                                                                                                                                                                                    |
| ➖   | uds_dogstatsd_to_api_cpu                     | % cpu utilization  | +0.72    | [-0.11, +1.56] | 1      | [Logs](https://app.datadoghq.com/logs?query=experiment%3Auds_dogstatsd_to_api_cpu%20run_id%3Abf9f42ba-1c48-45a7-bf7e-1535bc83ea44&agg_m=count&agg_m_source=base&agg_q=%40span.url&agg_q_source=base&agg_t=count&fromUser=true&index=single-machine-performance-target-logs&messageDisplay=inline&refresh_mode=paused&storage=hot&stream_sort=time%2Cdesc&top_n=100&top_o=top&viz=stream&x_missing=true&from_ts=1741796868000&to_ts=1741808268000&live=false)                                                                                                                                                                                                                                                                                                                                                                   |
| ➖   | file_to_blackhole_1000ms_latency_linear_load | egress throughput  | +0.45    | [-0.03, +0.93] | 1      | [Logs](https://app.datadoghq.com/logs?query=experiment%3Afile_to_blackhole_1000ms_latency_linear_load%20run_id%3Abf9f42ba-1c48-45a7-bf7e-1535bc83ea44&agg_m=count&agg_m_source=base&agg_q=%40span.url&agg_q_source=base&agg_t=count&fromUser=true&index=single-machine-performance-target-logs&messageDisplay=inline&refresh_mode=paused&storage=hot&stream_sort=time%2Cdesc&top_n=100&top_o=top&viz=stream&x_missing=true&from_ts=1741796868000&to_ts=1741808268000&live=false)                                                                                                                                                                                                                                                                                                                                               |
| ➖   | file_to_blackhole_0ms_latency_http2          | egress throughput  | +0.01    | [-0.76, +0.78] | 1      | [Logs](https://app.datadoghq.com/logs?query=experiment%3Afile_to_blackhole_0ms_latency_http2%20run_id%3Abf9f42ba-1c48-45a7-bf7e-1535bc83ea44&agg_m=count&agg_m_source=base&agg_q=%40span.url&agg_q_source=base&agg_t=count&fromUser=true&index=single-machine-performance-target-logs&messageDisplay=inline&refresh_mode=paused&storage=hot&stream_sort=time%2Cdesc&top_n=100&top_o=top&viz=stream&x_missing=true&from_ts=1741796868000&to_ts=1741808268000&live=false)                                                                                                                                                                                                                                                                                                                                                        |
| ➖   | file_to_blackhole_100ms_latency              | egress throughput  | +0.01    | [-0.71, +0.72] | 1      | [Logs](https://app.datadoghq.com/logs?query=experiment%3Afile_to_blackhole_100ms_latency%20run_id%3Abf9f42ba-1c48-45a7-bf7e-1535bc83ea44&agg_m=count&agg_m_source=base&agg_q=%40span.url&agg_q_source=base&agg_t=count&fromUser=true&index=single-machine-performance-target-logs&messageDisplay=inline&refresh_mode=paused&storage=hot&stream_sort=time%2Cdesc&top_n=100&top_o=top&viz=stream&x_missing=true&from_ts=1741796868000&to_ts=1741808268000&live=false)                                                                                                                                                                                                                                                                                                                                                            |
| ➖   | file_to_blackhole_300ms_latency              | egress throughput  | +0.01    | [-0.62, +0.63] | 1      | [Logs](https://app.datadoghq.com/logs?query=experiment%3Afile_to_blackhole_300ms_latency%20run_id%3Abf9f42ba-1c48-45a7-bf7e-1535bc83ea44&agg_m=count&agg_m_source=base&agg_q=%40span.url&agg_q_source=base&agg_t=count&fromUser=true&index=single-machine-performance-target-logs&messageDisplay=inline&refresh_mode=paused&storage=hot&stream_sort=time%2Cdesc&top_n=100&top_o=top&viz=stream&x_missing=true&from_ts=1741796868000&to_ts=1741808268000&live=false)                                                                                                                                                                                                                                                                                                                                                            |
| ➖   | uds_dogstatsd_to_api                         | ingress throughput | -0.01    | [-0.29, +0.28] | 1      | [Logs](https://app.datadoghq.com/logs?query=experiment%3Auds_dogstatsd_to_api%20run_id%3Abf9f42ba-1c48-45a7-bf7e-1535bc83ea44&agg_m=count&agg_m_source=base&agg_q=%40span.url&agg_q_source=base&agg_t=count&fromUser=true&index=single-machine-performance-target-logs&messageDisplay=inline&refresh_mode=paused&storage=hot&stream_sort=time%2Cdesc&top_n=100&top_o=top&viz=stream&x_missing=true&from_ts=1741796868000&to_ts=1741808268000&live=false)                                                                                                                                                                                                                                                                                                                                                                       |
| ➖   | file_to_blackhole_0ms_latency_http1          | egress throughput  | -0.01    | [-0.86, +0.85] | 1      | [Logs](https://app.datadoghq.com/logs?query=experiment%3Afile_to_blackhole_0ms_latency_http1%20run_id%3Abf9f42ba-1c48-45a7-bf7e-1535bc83ea44&agg_m=count&agg_m_source=base&agg_q=%40span.url&agg_q_source=base&agg_t=count&fromUser=true&index=single-machine-performance-target-logs&messageDisplay=inline&refresh_mode=paused&storage=hot&stream_sort=time%2Cdesc&top_n=100&top_o=top&viz=stream&x_missing=true&from_ts=1741796868000&to_ts=1741808268000&live=false)                                                                                                                                                                                                                                                                                                                                                        |
| ➖   | tcp_dd_logs_filter_exclude                   | ingress throughput | -0.01    | [-0.03, +0.01] | 1      | [Logs](https://app.datadoghq.com/logs?query=experiment%3Atcp_dd_logs_filter_exclude%20run_id%3Abf9f42ba-1c48-45a7-bf7e-1535bc83ea44&agg_m=count&agg_m_source=base&agg_q=%40span.url&agg_q_source=base&agg_t=count&fromUser=true&index=single-machine-performance-target-logs&messageDisplay=inline&refresh_mode=paused&storage=hot&stream_sort=time%2Cdesc&top_n=100&top_o=top&viz=stream&x_missing=true&from_ts=1741796868000&to_ts=1741808268000&live=false)                                                                                                                                                                                                                                                                                                                                                                 |
| ➖   | file_to_blackhole_0ms_latency                | egress throughput  | -0.06    | [-0.94, +0.82] | 1      | [Logs](https://app.datadoghq.com/logs?query=experiment%3Afile_to_blackhole_0ms_latency%20run_id%3Abf9f42ba-1c48-45a7-bf7e-1535bc83ea44&agg_m=count&agg_m_source=base&agg_q=%40span.url&agg_q_source=base&agg_t=count&fromUser=true&index=single-machine-performance-target-logs&messageDisplay=inline&refresh_mode=paused&storage=hot&stream_sort=time%2Cdesc&top_n=100&top_o=top&viz=stream&x_missing=true&from_ts=1741796868000&to_ts=1741808268000&live=false)                                                                                                                                                                                                                                                                                                                                                              |
| ➖   | file_to_blackhole_500ms_latency              | egress throughput  | -0.13    | [-0.90, +0.65] | 1      | [Logs](https://app.datadoghq.com/logs?query=experiment%3Afile_to_blackhole_500ms_latency%20run_id%3Abf9f42ba-1c48-45a7-bf7e-1535bc83ea44&agg_m=count&agg_m_source=base&agg_q=%40span.url&agg_q_source=base&agg_t=count&fromUser=true&index=single-machine-performance-target-logs&messageDisplay=inline&refresh_mode=paused&storage=hot&stream_sort=time%2Cdesc&top_n=100&top_o=top&viz=stream&x_missing=true&from_ts=1741796868000&to_ts=1741808268000&live=false)                                                                                                                                                                                                                                                                                                                                                            |
| ➖   | file_to_blackhole_1000ms_latency             | egress throughput  | -0.27    | [-1.04, +0.49] | 1      | [Logs](https://app.datadoghq.com/logs?query=experiment%3Afile_to_blackhole_1000ms_latency%20run_id%3Abf9f42ba-1c48-45a7-bf7e-1535bc83ea44&agg_m=count&agg_m_source=base&agg_q=%40span.url&agg_q_source=base&agg_t=count&fromUser=true&index=single-machine-performance-target-logs&messageDisplay=inline&refresh_mode=paused&storage=hot&stream_sort=time%2Cdesc&top_n=100&top_o=top&viz=stream&x_missing=true&from_ts=1741796868000&to_ts=1741808268000&live=false)                                                                                                                                                                                                                                                                                                                                                           |
| ➖   | quality_gate_logs                            | % cpu utilization  | -1.95    | [-4.67, +0.78] | 1      | [Logs](https://app.datadoghq.com/logs?query=experiment%3Aquality_gate_logs%20run_id%3Abf9f42ba-1c48-45a7-bf7e-1535bc83ea44&agg_m=count&agg_m_source=base&agg_q=%40span.url&agg_q_source=base&agg_t=count&fromUser=true&index=single-machine-performance-target-logs&messageDisplay=inline&refresh_mode=paused&storage=hot&stream_sort=time%2Cdesc&top_n=100&top_o=top&viz=stream&x_missing=true&from_ts=1741796868000&to_ts=1741808268000&live=false)                                                                                                                                                                                                                                                                                                                                                                          |
| ➖   | file_tree                                    | memory utilization | -3.99    | [-4.21, -3.77] | 1      | [Logs](https://app.datadoghq.com/logs?query=experiment%3Afile_tree%20run_id%3Abf9f42ba-1c48-45a7-bf7e-1535bc83ea44&agg_m=count&agg_m_source=base&agg_q=%40span.url&agg_q_source=base&agg_t=count&fromUser=true&index=single-machine-performance-target-logs&messageDisplay=inline&refresh_mode=paused&storage=hot&stream_sort=time%2Cdesc&top_n=100&top_o=top&viz=stream&x_missing=true&from_ts=1741796868000&to_ts=1741808268000&live=false)                                                                                                                                                                                                                                                                                                                                                                                  |
| ➖   | quality_gate_idle_all_features               | memory utilization | -4.36    | [-4.46, -4.26] | 1      | [Logs](https://app.datadoghq.com/logs?query=experiment%3Aquality_gate_idle_all_features%20run_id%3Abf9f42ba-1c48-45a7-bf7e-1535bc83ea44&agg_m=count&agg_m_source=base&agg_q=%40span.url&agg_q_source=base&agg_t=count&fromUser=true&index=single-machine-performance-target-logs&messageDisplay=inline&refresh_mode=paused&storage=hot&stream_sort=time%2Cdesc&top_n=100&top_o=top&viz=stream&x_missing=true&from_ts=1741796868000&to_ts=1741808268000&live=false) [bounds checks dashboard](https://app.datadoghq.com/dashboard/vz3-jd5-bdi?fromUser=true&refresh_mode=paused&tpl_var_experiment%5B0%5D=quality_gate_idle_all_features&tpl_var_job_id%5B0%5D=bf9f42ba-1c48-45a7-bf7e-1535bc83ea44&tpl_var_run-id%5B0%5D=bf9f42ba-1c48-45a7-bf7e-1535bc83ea44&view=spans&from_ts=1741804068000&to_ts=1741804668000&live=false) |
| ✅   | uds_dogstatsd_20mb_12k_contexts_20_senders   | memory utilization | -6.37    | [-6.42, -6.32] | 1      | [Logs](https://app.datadoghq.com/logs?query=experiment%3Auds_dogstatsd_20mb_12k_contexts_20_senders%20run_id%3Abf9f42ba-1c48-45a7-bf7e-1535bc83ea44&agg_m=count&agg_m_source=base&agg_q=%40span.url&agg_q_source=base&agg_t=count&fromUser=true&index=single-machine-performance-target-logs&messageDisplay=inline&refresh_mode=paused&storage=hot&stream_sort=time%2Cdesc&top_n=100&top_o=top&viz=stream&x_missing=true&from_ts=1741796868000&to_ts=1741808268000&live=false)                                                                                                                                                                                                                                                                                                                                                 |
| ✅   | quality_gate_idle                            | memory utilization | -7.66    | [-7.73, -7.58] | 1      | [Logs](https://app.datadoghq.com/logs?query=experiment%3Aquality_gate_idle%20run_id%3Abf9f42ba-1c48-45a7-bf7e-1535bc83ea44&agg_m=count&agg_m_source=base&agg_q=%40span.url&agg_q_source=base&agg_t=count&fromUser=true&index=single-machine-performance-target-logs&messageDisplay=inline&refresh_mode=paused&storage=hot&stream_sort=time%2Cdesc&top_n=100&top_o=top&viz=stream&x_missing=true&from_ts=1741796868000&to_ts=1741808268000&live=false) [bounds checks dashboard](https://app.datadoghq.com/dashboard/vz3-jd5-bdi?fromUser=true&refresh_mode=paused&tpl_var_experiment%5B0%5D=quality_gate_idle&tpl_var_job_id%5B0%5D=bf9f42ba-1c48-45a7-bf7e-1535bc83ea44&tpl_var_run-id%5B0%5D=bf9f42ba-1c48-45a7-bf7e-1535bc83ea44&view=spans&from_ts=1741804068000&to_ts=1741804668000&live=false)                           |
</details>


<details>
<summary><h2>
Bounds Checks: ✅ Passed
</h2></summary>

| perf | experiment                                   | bounds_check_name  | replicates_passed | links                                                                                                                                                                                                                                                                                                                                                       |
|------|----------------------------------------------|--------------------|-------------------|-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
| ✅   | file_to_blackhole_0ms_latency                | lost_bytes         | 10/10             |                                                                                                                                                                                                                                                                                                                                                             |
| ✅   | file_to_blackhole_0ms_latency                | memory_usage       | 10/10             |                                                                                                                                                                                                                                                                                                                                                             |
| ✅   | file_to_blackhole_0ms_latency_http1          | lost_bytes         | 10/10             |                                                                                                                                                                                                                                                                                                                                                             |
| ✅   | file_to_blackhole_0ms_latency_http1          | memory_usage       | 10/10             |                                                                                                                                                                                                                                                                                                                                                             |
| ✅   | file_to_blackhole_0ms_latency_http2          | lost_bytes         | 10/10             |                                                                                                                                                                                                                                                                                                                                                             |
| ✅   | file_to_blackhole_0ms_latency_http2          | memory_usage       | 10/10             |                                                                                                                                                                                                                                                                                                                                                             |
| ✅   | file_to_blackhole_1000ms_latency             | memory_usage       | 10/10             |                                                                                                                                                                                                                                                                                                                                                             |
| ✅   | file_to_blackhole_1000ms_latency_linear_load | memory_usage       | 10/10             |                                                                                                                                                                                                                                                                                                                                                             |
| ✅   | file_to_blackhole_100ms_latency              | lost_bytes         | 10/10             |                                                                                                                                                                                                                                                                                                                                                             |
| ✅   | file_to_blackhole_100ms_latency              | memory_usage       | 10/10             |                                                                                                                                                                                                                                                                                                                                                             |
| ✅   | file_to_blackhole_300ms_latency              | lost_bytes         | 10/10             |                                                                                                                                                                                                                                                                                                                                                             |
| ✅   | file_to_blackhole_300ms_latency              | memory_usage       | 10/10             |                                                                                                                                                                                                                                                                                                                                                             |
| ✅   | file_to_blackhole_500ms_latency              | lost_bytes         | 10/10             |                                                                                                                                                                                                                                                                                                                                                             |
| ✅   | file_to_blackhole_500ms_latency              | memory_usage       | 10/10             |                                                                                                                                                                                                                                                                                                                                                             |
| ✅   | quality_gate_idle                            | intake_connections | 10/10             | [bounds checks dashboard](https://app.datadoghq.com/dashboard/vz3-jd5-bdi?fromUser=true&refresh_mode=paused&tpl_var_experiment%5B0%5D=quality_gate_idle&tpl_var_job_id%5B0%5D=bf9f42ba-1c48-45a7-bf7e-1535bc83ea44&tpl_var_run-id%5B0%5D=bf9f42ba-1c48-45a7-bf7e-1535bc83ea44&view=spans&from_ts=1741804068000&to_ts=1741804668000&live=false)              |
| ✅   | quality_gate_idle                            | memory_usage       | 10/10             | [bounds checks dashboard](https://app.datadoghq.com/dashboard/vz3-jd5-bdi?fromUser=true&refresh_mode=paused&tpl_var_experiment%5B0%5D=quality_gate_idle&tpl_var_job_id%5B0%5D=bf9f42ba-1c48-45a7-bf7e-1535bc83ea44&tpl_var_run-id%5B0%5D=bf9f42ba-1c48-45a7-bf7e-1535bc83ea44&view=spans&from_ts=1741804068000&to_ts=1741804668000&live=false)              |
| ✅   | quality_gate_idle_all_features               | intake_connections | 10/10             | [bounds checks dashboard](https://app.datadoghq.com/dashboard/vz3-jd5-bdi?fromUser=true&refresh_mode=paused&tpl_var_experiment%5B0%5D=quality_gate_idle_all_features&tpl_var_job_id%5B0%5D=bf9f42ba-1c48-45a7-bf7e-1535bc83ea44&tpl_var_run-id%5B0%5D=bf9f42ba-1c48-45a7-bf7e-1535bc83ea44&view=spans&from_ts=1741804068000&to_ts=1741804668000&live=false) |
| ✅   | quality_gate_idle_all_features               | memory_usage       | 10/10             | [bounds checks dashboard](https://app.datadoghq.com/dashboard/vz3-jd5-bdi?fromUser=true&refresh_mode=paused&tpl_var_experiment%5B0%5D=quality_gate_idle_all_features&tpl_var_job_id%5B0%5D=bf9f42ba-1c48-45a7-bf7e-1535bc83ea44&tpl_var_run-id%5B0%5D=bf9f42ba-1c48-45a7-bf7e-1535bc83ea44&view=spans&from_ts=1741804068000&to_ts=1741804668000&live=false) |
| ✅   | quality_gate_logs                            | intake_connections | 10/10             |                                                                                                                                                                                                                                                                                                                                                             |
| ✅   | quality_gate_logs                            | lost_bytes         | 10/10             |                                                                                                                                                                                                                                                                                                                                                             |
| ✅   | quality_gate_logs                            | memory_usage       | 10/10             |                                                                                                                                                                                                                                                                                                                                                             |
</details>


<details>
<summary><h2>
Explanation
</h2></summary>

**Confidence level:** 90.00%
**Effect size tolerance:** |Δ mean %| ≥ 5.00%

Performance changes are noted in the **perf** column of each table:

* ✅ = significantly better comparison variant performance
* ❌ = significantly worse comparison variant performance
* ➖ = no significant change in performance

A regression test is an A/B test of target performance in a repeatable rig, where "performance" is measured as "comparison variant minus baseline variant" for an optimization goal (e.g., ingress throughput). Due to intrinsic variability in measuring that goal, we can only estimate its mean value for each experiment; we report uncertainty in that value as a 90.00% confidence interval denoted "Δ mean % CI".

For each experiment, we decide whether a change in performance is a "regression" -- a change worth investigating further -- if all of the following criteria are true:

1. Its estimated |Δ mean %| ≥ 5.00%, indicating the change is big enough to merit a closer look.

2. Its 90.00% confidence interval "Δ mean % CI" does not contain zero, indicating that *if our statistical model is accurate*, there is at least a 90.00% chance there is a difference in performance between baseline and comparison variants.

3. Its configuration does not mark it "erratic".
</details>

## CI Pass/Fail Decision

✅ **Passed.** All Quality Gates passed.

- **quality_gate_idle**, bounds check **memory_usage**: 10/10 replicas passed. Gate passed.
- **quality_gate_idle**, bounds check **intake_connections**: 10/10 replicas passed. Gate passed.
- **quality_gate_idle_all_features**, bounds check **intake_connections**: 10/10 replicas passed. Gate passed.
- **quality_gate_idle_all_features**, bounds check **memory_usage**: 10/10 replicas passed. Gate passed.
- **quality_gate_logs**, bounds check **intake_connections**: 10/10 replicas passed. Gate passed.
- **quality_gate_logs**, bounds check **memory_usage**: 10/10 replicas passed. Gate passed.
- **quality_gate_logs**, bounds check **lost_bytes**: 10/10 replicas passed. Gate passed.
author_association: NONE
user: login: agent-platform-auto-pr[bot]
created_at: 2025-03-07T21:10:04Z
body: ## Gitlab CI Configuration Changes

### Added Jobs
<details>
<summary><b>new-e2e-npm</b></summary>

```yaml
new-e2e-npm:
  after_script:
  - $CI_PROJECT_DIR/tools/ci/junit_upload.sh
  artifacts:
    expire_in: 2 weeks
    paths:
    - $E2E_OUTPUT_DIR
    - junit-*.tgz
    reports:
      annotations:
      - $EXTERNAL_LINKS_PATH
    when: always
  before_script:
  - mkdir -p $GOPATH/pkg/mod/cache && tar xJf modcache_e2e.tar.xz -C $GOPATH/pkg/mod/cache
    || exit 101
  - rm -f modcache_e2e.tar.xz
  - mkdir -p ~/.aws
  - '# Assume role to fetch only once credentials and avoid rate limits

    echo Assuming ddbuild-agent-ci role

    roleoutput="$(aws sts assume-role --role-arn arn:aws:iam::669783387624:role/ddbuild-agent-ci
    --external-id ddbuild-agent-ci --role-session-name RoleSession)"

    export AWS_ACCESS_KEY_ID="$(echo "$roleoutput" | jq -r ''.Credentials.AccessKeyId'')"

    export AWS_SECRET_ACCESS_KEY="$(echo "$roleoutput" | jq -r ''.Credentials.SecretAccessKey'')"

    export AWS_SESSION_TOKEN="$(echo "$roleoutput" | jq -r ''.Credentials.SessionToken'')"

    '
  - $CI_PROJECT_DIR/tools/ci/fetch_secret.sh $AGENT_QA_E2E ssh_public_key_rsa > $E2E_AWS_PUBLIC_KEY_PATH
    || exit $?
  - touch $E2E_AWS_PRIVATE_KEY_PATH && chmod 600 $E2E_AWS_PRIVATE_KEY_PATH && $CI_PROJECT_DIR/tools/ci/fetch_secret.sh
    $AGENT_QA_E2E ssh_key_rsa > $E2E_AWS_PRIVATE_KEY_PATH || exit $?
  - $CI_PROJECT_DIR/tools/ci/fetch_secret.sh $AGENT_QA_E2E ssh_public_key_rsa > $E2E_AZURE_PUBLIC_KEY_PATH
    || exit $?
  - touch $E2E_AZURE_PRIVATE_KEY_PATH && chmod 600 $E2E_AZURE_PRIVATE_KEY_PATH &&
    $CI_PROJECT_DIR/tools/ci/fetch_secret.sh $AGENT_QA_E2E ssh_key_rsa > $E2E_AZURE_PRIVATE_KEY_PATH
    || exit $?
  - $CI_PROJECT_DIR/tools/ci/fetch_secret.sh $AGENT_QA_E2E ssh_public_key_rsa > $E2E_GCP_PUBLIC_KEY_PATH
    || exit $?
  - touch $E2E_GCP_PRIVATE_KEY_PATH && chmod 600 $E2E_GCP_PRIVATE_KEY_PATH && $CI_PROJECT_DIR/tools/ci/fetch_secret.sh
    $AGENT_QA_E2E ssh_key_rsa > $E2E_GCP_PRIVATE_KEY_PATH || exit $?
  - pulumi login "s3://dd-pulumi-state?region=us-east-1&awssdk=v2&profile=$AWS_PROFILE"
  - ARM_CLIENT_ID=$($CI_PROJECT_DIR/tools/ci/fetch_secret.sh $E2E_AZURE client_id)
    || exit $?; export ARM_CLIENT_ID
  - ARM_CLIENT_SECRET=$($CI_PROJECT_DIR/tools/ci/fetch_secret.sh $E2E_AZURE token)
    || exit $?; export ARM_CLIENT_SECRET
  - ARM_TENANT_ID=$($CI_PROJECT_DIR/tools/ci/fetch_secret.sh $E2E_AZURE tenant_id)
    || exit $?; export ARM_TENANT_ID
  - ARM_SUBSCRIPTION_ID=$($CI_PROJECT_DIR/tools/ci/fetch_secret.sh $E2E_AZURE subscription_id)
    || exit $?; export ARM_SUBSCRIPTION_ID
  - $CI_PROJECT_DIR/tools/ci/fetch_secret.sh $E2E_GCP credentials_json > ~/gcp-credentials.json
    || exit $?
  - export GOOGLE_APPLICATION_CREDENTIALS=~/gcp-credentials.json
  - dda inv -e gitlab.generate-ci-visibility-links --output=$EXTERNAL_LINKS_PATH
  image: registry.ddbuild.io/ci/test-infra-definitions/runner$TEST_INFRA_DEFINITIONS_BUILDIMAGES_SUFFIX:$TEST_INFRA_DEFINITIONS_BUILDIMAGES
  needs:
  - go_e2e_deps
  - qa_agent
  - qa_dca
  rules:
  - if: $RUN_E2E_TESTS == "off"
    when: never
  - if: $CI_COMMIT_BRANCH =~ /^mq-working-branch-/
    when: never
  - if: $RUN_E2E_TESTS == "on"
    when: on_success
  - if: $CI_COMMIT_BRANCH == "main"
    when: on_success
  - if: $CI_COMMIT_BRANCH =~ /^[0-9]+\.[0-9]+\.x$/
    when: on_success
  - if: $CI_COMMIT_TAG =~ /^[0-9]+\.[0-9]+\.[0-9]+-rc\.[0-9]+$/
    when: on_success
  - changes:
      compare_to: main
      paths:
      - .gitlab/e2e/e2e.yml
      - test/new-e2e/pkg/**/*
      - test/new-e2e/go.mod
      - flakes.yaml
  - changes:
      compare_to: main
      paths:
      - pkg/network/**/*
      - test/new-e2e/tests/npm/**/*
  - if: $CI_COMMIT_BRANCH =~ /^mq-working-branch-/
    when: never
  - allow_failure: true
    when: manual
  script:
  - dda inv -e new-e2e-tests.run --targets $TARGETS -c ddagent:imagePullRegistry=669783387624.dkr.ecr.us-east-1.amazonaws.com
    -c ddagent:imagePullUsername=AWS -c ddagent:imagePullPassword=$(aws ecr get-login-password)
    --junit-tar junit-${CI_JOB_ID}.tgz ${EXTRA_PARAMS} --test-washer --logs-folder=$E2E_OUTPUT_DIR/logs
    --logs-post-processing --logs-post-processing-test-depth=$E2E_LOGS_PROCESSING_TEST_DEPTH
  stage: e2e
  tags:
  - arch:amd64
  variables:
    E2E_AWS_PRIVATE_KEY_PATH: /tmp/agent-qa-aws-ssh-key
    E2E_AWS_PUBLIC_KEY_PATH: /tmp/agent-qa-aws-ssh-key.pub
    E2E_AZURE_PRIVATE_KEY_PATH: /tmp/agent-qa-azure-ssh-key
    E2E_AZURE_PUBLIC_KEY_PATH: /tmp/agent-qa-azure-ssh-key.pub
    E2E_COMMIT_SHA: $CI_COMMIT_SHORT_SHA
    E2E_GCP_PRIVATE_KEY_PATH: /tmp/agent-qa-gcp-ssh-key
    E2E_GCP_PUBLIC_KEY_PATH: /tmp/agent-qa-gcp-ssh-key.pub
    E2E_KEY_PAIR_NAME: datadog-agent-ci-rsa
    E2E_LOGS_PROCESSING_TEST_DEPTH: 1
    E2E_OUTPUT_DIR: $CI_PROJECT_DIR/e2e-output
    E2E_PIPELINE_ID: $CI_PIPELINE_ID
    EXTERNAL_LINKS_PATH: external_links_$CI_JOB_ID.json
    EXTRA_PARAMS: --run TestCiliumLBConntracker
    FLAKY_PATTERNS_CONFIG: $CI_PROJECT_DIR/flaky-patterns-runtime.yaml
    KUBERNETES_CPU_REQUEST: 6
    KUBERNETES_MEMORY_LIMIT: 16Gi
    KUBERNETES_MEMORY_REQUEST: 12Gi
    SHOULD_RUN_IN_FLAKES_FINDER: 'true'
    TARGETS: ./tests/npm
    TEAM: network-performance-monitoring
```

</details>

### Changes Summary
| Removed | Modified | Added | Renamed |
| ------- | -------- | ----- | ------- |
| 0 | 0 | 1 | 0 |

:information_source: *Diff available in the [job log](https://gitlab.ddbuild.io/DataDog/datadog-agent/-/jobs/845199968).*
author_association: CONTRIBUTOR
user: login: agent-platform-auto-pr[bot]
created_at: 2025-03-10T21:52:57Z
body: ## Test changes on VM

Use this command from [test-infra-definitions](https://github.com/DataDog/test-infra-definitions) to manually test this PR changes on a VM:
```sh
dda inv aws.create-vm --pipeline-id=58612935 --os-family=ubuntu
```
Note: This applies to commit **ffce0a30**
author_association: CONTRIBUTOR
user: login: agent-platform-auto-pr[bot]
created_at: 2025-03-10T21:56:00Z
body: ## Uncompressed package size comparison

Comparison with [ancestor](https://github.com/DataDog/datadog-agent/commit/126a940afa49fc1e8f70fd4acf1d902238b9cd40) `126a940afa49fc1e8f70fd4acf1d902238b9cd40`
<details open>
<summary> Size reduction summary </summary>

|package|diff|status|size|ancestor|threshold|
|--|--|--|--|--|--|
|datadog-agent-x86_64-rpm|-0.00MB|✅|819.62MB|819.62MB|0.50MB|
|datadog-agent-x86_64-suse|-0.00MB|✅|819.62MB|819.62MB|0.50MB|

</details>


<details>
  <summary> Diff per package </summary>

|package|diff|status|size|ancestor|threshold|
|--|--|--|--|--|--|
|datadog-agent-aarch64-rpm|0.00MB|✅|810.55MB|810.55MB|0.50MB|
|datadog-agent-amd64-deb|0.00MB|✅|809.82MB|809.82MB|0.50MB|
|datadog-agent-arm64-deb|0.00MB|✅|800.78MB|800.78MB|0.50MB|
|datadog-dogstatsd-amd64-deb|0.00MB|✅|39.33MB|39.33MB|0.50MB|
|datadog-dogstatsd-x86_64-rpm|0.00MB|✅|39.41MB|39.41MB|0.50MB|
|datadog-dogstatsd-x86_64-suse|0.00MB|✅|39.41MB|39.41MB|0.50MB|
|datadog-dogstatsd-arm64-deb|0.00MB|✅|37.86MB|37.86MB|0.50MB|
|datadog-heroku-agent-amd64-deb|0.00MB|✅|441.20MB|441.20MB|0.50MB|
|datadog-iot-agent-amd64-deb|0.00MB|✅|62.18MB|62.18MB|0.50MB|
|datadog-iot-agent-x86_64-rpm|0.00MB|✅|62.25MB|62.25MB|0.50MB|
|datadog-iot-agent-x86_64-suse|0.00MB|✅|62.25MB|62.25MB|0.50MB|
|datadog-iot-agent-arm64-deb|0.00MB|✅|59.40MB|59.40MB|0.50MB|
|datadog-iot-agent-aarch64-rpm|0.00MB|✅|59.47MB|59.47MB|0.50MB|

</details>

## Decision
✅ Passed



author_association: CONTRIBUTOR
user: login: agent-platform-auto-pr[bot]
created_at: 2025-03-10T22:00:13Z
body: ## Static quality checks ✅

Please find below the results from static quality gates


<details>
<summary>Successful checks</summary>

### Info

|Result|Quality gate|On disk size|On disk size limit|On wire size|On wire size limit|
|----|----|----|----|----|----|
|✅|static_quality_gate_agent_deb_amd64|783.83 MiB|801.8 MiB|191.01 MiB|202.62 MiB|
|✅|static_quality_gate_agent_deb_arm64|775.05 MiB|793.14 MiB|173.21 MiB|184.51 MiB|
|✅|static_quality_gate_agent_rpm_amd64|783.73 MiB|801.79 MiB|193.14 MiB|205.03 MiB|
|✅|static_quality_gate_agent_rpm_arm64|775.14 MiB|793.09 MiB|175.41 MiB|186.44 MiB|
|✅|static_quality_gate_agent_suse_amd64|783.78 MiB|801.81 MiB|193.14 MiB|205.03 MiB|
|✅|static_quality_gate_agent_suse_arm64|775.09 MiB|793.14 MiB|175.41 MiB|186.44 MiB|
|✅|static_quality_gate_dogstatsd_deb_amd64|37.58 MiB|47.67 MiB|9.74 MiB|19.78 MiB|
|✅|static_quality_gate_dogstatsd_deb_arm64|36.18 MiB|46.27 MiB|8.45 MiB|18.49 MiB|
|✅|static_quality_gate_dogstatsd_rpm_amd64|37.58 MiB|47.67 MiB|9.75 MiB|19.79 MiB|
|✅|static_quality_gate_dogstatsd_suse_amd64|37.58 MiB|47.67 MiB|9.75 MiB|19.79 MiB|
|✅|static_quality_gate_iot_agent_deb_amd64|59.38 MiB|69.0 MiB|14.91 MiB|24.8 MiB|
|✅|static_quality_gate_iot_agent_deb_arm64|56.73 MiB|66.4 MiB|12.86 MiB|22.8 MiB|
|✅|static_quality_gate_iot_agent_rpm_amd64|59.38 MiB|69.0 MiB|14.93 MiB|24.8 MiB|
|✅|static_quality_gate_iot_agent_rpm_arm64|56.73 MiB|66.4 MiB|12.88 MiB|22.8 MiB|
|✅|static_quality_gate_iot_agent_suse_amd64|59.38 MiB|69.0 MiB|14.93 MiB|24.8 MiB|
|✅|static_quality_gate_docker_agent_amd64|868.46 MiB|886.12 MiB|292.12 MiB|304.21 MiB|
|✅|static_quality_gate_docker_agent_arm64|883.09 MiB|900.79 MiB|278.47 MiB|290.47 MiB|
|✅|static_quality_gate_docker_agent_jmx_amd64|1.04 GiB|1.06 GiB|367.21 MiB|379.33 MiB|
|✅|static_quality_gate_docker_agent_jmx_arm64|1.04 GiB|1.06 GiB|349.58 MiB|361.55 MiB|
|✅|static_quality_gate_docker_dogstatsd_amd64|45.73 MiB|55.78 MiB|17.25 MiB|27.28 MiB|
|✅|static_quality_gate_docker_dogstatsd_arm64|44.36 MiB|54.45 MiB|16.12 MiB|26.16 MiB|
|✅|static_quality_gate_docker_cluster_agent_amd64|264.87 MiB|274.78 MiB|106.28 MiB|116.28 MiB|
|✅|static_quality_gate_docker_cluster_agent_arm64|280.82 MiB|290.82 MiB|101.13 MiB|111.12 MiB|

</details>

author_association: CONTRIBUTOR
user: login: hmahmood
created_at: 2025-03-12T21:33:49Z
body: /merge
author_association: CONTRIBUTOR
user: login: dd-devflow[bot]
created_at: 2025-03-12T21:33:53Z
body: <!-- "FeedbackWorkflowId":"0a11228d-81a2-4726-87d3-ab2be290b1fa_36" -->
[View all feedbacks in Devflow UI.](https://devflow.static-app.us1.prod.dog/logs/0a11228d-81a2-4726-87d3-ab2be290b1fa_36)
`2025-03-12 21:33:52 UTC` :information_source: Start processing command `/merge`

---
`2025-03-12 21:33:58 UTC` :information_source: **MergeQueue:** pull request added to the queue

The expected merge time in `main` is approximately 45m (p90).

---
`2025-03-12 22:01:15 UTC` :information_source: **MergeQueue:** This merge request was merged

author_association: NONE