Skip to content

[Host Profiler] Remove seccomp configmap and use profile baked into image#2698

Open
theomagellan wants to merge 6 commits into
mainfrom
theomagellan/host-profiler-seccomp-from-image
Open

[Host Profiler] Remove seccomp configmap and use profile baked into image#2698
theomagellan wants to merge 6 commits into
mainfrom
theomagellan/host-profiler-seccomp-from-image

Conversation

@theomagellan
Copy link
Copy Markdown
Contributor

@theomagellan theomagellan commented Jun 1, 2026

What this PR does / why we need it:

Leverages the seccomp profile now bundled in the Host Profiler's image.
DataDog/datadog-agent#51545

Before this, the seccomp profile was living in 3 different places:

  • datadog-operator
  • datadog's helm-charts
  • Standalone documentation

Bundling the seccomp directly in the image and using it as an initContainer enables us the version the seccomp profile with profiler versions and maintain only one copy.

Which issue this PR fixes

(optional, in fixes #<issue number>(, fixes #<issue_number>, ...) format, will close that issue when PR gets merged)

  • fixes #

Special notes for your reviewer:

Checklist

[Place an '[x]' (no spaces) in all applicable fields. Please remove unrelated fields.]

  • All commits are signed and show as "Verified" on GitHub (see: signing commits)
  • Chart Version semver bump label has been added (use <chartName>/minor-version, <chartName>/patch-version, or <chartName>/no-version-bump)
  • For datadog or datadog-operator chart or value changes, update the test baselines (run: make update-test-baselines)
  • For datadog chart changes, received ✅ from a member of your team

GitHub CI takes care of the below, but are still required:

  • Documentation has been updated with helm-docs (run: .github/helm-docs.sh)
  • CHANGELOG.md has been updated
  • Variables are documented in the README.md

@github-actions github-actions Bot added the chart/datadog This issue or pull request is related to the datadog chart label Jun 1, 2026
@datadog-prod-us1-6
Copy link
Copy Markdown

datadog-prod-us1-6 Bot commented Jun 1, 2026

Pipelines

Fix all issues with BitsAI

⚠️ Warnings

🚦 1 Pipeline job failed

Lint and Test Charts | pr-validated   View in Datadog   GitHub Actions

See error Install chart was cancelled during execution.

Useful? React with 👍 / 👎

This comment will be updated automatically if new data arrives.
🔗 Commit SHA: be3c595 | Docs | Datadog PR Page | Give us feedback!

@theomagellan theomagellan changed the title Theomagellan/host profiler seccomp from image [Host Profiler] Remove seccomp configmap and use profile baked into image Jun 1, 2026
@theomagellan theomagellan added the datadog/no-version-bump Skip version bump for datadog chart label Jun 1, 2026
@theomagellan theomagellan marked this pull request as ready for review June 1, 2026 09:53
@theomagellan theomagellan requested review from a team as code owners June 1, 2026 09:53
@theomagellan theomagellan requested review from fanny-jiang and removed request for a team June 1, 2026 09:53
@theomagellan theomagellan added datadog/minor-version Minor version bump for datadog chart and removed datadog/no-version-bump Skip version bump for datadog chart labels Jun 1, 2026
@theomagellan theomagellan force-pushed the theomagellan/host-profiler-seccomp-from-image branch from 56987c3 to e08b3dc Compare June 4, 2026 09:48
@theomagellan
Copy link
Copy Markdown
Contributor Author

@codex review

Copy link
Copy Markdown

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: ffd1bb0b81

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

Comment thread charts/datadog/templates/_container-host-profiler.yaml
@theomagellan theomagellan force-pushed the theomagellan/host-profiler-seccomp-from-image branch from ffd1bb0 to 3c3f16d Compare June 4, 2026 11:20
Copy link
Copy Markdown

@r1viollet r1viollet left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM
Thanks for this significant change.
Minor notes: we might want to document a way to remove secomp if needed. I am not sure where this should live.

@theomagellan theomagellan force-pushed the theomagellan/host-profiler-seccomp-from-image branch from f9cbd8a to 980e43f Compare June 4, 2026 13:23
@theomagellan theomagellan force-pushed the theomagellan/host-profiler-seccomp-from-image branch from b64cfa5 to aa194c9 Compare June 4, 2026 14:18
- bump version for datadog to 3.219.0 (minor-version)
- update changelog for datadog with version 3.219.0
- update readme for datadog
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

chart/datadog This issue or pull request is related to the datadog chart datadog/minor-version Minor version bump for datadog chart

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants