Skip to content

🍒 12203 - ci: update one-pipeline to 1.3.1 - #12206

Merged
mhdatie merged 1 commit into
release/v1.65.xfrom
mo.atie/backport-pr-12203
Aug 13, 2026
Merged

🍒 12203 - ci: update one-pipeline to 1.3.1#12206
mhdatie merged 1 commit into
release/v1.65.xfrom
mo.atie/backport-pr-12203

Conversation

@mhdatie

@mhdatie mhdatie commented Aug 13, 2026

Copy link
Copy Markdown
Contributor

What Does This Do

Back-port latest .gitlab/one-pipeline.locked.yml upgrade in #12203 to the release branch

This avoids a misconfiguration in the OIDC token policy reference in the one-pipeline.yml file caused authentication to fail when requesting an STS API key, resulting in repeated 401 errors during the publish_dora_metrics job.

Motivation

This ensures our next release don't run into hiccups

Additional Notes

  • It's effective for <=1.3.0 because of the way we grab the STS token. A change was made on the dd sts side so One Pipeline had to change the way it's called. It seemed like a set of migration PRs across repos was issued, but happened to miss one-pipeline unfortunately.
  • There is an open question on whether this job should be on the critical path of a release. This will probably show up as a follow up in https://app.datadoghq.com/incidents/59180

@mhdatie mhdatie changed the title Back-port .gitlab/one-pipeline.locked.yml to latest release branch 🍒 12203 - ci: update one-pipeline to 1.3.1 Aug 13, 2026
@mhdatie mhdatie added type: bug fix Bug fix comp: config Configuration labels Aug 13, 2026
@datadog-datadog-prod-us1

This comment has been minimized.

@mhdatie mhdatie added tag: breaking change Breaking changes tag: dependencies Dependencies related changes labels Aug 13, 2026
@dd-octo-sts

dd-octo-sts Bot commented Aug 13, 2026

Copy link
Copy Markdown
Contributor

🟢 Java Benchmark SLOs — All performance SLOs passed

Suite Status
Startup 🟢 pass

SLO thresholds are defined here based on automatically generated metrics. A warning is raised when results are within 5% of the threshold.

PR vs. master results
Scenario Candidate master Δ (95% CI of mean)
startup:insecure-bank:iast:Agent 14.70 s 14.71 s [-0.7%; +0.6%] (no difference)
startup:insecure-bank:tracing:Agent 13.53 s 13.68 s [-2.0%; -0.2%] (maybe better)
startup:petclinic:appsec:Agent 16.94 s 16.70 s [+0.5%; +2.4%] (maybe worse)
startup:petclinic:iast:Agent 16.89 s 16.94 s [-1.2%; +0.6%] (no difference)
startup:petclinic:profiling:Agent 16.75 s 16.86 s [-1.7%; +0.4%] (no difference)
startup:petclinic:sca:Agent 16.80 s 16.51 s [+0.8%; +2.7%] (maybe worse)
startup:petclinic:tracing:Agent 16.02 s 15.99 s [-1.1%; +1.4%] (no difference)

Commit: 3ccb9146 · CI Pipeline · Benchmarking Platform UI


Load and DaCapo benchmarks can be triggered manually in the GitLab pipeline. Results will appear in the Benchmarking Platform UI after completion.

@pr-commenter

pr-commenter Bot commented Aug 13, 2026

Copy link
Copy Markdown

Kafka / producer-benchmark

Parameters

Baseline Candidate
baseline_or_candidate baseline candidate
git_branch release/v1.65.x mo.atie/backport-pr-12203
git_commit_date 1786380035 1786635181
git_commit_sha 83d0540 3ccb914
See matching parameters
Baseline Candidate
ci_job_date 1786636831 1786636831
ci_job_id 1949231074 1949231074
ci_pipeline_id 130764330 130764330
cpu_model Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz
jdkVersion 11.0.25 11.0.25
jmhVersion 1.36 1.36
jvm /usr/lib/jvm/java-11-openjdk-amd64/bin/java /usr/lib/jvm/java-11-openjdk-amd64/bin/java
jvmArgs -Dfile.encoding=UTF-8 -Djava.io.tmpdir=/go/src/github.com/DataDog/apm-reliability/dd-trace-java/platform/src/producer-benchmark/build/tmp/jmh -Duser.country=US -Duser.language=en -Duser.variant -Dfile.encoding=UTF-8 -Djava.io.tmpdir=/go/src/github.com/DataDog/apm-reliability/dd-trace-java/platform/src/producer-benchmark/build/tmp/jmh -Duser.country=US -Duser.language=en -Duser.variant
vmName OpenJDK 64-Bit Server VM OpenJDK 64-Bit Server VM
vmVersion 11.0.25+9-post-Ubuntu-1ubuntu122.04 11.0.25+9-post-Ubuntu-1ubuntu122.04

Summary

Found 0 performance improvements and 0 performance regressions! Performance is the same for 3 metrics, 0 unstable metrics.

See unchanged results
scenario Δ mean throughput
scenario:not-instrumented/KafkaProduceBenchmark.benchProduce same
scenario:only-tracing-dsm-disabled-benchmarks/KafkaProduceBenchmark.benchProduce unsure
[-7265.841op/s; -1139.152op/s] or [-4.026%; -0.631%]
scenario:only-tracing-dsm-enabled-benchmarks/KafkaProduceBenchmark.benchProduce unsure
[-3865.846op/s; -550.432op/s] or [-2.588%; -0.368%]

@mhdatie
mhdatie marked this pull request as ready for review August 13, 2026 17:52
@mhdatie
mhdatie requested review from a team as code owners August 13, 2026 17:52
@mhdatie
mhdatie requested review from AlexeyKuznetsov-DD and erikayasuda and removed request for a team August 13, 2026 17:52
@mhdatie
mhdatie merged commit cd111ab into release/v1.65.x Aug 13, 2026
612 of 615 checks passed
@mhdatie
mhdatie deleted the mo.atie/backport-pr-12203 branch August 13, 2026 17:55

@datadog-datadog-prod-us1 datadog-datadog-prod-us1 Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Datadog Autotest: PASS

More details

The release branch’s single remote include now targets the exact One Pipeline 1.3.1 artifact already merged on master. No repository-local configuration indicates that the intermediate 1.3.0 pin is required.

Was this helpful? React 👍 or 👎

Open Bits AI session

🤖 Datadog Autotest · Commit 3ccb914 · What is Autotest? · @DataDog review to ask questions · Any feedback? Reach out in #autotest

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

comp: config Configuration tag: breaking change Breaking changes tag: dependencies Dependencies related changes type: bug fix Bug fix

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants