From d1f40804bf5fe1c0231d2ef6e8e2bb4cdf12c32a Mon Sep 17 00:00:00 2001 From: Nicolas Catoni Date: Thu, 9 Apr 2026 13:37:12 +0000 Subject: [PATCH 1/7] chore(ci): use dd-sts for system-tests test optimization --- .github/workflows/run-system-tests.yaml | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/.github/workflows/run-system-tests.yaml b/.github/workflows/run-system-tests.yaml index 12f6356c4c4..15b7faff8b3 100644 --- a/.github/workflows/run-system-tests.yaml +++ b/.github/workflows/run-system-tests.yaml @@ -76,7 +76,8 @@ jobs: scenarios_groups: tracer-release excluded_scenarios: APM_TRACING_E2E_OTEL,APM_TRACING_E2E_SINGLE_SPAN,PROFILING # exclude flaky scenarios skip_empty_scenarios: true - push_to_test_optimization: false # disabled to avoid pushing to Test Optimization while API key is transitioning to system-tests + push_to_test_optimization: true + dd_sts_policy: dd-trace-java-system-tests # Ensure the main job is run to completion check: From 1dd95681b0438e203b48786f6c4b86d8f2d50fcd Mon Sep 17 00:00:00 2001 From: Nicolas Catoni Date: Mon, 13 Apr 2026 09:17:59 +0000 Subject: [PATCH 2/7] chore(ci): remove dd_sts_policy from system-tests subworkflow --- .github/workflows/run-system-tests.yaml | 1 - 1 file changed, 1 deletion(-) diff --git a/.github/workflows/run-system-tests.yaml b/.github/workflows/run-system-tests.yaml index 15b7faff8b3..a0f621a1d40 100644 --- a/.github/workflows/run-system-tests.yaml +++ b/.github/workflows/run-system-tests.yaml @@ -77,7 +77,6 @@ jobs: excluded_scenarios: APM_TRACING_E2E_OTEL,APM_TRACING_E2E_SINGLE_SPAN,PROFILING # exclude flaky scenarios skip_empty_scenarios: true push_to_test_optimization: true - dd_sts_policy: dd-trace-java-system-tests # Ensure the main job is run to completion check: From a9227be5e749ced515b32054d7b5d07fd8f1f263 Mon Sep 17 00:00:00 2001 From: Nicolas Catoni Date: Mon, 13 Apr 2026 09:53:26 +0000 Subject: [PATCH 3/7] chore(ci): remove unneeded permissions from system-tests subworkflow --- .github/workflows/run-system-tests.yaml | 2 -- 1 file changed, 2 deletions(-) diff --git a/.github/workflows/run-system-tests.yaml b/.github/workflows/run-system-tests.yaml index a0f621a1d40..bac97b9f0f1 100644 --- a/.github/workflows/run-system-tests.yaml +++ b/.github/workflows/run-system-tests.yaml @@ -64,9 +64,7 @@ jobs: # If you change the following comment, update the pattern in the update_system_test_reference.sh script to match. uses: DataDog/system-tests/.github/workflows/system-tests.yml@main # system tests are pinned on release branches only permissions: - contents: read id-token: write - packages: write with: library: java # If you change the following comment, update the pattern in the update_system_test_reference.sh script to match. From 7c212670124edc5c8b3cf02490598c26f7167173 Mon Sep 17 00:00:00 2001 From: Nicolas Catoni Date: Mon, 13 Apr 2026 11:15:29 +0000 Subject: [PATCH 4/7] chore(ci): pin system-tests workflow to 1e5d6b709 --- .github/workflows/run-system-tests.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/run-system-tests.yaml b/.github/workflows/run-system-tests.yaml index bac97b9f0f1..91b88e6487c 100644 --- a/.github/workflows/run-system-tests.yaml +++ b/.github/workflows/run-system-tests.yaml @@ -62,7 +62,7 @@ jobs: needs: - build # If you change the following comment, update the pattern in the update_system_test_reference.sh script to match. - uses: DataDog/system-tests/.github/workflows/system-tests.yml@main # system tests are pinned on release branches only + uses: DataDog/system-tests/.github/workflows/system-tests.yml@1e5d6b7096279ca43ce4826fda3cc805635b63c1 # system tests are pinned on release branches only permissions: id-token: write with: From 72f45629ff2089c99505e84ed3c6a2b5067b4161 Mon Sep 17 00:00:00 2001 From: Nicolas Catoni Date: Mon, 13 Apr 2026 12:53:02 +0000 Subject: [PATCH 5/7] fix: add contents:read permission to system-tests workflow call --- .github/workflows/run-system-tests.yaml | 1 + 1 file changed, 1 insertion(+) diff --git a/.github/workflows/run-system-tests.yaml b/.github/workflows/run-system-tests.yaml index 91b88e6487c..f5f966c76b5 100644 --- a/.github/workflows/run-system-tests.yaml +++ b/.github/workflows/run-system-tests.yaml @@ -64,6 +64,7 @@ jobs: # If you change the following comment, update the pattern in the update_system_test_reference.sh script to match. uses: DataDog/system-tests/.github/workflows/system-tests.yml@1e5d6b7096279ca43ce4826fda3cc805635b63c1 # system tests are pinned on release branches only permissions: + contents: read id-token: write with: library: java From 8e3a1dedd5a62e4ecc255d0ac213983919caed54 Mon Sep 17 00:00:00 2001 From: Nicolas Catoni Date: Mon, 13 Apr 2026 15:21:35 +0000 Subject: [PATCH 6/7] chore(ci): pass ref to system-tests reusable workflow --- .github/workflows/run-system-tests.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/run-system-tests.yaml b/.github/workflows/run-system-tests.yaml index f5f966c76b5..1d0df876ba4 100644 --- a/.github/workflows/run-system-tests.yaml +++ b/.github/workflows/run-system-tests.yaml @@ -69,7 +69,7 @@ jobs: with: library: java # If you change the following comment, update the pattern in the update_system_test_reference.sh script to match. - ref: "main" # system tests are pinned on release branches only + ref: 1e5d6b7096279ca43ce4826fda3cc805635b63c1 # system tests are pinned on release branches only binaries_artifact: binaries desired_execution_time: 900 # 15 minutes scenarios_groups: tracer-release From 9706336235ec5bc55b733c5ec51f76a6908cca37 Mon Sep 17 00:00:00 2001 From: Nicolas Catoni Date: Tue, 14 Apr 2026 15:06:53 +0200 Subject: [PATCH 7/7] Update ref --- .github/workflows/run-system-tests.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/run-system-tests.yaml b/.github/workflows/run-system-tests.yaml index 1d0df876ba4..8760acf2b7a 100644 --- a/.github/workflows/run-system-tests.yaml +++ b/.github/workflows/run-system-tests.yaml @@ -62,14 +62,14 @@ jobs: needs: - build # If you change the following comment, update the pattern in the update_system_test_reference.sh script to match. - uses: DataDog/system-tests/.github/workflows/system-tests.yml@1e5d6b7096279ca43ce4826fda3cc805635b63c1 # system tests are pinned on release branches only + uses: DataDog/system-tests/.github/workflows/system-tests.yml@adcd0e88eecd59a179f9470d76a5bc48eed14524 # system tests are pinned on release branches only permissions: contents: read id-token: write with: library: java # If you change the following comment, update the pattern in the update_system_test_reference.sh script to match. - ref: 1e5d6b7096279ca43ce4826fda3cc805635b63c1 # system tests are pinned on release branches only + ref: adcd0e88eecd59a179f9470d76a5bc48eed14524 # system tests are pinned on release branches only binaries_artifact: binaries desired_execution_time: 900 # 15 minutes scenarios_groups: tracer-release