From c77cfccdea26b28f9033b39ac205d3afc76df03c Mon Sep 17 00:00:00 2001 From: Dominique Alessi Date: Tue, 17 Mar 2026 12:46:35 -0400 Subject: [PATCH 1/3] Clarify ddTraceConfigs can enable products beyond tracing in SSI K8s docs Co-Authored-By: Claude Opus 4.6 (1M context) --- .../single-step-apm/kubernetes.md | 34 ++++++++++++++++++- 1 file changed, 33 insertions(+), 1 deletion(-) diff --git a/content/en/tracing/trace_collection/single-step-apm/kubernetes.md b/content/en/tracing/trace_collection/single-step-apm/kubernetes.md index b77aa017467..6059a21f7ea 100644 --- a/content/en/tracing/trace_collection/single-step-apm/kubernetes.md +++ b/content/en/tracing/trace_collection/single-step-apm/kubernetes.md @@ -172,7 +172,7 @@ Each target block has the following keys: | `namespaceSelector` | The namespace(s) to instrument. Specify using one or more of:
- `matchNames`: A list of one or more namespace name(s).
- `matchLabels`: A list of one or more label(s) defined in `{key,value}` pairs.
- `matchExpressions`: A list of namespace selector requirements.

Namespaces must meet all criteria to match. For more details, see the [Kubernetes selector documentation][10].| | `podSelector` | The pod(s) to instrument. Specify using one or more of:
- `matchLabels`: A list of one or more label(s) defined in `{key,value}` pairs.
- `matchExpressions`: A list of pod selector requirements.

Pods must meet all criteria to match. For more details, see the [Kubernetes selector documentation][10]. | | `ddTraceVersions` | The [Datadog APM SDK][9] version to use for each language. | -| `ddTraceConfigs` | APM SDK configs that allow setting Unified Service Tags, enabling Datadog products beyond tracing, and customizing other APM settings. [See full list of options][8]. | +| `ddTraceConfigs` | APM SDK configs that allow setting [Unified Service Tags][8], enabling [SDK-dependent products](#enable-sdk-dependent-products-and-features) beyond tracing (such as [Continuous Profiler][37], [Application Security][38], and [Data Streams Monitoring][40]), and customizing other [APM settings][7]. | The file you need to configure depends on how you enabled Single Step Instrumentation: - If you enabled SSI with Datadog Operator, edit `datadog-agent.yaml`. @@ -324,6 +324,37 @@ This configuration enables APM for all pods except those that have either of the {{< /collapse-content >}} +{{< collapse-content title="Example 6: Enable additional products with ddTraceConfigs" level="h4" >}} + +This configuration enables [Application Security][38] and [Continuous Profiler][37] for services in the `web-apps` namespace, using `ddTraceConfigs` to set the required environment variables: + +{{< highlight yaml "hl_lines=4-20" >}} + apm: + instrumentation: + enabled: true + targets: + - name: "web-apps-with-security" + namespaceSelector: + matchNames: + - "web-apps" + ddTraceVersions: + java: "default" + python: "default" + ddTraceConfigs: + - name: "DD_APPSEC_ENABLED" + value: "true" + - name: "DD_PROFILING_ENABLED" + value: "auto" + - name: DD_SERVICE + valueFrom: + fieldRef: + fieldPath: metadata.labels['app.kubernetes.io/name'] +{{< /highlight >}} + +For a full list of products you can enable through SSI, see [Enable SDK-dependent products and features](#enable-sdk-dependent-products-and-features). + +{{< /collapse-content >}} + [8]: /getting_started/tagging/unified_service_tagging/?tab=kubernetes [9]: /tracing/trace_collection/automatic_instrumentation/single-step-apm/compatibility/#tracer-libraries [10]: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#resources-that-support-set-based-requirements @@ -802,6 +833,7 @@ If you encounter problems enabling APM with SSI, see the [SSI troubleshooting gu [37]: /profiler/ [38]: /security/application_security/ [39]: /tracing/trace_pipeline/ingestion_controls/ +[40]: /data_streams/ From be2bed0a2907bbefc64590ea0320e72cbc64c4c1 Mon Sep 17 00:00:00 2001 From: Dominique Alessi Date: Tue, 17 Mar 2026 13:03:20 -0400 Subject: [PATCH 2/3] Fix link references to use tab-scoped definitions Co-Authored-By: Claude Opus 4.6 (1M context) --- .../trace_collection/single-step-apm/kubernetes.md | 9 ++++++--- 1 file changed, 6 insertions(+), 3 deletions(-) diff --git a/content/en/tracing/trace_collection/single-step-apm/kubernetes.md b/content/en/tracing/trace_collection/single-step-apm/kubernetes.md index 6059a21f7ea..937ae9337cd 100644 --- a/content/en/tracing/trace_collection/single-step-apm/kubernetes.md +++ b/content/en/tracing/trace_collection/single-step-apm/kubernetes.md @@ -172,7 +172,7 @@ Each target block has the following keys: | `namespaceSelector` | The namespace(s) to instrument. Specify using one or more of:
- `matchNames`: A list of one or more namespace name(s).
- `matchLabels`: A list of one or more label(s) defined in `{key,value}` pairs.
- `matchExpressions`: A list of namespace selector requirements.

Namespaces must meet all criteria to match. For more details, see the [Kubernetes selector documentation][10].| | `podSelector` | The pod(s) to instrument. Specify using one or more of:
- `matchLabels`: A list of one or more label(s) defined in `{key,value}` pairs.
- `matchExpressions`: A list of pod selector requirements.

Pods must meet all criteria to match. For more details, see the [Kubernetes selector documentation][10]. | | `ddTraceVersions` | The [Datadog APM SDK][9] version to use for each language. | -| `ddTraceConfigs` | APM SDK configs that allow setting [Unified Service Tags][8], enabling [SDK-dependent products](#enable-sdk-dependent-products-and-features) beyond tracing (such as [Continuous Profiler][37], [Application Security][38], and [Data Streams Monitoring][40]), and customizing other [APM settings][7]. | +| `ddTraceConfigs` | APM SDK configs that allow setting [Unified Service Tags][8], enabling [SDK-dependent products](#enable-sdk-dependent-products-and-features) beyond tracing (such as [Continuous Profiler][11], [Application Security][12], and [Data Streams Monitoring][13]), and customizing other [APM settings][14]. | The file you need to configure depends on how you enabled Single Step Instrumentation: - If you enabled SSI with Datadog Operator, edit `datadog-agent.yaml`. @@ -326,7 +326,7 @@ This configuration enables APM for all pods except those that have either of the {{< collapse-content title="Example 6: Enable additional products with ddTraceConfigs" level="h4" >}} -This configuration enables [Application Security][38] and [Continuous Profiler][37] for services in the `web-apps` namespace, using `ddTraceConfigs` to set the required environment variables: +This configuration enables [Application Security][12] and [Continuous Profiler][11] for services in the `web-apps` namespace, using `ddTraceConfigs` to set the required environment variables: {{< highlight yaml "hl_lines=4-20" >}} apm: @@ -358,6 +358,10 @@ For a full list of products you can enable through SSI, see [Enable SDK-dependen [8]: /getting_started/tagging/unified_service_tagging/?tab=kubernetes [9]: /tracing/trace_collection/automatic_instrumentation/single-step-apm/compatibility/#tracer-libraries [10]: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#resources-that-support-set-based-requirements +[11]: /profiler/ +[12]: /security/application_security/ +[13]: /data_streams/ +[14]: /tracing/trace_collection/library_config/ {{% /tab %}} @@ -833,7 +837,6 @@ If you encounter problems enabling APM with SSI, see the [SSI troubleshooting gu [37]: /profiler/ [38]: /security/application_security/ [39]: /tracing/trace_pipeline/ingestion_controls/ -[40]: /data_streams/ From 81e365decf2e44b59592b51fa297fcb46b036fd6 Mon Sep 17 00:00:00 2001 From: Dominique Alessi Date: Tue, 17 Mar 2026 13:09:59 -0400 Subject: [PATCH 3/3] Address review: use AAP product name, trim table cell density - Rename "Application Security Monitoring" to "App and API Protection (AAP)" in both existing and new text for consistency - Remove parenthetical product list from ddTraceConfigs table cell - Remove orphan link reference Co-Authored-By: Claude Opus 4.6 (1M context) --- .../tracing/trace_collection/single-step-apm/kubernetes.md | 7 +++---- 1 file changed, 3 insertions(+), 4 deletions(-) diff --git a/content/en/tracing/trace_collection/single-step-apm/kubernetes.md b/content/en/tracing/trace_collection/single-step-apm/kubernetes.md index 937ae9337cd..480e8f9a956 100644 --- a/content/en/tracing/trace_collection/single-step-apm/kubernetes.md +++ b/content/en/tracing/trace_collection/single-step-apm/kubernetes.md @@ -138,7 +138,7 @@ For complete instructions, see [setting USTs for Kubernetes services][5]. ## Enable SDK-dependent products and features -After SSI loads the Datadog SDK into your applications and enables distributed tracing, you can configure additional products that rely on the SDK. These include capabilities such as [Continuous Profiler][37], [Application Security Monitoring][38], and [trace ingestion controls][39]. +After SSI loads the Datadog SDK into your applications and enables distributed tracing, you can configure additional products that rely on the SDK. These include capabilities such as [Continuous Profiler][37], [App and API Protection (AAP)][38], and [trace ingestion controls][39]. Use one of the following setup methods: @@ -172,7 +172,7 @@ Each target block has the following keys: | `namespaceSelector` | The namespace(s) to instrument. Specify using one or more of:
- `matchNames`: A list of one or more namespace name(s).
- `matchLabels`: A list of one or more label(s) defined in `{key,value}` pairs.
- `matchExpressions`: A list of namespace selector requirements.

Namespaces must meet all criteria to match. For more details, see the [Kubernetes selector documentation][10].| | `podSelector` | The pod(s) to instrument. Specify using one or more of:
- `matchLabels`: A list of one or more label(s) defined in `{key,value}` pairs.
- `matchExpressions`: A list of pod selector requirements.

Pods must meet all criteria to match. For more details, see the [Kubernetes selector documentation][10]. | | `ddTraceVersions` | The [Datadog APM SDK][9] version to use for each language. | -| `ddTraceConfigs` | APM SDK configs that allow setting [Unified Service Tags][8], enabling [SDK-dependent products](#enable-sdk-dependent-products-and-features) beyond tracing (such as [Continuous Profiler][11], [Application Security][12], and [Data Streams Monitoring][13]), and customizing other [APM settings][14]. | +| `ddTraceConfigs` | APM SDK configs that allow setting [Unified Service Tags][8], enabling [SDK-dependent products](#enable-sdk-dependent-products-and-features) beyond tracing, and customizing other [APM settings][14]. | The file you need to configure depends on how you enabled Single Step Instrumentation: - If you enabled SSI with Datadog Operator, edit `datadog-agent.yaml`. @@ -326,7 +326,7 @@ This configuration enables APM for all pods except those that have either of the {{< collapse-content title="Example 6: Enable additional products with ddTraceConfigs" level="h4" >}} -This configuration enables [Application Security][12] and [Continuous Profiler][11] for services in the `web-apps` namespace, using `ddTraceConfigs` to set the required environment variables: +This configuration enables [App and API Protection (AAP)][12] and [Continuous Profiler][11] for services in the `web-apps` namespace, using `ddTraceConfigs` to set the required environment variables: {{< highlight yaml "hl_lines=4-20" >}} apm: @@ -360,7 +360,6 @@ For a full list of products you can enable through SSI, see [Enable SDK-dependen [10]: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#resources-that-support-set-based-requirements [11]: /profiler/ [12]: /security/application_security/ -[13]: /data_streams/ [14]: /tracing/trace_collection/library_config/ {{% /tab %}}