Skip to content

AB2D-7301 Enable Datadog sidecar on ECS services#1801

Draft
gfreeman-navapbc wants to merge 5 commits into
mainfrom
gfreeman/AB2D-7301
Draft

AB2D-7301 Enable Datadog sidecar on ECS services#1801
gfreeman-navapbc wants to merge 5 commits into
mainfrom
gfreeman/AB2D-7301

Conversation

@gfreeman-navapbc

@gfreeman-navapbc gfreeman-navapbc commented Jun 11, 2026

Copy link
Copy Markdown
Collaborator

🎫 Ticket

https://jira.cms.gov/browse/AB2D-7301

🛠 Changes

Updates ECS service module in each of the services to enable:

  • Datadog APM sidecar
  • Proper IAM permissions
  • OpenTofu and hashicorp/aws upgrades

Permissions have been tested for the following:

  • 20-contracts/
  • 20-events/
  • 30-api/
  • 30-worker/

ℹ️ Context

This change enables the datadog-agent sidecar container to run in each of the ECS services. We had to update a lot of code surrounding the service module because there have been several feature releases since the last time we updated.

See related changes to CDAP service module:

🧪 Validation

Datadog-agent sidecar is running alongside the services in the TEST environment currently.

See passing e2e tests with new service module config: https://github.com/CMSgov/ab2d/actions/runs/27439458396/job/81109662460

actions = [
"cloudwatch:PutMetricData"
]
resources = ["*"]

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Noting this is required as broad, right? There's not a specific resource to define here.

Copy link
Copy Markdown
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Correct, we have to narrow things down by the namespace, as far as google/chat leads me to believe

gfreeman-navapbc added a commit to CMSgov/cdap that referenced this pull request Jun 12, 2026
## 🎫 Ticket

https://jira.cms.gov/browse/AB2D-7301

## 🛠 Changes

Fixes three small bugs in the service module encountered when upgrading
to account for new Datadog sidecars.

## ℹ️ Context

Needed to facilitate the rest of AB2D-7301:
CMSgov/ab2d#1801

## 🧪 Validation

Applied these changes manually to lower environments. See
CMSgov/ab2d#1801
gfreeman-navapbc added a commit to CMSgov/cdap that referenced this pull request Jun 12, 2026
## 🎫 Ticket

https://jira.cms.gov/browse/AB2D-7301

## 🛠 Changes

Adds ALB target group protocol variable to service module

## ℹ️ Context

As part of the ongoing updates to the AB2D terraform to enable the new
Datadog sidecar modules, we are updating some of the networking around
our API as well. This prevents errors on ECS services that are expecting
TLS traffic (APIs, normally)

## 🧪 Validation

Should alleviate HTTP 400 errors in AB2D test as a part of the ongoing
changes in CMSgov/ab2d#1801
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants