Test SSI Vault secrets with WIP templates

[robertomonteromiguel]

What Does This Do

Points this branch at the WIP libdatadog-build pipeline and runs SSI system tests from the system-tests branch that includes that pipeline.

Motivation

SSI onboarding secrets for dd-trace-java now live in Vault. This draft exercises them before the shared template is released.

• libdatadog-build: https://github.com/DataDog/libdatadog-build/pull/276
• system-tests: Point SSI GitLab templates at the Vault secrets WIP build system-tests#7993

Additional Notes

Temporary test branch. Do not merge.

.gitlab/one-pipeline.locked.yml includes the WIP one-pipeline from robertomonteromiguel/ssi-secrets-update-v3.

configure_system_tests checks out robertomonteromiguel/ssi-secrets-vault-templates, so the child pipeline reads kv/k8s/gitlab-runner/dd-trace-java/system-tests/....

Contributor Checklist

• Format the title according to the contribution guidelines
• Assign the type: and (comp: or inst:) labels in addition to any other useful labels
• Avoid using close, fix, or any linking keywords when referencing an issue
  Use solves instead, and assign the PR milestone to the issue
• Update the CODEOWNERS file on source file addition, migration, or deletion
• Update public documentation with any new configuration flags or behaviors

Jira ticket: n/a

Made with Cursor

[dd-octo-sts]

🟢 Java Benchmark SLOs — All performance SLOs passed

Suite	Status
Startup	🟢 pass

SLO thresholds are defined here based on automatically generated metrics. A warning is raised when results are within 5% of the threshold.

PR vs. master results

Scenario	Candidate	master	Δ (95% CI of mean)
startup:insecure-bank:iast:Agent	13.95 s	13.98 s	[-1.0%; +0.5%] (no difference)
startup:insecure-bank:tracing:Agent	12.92 s	13.01 s	[-1.4%; +0.1%] (no difference)
startup:petclinic:appsec:Agent	17.09 s	16.97 s	[+0.1%; +1.5%] (maybe worse)
startup:petclinic:iast:Agent	16.90 s	16.36 s	[-1.1%; +7.6%] (no difference)
startup:petclinic:profiling:Agent	16.75 s	16.85 s	[-1.9%; +0.7%] (no difference)
startup:petclinic:sca:Agent	17.04 s	16.93 s	[-0.5%; +1.8%] (no difference)
startup:petclinic:tracing:Agent	15.98 s	16.20 s	[-2.3%; -0.4%] (maybe better)

Commit: 0eb77610 · CI Pipeline · Benchmarking Platform UI

---

Load and DaCapo benchmarks can be triggered manually in the GitLab pipeline. Results will appear in the Benchmarking Platform UI after completion.

[robertomonteromiguel]

Cerramos este draft de prueba. Los secrets de Vault de dd-trace-java ya se han comprobado.