test(ffe): validate Node and Java EVP egress by leoromanovsky · Pull Request #7588 · DataDog/system-tests

leoromanovsky · 2026-08-26T08:46:56Z

Motivation

Server-side flag-evaluation and exposure events need route-level coverage for Agent, agentless direct, and agentless sidecar delivery.

Changes

Add shared flag-evaluation egress tests for the three delivery topologies.
Assert aggregate evaluation count, payload fields, selected route, direct DD-API-KEY authentication, and zero events on unused routes.
Activate the flag-evaluation contract for Node.js express4 and Java spring-boot.
Activate Java exposure egress coverage for agentless direct and sidecar delivery.
Mark the two Go agentless flag-evaluation routes as pending implementation.
Configure the Node.js and Java test images to trust the checked-in system-test proxy CA.
Wait for asynchronous exposure capture before teardown and accept raw or SHA-256-prefixed targeting keys in the shared payload matcher.

Decisions

Preserve TLS verification through the system-test proxy.
Accept multiple flushes while asserting the exact aggregate event count.
Exercise Node.js with feat(openfeature): emit server-side EVP flagevaluation dd-trace-js#8902 and fix(openfeature): harden agentless EVP fallback dd-trace-js#9988.
Exercise Java with fix(feature-flags): add safe agentless EVP fallback dd-trace-java#12299.

Validation

./format.sh
Focused TEST_THE_TEST manifest and scenario suites: 81 passed.
Node.js Agent, direct, and sidecar combined exposure and flag-evaluation runs: 2 passed per topology.
Java Agent, direct, and sidecar combined exposure and flag-evaluation runs: 2 passed per topology.

Tracks FFL-1488 and FFL-1490.

Verify Agent, direct, and serverless route provenance, authentication, payload aggregation, and unused-route exclusion across supported SDKs. Environment: Datadog workspace

github-actions · 2026-08-26T08:47:25Z

CODEOWNERS have been resolved as:

manifests/golang.yml                                                    @DataDog/system-tests-reviewers
manifests/java.yml                                                      @DataDog/system-tests-reviewers
manifests/nodejs.yml                                                    @DataDog/system-tests-reviewers
tests/ffe/test_exposure_egress.py                                       @DataDog/feature-flagging-and-experimentation-sdk @DataDog/system-tests-core
tests/ffe/test_flag_eval_evp.py                                         @DataDog/feature-flagging-and-experimentation-sdk @DataDog/system-tests-core
tests/test_the_test/scenarios.json                                      @DataDog/system-tests-core
utils/_context/_scenarios/agentless_endtoend.py                         @DataDog/system-tests-core
utils/build/docker/java/spring-boot.Dockerfile                          @DataDog/system-tests-reviewers

datadog-datadog-prod-us1 · 2026-08-26T09:25:28Z

⚠️ Warnings

❌ Your PR has failed checks. Please review the issues below and take necessary action before merging.

🚦 5 Pipeline jobs failed

Testing the test | System Tests (java, dev) / End-to-end #1 / spring-boot 1 — ❌ 1 test failed · 🔧 Needs a code fix, caused by this PR

View more details · View in GitHub Actions

1 failed test. AssertionError: Timed out waiting for EVP flagevaluation event for flag empty-targeting-key-flag at tests/ffe/test_flag_eval_evp.py:318

Showing tests most relevant to this failure.

❌

tests.ffe.test_flag_eval_evp.Test_FFE_EVP_Flagevaluation_Egress_Datadog_Agent.test_ffe_evp_flagevaluation_egress[spring-boot]

from system_tests_suite

AssertionError: Timed out waiting for EVP flagevaluation event for flag empty-targeting-key-flag
assert False
 &#43;  where False = &lt;bound method ProxyBasedInterfaceValidator.wait_for of AgentInterfaceValidator(&#39;agent&#39;)&gt;(&lt;function FlagevaluationEgressContract.test_ffe_evp_flagevaluation_egress.&lt;locals&gt;.&lt;lambda&gt; at 0x7f4fe318a200&gt;, timeout=30)
 &#43;    where &lt;bound method ProxyBasedInterfaceValidator.wait_for of AgentInterfaceValidator(&#39;agent&#39;)&gt; = AgentInterfaceValidator(&#39;agent&#39;).wait_for
 &#43;      where AgentInterfaceValidator(&#39;agent&#39;) = FlagevaluationEgress(interface=AgentInterfaceValidator(&#39;agent&#39;), excluded_interfaces=(), expected_api_key=None).interface

self = &lt;tests.ffe.test_flag_eval_evp.Test_FFE_EVP_Flagevaluation_Egress_Datadog_Agent object at 0x7f501061a2d0&gt;

    def test_ffe_evp_flagevaluation_egress(self) -&gt; None:
        for index, response in enumerate(self.responses):
...

Testing the test | System Tests (java, dev) / End-to-end #2 / spring-boot 2 — ❌ 2 tests failed · 🔧 Needs a code fix, caused by this PR

View more details · View in GitHub Actions

Test run failed due to timeout waiting for EVP flagevaluation event for flag 'empty-targeting-key-flag'.

Showing tests most relevant to this failure.

❌ pytest.internal[spring-boot] from system_tests_suite

internal error

Traceback (most recent call last):
  File &#34;/home/runner/work/system-tests/system-tests/venv/lib/python3.12/site-packages/_pytest/main.py&#34;, line 268, in wrap_session
    session.exitstatus = doit(config, session) or 0
                         ^^^^^^^^^^^^^^^^^^^^^
  File &#34;/home/runner/work/system-tests/system-tests/venv/lib/python3.12/site-packages/_pytest/main.py&#34;, line 321, in _main
    config.hook.pytest_collection(session=session)
  File &#34;/home/runner/work/system-tests/system-tests/venv/lib/python3.12/site-packages/pluggy/_hooks.py&#34;, line 265, in __call__
    return self._hookexec(self.name, self.get_hookimpls(), kwargs, firstresult)
...

❌

tests.ffe.test_flag_eval_evp.Test_FFE_EVP_Flagevaluation_Egress_Agentless_Sidecar.test_ffe_evp_flagevaluation_egress[spring-boot]

from system_tests_suite

AssertionError: Timed out waiting for EVP flagevaluation event for flag empty-targeting-key-flag
assert False
 &#43;  where False = &lt;bound method ProxyBasedInterfaceValidator.wait_for of ProxyBasedInterfaceValidator(&#39;datadog_sidecar&#39;)&gt;(&lt;function FlagevaluationEgressContract.test_ffe_evp_flagevaluation_egress.&lt;locals&gt;.&lt;lambda&gt; at 0x7f2b214f1b20&gt;, timeout=30)
 &#43;    where &lt;bound method ProxyBasedInterfaceValidator.wait_for of ProxyBasedInterfaceValidator(&#39;datadog_sidecar&#39;)&gt; = ProxyBasedInterfaceValidator(&#39;datadog_sidecar&#39;).wait_for
 &#43;      where ProxyBasedInterfaceValidator(&#39;datadog_sidecar&#39;) = FlagevaluationEgress(interface=ProxyBasedInterfaceValidator(&#39;datadog_sidecar&#39;), excluded_interfaces=(ProxyBasedInterfaceValidator(&#39;datadog_direct&#39;),), expected_api_key=&#39;0123456789abcdef0123456789abcdef&#39;).interface

self = &lt;tests.ffe.test_flag_eval_evp.Test_FFE_EVP_Flagevaluation_Egress_Agentless_Sidecar object at 0x7f2b48fefaa0&gt;

    def test_ffe_evp_flagevaluation_egress(self) -&gt; None:
        for index, response in enumerate(self.responses):
...

Testing the test | System Tests (nodejs, dev) / End-to-end #1 / express4 1 — ❌ 3 tests failed · 🔧 Needs a code fix, caused by this PR

View more details · View in GitHub Actions

3 failed tests. Assertion Error: Timed out waiting for EVP flagevaluation event for flag empty-targeting-key-flag in tests/ffe/test_flag_eval_evp.py:318.

Showing tests most relevant to this failure.

❌

tests.ffe.test_flag_eval_evp.Test_FFE_EVP_Flagevaluation_Egress_Agentless_Direct.test_ffe_evp_flagevaluation_egress[express4]

from system_tests_suite

AssertionError: Timed out waiting for EVP flagevaluation event for flag empty-targeting-key-flag
assert False
 &#43;  where False = &lt;bound method ProxyBasedInterfaceValidator.wait_for of ProxyBasedInterfaceValidator(&#39;datadog_direct&#39;)&gt;(&lt;function FlagevaluationEgressContract.test_ffe_evp_flagevaluation_egress.&lt;locals&gt;.&lt;lambda&gt; at 0x7fbd15b7e700&gt;, timeout=30)
 &#43;    where &lt;bound method ProxyBasedInterfaceValidator.wait_for of ProxyBasedInterfaceValidator(&#39;datadog_direct&#39;)&gt; = ProxyBasedInterfaceValidator(&#39;datadog_direct&#39;).wait_for
 &#43;      where ProxyBasedInterfaceValidator(&#39;datadog_direct&#39;) = FlagevaluationEgress(interface=ProxyBasedInterfaceValidator(&#39;datadog_direct&#39;), excluded_interfaces=(ProxyBasedInterfaceValidator(&#39;datadog_sidecar&#39;),), expected_api_key=&#39;system-tests-mock-api-key&#39;).interface

self = &lt;tests.ffe.test_flag_eval_evp.Test_FFE_EVP_Flagevaluation_Egress_Agentless_Direct object at 0x7fbd38bd9670&gt;

    def test_ffe_evp_flagevaluation_egress(self) -&gt; None:
        for index, response in enumerate(self.responses):
...

❌

tests.ffe.test_flag_eval_evp.Test_FFE_EVP_Flagevaluation_Egress_Agentless_Sidecar.test_ffe_evp_flagevaluation_egress[express4]

from system_tests_suite

AssertionError: Timed out waiting for EVP flagevaluation event for flag empty-targeting-key-flag
assert False
 &#43;  where False = &lt;bound method ProxyBasedInterfaceValidator.wait_for of ProxyBasedInterfaceValidator(&#39;datadog_sidecar&#39;)&gt;(&lt;function FlagevaluationEgressContract.test_ffe_evp_flagevaluation_egress.&lt;locals&gt;.&lt;lambda&gt; at 0x7f55797bef20&gt;, timeout=30)
 &#43;    where &lt;bound method ProxyBasedInterfaceValidator.wait_for of ProxyBasedInterfaceValidator(&#39;datadog_sidecar&#39;)&gt; = ProxyBasedInterfaceValidator(&#39;datadog_sidecar&#39;).wait_for
 &#43;      where ProxyBasedInterfaceValidator(&#39;datadog_sidecar&#39;) = FlagevaluationEgress(interface=ProxyBasedInterfaceValidator(&#39;datadog_sidecar&#39;), excluded_interfaces=(ProxyBasedInterfaceValidator(&#39;datadog_direct&#39;),), expected_api_key=&#39;0123456789abcdef0123456789abcdef&#39;).interface

self = &lt;tests.ffe.test_flag_eval_evp.Test_FFE_EVP_Flagevaluation_Egress_Agentless_Sidecar object at 0x7f55a84b2210&gt;

    def test_ffe_evp_flagevaluation_egress(self) -&gt; None:
        for index, response in enumerate(self.responses):
...

❌

tests.ffe.test_flag_eval_evp.Test_FFE_EVP_Flagevaluation_Egress_Datadog_Agent.test_ffe_evp_flagevaluation_egress[express4]

from system_tests_suite

AssertionError: Timed out waiting for EVP flagevaluation event for flag empty-targeting-key-flag
assert False
 &#43;  where False = &lt;bound method ProxyBasedInterfaceValidator.wait_for of AgentInterfaceValidator(&#39;agent&#39;)&gt;(&lt;function FlagevaluationEgressContract.test_ffe_evp_flagevaluation_egress.&lt;locals&gt;.&lt;lambda&gt; at 0x7f9aca4b7a60&gt;, timeout=30)
 &#43;    where &lt;bound method ProxyBasedInterfaceValidator.wait_for of AgentInterfaceValidator(&#39;agent&#39;)&gt; = AgentInterfaceValidator(&#39;agent&#39;).wait_for
 &#43;      where AgentInterfaceValidator(&#39;agent&#39;) = FlagevaluationEgress(interface=AgentInterfaceValidator(&#39;agent&#39;), excluded_interfaces=(), expected_api_key=None).interface

self = &lt;tests.ffe.test_flag_eval_evp.Test_FFE_EVP_Flagevaluation_Egress_Datadog_Agent object at 0x7f9af470ea20&gt;

    def test_ffe_evp_flagevaluation_egress(self) -&gt; None:
        for index, response in enumerate(self.responses):
...

View all 5 failed jobs.

📋 Copy fix prompt

CI on my pull request is failing. Help me find and fix the root cause of each failing job below — they were flagged as caused by changes in this PR, so focus on the diff. For each job, explain the failure and propose a fix.

Before you start, set up the Datadog software-delivery tooling so you can
query the CI data yourself:

1. Check whether you already have the Datadog software-delivery MCP tools
   (e.g. a `search_datadog_ci_pipeline_events` tool) and the `unblock-pr` skill.
2. If either is missing, STOP and ask me for permission before installing
   anything. Do not install or run anything until I have said yes.
3. Only with my explicit approval, set up the Datadog software-delivery MCP
   server and skills by following:
     https://docs.datadoghq.com/getting_started/software_delivery_mcp_tools/
   then restart so the skill is picked up.
4. If I decline, skip all of the above and work from the context below alone.

Then run /unblock-pr — it will pull the CI data itself. The job context below is what we already know.

If /unblock-pr is not available — because I declined the setup above, or it did not install — work from the context below instead.

Datadog has already classified this failure as caused by changes in this PR.
Take that as given and work the fix:

1. Locate the change. Diff this branch against its base and find the change
   that produces this error. Explain the mechanism, don't just name a file:
     git fetch origin && git diff $(git merge-base origin/main HEAD)...HEAD
2. Reproduce it locally. Run the failing job's command or test before
   proposing anything.
3. Propose the smallest fix that addresses the root cause — not a workaround,
   not a broadened assertion, not a disabled or skipped test.
4. Re-run the same command to confirm, and say exactly what you ran.
5. If the failure turns out to be intermittent rather than deterministic, say
   so plainly instead of "fixing" it — that is a flaky test, and patching it
   hides the problem.

If the right move is to re-run the job rather than change code, use the job
link in the context below. For GitHub Actions: `gh run rerun <run-id> --failed`,
where the run ID is the number after `/runs/` in that URL (not the trailing
number, which is the job ID).

Branch: leo.romanovsky/ffe-agentless-flageval-egress-tests

Testing the test | System Tests (java, dev) / End-to-end #1 / spring-boot 1
Commit: 45ad1dc27edae4c31d08ba022c57eeebdb3f81a6
Error (code / test):
1 failed test. AssertionError: Timed out waiting for EVP flagevaluation event for flag empty-targeting-key-flag at tests/ffe/test_flag_eval_evp.py:318
CI job: https://github.com/DataDog/system-tests/actions/runs/33021141331/job/98354062943

Testing the test | System Tests (java, dev) / End-to-end #2 / spring-boot 2
Commit: 45ad1dc27edae4c31d08ba022c57eeebdb3f81a6
Error (code / test):
1 failed test due to timeout waiting for EVP flagevaluation event for flag 'empty-targeting-key-flag'.
CI job: https://github.com/DataDog/system-tests/actions/runs/33021141331/job/98354062960

Testing the test | System Tests (nodejs, dev) / End-to-end #1 / express4 1
Commit: 45ad1dc27edae4c31d08ba022c57eeebdb3f81a6
Error (code / test):
3 failed tests. Assertion Error: Timed out waiting for EVP flagevaluation event for flag empty-targeting-key-flag in tests/ffe/test_flag_eval_evp.py:318.
CI job: https://github.com/DataDog/system-tests/actions/runs/33021141331/job/98352211047

ℹ️ Info

No other issues found (see more)

❄️ No new flaky tests detected

Useful? React with 👍 / 👎

_{This comment will be updated automatically if new data arrives.

🔗 Commit SHA: c489f01 | Docs | View more details | Give us feedback!}

Validate direct Event Platform routing and API-key authentication without coupling the system test to the separate fingerprint header. Environment: Datadog workspace

linear-code · 2026-08-26T22:43:59Z

FFL-1488

FFL-1490

leoromanovsky · 2026-08-27T05:49:45Z

Replaced by #7601 with a GitHub-verified commit.

Add shared flagevaluation egress contract

1caeebd

Verify Agent, direct, and serverless route provenance, authentication, payload aggregation, and unused-route exclusion across supported SDKs. Environment: Datadog workspace

Keep flagevaluation egress validation independent of fingerprinting

9e02eb3

Validate direct Event Platform routing and API-key authentication without coupling the system test to the separate fingerprint header. Environment: Datadog workspace

leoromanovsky mentioned this pull request Aug 26, 2026

feat(openfeature): emit server-side EVP flagevaluation DataDog/dd-trace-js#8902

Draft

test(ffe): validate Node and Java EVP egress

c489f01

leoromanovsky changed the title ~~Add shared flagevaluation egress route contract~~ test(ffe): validate Node and Java EVP egress Aug 26, 2026

leoromanovsky closed this Aug 27, 2026

Navigation Menu

Uh oh!

test(ffe): validate Node and Java EVP egress - #7588

test(ffe): validate Node and Java EVP egress#7588
leoromanovsky wants to merge 3 commits into
mainfrom
leo.romanovsky/ffe-agentless-flageval-egress-tests

leoromanovsky commented Aug 26, 2026 •

edited by atlassian Bot

Loading

Uh oh!

github-actions Bot commented Aug 26, 2026 •

edited

Loading

Uh oh!

datadog-datadog-prod-us1 Bot commented Aug 26, 2026 •

edited by datadog-prod-us1-5 Bot

Loading

Uh oh!

linear-code Bot commented Aug 26, 2026

Uh oh!

leoromanovsky commented Aug 27, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

leoromanovsky commented Aug 26, 2026 • edited by atlassian Bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Motivation

Changes

Decisions

Validation

Uh oh!

github-actions Bot commented Aug 26, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

datadog-datadog-prod-us1 Bot commented Aug 26, 2026 • edited by datadog-prod-us1-5 Bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

⚠️ Warnings

ℹ️ Info

Uh oh!

linear-code Bot commented Aug 26, 2026

Uh oh!

leoromanovsky commented Aug 27, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

leoromanovsky commented Aug 26, 2026 •

edited by atlassian Bot

Loading

github-actions Bot commented Aug 26, 2026 •

edited

Loading

datadog-datadog-prod-us1 Bot commented Aug 26, 2026 •

edited by datadog-prod-us1-5 Bot

Loading