Enable Pekko HTTP forked tests (#12310)

fix(feature-flags): constrain direct EVP intake origin (#12299)

Add proxy-aware feature flag intake authentication

Route direct feature flag intake through standard HTTPS proxy settings and attach the canonical fixed-width API key fingerprint.

Environment: Datadog workspace

Separate direct intake proxying from API key fingerprinting

Keep this PR focused on proxy-aware direct Event Platform intake and leave fingerprinting to an independent change.

Environment: Datadog workspace

Merge live Java master after EVP split

Restore Java formatting after the fingerprint split

Keep the direct-intake diff free of fingerprint-only formatting artifacts.

Environment: Datadog workspace

Update direct-intake tests after fingerprint removal

Use the original two-argument direct intake factory now that the unrelated fingerprint header plumbing has moved out of this PR.

Environment: Datadog workspace

Remove unnecessary Groovy imports

fix(feature-flags): handle ambiguous EVP failures safely

fix(feature-flags): validate direct EVP intake site

Reject URL authority confusion before adding DD-API-KEY.

Environment: Datadog workspace

fix(config): align proxy configuration validation

Read standard proxy environment variables without registering them as Datadog configuration aliases, and use the existing non-regex parser for no-proxy hosts.

Environment: Datadog workspace

fix(feature-flags): reject direct intake redirects

Disable HTTP and HTTPS redirects for Feature Flags direct EVP intake so DD-API-KEY remains bound to the configured origin.

Environment: Datadog workspace

fix(feature-flags): harden proxy configuration

Preserve one-character NO_PROXY entries and prevent HTTPS proxy URLs from exposing credentials through configuration telemetry.

Environment: Datadog workspace

Merge remote-tracking branch 'origin/master' into leo.romanovsky/ffe-agentless-evp-java-hardening

# Conflicts:
#	utils/config-utils/src/main/java/datadog/trace/api/ConfigSetting.java
#	utils/config-utils/src/test/java/datadog/trace/api/ConfigSettingTest.java

refactor(feature-flags): narrow direct intake hardening

Keep direct intake origin and redirect protections while removing proxy and runtime failover changes.

Environment: Datadog workspace

Merge branch 'master' into leo.romanovsky/ffe-agentless-evp-java-hardening\n\nEnvironment: Datadog workspace

Co-authored-by: devflow.devflow-routing-intake <devflow.devflow-routing-intake@kubernetes.us1.ddbuild.io>

Enable Pekko HTTP forked tests

Minor reshuffle.

Remove direct Pekko advice test

Co-authored-by: leoromanovsky <leo.romanovsky@datadoghq.com>
Co-authored-by: alexey.kuznetsov <alexey.kuznetsov@datadoghq.com>

Author: AlexeyKuznetsov-DD

dd-java-agent/instrumentation/pekko/pekko-http-1.0/build.gradle

@@ -8,10 +8,16 @@ plugins {
 // we put the test classes in the baseTest test set so that the scala
 // version is not inherited
 addTestSuite('baseTest')
+addForkedTestTask('baseTest')
+
 addTestSuite('latestDepTest')
+addForkedTestTask('latestDepTest')
+
 addTestSuiteForDir('latestPekko10Test', 'latestDepTest')
+addForkedTestTask('latestPekko10Test')
+
 addTestSuite('iastTest')
-addTestSuiteForDir 'latestDepIastTest', 'iastTest'
+addTestSuiteForDir('latestDepIastTest', 'iastTest')
 
 muzzle {
   pass {

dd-java-agent/instrumentation/pekko/pekko-http-1.0/src/baseTest/groovy/PekkoHttpClientInstrumentationTest.groovy

@@ -73,14 +73,14 @@ abstract class PekkoHttpClientInstrumentationTest extends HttpClientTest {
         span {
           parent()
           operationName operation()
-          resourceName "pekko-http.client.request"
+          resourceName operation() // resource name is not set so defaults to operationName
           spanType DDSpanTypes.HTTP_CLIENT
           errored true
           tags {
             "$Tags.COMPONENT" "pekko-http-client"
             "$Tags.SPAN_KIND" Tags.SPAN_KIND_CLIENT
             errorTags(exception)
-            defaultTags()
+            defaultTags(false, false)
           }
         }
       }

dd-java-agent/instrumentation/pekko/pekko-http-1.0/src/main/java/datadog/trace/instrumentation/pekkohttp/PekkoHttpSingleRequestInstrumentation.java

@@ -115,6 +115,9 @@ public static class SingleRequestContextPropagationAdvice {
     @Advice.OnMethodEnter(suppress = Throwable.class)
     public static void methodEnter(
         @Advice.Argument(value = 0, readOnly = false) HttpRequest request) {
+      if (request == null) {
+        return;
+      }
       final PekkoHttpHeaders headers = new PekkoHttpHeaders(request);
       DECORATE.injectContext(currentContext(), request, headers);
       request = headers.getRequest();