Update SSI auto-injection tests to validate workload selection policies

[annacai21]

Motivation

These tests used to rely on commands listed in the SDK’s requirements.json (e.g. java -version, dotnet restore) being denied for auto-injection, and asserted on logs within the Go process such as “not injecting; on deny list”. With evaluation moving to requirements.bin, those commands are denied earlier by workload selection, before the Go process runs, so those Go log lines no longer appear and the old assertions fail.

Changes

• Update assertions to use workload-selection specific logs from the C code instead of the Go process

Workflow

1. ⚠️ Create your PR as draft ⚠️
2. Work on you PR until the CI passes
3. Mark it as ready for review
   • Test logic is modified? -> Get a review from RFC owner.
   • Framework is modified, or non obvious usage of it -> get a review from R&P team

🚀 Once your PR is reviewed and the CI green, you can merge it!

🛟 #apm-shared-testing 🛟

Reviewer checklist

• Anything but tests/ or manifests/ is modified ? I have the approval from R&P team
• A docker base image is modified?
  • the relevant build-XXX-image label is present
• A scenario is added, removed or renamed?
  • Get a review from R&P team

INPLAT-1018

[github-actions]

CODEOWNERS have been resolved as:

manifests/java.yml                                                      @DataDog/asm-java @DataDog/apm-java
tests/auto_inject/test_blocklist_auto_inject.py                         @DataDog/system-tests-core
tests/test_the_test/scenarios.json                                      @DataDog/system-tests-core
utils/onboarding/injection_log_parser.py                                @DataDog/system-tests-core

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: f9628e250f

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

[chatgpt-codex-connector]

Align scenario map nodeids with renamed test methods

The scenario map now references nodeids such as test_commands_excluded_by_workload_policy/test_args_*, but the renamed test file defines test_no_language_found_commands, test_commands_denied_by_workload_selection, and test_commands_allowed_by_workload_selection instead (tests/auto_inject/test_auto_inject_workload_selection.py, lines 77/93/112). Because compute_libraries_and_scenarios.py matches manifest changes by nodeid prefix, manifest updates targeting the real method names will no longer resolve to INSTALLER_AUTO_INJECTION, causing CI scenario selection to miss these tests.

Useful? React with 👍 / 👎.

[natitsechanski]

lgtm