Skip to content

[DOCS-13682] Expand Understanding Injector Behavior with Windows, life cycle, and privilege details#36552

Open
domalessi wants to merge 3 commits intomasterfrom
domalessi/docs-13682-ssi-injector-details
Open

[DOCS-13682] Expand Understanding Injector Behavior with Windows, life cycle, and privilege details#36552
domalessi wants to merge 3 commits intomasterfrom
domalessi/docs-13682-ssi-injector-details

Conversation

@domalessi
Copy link
Copy Markdown
Contributor

What does this PR do? What is the motivation?

Fixes DOCS-13682

Expands the Understanding Injector Behavior with Single Step Instrumentation guide with the following additions, requested by the APM SSI team and prompted by a customer security review:

  • New Windows subsection under "How the injector is loaded" — describes the kernel driver + DLL loading mechanism. The page previously had no Windows coverage.
  • New "Injector life cycle" section — clarifies that the injector runs before main and exits before the application starts, and is not a background process or thread.
  • New "Per-language instrumentation" section — short reference table mapping each supported runtime to the environment variable or mechanism used to load the tracer SDK (JAVA_TOOL_OPTIONS, PYTHONPATH, NODE_OPTIONS, RUBYOPT, CLR profiler vars, PHP_INI_SCAN_DIR, NGINX re-exec).
  • New "Privileges and scope" section — answers customer security questions about injection scope (no kernel modules, no eBPF, no syscall hooking; user-space dynamic linking only), runtime privileges (tracer inherits the application's permissions; no escalation), and install-time privilege requirements per deployment mode (Kubernetes, Linux host, Docker, Windows).

Internal implementation details (weak symbol names, ELF/PE parsing, the Go processor, the policies engine, build details, and so on) were intentionally left out to keep the page customer-facing and stable.

Merge instructions

Merge readiness:

  • Ready for merge

Additional notes

… to injector behavior guide

Expands the Understanding Injector Behavior page with:
- Windows loading mechanism (kernel driver + DLL)
- Injector life cycle clarification (runs before main, exits before app starts)
- Per-language injection mechanism table
- Privileges and scope section covering injection scope, runtime privileges,
  and install-time privilege requirements per deployment mode

Co-Authored-By: Claude Opus 4.7 (1M context) <[email protected]>
@domalessi domalessi requested a review from a team as a code owner May 7, 2026 19:33
@github-actions github-actions Bot added the Guide Content impacting a guide label May 7, 2026
@github-actions
Copy link
Copy Markdown
Contributor

github-actions Bot commented May 7, 2026

Preview links (active after the build_preview check completes)

Modified Files

@domalessi domalessi added the WORK IN PROGRESS No review needed, it's a wip ;) label May 7, 2026
domalessi and others added 2 commits May 7, 2026 15:57
- Replace "Datadog DLL" with "injector DLL" to clarify what the file is and remove the redundant double "Datadog" reference
- Drop the duplicate Java/.NET supported-runtimes statement, since this is already covered on the Windows install and SSI compatibility pages

Co-Authored-By: Claude Opus 4.7 (1M context) <[email protected]>
- Lowercase "pod" in privileges section to match the rest of the page
- Replace "Datadog DLL" with "injector DLL" for consistency with the Windows loading subsection
- Name the injector explicitly at the start of the second life cycle paragraph for AI readability
- Replace two semicolons with periods (Docker daemon, Windows profiler), per editorial reference
- Match "tracer or profiler" wording across runtime privileges paragraph
- Drop the awkward "only enable" placement in the Windows installation privileges item
- Split the long "if injection fails" sentence into two

Co-Authored-By: Claude Opus 4.7 (1M context) <[email protected]>
@domalessi domalessi added WORK IN PROGRESS No review needed, it's a wip ;) and removed WORK IN PROGRESS No review needed, it's a wip ;) labels May 7, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Guide Content impacting a guide WORK IN PROGRESS No review needed, it's a wip ;)

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant