datadogagent_default.go

// Unless explicitly stated otherwise all files in this repository are licensed
// under the Apache License Version 2.0.
// This product includes software developed at Datadog (https://www.datadoghq.com/).
// Copyright 2016-present Datadog, Inc.

package defaults

import (
	"os"

	"github.com/DataDog/datadog-operator/api/datadoghq/v2alpha1"
	apiutils "github.com/DataDog/datadog-operator/api/utils"
	"github.com/DataDog/datadog-operator/internal/controller/datadogagent/common"
	"github.com/DataDog/datadog-operator/pkg/images"
)

// Default configuration values. These are the recommended settings for monitoring with Datadog in Kubernetes.
const (
	defaultSite       string = "datadoghq.com"
	defaultEuropeSite string = "datadoghq.eu"
	defaultAsiaSite   string = "ap1.datadoghq.com"
	defaultAzureSite  string = "us3.datadoghq.com"
	defaultGovSite    string = "ddog-gov.com"
	defaultLogLevel   string = "info"

	defaultLogCollectionEnabled          bool   = false
	defaultLogContainerCollectUsingFiles bool   = true
	defaultLogContainerLogsPath          string = "/var/lib/docker/containers"
	defaultLogPodLogsPath                string = "/var/log/pods"
	defaultLogContainerSymlinksPath      string = "/var/log/containers"

	defaultOtelCollectorEnabled           bool = false
	defaultLiveProcessCollectionEnabled   bool = false
	defaultLiveContainerCollectionEnabled bool = true
	defaultProcessDiscoveryEnabled        bool = true

	defaultOOMKillEnabled        bool = false
	defaultTCPQueueLengthEnabled bool = false

	defaultEBPFCheckEnabled bool = false

	defaultGPUMonitoringEnabled bool = false

	defaultServiceDiscoveryEnabled             bool = false
	defaultServiceDiscoveryEnabledByDefault    bool = false
	defaultServiceDiscoveryNetworkStatsEnabled bool = true

	defaultAPMEnabled                   bool   = true
	defaultAPMHostPortEnabled           bool   = false
	defaultAPMHostPort                  int32  = 8126
	defaultAPMSocketEnabled             bool   = true
	defaultAPMSocketHostPath            string = common.DogstatsdAPMSocketHostPath + "/" + common.APMSocketName
	defaultAPMSingleStepInstrEnabled    bool   = false
	defaultLanguageDetectionEnabled     bool   = true
	defaultCSPMEnabled                  bool   = false
	defaultCSPMHostBenchmarksEnabled    bool   = true
	defaultCWSEnabled                   bool   = false
	defaultCWSSyscallMonitorEnabled     bool   = false
	defaultCWSDirectSendFromSystemProbe bool   = false
	defaultCWSNetworkEnabled            bool   = true
	defaultCWSSecurityProfilesEnabled   bool   = true
	defaultCWSEnforcementEnabled        bool   = true
	defaultAPMErrorTrackingStandalone   bool   = false

	defaultNPMEnabled         bool = false
	defaultNPMEnableConntrack bool = true
	defaultNPMCollectDNSStats bool = true

	defaultUSMEnabled bool = false

	defaultDogstatsdOriginDetectionEnabled bool   = false
	defaultDogstatsdHostPortEnabled        bool   = false
	defaultDogstatsdSocketEnabled          bool   = true
	defaultDogstatsdHostSocketPath         string = common.DogstatsdAPMSocketHostPath + "/" + common.DogstatsdSocketName
	defaultDogstatsdNonLocalTraffic        bool   = true

	defaultOTLPGRPCEnabled         bool   = false
	defaultOTLPGRPCHostPortEnabled bool   = true
	defaultOTLPGRPCEndpoint        string = "0.0.0.0:4317"
	defaultOTLPHTTPEnabled         bool   = false
	defaultOTLPHTTPHostPortEnabled bool   = true
	defaultOTLPHTTPEndpoint        string = "0.0.0.0:4318"

	defaultRemoteConfigurationEnabled bool = true

	defaultCollectKubernetesEvents bool = true

	defaultAdmissionControllerAgentSidecarClusterAgentEnabled bool   = true
	defaultAdmissionControllerEnabled                         bool   = true
	defaultAdmissionControllerValidationEnabled               bool   = true
	defaultAdmissionControllerMutationEnabled                 bool   = true
	defaultAdmissionControllerMutateUnlabelled                bool   = false
	defaultAdmissionServiceName                               string = "datadog-admission-controller"

	defaultAdmissionControllerKubernetesAdmissionEventsEnabled bool = false

	// DefaultAdmissionControllerCWSInstrumentationEnabled default CWS Instrumentation enabled value
	DefaultAdmissionControllerCWSInstrumentationEnabled bool = false
	// DefaultAdmissionControllerCWSInstrumentationMode default CWS Instrumentation mode
	DefaultAdmissionControllerCWSInstrumentationMode string = "remote_copy"

	defaultAdmissionASMThreatsEnabled bool = false
	defaultAdmissionASMSCAEnabled     bool = false
	defaultAdmissionASMIASTEnabled    bool = false

	defaultOrchestratorExplorerEnabled         bool = true
	defaultOrchestratorExplorerScrubContainers bool = true

	defaultExternalMetricsServerEnabled bool = false
	defaultDatadogMetricsEnabled        bool = true
	defaultRegisterAPIService           bool = true
	// Cluster Agent versions < 1.20 should use 443
	defaultMetricsProviderPort int32 = 8443

	defaultKubeStateMetricsCoreEnabled bool = true

	defaultClusterChecksEnabled    bool = true
	defaultUseClusterChecksRunners bool = false

	defaultPrometheusScrapeEnabled                bool = false
	defaultPrometheusScrapeEnableServiceEndpoints bool = false
	defaultPrometheusScrapeVersion                int  = 2

	// defaultKubeletAgentCAPath            = "/var/run/secrets/kubernetes.io/serviceaccount/ca.crt"
	// defaultKubeletAgentCAPathHostPathSet = "/var/run/host-kubelet-ca.crt"
	defaultKubeletPodResourcesSocketDir = "/var/lib/kubelet/pod-resources/"

	defaultContainerStrategy = v2alpha1.OptimizedContainerStrategy

	defaultHelmCheckEnabled       bool = false
	defaultHelmCheckCollectEvents bool = false

	defaultUseFIPSAgent     bool   = false
	defaultFIPSProxyEnabled bool   = false
	defaultFIPSImageName    string = "fips-proxy"
	defaultFIPSImageTag     string = images.FIPSProxyLatestVersion
	defaultFIPSLocalAddress string = "127.0.0.1"
	defaultFIPSPort         int32  = 9803
	defaultFIPSPortRange    int32  = 15
	defaultFIPSUseHTTPS     bool   = false

	defaultControlPlaneMonitoringEnabled bool = true

	defaultDataPlaneDogstatsdEnabled bool = false
)

// DefaultDatadogAgentSpec defaults the DatadogAgentSpec GlobalConfig and Features.
func DefaultDatadogAgentSpec(ddaSpec *v2alpha1.DatadogAgentSpec) {
	defaultGlobalConfig(ddaSpec)

	defaultFeaturesConfig(ddaSpec)
}

// defaultGlobalConfig sets default values in DatadogAgentSpec.Global.
func defaultGlobalConfig(ddaSpec *v2alpha1.DatadogAgentSpec) {
	if ddaSpec.Global == nil {
		ddaSpec.Global = &v2alpha1.GlobalConfig{}
	}

	if ddaSpec.Global.Site == nil {
		ddaSpec.Global.Site = apiutils.NewStringPointer(defaultSite)
	}

	if ddaSpec.Global.Registry == nil {
		switch *ddaSpec.Global.Site {
		case defaultEuropeSite:
			if os.Getenv("DD_REGISTRY_OVERRIDE_EU") == "true" {
				ddaSpec.Global.Registry = apiutils.NewStringPointer(images.DatadogContainerRegistry)
			} else {
				ddaSpec.Global.Registry = apiutils.NewStringPointer(images.DefaultEuropeImageRegistry)
			}
		case defaultAsiaSite:
			if os.Getenv("DD_REGISTRY_OVERRIDE_ASIA") == "true" {
				ddaSpec.Global.Registry = apiutils.NewStringPointer(images.DatadogContainerRegistry)
			} else {
				ddaSpec.Global.Registry = apiutils.NewStringPointer(images.DefaultAsiaImageRegistry)
			}
		case defaultAzureSite:
			if os.Getenv("DD_REGISTRY_OVERRIDE_AZURE") == "true" {
				ddaSpec.Global.Registry = apiutils.NewStringPointer(images.DatadogContainerRegistry)
			} else {
				ddaSpec.Global.Registry = apiutils.NewStringPointer(images.DefaultAzureImageRegistry)
			}
		case defaultGovSite:
			ddaSpec.Global.Registry = apiutils.NewStringPointer(images.DefaultGovImageRegistry)
		default:
			if os.Getenv("DD_REGISTRY_OVERRIDE_DEFAULT") == "true" {
				ddaSpec.Global.Registry = apiutils.NewStringPointer(images.DatadogContainerRegistry)
			} else {
				ddaSpec.Global.Registry = apiutils.NewStringPointer(images.DefaultImageRegistry)
			}
		}
	}

	if ddaSpec.Global.LogLevel == nil {
		ddaSpec.Global.LogLevel = apiutils.NewStringPointer(defaultLogLevel)
	}

	if ddaSpec.Global.ContainerStrategy == nil {
		dcs := defaultContainerStrategy
		ddaSpec.Global.ContainerStrategy = &dcs
	}

	apiutils.DefaultBooleanIfUnset(&ddaSpec.Global.UseFIPSAgent, defaultUseFIPSAgent)

	if ddaSpec.Global.FIPS == nil {
		ddaSpec.Global.FIPS = &v2alpha1.FIPSConfig{}
	}
	apiutils.DefaultBooleanIfUnset(&ddaSpec.Global.FIPS.Enabled, defaultFIPSProxyEnabled)

	if *ddaSpec.Global.FIPS.Enabled {
		if ddaSpec.Global.FIPS.Image == nil {
			ddaSpec.Global.FIPS.Image = &v2alpha1.AgentImageConfig{}
		}
		if ddaSpec.Global.FIPS.Image.Name == "" {
			ddaSpec.Global.FIPS.Image.Name = defaultFIPSImageName
		}
		if ddaSpec.Global.FIPS.Image.Tag == "" {
			ddaSpec.Global.FIPS.Image.Tag = defaultFIPSImageTag
		}
		apiutils.DefaultStringIfUnset(&ddaSpec.Global.FIPS.LocalAddress, defaultFIPSLocalAddress)
		apiutils.DefaultInt32IfUnset(&ddaSpec.Global.FIPS.Port, defaultFIPSPort)
		apiutils.DefaultInt32IfUnset(&ddaSpec.Global.FIPS.PortRange, defaultFIPSPortRange)
		apiutils.DefaultBooleanIfUnset(&ddaSpec.Global.FIPS.UseHTTPS, defaultFIPSUseHTTPS)
	}

	if ddaSpec.Global.Kubelet == nil {
		ddaSpec.Global.Kubelet = &v2alpha1.KubeletConfig{}
	}

	if ddaSpec.Global.Kubelet.PodResourcesSocketPath == "" {
		ddaSpec.Global.Kubelet.PodResourcesSocketPath = defaultKubeletPodResourcesSocketDir
	}
}

// defaultFeaturesConfig sets default values in DatadogAgentSpec.Features.
// Note: many default values are set in the Datadog Agent code and are not set here.
func defaultFeaturesConfig(ddaSpec *v2alpha1.DatadogAgentSpec) {
	if ddaSpec.Features == nil {
		ddaSpec.Features = &v2alpha1.DatadogFeatures{}
	}

	// LogsCollection Feature
	if ddaSpec.Features.LogCollection == nil {
		ddaSpec.Features.LogCollection = &v2alpha1.LogCollectionFeatureConfig{}
	}
	apiutils.DefaultBooleanIfUnset(&ddaSpec.Features.LogCollection.Enabled, defaultLogCollectionEnabled)

	if *ddaSpec.Features.LogCollection.Enabled {
		apiutils.DefaultBooleanIfUnset(&ddaSpec.Features.LogCollection.ContainerCollectUsingFiles, defaultLogContainerCollectUsingFiles)

		apiutils.DefaultStringIfUnset(&ddaSpec.Features.LogCollection.ContainerLogsPath, defaultLogContainerLogsPath)

		apiutils.DefaultStringIfUnset(&ddaSpec.Features.LogCollection.PodLogsPath, defaultLogPodLogsPath)

		apiutils.DefaultStringIfUnset(&ddaSpec.Features.LogCollection.ContainerSymlinksPath, defaultLogContainerSymlinksPath)

		apiutils.DefaultStringIfUnset(&ddaSpec.Features.LogCollection.TempStoragePath, common.DefaultLogTempStoragePath)
	}

	// LiveContainerCollection Feature
	if ddaSpec.Features.LiveContainerCollection == nil {
		ddaSpec.Features.LiveContainerCollection = &v2alpha1.LiveContainerCollectionFeatureConfig{}
	}
	apiutils.DefaultBooleanIfUnset(&ddaSpec.Features.LiveContainerCollection.Enabled, defaultLiveContainerCollectionEnabled)

	// OTelCollector Feature
	if ddaSpec.Features.OtelCollector == nil {
		ddaSpec.Features.OtelCollector = &v2alpha1.OtelCollectorFeatureConfig{}
	}
	apiutils.DefaultBooleanIfUnset(&ddaSpec.Features.OtelCollector.Enabled, defaultOtelCollectorEnabled)

	// LiveProcessCollection Feature
	if ddaSpec.Features.LiveProcessCollection == nil {
		ddaSpec.Features.LiveProcessCollection = &v2alpha1.LiveProcessCollectionFeatureConfig{}
	}
	apiutils.DefaultBooleanIfUnset(&ddaSpec.Features.LiveProcessCollection.Enabled, defaultLiveProcessCollectionEnabled)

	// ProcessDiscovery Feature
	if ddaSpec.Features.ProcessDiscovery == nil {
		ddaSpec.Features.ProcessDiscovery = &v2alpha1.ProcessDiscoveryFeatureConfig{}
	}
	apiutils.DefaultBooleanIfUnset(&ddaSpec.Features.ProcessDiscovery.Enabled, defaultProcessDiscoveryEnabled)

	// OOMKill Feature
	if ddaSpec.Features.OOMKill == nil {
		ddaSpec.Features.OOMKill = &v2alpha1.OOMKillFeatureConfig{}
	}
	apiutils.DefaultBooleanIfUnset(&ddaSpec.Features.OOMKill.Enabled, defaultOOMKillEnabled)

	// TCPQueueLength Feature
	if ddaSpec.Features.TCPQueueLength == nil {
		ddaSpec.Features.TCPQueueLength = &v2alpha1.TCPQueueLengthFeatureConfig{}
	}
	apiutils.DefaultBooleanIfUnset(&ddaSpec.Features.TCPQueueLength.Enabled, defaultTCPQueueLengthEnabled)

	// EBPFCheck Feature
	if ddaSpec.Features.EBPFCheck == nil {
		ddaSpec.Features.EBPFCheck = &v2alpha1.EBPFCheckFeatureConfig{}
	}
	apiutils.DefaultBooleanIfUnset(&ddaSpec.Features.EBPFCheck.Enabled, defaultEBPFCheckEnabled)

	// Service Discovery Feature
	if ddaSpec.Features.ServiceDiscovery == nil {
		ddaSpec.Features.ServiceDiscovery = &v2alpha1.ServiceDiscoveryFeatureConfig{}
	}
	apiutils.DefaultBooleanIfUnset(&ddaSpec.Features.ServiceDiscovery.EnabledByDefault, defaultServiceDiscoveryEnabledByDefault)
	// Only default Enabled to false when not enabled-by-default, so that Enabled=nil remains
	// distinguishable from Enabled=false (explicit user opt-out) when EnabledByDefault=true.
	if !apiutils.BoolValue(ddaSpec.Features.ServiceDiscovery.EnabledByDefault) {
		apiutils.DefaultBooleanIfUnset(&ddaSpec.Features.ServiceDiscovery.Enabled, defaultServiceDiscoveryEnabled)
	}

	if apiutils.BoolValue(ddaSpec.Features.ServiceDiscovery.Enabled) || apiutils.BoolValue(ddaSpec.Features.ServiceDiscovery.EnabledByDefault) {
		if ddaSpec.Features.ServiceDiscovery.NetworkStats == nil {
			ddaSpec.Features.ServiceDiscovery.NetworkStats = &v2alpha1.ServiceDiscoveryNetworkStatsConfig{}
		}

		apiutils.DefaultBooleanIfUnset(&ddaSpec.Features.ServiceDiscovery.NetworkStats.Enabled, defaultServiceDiscoveryNetworkStatsEnabled)
	}

	// GPU monitoring feature
	if ddaSpec.Features.GPU == nil {
		ddaSpec.Features.GPU = &v2alpha1.GPUFeatureConfig{}
	}
	apiutils.DefaultBooleanIfUnset(&ddaSpec.Features.GPU.Enabled, defaultGPUMonitoringEnabled)

	// APM Feature
	// APM is enabled by default
	if ddaSpec.Features.APM == nil {
		ddaSpec.Features.APM = &v2alpha1.APMFeatureConfig{}
	}

	apiutils.DefaultBooleanIfUnset(&ddaSpec.Features.APM.Enabled, defaultAPMEnabled)

	if *ddaSpec.Features.APM.Enabled {
		if ddaSpec.Features.APM.HostPortConfig == nil {
			ddaSpec.Features.APM.HostPortConfig = &v2alpha1.HostPortConfig{}
		}

		apiutils.DefaultBooleanIfUnset(&ddaSpec.Features.APM.HostPortConfig.Enabled, defaultAPMHostPortEnabled)

		apiutils.DefaultInt32IfUnset(&ddaSpec.Features.APM.HostPortConfig.Port, defaultAPMHostPort)

		if ddaSpec.Features.APM.UnixDomainSocketConfig == nil {
			ddaSpec.Features.APM.UnixDomainSocketConfig = &v2alpha1.UnixDomainSocketConfig{}
		}

		apiutils.DefaultBooleanIfUnset(&ddaSpec.Features.APM.UnixDomainSocketConfig.Enabled, defaultAPMSocketEnabled)

		apiutils.DefaultStringIfUnset(&ddaSpec.Features.APM.UnixDomainSocketConfig.Path, defaultAPMSocketHostPath)

		if ddaSpec.Features.APM.SingleStepInstrumentation == nil {
			ddaSpec.Features.APM.SingleStepInstrumentation = &v2alpha1.SingleStepInstrumentation{}
		}

		if ddaSpec.Features.APM.SingleStepInstrumentation.LanguageDetection == nil {
			ddaSpec.Features.APM.SingleStepInstrumentation.LanguageDetection = &v2alpha1.LanguageDetectionConfig{}
		}

		if ddaSpec.Features.APM.SingleStepInstrumentation.Injector == nil {
			ddaSpec.Features.APM.SingleStepInstrumentation.Injector = &v2alpha1.InjectorConfig{}
		}

		apiutils.DefaultBooleanIfUnset(&ddaSpec.Features.APM.SingleStepInstrumentation.Enabled, defaultAPMSingleStepInstrEnabled)
		apiutils.DefaultBooleanIfUnset(&ddaSpec.Features.APM.SingleStepInstrumentation.LanguageDetection.Enabled, defaultLanguageDetectionEnabled)

		if ddaSpec.Features.APM.ErrorTrackingStandalone == nil {
			ddaSpec.Features.APM.ErrorTrackingStandalone = &v2alpha1.ErrorTrackingStandalone{}
		}

		apiutils.DefaultBooleanIfUnset(&ddaSpec.Features.APM.ErrorTrackingStandalone.Enabled, defaultAPMErrorTrackingStandalone)
	}

	// ASM Features
	if ddaSpec.Features.ASM == nil {
		ddaSpec.Features.ASM = &v2alpha1.ASMFeatureConfig{}
	}

	if ddaSpec.Features.ASM.Threats == nil {
		ddaSpec.Features.ASM.Threats = &v2alpha1.ASMThreatsConfig{}
	}
	apiutils.DefaultBooleanIfUnset(&ddaSpec.Features.ASM.Threats.Enabled, defaultAdmissionASMThreatsEnabled)

	if ddaSpec.Features.ASM.SCA == nil {
		ddaSpec.Features.ASM.SCA = &v2alpha1.ASMSCAConfig{}
	}
	apiutils.DefaultBooleanIfUnset(&ddaSpec.Features.ASM.SCA.Enabled, defaultAdmissionASMSCAEnabled)

	if ddaSpec.Features.ASM.IAST == nil {
		ddaSpec.Features.ASM.IAST = &v2alpha1.ASMIASTConfig{}
	}
	apiutils.DefaultBooleanIfUnset(&ddaSpec.Features.ASM.IAST.Enabled, defaultAdmissionASMIASTEnabled)

	// CSPM (Cloud Security Posture Management) Feature
	if ddaSpec.Features.CSPM == nil {
		ddaSpec.Features.CSPM = &v2alpha1.CSPMFeatureConfig{}
	}
	apiutils.DefaultBooleanIfUnset(&ddaSpec.Features.CSPM.Enabled, defaultCSPMEnabled)

	if *ddaSpec.Features.CSPM.Enabled {
		if ddaSpec.Features.CSPM.HostBenchmarks == nil {
			ddaSpec.Features.CSPM.HostBenchmarks = &v2alpha1.CSPMHostBenchmarksConfig{}
		}
		apiutils.DefaultBooleanIfUnset(&ddaSpec.Features.CSPM.HostBenchmarks.Enabled, defaultCSPMHostBenchmarksEnabled)
	}

	// CWS (Cloud Workload Security) Feature
	if ddaSpec.Features.CWS == nil {
		ddaSpec.Features.CWS = &v2alpha1.CWSFeatureConfig{}
	}
	apiutils.DefaultBooleanIfUnset(&ddaSpec.Features.CWS.Enabled, defaultCWSEnabled)

	if *ddaSpec.Features.CWS.Enabled {
		if ddaSpec.Features.CWS.Network == nil {
			ddaSpec.Features.CWS.Network = &v2alpha1.CWSNetworkConfig{}
		}
		if ddaSpec.Features.CWS.SecurityProfiles == nil {
			ddaSpec.Features.CWS.SecurityProfiles = &v2alpha1.CWSSecurityProfilesConfig{}
		}
		if ddaSpec.Features.CWS.Enforcement == nil {
			ddaSpec.Features.CWS.Enforcement = &v2alpha1.CWSEnforcementConfig{}
		}

		apiutils.DefaultBooleanIfUnset(&ddaSpec.Features.CWS.SyscallMonitorEnabled, defaultCWSSyscallMonitorEnabled)
		apiutils.DefaultBooleanIfUnset(&ddaSpec.Features.CWS.Network.Enabled, defaultCWSNetworkEnabled)
		apiutils.DefaultBooleanIfUnset(&ddaSpec.Features.CWS.SecurityProfiles.Enabled, defaultCWSSecurityProfilesEnabled)
		apiutils.DefaultBooleanIfUnset(&ddaSpec.Features.CWS.DirectSendFromSystemProbe, defaultCWSDirectSendFromSystemProbe)
		apiutils.DefaultBooleanIfUnset(&ddaSpec.Features.CWS.Enforcement.Enabled, defaultCWSEnforcementEnabled)
	}

	// NPM (Network Performance Monitoring) Feature
	if ddaSpec.Features.NPM == nil {
		ddaSpec.Features.NPM = &v2alpha1.NPMFeatureConfig{}
	}
	apiutils.DefaultBooleanIfUnset(&ddaSpec.Features.NPM.Enabled, defaultNPMEnabled)

	if *ddaSpec.Features.NPM.Enabled {
		apiutils.DefaultBooleanIfUnset(&ddaSpec.Features.NPM.EnableConntrack, defaultNPMEnableConntrack)
		apiutils.DefaultBooleanIfUnset(&ddaSpec.Features.NPM.CollectDNSStats, defaultNPMCollectDNSStats)
	}

	// USM (Universal Service Monitoring) Feature
	if ddaSpec.Features.USM == nil {
		ddaSpec.Features.USM = &v2alpha1.USMFeatureConfig{}
	}
	apiutils.DefaultBooleanIfUnset(&ddaSpec.Features.USM.Enabled, defaultUSMEnabled)

	// Dogstatsd Feature
	if ddaSpec.Features.Dogstatsd == nil {
		ddaSpec.Features.Dogstatsd = &v2alpha1.DogstatsdFeatureConfig{}
	}
	apiutils.DefaultBooleanIfUnset(&ddaSpec.Features.Dogstatsd.OriginDetectionEnabled, defaultDogstatsdOriginDetectionEnabled)

	if ddaSpec.Features.Dogstatsd.HostPortConfig == nil {
		ddaSpec.Features.Dogstatsd.HostPortConfig = &v2alpha1.HostPortConfig{
			Enabled: apiutils.NewBoolPointer(defaultDogstatsdHostPortEnabled),
		}
	}

	if *ddaSpec.Features.Dogstatsd.HostPortConfig.Enabled {
		apiutils.DefaultInt32IfUnset(&ddaSpec.Features.Dogstatsd.HostPortConfig.Port, common.DefaultDogstatsdPort)
	}

	if ddaSpec.Features.Dogstatsd.UnixDomainSocketConfig == nil {
		ddaSpec.Features.Dogstatsd.UnixDomainSocketConfig = &v2alpha1.UnixDomainSocketConfig{}
	}

	apiutils.DefaultBooleanIfUnset(&ddaSpec.Features.Dogstatsd.UnixDomainSocketConfig.Enabled, defaultDogstatsdSocketEnabled)

	// defaultDogstatsdHostSocketPath matches the default hostPath of the helm chart.
	apiutils.DefaultStringIfUnset(&ddaSpec.Features.Dogstatsd.UnixDomainSocketConfig.Path, defaultDogstatsdHostSocketPath)

	apiutils.DefaultBooleanIfUnset(&ddaSpec.Features.Dogstatsd.NonLocalTraffic, defaultDogstatsdNonLocalTraffic)

	// OTLP ingest feature
	if ddaSpec.Features.OTLP == nil {
		ddaSpec.Features.OTLP = &v2alpha1.OTLPFeatureConfig{}
	}

	if ddaSpec.Features.OTLP.Receiver.Protocols.GRPC == nil {
		ddaSpec.Features.OTLP.Receiver.Protocols.GRPC = &v2alpha1.OTLPGRPCConfig{}
	}

	apiutils.DefaultBooleanIfUnset(&ddaSpec.Features.OTLP.Receiver.Protocols.GRPC.Enabled, defaultOTLPGRPCEnabled)

	if apiutils.BoolValue(ddaSpec.Features.OTLP.Receiver.Protocols.GRPC.Enabled) {
		if ddaSpec.Features.OTLP.Receiver.Protocols.GRPC.HostPortConfig == nil {
			ddaSpec.Features.OTLP.Receiver.Protocols.GRPC.HostPortConfig = &v2alpha1.HostPortConfig{}
		}
		apiutils.DefaultBooleanIfUnset(&ddaSpec.Features.OTLP.Receiver.Protocols.GRPC.HostPortConfig.Enabled, defaultOTLPGRPCHostPortEnabled)
	}

	apiutils.DefaultStringIfUnset(&ddaSpec.Features.OTLP.Receiver.Protocols.GRPC.Endpoint, defaultOTLPGRPCEndpoint)

	if ddaSpec.Features.OTLP.Receiver.Protocols.HTTP == nil {
		ddaSpec.Features.OTLP.Receiver.Protocols.HTTP = &v2alpha1.OTLPHTTPConfig{}
	}

	apiutils.DefaultBooleanIfUnset(&ddaSpec.Features.OTLP.Receiver.Protocols.HTTP.Enabled, defaultOTLPHTTPEnabled)

	if apiutils.BoolValue(ddaSpec.Features.OTLP.Receiver.Protocols.HTTP.Enabled) {
		if ddaSpec.Features.OTLP.Receiver.Protocols.HTTP.HostPortConfig == nil {
			ddaSpec.Features.OTLP.Receiver.Protocols.HTTP.HostPortConfig = &v2alpha1.HostPortConfig{}
		}
		apiutils.DefaultBooleanIfUnset(&ddaSpec.Features.OTLP.Receiver.Protocols.HTTP.HostPortConfig.Enabled, defaultOTLPHTTPHostPortEnabled)
	}

	apiutils.DefaultStringIfUnset(&ddaSpec.Features.OTLP.Receiver.Protocols.HTTP.Endpoint, defaultOTLPHTTPEndpoint)

	// RemoteConfiguration feature
	if ddaSpec.Features.RemoteConfiguration == nil {
		ddaSpec.Features.RemoteConfiguration = &v2alpha1.RemoteConfigurationFeatureConfig{}
	}
	apiutils.DefaultBooleanIfUnset(&ddaSpec.Features.RemoteConfiguration.Enabled, defaultRemoteConfigurationEnabled)

	// Cluster-level features

	// EventCollection Feature
	if ddaSpec.Features.EventCollection == nil {
		ddaSpec.Features.EventCollection = &v2alpha1.EventCollectionFeatureConfig{}
	}
	apiutils.DefaultBooleanIfUnset(&ddaSpec.Features.EventCollection.CollectKubernetesEvents, defaultCollectKubernetesEvents)
	if apiutils.BoolValue(ddaSpec.Features.EventCollection.UnbundleEvents) && ddaSpec.Features.EventCollection.CollectedEventTypes == nil {
		ddaSpec.Features.EventCollection.CollectedEventTypes = []v2alpha1.EventTypes{
			{
				Kind:    "Pod",
				Reasons: []string{"Failed", "BackOff", "Unhealthy", "FailedScheduling", "FailedMount", "FailedAttachVolume"},
			},
			{
				Kind:    "Node",
				Reasons: []string{"TerminatingEvictedPod", "NodeNotReady", "Rebooted", "HostPortConflict"},
			},
			{
				Kind:    "CronJob",
				Reasons: []string{"SawCompletedJob"},
			},
		}
	}

	// OrchestratorExplorer check Feature
	if ddaSpec.Features.OrchestratorExplorer == nil {
		ddaSpec.Features.OrchestratorExplorer = &v2alpha1.OrchestratorExplorerFeatureConfig{}
	}
	apiutils.DefaultBooleanIfUnset(&ddaSpec.Features.OrchestratorExplorer.Enabled, defaultOrchestratorExplorerEnabled)

	if *ddaSpec.Features.OrchestratorExplorer.Enabled {
		apiutils.DefaultBooleanIfUnset(&ddaSpec.Features.OrchestratorExplorer.ScrubContainers, defaultOrchestratorExplorerScrubContainers)
	}

	// KubeStateMetricsCore check Feature
	if ddaSpec.Features.KubeStateMetricsCore == nil {
		ddaSpec.Features.KubeStateMetricsCore = &v2alpha1.KubeStateMetricsCoreFeatureConfig{}
	}
	apiutils.DefaultBooleanIfUnset(&ddaSpec.Features.KubeStateMetricsCore.Enabled, defaultKubeStateMetricsCoreEnabled)

	// AdmissionController Feature
	if ddaSpec.Features.AdmissionController == nil {
		ddaSpec.Features.AdmissionController = &v2alpha1.AdmissionControllerFeatureConfig{}
	}
	apiutils.DefaultBooleanIfUnset(&ddaSpec.Features.AdmissionController.Enabled, defaultAdmissionControllerEnabled)

	if *ddaSpec.Features.AdmissionController.Enabled {
		apiutils.DefaultBooleanIfUnset(&ddaSpec.Features.AdmissionController.Enabled, defaultAdmissionControllerEnabled)
		apiutils.DefaultBooleanIfUnset(&ddaSpec.Features.AdmissionController.MutateUnlabelled, defaultAdmissionControllerMutateUnlabelled)
		apiutils.DefaultStringIfUnset(&ddaSpec.Features.AdmissionController.ServiceName, defaultAdmissionServiceName)
	}

	// AdmissionControllerValidation Feature
	if ddaSpec.Features.AdmissionController.Validation == nil {
		ddaSpec.Features.AdmissionController.Validation = &v2alpha1.AdmissionControllerValidationConfig{}
	}
	apiutils.DefaultBooleanIfUnset(&ddaSpec.Features.AdmissionController.Validation.Enabled, defaultAdmissionControllerValidationEnabled)

	// AdmissionControllerMutation Feature
	if ddaSpec.Features.AdmissionController.Mutation == nil {
		ddaSpec.Features.AdmissionController.Mutation = &v2alpha1.AdmissionControllerMutationConfig{}
	}
	apiutils.DefaultBooleanIfUnset(&ddaSpec.Features.AdmissionController.Mutation.Enabled, defaultAdmissionControllerMutationEnabled)

	agentSidecarInjection := ddaSpec.Features.AdmissionController.AgentSidecarInjection
	if agentSidecarInjection != nil && agentSidecarInjection.Enabled != nil && *agentSidecarInjection.Enabled {
		apiutils.DefaultBooleanIfUnset(&agentSidecarInjection.ClusterAgentCommunicationEnabled, defaultAdmissionControllerAgentSidecarClusterAgentEnabled)
	}

	// K8s Admission Events in AdmissonController Feature
	if ddaSpec.Features.AdmissionController.KubernetesAdmissionEvents == nil {
		ddaSpec.Features.AdmissionController.KubernetesAdmissionEvents = &v2alpha1.KubernetesAdmissionEventsConfig{}
	}
	apiutils.DefaultBooleanIfUnset(&ddaSpec.Features.AdmissionController.KubernetesAdmissionEvents.Enabled, defaultAdmissionControllerKubernetesAdmissionEventsEnabled)

	// CWS Instrumentation in AdmissionController Feature
	if ddaSpec.Features.AdmissionController.CWSInstrumentation == nil {
		ddaSpec.Features.AdmissionController.CWSInstrumentation = &v2alpha1.CWSInstrumentationConfig{}
	}
	apiutils.DefaultBooleanIfUnset(&ddaSpec.Features.AdmissionController.CWSInstrumentation.Enabled, DefaultAdmissionControllerCWSInstrumentationEnabled)

	if *ddaSpec.Features.AdmissionController.CWSInstrumentation.Enabled {
		apiutils.DefaultStringIfUnset(&ddaSpec.Features.AdmissionController.CWSInstrumentation.Mode, DefaultAdmissionControllerCWSInstrumentationMode)
	}

	// ExternalMetricsServer Feature
	if ddaSpec.Features.ExternalMetricsServer == nil {
		ddaSpec.Features.ExternalMetricsServer = &v2alpha1.ExternalMetricsServerFeatureConfig{}
	}
	apiutils.DefaultBooleanIfUnset(&ddaSpec.Features.ExternalMetricsServer.Enabled, defaultExternalMetricsServerEnabled)

	if *ddaSpec.Features.ExternalMetricsServer.Enabled {
		apiutils.DefaultBooleanIfUnset(&ddaSpec.Features.ExternalMetricsServer.UseDatadogMetrics, defaultDatadogMetricsEnabled)
		apiutils.DefaultBooleanIfUnset(&ddaSpec.Features.ExternalMetricsServer.RegisterAPIService, defaultRegisterAPIService)
		apiutils.DefaultInt32IfUnset(&ddaSpec.Features.ExternalMetricsServer.Port, defaultMetricsProviderPort)
	}

	// ClusterChecks Feature
	if ddaSpec.Features.ClusterChecks == nil {
		ddaSpec.Features.ClusterChecks = &v2alpha1.ClusterChecksFeatureConfig{}
	}
	apiutils.DefaultBooleanIfUnset(&ddaSpec.Features.ClusterChecks.Enabled, defaultClusterChecksEnabled)

	if *ddaSpec.Features.ClusterChecks.Enabled {
		apiutils.DefaultBooleanIfUnset(&ddaSpec.Features.ClusterChecks.UseClusterChecksRunners, defaultUseClusterChecksRunners)
	}

	// PrometheusScrape Feature
	if ddaSpec.Features.PrometheusScrape == nil {
		ddaSpec.Features.PrometheusScrape = &v2alpha1.PrometheusScrapeFeatureConfig{}
	}
	apiutils.DefaultBooleanIfUnset(&ddaSpec.Features.PrometheusScrape.Enabled, defaultPrometheusScrapeEnabled)

	if *ddaSpec.Features.PrometheusScrape.Enabled {
		apiutils.DefaultBooleanIfUnset(&ddaSpec.Features.PrometheusScrape.EnableServiceEndpoints, defaultPrometheusScrapeEnableServiceEndpoints)
		apiutils.DefaultIntIfUnset(&ddaSpec.Features.PrometheusScrape.Version, defaultPrometheusScrapeVersion)
	}

	// Helm Check Feature
	if ddaSpec.Features.HelmCheck == nil {
		ddaSpec.Features.HelmCheck = &v2alpha1.HelmCheckFeatureConfig{}
	}
	apiutils.DefaultBooleanIfUnset(&ddaSpec.Features.HelmCheck.Enabled, defaultHelmCheckEnabled)

	if *ddaSpec.Features.HelmCheck.Enabled {
		apiutils.DefaultBooleanIfUnset(&ddaSpec.Features.HelmCheck.CollectEvents, defaultHelmCheckCollectEvents)
	}

	// ControlPlaneMonitoring Feature
	if ddaSpec.Features.ControlPlaneMonitoring == nil {
		ddaSpec.Features.ControlPlaneMonitoring = &v2alpha1.ControlPlaneMonitoringFeatureConfig{}
	}
	apiutils.DefaultBooleanIfUnset(&ddaSpec.Features.ControlPlaneMonitoring.Enabled, defaultControlPlaneMonitoringEnabled)

	// DataPlane Feature
	// Note: We intentionally do NOT default DataPlane.Enabled to allow the annotation fallback
	// to work when the user hasn't explicitly configured Data Plane via the CRD.
	// See IsDataPlaneEnabled() in feature/utils/utils.go for the precedence logic.
	if ddaSpec.Features.DataPlane == nil {
		ddaSpec.Features.DataPlane = &v2alpha1.DataPlaneFeatureConfig{}
	}

	if ddaSpec.Features.DataPlane.Dogstatsd == nil {
		ddaSpec.Features.DataPlane.Dogstatsd = &v2alpha1.DataPlaneDogstatsdConfig{}
	}
	apiutils.DefaultBooleanIfUnset(&ddaSpec.Features.DataPlane.Dogstatsd.Enabled, defaultDataPlaneDogstatsdEnabled)
}