[CONTP-1965] feat(ddi): Expand supported log configurations in DDI

[Mathew-Estafanous]

What does this PR do?

Expands DatadogInstrumentation log configuration with additional Agent-supported options for TCP/UDP listeners, syslog parsing, automatic multiline detection, file fingerprinting, and maximum message size.

Intentionally omitted configurations

Configuration	Reason
tls	Active security review
config_id, include_user_units, exclude_user_units, include_matches, exclude_matches, container_mode, default_application_name	Node-scoped journald
query	Node-scoped Windows
process_raw_message	Structured node tailers
debug_attr_parsing	Diagnostic-only
auto_multi_line_sample_size, auto_multi_line_match_threshold	Legacy-only
auto_multi_line.timestamp_detector_match_threshold, auto_multi_line.pattern_table_match_threshold, custom sample match_threshold	Avoid float CRD fields
experimental_adaptive_sampling, experimental_noisy_log_detection	Experimental features
channel, channel_tags, channel_tags_mutex	Runtime channel state

Motivation

spec.config.logs currently supports only a subset of Agent log configuration, preventing some Autodiscovery annotations from being migrated to DDI without losing behavior. This closes the practical workload-scoped parity gaps tracked in CONTP-1965.

Minimum Agent Versions

Are there minimum versions of the Datadog Agent and/or Cluster Agent required?

• Agent: vX.Y.Z
• Cluster Agent: vX.Y.Z

Describe your test plan

Example CR using all the new fields.

apiVersion: datadoghq.com/v1alpha1
kind: DatadogInstrumentation
metadata:
  name: fake-logs-normal
spec:
  targetRef:
    apiVersion: apps/v1
    kind: Deployment
    name: fake-app
  config:
    logs:
      - containerName: fake-app
        type: file
        path: /var/log/fake-app/*.log
        source: fake-app
        service: fake-app
        auto_multi_line_detection: true
        auto_multi_line_detection_custom_samples:
          - sample: "2026-08-06 ERROR request failed"
          - regex: "^panic:"
            label: start_group
        auto_multi_line:
          enable_json_detection: true
          enable_datetime_detection: true
          tokenizer_max_input_bytes: 256
          pattern_table_max_size: 128
          enable_json_aggregation: true
          tag_aggregated_json: true
          stack_trace_parsers:
            - go
        fingerprint_config:
          fingerprint_strategy: line_checksum
          count: 10
          count_to_skip: 0
          max_bytes: 4096
        max_message_size_bytes: 1000000

Checklist

• PR has at least one valid label: bug, enhancement, refactoring, documentation, tooling, and/or dependencies
• PR has a milestone or the qa/skip-qa label
• All commits are signed (see: signing commits)

[linear-code]

CONTP-96

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: b00ea32fb0

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

[zhuminyi]

/dd-review codex