Skip to content

Add Data Observability network requirements (intake domains and IP ranges)#38073

Draft
kevinzenghu wants to merge 1 commit into
masterfrom
kevinzenghu/do-network-requirements
Draft

Add Data Observability network requirements (intake domains and IP ranges)#38073
kevinzenghu wants to merge 1 commit into
masterfrom
kevinzenghu/do-network-requirements

Conversation

@kevinzenghu

Copy link
Copy Markdown
Contributor

What does this PR do? What is the motivation?

Data Observability intake endpoints and IP ranges are not documented on the Agent Network Traffic page or elsewhere, which comes up repeatedly in customer security reviews and RFIs. This PR documents the connectivity model.

Changes:

  • New page content/en/data_observability/network.md describing the three connectivity paths:
    • Quality Monitoring and warehouse-based lineage: agentless pull, allowlist the webhooks IP ranges on the warehouse.
    • Lineage and Jobs Monitoring from OpenLineage emitters (Airflow, dbt, custom): push to data-obs-intake.<site> /api/v1/lineage.
    • Spark on classic compute (Databricks, EMR, Dataproc, Kubernetes): Datadog Agent using the standard Agent endpoints, plus the Databricks API path using webhooks IP ranges; serverless Spark is API-only.
  • Adds a Data Observability entry to the Agent network destinations list.
  • Adds a further reading link from the Data Observability overview.

Merge instructions

Merge readiness:

  • Ready for merge

Draft pending SME review. Please confirm the open items below before merging.

Additional notes

Open questions for the Data Observability / intake owners to confirm:

  1. Whether data-obs-intake.<site> has a published static IP set (an ip-ranges entry), or whether domain-based allowlisting is the only supported option for the push path.
  2. The webhooks vs api IP-range requirement for the Databricks API path: webhooks is required; the api ranges appear needed only when adding workspaces through the Datadog UI. This PR reflects that, but it should be confirmed.
  3. Per-site availability of the data-obs-intake endpoint.

No Jira ticket attached yet; add the [DOCS-XXXXX] key to the title before merge.

Documents the connectivity model for Data Observability: the data-obs-intake
push endpoint for OpenLineage lineage and Jobs Monitoring, and the webhooks/API
IP ranges used by agentless Quality Monitoring and the Databricks API path.
Adds a Data Observability entry to the Agent network destinations page and a
further reading link from the Data Observability overview.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
@github-actions

github-actions Bot commented Jul 9, 2026

Copy link
Copy Markdown
Contributor

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant