Add SpiceDB community integration

.codecov.yml

@@ -195,6 +195,10 @@ coverage:
         target: 75
         flags:
         - sortdb
+      SpiceDB:
+        target: 75
+        flags:
+        - spicedb
       Stardog:
         target: 70
         flags:
@@ -613,6 +617,11 @@ flags:
     paths:
     - speedtest/datadog_checks/speedtest
     - speedtest/tests
+  spicedb:
+    carryforward: true
+    paths:
+    - spicedb/datadog_checks/spicedb
+    - spicedb/tests
   stardog:
     carryforward: true
     paths:

.github/CODEOWNERS

@@ -1147,6 +1147,8 @@
 
 /oceanbasecloud/                             @kyle-oceanbase [email protected] @DataDog/ecosystems-review
 
+/spicedb/ @tstirrat15 @DataDog/ecosystems-review
+
 # LEAVE THE FOLLOWING LOG OWNERSHIP LAST IN THE FILE
 # Make sure logs team is the full owner for all logs related files
 **/assets/logs/                          @DataDog/logs-backend

.github/workflows/test-all.yml

@@ -1227,6 +1227,25 @@ jobs:
       test-py3: ${{ inputs.test-py3 }}
       setup-env-vars: "${{ inputs.setup-env-vars }}"
     secrets: inherit
+  jc9d4106:
+    uses: DataDog/integrations-core/.github/workflows/test-target.yml@master
+    with:
+      job-name: SpiceDB
+      target: spicedb
+      platform: linux
+      runner: '["ubuntu-22.04"]'
+      repo: "${{ inputs.repo }}"
+      python-version: "${{ inputs.python-version }}"
+      standard: ${{ inputs.standard }}
+      latest: ${{ inputs.latest }}
+      agent-image: "${{ inputs.agent-image }}"
+      agent-image-py2: "${{ inputs.agent-image-py2 }}"
+      agent-image-windows: "${{ inputs.agent-image-windows }}"
+      agent-image-windows-py2: "${{ inputs.agent-image-windows-py2 }}"
+      test-py2: ${{ inputs.test-py2 }}
+      test-py3: ${{ inputs.test-py3 }}
+      setup-env-vars: "${{ inputs.setup-env-vars }}"
+    secrets: inherit
   je0445d5:
     uses: DataDog/integrations-core/.github/workflows/test-target.yml@master
     with:

spicedb/CHANGELOG.md

@@ -0,0 +1,8 @@
+# CHANGELOG - SpiceDB
+
+## 1.0.0 / YYYY-MM-DD
+
+***Added***:
+
+* Initial Release
+

spicedb/README.md

@@ -0,0 +1,77 @@
+# Agent Check: SpiceDB
+
+## Overview
+
+[SpiceDB][1]is an open source, [Google Zanzibar][zanzibar]-inspired database system for creating and managing security-critical application permissions.
+
+Developers create a schema that models their permissions requirements. Then, they use any of the official or community maintained client libraries to apply the schema to the database and insert data into the database. They can query the data to efficiently check permissions in their applications.
+
+SpiceDB metrics allow developers and SREs to monitor their SpiceDB deployments, including request latency metrics, cache metrics such as size and hit/miss metrics, and datastore connection and query metrics. These metrics allow developers and SREs to diagnose performance problems and tune performance characteristics of their SpiceDB clusters.
+
+## Setup
+
+### Installation
+
+#### Host-level installation
+To install the SpiceDB check on your host:
+
+1. Download and install the [Datadog Agent][2].
+1. Install the SpiceDB integration on the Agent on the host where it's running.
+   ```shell
+   datadog-agent integration install -t datadog-spicedb==<INTEGRATION_VERSION>
+   ```
+
+#### With the Agent sidecar container
+1. Build a custom image with the Agent installed:
+    ```dockerfile
+    FROM gcr.io/datadoghq/agent:latest
+    RUN agent integration install -t datadog-spicedb==<INTEGRATION_VERSION>
+    # Optionally include the configuration in the image
+    COPY spicedb.yaml /conf.d/spicedb.d/conf.yaml
+    ```
+1. Deploy that image as a sidecar (or whatever makes sense for your topology).
+
+### Configuration
+
+A full list of configuration options are available in the [example configuration][example-conf].
+This integration wraps the Datadog Openmetrics configuration, so the [openmetrics documentation][openmentrics-docs]
+may be helpful as well.
+
+### Validation
+
+[Run the Agent's status subcommand][6] and look for `spicedb` under the Checks section.
+
+## Data Collected
+
+### Metrics
+
+The integration collects metrics through the [SpiceDB prometheus endpoint][spicedb-prometheus].
+
+For a full list of metrics this integration provides, see the [metadata.csv][metadata.csv] file.
+
+### Service Checks
+
+Service check `spicedb.openmetrics.health` is submitted in the base check.
+
+### Events
+
+SpiceDB does not include any events.
+
+## Troubleshooting
+
+Need help? Contact [Datadog support][3].
+
+[1]: https://authzed.com/spicedb
+[2]: https://app.datadoghq.com/account/settings/agent/latest
+[3]: https://docs.datadoghq.com/agent/kubernetes/integrations/
+[4]: https://github.com/DataDog/integrations-extras/blob/master/spicedb/datadog_checks/spicedb/data/conf.yaml.example
+[5]: https://docs.datadoghq.com/agent/guide/agent-commands/#start-stop-and-restart-the-agent
+[6]: https://docs.datadoghq.com/agent/guide/agent-commands/#agent-status-and-information
+[7]: https://github.com/DataDog/integrations-extras/blob/master/spicedb/metadata.csv
+[8]: https://github.com/DataDog/integrations-extras/blob/master/spicedb/assets/service_checks.json
+[9]: https://docs.datadoghq.com/help/
+[zanzibar]: https://authzed.com/zanzibar
+[metadata.csv]: https://github.com/DataDog/integrations-extras/blob/master/spicedb/metadata.csv
+[example-conf]: https://github.com/DataDog/integrations-extras/blob/master/spicedb/datadog_checks/spicedb/data/conf.yaml.example
+[spicedb-prometheus]: https://authzed.com/docs/spicedb/ops/observability#prometheus
+[openmetrics-docs]: https://docs.datadoghq.com/integrations/openmetrics/

spicedb/assets/configuration/spec.yaml

@@ -0,0 +1,22 @@
+---
+name: "SpiceDB"
+files:
+  - name: "spicedb.yaml"
+    options:
+      - template: "init_config"
+        options:
+          - template: "init_config/openmetrics"
+      - template: "instances"
+        options:
+          - template: "instances/openmetrics"
+            overrides:
+              openmetrics_endpoint.required: false
+              openmetrics_endpoint.value.example: "http://localhost:9090/metrics"
+              # This is required to make pXX graphs in the default dashboard.
+              histogram_buckets_as_distributions.value.example: true
+              tags.value.example:
+                - "node:<NODE>"
+                - "cluster:<CLUSTER>"
+                - "region:<REGION>"
+                - "<KEY_1>:<VALUE_1>"
+                - "<KEY_2>:<VALUE_2>"