[FF] duo_agent_platform_executor_binary -- Roll out binary installation for duo-cli

Everyone can contribute. Help move this issue forward while earning points, leveling up and collecting rewards.

Summary

This issue is to roll out the feature on production, that is currently behind the duo_agent_platform_executor_binary feature flag.

Owners

  • Most appropriate Slack channel to reach out to: #g_agent_foundations
  • Best individual to reach out to: @achueshev

Expectations

What are we expecting to happen?

When enabled, duo-cli is downloaded as a pre-compiled binary directly from the GitLab Package Registry using curl, eliminating the Node.js/npm dependency in CI workloads for Duo Workflows.

What can go wrong and how would we detect it?

  • Binary download could fail if the Package Registry is unavailable or the binary for the runner OS/architecture is missing.
  • Monitor pipeline failure rates for Duo Workflow CI jobs.

Rollout Steps

Rollout on non-production environments

  • Deploy the feature flag at a percentage with /chatops gitlab run feature set duo_agent_platform_executor_binary 50 --actors --dev --pre --staging --staging-ref
  • Monitor that the error rates did not increase.
  • Enable the feature globally on non-production environments with /chatops gitlab run feature set duo_agent_platform_executor_binary true --dev --pre --staging --staging-ref
  • Verify that the feature works as expected.

Specific rollout on production

  • For project-actor: /chatops gitlab run feature set --project=gitlab-org/gitlab duo_agent_platform_executor_binary true
  • Verify that the feature works for the specific actors.

Global rollout on production

  • Incrementally roll out the feature on production.
  • After the feature has been 100% enabled, wait for at least one day before releasing the feature.

Release the feature

  • Create a merge request to remove the duo_agent_platform_executor_binary feature flag.
  • Close the feature issue to indicate the feature will be released in the current milestone.
  • Clean up the feature flag from all environments.
  • Close this rollout issue.

Rollback Steps

/chatops gitlab run feature set duo_agent_platform_executor_binary false

Edited by Alexander Chueshev