feat(config): add infrastructure mode overrides for EUDM (#43059)

### What does this PR do?
Adds a new configuration override for **End User Device Mode (EUDM)** in the Agent setup.  
When the infrastructure mode is set to `end_user_device`, the following features are automatically enabled by default:
- **Live Processes**
- **Software Inventory**
- **Notable Events**

### Motivation
EUDM requires key observability features to be active by default to provide complete visibility into end-user devices.  
This change ensures a consistent configuration experience without additional manual setup.

#### How did you validate this change?
- Verified that setting `infrastructure_mode: end_user_device` enables the expected runtime configurations:
  - `process_config.process_collection.enabled = true`
  - `software_inventory.enabled = true`
  - `notable_events.enabled = true`
- Confirmed that other infrastructure modes (`full`, `basic`) remain unaffected.

#### Additional Notes
- Default behavior for existing modes is unchanged.
- This addition ensures feature parity and ease of use for EUDM environments.

Co-authored-by: louis.coquerelle <[email protected]>

Author: louis-cqrl

comp/core/settings/settingsimpl/settingsimpl_test.go

@@ -311,7 +311,7 @@ func TestRuntimeSettings(t *testing.T) {
 				// simply compare strings.
 				expected := map[string]interface{}{}
 				actual := map[string]interface{}{}
-				json.Unmarshal([]byte("{\"value\":{\"Value\":\"\",\"Source\":\"\"},\"sources_value\":[{\"Source\":\"default\",\"Value\":null},{\"Source\":\"unknown\",\"Value\":null},{\"Source\":\"file\",\"Value\":null},{\"Source\":\"environment-variable\",\"Value\":null},{\"Source\":\"fleet-policies\",\"Value\":null},{\"Source\":\"agent-runtime\",\"Value\":null},{\"Source\":\"local-config-process\",\"Value\":null},{\"Source\":\"remote-config\",\"Value\":null},{\"Source\":\"cli\",\"Value\":null}]}"), &expected)
+				json.Unmarshal([]byte("{\"value\":{\"Value\":\"\",\"Source\":\"\"},\"sources_value\":[{\"Source\":\"default\",\"Value\":null},{\"Source\":\"unknown\",\"Value\":null},{\"Source\":\"infra-mode\",\"Value\":null},{\"Source\":\"file\",\"Value\":null},{\"Source\":\"environment-variable\",\"Value\":null},{\"Source\":\"fleet-policies\",\"Value\":null},{\"Source\":\"agent-runtime\",\"Value\":null},{\"Source\":\"local-config-process\",\"Value\":null},{\"Source\":\"remote-config\",\"Value\":null},{\"Source\":\"cli\",\"Value\":null}]}"), &expected)
 				err = json.Unmarshal(body, &actual)
 
 				require.NoError(t, err, fmt.Sprintf("error loading JSON body: %s", err))

pkg/config/model/types.go

@@ -33,6 +33,9 @@ const (
 	// SourceUnknown are the values from unknown source. This should only be used in tests when calling
 	// SetWithoutSource.
 	SourceUnknown Source = "unknown"
+	// SourceInfraMode are the values set by infrastructure mode configurations. These values have higher
+	// priority than defaults but lower priority than user configuration (file, env vars, etc.).
+	SourceInfraMode Source = "infra-mode"
 	// SourceFile are the values loaded from configuration file.
 	SourceFile Source = "file"
 	// SourceEnvVar are the values loaded from the environment variables.
@@ -58,6 +61,7 @@ const (
 var Sources = []Source{
 	SourceDefault,
 	SourceUnknown,
+	SourceInfraMode,
 	SourceFile,
 	SourceEnvVar,
 	SourceFleetPolicies,
@@ -73,13 +77,14 @@ var sourcesPriority = map[Source]int{
 	SourceSchema:             -1,
 	SourceDefault:            0,
 	SourceUnknown:            1,
-	SourceFile:               2,
-	SourceEnvVar:             3,
-	SourceFleetPolicies:      4,
-	SourceAgentRuntime:       5,
-	SourceLocalConfigProcess: 6,
-	SourceRC:                 7,
-	SourceCLI:                8,
+	SourceInfraMode:          2,
+	SourceFile:               3,
+	SourceEnvVar:             4,
+	SourceFleetPolicies:      5,
+	SourceAgentRuntime:       6,
+	SourceLocalConfigProcess: 7,
+	SourceRC:                 8,
+	SourceCLI:                9,
 }
 
 // ValueWithSource is a tuple for a source and a value, not necessarily the applied value in the main config

pkg/config/nodetreemodel/config.go

@@ -30,6 +30,7 @@ import (
 var sources = []model.Source{
 	model.SourceDefault,
 	model.SourceUnknown,
+	model.SourceInfraMode,
 	model.SourceFile,
 	model.SourceEnvVar,
 	model.SourceFleetPolicies,
@@ -82,6 +83,8 @@ type ntmConfig struct {
 	defaults *nodeImpl
 	// unknown contains the settings set at runtime from unknown source. This should only evey be used by tests.
 	unknown *nodeImpl
+	// infraMode contains the settings set by infrastructure mode configurations
+	infraMode *nodeImpl
 	// file contains the settings pulled from YAML files
 	file *nodeImpl
 	// envs contains config settings created by environment variables
@@ -167,6 +170,8 @@ func (c *ntmConfig) getTreeBySource(source model.Source) (*nodeImpl, error) {
 		return c.defaults, nil
 	case model.SourceUnknown:
 		return c.unknown, nil
+	case model.SourceInfraMode:
+		return c.infraMode, nil
 	case model.SourceFile:
 		return c.file, nil
 	case model.SourceEnvVar:
@@ -935,6 +940,7 @@ func (c *ntmConfig) AllSettingsBySource() map[model.Source]interface{} {
 	return map[model.Source]interface{}{
 		model.SourceDefault:            c.defaults.DumpSettings(func(model.Source) bool { return true }),
 		model.SourceUnknown:            c.unknown.DumpSettings(func(model.Source) bool { return true }),
+		model.SourceInfraMode:          c.infraMode.DumpSettings(func(model.Source) bool { return true }),
 		model.SourceFile:               c.file.DumpSettings(func(model.Source) bool { return true }),
 		model.SourceEnvVar:             c.envs.DumpSettings(func(model.Source) bool { return true }),
 		model.SourceFleetPolicies:      c.fleetPolicies.DumpSettings(func(model.Source) bool { return true }),
@@ -1075,6 +1081,7 @@ func NewNodeTreeConfig(name string, envPrefix string, envKeyReplacer *strings.Re
 		defaults:           newInnerNode(nil),
 		file:               newInnerNode(nil),
 		unknown:            newInnerNode(nil),
+		infraMode:          newInnerNode(nil),
 		envs:               newInnerNode(nil),
 		runtime:            newInnerNode(nil),
 		localConfigProcess: newInnerNode(nil),

pkg/config/nodetreemodel/config_test.go

@@ -333,7 +333,8 @@ func TestAllSettingsBySource(t *testing.T) {
 			},
 			"x": 123,
 		},
-		model.SourceUnknown: map[string]interface{}{},
+		model.SourceUnknown:   map[string]interface{}{},
+		model.SourceInfraMode: map[string]interface{}{},
 		model.SourceFile: map[string]interface{}{
 			"a": 987,
 		},

pkg/config/nodetreemodel/getter_test.go

@@ -306,32 +306,34 @@ func TestGetFloat64SliceStringFromEnv(t *testing.T) {
 }
 
 func TestGetAllSources(t *testing.T) {
-	t.Setenv("TEST_A", "3")
+	t.Setenv("TEST_A", "4")
 
 	cfg := NewNodeTreeConfig("test", "TEST", nil)
 	cfg.BindEnvAndSetDefault("a", 0)
 	cfg.BuildSchema()
 
 	cfg.Set("a", 1, model.SourceUnknown)
-	cfg.Set("a", 2, model.SourceFile)
-	cfg.Set("a", 4, model.SourceFleetPolicies)
-	cfg.Set("a", 5, model.SourceAgentRuntime)
-	cfg.Set("a", 6, model.SourceLocalConfigProcess)
-	cfg.Set("a", 7, model.SourceRC)
-	cfg.Set("a", 8, model.SourceCLI)
+	cfg.Set("a", 2, model.SourceInfraMode)
+	cfg.Set("a", 3, model.SourceFile)
+	cfg.Set("a", 5, model.SourceFleetPolicies)
+	cfg.Set("a", 6, model.SourceAgentRuntime)
+	cfg.Set("a", 7, model.SourceLocalConfigProcess)
+	cfg.Set("a", 8, model.SourceRC)
+	cfg.Set("a", 9, model.SourceCLI)
 
 	res := cfg.GetAllSources("a")
 	assert.Equal(t,
 		[]model.ValueWithSource{
 			{Source: model.SourceDefault, Value: 0},
 			{Source: model.SourceUnknown, Value: 1},
-			{Source: model.SourceFile, Value: 2},
-			{Source: model.SourceEnvVar, Value: "3"},
-			{Source: model.SourceFleetPolicies, Value: 4},
-			{Source: model.SourceAgentRuntime, Value: 5},
-			{Source: model.SourceLocalConfigProcess, Value: 6},
-			{Source: model.SourceRC, Value: 7},
-			{Source: model.SourceCLI, Value: 8},
+			{Source: model.SourceInfraMode, Value: 2},
+			{Source: model.SourceFile, Value: 3},
+			{Source: model.SourceEnvVar, Value: "4"},
+			{Source: model.SourceFleetPolicies, Value: 5},
+			{Source: model.SourceAgentRuntime, Value: 6},
+			{Source: model.SourceLocalConfigProcess, Value: 7},
+			{Source: model.SourceRC, Value: 8},
+			{Source: model.SourceCLI, Value: 9},
 		},
 		res,
 	)

pkg/config/setup/config.go

@@ -1317,7 +1317,7 @@ func agent(config pkgconfigmodel.Setup) {
 
 	// Infrastructure mode
 	// The infrastructure mode is used to determine the features that are available to the agent.
-	// The possible values are: full, basic.
+	// The possible values are: full, basic, end_user_device.
 	config.BindEnvAndSetDefault("infrastructure_mode", "full")
 
 	// Infrastructure basic mode - allowed checks (UNDOCUMENTED)
@@ -1392,6 +1392,7 @@ func agent(config pkgconfigmodel.Setup) {
 	bindEnvAndSetLogsConfigKeys(config, "event_management.forwarder.")
 
 	pkgconfigmodel.AddOverrideFunc(toggleDefaultPayloads)
+	pkgconfigmodel.AddOverrideFunc(applyInfrastructureModeOverrides)
 }
 
 func fleet(config pkgconfigmodel.Setup) {
@@ -2767,6 +2768,17 @@ func toggleDefaultPayloads(config pkgconfigmodel.Config) {
 	}
 }
 
+func applyInfrastructureModeOverrides(config pkgconfigmodel.Config) {
+	infraMode := config.GetString("infrastructure_mode")
+
+	if infraMode == "end_user_device" {
+		// Enable features for end_user_device mode
+		config.Set("process_config.process_collection.enabled", true, pkgconfigmodel.SourceInfraMode)
+		config.Set("software_inventory.enabled", true, pkgconfigmodel.SourceInfraMode)
+		config.Set("notable_events.enabled", true, pkgconfigmodel.SourceInfraMode)
+	}
+}
+
 func bindEnvAndSetLogsConfigKeys(config pkgconfigmodel.Setup, prefix string) {
 	config.BindEnv(prefix + "logs_dd_url")          //nolint:forbidigo // TODO: replace by 'SetDefaultAndBindEnv' // Send the logs to a proxy. Must respect format '<HOST>:<PORT>' and '<PORT>' to be an integer
 	config.BindEnv(prefix + "dd_url")               //nolint:forbidigo // TODO: replace by 'SetDefaultAndBindEnv'

releasenotes/notes/Add-eudm-config-logic-e464e4a97cf80320.yaml

@@ -0,0 +1,15 @@
+# Each section from every release note are combined when the
+# CHANGELOG.rst is rendered. So the text needs to be worded so that
+# it does not depend on any information only available in another
+# section. This may mean repeating some details, but each section
+# must be readable independently of the other.
+#
+# Each section note must be formatted as reStructuredText.
+---
+features:
+  - |
+    Added support for ``infrastructure_mode: end_user_device`` configuration option.
+    When enabled, this mode automatically activates key monitoring features tailored for 
+    end-user devices including process collection, software inventory tracking, and 
+    notable events monitoring. These settings can still be individually overridden in 
+    the configuration file if needed.