grafana/scripts/grafana-server/custom.ini

[security]
content_security_policy = true
content_security_policy_template = """require-trusted-types-for 'script'; script-src 'self' 'unsafe-eval' 'unsafe-inline' 'strict-dynamic' $NONCE;object-src 'none';font-src 'self';style-src 'self' 'unsafe-inline' blob:;img-src * data:;base-uri 'self';connect-src 'self' grafana.com ws://$ROOT_PATH wss://$ROOT_PATH;manifest-src 'self';media-src 'none';form-action 'self';"""

[feature_toggles]
enable = publicDashboards

[database]
type=sqlite3
wal=true
max_idle_conn = 2
max_open_conn = 2
Feature: Trusted Types support (#64975) * Draft: Feature: Trusted Types support * remove trusted-types package * Create policy before jQuery and Angular is loaded and add feature flag * Add trustedTypePolicies * Sanitize scriptURL * Add TT meta tag for test env * Move trusted types into core * Add DOMParser support for TrustedHTML * Seperate RSS sanitization and add better TrustedHTML support * Get test CSP header from config * Remove dompurify dep from core * Add documentation for trusted types * Apply suggestions from code review Co-authored-by: Kristian Bremberg <114284895+KristianGrafana@users.noreply.github.com> * Add comment about Github discussion thread and things breaking * Remove changes from News panel * Remove TT feature toggle * Expose TT and CSPReportOnly to frontend * Log errors in console when CSP report only is enabled * Log error for reporting and remove test mode * Only insert CSP header in HTML for dev env * Update docs --------- Co-authored-by: Tobias Skarhed <tobias.skarhed@gmail.com> Co-authored-by: Tobias Skarhed <1438972+tskarhed@users.noreply.github.com> 2023-04-27 11:20:37 -05:00			`[security]`
			`content_security_policy = true`
			`content_security_policy_template = """require-trusted-types-for 'script'; script-src 'self' 'unsafe-eval' 'unsafe-inline' 'strict-dynamic' $NONCE;object-src 'none';font-src 'self';style-src 'self' 'unsafe-inline' blob:;img-src * data:;base-uri 'self';connect-src 'self' grafana.com ws://$ROOT_PATH wss://$ROOT_PATH;manifest-src 'self';media-src 'none';form-action 'self';"""`

Live: performance tests e2e part (#43915) * #41993: live perf tests e2e part * #41993: added bash upgrade instructions * #41993: remove custom feature toggle * #41993: fix typo in 'integrationFolder' 2022-01-12 12:15:29 -06:00			`[feature_toggles]`
Public Dashboards: add e2e tests for public dashboards (#52970) 2022-08-01 09:20:49 -05:00			`enable = publicDashboards`
Database: Adds support for enable/disable SQLite Write-Ahead Logging (WAL) via configuration (#58268) Adds support for enable/disable SQLite Write-Ahead Logging (WAL) via configuration. Enables SQLite WAL for E2E tests. 2022-11-16 12:29:33 -06:00
			`[database]`
			`type=sqlite3`
			`wal=true`
Chore: Reduce flakiness of e2e tests caused by write contention in sqlite (#76659) Reduce flakiness of e2e tests caused by write contention in sqlite Write contention in sqlite on startup intermittently causes failed tests because of failed service runs. This can have various root causes, one example is dashboard provisioning: Dashboard provisioning's frequent commits can cause other read transaction snapshots to invalidate and throw SQLITE_BUSY/SQLITE_BUSY_SNAPSHOT. If those failing transactions have a long length but not long enough to ensure all of the dashboards have finished provisioning it will run out of retries and fail entirely. This change helps indirectly reduce these write contentions by limiting the connection pool for e2e tests. As a bonus, having our e2e tests run using `max_open_conn = 2` means it acts as a guard against regressions that would affect certain internal instances that run with these settings. 2023-10-17 02:49:49 -05:00			`max_idle_conn = 2`
			`max_open_conn = 2`