LBAC for datasources: Add feature toggle LBAC for datasources mimir teamHttpHeadersMimir (#98866)

adds feature toggle LBAC for datasources mimir
This commit is contained in:
Eric Leijonmarck 2025-01-13 11:42:47 +01:00 committed by GitHub
parent c6b7e35c4e
commit 04acbcdef2
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
6 changed files with 27 additions and 0 deletions

View File

@ -230,6 +230,7 @@ Experimental features might be changed or removed without prior notice.
| `investigationsBackend` | Enable the investigations backend API | | `investigationsBackend` | Enable the investigations backend API |
| `k8SFolderCounts` | Enable folder's api server counts | | `k8SFolderCounts` | Enable folder's api server counts |
| `k8SFolderMove` | Enable folder's api server move | | `k8SFolderMove` | Enable folder's api server move |
| `teamHttpHeadersMimir` | Enables LBAC for datasources for Mimir to apply LBAC filtering of metrics to the client requests for users in teams |
## Development feature toggles ## Development feature toggles

View File

@ -248,4 +248,5 @@ export interface FeatureToggles {
k8SFolderCounts?: boolean; k8SFolderCounts?: boolean;
k8SFolderMove?: boolean; k8SFolderMove?: boolean;
improvedExternalSessionHandlingSAML?: boolean; improvedExternalSessionHandlingSAML?: boolean;
teamHttpHeadersMimir?: boolean;
} }

View File

@ -1713,6 +1713,14 @@ var (
Stage: FeatureStagePublicPreview, Stage: FeatureStagePublicPreview,
Owner: identityAccessTeam, Owner: identityAccessTeam,
}, },
{
Name: "teamHttpHeadersMimir",
Description: "Enables LBAC for datasources for Mimir to apply LBAC filtering of metrics to the client requests for users in teams",
Stage: FeatureStageExperimental,
FrontendOnly: false,
AllowSelfServe: false,
Owner: identityAccessTeam,
},
} }
) )

View File

@ -229,3 +229,4 @@ investigationsBackend,experimental,@grafana/grafana-app-platform-squad,false,fal
k8SFolderCounts,experimental,@grafana/search-and-storage,false,false,false k8SFolderCounts,experimental,@grafana/search-and-storage,false,false,false
k8SFolderMove,experimental,@grafana/search-and-storage,false,false,false k8SFolderMove,experimental,@grafana/search-and-storage,false,false,false
improvedExternalSessionHandlingSAML,preview,@grafana/identity-access-team,false,false,false improvedExternalSessionHandlingSAML,preview,@grafana/identity-access-team,false,false,false
teamHttpHeadersMimir,experimental,@grafana/identity-access-team,false,false,false

1 Name Stage Owner requiresDevMode RequiresRestart FrontendOnly
229 k8SFolderCounts experimental @grafana/search-and-storage false false false
230 k8SFolderMove experimental @grafana/search-and-storage false false false
231 improvedExternalSessionHandlingSAML preview @grafana/identity-access-team false false false
232 teamHttpHeadersMimir experimental @grafana/identity-access-team false false false

View File

@ -926,4 +926,8 @@ const (
// FlagImprovedExternalSessionHandlingSAML // FlagImprovedExternalSessionHandlingSAML
// Enables improved support for SAML external sessions. Ensure the NameID format is correctly configured in Grafana for SAML Single Logout to function properly. // Enables improved support for SAML external sessions. Ensure the NameID format is correctly configured in Grafana for SAML Single Logout to function properly.
FlagImprovedExternalSessionHandlingSAML = "improvedExternalSessionHandlingSAML" FlagImprovedExternalSessionHandlingSAML = "improvedExternalSessionHandlingSAML"
// FlagTeamHttpHeadersMimir
// Enables LBAC for datasources for Mimir to apply LBAC filtering of metrics to the client requests for users in teams
FlagTeamHttpHeadersMimir = "teamHttpHeadersMimir"
) )

View File

@ -3566,6 +3566,18 @@
"allowSelfServe": true "allowSelfServe": true
} }
}, },
{
"metadata": {
"name": "teamHttpHeadersMimir",
"resourceVersion": "1736763800062",
"creationTimestamp": "2025-01-13T10:23:20Z"
},
"spec": {
"description": "Enables LBAC for datasources for Mimir to apply LBAC filtering of metrics to the client requests for users in teams",
"stage": "experimental",
"codeowner": "@grafana/identity-access-team"
}
},
{ {
"metadata": { "metadata": {
"name": "timeRangeProvider", "name": "timeRangeProvider",