Misi
09123a7bd6
FeatureToggle: Enable useSessionStorageForRedirection by default ( #97966 )
...
Enable useSessionStorageForRedirection by default
2024-12-13 19:36:35 +01:00
Sven Grossmann
5ac7443fce
Loki: Default to /labels API with query param instead of /series API ( #97935 )
...
* feat(loki-labels-api): add feature toggle
* feat(loki-labels-api): default to `/labels` API
2024-12-13 15:31:41 +01:00
Karl Persson
5c0cb09d27
Zanzana: Remove capabilities ( #97918 )
...
Remove capabilities
2024-12-13 12:23:12 +01:00
Dana Axinte
b9d6af34cd
CloudMigrations: Obtain gcom plugins to enable plugins migration ( #97784 )
...
* just api
* preallocate
2024-12-13 10:59:43 +00:00
Laura Fernández
aac62c89da
UnifiedHistory: Create feature toggle ( #97922 )
2024-12-13 12:41:18 +02:00
Jo
40d3b02648
Auth: Separate anonymous settings to its own struct ( #97791 )
...
separate anonymous settings to its own struct
2024-12-13 10:46:27 +01:00
Agnès Toulet
1c4d30f73c
Rendering: Add logs ( #97885 )
...
* Rendering: add logs
* fix tests and lint issues
2024-12-13 09:42:35 +01:00
Isabella Siu
b3a12f486e
Elasticsearch: Use _field_caps instead of _mapping to get fields ( #97607 )
2024-12-12 17:20:04 -05:00
Jean-Philippe Quéméner
1509fadd5b
refactor(unified-storage): make datasyncer configurable ( #97832 )
2024-12-12 21:41:01 +01:00
owensmallwood
0e8702369a
Folders: Create default folder permissions within transaction ( #97812 )
...
create default folder permissions within transaction
2024-12-12 14:08:46 -06:00
Ieva
32554c78a8
Direct DB perm checks: check that the namespaces match ( #97828 )
...
check that the namespace of the caller matches the namespace in the request
2024-12-12 12:57:16 +02:00
Santiago
7ad004236e
Alerting: Change the description for the 'Message' field in webhooks ( #96153 )
2024-12-12 10:30:23 +01:00
Ieva
ded90fa28d
App platform: Implement perm check with direct db access ( #97579 )
...
* implement perm check with direct db access
* add tests
* more tests
* Update pkg/services/authz/rbac/service.go
Co-authored-by: Gabriel MABILLE <gamab@users.noreply.github.com >
* Update pkg/services/authz/rbac/service.go
Co-authored-by: Gabriel MABILLE <gamab@users.noreply.github.com >
* allow fetching permissions for a user who is not a member of the org
* linting
* fix typo
---------
Co-authored-by: Gabriel MABILLE <gamab@users.noreply.github.com >
2024-12-12 08:52:14 +00:00
Todd Treece
c5e8e71ee3
K8s: Add APIGroupPostStartHookProvider ( #97801 )
2024-12-11 19:13:42 +02:00
Alexander Zobnin
61d71ec5b1
Zanzana: Handle anonymous users ( #97171 )
...
* add anonymous users to schema
* sync anonymous user role
* remove unused
* fix linter
* only add anonymous reconciler if feature is enabled
2024-12-11 12:22:42 +01:00
Ivana Huckova
2149c75e22
Zipkin: Run queries through backend ( #97754 )
...
* Zipkin: Run queries through backend
* ;2DUpdate e2e
* Update e2e
2024-12-11 12:31:24 +02:00
Stephanie Hingtgen
f05d016ae7
Chore: Remove mysqlParseTime feature toggle ( #97761 )
2024-12-10 15:13:13 -06:00
Stephanie Hingtgen
b05d60e5b5
k8s: dashboards: remove FT ( #97758 )
2024-12-10 12:35:36 -06:00
Juan Cabanas
c2333e3bc0
ShareDrawer: Enable by default ( #97259 )
2024-12-10 12:52:18 -03:00
Karl Persson
87ba9c60b2
Zanzana: change type name from namespace to group_resource ( #97741 )
...
* Change type name from namespace to group_resource
* update function names and test descriptions
2024-12-10 15:21:54 +01:00
Sergej-Vlasov
663167a16c
FeatureToggles: Make newFiltersUI feature toggle generally available ( #97460 )
...
make newFiltersUIfeature toggle generally available
2024-12-10 10:06:55 +00:00
Matheus Macabu
dd969f8a54
Chore: Attempt to reduce flakiness in integration tests ( #97247 )
...
* sqlstore/sqlutil: set sync=OFF for sqlite in tests if wal=true
* testinfra: set max open/idle conn to 2 to match e2e tests
2024-12-10 10:55:18 +01:00
Karl Persson
718612aabf
Zanzana: Update relation names ( #97638 )
...
* Update relation names to match k8s verbs
* Only check namespace if relation is valid
* Only list for valid relations
2024-12-10 09:38:03 +01:00
Alexander Zobnin
cd7772204e
Zanzana: Handle renderer service authorization requests ( #97201 )
...
* Zanzana: Handle renderer service authorization requests
* only add context if render service is authorizing
* use group and resource from API definitions
* check prefix instead of full identity
* fix AddRenderContext
* remove unused type
2024-12-09 11:17:44 +01:00
Ryan McKinley
5f39d2eeb0
K8s: Make GetAPIRoutes an optional interface ( #97531 )
2024-12-07 03:08:18 +03:00
Santiago
f60caf6932
Alerting: Fix alert rules unpausing after moving rule to different folder ( #97580 )
...
Alerting: Fix alert rules unpaused after moving rule to different folder
2024-12-06 14:33:13 -03:00
Dave Henderson
ced7a84f8b
chore(metrics): Add metrics & traces to DB migration ( #97181 )
...
Signed-off-by: Dave Henderson <dave.henderson@grafana.com >
2024-12-05 17:22:19 -05:00
Todd Treece
ec454e04c9
Chore: Remove standalone apiserver options ( #97349 )
2024-12-03 11:42:52 -05:00
Karl Persson
3a17d0c927
IAM: align AuthInfo interface ( #97228 )
...
* Update to use updated interface
2024-12-03 15:11:17 +01:00
Ryan McKinley
20a27da636
FeatureFlags: Add helper to check against a set of flags ( #97240 )
2024-12-02 21:41:41 +02:00
Michael Mandrus
8a1b89a5eb
Report Button: Add feature toggle for commit button [Hackathon] ( #97282 )
...
add feature toggle for commit button
2024-12-02 19:08:15 +02:00
Karl Persson
e4fbae03a1
RBAC: remove dead code ( #97234 )
...
This code is unused and always have been
2024-12-02 16:23:51 +01:00
Hugo Kiyodi Oshiro
5e91984f31
Plugins: Use grafana-com sso_api_token ( #97096 )
2024-12-02 16:04:05 +01:00
Karl Persson
7b25804b55
K8s: Register group and kinds to internal version to fix apply ( #97184 )
...
* K8s: Register group and kinds to internal version to fix apply
2024-12-02 10:32:34 +01:00
Andres Martinez Gotor
e0935246a3
Preinstall: Allow to set a download URL ( #96535 )
2024-11-29 16:02:33 +01:00
Ieva
cc0ec349a4
RBAC: Allow passing in user UID when searching for user's permissions ( #97125 )
...
* allow passing in user UID instead of ID when searching for user's permissions
* fix tests
2024-11-28 16:36:26 +00:00
Karl Persson
d64c938749
K8s: Make it possible to register several kinds for a GroupVersion ( #97161 )
...
* Make it possible to register several kinds for a GroupVersion
2024-11-28 16:31:05 +01:00
Karl Persson
c5d3f8644e
K8s: Set custom config ( #97169 )
...
Set custom config
2024-11-28 16:30:43 +01:00
Karl Persson
b2626a2d65
LoginAttempt: Add setting to control max number of attempts before user login gets locked ( #97091 )
...
* Add setting to adjust number of login attempts before user login gets locked
* Ensure at least one attempt can be made
* Update documentation with new setting
* Update docs/sources/setup-grafana/configure-grafana/_index.md
Co-authored-by: Eric Leijonmarck <eric.leijonmarck@gmail.com >
2024-11-28 14:33:18 +01:00
Matheus Macabu
f2b96593ea
SQL: close rows to release connection ( #97147 )
...
* SQL: close rows to release connection
* dont return err from rows.Close()
2024-11-28 14:28:55 +01:00
Georges Chaudy
f6124344ba
authnz: Fix panic in the authenticator and rename metric ( #97150 )
...
* Fix: panic
* suggestion
2024-11-28 14:03:54 +02:00
Alexander Zobnin
c8caf787d4
Zanzana: handle service accounts ( #97123 )
...
* add service account to the schema
* sync managed permissions for service accounts
* sync SA basic roles
* sync SA roles
* Fix endless loop in reconciler while read openfga
2024-11-28 10:41:30 +01:00
Mihai Doarna
feecd30687
API key: Fix API key migration to service account ( #97100 )
...
fix api key migration to service account
2024-11-28 09:42:58 +02:00
Sarah Zinger
4b234c4795
Add logging to legacy datasource look up path ( #97065 )
2024-11-27 14:32:06 -05:00
Adam Yeats
b898a4540d
Azure Monitor: Add a feature flag to toggle user auth for Azure Monitor only ( #96858 )
...
* Azure Monitor: Add a feature flag to toggle user auth for Azure Monitor only
* Fix condition for userIdentityEnabled
* Re-add removed test
* Remove unused prop
* Refactor onAuthTypeChange in AzureCredentialsForm
* Add frontend unit tests
* Lint
2024-11-27 14:01:54 +00:00
Alexander Zobnin
5a91ab46af
Zanzana: Use StreamedListObjects to fetch full list of resources ( #97025 )
...
* Initial streamed version of list
* instantiate openfga client to use StreamedListObjects
* Add config option for using streamed version
* Use caching
* fix cache init
* Fix hashing
* refactor
2024-11-27 14:05:41 +02:00
Misi
84b8296ffb
OAuth: Use the attached external session data in OAuthToken and OAuthTokenSync ( #96655 )
...
* wip
* wip + tests
* wip
* wip opt2
* Use authn.Identity struct's SessionToken
* Merge fixes
* Handle disabling the feature flag correctly
* Fix test
* Cleanup
* Remove HasOAuthEntry from the OAuthTokenService interface
* Remove unused function
2024-11-27 11:06:39 +01:00
Gabriel MABILLE
6e2d3cae5e
AuthN: Register flags for grpc_server_authentication configuration ( #97063 )
...
* AuthZServer: Add authenticator
* Add flags
2024-11-27 10:35:35 +01:00
Karl Persson
be54c69fd4
Zanzana: Remove create relation from generic resources ( #97042 )
...
Remove create relation from generic resources.
We cant have a create relation to a resource because they don't exist yet. So
in oder to check create we either have to have that permissions on a folder or the namespace
2024-11-27 09:02:29 +01:00
Carl Bergquist
21bd47e512
scopes: behind its own feature flag ( #97077 )
...
Signed-off-by: bergquist <carl.bergquist@gmail.com >
2024-11-27 08:58:25 +01:00