Commit Graph

8062 Commits

Author SHA1 Message Date
Misi
09123a7bd6 FeatureToggle: Enable useSessionStorageForRedirection by default (#97966)
Enable useSessionStorageForRedirection by default
2024-12-13 19:36:35 +01:00
Sven Grossmann
5ac7443fce Loki: Default to /labels API with query param instead of /series API (#97935)
* feat(loki-labels-api): add feature toggle

* feat(loki-labels-api): default to `/labels` API
2024-12-13 15:31:41 +01:00
Karl Persson
5c0cb09d27 Zanzana: Remove capabilities (#97918)
Remove capabilities
2024-12-13 12:23:12 +01:00
Dana Axinte
b9d6af34cd CloudMigrations: Obtain gcom plugins to enable plugins migration (#97784)
* just api

* preallocate
2024-12-13 10:59:43 +00:00
Laura Fernández
aac62c89da UnifiedHistory: Create feature toggle (#97922) 2024-12-13 12:41:18 +02:00
Jo
40d3b02648 Auth: Separate anonymous settings to its own struct (#97791)
separate anonymous settings to its own struct
2024-12-13 10:46:27 +01:00
Agnès Toulet
1c4d30f73c Rendering: Add logs (#97885)
* Rendering: add logs

* fix tests and lint issues
2024-12-13 09:42:35 +01:00
Isabella Siu
b3a12f486e Elasticsearch: Use _field_caps instead of _mapping to get fields (#97607) 2024-12-12 17:20:04 -05:00
Jean-Philippe Quéméner
1509fadd5b refactor(unified-storage): make datasyncer configurable (#97832) 2024-12-12 21:41:01 +01:00
owensmallwood
0e8702369a Folders: Create default folder permissions within transaction (#97812)
create default folder permissions within transaction
2024-12-12 14:08:46 -06:00
Ieva
32554c78a8 Direct DB perm checks: check that the namespaces match (#97828)
check that the namespace of the caller matches the namespace in the request
2024-12-12 12:57:16 +02:00
Santiago
7ad004236e Alerting: Change the description for the 'Message' field in webhooks (#96153) 2024-12-12 10:30:23 +01:00
Ieva
ded90fa28d App platform: Implement perm check with direct db access (#97579)
* implement perm check with direct db access

* add tests

* more tests

* Update pkg/services/authz/rbac/service.go

Co-authored-by: Gabriel MABILLE <gamab@users.noreply.github.com>

* Update pkg/services/authz/rbac/service.go

Co-authored-by: Gabriel MABILLE <gamab@users.noreply.github.com>

* allow fetching permissions for a user who is not a member of the org

* linting

* fix typo

---------

Co-authored-by: Gabriel MABILLE <gamab@users.noreply.github.com>
2024-12-12 08:52:14 +00:00
Todd Treece
c5e8e71ee3 K8s: Add APIGroupPostStartHookProvider (#97801) 2024-12-11 19:13:42 +02:00
Alexander Zobnin
61d71ec5b1 Zanzana: Handle anonymous users (#97171)
* add anonymous users to schema

* sync anonymous user role

* remove unused

* fix linter

* only add anonymous reconciler if feature is enabled
2024-12-11 12:22:42 +01:00
Ivana Huckova
2149c75e22 Zipkin: Run queries through backend (#97754)
* Zipkin: Run queries through backend

* ;2DUpdate e2e

* Update e2e
2024-12-11 12:31:24 +02:00
Stephanie Hingtgen
f05d016ae7 Chore: Remove mysqlParseTime feature toggle (#97761) 2024-12-10 15:13:13 -06:00
Stephanie Hingtgen
b05d60e5b5 k8s: dashboards: remove FT (#97758) 2024-12-10 12:35:36 -06:00
Juan Cabanas
c2333e3bc0 ShareDrawer: Enable by default (#97259) 2024-12-10 12:52:18 -03:00
Karl Persson
87ba9c60b2 Zanzana: change type name from namespace to group_resource (#97741)
* Change type name from namespace to group_resource

* update function names and test descriptions
2024-12-10 15:21:54 +01:00
Sergej-Vlasov
663167a16c FeatureToggles: Make newFiltersUI feature toggle generally available (#97460)
make newFiltersUIfeature toggle generally available
2024-12-10 10:06:55 +00:00
Matheus Macabu
dd969f8a54 Chore: Attempt to reduce flakiness in integration tests (#97247)
* sqlstore/sqlutil: set sync=OFF for sqlite in tests if wal=true

* testinfra: set max open/idle conn to 2 to match e2e tests
2024-12-10 10:55:18 +01:00
Karl Persson
718612aabf Zanzana: Update relation names (#97638)
* Update relation names to match k8s verbs

* Only check namespace if relation is valid

* Only list for valid relations
2024-12-10 09:38:03 +01:00
Alexander Zobnin
cd7772204e Zanzana: Handle renderer service authorization requests (#97201)
* Zanzana: Handle renderer service authorization requests

* only add context if render service is authorizing

* use group and resource from API definitions

* check prefix instead of full identity

* fix AddRenderContext

* remove unused type
2024-12-09 11:17:44 +01:00
Ryan McKinley
5f39d2eeb0 K8s: Make GetAPIRoutes an optional interface (#97531) 2024-12-07 03:08:18 +03:00
Santiago
f60caf6932 Alerting: Fix alert rules unpausing after moving rule to different folder (#97580)
Alerting: Fix alert rules unpaused after moving rule to different folder
2024-12-06 14:33:13 -03:00
Dave Henderson
ced7a84f8b chore(metrics): Add metrics & traces to DB migration (#97181)
Signed-off-by: Dave Henderson <dave.henderson@grafana.com>
2024-12-05 17:22:19 -05:00
Todd Treece
ec454e04c9 Chore: Remove standalone apiserver options (#97349) 2024-12-03 11:42:52 -05:00
Karl Persson
3a17d0c927 IAM: align AuthInfo interface (#97228)
* Update to use updated interface
2024-12-03 15:11:17 +01:00
Ryan McKinley
20a27da636 FeatureFlags: Add helper to check against a set of flags (#97240) 2024-12-02 21:41:41 +02:00
Michael Mandrus
8a1b89a5eb Report Button: Add feature toggle for commit button [Hackathon] (#97282)
add feature toggle for commit button
2024-12-02 19:08:15 +02:00
Karl Persson
e4fbae03a1 RBAC: remove dead code (#97234)
This code is unused and always have been
2024-12-02 16:23:51 +01:00
Hugo Kiyodi Oshiro
5e91984f31 Plugins: Use grafana-com sso_api_token (#97096) 2024-12-02 16:04:05 +01:00
Karl Persson
7b25804b55 K8s: Register group and kinds to internal version to fix apply (#97184)
* K8s: Register group and kinds to internal version to fix apply
2024-12-02 10:32:34 +01:00
Andres Martinez Gotor
e0935246a3 Preinstall: Allow to set a download URL (#96535) 2024-11-29 16:02:33 +01:00
Ieva
cc0ec349a4 RBAC: Allow passing in user UID when searching for user's permissions (#97125)
* allow passing in user UID instead of ID when searching for user's permissions

* fix tests
2024-11-28 16:36:26 +00:00
Karl Persson
d64c938749 K8s: Make it possible to register several kinds for a GroupVersion (#97161)
* Make it possible to register several kinds for a GroupVersion
2024-11-28 16:31:05 +01:00
Karl Persson
c5d3f8644e K8s: Set custom config (#97169)
Set custom config
2024-11-28 16:30:43 +01:00
Karl Persson
b2626a2d65 LoginAttempt: Add setting to control max number of attempts before user login gets locked (#97091)
* Add setting to adjust number of login attempts before user login gets locked

* Ensure at least one attempt can be made

* Update documentation with new setting

* Update docs/sources/setup-grafana/configure-grafana/_index.md

Co-authored-by: Eric Leijonmarck <eric.leijonmarck@gmail.com>
2024-11-28 14:33:18 +01:00
Matheus Macabu
f2b96593ea SQL: close rows to release connection (#97147)
* SQL: close rows to release connection

* dont return err from rows.Close()
2024-11-28 14:28:55 +01:00
Georges Chaudy
f6124344ba authnz: Fix panic in the authenticator and rename metric (#97150)
* Fix: panic

* suggestion
2024-11-28 14:03:54 +02:00
Alexander Zobnin
c8caf787d4 Zanzana: handle service accounts (#97123)
* add service account to the schema

* sync managed permissions for service accounts

* sync SA basic roles

* sync SA roles

* Fix endless loop in reconciler while read openfga
2024-11-28 10:41:30 +01:00
Mihai Doarna
feecd30687 API key: Fix API key migration to service account (#97100)
fix api key migration to service account
2024-11-28 09:42:58 +02:00
Sarah Zinger
4b234c4795 Add logging to legacy datasource look up path (#97065) 2024-11-27 14:32:06 -05:00
Adam Yeats
b898a4540d Azure Monitor: Add a feature flag to toggle user auth for Azure Monitor only (#96858)
* Azure Monitor: Add a feature flag to toggle user auth for Azure Monitor only

* Fix condition for userIdentityEnabled

* Re-add removed test

* Remove unused prop

* Refactor onAuthTypeChange in AzureCredentialsForm

* Add frontend unit tests

* Lint
2024-11-27 14:01:54 +00:00
Alexander Zobnin
5a91ab46af Zanzana: Use StreamedListObjects to fetch full list of resources (#97025)
* Initial streamed version of list

* instantiate openfga client to use StreamedListObjects

* Add config option for using streamed version

* Use caching

* fix cache init

* Fix hashing

* refactor
2024-11-27 14:05:41 +02:00
Misi
84b8296ffb OAuth: Use the attached external session data in OAuthToken and OAuthTokenSync (#96655)
* wip

* wip + tests

* wip

* wip opt2

* Use authn.Identity struct's SessionToken

* Merge fixes

* Handle disabling the feature flag correctly

* Fix test

* Cleanup

* Remove HasOAuthEntry from the OAuthTokenService interface

* Remove unused function
2024-11-27 11:06:39 +01:00
Gabriel MABILLE
6e2d3cae5e AuthN: Register flags for grpc_server_authentication configuration (#97063)
* AuthZServer: Add authenticator

* Add flags
2024-11-27 10:35:35 +01:00
Karl Persson
be54c69fd4 Zanzana: Remove create relation from generic resources (#97042)
Remove create relation from generic resources.

We cant have a create relation to a resource because they don't exist yet. So
in oder to check create we either have to have that permissions on a folder or the namespace
2024-11-27 09:02:29 +01:00
Carl Bergquist
21bd47e512 scopes: behind its own feature flag (#97077)
Signed-off-by: bergquist <carl.bergquist@gmail.com>
2024-11-27 08:58:25 +01:00