Will Browne
31d64d9074
Auth: Add SigV4 header allowlist to reduce chances of verification issues ( #29650 )
...
* enforce allowlist
* fix default auth selection
* add Host and comment
2020-12-09 10:45:57 +01:00
Will Browne and Arve Knudsen
3de091edf1
Alerting: Use correct time series name override from frame fields ( #29693 )
...
* cater for empty labels and new DisplayNameFromDS field
* simplify
Co-authored-by: Arve Knudsen <arve.knudsen@gmail.com >
* increase priority for ds display name
Co-authored-by: Arve Knudsen <arve.knudsen@gmail.com >
2020-12-08 22:04:05 +01:00
Will Browne and Diana Payton
1053989686
Docs: Add missing key to enable SigV4 for provisioning Elasticsearch data source ( #29584 )
...
* add missing key to enable SigV4
* use right key :o)
* Add .
Co-authored-by: Diana Payton <52059945+oddlittlebird@users.noreply.github.com >
Co-authored-by: Diana Payton <52059945+oddlittlebird@users.noreply.github.com >
2020-12-03 20:04:38 +01:00
Will Browne and Arve Knudsen
d10a8b2761
Alerting: Improve Prometheus Alert Rule error message ( #29390 )
...
* provide better ctx for prom err
* rework
* Update pkg/tsdb/prometheus/prometheus.go
Co-authored-by: Arve Knudsen <arve.knudsen@gmail.com >
* Update pkg/tsdb/prometheus/prometheus.go
Co-authored-by: Arve Knudsen <arve.knudsen@gmail.com >
* call func
Co-authored-by: Arve Knudsen <arve.knudsen@gmail.com >
2020-11-26 13:38:36 +01:00
Will Browne
d796c61946
Security: Fixes minor security issue with alert notification webhooks that allowed GET & DELETE requests #29330
2020-11-24 10:42:54 +01:00
Will Browne and Arve Knudsen
2939caf9a2
Permissions: Validate against Team/User permission role update ( #29101 )
...
* validate against role field update
* lowercase error string
* make all msgs consistent style
* fix wording
Co-authored-by: Arve Knudsen <arve.knudsen@gmail.com >
* sayonara simple json
Co-authored-by: Arve Knudsen <arve.knudsen@gmail.com >
2020-11-18 15:36:41 +01:00
Will Browne
eba046d3cb
Auth: Enable more complete credential chain for SigV4 default SDK auth option ( #29065 )
...
* Force more complete credential chain for default auth option
* simplify
* allow assume role for default
2020-11-13 10:27:35 +01:00
Will Browne
a7ea8de47e
Short URL: Cleanup unvisited/stale short URLs ( #28867 )
...
* cleanup stale short urls
* refactor test case names
* service injection
* fix query
* add docs
* remove comma
2020-11-09 18:08:16 +01:00
Will Browne
65554269ed
increase blob column size for encrypted dashboard data ( #28831 )
2020-11-04 18:41:05 +01:00
Will Browne
b9d71f5cdd
Plugins: Fix descendent frontend plugin signature validation ( #28638 )
...
* move plugin root check to earlier in validation process
* remove comment
* only check root if necessary
2020-10-29 15:03:37 +01:00
Will Browne
4d2b20f727
Auth: Fix SigV4 request verification step for Amazon Elasticsearch Service ( #28481 )
...
* remove forward header and add extra steps for encoding
* add comment
* re-use forwarded header
* fix service param
* Make SDK the default auth option in UI
* use SDK code instead
* propagate err
* refactor flow
* fix prom service namespace
2020-10-26 12:36:11 +01:00
0cdb23a069
Docs: SigV4 What's New and AWS Elasticsearch documentation ( #28506 )
...
* add what's new entry and elastic docs
* update docs
* remove caps
* fix image path
* fix md link
Co-authored-by: Sofia Papagiannaki <papagian@users.noreply.github.com >
* fix link case
Co-authored-by: Sofia Papagiannaki <papagian@users.noreply.github.com >
* fix md link
* docs fixes
* update config ref
Co-authored-by: Marcus Efraimsson <marcus.efraimsson@gmail.com >
Co-authored-by: Sofia Papagiannaki <papagian@users.noreply.github.com >
Co-authored-by: Marcus Efraimsson <marcus.efraimsson@gmail.com >
2020-10-26 11:50:39 +01:00
Will Browne and Arve Knudsen
1bee9f4168
Plugins: Track plugin signing errors and expose them to the frontend ( #28219 )
...
* first pass
* return list
* types and cleanup
* add to plugin page and add styles
* update comment
* update comment
* fix component path
* simplify error component
* simplify error struct
* fix tests
* don't export and fix string()
* update naming
* remove frontend
* introduce phantom loader
* track single error
* remove error from base
* remove unused struct
* remove unnecessary filter
* add errors endpoint
* Update set log to use id field
Co-authored-by: Arve Knudsen <arve.knudsen@gmail.com >
* skip adding BE plugins
* remove errs from plugin + ds list
* remove unnecessary fields
* add signature state to panels
* remove unused code
* apply PR feedback
* update comment
* merge dto with model
Co-authored-by: Arve Knudsen <arve.knudsen@gmail.com >
2020-10-23 16:45:43 +02:00
Will Browne and Sofia Papagiannaki
3706fd3942
Update changelog ( #28292 )
...
* update changelog
* Update CHANGELOG.md
Co-authored-by: Sofia Papagiannaki <papagian@users.noreply.github.com >
Co-authored-by: Sofia Papagiannaki <papagian@users.noreply.github.com >
2020-10-15 18:11:48 +02:00
a49c72ae09
Docs: Add What's New 7.3 ( #28268 )
...
* add base
* Update docs/sources/whatsnew/whats-new-in-v7-3.md
* Update What's new in 7.3 with CM OOTB dashboards
* Docs: enterprise whats new placeholders
* Add short url info
* Update shorten url after pull
* Update docs/sources/whatsnew/whats-new-in-v7-3.md
Co-authored-by: Marcus Efraimsson <marcus.efraimsson@gmail.com >
Co-authored-by: Sofia Papagiannaki <sofia@grafana.com >
Co-authored-by: Leonard Gram <leo@xlson.com >
Co-authored-by: Ivana <ivana.huckova@gmail.com >
2020-10-15 11:01:45 +02:00
Will Browne and Marcus Efraimsson
a189cd1832
Users: Expire old user invites ( #27361 )
...
* expire with existng cleanup service
* expire with new temp user service
* make Drone happy :)
* add expiry status
* remove other approach
* cleanup
* add test for idempotency
* add migration from datetime to unix ts
* update cmd names
* change lifetime config to duration
* remove unnecessart formatting
* add comment
* update docs
* remove max bound and introduce min error
* simplify sql
* remove comment
* allow any outstanding to exist for at least 24 hours
* revert created ts change
Co-authored-by: Marcus Efraimsson <marcus.efraimsson@gmail.com >
* add extra state check to cleanup step
Co-authored-by: Marcus Efraimsson <marcus.efraimsson@gmail.com >
2020-10-13 12:30:09 +02:00
Will Browne
ef22ff7315
Snapshots: Store dashboard data encrypted in the database ( #28129 )
...
* end 2 end
* fix import
* refactor
* introduce securedata
* check err
* use testify instead of convey
* cleanup test
* cleanup test
* blob time
* rename funcs
2020-10-13 10:19:42 +02:00
Will Browne and Arve Knudsen
7d63b2c473
Auth: Add Sigv4 auth option to datasources ( #27552 )
...
* create transport chain
* add frontend
* remove log
* inline field updates
* allow ARN, Credentials + Keys auth in frontend
* configure credentials
* add tests and refactor
* update frontend json field names
* fix tests
* fix comment
* add app config flag
* refactor tests
* add return field for tests
* add flag for UI display
* update comment
* move logic
* fix config
* pass config through props
* update docs
* pr feedback and add docs coverage
* shorten settings filename
* fix imports
* revert docs changes
* remove log line
* wrap up next as round tripper
* only propagate required config
* remove unused import
* remove ARN option and replace with default chain
* make ARN role assume as supplemental
* update docs
* refactor flow
* sign body when necessary
* remove unnecessary wrapper
* remove newline
* Apply suggestions from code review
* PR fixes
Co-authored-by: Arve Knudsen <arve.knudsen@gmail.com >
2020-10-08 10:03:20 +02:00
Will Browne
c764e3c37b
remove org deprecation logs ( #27788 )
2020-09-25 16:51:12 +02:00
Will Browne
9feaa91bf5
Alerting: Store sensitive settings encrypted for Telegram notifier ( #27122 )
...
* encrypt bot token
* update docs
* re-add uploadImage to docs
2020-08-25 14:35:57 +02:00
Will Browne
daaa3e571b
Alerting: Store sensitive settings encrypted for Threema notifier ( #27160 )
...
* encrypt API secret
* update docs
2020-08-24 16:49:45 +02:00
Will Browne
30d6405c53
Alerting: Store sensitive settings encrypted for Pushover notifier ( #27159 )
...
* encrypt api + user keys
* update docs
* fix decrypt steps
2020-08-24 16:49:30 +02:00
Will Browne
bbbbf9ac42
Alerting: Store sensitive settings encrypted for LINE notifier ( #27157 )
...
* encrypt token
* update docs
2020-08-24 16:49:10 +02:00
Will Browne
ed6f0663c2
Alerting: Store sensitive settings encrypted for Sensu notifier ( #27131 )
...
* encrypt password
* update docs
2020-08-24 16:48:55 +02:00
Will Browne
a3c3484286
Update latest to v7.1.4 ( #27104 )
2020-08-20 19:08:16 +02:00
Will Browne
9f2386a219
Alerting: Store sensitive settings encrypted for OpsGenie notifier ( #27074 )
...
* encrypt OpsGenie API key
* make whitespace consistent
* update docs
2020-08-20 16:05:48 +02:00
Will Browne
