3 people 359d84799e auth: add serviceaccount proxy (#76815) ...

* Add proxy service template

* Replace SA srv with proxy for external SA srv

* Move service account prefix to a constant

* Prevent deletion from external service account

* Make SA validation a resusable function

* Add protection for creating service accounts

* Add protection when updating service accounts

* Add IsExternal field for service account

* Protect ext service account token generation

* Add verbose errors for form name or sa name

* add tests

* Add logs

* Adjusts tests

---------

Co-authored-by: Misi <mgyongyosi@users.noreply.github.com>
Co-authored-by: Gabriel MABILLE <gamab@users.noreply.github.com>

2023-10-23 14:09:42 +02:00

..

accesscontrol

Plugins: Automatic service account (and token) setup (#76473)

2023-10-17 16:21:23 +02:00

alerting

Tracing: Standardize on otel tracing (#75528)

2023-10-03 14:54:20 +02:00

annotations

Identity: Port snapshots and annotations to Requester (#76103)

2023-10-06 11:59:48 +02:00

anonymous

Anon: Use xorm for anon service (#75964)

2023-10-04 17:19:56 +02:00

apikey

Auth: Move apikey service from userSignedIn to identity.Requester interface (#74323)

2023-09-07 16:54:38 +01:00

auth

IDForwarding: Use single flight for SignIdentity (#76530)

2023-10-13 14:32:53 +02:00

authn

Revert "AuthN: move oauth token hook into session client" (#76882)

2023-10-20 16:09:46 +02:00

caching

Fixing typos (#70487)

2023-06-22 09:43:38 +01:00

cleanup

Tracing: Standardize on otel tracing (#75528)

2023-10-03 14:54:20 +02:00

contexthandler

Chore: Clean up the context handler (#75864)

2023-10-04 17:56:51 +02:00

correlations

Identity: Unfurl OrgID in pkg/services to allow using identity.Requester interface (#76113)

2023-10-09 10:40:19 +02:00

dashboardimport

Plugins: Move store and plugin dto to pluginsintegration (#74655)

2023-09-11 13:59:24 +02:00

dashboards

Update origin annotation names (#76301)

2023-10-11 18:28:26 -04:00

dashboardsnapshots

Identity: Port snapshots and annotations to Requester (#76103)

2023-10-06 11:59:48 +02:00

dashboardversion

Chore: use any rather than interface{} (#74066)

2023-08-30 18:46:47 +03:00

datasourceproxy

DatasourceProxy: Fix spelling (#75859)

2023-10-03 10:23:23 +02:00

datasources

RBAC: introduce a data source admin role (#75915)

2023-10-19 14:36:41 +01:00

encryption

Chore: use any rather than interface{} (#74066)

2023-08-30 18:46:47 +03:00

extsvcauth

auth: add serviceaccount proxy (#76815)

2023-10-23 14:09:42 +02:00

featuremgmt

CloudWatch: Update query batching logic (#76075)

2023-10-20 15:09:41 -04:00

folder

Chore: Update data migration to update rows that have changes (#76545)

2023-10-13 18:58:36 +02:00

grafana-apiserver

K8s: Add grafana-apiserver config (#76649)

2023-10-17 11:29:06 -04:00

grpcserver

Chore: make GPRCServerService private (#74612)

2023-09-08 12:44:18 -07:00

guardian

Replace signed in user for identity.requester (#74048)

2023-08-30 16:51:18 +02:00

hooks

Hooks: Remove AddLoginHook and RunLogin hooks (#73227)

2023-08-17 09:51:45 +02:00

kmsproviders

Secrets: Make the Migrator extensible (#67307)

2023-06-19 23:44:01 +02:00

ldap

AuthN: Change EnableDisabledUserHook to EnableUserHook (#75248)

2023-09-27 11:16:53 +02:00

libraryelements

LibraryPanels: Add RBAC support (#73475)

2023-10-12 00:30:50 +01:00

librarypanels

LibraryPanels: Add RBAC support (#73475)

2023-10-12 00:30:50 +01:00

licensing

Chore: Clean up old navigation (#66287)

2023-04-14 09:43:11 +01:00

live

Live: Allow setting the engine password (#76289)

2023-10-11 09:45:24 +01:00

login

Chore: use any rather than interface{} (#74066)

2023-08-30 18:46:47 +03:00

loginattempt

Chore: capitalise log message for auth packages (#74332)

2023-09-04 18:49:47 +02:00

navtree

Feat: Add cloud plugin cost management to admin section (#76547)

2023-10-17 17:15:51 +01:00

ngalert

Alerting: Move ExternalAlertmanager to its own package (#76854)

2023-10-20 14:08:13 +02:00

notifications

Chore: use any rather than interface{} (#74066)

2023-08-30 18:46:47 +03:00

oauthtoken

Auth: OAuth token sync improvements (#75943)

2023-10-05 11:19:43 +02:00

org

Chore: delete team related entries for an org after the org gets deleted (#76706)

2023-10-18 10:40:26 +01:00

playlist

Playlist: Use a different go struct for sql service vs k8s (#76393)

2023-10-12 08:29:06 -07:00

plugindashboards

Plugins: Move store and plugin dto to pluginsintegration (#74655)

2023-09-11 13:59:24 +02:00

pluginsintegration

Plugins: Add contextual logger to streaming methods in ContextualLoggerMiddleware (#76761)

2023-10-19 11:52:50 +02:00

preference

Teams: Move team API to own service (#76347)

2023-10-12 10:10:54 +02:00

provisioning

Chore: Log failures during provisioning initialization (#75550)

2023-09-28 10:00:36 +03:00

publicdashboards

PublicDashboards: Add validation deletion (#75336)

2023-10-11 11:59:13 +00:00

query

Plugins: Set grafana config, plugin version and user agent on plugin requests (#75171)

2023-09-21 11:33:31 +02:00

queryhistory

Chore: use any rather than interface{} (#74066)

2023-08-30 18:46:47 +03:00

quota

Alerting: Fix flaky SQLITE_BUSY when migrating with provisioned dashboards (#76658)

2023-10-19 10:03:00 -04:00

rendering

Chore: use any rather than interface{} (#74066)

2023-08-30 18:46:47 +03:00

screenshot

Chore: use any rather than interface{} (#74066)

2023-08-30 18:46:47 +03:00

search

User: Support sort query param for user and org user, search endpoints (#75229)

2023-09-28 10:16:18 +02:00

searchusers

Team: Support sort query param for teams search endpoint (#75622)

2023-09-28 18:20:51 +03:00

searchV2

Identity: Unfurl OrgID in pkg/services to allow using identity.Requester interface (#76113)

2023-10-09 10:40:19 +02:00

secrets

Chore: Adapt GetDataSourcesByType to plugins with aliases (#76637)

2023-10-17 11:09:56 +02:00

serviceaccounts

auth: add serviceaccount proxy (#76815)

2023-10-23 14:09:42 +02:00

shorturls

Chore: Add errutils helpers (#73577)

2023-08-22 12:52:24 +02:00

signingkeys

Siningkeys: Fix test setup (#76333)

2023-10-11 13:50:38 +02:00

sqlstore

Alerting: Move legacy alert migration from sqlstore migration to service (#72702)

2023-10-12 13:43:10 +01:00

star

Auth: Move star service to identity interface (#73114)

2023-08-10 17:17:27 +02:00

stats

Chore: use any rather than interface{} (#74066)

2023-08-30 18:46:47 +03:00

store

Playlist: Use a different go struct for sql service vs k8s (#76393)

2023-10-12 08:29:06 -07:00

supportbundles

Plugins: Move store and plugin dto to pluginsintegration (#74655)

2023-09-11 13:59:24 +02:00

tag

Annotations: Ignore unique constraint violations for tags (#65935)

2023-04-18 14:21:38 +02:00

team

Teams: Move team API to own service (#76347)

2023-10-12 10:10:54 +02:00

temp_user

Chore: use any rather than interface{} (#74066)

2023-08-30 18:46:47 +03:00

updatechecker

Plugins: Move store and plugin dto to pluginsintegration (#74655)

2023-09-11 13:59:24 +02:00

user

Authn: Prevent empty username and email during sync (#76330)

2023-10-11 14:27:43 +02:00

validations

chore: move validations model into the validations service (#61953)

2023-01-23 15:10:14 -05:00