grafana

The open and composable observability and data visualization platform. Visualize metrics, logs, and traces from multiple sources like Prometheus, Loki, Elasticsearch, InfluxDB, Postgres and many more.

prometheus hacktoberfest metrics monitoring alerting grafana go influxdb mysql postgres analytics data-visualization dashboard business-intelligence elasticsearch

Misi 25c9e01592 IAM: Add team /addmember and /removemember subresources (#124094 ) * IAM: Add /teams/{name}/addmember and /removemember subresources Cross-instance team-sync used to converge a user's membership by PUT'ing the entire Team object: each instance Get'd, appended a member to Spec.Members, and submitted the full list back. When two instances synced different users on the same team from the same baseline, the second writer's full-replace silently dropped the first writer's just-added member because the diff treats the submitted list as authoritative. The new subresources move the single-member operation server-side. The client posts {name, permission, external} (or {name} to remove), and the apiserver expands that into a Get + Spec.Members mutation + Update through the team resource's dual-writer storage — so the same handler works under any dual-writer mode (legacy primary, unified primary, or both). retry.RetryOnConflict around the Update absorbs the unified-storage resourceVersion check; the synchronizer no longer keeps a stale Spec.Members snapshot in memory at all, which is what made the cross-instance race possible in the first place. HTTP semantics: - POST /addmember → 201 Created on a fresh insert, 200 OK on an idempotent re-add. - POST /removemember → 200 OK whether or not a row existed; the request is idempotent so the synchronizer doesn't have to distinguish "already gone" from "just deleted". Request/response shapes are defined in apps/iam/kinds/team.cue and generated via the App SDK; the handlers consume the generated types (CreateTeamMember{RequestBody,Body,Response} and the Delete* counterparts) and emit them with TypeMeta filled in by the framework. Authorization mirrors the parent Team resource's RBAC: members/groups keep their existing get_permissions check; addmember/removemember are gated on team `update` — same bar as a full PUT teams/{name}, since the effective change is the same shape. No new feature toggle — registration of these storage map entries is itself gated on the team API being enabled. Integration tests cover the happy path, the idempotent re-add (200 vs the fresh-insert 201), the idempotent re-remove, and a concurrent addMember of two different users on the same team that exercises the race the full PUT path could not handle. * IAM: Reject stale Team Update via resourceVersion precondition Two Grafana instances running team-sync would race on the same Team and silently drop each other's just-added members: each Get'd at the same resourceVersion, each appended a different user to its own Spec.Members snapshot, and both submitted Update. The IAM team store didn't enforce the submitted resourceVersion, so the second writer's full-replace list (which never saw the first writer's append) overwrote the row and deleted the just-added member with no error and no log line. Gate the SQL UPDATE in legacy.UpdateTeam on `updated = ?` using the RV the caller observed at Get time. 0 rows affected after the gate fires yields ErrTeamUpdateConflict, which the apiserver maps to 409 Conflict; synchronizer.addUserToTeam's retry.RetryOnConflict re-reads the team and re-submits with the merged member set, so both members end up present and the original silent-loss path is closed. DBTime now serialises with millisecond precision when the value carries sub-second nanos (so concurrent writes within a second can be told apart). On-second values keep emitting the legacy second-only format so the gated UPDATE still text-matches rows xorm wrote at second precision (e.g. teams created via /api/teams). * Add retry on MySQL and Postgres deadlock (cherry picked from commit `bd594b7040`) * Add custom backoff * Revert "Add retry on MySQL and Postgres deadlock" This reverts commit `4420f6b91d`. * Address review feedback * wip * IAM: convert SQL deadlocks on /addmember and /removemember to 409 Map MySQL deadlock / lock-wait timeout, Postgres deadlock_detected / serialization_failure, and SQLite busy/locked to apierrors.NewConflict in the addmember/removemember handlers so the synchronizer's retry.RetryOnConflict reissues against fresh state instead of leaking the deadlock as a 500. Adds a string-match fallback because the unified-storage resource server stringifies its error into a proto Message field, so errors.As can't reach the original mysql.MySQLError / pq.Error type by the time it arrives at the REST handler. Also trims verbose comments in store.go and the two REST handlers. * IAM: tighten comments and fix rest_members test feature flag Trim verbose comments across the team subresource changeset so each one describes the current behaviour rather than past iterations. Also fix the rest_members test to enable FlagKubernetesTeamsApi to match the production handler. apps/iam/kinds/team.cue picks up cue fmt alignment. * Format * IAM: bounds-check members[i] in concurrent addmember test gosec G602 flagged indexing into members from a `range results` loop even though both slices have the same length by construction. Add an explicit `i < len(members)` guard to make the bounds proof local. * IAM: address review feedback on team subresources - Apply isRetryableTxnError conversion to LegacyStore.Update so the full PUT path also returns 409 on transient SQL deadlocks instead of 500. - Make NewTeamAddMemberREST / NewTeamRemoveMemberREST panic at registration if the storage doesn't satisfy rest.Getter / rest.Updater, surfacing wiring bugs at startup instead of as a deferred 503. - Tolerate unknown fields in the request body to match the apiserver's forward-compatible decoding convention. - Wrap the unexpected-type guard in apierrors.NewInternalError for consistent k8s-style error handling. - Update isRetryableTxnError string fallbacks to substrings the actual drivers emit (Error 1213/1205, SQLSTATE 40P01/40001, "deadlock detected", "could not serialize"); the previous deadlock_detected / serialization_failure substrings never matched any driver output. - Add retryable_test.go covering structured matches for mysql / pgx v5 / lib/pq, wrapped chains, and a stringified-fallback suite that fails if a future dependency bump changes a driver's error format. * IAM: re-read team.updated after UPDATE to fix MySQL RV gating MySQL's DATETIME(0) silently truncates the millisecond fraction the DBTime wire format sends, so the in-memory cmd.Updated.Time we returned to the caller didn't match the value stored on disk. The next caller's PreviousUpdated comparison then mismatched, surfacing as a spurious ErrTeamUpdateConflict. Add a SELECT updated FROM team after the UPDATE inside the same transaction and return that value, so the resourceVersion the caller sees always matches what's actually stored regardless of dialect. Also refresh the iam.grafana.app v0alpha1 OpenAPI snapshot to include the new addmember/removemember subresource paths. * IAM: widen team.updated to DATETIME(3) for ms-precision RV gating MySQL DATETIME(0) silently truncated the millisecond fraction the DBTime wire format sends, so cmd.Updated.Time didn't match the value stored on disk and the next Update's PreviousUpdated comparison mismatched. SQLite stores DATETIME values as TEXT verbatim and Postgres TIMESTAMP already preserves sub-second precision, so only MySQL needs the schema bump. ALTER team MODIFY updated DATETIME(3) NOT NULL on MySQL aligns the column precision with what the code actually sends, lets the RV gate distinguish concurrent writes within the same second on MySQL too, and makes the legacy.UpdateTeam re-read of the stored value unnecessary (reverted in this commit). Also picks up the regenerated iam.grafana.app v0alpha1 OpenAPI spec and TS API client for the new addmember/removemember subresources. * IAM: Tighten team member loops and document /addmember external semantics Simplify add/remove loop logic; note in CUE that re-add preserves external.		1 day ago
.changelog-archive	Update dependency prettier to v3.6.2 (#108689 )	10 months ago
.citools	Chore: Upgrade to Go 1.26.3 (#124435 )	1 day ago
.github	CI: Enable anonymous admin auth for Meticulous container tests (#124481 )	1 day ago
.vim	…
.vscode	Chore: Move betterer eslint rules to use eslint suppressions (#106267 )	8 months ago
.yarn	Chore: upgrade to Storybook 10 (#124036 )	4 days ago
apps	IAM: Add team /addmember and /removemember subresources (#124094 )	1 day ago
conf	ImageUpload: Add presigned URL support for S3 external image storage (#119002 )	3 days ago
contribute	Internationalisation: Update documentation and expose `tOptions` on `Trans` (#124484 )	1 day ago
cue.mod	ci: add validation for cue using new make target and backend check (#121032 )	2 months ago
devenv	Table: Add option to nested table transform to auto-expand all nested rows (#123972 )	1 day ago
docs	Pyroscope: Signal UTF-8 label name support to backend API (#121864 )	1 day ago
e2e-playwright	Table: Add option to nested table transform to auto-expand all nested rows (#123972 )	1 day ago
emails	Auth: Remove passwordless (magic link) authentication backend implementation (#118881 )	1 month ago
grafana-mixin	Log Details: Show embedded trace if available (#109926 )	9 months ago
hack	Chore: Upgrade to Go 1.26.3 (#124435 )	1 day ago
kinds	Dashboards: Add enableGroupBy field to v1 ad-hoc variable schema and conversions (#121236 )	1 month ago
local	…
packages	IAM: Add team /addmember and /removemember subresources (#124094 )	1 day ago
packaging	fix: replace 'grafana-cli' with 'grafana cli' in custom Dockerfile (#122869 )	3 weeks ago
pkg	IAM: Add team /addmember and /removemember subresources (#124094 )	1 day ago
public	Table: Fix accumulating widths issue in LogsTable (#124486 )	1 day ago
scripts	Chore: Upgrade to Go 1.26.3 (#124435 )	1 day ago
tools	Alerting: Add alertmanager integration tests (#100106 )	1 year ago
.air.toml	make: build-go: add trimpath for non-dev, and debug-friendly flags for dev (#120264 )	2 months ago
.browserslistrc	…
.dockerignore	CI: Use docker build without dagger in release-build (#121828 )	1 month ago
.editorconfig	…
.gitattributes	Chore: Mark more files as generated in gitattributes (#113776 )	6 months ago
.gitignore	UPlotCompare: Remove and replace with external package (#124324 )	3 days ago
.golangci.yml	Zipkin: Remove from core plugins (#124148 )	3 days ago
.ignore	Remove support for Google Spanner database. (#105846 )	12 months ago
.levignore.js	…
.madgerc	Exclude type only imports circular dependencies check (#120075 )	2 months ago
.nvmrc	Chore: Update `node` to v24 (#112649 )	6 months ago
.nxignore	Alerting/Chore: Mock API (MSW) in browser (#89223 )	2 years ago
.policy.yml	Chore: make govulncheck non-policy-blocking (#124436 )	2 days ago
.policy.yml.tmpl	fix: wait for patch to complete (#123188 )	2 weeks ago
.prettierignore	Feature: Generate OpenFeature type-safe key augmentation (#123275 )	2 weeks ago
.prettierrc.js	…
.vale.ini	Lint only Markdown files (#101533 )	1 year ago
.yarnrc.yml	Yarn: Enable global cache (#120578 )	2 months ago
AGENTS.md	Zipkin: Remove from core plugins (#124148 )	3 days ago
CHANGELOG.md	Release: update changelog for main (#122910 )	3 weeks ago
CLAUDE.md	agents: add CLAUDE.md (#120503 )	2 months ago
CODE_OF_CONDUCT.md	…
CONTRIBUTING.md	Update CONTRIBUTING.md (#117033 )	3 months ago
Dockerfile	Chore: Upgrade to Go 1.26.3 (#124435 )	1 day ago
GOVERNANCE.md	Update dependency prettier to v3.6.2 (#108689 )	10 months ago
HALL_OF_FAME.md	Update HALL_OF_FAME.md (#102267 )	1 year ago
LICENSE	…
LICENSING.md	Actions: Introduce actionlint (#105224 )	1 year ago
MAINTAINERS.md	Adds johnny as codeowner for alerting docs (#99877 )	1 year ago
Makefile	Chore: Upgrade to Go 1.26.3 (#124435 )	1 day ago
NOTICE.md	…
README.md	add feedback survey to contributing related docs (#113168 )	6 months ago
ROADMAP.md	…
SUPPORT.md	…
WORKFLOW.md	…
crowdin.yml	Prometheus: Remove grafana-prometheus package#122953 (#123035 )	3 weeks ago
embed.go	…
eslint-suppressions.json	Explore: Fix visibility of focus ring in content outline (#124309 )	3 days ago
eslint.config.js	Zipkin: Remove from core plugins (#124148 )	3 days ago
go.mod	deps(go): bump go.uber.org/zap from 1.27.1 to 1.28.0 (#124360 )	1 day ago
go.sum	deps(go): bump go.uber.org/zap from 1.27.1 to 1.28.0 (#124360 )	1 day ago
go.work	Chore: Upgrade to Go 1.26.3 (#124435 )	1 day ago
go.work.sum	deps(go): bump github.com/fullstorydev/grpchan from 1.1.1 to 1.1.2 (#124284 )	2 days ago
i18next.config.ts	Add faceted labels filter for time series legend (#119918 )	2 months ago
jest.config.codeowner.js	Frontend coverage: show regressed files and HTML report artifact on failure (#124305 )	2 days ago
jest.config.js	Zipkin: Remove from core plugins (#124148 )	3 days ago
latest.json	…
lefthook.rc	Chore: Fix lefthook not running (#106196 )	12 months ago
lefthook.yml	Chore: remove betterer command from lefthook (#110600 )	8 months ago
lerna.json	Release: Bump version to 13.1.0-pre (#122222 )	1 month ago
nx.json	Chore: Disable tui for Nx (#109896 )	9 months ago
package.json	chore(deps): update dependency nodemailer to v8.0.7 (#124383 )	2 days ago
playwright.config.ts	Zipkin: Remove from core plugins (#124148 )	3 days ago
playwright.storybook.config.ts	Chore: Add lint rule for consistent type imports (#121336 )	1 month ago
project.json	Frontend: use custom conditions for development and build (#111685 )	5 months ago
relyance.yaml	Dashboards: Remove unused v2alpha0 schema and kindsv2 generator (#123822 )	1 week ago
stylelint.config.js	…
tsconfig.json	Build: Upgrade TypeScript to 6.0 (#118528 )	3 weeks ago
yarn.lock	chore(deps): update dependency nodemailer to v8.0.7 (#124383 )	2 days ago

README.md

The open-source platform for monitoring and observability

Grafana allows you to query, visualize, alert on and understand your metrics no matter where they are stored. Create, explore, and share dashboards with your team and foster a data-driven culture:

Visualizations: Fast and flexible client side graphs with a multitude of options. Panel plugins offer many different ways to visualize metrics and logs.
Dynamic Dashboards: Create dynamic & reusable dashboards with template variables that appear as dropdowns at the top of the dashboard.
Explore Metrics: Explore your data through ad-hoc queries and dynamic drilldown. Split view and compare different time ranges, queries and data sources side by side.
Explore Logs: Experience the magic of switching from metrics to logs with preserved label filters. Quickly search through all your logs or streaming them live.
Alerting: Visually define alert rules for your most important metrics. Grafana will continuously evaluate and send notifications to systems like Slack, PagerDuty, VictorOps, OpsGenie.
Mixed Data Sources: Mix different data sources in the same graph! You can specify a data source on a per-query basis. This works for even custom datasources.

Get started

Unsure if Grafana is for you? Watch Grafana in action on play.grafana.org!

Documentation

The Grafana documentation is available at grafana.com/docs.

Contributing

If you're interested in contributing to the Grafana project:

Start by reading the Contributing guide.
Learn how to set up your local environment, in our Developer guide.
Explore our beginner-friendly issues.
Look through our style guide and Storybook.

Share your contributor experience in our feedback survey to help us improve.

Get involved

Follow @grafana on X (formerly Twitter).
Read and subscribe to the Grafana blog.
If you have a specific question, check out our discussion forums.
For general discussions, join us on the official Slack team.

This project is tested with BrowserStack.

License

Grafana is distributed under AGPL-3.0-only. For Apache-2.0 exceptions, see LICENSING.md.