grafana

Commit Graph

Author	SHA1	Message	Date
Misi	d5f47d2a6b	IAM: Comment out DualWriter setup for Users (#108241 ) * Try 1 * Comment out DW setup for users	2 days ago
Misi	c6a6b9fdd2	IAM: Create and delete user from the legacy store (#107694 ) * Add Create for User + DualWriter setup * Add delete User * Fix delete + access check * Add tests for delete user * Add tests for create user * Fixes * Use sqlx session to fix database locked issues * wip authz checks * legacyAccessClient * Update legacyAccessClient, add tests for create user * Close rows before running other queries * Use ExecWithReturningId * Verify deletion in the tests * Add Validate and Mutate * Other changes * Address feedback * Update tests --------- Co-authored-by: Gabriel Mabille <gabriel.mabille@grafana.com>	3 days ago
Misi	713f6d1551	IAM: Move resource definitions to apps/iam step 1 (#107389 ) * wip * Use serviceaccount model from /apps/iam * revert version update * Add tembinding, userteam, other improvements * Change serviceaccounttoken spec * Revert the change of ServiceAccountToken * Revert the change of UserTeam * Clean up * Remove files that are not needed for now * Lint * Update sql query's integration tests * Fix tests * update openapi spec * Move LastSeenAt to the annotations * Updte openapi_snapshots * Change lastSeenAt annotation name	2 weeks ago
Gabriel MABILLE	3d543a336f	IAM: Register CoreRole apis (#106924 ) * IAM: Register CoreRole apis * one line store instantiation * Small refactor for readability * Add authorizer for CoreRole * Nit * Error strings should not end with punctiation * Account for error * Switch to use the local resource client * error should not start with upper casing * noopStorageErr should have a name starting with err * Update workspace * I don't know why I don't have the same output as the CI 🤷 * Dependency xOwnership * imports * Import order * Rename alias to make it clear this is legacy	3 weeks ago
Stephanie Hingtgen	ef6e28b955	K8s: Make v0alpha1 opt-in (#107056 )	4 weeks ago
Matheus Macabu	fc9f32a9f6	SQLTemplates: Add helper to ensure all templates have a test-case (#103964 ) * SQLTemplates: Add helper to ensure all templates have a test-case associated * UnifiedStorage: Add missing sql template test case * LegacyDashboards: Add sql templates fs to test cases for exhaustiveness check * RBACStore: Add sql templates fs to test cases for exhaustiveness check * LegacyIAM: Add missing sql template test cases	3 months ago
Jo	afcb551562	TeamMember: Treat null permission as member (#104195 )	3 months ago
Mariell Hoversholm	757be6365a	CI: Bump golangci-lint to 2.0.2 (#103572 )	3 months ago
Ryan McKinley	04fb9f534e	Dashboards: Only expose LibraryPanels and search on v0 (not v1+v2) (#103335 )	4 months ago
Karl Persson	fa74d1c36d	Authn: Sync authlib and update how we construct authn client interceptor (#101124 ) * Sync authlib and update how we construct authn client interceptor * Remove namespace from checker	5 months ago
Ashley Harrison	e0151528a4	API client generation: Update iam client (#99963 ) * update generated iam client * update API * with meta api * regenerate client * with identify ref --------- Co-authored-by: Ryan McKinley <ryantxu@gmail.com>	6 months ago
Ryan McKinley	b636b81b16	K8s/IAM: Use raw handler for display (not rest.Connector) (#99898 )	6 months ago
Ryan McKinley	d8b6ded101	K8s: use deprecatedInternalID label rather than SQL annotation (#99263 )	6 months ago
Ryan McKinley	680e6bc1f8	Authlib: Use types package rather than claims (#99243 )	6 months ago
Alexander Zobnin	cbb688e910	Zanzana: Remove usage from legacy access control (#98883 ) * Zanzana: Remove usage from legacy access control * remove unused * remove zanzana client from services where it's not used * remove unused metrics * fix linter	6 months ago
Ryan McKinley	5f39d2eeb0	K8s: Make GetAPIRoutes an optional interface (#97531 )	8 months ago
Karl Persson	3990637af9	IAM: remove duplicated functions (#96989 ) * Remove duplicated function and use the one provided by claims package	8 months ago
Ryan McKinley	cc6d057a18	Provisioning: Rename k8s origin metadata to repo (#96524 )	8 months ago
Karl Persson	a82d01214d	Auth: Update authlib (#94947 ) * Update authlib	9 months ago
Ryan McKinley	36c38b5310	APIServer: add prometheus.Registerer to every init request (#94684 )	9 months ago
Karl Persson	86fc8da703	RBAC: Add legacy authorization checks to teams (#94524 ) * Setup team authorization for teams * Add list filter for teams	9 months ago
Karl Persson	d75a9b6aeb	User: Pass name to list users to filter out the correct one (#94153 ) Pass name to list users to filter out the correct one	10 months ago
Adela Almasan	f9f85131a9	FieldConfig: Add support for Actions (#92874 ) Co-authored-by: Leon Sorokin <leeoniya@gmail.com>	10 months ago
Karl Persson	0160f4f72c	RBAC: Add legacy authorization checks to service accounts (#93753 ) * Extract a helper funtion to perform list with authorization checks * Add k8s verb to utils package * Construct default mapping when no custom mapping is passed * Configure authorization checks for service accounts * Fix helper and add filtering to service accounts	10 months ago
Karl Persson	c28b37a67b	RBAC: Add option to skip rbac check for specified verbs (#93654 ) * Add option to skip rbac check for specified verbs	10 months ago
Charandas	db97da3465	K8s: handle multiple versions of the same group in standalone mode (#93199 )	10 months ago
Karl Persson	2e38329026	RBAC: Add required component to perform access control checks for user api when running single tenant (#93104 ) * Unexport store and create new constructor function * Add ResourceAuthorizer and LegacyAccessClient * Configure checks for user store * List with checks if AccessClient is configured * Allow system user service account to read all users --------- Co-authored-by: Gabriel MABILLE <gamab@users.noreply.github.com>	10 months ago
Karl Persson	bc20592fd4	IAM: Add and use identity ref (#92978 ) * Add and use identity ref --------- Co-authored-by: Ryan McKinley <ryantxu@gmail.com>	11 months ago
Karl Persson	2bfa607ad0	ServiceAccount: Update service account api resource and add service account token (#92972 ) * Create own legacy store function to list service accounts and update api model * Add service account tokens as a sub resource for service accounts	11 months ago
Ryan McKinley	9338e40dc3	K8s/IAM: Move identity.grafana.app to iam.grafana.app (#92929 )	11 months ago

30 Commits (main)