169 Commits (unistore-distributor-option2)

Author	SHA1	Message	Date
Karl Persson	9ece88d585	Zanzana: bump openfga version (#94485) ... * Bump openfga * Remove internall sqlite implementation for openfga * Use sqlite implementation from openfga	7 months ago
Todd Treece	a4d919c157	Chore: Update k8s.io dependencies to v0.31.1 (#93696)	8 months ago
Santiago	aa77023008	Alerting: Fix panics when attempting to create an Alertmanager after failing (#94023)	8 months ago
Karl Persson	0160f4f72c	RBAC: Add legacy authorization checks to service accounts (#93753) ... * Extract a helper funtion to perform list with authorization checks * Add k8s verb to utils package * Construct default mapping when no custom mapping is passed * Configure authorization checks for service accounts * Fix helper and add filtering to service accounts	8 months ago
Gabriel MABILLE	6b89e3f711	go.mod: Authlib update (#93642)	8 months ago
Claudiu Dragalina-Paraipan	a8b07b0c81	[authn] use authlib client+interceptors for in-proc mode (#93124) ... * Add authlib gRPC authenticators for in-proc mode * implement `StaticRequester` signing in the unified resource client - [x] when the `claims.AuthInfo` value type is `identity.StaticRequester`, and there's no ID token set, create an internal token and sign it with symmetrical key. This is a workaround for `go-jose` not offering the possibility to create an unsigned token. - [x] update `IDClaimsWrapper` to support the scenario above - [x] Switch to using `claims.From()` in `dashboardSqlAccess.SaveDashboard()` --------- Co-authored-by: gamab <gabriel.mabille@grafana.com>	8 months ago
Karl Persson	2e38329026	RBAC: Add required component to perform access control checks for user api when running single tenant (#93104) ... * Unexport store and create new constructor function * Add ResourceAuthorizer and LegacyAccessClient * Configure checks for user store * List with checks if AccessClient is configured * Allow system user service account to read all users --------- Co-authored-by: Gabriel MABILLE <gamab@users.noreply.github.com>	8 months ago
Todd Treece	d1ffcc22d9	Playlists: Migrate to App SDK codegen (#93246)	8 months ago
Ryan McKinley	9210414782	K8s: support unstructured spec+status mutation with GrafanaMetaAccessor (#92970)	8 months ago
Claudiu Dragalina-Paraipan	3aeb8d390e	[authn] update `authlib` and `claims` versions (#93098) ... * update authlib version to latest * make update-workspace -- 2nd run * manual cleanup of old version	8 months ago
ismail simsek	6548ea377d	Chore: Bump grafana-plugin-sdk-go version to v0.247.0 (#93095) ... * Bump grafana-plugin-sdk-go version to v0.247.0 * make update-workspace * make update-workspace	8 months ago
Dave Henderson	e1090db5d9	Chore: Bump Go to 1.23.1 (#93007) ... Signed-off-by: Dave Henderson <dave.henderson@grafana.com>	9 months ago
Claudiu Dragalina-Paraipan	1ce43b4c42	[authn] update `authlib` and `claims` versions (#92987) ... * update authlib and claims versions * 2nd make update-workspace * manual fix	9 months ago
Santiago	87f4df4bc3	Remote Alertmanager: update github.com/go-openapi/runtime (v0.27.1 -> v0.28.0) (#92951)	9 months ago
Marcus Efraimsson	0a337ff3b3	Chore: Update SDK to v0.246.0 (#92938)	9 months ago
Ryan McKinley	cb484f9883	K8s: Move ResourceInfo from common to utils (#92924)	9 months ago
Todd Treece	85ef26a85d	K8s: Add generic support for status (#92378)	9 months ago
Charandas	af2e79aa83	K8s: namespace mapper should use authlib's util (#92332)	9 months ago
Todd Treece	2f01286034	Storage: Add go.mod for apistore (#92224)	9 months ago
Dave Henderson	df3d8915ba	Chore: Bump Go to 1.23.0 (#92105) ... * chore: Bump Go to 1.23.0 Signed-off-by: Dave Henderson <dave.henderson@grafana.com> * update swagger files Signed-off-by: Dave Henderson <dave.henderson@grafana.com> * chore: update .bingo/README.md formatting to satisfy prettier Signed-off-by: Dave Henderson <dave.henderson@grafana.com> * chore(lint): Fix new lint errors found by golangci-lint 1.60.1 and Go 1.23 Signed-off-by: Dave Henderson <dave.henderson@grafana.com> * keep golden file * update openapi * add name to expected output * chore(lint): rearrange imports to a sensible order Signed-off-by: Dave Henderson <dave.henderson@grafana.com> --------- Signed-off-by: Dave Henderson <dave.henderson@grafana.com> Co-authored-by: Ryan McKinley <ryantxu@gmail.com>	9 months ago
Ryan McKinley	2e60f28044	Auth: remove id token flag (#92209)	9 months ago
Karl Persson	b6540e2a18	SSOSettings: Add api:s (#92018) ... * apis: add sso setting resource * Implement Storage for sso * Rename packages * Merge identity and sso package * Update table format and expose GetNestedBool * Restructure identity api package	9 months ago
Will Browne	704b07b3f0	Plugins: Bump plugin SDK to latest (0.244.0) (#92057) ... bump SDK	9 months ago
Ryan McKinley	a0cd89860e	Identity: Add endpoint to get display info for an identifier (#91828)	9 months ago
Karl Persson	5105fb7f3a	Identity: remove GetIDClaims (#91901) ... remove GetIDClaims	9 months ago
Todd Treece	da6b02a2b0	K8s: Add k8s codegen PR check (#91903)	9 months ago
Karl Persson	8d36111420	IDForwarding: Set identity type and uid (#91830) ... * Set identity type and uid * Set uid without prefix * Update authlib version * Update to new claim name	9 months ago
Todd Treece	4ce82d3f14	Chore: Update k8s.io dependencies to v0.30.0 (#91851)	9 months ago
Karl Persson	8bcd9c2594	Identity: Remove typed id (#91801) ... * Refactor identity struct to store type in separate field * Update ResolveIdentity to take string representation of typedID * Add IsIdentityType to requester interface * Use IsIdentityType from interface * Remove usage of TypedID * Remote typedID struct * fix GetInternalID	9 months ago
Karl Persson	7f1ae1cd54	Identity: Update authlib to version that has correct commit to claims (#91784) ... * Update authlib to version that has correct commit to claims	9 months ago
Ryan McKinley	21d4a4f49e	Auth: use IdentityType from authlib (#91763)	9 months ago
Andreas Christou	24c9aad5bb	Bump grafana-azure-sdk-go and related dependencies (#91124) ... * Bump Azure SDK and related dependencies * Update go.mods * update-workspace * Update go files	10 months ago
Ryan McKinley	243c0935fc	Auth: Use claims.AuthInfo in requester (#91739)	10 months ago
Karl Persson	bcfb66b416	Identity: remove GetTypedID (#91745)	10 months ago
Todd Treece	7f155b2b6f	Chore: Add go workspace scripts (#91707)	10 months ago
Todd Treece	b4126d3bce	Chore: Update k8s.io dependencies (#91692)	10 months ago
Ryan McKinley	a223c46506	APIServer: Make TableConverter part of ResourceInfo (#91520)	10 months ago
Claudiu Dragalina-Paraipan	e2435f92f1	[authn]: add GetIDClaims() to Requester (#91387) ... * authn: add GetIDClaims() to Requester Co-Authored-By: Gabriel MABILLE <gamab@users.noreply.github.com> * authn: update StaticRequester Co-Authored-By: Gabriel MABILLE <gamab@users.noreply.github.com> * update auth/idtest/mock Co-Authored-By: Gabriel MABILLE <gamab@users.noreply.github.com> * Fix test Co-authored-by: Claudiu Dragalina-Paraipan <claudiu.dragalina@grafana.com> --------- Co-authored-by: Gabriel MABILLE <gamab@users.noreply.github.com> Co-authored-by: gamab <gabriel.mabille@grafana.com>	10 months ago
Todd Treece	e890279dcf	Chore: Add go work sync to workspace update (#91360)	10 months ago
Ryan McKinley	728150bdbd	Identity: extend k8s user.Info (#90937)	10 months ago
Ryan McKinley	ec6c6bd6c3	Identity: Add read-only identity apiserver (#90418)	10 months ago
Ryan McKinley	9db3bc926e	Identity: Rename "namespace" to "type" in the requester interface (#90567)	10 months ago
Ryan McKinley	f409f8c169	K8s/Dashboards: Implement dashboards as StorageBackend (#90295)	10 months ago
Ryan McKinley	079f0715aa	ResourceServer: Add resource server protobuf and wrapper (#90007)	11 months ago
Marcus Efraimsson	c8af659f02	Plugins: Enhanced plugin instrumentation (#90199) ... * Plugins: Enhanced plugin instrumentation * use backend.CallResourceResponseSenderFunc * sdk v0.237.0 * support admission control * cover all handlers in log and metrics middlewares * fix after review	11 months ago
Charandas	3eef9b3397	Requester/authn: check the interface for nil value to avoid false positives (#90210)	11 months ago
Charandas	c210617735	K8s: use contexthandler in standalone handler chain (#90102)	11 months ago
Ryan McKinley	9b7f9ae22e	K8s: Rename origin.key to origin.hash (#89337)	11 months ago
Karl Persson	606a74d0af	Zanzana: Initial work to run openFGA as embedded or standalone service (#89211) ... * Zanana: Initial work to run zanana as ebeddedn or standalone * Add addr settings for when remote client is used. * sync dependencies * Lock mysql driver version --------- Co-authored-by: Dan Cech <dcech@grafana.com>	11 months ago
Ryan McKinley	2173429ce2	Identity: Add static requester struct (#89190)	11 months ago