8511 Commits (0d9d392834c9121384828d15c7d528b08ac926aa)

Author	SHA1	Message	Date
github-actions[bot]	66f32f6e08	apply security patch: release-11.6.3/431-202505231801.patch	1 month ago
Josh Hunt	2a29e10117	[release-11.6.3] Provisioning: Move OSS provisioning to Run step (#106673) ... Provisioning: Move OSS provisioning to Run step (#105428) * Provisioning: Move OSS provisioning to Run step --------- (cherry picked from commit 1435eedbc4) Signed-off-by: Maicon Costa <maiconscosta@gmail.com> Co-authored-by: maicon <maiconscosta@gmail.com>	1 month ago
Josh Hunt	f9c96337cd	[release-11.6.3] Run Init Provisioners at Server Initialization (#106644) ... Run Init Provisioners at Server Initialization (#105080) * Run Init Provisioners at Server Initialization --------- Signed-off-by: Maicon Costa <maiconscosta@gmail.com> Co-authored-by: maicon <maiconscosta@gmail.com>	1 month ago
grafana-delivery-bot[bot]	0a757fae39	[release-11.6.3] CloudMigrations: Omit autoincremented id for alert snapshots (#106638) ... CloudMigrations: Omit autoincremented id for alert snapshots (#106598) If you tried to migrate alerts from two differente sources/on-prem instances, the autoincremented numeric id would be the same, and since we were creating the resource in cloud with that same id (the API accepts it), it would return an error "conflicting alert rule found" because that id is the primary key on the table. We simply omit the numeric id now and let the API for the cloud instance generate it. (cherry picked from commit a1f2693fd8) Co-authored-by: Matheus Macabu <macabu@users.noreply.github.com>	1 month ago
Vadim Stepanov	f20d489540	[release-11.6.3] Alerting: Provisioning API returns 403 on quota exceeded for rule group PUT (#106487) ... Alerting: Provisioning API returns 403 on quota exceeded for rule group PUT (#106409) (cherry picked from commit 1df888c517)	1 month ago
grafana-delivery-bot[bot]	1c29264558	[release-11.6.3] SQLStore: Add index on is_service_account and last_seen_at columns in user table. (#106233)	2 months ago
Alexander Zobnin	e0ca1e5b1c	[release-11.6.3] RBAC: Dont additionally cache all users permissions (#106146) ... RBAC: Don't additionally cache all users permissions (#105607) * RBAC: Don't additionally cache all users permissions * remove unused tests (cherry picked from commit cfba630f5c)	2 months ago
github-actions[bot]	679039d525	apply security patch: release-11.6.2/404-202504151210.patch	2 months ago
Michael Mandrus	afacebf16e	CloudMigrations: Fix issues with snapshot resource limits (#105425) (#105624) ... * CloudMigrations: Fix issues with snapshot resource limits (#105425) * fix bulk inserts * commit progress so cursor doesn't sabotage me * add more tests * get everything working * rename variable * update comment * regen mocks, fix k8s list method maybe * fix bug with duplicate entries * lint * Snapshots: Use slices.Chunk for batching inserts * remove extra linebreak --------- Co-authored-by: Matheus Macabu <macabu.matheus@gmail.com> * manually add unit tests * make postgres integration tests happy --------- Co-authored-by: Matheus Macabu <macabu.matheus@gmail.com>	2 months ago
Artur Wierzbicki	59cdce6127	[release-11.6.2] Live: bump centrifuge (#105471) ... * Live: bump centrifuge (#105214) * bump centrifuge * make update-workspace (cherry picked from commit d91e4b0582) * fix compilation error	2 months ago
William Wernert	df92cf28cd	[release-11.6.2] Alerting: Ensure field validators return the proper type (#105284) ... Alerting: Ensure field validators return the proper type (#104050) * Ensure field validators return the proper type This ensures correct error propagation through services up to the API layer. * Move error wrapping up to call site (cherry picked from commit 820c338414)	2 months ago
Artur Wierzbicki	d62e13f9d0	[release-11.6.2] Live: logging fix (#105075) ... Live: logging fix (#105054) logg fix (cherry picked from commit c781b0922e)	2 months ago
Kevin Yu	760b9176fc	[release-11.6.1] Prometheus: Add support for cloud partners Prometheus data sources (#103941) ... Prometheus: Add support for cloud partners Prometheus data sources (#103482) * wip * Add prom flavor support for data source variables and export/import dashboards (#103321) * add dashboard and data source var selection * use match plugin id instead * use updated matchpluginid * formatting * cleanup * regex anchor * update error msg * Alerting: Clean up prometheus-flavored types and functions (#103703) * clean up types and utility functions for dealing with prometheus-flavored data sources * Refactor alerting datasource types to use constants as source of truth * Alerting: Clean up prometheus-flavored types and functions on the bac… (#103716) Alerting: Clean up prometheus-flavored types and functions on the backend * add matchPluginId tests * Update matchPluginId func to bidirectional (#103746) * update matchpluginid func to bidirectional * lint * formatting * use actual isSupportedExternalRulesSourceType in test * add tests in datasource_srv * betterer * remove type assertion * remove unnecessary case * use satisifies to not have to convert tuple to an array of string * add prometheus_flavor test --------- Co-authored-by: Andrew Hackmann <5140848+bossinc@users.noreply.github.com> Co-authored-by: Gilles De Mey <gilles.de.mey@gmail.com> Co-authored-by: Alexander Akhmetov <me@alx.cx> (cherry picked from commit fd6fd91115)	3 months ago
xavi	f393fb76e4	[release-11.6.1] [IAM] Prepend AppSubURL to redirectURI before validating it (#103875) ... [IAM] Prepend AppSubURL to redirectURI before validating it (#103475) (cherry picked from commit 5053aa576d)	3 months ago
Mariell Hoversholm	7a8ca707f9	[release-11.6.1] Go: Bump to 1.24.2 (#103523) ... * Go: Bump to 1.24.2 It is not likely we are actually affected by the CVEs, but updating proactively is not a bad idea nonetheless. Fixes: CVE-2025-22871 Fixes: https://github.com/grafana/grafana-operator-experience-squad/issues/1311 * CI: Update golangci-lint * feat: update swagger * feat: update swagger * fix: remove enterprise imports	3 months ago
Yuri Tseretyan	b6bc0eeb3f	[release-11.6.0] Alerting: Add migration to clean up rule versions table (#102562) ... Alerting: Add migration to clean up rule versions table (#102484) * add migration to clean up rule versions * drop index right before creating a new one. * fetch only rules which version greater than toKeep (cherry picked from commit 24ebacb10b)	4 months ago
Alexander Akhmetov	07698ebbaa	Revert "[release-11.6.0] Alerting: Add an index to alert_rule_versiontable on (rule_org_id, rule_uid) (#102353)" (#102367) ... Revert "[release-11.6.0] Alerting: Add an index to alert_rule_version table on (rule_org_id, rule_uid) (#102353)" This reverts commit c3a547e1c9.	4 months ago
Alexander Akhmetov	c3a547e1c9	[release-11.6.0] Alerting: Add an index to alert_rule_version table on (rule_org_id, rule_uid) (#102353) ... Alerting: Add an index to alert_rule_version table on (rule_org_id, rule_uid) (#102347) (cherry picked from commit 9491fa1895)	4 months ago
Stephanie Hingtgen	b56db69b32	K8s: Dashboard History: Improve Error Handling (#101816)	4 months ago
Stephanie Hingtgen	9651505cb7	K8s: Dashboards: Fix provisioning (#101844)	4 months ago
Stephanie Hingtgen	473c0b5e89	K8s: Fix plugin updater (#101843)	4 months ago
Matthew Jacobson	19b878ce66	Alerting: Include time range in template dashboard and panel urls (#101095) ... Alerting: Include time range in templated dashboard and panel urls Time range: from=Alert.StartsAt-1hr Firing Alerts: to=Current Timestamp Resolved Alerts: to=Alert.EndsAt	4 months ago
Juan Cabanas	5e21b9e2d1	Invite User: Add invite user button in top bar (#101809)	4 months ago
Matthew Jacobson	b73c59547c	Alerting: Re-encrypt existing contact points before get and patch in legacy config API (#101263) ... * Test covering Get+Save interaction for newly secret fields * Alerting: Re-encrypt existing contact points before get and patch	4 months ago
Yuri Tseretyan	dc75b454f5	Alerting: Improve performance of the setting GUID during migration (#101800)	4 months ago
Alexander Akhmetov	48ea9b08a2	Alerting: Add recording rule target datasource support to Prometheus conversion API (#101799) ... What is this feature? Adds target datasource UID to the recording rules so that they write to the same datasource used for alerting rule queries after the import. Why do we need this feature? Target datasourse support was added in #101678, and under a feature flag grafanaManagedRecordingRulesDatasources (#101778). This PR makes the importing process: Check if the import contains recording rules Verify both recording rules and the grafanaManagedRecordingRulesDatasources feature flag are enabled If either check fails, return an error If both checks pass, create recording rules with the provided datasource UID set as both the query and target datasource	4 months ago
Jean-Philippe Quéméner	2e0d2f3c76	fix(unified-storage): break dependency from dualwriter in resource module (#101788)	4 months ago
Gabriel MABILLE	6a1e5dd128	AuthZ: Test List (#101721) ... * Authz: Test List * Anonymous case * Cover rendering	4 months ago
Steve Simpson	14ebec527c	Alerting: Allow selection of recording rule write target on per-rule basis. (#101778) ... * Alerting: Allow selection of recording rule write target on per-rule basis. Introduces a new feature flag (`grafanaManagedRecordingRulesDatasources`), disabled by default, to enable the ability to write recording rules data using data source settings, and selecting the data source to use on a per-rule basis. To cope with the scenario of users upgrading, a configuration file option allows setting the default data source to use, if none is specified in the rule, emulating the behaviour of recording rules without the flag enabled. * Lint * Update conf/sample.ini Co-authored-by: Alexander Akhmetov <me@alx.cx> --------- Co-authored-by: Alexander Akhmetov <me@alx.cx>	4 months ago
Matheus Macabu	5917ed8227	Hackaton: Add more unit tests, take 4 (#101704) ... * cloudmigration/cloudmigrationimpl: run integration tests in parallel * tsdb/mysql: run tests with actual service and instance manager * pluginsintegration/angulardetectorsprovider: reduce job interval in test * util: extract test that should only be ran with -race enabled and unskip it	5 months ago
Steve Simpson	cc80681beb	Alerting: Extend recording rules test to exercise writing with data sources. (#101775) ... The change to use WriteDatasource was done in a previous commit, this adds a test case using DatasourceWriter, in addition to the one using PrometheusWriter.	5 months ago
Alexander Akhmetov	0fa2dbdcdc	Alerting: Generate deterministic UID for folders created for Prometheus rule conversion (#101760)	5 months ago
Misi	d3b3186713	Auth: Make ssoSettingsSAML GA and enabled by default (#101766) ... Make ssoSettingsSAML GA and enabled by default	5 months ago
Steve Simpson	872fbf0208	Alerting: Implement arbitrary data source remote writer. (#101735) ... * Alerting: Implement arbitrary data source remote writer. Recording rules currently remote write to the endpoint speficied in the configuration file, but we want to change this so that it can be specified on a per-rule basis. This change implements the updated RemoteWriter interface, and dispatches writes to the correct data source. Notes about the implementation: - There is a defaulting behaviour, because we will need to handle situations when upgrading from older Grafana versions, where recording rules do not a data source target specified. - In order to avoid re-creating the remote write clients for every request, a cache is used. The entries have a TTL of 30 seconds at which point they are recreated; this is the delay for picking up new data source settings. Known limitations: - There is no per data source configuration for the remote write path suffix. - Not all data source settings will be used, but basic auth and TLS will be. - There is no RBAC. This will be a follow up feature. * Lint	5 months ago
Alexander Akhmetov	aa5f2e43d4	Alerting: Use upsert to set or update provenance (#101688) ... Alerting: Use upsert to update provenance	5 months ago
Stephanie Hingtgen	c8278a88c2	Revert "K8s: Fix plugin updater" (#101739) ... Revert "K8s: Fix plugin updater (#101646)" This reverts commit 605a4cbff9.	5 months ago
colin-stuart	32624b3251	Tests: skip failing test TestMigrateToSpannerDialect (#101730) ... skip failing test TestMigrateToSpannerDialect	5 months ago
Lucy Chen	5996e102af	Image Render: Propagate traces in HTTP mode (#100559) ... * Rendering: Propagate traces in HTTP mode * update ini file * update docs * update doc * fix imports * fix go files * fix CI * update ini config * remove servicename --------- Co-authored-by: AgnesToulet <35176601+AgnesToulet@users.noreply.github.com> Co-authored-by: nmarrs <nathanielmarrs@gmail.com>	5 months ago
Alexander Akhmetov	a93a05aebd	Alerting: Support group-level labels in Prometheus to Grafana conversion (#101624)	5 months ago
Steve Simpson	eed07cf503	Alerting: Refactor NewPrometheusWriter function. (#101706) ... * Alerting: Refactor NewPrometheusWriter function. In order to re-use PrometheusWriter, changing the function take a PrometheusWriterConfig instead of RecordingRulesSettings, and adapt the old interface onto the new interface. * Make linter happy	5 months ago
Peter Štibraný	9e690bd620	Spanner support enhancements (#101634) ... * Adds ability to run integration tests against spanner (by using GRAFANA_TEST_DB=spanner env variable. SPANNER_DB variable then specifies database to use: spannertest, emulator or string like /projects/<project>/instances/<instance>/databases/<db>) * Adds feature to migration dialects to create database from a snapshot, instead of running individual migrations. * Adds first version of Spanner snapshot, prepared from "OSS" migrations. * Uses generated bit-reversed-positive values instead of auto_increment. (As an experiment)	5 months ago
Karl Persson	43f56c5ca1	Apiserver: Refactor authenticator and authorizers (#101449) ... * Clean up authenticator * Cleanup authorizers and replace org_id and stack_id with namespace authorizer * Remove dependency on org service * Extract orgID from /apis/ urls and validate stack id	5 months ago
Tania	c9ab1142e1	Add OpenFeature providers (#101071) ... * Add OpenFeature provider * Simplify static provider * Linting * Apply review feedback * Codeowner for deps * Update pkg/services/featuremgmt/openfeature.go Co-authored-by: Dave Henderson <dave.henderson@grafana.com> * Apply review comments part2 * Remove from sample.ini for now * fixup! Apply review comments part2 * Add example of context config * Resolve conflict * Run update workspaces --------- Co-authored-by: Dave Henderson <dave.henderson@grafana.com>	5 months ago
Steve Simpson	b7dcfcedcb	Alerting: Extend recording rule definitions/interfaces with data source. (#101678) ... Extend the recording rule definition to include the target data source, allowing configuration of where the output of the recording rule is written to. Also extends the relevant interfaces in preparation for the next set of changes.	5 months ago
Robby Milo	13cf67de53	Remove relref shortcodes (#101694) ... * manually replce all shared relrefs * relref replace - grafana next * Merge branch 'master' into robbymilo/relref-replace-grafana-next * manual fixes * remove ref shortcode * Merge branch 'master' into robbymilo/relref-replace-grafana-next * prettier * fix test * update readme	5 months ago
Gabriel MABILLE	6accf13597	AuthZService: Test Check (#101675) ... * wip * deny case * Reorganise * WIP * Check cache * Add anonymous test * Add test for rendering * Lint import * Refactor slightly * more input validation coverage * Require user * typo	5 months ago
Mariell Hoversholm	904d58e936	SQLStore: Introduce new test infra (#101676) ... This creates the new testinfra. It is not used anywhere yet.	5 months ago
Gabriel MABILLE	a91081a2fc	AuthZService: Add certificates to the client (#101603)	5 months ago
Alexander Akhmetov	ec7a0db54d	Alerting: Return 400 if the Prometheus rule has unsupported options (#101616)	5 months ago
Ryan McKinley	a1d5e5dad1	K8s/Swagger: Avoid */* media type (#101658) ... * avoid */* * use application/yaml * fix lint	5 months ago