grafana

Commit Graph

Author	SHA1	Message	Date
Jo	5340a6e548	Auth: Extended JWT client for OBO and Service Authentication (#83814 ) * reenable ext-jwt-client * fixup settings struct * add user and service auth * lint up * add user auth to grafana ext * fixes * Populate token permissions Co-authored-by: jguer <joao.guerreiro@grafana.com> * fix tests * fix lint * small prealloc * small prealloc * use special namespace for access policies * fix access policy auth * fix tests * fix uncalled settings expander * add feature toggle * small feedback fixes * rename entitlements to permissions * add authlibn * allow viewing the signed in user info for non user namespace * fix invalid namespacedID * use authlib as verifier for tokens * Update pkg/services/authn/clients/ext_jwt.go Co-authored-by: Gabriel MABILLE <gamab@users.noreply.github.com> * Update pkg/services/authn/clients/ext_jwt_test.go Co-authored-by: Gabriel MABILLE <gamab@users.noreply.github.com> * fix parameter names * change asserts to normal package * add rule for assert * fix ownerships * Local diff * test and lint * Fix test * Fix ac test * Fix pluginproxy test * Revert testdata changes * Force revert on test data --------- Co-authored-by: gamab <gabriel.mabille@grafana.com> Co-authored-by: Gabriel MABILLE <gamab@users.noreply.github.com>	2 years ago
linoman	147154d2ea	Remove AuthConfigUIAdminAccess (#85452 ) * Remove AuthConfigUIAdminAccess	2 years ago
Bruno	a2e21eac8c	Cloud migrations: create endpoint to create an access token (#84690 ) * fix merge conflicts * make token expiration configurable	2 years ago
Timur Olzhabayev	e9db9106c1	Chore: Disable angular support by default (#84738 ) * Flipping angular support to disabled by default	2 years ago
Eric Leijonmarck	2f7fd729ef	Auth: Enable case insensitive logins/emails by default (#84840 ) * wip * wip * wip * wip postgres tests	2 years ago
chalapat	65c0669f01	Server: Reload TLS certs without a server restart (#83589 ) * server: reload of grafana server certs when renewed without restart. Signed-off-by: Rao, B V Chalapathi <b_v_chalapathi.rao@nokia.com> * server: reload of grafana server certs when renewed without restart. Signed-off-by: Rao, B V Chalapathi <b_v_chalapathi.rao@nokia.com> * Update http_server.go * Update docs/sources/setup-grafana/configure-grafana/_index.md Co-authored-by: Christopher Moyer <35463610+chri2547@users.noreply.github.com> * Update http_server.go Address the comments * Update docs/sources/setup-grafana/configure-grafana/_index.md Co-authored-by: Dan Cech <dan@aussiedan.com> * Update http_server.go Align the spaces * Update http_server.go * Update http_server.go * Update pkg/api/http_server.go Co-authored-by: Dan Cech <dan@aussiedan.com> --------- Signed-off-by: Rao, B V Chalapathi <b_v_chalapathi.rao@nokia.com> Co-authored-by: Christopher Moyer <35463610+chri2547@users.noreply.github.com> Co-authored-by: Dan Cech <dan@aussiedan.com>	2 years ago
Eric Leijonmarck	bb792ff540	Auth: Remove oauth skip org role sync (#84972 ) * remove oauth wide skip org role sync * we are warning from config * set it to false * removed from config ini files and updated docs	2 years ago
Andreas Christou	7c3f621688	Chore: Update grafana-azure-sdk-go (#84741 ) * Update grafana-azure-sdk-go * Update test	2 years ago
Gilles De Mey	8765c48389	Alerting: Remove legacy alerting (#83671 ) Removes legacy alerting, so long and thanks for all the fish! 🐟 --------- Co-authored-by: Matthew Jacobson <matthew.jacobson@grafana.com> Co-authored-by: Sonia Aguilar <soniaAguilarPeiron@users.noreply.github.com> Co-authored-by: Armand Grillet <armandgrillet@users.noreply.github.com> Co-authored-by: William Wernert <rwwiv@users.noreply.github.com> Co-authored-by: Yuri Tseretyan <yuriy.tseretyan@grafana.com>	2 years ago
Misi	63f1c30313	Auth: Set the default org after User login (#83918 ) * poc * add logger, skip hook when user is not assigned to default org * Add tests, move to hook folder * docs * Skip for OrgId < 1 * Address feedback * Update docs/sources/setup-grafana/configure-grafana/_index.md * lint * Move the hook to org_sync.go * Update pkg/services/authn/authnimpl/sync/org_sync.go * Handle the case when GetUserOrgList returns error --------- Co-authored-by: Christopher Moyer <35463610+chri2547@users.noreply.github.com> Co-authored-by: Karl Persson <kalle.persson@grafana.com>	2 years ago
Josh Hunt	1ab8857e48	E2C: Add cloud migration is_target server config option (#83419 )	2 years ago
Yuri Tseretyan	7147af6b8e	Alerting: Disable legacy alerting for ever (#83651 ) * hard disable for legacy alerting * remove alerting section from configuration file * update documentation to not refer to deleted section * remove AlertingEnabled from usage in UA setting parsing	2 years ago
Ieva	2c5b72e844	AuthZ: add headers for IP range AC checks for data source proxy requests (#81662 ) * add a middleware that appens headers for IP range AC to data source proxy requests * update code * add tests * fix a mistake * add logging * refactor to reuse code * small cleanup * skip the plugins middleware if the header is already set * skip the plugins middleware if the header is already set	2 years ago
Carl Bergquist	b3efb4217e	Cfg: Adds experimental scope grafana.ini settings (#83174 ) Signed-off-by: bergquist <carl.bergquist@gmail.com>	2 years ago
Jo	36a19bfa83	AuthProxy: Allow disabling Auth Proxy cache (#83755 ) * extract auth proxy settings * simplify auth proxy methods * add doc mentions	2 years ago
Misi	75b020c19d	Cfg: Add a setting to configure if the local file system is available (#83616 ) * Introduce environment.local_filesystem_available * Only show TLS client cert, client key, client ca when local_filesystem_available is true * Rename LocalFSAvailable to LocalFileSystemAvailable	2 years ago
Yuri Tseretyan	6a11bee6af	Alerting: Deprecate max_annotations_to_keep and max_annotation_age in [alerting] configuration section (#83266 ) * introduce new config section [unified_alerting.state_history.annotations] and deprecate settings in [alerting] Co-authored-by: brendamuir <100768211+brendamuir@users.noreply.github.com>	2 years ago
Khushi Jain	d02de5ddb9	Image Rendering: Add settings for default width, height and scale (#82040 ) * Add Image width & height * ability to change default width, height and scale * default ini * Update conf/defaults.ini Co-authored-by: Agnès Toulet <35176601+AgnesToulet@users.noreply.github.com> * Update pkg/setting/setting.go Co-authored-by: Agnès Toulet <35176601+AgnesToulet@users.noreply.github.com> * Update pkg/setting/setting.go Co-authored-by: Agnès Toulet <35176601+AgnesToulet@users.noreply.github.com> * Added docs, changed frontend * Update conf/defaults.ini Co-authored-by: Agnès Toulet <35176601+AgnesToulet@users.noreply.github.com> * Update conf/defaults.ini Co-authored-by: Agnès Toulet <35176601+AgnesToulet@users.noreply.github.com> * Update conf/defaults.ini Co-authored-by: Agnès Toulet <35176601+AgnesToulet@users.noreply.github.com> * Update docs/sources/setup-grafana/configure-grafana/_index.md Co-authored-by: Agnès Toulet <35176601+AgnesToulet@users.noreply.github.com> * Update pkg/api/dtos/frontend_settings.go Co-authored-by: Agnès Toulet <35176601+AgnesToulet@users.noreply.github.com> * Update pkg/api/frontendsettings.go Co-authored-by: Agnès Toulet <35176601+AgnesToulet@users.noreply.github.com> * Update pkg/api/render.go Co-authored-by: Agnès Toulet <35176601+AgnesToulet@users.noreply.github.com> * add query float 64 * Update packages/grafana-runtime/src/config.ts Co-authored-by: Agnès Toulet <35176601+AgnesToulet@users.noreply.github.com> * Update public/app/features/dashboard/components/ShareModal/utils.ts Co-authored-by: Agnès Toulet <35176601+AgnesToulet@users.noreply.github.com> * spacing * fix tests * Update docs/sources/setup-grafana/configure-grafana/_index.md Co-authored-by: Christopher Moyer <35463610+chri2547@users.noreply.github.com> * Update docs/sources/setup-grafana/configure-grafana/_index.md Co-authored-by: Christopher Moyer <35463610+chri2547@users.noreply.github.com> * Update docs/sources/setup-grafana/configure-grafana/_index.md Co-authored-by: Christopher Moyer <35463610+chri2547@users.noreply.github.com> --------- Co-authored-by: Agnès Toulet <35176601+AgnesToulet@users.noreply.github.com> Co-authored-by: Christopher Moyer <35463610+chri2547@users.noreply.github.com>	2 years ago
Ieva	19b1e71fee	IP range AC for data sources: compare the base of the URL only (#83305 ) * compare the base of the URL and ignore the path * change the logic to compare scheme and host explicitly * fix the test	2 years ago
Xavi Lacasa	46c26bbd0b	Auth: Fix email verification bypass when using basic authentication (#82914 )	2 years ago
linoman	ac84069071	Password policy (#82268 ) * add password service interface * add password service implementation * add tests for password service * add password service wiring * add feature toggle * Rework from service interface to static function * Replace previous password validations * Add codeowners to password service * add error logs * update config files --------- Co-authored-by: Karl Persson <kalle.persson@grafana.com>	2 years ago
Jo	6f62d970e3	JWT Authentication: Add support for specifying groups in auth.jwt for teamsync (#82175 ) * merge JSON search logic * document public methods * improve test coverage * use separate JWT setting struct * correct use of cfg.JWTAuth * add group tests * fix DynMap typing * add settings to default ini * add groups option to devenv path * fix test * lint * revert jwt-proxy change * remove redundant check * fix parallel test	2 years ago
Agnès Toulet	28e66b4ad8	Rendering: Adds PDF support behind feature toggle (#81811 ) * start pdf refactor * Update AppChrome.tsx * Update AppChrome.tsx * add encoding param to rendering grpc service * fix plugin mode * clean up * fix backend tests * fix lint errors * Support pdf encoding in render http api --------- Co-authored-by: Torkel Ödegaard <torkel@grafana.com>	2 years ago
Isabella Siu	81da3ff753	CloudWatch: Remove dependencies on grafana/pkg/setting (#81208 )	2 years ago
Diego Augusto Molina	b02f0b926a	Settings: Fix data race when dynamically overriding settings with environment variables (#81667 ) Chore: Fix data race when dynamically overriding settings with environment variables	2 years ago
Ryan McKinley	795eb4a8d8	K8s/Snapshots: Add dashboardsnapshot api group (#77667 )	2 years ago
lean.dev	7ab833d28c	Licensing: Redact license when overriden by env variable (#81726 )	2 years ago
Ieva	c310a20966	AuthZ: add headers for IP range AC checks for cloud data sources (#80208 ) * add feature toggle * add a middleware that appens headers for IP range AC * sort imports * sign IP range header and only append it if the request is going to allow listed data sources * sign a random generated string instead of IP, also change the name of the middleware to make it more generic * remove the DS IP range AC options from the config file; remove unwanted change * add test * sanitize the URLs when comparing * cleanup and fixes * check if X-Real-Ip is present, and set the internal request header if it is not present * use split string function from the util package	2 years ago
ismail simsek	a3fda08d4e	Datasources: Add concurrency number to the settings (#81212 ) add concurrency to the settings	2 years ago
Misi	8246d97587	Auth: Introduce `configurable_providers` config option for SSO settings (#80911 ) * Add SSOSettingsConfigurableProviders config option * Add check to Delete and ListWithRedactedSecrets * Add check to GET, small improvements	2 years ago
Marcus Efraimsson	6768c6c059	Chore: Remove public vars in setting package (#81018 ) Removes the public variable setting.SecretKey plus some other ones. Introduces some new functions for creating setting.Cfg.	2 years ago
colin-stuart	e241188f00	Auth: Implement the SSO Settings List endpoint (#80769 ) * add list endpoint & initial tests * add tests and ETag * format service_test.go * add list swagger param, generate openAPI, remove ETag, use RedactedPassword * correct swagger param name * Align tests to latest changes * use setting.RedactedValue() * add string assertion * lint & require no error on res.Body.Close() * add custom response type --------- Co-authored-by: Mihaly Gyongyosi <mgyongyosi@users.noreply.github.com>	2 years ago
Mihai Doarna	39e4f8ec1b	Auth: configure SSO settings reload interval from the ini file (#80290 ) * configure sso reload interval from ini file * change section name to sso_settings	2 years ago
Jo	5ae3249c36	Auth: Hide forgot password if grafana auth is disabled (#79895 ) * hide forgot password if grafana auth is disabled * fix test	2 years ago
Todd Treece	feb7b38fba	Metrics: Add commit & version to grafana_environment_info (#79823 )	2 years ago
Karl Persson	05d1ce4026	Auth: id response header (#79757 ) * Add utility function to check if namespace is any of * Refactor code to use identity interface	2 years ago
Agnès Toulet	fdaf6e3f2e	PublicDashboards: Add setting to disable the feature (#78894 ) * Replace feature toggle with configuration setting * Fix permission alert * Update documentation * Add back feature toggle * revert unwanted commited changes * fix tests * run prettier * Update SharePublicDashboard.test.tsx * fix linter and frontend tests * Update api.go * Apply docs edit from code review Co-authored-by: Isabel <76437239+imatwawana@users.noreply.github.com> * Update index.md * Update docs/sources/setup-grafana/configure-grafana/feature-toggles/index.md Co-authored-by: Agnès Toulet <35176601+AgnesToulet@users.noreply.github.com> * Update docs/sources/setup-grafana/configure-grafana/_index.md Co-authored-by: Agnès Toulet <35176601+AgnesToulet@users.noreply.github.com> * add isPublicDashboardsEnabled + test * fix test * update ff description in registry * move isPublicDashboardsEnabled * revert getConfig() update --------- Co-authored-by: Isabel <76437239+imatwawana@users.noreply.github.com> Co-authored-by: Christopher Moyer <35463610+chri2547@users.noreply.github.com>	2 years ago
Misi	ce1450d4d3	Chore: Configure SkipOrgRoleSync from OAuthInfo for OAuth connectors (#79443 ) * Configure SkipOrgRoleSync from OAuthInfo * Remove skipOrgRoleSync from socialbase and connectors * Add test to socialimpl.ProvideService * Deprecate AuthSettings' fields * clean up misleading init of frontendsettings.Auth	2 years ago
owensmallwood	d5b9602a79	Config: Can add static headers to email messages (#79365 ) * Can add allowed custom headers to an email Message. WIP. * adds slug as a custom email header to all outgoing emails * Headers are static - declared as key/value pairs in config. All static headers get added to emails. * updates comment * adds tests for parsing smtp static headers * updates test to assert static headers are included when building email * updates test to use multiple static headers * updates test names * fixes linting issue with error * ignore gocyclo for loading config * updates email headers in tests to be formatted properly * add static headers first * updates tests to assert that regular headers like From cant be overwritten * ensures only the header is in a valid format for smtp and not the value * updates comment and error message wording * adds to docs and ini sample files * updates smtp.static_headers docs examples formatting * removes lines commented with semi colons * prettier:write * renames var	2 years ago
Giuseppe Guerra	0d1d437c86	Plugins: Add forward_host_env_vars setting (#79333 ) * Plugins: Add forward_host_env_vars_plugins setting * Renamed forward_host_env_vars_plugins to forward_host_env_vars * Add readPluginIDsList * refactoring * lint * Use util.SplitString	2 years ago
Jo	3647ba7360	Anonymous: Add configurable device limit (#79265 ) * Anonymous: Add device limiter * break auth if limit reached * fix typo * refactored const to make it clearer with expiration * anon device limit for config --------- Co-authored-by: Eric Leijonmarck <eric.leijonmarck@gmail.com>	2 years ago
Giuseppe Guerra	f76b9f266e	Plugins: Add hide_angular_deprecation setting (#79296 ) * Add plugins.hide_angular_deprecation config ini * Add more tests * Remove the ability to use [plugins.*] hide_angular_deprecation	2 years ago
Todd Treece	ea36336c0a	Chore: Ensure BuildVersion is set when using CDN (#79169 )	2 years ago
Matthew Jacobson	5a80962de9	Alerting: Add clean_upgrade config and deprecate force_migration (#78324 ) * Alerting: Add clean_upgrade config and deprecate force_migration Upgrading to UA and rolling back will no longer delete any data by default. Instead, each set of tables will remain unchanged when switching between legacy and UA. As such, the force_migration config has been deprecated and no extra configuration is required to roll back to legacy anymore. If clean_upgrade is set to true when upgrading from legacy alerting to Unified Alerting, grafana will first delete all existing Unified Alerting resources, thus re-upgrading all organizations from scratch. If false or unset, organizations that have previously upgraded will not lose their existing Unified Alerting data when switching between legacy and Unified Alerting. Similar to force_migration, it should be kept false when not needed as it may cause unintended data-loss if left enabled. --------- Co-authored-by: Christopher Moyer <35463610+chri2547@users.noreply.github.com>	2 years ago
Karl Persson	21f94c5b78	Auth: id response header (#77871 ) * Add config options for identity id response header * Add feature to add identity id response header to all responses * Use util.SplitString	2 years ago
Gabriel MABILLE	b6b86bb0b3	RBAC: Check `plugins:install` globally (#78438 ) * RBAC: Check plugins:install globally * Add disclamer to the RBACSingleOrganization config option	2 years ago
Esteban Beltran	5a2127c221	Sandbox: Fix configuration key for sandbox exceptions (#78317 ) * Sandbox: Disable incident app inside the sandbox code * Fix wrong key for default config and config key * Rllback file	2 years ago
Dan Cech	c330b7d18d	Chore: Update settings to support k8s needs (#78235 ) use util.SplitString, implement DynamicSection KeysHash	2 years ago
Ryan McKinley	dec9a07738	Settings: Actually deprecate access to feature flags (#78073 )	2 years ago
Ryan McKinley	3509a5abb9	FeatureFlags: Cleanup usage of cfg.IsFeatureToggleEnabled (#78014 )	2 years ago

1 2 3 4 5 ...

608 Commits (41e4b95b51a00f44facbde969efe9a6229107a54)