grafana

Commit Graph

Author	SHA1	Message	Date
Ryan McKinley	025b2f3011	Chore: use any rather than interface{} (#74066 )	2 years ago
Joan López de la Franca Beltran	cc65b4d46a	Secrets: Make the Migrator extensible (#67307 ) * [Chore] Remove setting provider from secret service Co-authored-by: Tania B <yalyna.ts@gmail.com> Co-authored-by: Joan López de la Franca Beltran <joanjan14@gmail.com> * Add a ShouldBeRedacted func Co-authored-by: Tania B <yalyna.ts@gmail.com> Co-authored-by: Joan López de la Franca Beltran <joanjan14@gmail.com> * Secrets: Make Migrator extensible Co-authored-by: Gabriel MABILLE <gamab@users.noreply.github.com> Co-authored-by: Tania B <yalyna.ts@gmail.com> * Alerting: Fix tests after refactor Co-authored-by: Gabriel MABILLE <gamab@users.noreply.github.com> Co-authored-by: Tania B <yalyna.ts@gmail.com> * Remove commented code no longer used * Fix Wire bindings Co-authored-by: Tania B <yalyna.ts@gmail.com> * Add constructors to secrets * Linting * Undo undesired change --------- Co-authored-by: gamab <gabi.mabs@gmail.com> Co-authored-by: Tania B <yalyna.ts@gmail.com> Co-authored-by: Gabriel MABILLE <gamab@users.noreply.github.com>	2 years ago
Serge Zaitsev	bc2813ef06	Chore: Fix goimports grouping in pkg/services (#62420 ) * fix goimports * fix goimports order	2 years ago
Joan López de la Franca Beltran	c4e067d49d	Encryption: Cache new DEKs (only) after a caution period (#60664 ) * Encryption: Cache new DEKs (only) after commit * Fix typo * Update secrets manager tests with new failing case * Update secrets manager tests with new clarifications (comments) * Correct broken method calls * Unify methods * Cache data keys only after a caution period * Caution period for data keys caching only for encrypt ops	2 years ago
Kristin Laemmert	05709ce411	chore: remove sqlstore & mockstore dependencies from (most) packages (#57087 ) * chore: add alias for InitTestDB and Session Adds an alias for the sqlstore InitTestDB and Session, and updates tests using these to reduce dependencies on the sqlstore.Store. * next pass of removing sqlstore imports * last little bit * remove mockstore where possible	3 years ago
Joan López de la Franca Beltran	28e27e1365	Encryption: De-duplicate encryption code with extensible service (#52472 ) * Encryption: De-duplicate encryption code with extensible service * Fix Wire injections * Fix tests * Register reload handler	3 years ago
Joan López de la Franca Beltran	7b40322bbe	Encryption: Add support to run secrets migrations even when EE is disabled (#51705 ) * Encryption: Move secrets migrations into secrets.Migrator * Encryption: Refactor secrets.Service initialization * Encryption: Add support to run secrets migrations even when EE is disabled * Init EE providers on-demand (only when needed) * Add multiple tests + some adjustments * Apply feedback	3 years ago
Joan López de la Franca Beltran	81753526bd	Encryption: Refactor secrets.Service initialization (#51091 ) * Encryption: Refactor secrets.Service initialization	3 years ago
Joan López de la Franca Beltran	97baa6911d	Metrics: Expose functions to initialize counters at zero (#50122 )	3 years ago
Tania	4f8111e24e	Encryption: Fix multiple data keys migration (#49848 ) * Add migration * Migrator: Extend support to rename columns * Fix getting current key * Fix column name in migration * Fix deks reencryption * Fix caching * Add back separate caches for byName and byPrefix * Do not concatenate prefix with uid * Rename DataKey struc fields * SQLStore: Add deprecation comments for breaking migrations * Add comment * Minor corrections Co-authored-by: Joan López de la Franca Beltran <joanjan14@gmail.com>	3 years ago
Tania	7a614fd8a1	Encryption: Stop decrypting EE encrypted secrets with legacy encryption (#50090 )	3 years ago
Joan López de la Franca Beltran	3e4b4dba46	Encryption: Enable envelope encryption by default (#49301 ) * Encryption: Enable envelope encryption by default * Stop relying on feature toggles from settings (deprecated) * Database encryption docs (envelope encryption) * Remove deprecated (and no longer used) FT * Apply suggestions from code review Co-authored-by: Tania <yalyna.ts@gmail.com>	3 years ago
Joan López de la Franca Beltran	e43879e55d	Encryption: Add support for multiple data keys per day (#47765 ) * Add database migrations * Use short uids as data key ids * Add support for manual data key rotation * Fix duplicated mutex unlocks * Fix migration * Manage current data keys per name * Adjust key re-encryption and test * Modify rename column migration for MySQL compatibility * Refactor secrets manager and data keys cache * Multiple o11y adjustments * Fix stats query * Apply suggestions from code review Co-authored-by: Tania <yalyna.ts@gmail.com> * Fix linter * Docs: Rotate data encryption keys API endpoint Co-authored-by: Tania <yalyna.ts@gmail.com>	3 years ago
Joan López de la Franca Beltran	9826a694a8	Encryption: Add Prometheus metrics (#48603 )	3 years ago
Joan López de la Franca Beltran	2081f37e95	Encryption: Make DEKs cache TTL & cleanup interval configurable (#46042 ) * Make DEKs cache TTL & cleanup interval configurable * Improve 'data_keys_cache_ttl' setting description * Fix test	3 years ago
Joan López de la Franca Beltran	e6a85826e9	Encryption: Refine secrets-related commands (#45201 ) * CLI: Adjust 're-encrypt-data-keys' command * CLI: Adjust 're-encrypt' command * Multiple improvements on re-encrypt secrets migration * Another bunch of code improvements * Lint fixes	3 years ago
Joan López de la Franca Beltran	b2655750e8	Encryption: Add support for data keys re-encryption (#43548 ) * Encryption: Add support for data keys re-encryption * Add tests for data keys re-encryption * Update code after refactorings Co-authored-by: Leonard Gram <leo@xlson.com>	3 years ago
Joan López de la Franca Beltran	3b4e812449	Encryption: Keep legacy default provider id on providers map (#44721 ) * Encryption: Keep legacy default provider id on providers map * Minor fixes * Refactor	3 years ago
Ryan McKinley	7ee38af95a	FeatureToggls: remove IsFeatureToggleEnabled from SettingsProvider (#44574 )	3 years ago
Tania B	ca24b95b49	Encryption: Handle encryption key provider being a background service (#44007 ) * Encryption: Handle encryption key provider being a background service * Sort imports * Cleanup accidental changes * Add proper error handling * Apply review feedback	3 years ago
Ryan McKinley	5d66194ec5	FeatureFlags: define features outside settings.Cfg (take 3) (#44443 )	3 years ago
Agnès Toulet	65bdb3a899	FeatureFlags: Revert managing feature flags outside of settings.Cfg (#44382 ) * Revert "FeatureToggles: register all enterprise feature toggles (#44336)" This reverts commit `f53b3fb007`. * Revert "FeatureFlags: manage feature flags outside of settings.Cfg (#43692)" This reverts commit `f94c0decbd`.	3 years ago
Ryan McKinley	f94c0decbd	FeatureFlags: manage feature flags outside of settings.Cfg (#43692 )	3 years ago
Joan López de la Franca Beltran	532e71554f	Usage Stats: Add metrics to count enabled kms providers per kind (#43640 ) * Usage Insights: Add metrics to count enabled kms providers per kind * Add backwards compatibility	3 years ago
Joan López de la Franca Beltran	80e0dd74d2	Encryption: Increase context timeout on flaky test (#43553 )	3 years ago
Joan López de la Franca Beltran	83bc445d3e	Encryption: Fix DEKs cache (#43129 ) * Encryption: Fix DEKs cache * Clarify tests	3 years ago
Tania B	58978dcf96	Encryption: Add usage stats to secrets service (#42437 ) * Encryption: Add usage stats to secrets service * Sort imports	4 years ago
Tania B	4014891971	Encryption: Cleanup and add logging (#42084 ) * Encryption: Add more logs * Add logging and checks * Removed unused methods from secrets service * Refactor and update tests * Address review feedback	4 years ago
Joan López de la Franca Beltran	d49230d291	Grafana CLI Wire Runner (#41012 ) * Set up Wire build graph * Remove enterprise Wire set * Move runner package outside commands * Update Makefile (gen-go path) * Minor prettier fix * Include new Wire enterprise file into .gitignore * Update Wire deps * Update the grabpl version Co-authored-by: Dan Cech <dcech@grafana.com>	4 years ago
Tania B	bc60ae3c66	Encryption: Refactor secrets service (#41771 ) * Refactor kmsproviders pkg * Update tests * Fix linting Co-authored-by: Joan López de la Franca Beltran <joanjan14@gmail.com>	4 years ago
Joan López de la Franca Beltran	d3e19b1b3b	Encryption: Improve the DX of encryption operations within database transactions (#41654 ) * Move user oauth info encryption away from db transaction * Add encryption methods with support for db session reusability	4 years ago
Joan López de la Franca Beltran	44837fc592	Replace encryption.Service usages by secrets.Service (#41625 ) * Replace encryption.Service by secrets.Service on expr.Service * Replace encryption.Service by secrets.Service on live pkg * Rename encryption.Service to encryption.Internal to clarify it must be not used	4 years ago
Tania B	f6545ab8f4	Chore: Add current provider test for secrets service (#41387 ) * Chore: Add current provider test for secrets service * Refactor the test * Fix linting issue	4 years ago
Tania B	e81d434edf	Encryption: Extend secrets service to support registering key providers (#40626 ) * Draft adding kms providers * Rename defaultProvider to currentProvider * Add getting current provider from config * Remove comments * Make current provider service struct field * Add methods to secrets service * Test getting current provider * Implements missing methods for fake secrets service * Remove accidental changes * Fix linter issue * Update configuration examples * Rename CurrentProvider method * Split service interface * Update wire Co-authored-by: spinillos <selenepinillos@gmail.com>	4 years ago
Tania B	5652bde447	Encryption: Use secrets service (#40251 ) * Use secrets service in pluginproxy * Use secrets service in pluginxontext * Use secrets service in pluginsettings * Use secrets service in provisioning * Use secrets service in authinfoservice * Use secrets service in api * Use secrets service in sqlstore * Use secrets service in dashboardshapshots * Use secrets service in tsdb * Use secrets service in datasources * Use secrets service in alerting * Use secrets service in ngalert * Break cyclic dependancy * Refactor service * Break cyclic dependancy * Add FakeSecretsStore * Setup Secrets Service in sqlstore * Fix * Continue secrets service refactoring * Fix cyclic dependancy in sqlstore tests * Fix secrets service references * Fix linter errors * Add fake secrets service for tests * Refactor SetupTestSecretsService * Update setting up secret service in tests * Fix missing secrets service in multiorg_alertmanager_test * Use fake db in tests and sort imports * Use fake db in datasources tests * Fix more tests * Fix linter issues * Attempt to fix plugin proxy tests * Pass secrets service to getPluginProxiedRequest in pluginproxy tests * Fix pluginproxy tests * Revert using secrets service in alerting and provisioning * Update decryptFn in alerting migration * Rename defaultProvider to currentProvider * Use fake secrets service in alert channels tests * Refactor secrets service test helper * Update setting up secrets service in tests * Revert alerting changes in api * Add comments * Remove secrets service from background services * Convert global encryption functions into vars * Revert "Convert global encryption functions into vars" This reverts commit `498eb19859`. * Add feature toggle for envelope encryption * Rename toggle Co-authored-by: Emil Tullstedt <emil.tullstedt@grafana.com> Co-authored-by: Joan López de la Franca Beltran <joanjan14@gmail.com>	4 years ago
Tania B	f59aabbd3b	Chore: Refactor secrets service (#40331 )	4 years ago

36 Commits (48ef88aed7c8a9ad0d7cc53b233d23baf0449f2e)