142 Commits (61cdfba87a36bd4b8e1bb227a14c5d88fc943aff)

Author	SHA1	Message	Date
linoman	5aacdd9f49	Docs: No basic role documentation updates (#75110) ... * Add more scenarios to the documentation --------- Co-authored-by: Christopher Moyer <35463610+chri2547@users.noreply.github.com>	2 years ago
Vardan Torosyan	e3288834b3	Docs: Add a section about using multiple auth providers in Grafana (#74710) ... * Docs: Add a section about using multiple auth providers in Grafana * Prettier and feedback	2 years ago
Christopher Moyer	1a6b88e0c9	docs: updates broken link (#74219) ... updates broken link	2 years ago
Jack Baldry	9ebcfeaf9e	Update all use of docs/shared in Grafana to use keyword arguments (#74167) ... * Update all use of docs/shared in Grafana to use keyword arguments Signed-off-by: Jack Baldry <jack.baldry@grafana.com> * Add version inference to remaining Grafana docs/shared usage Signed-off-by: Jack Baldry <jack.baldry@grafana.com> --------- Signed-off-by: Jack Baldry <jack.baldry@grafana.com>	2 years ago
arukiidou	20dd8a4f46	Auth: Update okta docs - `use_pkce = true` by default. #73754 (#73756) ... Signed-off-by: junya koyama <arukiidou@yahoo.co.jp>	2 years ago
venkatbvc	7c98678188	Auth: Add support for OIDC RP-Initiated Logout (#70357) ... * Fix signout redirect_uri issue * Fix signout redirect_uri issue * Update docs/sources/setup-grafana/configure-grafana/_index.md Co-authored-by: Christopher Moyer <35463610+chri2547@users.noreply.github.com> * Update docs/sources/setup-grafana/configure-grafana/_index.md Co-authored-by: Christopher Moyer <35463610+chri2547@users.noreply.github.com> * Update docs/sources/setup-grafana/configure-grafana/_index.md Co-authored-by: Christopher Moyer <35463610+chri2547@users.noreply.github.com> * remove signout url global * style alignment * remove legacy handlers for devenv * Update pkg/api/login.go --------- Co-authored-by: Rao B V Chalapathi <b_v_chalapathi.rao@nokia.com> Co-authored-by: Christopher Moyer <35463610+chri2547@users.noreply.github.com> Co-authored-by: jguer <me@jguer.space>	2 years ago
Tristan Otterpohl	e81f6a7b0b	docs: fix okta oauth endpoints (#73191) ... * fix okta oauth endpoints * Fixed table borders	2 years ago
Jan Garaj	2543765978	Doc: Update index.md - update Keycloak redirect URI (#72971)	2 years ago
Bruno Melo	5e50580d06	Docs: Fix URL encoding @ Keycloak logout example (#71970)	2 years ago
Ieva	2848be9035	Docs: correct SAML docs (#73281) ... Correct SAML docs	2 years ago
Kevin Burke	a9d2bbc814	Update index.md (#73183) ... * Update index.md * Update docs/sources/setup-grafana/configure-security/configure-authentication/okta/index.md --------- Co-authored-by: Christopher Moyer <35463610+chri2547@users.noreply.github.com>	2 years ago
Kevin Burke	3bc3c4f2bb	Update index.md (#73077)	2 years ago
Jess Sartin	3c289d8a08	Docs: Update to include keycloak link in oauth docs (#72698) ... Update to include keycloak link in oauth docs	2 years ago
Eric Leijonmarck	95760cb021	Auth: OAuth sets `skip_org_role_sync = true` for auth.google by default (#72819) ... * sets skip_org_role_sync to true for google * add google skiporgrolesync and sets to true always * add field * Update docs/sources/setup-grafana/configure-security/configure-authentication/google/index.md Co-authored-by: Christopher Moyer <35463610+chri2547@users.noreply.github.com> * add AKS to words * script back to mina --------- Co-authored-by: Christopher Moyer <35463610+chri2547@users.noreply.github.com>	2 years ago
cmo-pomerium	916f3008f9	Update _index.md (#72317) ... * Update _index.md Adding popular open-source proxy options so users don't have to do further research if they don't want to * ran Prettier * Update docs/sources/setup-grafana/configure-security/_index.md Co-authored-by: Ieva <vasiljeva.ieva@gmail.com> --------- Co-authored-by: Christopher Moyer <35463610+chri2547@users.noreply.github.com> Co-authored-by: Ieva <vasiljeva.ieva@gmail.com>	2 years ago
Misi	bba11d04cb	Auth: Add key_id config param to auth.jwt (#72711) ... * Specify keyID for public key provided in PEM format for JWT Auth * Update docs * Update sample.ini	2 years ago
Ieva	b96d6e2c8d	Docs: remove references to `groups_attribute_path` for Okta and GitLab docs (#72588) ... remove references to groups_attribute_path for Okta and GitLab	2 years ago
linoman	5ce3a7c6db	Doc's: Add google support for team sync (#72316) ... Add google support for team sync	2 years ago
Ieva	9ff193f692	Docs: update GitLab OAuth2 documentation (#71834) ... * gitlab doc update and update the default scopes * small fixes * fix a reference * update another reference * PR feedback: fix numbering of bulletpoints, reorder config options * linting	2 years ago
Ieva	b71117393b	Docs: update labels for auth provider pages (#72294) ... update labels for auth provider pages	2 years ago
linoman	63346674e6	AuthNZ documentation revamp (#62581) ... * init for base branch * Add authnz code ownership * Fix docs ownsership path * docs revamp: Plan IAM strategy (#62582) * Add planning page * Add teams definition * Expand on planning and benefits * Add reasons to organize users * Add description of User Teams * Add Grafana organizations info * Add a section between Teams and Orgs * Add a section for external systems * planning your role strategy * Add service account documentation * Add Auth Setup to index sidebar * Address PR comments * Add planning for API keys * Add team and org sync * Docs: role and permission section for planning docs (#64702) * docs revamp: Service accounts (#63710) * docs revamp: Add new documentation to sidebar index (#66104) * docs revamp: synchronisation planning (#66409) * Docs: api keys (#64803) * Remove personal access tokens section * Move auth integration planning page * Remove auth folder * Restore codeowners file * reword and update info on user management and grouping * Rename iam strategy page * extend the section on teams and organizations * Rename planning your IAM section * Move to administration section * Add definition for role sync * Relocate planning --------- Co-authored-by: Christopher Moyer <35463610+chri2547@users.noreply.github.com> Co-authored-by: Ieva <ieva.vasiljeva@grafana.com>	2 years ago
linoman	130f142c7f	Rework Okta OAuth2 (#71349) ... * Rework Okta OAuth2 --------- Co-authored-by: Christopher Moyer <35463610+chri2547@users.noreply.github.com> Co-authored-by: Ieva <ieva.vasiljeva@grafana.com>	2 years ago
Jack Baldry	7eb17bccca	Explicitly set all front matter labels in the source files (#71548) ... * Set every page to have defaults of 'Enterprise' and 'Open source' labels Signed-off-by: Jack Baldry <jack.baldry@grafana.com> * Set administration pages to have of 'Cloud', 'Enterprise', and 'Open source' labels Signed-off-by: Jack Baldry <jack.baldry@grafana.com> * Set administration/enterprise-licensing pages to have 'Enterprise' labels Signed-off-by: Jack Baldry <jack.baldry@grafana.com> * Set administration/organization-management pages to have 'Enterprise' and 'Open source' labels Signed-off-by: Jack Baldry <jack.baldry@grafana.com> * Set administration/provisioning pages to have 'Enterprise' and 'Open source' labels Signed-off-by: Jack Baldry <jack.baldry@grafana.com> * Set administration/recorded-queries pages to have labels cloud,enterprise * Set administration/roles-and-permissions/access-control pages to have labels cloud,enterprise Signed-off-by: Jack Baldry <jack.baldry@grafana.com> * Set administration/stats-and-license pages to have labels cloud,enterprise * Set alerting pages to have labels cloud,enterprise,oss * Set breaking-changes pages to have labels cloud,enterprise,oss * Set dashboards pages to have labels cloud,enterprise,oss * Set datasources pages to have labels cloud,enterprise,oss * Set explore pages to have labels cloud,enterprise,oss * Set fundamentals pages to have labels cloud,enterprise,oss * Set introduction/grafana-cloud pages to have labels cloud Signed-off-by: Jack Baldry <jack.baldry@grafana.com> * Fix introduction pages products Signed-off-by: Jack Baldry <jack.baldry@grafana.com> * Set panels-visualizations pages to have labels cloud,enterprise,oss * Set release-notes pages to have labels cloud,enterprise,oss * Set search pages to have labels cloud,enterprise,oss * Set setup-grafana/configure-security/audit-grafana pages to have labels cloud,enterprise Signed-off-by: Jack Baldry <jack.baldry@grafana.com> * Set setup-grafana/configure-security/configure-authentication pages to have labels cloud,enterprise,oss * Set setup-grafana/configure-security/configure-authentication/enhanced-ldap pages to have labels cloud,enterprise * Set setup-grafana/configure-security/configure-authentication/saml pages to have labels cloud,enterprise * Set setup-grafana/configure-security/configure-database-encryption/encrypt-secrets-using-hashicorp-key-vault pages to have labels cloud,enterprise * Set setup-grafana/configure-security/configure-request-security pages to have labels cloud,enterprise,oss Signed-off-by: Jack Baldry <jack.baldry@grafana.com> * Set setup-grafana/configure-security/configure-team-sync pages to have labels cloud,enterprise Signed-off-by: Jack Baldry <jack.baldry@grafana.com> * Set setup-grafana/configure-security/export-logs pages to have labels cloud,enterprise Signed-off-by: Jack Baldry <jack.baldry@grafana.com> * Set troubleshooting pages to have labels cloud,enterprise,oss * Set whatsnew pages to have labels cloud,enterprise,oss * Apply updated labels from review Co-authored-by: brendamuir <100768211+brendamuir@users.noreply.github.com> Co-authored-by: Isabel <76437239+imatwawana@users.noreply.github.com> --------- Signed-off-by: Jack Baldry <jack.baldry@grafana.com> Co-authored-by: brendamuir <100768211+brendamuir@users.noreply.github.com> Co-authored-by: Isabel <76437239+imatwawana@users.noreply.github.com>	2 years ago
Misi	dcf26564db	OAuth: Introduce user_refresh_token setting and make it default for the selected providers (#71533) ... * First changes * WIP docs * Align current tests * Add test for UseRefreshToken * Update docs * Fix * Remove unnecessary AuthCodeURL from generic_oauth * Change GitHub to disable use_refresh_token by default	2 years ago
Ieva	cb695cef8e	Auth: update GitHub OAuth documentation (#70459) ... * github oauth doc improvements * add skip_org_role_sync to config for github provider * update links and section headings * update the docs based on the first PR * update references	2 years ago
linoman	340f55fa15	Remove duplicated entry in properties table (#71388)	2 years ago
Ieva	276c63a656	Auth: update generic OAuth documentation (#70330) ... * update generic OAuth docs * some more fixes and corrections * update examples and sync sections * fix a link * linting * formatting and adding more links to OAuth integrations * add a section with config walkthrough * fix link * move examples to the end of the doc * extend role mapping * small improvements * add a before you begin section, clean up steps, remove some text * remove unnecessary section * merge main 2 * OAuth -> OAuth2 * remove Centrify example because it's likely outdated * add shared intro content * indentation * add refresh token to tasks, clean up more sections * linting * linting * Apply suggestions from code review Co-authored-by: Christopher Moyer <35463610+chri2547@users.noreply.github.com> * Update docs/sources/setup-grafana/configure-security/configure-authentication/generic-oauth/index.md Co-authored-by: Christopher Moyer <35463610+chri2547@users.noreply.github.com> * indentation and small descriptions under headings * add a table for config options * clean up more sections * rewrite email address section * rewriting login and display name sections, plus adding line breaks * clean up more sections * update role mapping section * indentation again * update section names * incorporates final edits * Apply suggestions from code review Co-authored-by: Christopher Moyer <35463610+chri2547@users.noreply.github.com> * pr feedback * Apply suggestions from code review Co-authored-by: Christopher Moyer <35463610+chri2547@users.noreply.github.com> * PR feedback: rewording --------- Co-authored-by: Christopher Moyer <35463610+chri2547@users.noreply.github.com> Co-authored-by: Chris Moyer <chris.moyer@grafana.com>	2 years ago
Mitch Seaman	ac78146091	Docs: update the word "integration" in Okta config (#71181)	2 years ago
Ieva	fc290281cb	Docs: reorder auth provider pages (#70764) ... * order auth provider pages * add shorter menu titles * linting * update reference * rename Grafana auth section to basic auth	2 years ago
marybelvargas	b32cea7929	Update to docs - index.md (#70699) ... Update index.md Minor correction.	2 years ago
Jo	11d196eb6e	Auth: Support google OIDC and group fetching (#70140) ... * Auth: Update Google OAuth default configuration based on /.well-known/openid-configuration #69520 Signed-off-by: junya koyama <arukiidou@yahoo.co.jp> * add id_token parsing add legacy API distinction use google auth oidc connectors add group fetching support and tests * Apply suggestions from code review Co-authored-by: Christopher Moyer <35463610+chri2547@users.noreply.github.com> Co-authored-by: Ieva <ieva.vasiljeva@grafana.com> * implement review feedback * indent docs --------- Signed-off-by: junya koyama <arukiidou@yahoo.co.jp> Co-authored-by: junya koyama <arukiidou@yahoo.co.jp> Co-authored-by: Christopher Moyer <35463610+chri2547@users.noreply.github.com> Co-authored-by: Ieva <ieva.vasiljeva@grafana.com>	2 years ago
Jo	4821175d40	Auth: Add auth.azure_ad security improvements (#912) ... * security improvements id_token * add audience validation * add allowOrganizations * add allowOrganizations tests and documentation * add log warn on no configuration * anonymize tenant id * Apply suggestions from code review Co-authored-by: Misi <mgyongyosi@users.noreply.github.com> * Update docs/sources/setup-grafana/configure-security/configure-authentication/azuread/index.md Co-authored-by: Ieva <ieva.vasiljeva@grafana.com> * Update pkg/login/social/azuread_oauth_test.go Co-authored-by: Ieva <ieva.vasiljeva@grafana.com> * Update pkg/login/social/azuread_oauth_test.go Co-authored-by: Ieva <ieva.vasiljeva@grafana.com> * optimize key validation and add mising fields * fix missing key_id * lint * Update docs/sources/setup-grafana/configure-security/configure-authentication/azuread/index.md Co-authored-by: Misi <mgyongyosi@users.noreply.github.com> * lint docs --------- Co-authored-by: Misi <mgyongyosi@users.noreply.github.com> Co-authored-by: Ieva <ieva.vasiljeva@grafana.com>	2 years ago
Vardan Torosyan	87b127e073	Add and document option for enabling email lookup (#913) ... * Docs: Document option for enabling email lookup * Add the new config in the config files * Apply suggestions from code review Co-authored-by: Ieva <ieva.vasiljeva@grafana.com> * Don't capitalize identity providers * Apply suggestions from code review Co-authored-by: Jo <joao.guerreiro@grafana.com> * Apply suggestions from code review Co-authored-by: Christopher Moyer <35463610+chri2547@users.noreply.github.com> --------- Co-authored-by: Ieva <ieva.vasiljeva@grafana.com> Co-authored-by: Jo <joao.guerreiro@grafana.com> Co-authored-by: Christopher Moyer <35463610+chri2547@users.noreply.github.com>	2 years ago
Jo	26b66fda4b	Auth: Support Gitlab OIDC scopes (#69890) ... * draft gitlab openid * mutualize id token extraction * unexport fields * user user info endpoint for retrieving indirect group memberships * add to readme * fix missing doc * fix generic oauth wrong parameter * log token	2 years ago
Eve Meelan	6edd2e7296	Everything in Cloud free updates (#69948) ... * updates for everything in Free * more cloud free	2 years ago
Jan Garaj	3e48c0b570	docs: Azure doc link update (#69749) ... Update index.md Link update	2 years ago
Eric Leijonmarck	498f8ea4ea	Auth: Skip org role sync moved in docs (#69676) ... skip org role sync moved in docs	2 years ago
linoman	676e5de3d2	Reword JWT config claim (#69356) ... Co-authored-by: ptz-xyt <104002657+ptz-xyt@users.noreply.github.com>	2 years ago
Jack Baldry	f29b058927	Update cascading front matter to use sequence form (#67094) ... * Update cascading front matter to use sequence form The map form does not override the sequence form that is used in the website repository to specify the default labels. For more information, refer to https://github.com/grafana/writers-toolkit/pull/234. Signed-off-by: Jack Baldry <jack.baldry@grafana.com> * Remove useless alias Signed-off-by: Jack Baldry <jack.baldry@grafana.com> * Update labels for pages noted in code review Signed-off-by: Jack Baldry <jack.baldry@grafana.com> * Move all product labeling to the project index file All changes can be made in a single place. Signed-off-by: Jack Baldry <jack.baldry@grafana.com> * Move all individual page product labels to project index file Signed-off-by: Jack Baldry <jack.baldry@grafana.com> * Shorten YAML Signed-off-by: Jack Baldry <jack.baldry@grafana.com> * Add newlines to aid readability Signed-off-by: Jack Baldry <jack.baldry@grafana.com> * Document front matter ordering Signed-off-by: Jack Baldry <jack.baldry@grafana.com> * Rewrite labels for breaking-changes pages Signed-off-by: Jack Baldry <jack.baldry@grafana.com> * updated labels for whats new and breaking changes --------- Signed-off-by: Jack Baldry <jack.baldry@grafana.com> Co-authored-by: Isabel <76437239+imatwawana@users.noreply.github.com>	2 years ago
arukiidou	345b7fadc9	Auth: Update docs on use PKCE by default (#68638) ... * Auth: Update docs on use PKCE by default. (#68073) Signed-off-by: junya koyama <arukiidou@yahoo.co.jp> * Fix: docs review - from introduces to provides https://github.com/grafana/grafana/pull/68638/files#r1200506006 Signed-off-by: junya koyama <arukiidou@yahoo.co.jp> * Fix docs - Remove note about a version https://github.com/grafana/grafana/pull/68638/files#r1200508038 Signed-off-by: junya koyama <arukiidou@yahoo.co.jp> * Update docs/sources/setup-grafana/configure-security/configure-authentication/azuread/index.md --------- Signed-off-by: junya koyama <arukiidou@yahoo.co.jp> Co-authored-by: Christopher Moyer <35463610+chri2547@users.noreply.github.com>	2 years ago
MichaelKo	e7e70dbac6	Chore: Adding "allowed_groups" Configuration Parameter to Generic OAuth Method (#69025) ... * feat: add allowed_groups for Generic OAuth * docs: add allowed_groups more docs for Generic OAuth	2 years ago
arukiidou	d208bf3345	Auth: Add tls_client_cert to OAuth section in defaults.ini. #64746 (#68228) ... * Auth: Add tls_client_cert to defaults.ini #64746 Signed-off-by: junya koyama <arukiidou@yahoo.co.jp> * Auth: Add tls_client_cert to docs #64746 Signed-off-by: junya koyama <arukiidou@yahoo.co.jp> * Auth: Add more `tls_client_cert` for docs Signed-off-by: junya koyama <arukiidou@yahoo.co.jp> * Update docs/sources/setup-grafana/configure-security/configure-authentication/gitlab/index.md Co-authored-by: Christopher Moyer <35463610+chri2547@users.noreply.github.com> * Revert "Update docs/sources/setup-grafana/configure-security/configure-authentication/gitlab/index.md" This reverts commit f4f1fda7526bf4af05507bc0dc26e808687514eb. Signed-off-by: junya koyama <arukiidou@yahoo.co.jp> --------- Signed-off-by: junya koyama <arukiidou@yahoo.co.jp> Co-authored-by: Christopher Moyer <35463610+chri2547@users.noreply.github.com>	2 years ago
Jo	5e5c751ecd	Auth: Respect cache control for JWKS in auth.jwt (#68872) ... * respect cache control for auth.jwt * add documentation * add small note on cache control header ignores * make distinction of env	2 years ago
Matt Dodson	1c4bb9ca00	[feat] docs; update admonition syntax (#68842) ... * [feat] docs; update admonition syntax - Standardizes according to style conventions: https://grafana.com/docs/writers-toolkit/style-guide/style-conventions/#admonitions - Prepares docs for better, uniform admonition style. * Remove false positives and irregularities * false positive removal * Update docs/sources/datasources/mysql/_index.md * Update docs/sources/developers/angular_deprecation/angular-plugins.md * fix link errors * Prettify some nested blockquotes * remoe unnecessary admonition	2 years ago
Jack Baldry	560f49b3dc	Enable doc-validator for specific directories (#63524) ... * Enable doc-validator for specific directories Signed-off-by: Jack Baldry <jack.baldry@grafana.com> * Fix one linting error to trigger CI Signed-off-by: Jack Baldry <jack.baldry@grafana.com> * Update doc-validator to latest release Signed-off-by: Jack Baldry <jack.baldry@grafana.com> * Update make-docs procedure Signed-off-by: Jack Baldry <jack.baldry@grafana.com> * Use doc-validator version from CI in local make target Signed-off-by: Jack Baldry <jack.baldry@grafana.com> * Revert to 1.11.0 Signed-off-by: Jack Baldry <jack.baldry@grafana.com> * adds missing descriptions * Fix titles and headings Signed-off-by: Jack Baldry <jack.baldry@grafana.com> * Fix link formats Signed-off-by: Jack Baldry <jack.baldry@grafana.com> * Fix easy to resolve anchors Signed-off-by: Jack Baldry <jack.baldry@grafana.com> * Remove broken anchor link This anchor appears to have been broken for a long time. Signed-off-by: Jack Baldry <jack.baldry@grafana.com> * Use doc-validator image with support for numbered anchors Signed-off-by: Jack Baldry <jack.baldry@grafana.com> * Update make-docs procedure to support doc-validator 2.0.x Signed-off-by: Jack Baldry <jack.baldry@grafana.com> * Fix a bunch of broken anchors Signed-off-by: Jack Baldry <jack.baldry@grafana.com> * Ignore old whatsnew content Signed-off-by: Jack Baldry <jack.baldry@grafana.com> * Update doc-validator to v2.0.x and use reviewdog to report errors Signed-off-by: Jack Baldry <jack.baldry@grafana.com> * removes broken links --------- Signed-off-by: Jack Baldry <jack.baldry@grafana.com> Co-authored-by: Chris Moyer <chris.moyer@grafana.com>	2 years ago
Vardan Torosyan	6aab5e35d5	Docs: Clarify precedence of Grafana settings (#68020)	2 years ago
arukiidou	a58de1f8d2	Chore: Add missing tls_skip_verify_insecure for GitLab Oauth (#64649) ... fixes https://github.com/grafana/grafana/issues/64648 Signed-off-by: junya koyama <arukiidou@yahoo.co.jp>	2 years ago
Jo	6f4d4a6750	Add name_id_format to doc (#67803) ... * add name_id_format to doc * add labels * add missing pipe * add available name ID options * Update docs/sources/setup-grafana/configure-security/configure-authentication/saml/index.md Co-authored-by: Christopher Moyer <35463610+chri2547@users.noreply.github.com> * Update docs/sources/setup-grafana/configure-security/configure-authentication/saml/index.md * Apply suggestions from code review Co-authored-by: Christopher Moyer <35463610+chri2547@users.noreply.github.com> * lint --------- Co-authored-by: Christopher Moyer <35463610+chri2547@users.noreply.github.com>	2 years ago
Vardan Torosyan	e5b12e23b1	Docs: Add a note about disabling SAML UI (#67877)	2 years ago
Jo	3644ea6556	ServiceAccounts: Add secret scan service docs (#57926) ... * add secret scanning docs * update docs * fix merge * add revoke to docs * add revoke to docs * typo fix * Apply suggestions from code review Co-authored-by: Christopher Moyer <35463610+chri2547@users.noreply.github.com> * add step by step instructions * Apply suggestions from code review Co-authored-by: Christopher Moyer <35463610+chri2547@users.noreply.github.com> * Apply suggestions from code review Co-authored-by: Christopher Moyer <35463610+chri2547@users.noreply.github.com> * prettier * Update docs/sources/setup-grafana/configure-security/secret-scan.md Co-authored-by: Christopher Moyer <35463610+chri2547@users.noreply.github.com> * feedback * Update docs/sources/setup-grafana/configure-security/secret-scan.md * Update docs/sources/setup-grafana/configure-security/secret-scan.md * Update docs/sources/setup-grafana/configure-security/secret-scan.md Co-authored-by: Victor Cinaglia <victor@grafana.com> --------- Co-authored-by: Christopher Moyer <35463610+chri2547@users.noreply.github.com> Co-authored-by: Victor Cinaglia <victor@grafana.com>	2 years ago