grafana

Commit Graph

Author	SHA1	Message	Date
lfroment	72628c8ea0	Dashboard: Adds support for a global minimum dashboard refresh interval (#19416 ) This feature would provide a way for administrators to limit the minimum dashboard refresh interval globally. Filters out the refresh intervals available in the time picker that are lower than the set minimum refresh interval in the configuration .ini file Adds the minimum refresh interval as available in the time picker. If the user tries to enter a refresh interval that is lower than the minimum in the URL, defaults to the minimum interval. When trying to update the JSON via the API, rejects the update if the dashboard's refresh interval is lower than the minimum. When trying to update a dashboard via provisioning having a lower refresh interval than the minimum, defaults to the minimum interval and logs a warning. Fixes #3356 Co-authored-by: Marcus Efraimsson <marcus.efraimsson@gmail.com>	5 years ago
Alexander Zobnin	f2fc7aa3aa	Azure OAuth: enable teamsync (#22160 ) * Azure OAuth: extract groups from token for teamsync * Docs: changed some headers * Azure OAuth: fix tests * Azure OAuth: fix linter error (simplify) * Azure OAuth: add allowed_groups option * Azure OAuth: docs for team sync and allowed_groups * Azure OAuth: tests for allowed_groups * Update docs/sources/auth/azuread.md Co-Authored-By: Leonard Gram <leo@xlson.com> Co-authored-by: Leonard Gram <leo@xlson.com>	5 years ago
twendt	ff6a082e23	Auth: Azure AD OAuth (#20030 ) * Implement Azure AD oauth * Use go-jose and cleanup * Update go-jose in go.mod * cleanup * Add unit tests * Fix scopes * Add documentation page * Improve documentation * Convert extract_role into function. * Do not use upn and replace unique_name with preferred_username * Configure login button * Use official microsoft icon and color from branding guideline. * Add Azure AD config section in sample.ini.	5 years ago
Marcus Efraimsson	a1579283a6	Add disabled option for cookie samesite attribute (#21472 ) Breaking change: If disabled the cookie samesite cookie attribute will not be set, but if none the attribute will be set and is a breaking change compared to before where none did not render the attribute. This was due to a known issue in Safari. Co-Authored-By: Arve Knudsen <arve.knudsen@gmail.com> Co-Authored-By: Diana Payton <52059945+oddlittlebird@users.noreply.github.com> Fixes #19847	5 years ago
Sofia Papagiannaki	d135f1229d	Alerting: new min_interval_seconds options to enforce a minimum eval frequency (#21188 ) * add min_interval_seconds setting to alerting config It will let operator enforce a minimum time for the scheduler to enqueue evaluations * Introduce UI modifications * Update docs Co-authored-by: Martin <uepoch@users.noreply.github.com>	5 years ago
Paul Emmerich	42032f6c03	ImgUploader: add support for non-amazon S3 (#20354 ) * imguploader: add support for non-Amazon S3 endpoints and forcing of path-style S3 addressing fixes #11240 Co-authored-by: Arve Knudsen <arve.knudsen@gmail.com>	5 years ago
Alexander Morozov	06bf7e8ef1	OAuth: Removes send_client_credentials_via_post setting (#20044 ) Removes send_client_credentials_via_post oauth setting and use auto-detect mechanism instead. By these changes also fixes statichcheck errors Ref #8968	6 years ago
Sofia Papagiannaki	21fed8c5f1	OAuth: Add missing setting from defaults.ini (#20691 )	6 years ago
Marcus Efraimsson	4a2104a1de	Chore: Sync defaults.ini with sample.ini (#20645 ) Make sure that configuration sections/keys from defaults.ini is mirrored in the sample.ini. Fixes #20622	6 years ago
Thomas Casteleyn	9fa18a2df5	Configuration: Update root_url to reflect the default value (#20278 )	6 years ago
Shavonn Brown	3e5abe7c21	Admin: Adds setting to disable creating initial admin user (#19505 ) Adds a new setting disable_admin_user and when true the default admin user will not be created when Grafana starts for the first time (or no users exists in the system). Closes #19038	6 years ago
Jon Gyllenswärd	3111c3620b	AuthProxy: additions to ttl config change (#20249 ) * fixes according to feedback * additions to config and docs	6 years ago
Torkel Ödegaard	be2bf1a297	AuthProxy: Can now login with auth proxy and get a login token (#20175 ) * AuthProxy: Can now login with auth proxy and get a login token * added unit tests * renamed setting and updated docs * AuthProxy: minor tweak * Fixed tests and namings * spellfix * fix * remove unused setting, probably from merge conflict * fix	6 years ago
Jon Gyllenswärd	53f8088316	Auth Proxy: replace ini setting ldap_sync_ttl with sync_ttl (#20191 ) * Renamed ttl config in code to be more consistent with behaviour * Introduced new setting `sync_ttl` in .ini file * Keeping the old setting `ldap_sync_ttl` in the .ini file as fallback and compatibility.	6 years ago
Martin Reinhardt	7a3d1c0e4b	OAuth: Generic OAuth role mapping support (#17149 ) Adds support for Generic OAuth role mapping. A new configuration setting for generic oauth is added named role_attribute_path which accepts a JMESPath expression. Only Grafana roles named Viewer, Editor or Admin are accepted. Closes #9766	6 years ago
Scott Brenner	aa87f62c3a	Quick typo fix (#19759 )	6 years ago
Marcus Efraimsson	75bf31b5c7	docs: image rendering (#19183 ) Adds a new "Image Rendering" page in Administration section. Updates configuration page with rendering settings and also default.ini and sample.ini. Updates and cleanup pages that referencing image rendering. Ref #18914	6 years ago
Marcus Efraimsson	80592e3361	Metrics: Adds setting for turning off total stats metrics (#19142 ) Don't update total stats metrics if reporting is disabled. New setting disable_total_stats for turning off update of total stats (stat_totals_*) metrics. Ref #19137	6 years ago
Ryan McKinley	7d32caeac2	Transformers: configure result transformations after query(alpha) (#18740 )	6 years ago
Marcus Efraimsson	964c2e722f	Snapshot: Fix http api (#18830 ) (cherry picked from commit `be2e2330f5`)	6 years ago
Bob Shannon	056dbc7012	OAuth: Support JMES path lookup when retrieving user email (#14683 ) Add support for fetching e-mail with JMES path Signed-off-by: Bob Shannon <bobs@dropbox.com>	6 years ago
kay delaney	fb0cec5591	Backend: Adds support for HTTP/2 (#18358 ) * Backend: Adds support for HTTP/2 * Adds mozilla recommended ciphers * Updates sample.ini and config documentation	6 years ago
Kyle Brandt	f689b60426	remotecache: support SSL with redis (#18511 ) * update go-redis lib from v2 -> v5 * add ssl option to the redis connection string fixes #18498	6 years ago
Torkel Ödegaard	f68b8b73f0	LDAP: Align ldap example with the devenv testdata (#18343 )	6 years ago
gotjosh	87a794fe0a	Docs: Update documentation with new SAML features (#18163 ) * Update defaults.ini and sample.ini with the SAML assertion mapping fields * Document Grafana's ability to map ACS attributes while a Grafana user is created	6 years ago
Alexander Zobnin	e47546d529	Docs: SAML idp_metadata_url option (#18181 )	6 years ago
gotjosh	d006f7c916	Docs: SAML (#18069 ) * docs: Link to SAML docs and document configuration options - Document configuration options `defaults.ini` and `sample.ini` - Add the SAML documentation - Link to the SAML documentation from "what's new in 6.3"	6 years ago
Oleg Gaidarenko	e2cf7c9698	LDAP: finishing touches (#17945 ) * LDAP:Docs: `active_sync_enabled` setting Mention `active_sync_enabled` setting and enable it by default * LDAP: move "disableExternalUser" method Idea behind new design of the LDAP module is to minimise conflation between other parts of the system, so it would decoupled as much as possible from stuff like database, HTTP transport and etc. Following "Do One Thing and Do It Well" Unix philosophy principal, other things could be better fitted on the consumer side of things. Which what this commit trying to archive * LDAP: correct user/admin binding The second binding was not happening, so if the admin login/password in LDAP configuration was correct, anyone could had login as anyone using incorrect password	6 years ago
gotjosh	e6b8a1529b	SAML: Configuration defaults, examples and dependencies (#17954 ) * Add SAML configuration options * Add crewjam/saml as a depdency Needed as part of the enterprise SAML integration. * Vendor github.com/stretchr/testify/require The package require implements the same assertions as the `assert` package but stops test execution when a test fails.	6 years ago
Torkel Ödegaard	57c220c93d	Docs: added version notice to new ldap feature docs (#17929 )	6 years ago
Sofia Papagiannaki	dc9ec7dc91	Auth: Allow expiration of API keys (#17678 ) * Modify backend to allow expiration of API Keys * Add middleware test for expired api keys * Modify frontend to enable expiration of API Keys * Fix frontend tests * Fix migration and add index for `expires` field * Add api key tests for database access * Substitude time.Now() by a mock for test usage * Front-end modifications * Change input label to `Time to live` * Change input behavior to comply with the other similar * Add tooltip * Modify AddApiKey api call response Expiration should be time.Time instead of string Present expiration date in the selected timezone * Use kbn for transforming intervals to seconds * Use `assert` library for tests * Frontend fixes Add checks for empty/undefined/null values * Change expires column from datetime to integer * Restrict api key duration input It should be interval not number * AddApiKey must complain if SecondsToLive is negative * Declare ErrInvalidApiKeyExpiration * Move configuration to auth section * Update docs * Eliminate alias for models in modified files * Omit expiration from api response if empty * Eliminate Goconvey from test file * Fix test Do not sleep, use mocked timeNow() instead * Remove index for expires from api_key table The index should be anyway on both org_id and expires fields. However this commit eliminates completely the index for now since not many rows are expected to be in this table. * Use getTimeZone function * Minor change in api key listing The frontend should display a message instead of empty string if the key does not expire.	6 years ago
Oleg Gaidarenko	31d2905490	LDAP:Docs: add information on LDAP sync feature and update LDAP sync default (#17689 ) * Docs: for LDAP active sync feature	6 years ago
Sergey Goppikov	dda8b731e8	Settings: Fix typo in defaults.ini (#17707 ) `backround` -> `backGround`	6 years ago
Kyle Brandt	49f0f0e89e	config: fix connstr for remote_cache (#17675 ) fixes #17643 and adds test to check for commented out lines (but will only catch `;`, not `#`).	6 years ago
Oleg Gaidarenko	1c08e58605	LDAP: small improvements to various LDAP parts (#17662 ) * Add multildap config example * Publicize mocks for multildap module	6 years ago
Kyle Brandt	599514ad68	middleware: add security related HTTP(S) response headers (#17522 ) * x_xss_protection * strict_transport_security (HSTS) * x_content_type_options these are currently defaulted to false (off) until the next minor release. fixes #17509	6 years ago
Kyle Brandt	c09fe3c3b4	remote_cache: Fix redis (#17483 ) * wip: fix remote cache for redis connstr parsing and non-negative expires for #17377 TODO: finish parse, check zero case, find out why negative duration in the first place * finish parse. Still TODO, find out negative value, and decide if would be better to make database specific entries in the .ini file * update ini files * remove accidental uncomment in defaults.ini * auth_proxy: expiration non-negative so expiration is not in the past * fix test, revert neg in redis * review: use errutil	6 years ago
Tom McClellan	34f314552d	Config: Add comment before log_queries in sample ini file (#17462 )	6 years ago
Jonathan Rockway	02975256d1	Tracing: allow propagation with Zipkin headers (#17009 ) Closes #17006	6 years ago
Abhilash Gnan	04d473b3e5	HTTP Server: Serve Grafana with a custom URL path prefix (#17048 ) Adds a new [server] setting `serve_from_sub_path`. By enabling this setting and using a subpath in `root_url` setting, e.g. `root_url = http://localhost:3000/grafana`, Grafana will be accessible on `http://localhost:3000/grafana`. By default it is set to `false` for compatibility reasons. Closes #16623	6 years ago
Marcus Efraimsson	1c1427520d	Security: Add new setting allow_embedding (#16853 ) When allow_embedding is false (default) the Grafana backend will set the http header `X-Frame-Options: deny` in all responses to non-static content which will instruct browser to not allow Grafana to be embedded in `<frame>`, `<iframe>`, `<embed>` or `<object>`. Closes #14189	6 years ago
Oleg Gaidarenko	66c9297c36	Feature: introduce LdapActiveSyncEnabled setting (#16787 ) * Feature: introduce LdapActiveSyncEnabled setting We probably remove it after the active sync is done. But at the moment we do not want to affect the current users with not fully tested feature * Chore: move settings in more logical order	6 years ago
Oleg Gaidarenko	62b85a886e	LDAP Refactoring to support syncronizing more than one user at a time. (#16705 ) * Feature: add cron setting for the ldap settings * Move ldap configuration read to special function * Introduce cron setting (no docs for it yet, pending approval) * Chore: duplicate ldap module as a service * Feature: implement active sync This is very early preliminary implementation of active sync. There is only one thing that's going right for this code - it works. Aside from that, there is no tests, error handling, docs, transactions, it's very much duplicative and etc. But this is the overall direction with architecture I'm going for * Chore: introduce login service * Chore: gradually switch to ldap service * Chore: use new approach for auth_proxy * Chore: use new approach along with refactoring * Chore: use new ldap interface for auth_proxy * Chore: improve auth_proxy and subsequently ldap * Chore: more of the refactoring bits * Chore: address comments from code review * Chore: more refactoring stuff * Chore: make linter happy * Chore: add cron dep for grafana enterprise * Chore: initialize config package var * Chore: disable gosec for now * Chore: update dependencies * Chore: remove unused module * Chore: address review comments * Chore: make linter happy	6 years ago
Oleg Gaidarenko	78cd9058a3	Feature: add cron setting for the ldap settings (#16673 ) * Feature: add cron setting for the ldap settings * Move ldap configuration read to special function * Introduce cron setting (no docs for it yet, pending approval) * Chore: address code review comments	6 years ago
Josh	fca5ee4bea	Provisioning: Support FolderUid in Dashboard Provisioning Config (#16559 ) * add folderUid to DashbaordsAsConfig structs and DashbardProviderConfigs struct, set these values in mapping func look for new folderUid values in config_reader tests set dashboard folder Uid explicitly in file_reader, which has no affect when not given * formatting and docstrings * add folderUid to DashbaordsAsConfig structs and DashbardProviderConfigs struct, set these values in mapping func look for new folderUid values in config_reader tests set dashboard folder Uid explicitly in file_reader, which has no affect when not given * formatting and docstrings * add folderUid option, as well as documentation for the rest of the fields * add blank folderUid in devenv example. * add folderUid to provisioning sample yaml * instead of just warning, return error if unmarshalling dashboard provisioning file fails * Removing the error handling and adding comment * Add duplicity check for folder Uids Co-authored-by: swtch1 <joshua.thornton@protonmail.com>	6 years ago
Oleg Gaidarenko	db584b3d28	Chore: remove session storage references (#16445 ) * Chore: remove session storage references * Small refactoring of the settings module * Update docs - remove references for the session storage * Update config files (sample and default configs) * Add tests for warning during the config load on defined storage cache * Remove all references to session storage * Remove macaron session dependency * Remove leftovers * Fix: address review comments * Fix: remove old deps * Fix: add skipStaticRootValidation = true to tests * Fix: improve the docs and warning message As per discussion in here - https://github.com/grafana/grafana/pull/16445/files#r273026255 * Chore: make linter happy Fixes #16148 Ref #16114	6 years ago
Carl Bergquist	490515aec6	build: partially replace gometalinter with golangci-lint (#16610 ) we still use gometalinter for goconst since it doesn't report errors for duplicated in test files	6 years ago
Ryan McKinley	3c21a121eb	Plugins: Unifying alpha state & options for all plugins (#16530 ) * app pages * app pages * workign example * started alpha support * remove app stuff * show warning on alpha/beta panels * put app back on plugin file * fix go * add enum for PluginType and PluginIncludeType * Refactoring and moving settings to plugins section fixes #16529	6 years ago
kleph	7ddb770e3b	Configuration: Improve session_lifetime comments (#16238 )	6 years ago
Zzy	1b84a924a3	Alerting: Makes timeouts and retries configurable (#16259 ) Adds new alert settings for configuring timeouts and retries named evaluation_timeout_seconds, notification_timeout_seconds and max_attempts. Closes #16240	6 years ago

1 2 3 4 5 ...

422 Commits (7d9b6a0deec0f5570fa00b5790d66fb087d46b47)