135 Commits (7ea0fab6065f2b6cdf604cd83ee03da0c9237cdf)

Author	SHA1	Message	Date
Mariell Hoversholm	d0d7078953	App Platform: Remove mutable globals (#102962) ... * App Platform: Remove mutable globals * chore: clarify why this exists * fix: support multi-tenant mode * refactor: call builder providers directly * CI: Force re-build	2 months ago
Alexander Zobnin	63a2ce7214	Zanzana: Support subresources for users and service accounts (#102874) ... * Zanzana: Support subresources for users and service accounts * rename relationsFolder * fix linter error	2 months ago
Karl Persson	c236a22284	Authz: Include context in logs when using cache (#102810) ... Include context in logs when using cache	2 months ago
Stephanie Hingtgen	7c2890384a	K8s: Dashboards: Set v1alpha1 as priority (#102729)	2 months ago
Alexander Zobnin	c34394f385	Zanzana: Support subresources for typed resources (#102470) ... * Zanzana: Support subresources for folders * refactor * fix subresource requests * implement listing for folders subresources * teams subresources PoC * re-enable tests * use team resource def from iam * fix tests * remove unused code * refactor: rename to subresource * split resource schema * update workspaces * rename folder relation to subresource * refactor: rename folder resources to subresources * update readme * fix listing * rename params in subresource filter	2 months ago
Gabriel MABILLE	8767a8f9a1	AuthZ: Improve getUserPermissions query (INNER JOIN, UNION ALL) (#102441)	2 months ago
Matheus Macabu	2ade94bbf7	SecretsManager: Add roles and access control to APIs (#102456)	2 months ago
Gabriel MABILLE	9a556fbde6	AuthZService: Add attributes to traces (#102433)	2 months ago
Igor Suleymanov	5d2ba10113	K8s/Dashboards: Extract Dashboard APIs to an app submodule (#102029) ... * Move dashboard k8s APIs to a separate app Signed-off-by: Igor Suleymanov <igor.suleymanov@grafana.com> * Copy dashboard code in Dockerfile Signed-off-by: Igor Suleymanov <igor.suleymanov@grafana.com> * Fix conversion generation Signed-off-by: Igor Suleymanov <igor.suleymanov@grafana.com> * Update OpenAPI snapshot for dashboard/v0alpha1 Signed-off-by: Igor Suleymanov <igor.suleymanov@grafana.com> --------- Signed-off-by: Igor Suleymanov <igor.suleymanov@grafana.com>	3 months ago
Alexander Zobnin	f6f6ae4496	Zanzana: Update docs with subresources description (#101948) ... * Zanzana: Update docs with subresources description * clarify resource name	3 months ago
Gabriel MABILLE	c8f810b422	Authz: Check namespace is set in the context (#101723) ... * Authz: Test List * Anonymous case * Cover rendering * Authz: Check namespace is set in the context * Explicitly request a namespace check in the storage functions * Revert logic	3 months ago
Gabriel MABILLE	6a1e5dd128	AuthZ: Test List (#101721) ... * Authz: Test List * Anonymous case * Cover rendering	3 months ago
Gabriel MABILLE	6accf13597	AuthZService: Test Check (#101675) ... * wip * deny case * Reorganise * WIP * Check cache * Add anonymous test * Add test for rendering * Lint import * Refactor slightly * more input validation coverage * Require user * typo	3 months ago
Gabriel MABILLE	a91081a2fc	AuthZService: Add certificates to the client (#101603)	3 months ago
Alexander Zobnin	c23bb36956	Zanzana: Fix health check endpoint (#101612)	3 months ago
Ryan McKinley	806c043e45	UnifiedStorage: Rename Batch processing to Bulk (#101413)	3 months ago
Gabriel MABILLE	c3505f0864	AuthZ: Make `NewGrpcTokenAuth` public (#101352) ... * AuthZ: Expose NewGrpcTokenAuth * Lint	3 months ago
Karl Persson	fa74d1c36d	Authn: Sync authlib and update how we construct authn client interceptor (#101124) ... * Sync authlib and update how we construct authn client interceptor * Remove namespace from checker	3 months ago
Karl Persson	74632a25c3	Authz: folder api tls settings (#101213) ... * Skip certificate verification * Add more settings for folder api	3 months ago
Todd Treece	9e80b0f913	K8s: Add error to GetRestConfig (#101147) ... K8s: Add error to RestConfigProvider return values	3 months ago
Karl Persson	14886410d6	Zanzana: Use shared auth interceptor for zanzana and pass tracer (#100968) ... * Use shared auth interceptor for zanzana and pass tracer	3 months ago
Alexander Zobnin	fcb88f6ccc	Zanzana: revert cluster store for fixed roles (#100958) ... * Zanzana: revert cluster store for fixed roles * update go workspace	3 months ago
Karl Persson	4df398c084	Authz: Sync authlib and update authz client setup code (#100817) ... * Sync authlib and update setup code for authz client	3 months ago
Karl Persson	e9b2f69137	Authz: Only have two modes for authz client (#100803) ... * Only have "inproc" and "clod" mode	3 months ago
Karl Persson	1b1954de28	Authz: add support to use folder api to fetch folder tree (#100038) ... * Add FolderStore interface * Authz: add implementation to use folders api and use it inproc with loopback config * Add tracing and add rest.Config for talking with folder api using access tokens * Restructure test to get rid of circular dependencies in tests * use correct group version kind --------- Co-authored-by: gamab <gabriel.mabille@grafana.com>	4 months ago
Alexander Zobnin	7234a17d1d	Zanzana: Use authzService audience (#100417)	4 months ago
Karl Persson	bfa4fa3c68	Authz: Refactor folder tree (#99554) ... * Refactor folder tree to its own structure * Make it possible to json encode the tree * Use iterations for Ancestors and Children --------- Co-authored-by: IevaVasiljeva <ieva.vasiljeva@grafana.com>	4 months ago
Karl Persson	011301f06f	Authz: client cache (#100195) ... * Reduce client permissions cache for authz client * Adjust server cache ttl	4 months ago
Karl Persson	d16374d339	Authz: For list collect all folder permisions into items (#99955) ... * For list collect all folder permisions into items --------- Co-authored-by: Gabriel MABILLE <gamab@users.noreply.github.com>	4 months ago
Alexander Zobnin	a95005eab5	Zanzana: Disable broken OpenFGA health check (#99818) ... * Zanzana: Disable broken OpenFGA health check * simplify return Co-authored-by: Gabriel MABILLE <gamab@users.noreply.github.com> --------- Co-authored-by: Gabriel MABILLE <gamab@users.noreply.github.com>	4 months ago
Ieva	33a53d170b	AuthZ service: Add metrics (#99007) ... * add metrics for authZ MT service * remove metrics that are already tracked by the GRPC server metrics Co-authored-by: Gabriel MABILLE <gamab@users.noreply.github.com> * undo unneeded change * test fix --------- Co-authored-by: Gabriel MABILLE <gamab@users.noreply.github.com>	4 months ago
Gabriel MABILLE	a9f0e15778	AuthZ: Change cache interface (#99058) ... * Authz: Switch to remotecache * Todos * lint * lint test * test readibility * Remove ttls * implement a cache wrap * Rm unused func * Comment * Update workspace: * Use cache * Fix comment	4 months ago
Karl Persson	b0347792cc	Zazana: Fix verb to relation mapping (#99409)	4 months ago
Ieva	723fa7ddf9	MT AuthZ: Resolve renderer permissions in MT authZ service (#99362) ... * resolve renderer permissions in MT authZ service * also include DS read perms * fix tests and linting	4 months ago
Karl Persson	d740f9fc60	Authz: Simplify mapper and only check folders if its supported (#99357) ... * Simplify mapper and only check folders if its supported	4 months ago
Ryan McKinley	680e6bc1f8	Authlib: Use types package rather than claims (#99243)	4 months ago
Karl Persson	7329d2c34b	Authz: Account for fixed roles when running oss and using authz service (#99244) ... * Extract "PermissionStore" from general store interface * Add static and union permission stores * Add GetStaticRoles * Use accesscontrol.Service for inproc to provide static permissions	4 months ago
Karl Persson	67252dfa46	Zanzana: Add grpc health and readiness checks for standalone zanzana (#99176) ... Add grpc health and readiness checks for standalone zanzana	4 months ago
Alexander Zobnin	c5f14407cc	Zanzana: Refactor stores listing (#99098) ... Zanzana: Refactor store loading	4 months ago
Karl Persson	2187a66f2b	Zanzana: Split up settings into client and server sections (#99066) ... * Split up zanzana settings into client and server sections * Update workspace	4 months ago
Ryan McKinley	cd46f1ddb9	Search: Remove history query (#99026)	5 months ago
Karl Persson	3f71a72c1a	Authz: Remove "wrapper" interface and only check feature toggle for grpc mode (#98933) ... * Remove "wrapper" interface and only check feature toggle for grpc and cloud mode * Only set name for update checks * Set dashboard permissions for admin user	5 months ago
Karl Persson	ce0d986673	Zanzana: Use cache for both streamed and non-stream version of list objects (#98882) ... * Add prefix constants and use string builders / string concatinations * Use cache for both streamed and non-stream versions of list objects * Remove unused constants	5 months ago
Gabriel MABILLE	4c86de2678	Chore: Update authlib (#98870) ... * Chore: Update authlib * AccessChecker -> AccessClient	5 months ago
Ieva	9b34a56d7c	AuthZ service: Take action sets into account when checking folder create permissions (#98751) ... take action sets into account when checking folder create permissions	5 months ago
Gabriel MABILLE	4d699d4810	AuthZ: Use M3 AuthZ Service (#98621) ... * AuthZ: Use M3 AuthZ Service Co-authored-by: ievaVasiljeva <ieva.vasiljeva@grafana.com> * Fix oss * fake auth info --------- Co-authored-by: ievaVasiljeva <ieva.vasiljeva@grafana.com>	5 months ago
Karl Persson	0f9b107201	Zanzana: Consistently add context (#98862) ... * Zanzana: Reworks how contextuals are loaded * Cleanup listObjectWithStream * Run list test with streaming enabled	5 months ago
Alexander Zobnin	5922015fec	Zanzana: Setup GRPC authentication in client/server mode (#98680) ... * Zanzana: Setup GRPC authentication in client/server mode * don't use grpcutils * refactor Co-authored-by: Karl Persson <kalle.persson@grafana.com> * Add a namespace stub for in-proc mode Co-authored-by: Karl Persson <kalle.persson@grafana.com> * Read parameters from config * authorize server requests * add namespace to the tests context * use stack id from config * simplify authorize func * properly format namespace * return Unauthenticated if namespace is empty * use insecure cred only in dev env * check request namespace * Use CallCredentials API for client auth * provide config * fail if stack id is missing * improve error message * use insecure connection by default --------- Co-authored-by: Karl Persson <kalle.persson@grafana.com>	5 months ago
Gabriel MABILLE	bc7e90bc28	AuthZ: Fix client dial options (#98827)	5 months ago
Karl Persson	c593b20465	Zanana: Add custom verb for get_permissions and set_permissions. (#98616) ... * Add custom verb for get_permissions and update_permissions. Co-authored-by: Alexander Zobnin <alexanderzobnin@gmail.com>	5 months ago