grafana

Commit Graph

Author	SHA1	Message	Date
Arseny Smalyuk	8e70d5d181	Add timeout option to datasource config (#31871 )	5 years ago
Will Browne	3b7b49a4aa	Auth: Use SigV4 lib from grafana-aws-sdk (#30713 ) * replace with lib * remove test + apply feedback	5 years ago
Emil Hessman	2d803ee57e	Chore: Rewrite models datasource cache test to standard library (#30040 )	5 years ago
Arve Knudsen	c2cad26ca9	Chore: Disable default golangci-lint filter (#29751 ) * Disable default golangci-lint filter Signed-off-by: Arve Knudsen <arve.knudsen@gmail.com> * Chore: Fix linter warnings Signed-off-by: Arve Knudsen <arve.knudsen@gmail.com>	5 years ago
Jeremy Alvis	f021f97c31	DataSourceSettings: Add servername field to DataSource TLS config (#29279 ) * DataSourceSettings: Add servername field to DataSource TLS config A DNS lookup URL can be provided in the DataSource URL field in order to dynamically load balance between multiple instances of a DataSource. When using mutual TLS, Golang's TLS config implementation checks that the certificate's common name (< 1.15) or subject alternative name (>= 1.15) has the same value as the domain being accessed. If the DNS entry is dynamically generated for a specific environment, the certificate cannot be generated with a name matching the dynamic DNS URL. As such, Golang offers a servername field that can be set to overwrite what value is used when checking against the certificate's common name (or subject alternative name). Without this change, Skip TLS Verify must be set to true in order for the DataSource to work, removing some of the benefits gained by using mutual TLS. This commit adds the ability to set Grafana's internal Golang TLS config servername field from the UI or a provisioned DataSource. The servername field is optional and the existing behavior is retained if the field is not set. Co-authored-by: Dana Pruitt <dpruitt@vmware.com> Co-authored-by: Jeremy Alvis <jalvis@pivotal.io> * Update docs with PR review changes Co-authored-by: Jeremy Alvis <jalvis@pivotal.io> Co-authored-by: Dana Pruitt <dpruitt@vmware.com> * Update with additional PR requested changes * Minor updates based on PR change requests Co-authored-by: Dana Pruitt <dpruitt@vmware.com>	5 years ago
Will Browne	7d63b2c473	Auth: Add Sigv4 auth option to datasources (#27552 ) * create transport chain * add frontend * remove log * inline field updates * allow ARN, Credentials + Keys auth in frontend * configure credentials * add tests and refactor * update frontend json field names * fix tests * fix comment * add app config flag * refactor tests * add return field for tests * add flag for UI display * update comment * move logic * fix config * pass config through props * update docs * pr feedback and add docs coverage * shorten settings filename * fix imports * revert docs changes * remove log line * wrap up next as round tripper * only propagate required config * remove unused import * remove ARN option and replace with default chain * make ARN role assume as supplemental * update docs * refactor flow * sign body when necessary * remove unnecessary wrapper * remove newline * Apply suggestions from code review * PR fixes Co-authored-by: Arve Knudsen <arve.knudsen@gmail.com>	5 years ago
Arve Knudsen	5070f7a75b	Chore: Start harmonizing linting with plugin SDK (#25854 ) * Chore: Harmonize linting with plugin SDK Signed-off-by: Arve Knudsen <arve.knudsen@gmail.com> * Chore: Fix linting issues Signed-off-by: Arve Knudsen <arve.knudsen@gmail.com>	6 years ago
Arve Knudsen	07582a8e85	Chore: Fix various spelling errors in back-end code (#25241 ) * Chore: Fix various spelling errors in back-end code Co-authored-by: Sofia Papagiannaki <papagian@users.noreply.github.com> Co-authored-by: Josh Soref <jsoref@users.noreply.github.com>>	6 years ago
Marcus Efraimsson	3fc5f4552a	CloudWatch: Fix high CPU load (#20579 ) * Cache decrypted securejsondata * Models: Add datasource cache tests	6 years ago
Arve Knudsen	9843a886f7	pkg/models: Check errors (#19839 ) Check errors in pkg/models.	6 years ago
Weeco	8cd93f0b88	Datasource: Add custom headers on alerting queries (#19508 ) * Add custom headers on alerting queries Reference issue #15381 Signed-off-by: Martin Schneppenheim <martin.schneppenheim@rewe-digital.com> * Fix datasource transport tests * Migrate decrypting header test to models pkg * Check correct header * Add HTTP transport test Fixes #15381	6 years ago
Oleg Gaidarenko	caa1314f44	Build: use golangci-lint as a make command (#17739 ) * Build: use golangci-lint as a make command * Since gometalinter was deprecated in favor of golangci-lint so it was replaced by it. Responsibilities held by the gometalinter was moved to golangci-lint * There was some changes in implementation (that was also mentioned in the code comment) between the tools, which uncovered couple errors in the code. Those issues were either solved or disabled by the inline comments * Introduce the golangci-lint config, to make their configuration more manageable * Build: replace backend-lint.sh script with make	7 years ago
Matt Bostock	4f3856adfb	Retain old name for TLS client auth I renamed `tlsAuth` to `tlsClientAuth` to better describe the fact that this variable is used to enable TLS client authentication (as opposed to server authentication) in c04d95f35. However, changing the name breaks backwards compatibility for existing installations using this feature and Grafana does not have a standardised way of migrating changes in the schema: https://github.com/grafana/grafana/pull/9377#issuecomment-333063543 For reasons of expediency given the severity of the bug (not verifying TLS), keep the old name.	8 years ago
Matt Bostock	5d312be419	Datasource HTTP settings: Add TLS skip verify In c04d95f35 I changed the default for datasource HTTP requests so that TLS is always verified. This commit adds a checkbox to allow an admin to explicitly skip TLS verification, for testing purposes.	8 years ago
Matt Bostock	43169e4302	Verify datasource TLS and split client auth and CA	8 years ago
Matt Bostock	592c46c8b5	Tests: Clarify what InsecureSkipVerify does	8 years ago
Dan Cech	b489e93d94	Config Array Syntax (#8204 ) * refactor util encryption library so it doesn't have to import log * add util.SplitString to handle space and/or comma-separated config lines * go fmt	9 years ago
Carl Bergquist	2c7adccf12	Use cache for http.client in tsdb package. (#6833 ) * datasource: move caching closer to datasource struct * tsdb: use cached version of datasource http transport closes #6825	9 years ago
stuart nelson	bc69c8ef40	Add transport cache for reverse proxy (#6776 ) * Add transport cache for reverse proxy * Use updated at in cache	9 years ago
stuart nelson	9ed21c6a16	Add transport cache for reverse proxy (#6776 ) * Add transport cache for reverse proxy * Use updated at in cache	9 years ago
Daniel Lee	b6b53c0f4b	fix(dataproxy): test with CA Cert	9 years ago
Daniel Lee	387f8cc0c6	feat(dataproxy): TLS CA Cert for self-signed certs For self-signed TLS Certificates, authentication with InsecureSkipVerify set to false then this error will occur: x509: certificate signed by unknown authority The solution is to allow the user to upload the CA cert as well.	9 years ago
Daniel Lee	c9b2c694f1	refactor(dataproxy): TLS Client Auth Use a SecureJsonData field for TLS Client Auth instead of 3 new db fields. Same model as used for PluginSettings. Saves and encrypts the pem file content rather than just saving the paths to the cert and key. This allows for uploading from the Edit Datasource page in Grafana.	9 years ago
Mehdi Abaakouk	6e532231dc	Fix dataproxy_test.go tests This change fix dataproxy_test.go tests that was failing with: pkg/api/dataproxy_test.go:17: not enough arguments in call to NewReverseProxy pkg/api/dataproxy_test.go:39: not enough arguments in call to NewReverseProxy FAIL _/home/ubuntu/grafana/pkg/api [build failed]	10 years ago
Torkel Ödegaard	ae3b9617b6	Fixed dataproxy test	11 years ago
Torkel Ödegaard	da41d99aa7	Fixed sql integration test	11 years ago
Torkel Ödegaard	10820f31c2	Changed go package path	11 years ago
Torkel Ödegaard	164d11c816	InfluxDB now works in proxy mode, influxdb username and password is added in the backend and never exposed to frontend, #8	11 years ago

18 Commits (8e70d5d1818fa12a3ca442e9af20adf1415a0d2c)