grafana

Commit Graph

Author	SHA1	Message	Date
Yuri Tseretyan	00bb3215cb	Alerting: Fix time-interval conversion to return bad request if payload is incorrect (#94995 )	9 months ago
Stephanie Hingtgen	644a16048f	K8s: add feature toggle for dashboard backend (#94753 )	9 months ago
William Wernert	19a9a79467	Alerting: Publish event when one or more rules are created or changed (#93637 ) * Publish event when one or more rules are changed * Publish affected rules * Use a fake bus to test publish event without listening * Wire alerting store into provisioning service	9 months ago
Arati R.	992186c88f	K8s/Folders: Require create permissions when creating folder (#94514 ) * Require create permissions when creating folder * Test folder create permissions * Add test for nested folder permissions on creation * Replace hardcoded verbs	9 months ago
Prem Saraswat	5c03c14b25	resource-api: Loosen name validation to match K8s requirements (#93404 ) * resource-api: Loosen name validation to match K8s requirements This patch modifies some of the requirements for name validation of objects in Resource API to match Kubernetes. The limit we have on characters in name is 64, but some resources allow upto 253 characters. Similarly we also include `:` in the regex, as many objects in default K8s setup use it in the name (the group `system:masters` for example) Signed-off-by: Prem Kumar <prem.saraswat@grafana.com> * Update the name column length in migrator and update e2e test to verify --------- Signed-off-by: Prem Kumar <prem.saraswat@grafana.com>	9 months ago
Arati R.	011978e81b	K8s/Folders: Remove folder service from client (#94450 ) * Support getting full path of UIDs * Use full path to set parents field * Update get folder test * Add folder store test for getting with full path UIDs * Add test for parsing parent titles * Test nested folder create payload	9 months ago
Gábor Farkas	0a7b731242	datasources: querier: request parsing failures are not http 500 (#94488 ) * datasources: querier: request parsing failures are not http500 * fix test --------- Co-authored-by: Adam Simpson <adam@adamsimpson.net>	9 months ago
Arati R.	a42caa7a61	K8s/Folders: Fix tests for creating folders (#94192 ) * Add feature toggle grafanaAPIServerTestingWithExperimentalAPIs * Customise registration of FolderAPIBuilder for tests and fix tests	10 months ago
Tom Ratcliffe	fc51ec70ba	Alerting: Add manage permissions UI logic for Contact Points (#92885 ) * Add showPolicies prop * Add manage permissions component for easier reuse within alerting * Add method for checking whether to show access control within alerting * Remove accidental console.log from main * Tweak styling for contact point width and add manage permissions drawer * Improve typing for access control type response * Add basic test for manage permissions on contact points list * Only show manage permissions if grafana AM and alertingApiServer is enabled * Update i18n * Add test utils for turning features on and back off * Add access control handlers * Update tests with new util * Pass AM in and add tests * Receiver OSS resource permissions There is a complication that is not fully addressed: Viewer defaults to read:* and Editor defaults to read+write+delete:* This is different to other resource permissions where non-admin are not granted any global permissions and instead access is handled solely by resource-specific permissions that are populated on create and removed on delete. This allows them to easily remove permission to view or edit a single resource from basic roles. The reason this is tricky here is that we have multiple APIs that can create/delete receivers: config api, provisioning api, and k8s receivers api. Config api in particular is not well-equipped to determine when creates/deletes are happening and thus ensuring that the proper resource-specific permissions are created/deleted is finicky. We would also have to create a migration to populate resource-specific permissions for all current receivers. This migration would need to be reset so it can run again if the flag is disabled. * Add access control permissions * Pass in contact point ID to receivers form * Temporarily remove access control check for contact points * Include access control metadata in k8s receiver List & Get GET: Always included. LIST: Included by adding a label selector with value `grafana.com/accessControl` * Include new permissions for contact points navbar * Fix receiver creator fixed role to not give global read * Include in-use metadata in k8s receiver List & Get GET: Always included. LIST: Included by adding a label selector with value `grafana.com/inUse` * Add receiver creator permission to receiver writer * Add receiver creator permission to navbar * Always allow listing receivers, don't return 403 * Remove receiver read precondition from receiver create Otherwise, Creator role will not be able to create their first receiver * Update routes permissions * Add further support for RBAC in contact points * Update routes permissions * Update contact points header logic * Back out test feature toggle refactor Not working atm, not sure why * Tidy up imports * Update mock permissions * Revert more test changes * Update i18n * Sync inuse metadata pr * Add back canAdmin permissions after main merge * Split out check for policies navtree item * Tidy up utils and imports and fix rules in use * Fix contact point tests and act warnings * Add missing ReceiverPermissionAdmin after merge conflict * Move contact points permissions * Only show contact points filter when permissions are correct * Move to constants * Fallback to empty array and remove labelSelectors (not needed) * Allow `toAbility` to take multiple actions * Show builtin alertmanager if contact points permission * Add empty state and hide templates if missing permissions * Translations * Tidy up mock data * Fix tests and templates permission * Update message for unused contact points * Don't return 403 when user lists receivers and has access to none * Fix receiver create not adding empty uid permissions * Move SetDefaultPermissions to ReceiverPermissionService * Have SetDefaultPermissions use uid from string Fixes circular dependency * Add FakeReceiverPermissionsService and fix test wiring * Implement resource permission handling in provisioning API and renames Create: Sets to default permissions Delete: Removes permissions Update: If receiver name is modified and the new name doesn't exist, it copies the permissions from the old receiver to the newly created one. If old receiver is now empty, it removes the old permissions as well. * Split contact point permissions checks for read/modify * Generalise getting annotation values from k8s entities * Proxy RouteDeleteAlertingConfig through MultiOrgAlertmanager * Cleanup permissions on config api reset and restore * Cleanup permissions on config api POST note this is still not available with feature flag enabled * Gate the permission manager behind FF until initial migration is added * Sync changes from config api PR * Switch to named export * Revert unnecessary changes * Revert Filter auth change and implement in k8s api only * Don't allow new scoped permissions to give access without FF Prevents complications around mixed support for the scoped permissions causing oddities in the UI. * Fix integration tests to account for list permission change * Move to `permissions` file * Add additional tests for contact points * Fix redirect for viewer on edit page * Combine alerting test utils and move to new file location * Allow new permissions to access provisioning export paths with FF * Always allow exporting if its grafana flavoured * Fix logic for showing auto generated policies * Fix delete logic for contact point only referenced by a rule * Suppress warning message when renaming a contact point * Clear team and role perm cache on receiver rename Prevents temporarily broken UI permissions after rename when a user's source of elevated permissions comes from a cached team or basic role permission. * Debug log failed cache clear on CopyPermissions --------- Co-authored-by: Matt Jacobson <matthew.jacobson@grafana.com>	10 months ago
Jeff Levin	a21a232a8e	Revert read replica POC (#93551 ) * Revert "chore: add replDB to team service (#91799)" This reverts commit `c6ae2d7999`. * Revert "experiment: use read replica for Get and Find Dashboards (#91706)" This reverts commit `54177ca619`. * Revert "QuotaService: refactor to use ReplDB for Get queries (#91333)" This reverts commit `299c142f6a`. * Revert "refactor replCfg to look more like plugins/plugin config (#91142)" This reverts commit `ac0b4bb34d`. * Revert "chore (replstore): fix registration with multiple sql drivers, again (#90990)" This reverts commit `daedb358dd`. * Revert "Chore (sqlstore): add validation and testing for repl config (#90683)" This reverts commit `af19f039b6`. * Revert "ReplStore: Add support for round robin load balancing between multiple read replicas (#90530)" This reverts commit `27b52b1507`. * Revert "DashboardStore: Use ReplDB and get dashboard quotas from the ReadReplica (#90235)" This reverts commit `8a6107cd35`. * Revert "accesscontrol service read replica (#89963)" This reverts commit `77a4869fca`. * Revert "Fix: add mapping for the new mysqlRepl driver (#89551)" This reverts commit `ab5a079bcc`. * Revert "fix: sql instrumentation dual registration error (#89508)" This reverts commit `d988f5c3b0`. * Revert "Experimental Feature Toggle: databaseReadReplica (#89232)" This reverts commit `50244ed4a1`.	10 months ago
Yuri Tseretyan	10582e48f7	Alerting: Notifications Templates API (#91349 )	10 months ago
Andres Martinez Gotor	225600a08b	Expose queryconvert endpoint (#93656 )	10 months ago
Todd Treece	177965704d	Storage: Test mode 5 (#93714 )	10 months ago
Karl Persson	c28b37a67b	RBAC: Add option to skip rbac check for specified verbs (#93654 ) * Add option to skip rbac check for specified verbs	10 months ago
Claudiu Dragalina-Paraipan	a8b07b0c81	[authn] use authlib client+interceptors for in-proc mode (#93124 ) * Add authlib gRPC authenticators for in-proc mode * implement `StaticRequester` signing in the unified resource client - [x] when the `claims.AuthInfo` value type is `identity.StaticRequester`, and there's no ID token set, create an internal token and sign it with symmetrical key. This is a workaround for `go-jose` not offering the possibility to create an unsigned token. - [x] update `IDClaimsWrapper` to support the scenario above - [x] Switch to using `claims.From()` in `dashboardSqlAccess.SaveDashboard()` --------- Co-authored-by: gamab <gabriel.mabille@grafana.com>	10 months ago
Matthew Jacobson	6652233493	Alerting: Managed receiver resource permission in receiver_svc (#93556 ) * Alerting: Managed receiver resource permission in receiver_svc	10 months ago
Matthew Jacobson	1ede1e32b8	Alerting: Receiver resource permissions service (#93552 )	10 months ago
Ryan McKinley	542105b680	ResourceClient: Exercise resource client in k8s apis tests (#93473 )	10 months ago
Yuri Tseretyan	0f788d8d83	Alerting: Support for renaming receivers (#93349 ) * update RenameReceiverInNotificationSettings in DbStore to check for provisioning * implement renaming in receiver service and provisioning * do not patch route when stitching * fix bug in stitching because it returned new name but the old one was expected * update receiver service to always return result converted from storage model this makes sure that UID and version are consistent with GET\LIST operations * use provided metadata.name for UID of domain model because rename changes UID and request fails * remove rename guard * update UI to not disable receiver name when k8s api enabled * create should calculate uid from name because new receiver does not have UID yet.	10 months ago
Matthew Jacobson	1ea873950b	Alerting: Reject receiver update in config API when FlagAlertingApiServer enabled (#93300 ) * Reject receiver update in config API when FlagAlertingApiServer enabled	10 months ago
Todd Treece	d1ffcc22d9	Playlists: Migrate to App SDK codegen (#93246 )	10 months ago
Matthew Jacobson	3bf77d2e05	Alerting: Include in-use metadata in k8s receiver LIST & GET (#93016 ) * Include in-use metadata in k8s receiver List & Get	10 months ago
Matthew Jacobson	ff6a20f54a	Alerting: Include access control metadata in k8s receiver LIST & GET (#93013 ) * Include access control metadata in k8s receiver List & Get * Add tests for receiver access * Simplify receiver access provisioning extension - prevents edge case infinite recursion - removes read requirement from create	10 months ago
Arati R.	b918739a98	K8s/Folders: Add basic folder integration tests (create, read) (#93232 ) * Add initial folder tests * Add test for get/reading folders * Compare legacy and k8s create and read * Remove dependency on grafanaAPIServerWithExperimentalAPIs	10 months ago
Ryan McKinley	7efadb0a00	Testing: Integration tests for unified-grpc start a local gRPC server (#93201 )	10 months ago
Matthew Jacobson	eea28172e0	Alerting: Add field selectors for k8s receivers API (#93015 ) Add field selectors for k8s receivers API metadata.provenance spec.title	10 months ago
Leonor Oliveira	8d2b8378ed	Remove UID on update in dual writer mode 2 (#93032 ) * Remove UID on update in dual writer mode 2 * WIP: add dashboard tests * Add more crud tests for dashboards in each mode * trigger build * Fix test	10 months ago
Claudiu Dragalina-Paraipan	085aaec958	Fix `playlist` tests (#92837 )	11 months ago
Ryan McKinley	9338e40dc3	K8s/IAM: Move identity.grafana.app to iam.grafana.app (#92929 )	11 months ago
Karl Persson	294712d7ef	User: Add sub resource and api for user teams (#92649 ) * Add sub resource for user teams * Add test snapshots * Update to use ref:s	11 months ago
Leonor Oliveira	2e451b2ed7	Use dw dynamic config (#91882 ) * Remove kubernetesPlaylists feature_toggle * Remove unified_storage_mode * Remove double import * Read from config instead from feature_toggle * cover scenario for when unified storage is not defined * Be temporarily retro compatible with previous feature toggle * Properly read unified_storage section * [WIP] Read new format of config * Fix test * Fix other tests * Generate feature flags file * Use <group>.<resource> schema * Use <group>.resource format on the FE as well * Hide UniStore config from Frontend Signed-off-by: Maicon Costa <maiconscosta@gmail.com> * unwanted changes * Use feature toggles in the FE. Enforce FTs are present before enabling dual writing Co-authored-by: Ryan McKinley <ryantxu@users.noreply.github.com> * use kubernetes playlists feature toggle on the FE * Remove unwanted code * Remove configs from the FE * Remove commented code * Add more explicit example --------- Signed-off-by: Maicon Costa <maiconscosta@gmail.com> Co-authored-by: Maicon Costa <maiconscosta@gmail.com>	11 months ago
Yuri Tseretyan	ce64d79027	Alerting: Integration tests for Receiver API (#90632 ) --------- Co-authored-by: Matthew Jacobson <matthew.jacobson@grafana.com>	11 months ago
Todd Treece	2bb2183b41	Scopes: Move title and groups to status in ScopeDashboardBinding (#92377 ) --------- Co-authored-by: Kyle Brandt <kyle@grafana.com> Co-authored-by: Bogdan Matei <bogdan.matei@grafana.com>	11 months ago
Ryan McKinley	419edef4dc	LibraryPanels: Expose library panels in dashboard apiserver (#92213 )	11 months ago
Ryan McKinley	2136fd9a92	Storage: Remove unified storage feature flag (#92192 ) remove unified storage flag	11 months ago
Kyle Brandt	cab5818bc7	Scopes: Add groups property to ScopeDashboardBinding (#92077 ) - Note: The `dashboardTitle` property and this property (`groups`) are likely to move from the `spec` container to the `status` container within the `scopeDashboardBinding` object in the future.	11 months ago
Yuri Tseretyan	135f6571a9	Alerting: Update Time Interval service to support renaming of resources (#91856 ) * add RenameTimeIntervalInNotificationSettings to storage * update dependencies when the time interval is renamed --------- Co-authored-by: William Wernert <william.wernert@grafana.com>	11 months ago
Kristin Laemmert	c6ae2d7999	chore: add replDB to team service (#91799 )	11 months ago
Ryan McKinley	a0cd89860e	Identity: Add endpoint to get display info for an identifier (#91828 )	11 months ago
Leonor Oliveira	d52d04b6d8	Revert "Use dw dynamic config" (#91846 ) Revert "Use dw dynamic config (#91222)" This reverts commit `0258842f87`.	11 months ago
Leonor Oliveira	0258842f87	Use dw dynamic config (#91222 ) * Remove kubernetesPlaylists feature_toggle * Remove unified_storage_mode * Remove double import * Regenerate feature-toggles * Read from config instead from feature_toggle * cover scenario for when unified storage is not defined	11 months ago
Kristin Laemmert	299c142f6a	QuotaService: refactor to use ReplDB for Get queries (#91333 ) * Feature (quota service): Use ReplDB for quota service Gets This adds the replDB to the quota service, as well as some more test helper functions to simplify updating tests. My intent is that the helper functions can be removed when this is fully rolled out (or not) and we're consistently using the ReplDB interface (or not!) * test updates	12 months ago
Ryan McKinley	9e116d13a5	K8s/Dashboards: Fix dashboard list and add tests (#91523 )	12 months ago
Ryan McKinley	728150bdbd	Identity: extend k8s user.Info (#90937 )	12 months ago
Ryan McKinley	ec6c6bd6c3	Identity: Add read-only identity apiserver (#90418 )	12 months ago
Leonor Oliveira	67b74e1e8a	Dual writer: mode 3 (#90045 ) * Dual writer: mode 3 * Add integration tests for playlits in mode 3 * Remove todo * Update pkg/apiserver/rest/dualwriter_mode3.go Co-authored-by: Arati R. <33031346+suntala@users.noreply.github.com> * Admin: Fixes an issue where user accounts could not be enabled (#88117) Fix: unable to enable user * [REVIEW] FInish mode 3 and add tests * Improve logging * Update dependencies * Update pkg/apiserver/rest/dualwriter_mode3_test.go Co-authored-by: maicon <maiconscosta@gmail.com> * remove test assertion * Use mode log when dual writer is initiated --------- Co-authored-by: Arati R. <33031346+suntala@users.noreply.github.com> Co-authored-by: gonvee <gonvee@qq.com> Co-authored-by: maicon <maiconscosta@gmail.com>	1 year ago
Ryan McKinley	f409f8c169	K8s/Dashboards: Implement dashboards as StorageBackend (#90295 )	1 year ago
Yuri Tseretyan	970cafa20f	Alerting: Time interval Delete API to check for usages in alert rules (#90500 ) * Check if a time interval is used in alert rules before deleting it * Add time interval to parameters of ListAlertRulesQuery and ListNotificationSettings of DbStore == Refacorings == * refactor isMuteTimeInUse to accept a single route * update getMuteTiming to not return err * update delete to get the mute timing from config first	1 year ago
Ryan McKinley	f3f9cc2e92	Scopes: Avoid dots in example names (#90460 )	1 year ago
Ryan McKinley	079f0715aa	ResourceServer: Add resource server protobuf and wrapper (#90007 )	1 year ago

... 2 3 4 5 6

299 Commits (8eef17cb37fc3b56cab9b052d80b6ded998912c7)