grafana

Commit Graph

Author	SHA1	Message	Date
github-actions[bot]	86cbbaf6c1	apply security patch: release-10.4.18/369-202504020741.patch commit c0f0d89a6b403c209b189704873b9d3502a81234 Author: Andres Martinez Gotor <andres.martinez@grafana.com> Date: Mon Mar 31 12:15:52 2025 +0200 Sanitize paths before evaluating access to route	2 months ago
Mariell Hoversholm	750b094dda	[release-10.4.18] Go: Bump to 1.24.2 (#103531 ) * Go: Bump to 1.24.2 * CI: Update golangci-lint * feat: update swagger * fix: more lints * fix: lints	3 months ago
Misi	ad990cf8e1	[release-10.4.18] Auth: Fix SAML user IsExternallySynced not being set correctly (#98487 ) (#103177 ) * Auth: Fix SAML user IsExternallySynced not being set correctly (#98487) (cherry picked from commit `345757c3ae`) * Test fixes * lint --------- Co-authored-by: xavi <114113189+volcanonoodle@users.noreply.github.com>	3 months ago
Ieva	1215a28817	[release-10.4.17] Service Accounts: Do not show error pop-ups for Service Account and Renderer UI flows (#101804 ) * backport fixes from https://github.com/grafana/grafana/pull/101679 * Service Accounts: Don't show error pop-ups for Service Account and Renderer UI flows (#101776) * don't show error pop-ups for SAs and renderer * only hide non 4xx error pop'ups * linting (cherry picked from commit `392124de00`)	4 months ago
Matheus Macabu	9f4ef23c33	[release-10.4.17] Chore: Bump Go version to 1.23.7 (#101565 ) * Chore: Bump Go version to 1.23.7 * Chore: Bump golangci-lint version to match Go version * Chore: Fix new linting errors from Go upgrade * Chore: Fix OpenAPI step in CI * Chore: Fix OpenAPI spec diffs	4 months ago
grafana-delivery-bot[bot]	9a280fa660	[v10.4.x] User: Check SignedInUser OrgID in RevokeInvite (#95486 ) User: Check SignedInUser OrgID in RevokeInvite (#95476) Check SignedInUser OrgID in RevokeInvite (cherry picked from commit `fedcf47702`) Co-authored-by: Misi <mgyongyosi@users.noreply.github.com>	8 months ago
grafana-delivery-bot[bot]	9b929ab7cd	[v10.4.x] Annotations: Optimize search by tags (#93608 ) Annotations: Optimize search by tags (#93547) * Annotations: Optimize search on large number of dashboards * refactor * fix batch size * Return early if no annotations found * revert go.mod * return nil in case of error * Move default limit to the API package * fix empty access control filter * Set default limit to 100 * optimize query when number of annotations is less than limit * Update pkg/services/annotations/annotationsimpl/annotations.go Co-authored-by: Ieva <ieva.vasiljeva@grafana.com> * remove limit from store since it's set in API * set default limit in Find method (do not break tests) * Only add limit to the query if it's set * use limit trick for all searches without dashboard filter * set default page if not provided --------- Co-authored-by: Ieva <ieva.vasiljeva@grafana.com> (cherry picked from commit `5e713673e1`) Co-authored-by: Alexander Zobnin <alexanderzobnin@gmail.com>	9 months ago
grafana-delivery-bot[bot]	4a20bb264a	[v10.4.x] AuthN: Fix signout redirect url (#88749 ) * AuthN: Fix signout redirect url (#87631) * Add missing return * Use sign out redirect url from auth config if configured * remove option from auth.jwt that is not used (cherry picked from commit `0f3080ecb8`) * Fix types --------- Co-authored-by: Karl Persson <kalle.persson@grafana.com>	1 year ago
grafana-delivery-bot[bot]	8e9b524b55	[v10.4.x] Add FolderUID for library elements (#86281 ) Add FolderUID for library elements (#83819) * Revert "Revert "Add FolderUID for library elements" (#83776)" This reverts commit `0dfdb2ae47`. * Fix bug, dashboard id and library element fodler_id are the corresponding values Dashboard table hold both dahboards and tables (cherry picked from commit `5c4a2de59b`) Co-authored-by: idafurjes <36131195+idafurjes@users.noreply.github.com>	1 year ago
Jo	fe626877c7	[v10.4.x] AuthProxy: Fix missing session for ldap auth proxy users (#85237 ) AuthProxy: Fix missing session for ldap auth proxy users (#85090) fix missing session for ldap auth proxy users (cherry picked from commit `7649d93d17`)	1 year ago
grafana-delivery-bot[bot]	deb12d4e94	[v10.4.x] DataQuery: Track panel plugin id not type (#83164 ) DataQuery: Track panel plugin id not type (#83091) (cherry picked from commit `64e0a4282e`) Co-authored-by: Torkel Ödegaard <torkel@grafana.com>	1 year ago
grafana-delivery-bot[bot]	2fbc070fd1	[v10.4.x] Snapshots: delete from same org (#83170 ) Snapshots: delete from same org (#83111) delete in org (cherry picked from commit `809c1eaddb`) Co-authored-by: Ryan McKinley <ryantxu@gmail.com>	1 year ago
Xavi Lacasa	46c26bbd0b	Auth: Fix email verification bypass when using basic authentication (#82914 )	1 year ago
Karl Persson	9e04fd0fb7	AuthToken: Remove client token rotation feature toggle (#82886 ) * Remove usage of client token rotation flag * Remove client token rotation feature toggle	1 year ago
linoman	ac84069071	Password policy (#82268 ) * add password service interface * add password service implementation * add tests for password service * add password service wiring * add feature toggle * Rework from service interface to static function * Replace previous password validations * Add codeowners to password service * add error logs * update config files --------- Co-authored-by: Karl Persson <kalle.persson@grafana.com>	1 year ago
Gabriel MABILLE	846eadff63	RBAC Search: Replace `userLogin` filter by `namespacedID` filter (#81810 ) * Add namespace ID * Refactor and add tests * Rename maxOneOption -> atMostOneOption * Add ToDo * Remove UserLogin & UserID for NamespaceID Co-authored-by: jguer <joao.guerreiro@grafana.com> * Remove unecessary import of the userSvc * Update pkg/services/accesscontrol/acimpl/service.go * fix 1 -> userID * Update pkg/services/accesscontrol/accesscontrol.go --------- Co-authored-by: jguer <joao.guerreiro@grafana.com>	1 year ago
Sofia Papagiannaki	69f604f7fa	Chore: Fix benchmarks (#82714 )	1 year ago
Ieva	4d53385d5f	RBAC: allow listing permissions on the root folder (#82184 ) * allow returning AC metadata for the root folder * add a test * share the reserved root folder UID with frontend	1 year ago
Karl Persson	1315c67c8b	Team/User: UID migrations (#82298 ) * Add user uid migration to run on every startup to protect against empty values in a upgrade downgrade scenario * Add team uid migration to run on every startup to protect against empty values in a upgrade downgrade scenario * Run team uid migration	1 year ago
Will Browne	788b9afda3	Plugins: Make it possible to support multiple plugin versions (#82116 ) * first pass * use version in more places * add comment * update installer * fix wire * fix tests * tidy * simplify changes * fix in mem * remove unused step * fix step dupe logic for child plugins + add tests	1 year ago
Jo	6f62d970e3	JWT Authentication: Add support for specifying groups in auth.jwt for teamsync (#82175 ) * merge JSON search logic * document public methods * improve test coverage * use separate JWT setting struct * correct use of cfg.JWTAuth * add group tests * fix DynMap typing * add settings to default ini * add groups option to devenv path * fix test * lint * revert jwt-proxy change * remove redundant check * fix parallel test	1 year ago
Dan Cech	790e1feb93	Chore: Update test database initialization (#81673 ) * streamline initialization of test databases, support on-disk sqlite test db * clean up test databases * introduce testsuite helper * use testsuite everywhere we use a test db * update documentation * improve error handling * disable entity integration test until we can figure out locking error	1 year ago
Agnès Toulet	28e66b4ad8	Rendering: Adds PDF support behind feature toggle (#81811 ) * start pdf refactor * Update AppChrome.tsx * Update AppChrome.tsx * add encoding param to rendering grpc service * fix plugin mode * clean up * fix backend tests * fix lint errors * Support pdf encoding in render http api --------- Co-authored-by: Torkel Ödegaard <torkel@grafana.com>	1 year ago
Tania	14a36b4040	Folders: Forbid performing operations on folders via dashboards HTTP API (#81264 ) * Forbid creating folders via dashboard api * Update delete endpoint * Update docs	1 year ago
Ryan McKinley	ba3ee60711	K8s: Allow more control over the final openapi results (#81829 )	1 year ago
Sofia Papagiannaki	cf6ebb0548	Swagger: Remove redundant annotation (#81780 )	1 year ago
Misi	5da4021ea0	Auth: Fix routing of SSO setting pages (#81762 ) Fix ac.Parameter	1 year ago
Eugene Klimov	702e22806c	Plugins Proxy: Allow using {{ .URL }} inside "routes" section in plugin.json (#80858 ) Signed-off-by: Slach <bloodjazman@gmail.com> Co-authored-by: Andres Martinez Gotor <andres.mgotor@gmail.com>	1 year ago
Ryan McKinley	795eb4a8d8	K8s/Snapshots: Add dashboardsnapshot api group (#77667 )	1 year ago
Michael Mandrus	7464ea4346	Feature Toggles: Switch feature toggle admin page over to k8s API (#80854 ) * add handling for legacy and k8s apis to frontend * use backend srv directly not redux * add unit test to make sure the correct apis are being called * require api server flag * fix feature toggle name * ensure both pages work correctly * make consistent with legacy api * implement webhook update * fix unit test * remove old apis and update --------- Co-authored-by: Ryan McKinley <ryantxu@gmail.com>	1 year ago
Ryan McKinley	9c9e5e68c8	User: Add uid colum to user table (#81615 )	1 year ago
Todd Treece	67b6be5515	K8s: Refactor config/options for aggregation (#81739 )	1 year ago
Ryan McKinley	e013cd427c	K8s: Add basic query service (#80325 )	1 year ago
Dominik Prokop	f77c831e3f	Data query: Allow logging panel plugin id when executing queries (#81164 ) * Data query: Allo logging panel plugin id when executing queries * Update tracing header middleware * Test fix * Add panelPluginType to query analytics * Cleanup	1 year ago
Mihai Doarna	6b28669e1f	Send empty http response when body is nil (#80196 ) * build empty response if body is nil * fix test	1 year ago
Giedrius Statkevičius	6f245121d0	Plugins: Fix colon in CallResource URL returning an error when creating plugin resource request (#79746 ) * Plugin: handle colon character in path url.Parse() does not handle the given input correctly when the input contains a colon character. The user will see the following error message when trying to use remote cluster in Elasticsearch: ``` level=warn msg="Failed for create plugin resource request" error="parse \"foo-,:foo-/_mapping\": first path segment in URL cannot contain colon" traceID= ``` As far as I can tell, we only want to set the path here + rawquery so avoid url.Parse() altogether. Add more tests --------- Co-authored-by: Giuseppe Guerra <giuseppe@guerra.in>	1 year ago
Ryan McKinley	1fab107e79	FeatureFlags: Avoid using cfg.IsFeatureToggleEnabled (#81407 )	1 year ago
Ieva	048d1e7c86	RBAC: Annotation permission migration (#78899 ) * add annotation permissions to dashboard managed role and add migrations for annotation permissions * fix a bug with conditional access level definitions * add tests * Update pkg/services/sqlstore/migrations/accesscontrol/dashboard_permissions.go Co-authored-by: Gabriel MABILLE <gamab@users.noreply.github.com> * apply feedback * add batching, fix tests and a typo * add one more test * undo unneeded change * undo unwanted change * only check the default basic permissions for non-OSS instances * account for all wildcards and simplify the check a bit * error handling and extra conditionals to avoid test failures * fix a bug with admin permissions not appearing for folders * fix the OSS check --------- Co-authored-by: Gabriel MABILLE <gamab@users.noreply.github.com>	1 year ago
Gabriel MABILLE	722b78f3e0	RBAC: Add userLogin filter to the permission search endpoint (#81137 ) * RBAC: Search add user login filter * Switch to a userService resolving instead * Remove unused error * Fallback to use the cache * account for userID filter * Account for the error * snake case * Add test cases * Add api tests * Fix return on error * Re-order imports	1 year ago
idafurjes	0880a239f8	Add leftover metrics for FolderID (#81246 )	1 year ago
Misi	4577e61ee7	Auth: Improve /admin/authentication permission checks and include new SSO pages (#81183 ) * Move evalAuthSettings to ssoutils * Improve permission check for auth page	1 year ago
idafurjes	6b4eaa0d18	Add MFolderIDsAPICount metric to count FolderIDs in api package (#80866 ) * Add MFolderIDsAPICount metric to cound FolderIDs in api package * Change counter to counter vector with method names as string values	1 year ago
Jo	9f5a8bf926	AuthInfo: Revert #81013 . Fix cache invalidation (#81050 ) * Revert "Auth: Revert "Auth: Cache Auth Info" (#81013)" This reverts commit `ce84f7c540`. * fix cache invalidation during user takeover * fix incomplete test	1 year ago
Marcus Efraimsson	6768c6c059	Chore: Remove public vars in setting package (#81018 ) Removes the public variable setting.SecretKey plus some other ones. Introduces some new functions for creating setting.Cfg.	1 year ago
Karl Persson	147bf01745	IDForwarding: Always forward id tokens to plugins (#81041 ) * Always forward id tokens to plugins	1 year ago
Misi	ce84f7c540	Auth: Revert "Auth: Cache Auth Info" (#81013 ) Revert "Auth: Cache Auth Info"	1 year ago
Will Browne	3f30cbf91c	DataSources: Add datasource fetching + querying interface (#80749 ) * first pass * separate oss + enterprise * tidy things up * add ctx * fix tests * use standalone svcs * mv plugin context provide * fix wire * fix import	1 year ago
Misi	6752a512f3	Auth: Change UI route, add frontend endpoints to api.go (#80671 ) Delete advanced from UI route, fix 404	1 year ago
Alexander Zobnin	484ced521f	Auth: Fix identifying rendering request (#80807 ) * Auth: Fix identifying rendering request * Add comments	1 year ago
Jo	c767481dee	Auth: Cache Auth Info (#80620 ) * leverage cache for auth info * fix tests and integration * fix panic * fix panic	1 year ago

1 2 3 4 5 ...

3503 Commits (a0ec5fbcdfa1ea54c1cc180c95f7172b45d5d1b2)