8 Commits (aa92dc860bd95ef941c6fe2f77143a79996514d3)

Author	SHA1	Message	Date
Alexander Zobnin	aa92dc860b	Zanzana: Improve server side error handling (#106378) ... * Zanzana: Split client and server logs * Zanzana: Improve error handling and logging * log internal error at the server side * refactor * improve errors for list request * update go modules * handle errors for read and write * refactor * reset go.mod changes	3 weeks ago
Karl Persson	14886410d6	Zanzana: Use shared auth interceptor for zanzana and pass tracer (#100968) ... * Use shared auth interceptor for zanzana and pass tracer	4 months ago
Karl Persson	0f9b107201	Zanzana: Consistently add context (#98862) ... * Zanzana: Reworks how contextuals are loaded * Cleanup listObjectWithStream * Run list test with streaming enabled	5 months ago
Alexander Zobnin	5922015fec	Zanzana: Setup GRPC authentication in client/server mode (#98680) ... * Zanzana: Setup GRPC authentication in client/server mode * don't use grpcutils * refactor Co-authored-by: Karl Persson <kalle.persson@grafana.com> * Add a namespace stub for in-proc mode Co-authored-by: Karl Persson <kalle.persson@grafana.com> * Read parameters from config * authorize server requests * add namespace to the tests context * use stack id from config * simplify authorize func * properly format namespace * return Unauthenticated if namespace is empty * use insecure cred only in dev env * check request namespace * Use CallCredentials API for client auth * provide config * fail if stack id is missing * improve error message * use insecure connection by default --------- Co-authored-by: Karl Persson <kalle.persson@grafana.com>	5 months ago
Karl Persson	11a4a366c6	Zanzana: Optimize batch check (#96669) ... * Restructure check code so we only check namespace access once for each GroupResource during for batch	7 months ago
Karl Persson	7e38fd733b	Zanzana: Lazy load cached store info (#96452) ... * Lazy load cached store infos	7 months ago
Gabriel MABILLE	cc9cdbe82d	Authz: Move extension proto up a layer (#96254) ... * Authz: Move extension proto up a layer * Lint	8 months ago
Alexander Zobnin	910ec7e7dc	Zanzana: Use separate store for each org (#96015) ... * Move server init into server package * map store name to id * refactor model loading * pass namespace into reconcilers and collectors * refactor * Extend authz server with Read and Write methods * use new read/write in reconciler * implement server side read and write * Sync permissions for every org * handle namespace in check and list * split read and write * provide conditions * Fix client implementation * fix nil conditions * remove unused client code * use lock for store access * move type translators to common package * fix folder collector * fix store creation * remove unused AuthorizationModelId * fix server tests * fix linter	8 months ago