14 Commits

Author	SHA1	Message	Date
Mariell Hoversholm	757be6365a	CI: Bump golangci-lint to 2.0.2 (#103572)	2025-04-10 14:42:23 +02:00
Ashley Harrison	e0151528a4	API client generation: Update iam client (#99963) ... * update generated iam client * update API * with meta api * regenerate client * with identify ref --------- Co-authored-by: Ryan McKinley <ryantxu@gmail.com>	2025-02-03 13:40:36 +00:00
Ryan McKinley	b636b81b16	K8s/IAM: Use raw handler for display (not rest.Connector) (#99898)	2025-02-03 14:24:35 +03:00
Ryan McKinley	d8b6ded101	K8s: use deprecatedInternalID label rather than SQL annotation (#99263)	2025-01-21 12:38:14 +03:00
Ryan McKinley	680e6bc1f8	Authlib: Use types package rather than claims (#99243)	2025-01-21 12:06:55 +03:00
Ryan McKinley	cc6d057a18	Provisioning: Rename k8s origin metadata to repo (#96524)	2024-11-15 17:26:14 +03:00
Karl Persson	a82d01214d	Auth: Update authlib (#94947) ... * Update authlib	2024-10-18 13:36:21 +02:00
Karl Persson	d75a9b6aeb	User: Pass name to list users to filter out the correct one (#94153) ... Pass name to list users to filter out the correct one	2024-10-02 17:02:32 +02:00
Karl Persson	0160f4f72c	RBAC: Add legacy authorization checks to service accounts (#93753) ... * Extract a helper funtion to perform list with authorization checks * Add k8s verb to utils package * Construct default mapping when no custom mapping is passed * Configure authorization checks for service accounts * Fix helper and add filtering to service accounts	2024-09-27 15:53:11 +02:00
Karl Persson	c28b37a67b	RBAC: Add option to skip rbac check for specified verbs (#93654) ... * Add option to skip rbac check for specified verbs	2024-09-24 15:13:04 +02:00
Karl Persson	2e38329026	RBAC: Add required component to perform access control checks for user api when running single tenant (#93104) ... * Unexport store and create new constructor function * Add ResourceAuthorizer and LegacyAccessClient * Configure checks for user store * List with checks if AccessClient is configured * Allow system user service account to read all users --------- Co-authored-by: Gabriel MABILLE <gamab@users.noreply.github.com>	2024-09-23 11:26:44 +02:00
Karl Persson	bc20592fd4	IAM: Add and use identity ref (#92978) ... * Add and use identity ref --------- Co-authored-by: Ryan McKinley <ryantxu@gmail.com>	2024-09-05 16:10:23 +02:00
Karl Persson	2bfa607ad0	ServiceAccount: Update service account api resource and add service account token (#92972) ... * Create own legacy store function to list service accounts and update api model * Add service account tokens as a sub resource for service accounts	2024-09-05 13:43:54 +02:00
Ryan McKinley	9338e40dc3	K8s/IAM: Move identity.grafana.app to iam.grafana.app (#92929)	2024-09-05 09:43:54 +03:00