2c26053be8
K8s/Folders: Convert additional fields when creating k8s resources ( #93395 )
...
* Add separate folder registration function
* Convert to k8s resource directly after legacy create
* Use create command when creating folders
* Set additional fields when converting to k8s resource
* Add created/updated timestamps during conversion
* Refactor UnstructuredToLegacyFolderDTO
* Return errors when doing k8s conversions
2024-09-25 08:56:15 +02:00
d1d578785c
Add remaining k8s endpoints for Folders ( #93146 )
...
* Add remaining Folders k8s endpoints
Signed-off-by: Maicon Costa <maiconscosta@gmail.com>
* Remove duplicated import
Signed-off-by: Maicon Costa <maiconscosta@gmail.com>
---------
Signed-off-by: Maicon Costa <maiconscosta@gmail.com>
2024-09-12 14:38:27 -03:00
b12a29a1da
K8s: Implement partial folders api with k8s client ( #93089 )
...
* Add kubernetes folder feature toggle
* Add kubernetes routes for getting and creating a folder
* Add documentation for interacting with k8s folders
2024-09-10 11:22:08 +02:00
372d0acec8
Instrument tracing across dashboards ( #91937 )
...
Add tracing across dashboards and accesscontrol
2024-08-29 22:26:15 -08:00
427dad26a2
Swagger: Add a custom swagger/api page ( #91785 )
...
Co-authored-by: Kristian Bremberg <kristian.bremberg@grafana.com>
2024-08-14 09:03:00 +03:00
62494248e3
Restore dashboards: Add RBAC ( #90270 )
...
* Restore dashboards: Add RBAC
* Add check to navtree
* Prevent non-admins from searching deleted dbs
* Add check to the route
* Cleanup
* Update translations
* Update API permissions
* Correct permissions
* Update warning message
* Update translation
* Return 401 for deleted query without admin role
2024-07-11 13:20:04 +03:00
52ea6236d4
E2C: Set up page route so cloud-migrations doesn't 404 ( #89947 )
2024-07-02 17:11:18 +01:00
34b3dbdbf3
RestoreDashboards: Adjust path ( #89233 )
...
* refactor: change path
* fix: page headline
* refactor: remove condition
2024-06-18 17:24:48 +02:00
42d75ac737
Dashboards: Add feature restore dashboards backend ( #83131 )
...
Co-authored-by: Sofia Papagiannaki <1632407+papagian@users.noreply.github.com>
2024-05-16 14:36:26 -03:00
c9c6445554
Chore: Refactor render via http ( #84613 )
2024-05-14 07:24:18 -03:00
44e1bce55a
Feature toggles: Remove dashboardEmbed toggle ( #86587 )
2024-04-19 12:48:08 +02:00
036f826b87
AuthZ: Further protect admin endpoints ( #86285 )
...
* only users with Grafana Admin role can grant/revoke Grafana Admin role
* check permissions to user amdin endpoints globally
* allow checking global permissions for service accounts
* use a middleware for checking whether the caller is Grafana Admin
2024-04-16 15:48:12 +01:00
3127566a20
Access control: Use ResolveIdentity() for authorizing in org ( #85549 )
...
* Access control: Use ResolveIdentity() for authorizing in org
* Fix tests
* Fix middleware tests
* Use ResolveIdentity in HasGlobalAccess() function
* remove makeTmpUser
* Cleanup
* Fix linter errors
* Fix test build
* Remove GetUserPermissionsInOrg()
2024-04-10 12:42:13 +02:00
ba41954854
Email: trigger email verification flow ( #85587 )
...
* Add email and email_verified to id token if identity is a user
* Add endpoint to trigger email verification for user
* Add function to clear stored id tokens and use it when email verification is completed
2024-04-05 12:05:46 +02:00
8765c48389
Alerting: Remove legacy alerting ( #83671 )
...
Removes legacy alerting, so long and thanks for all the fish! 🐟
---------
Co-authored-by: Matthew Jacobson <matthew.jacobson@grafana.com>
Co-authored-by: Sonia Aguilar <soniaAguilarPeiron@users.noreply.github.com>
Co-authored-by: Armand Grillet <armandgrillet@users.noreply.github.com>
Co-authored-by: William Wernert <rwwiv@users.noreply.github.com>
Co-authored-by: Yuri Tseretyan <yuriy.tseretyan@grafana.com>
2024-03-14 15:36:35 +01:00
46c26bbd0b
Auth: Fix email verification bypass when using basic authentication ( #82914 )
2024-02-16 18:54:59 +01:00
9e04fd0fb7
AuthToken: Remove client token rotation feature toggle ( #82886 )
...
* Remove usage of client token rotation flag
* Remove client token rotation feature toggle
2024-02-16 15:03:37 +01:00
ba3ee60711
K8s: Allow more control over the final openapi results ( #81829 )
2024-02-02 14:19:45 -08:00
5da4021ea0
Auth: Fix routing of SSO setting pages ( #81762 )
...
Fix ac.Parameter
2024-02-02 11:14:22 +01:00
795eb4a8d8
K8s/Snapshots: Add dashboardsnapshot api group ( #77667 )
2024-02-01 22:40:11 -08:00
7464ea4346
Feature Toggles: Switch feature toggle admin page over to k8s API ( #80854 )
...
* add handling for legacy and k8s apis to frontend
* use backend srv directly not redux
* add unit test to make sure the correct apis are being called
* require api server flag
* fix feature toggle name
* ensure both pages work correctly
* make consistent with legacy api
* implement webhook update
* fix unit test
* remove old apis and update
---------
Co-authored-by: Ryan McKinley <ryantxu@gmail.com>
2024-02-01 23:52:02 -05:00
e013cd427c
K8s: Add basic query service ( #80325 )
2024-01-31 20:36:51 +02:00
4577e61ee7
Auth: Improve /admin/authentication permission checks and include new SSO pages ( #81183 )
...
* Move evalAuthSettings to ssoutils
* Improve permission check for auth page
2024-01-25 11:13:24 +01:00
6768c6c059
Chore: Remove public vars in setting package ( #81018 )
...
Removes the public variable setting.SecretKey plus some other ones.
Introduces some new functions for creating setting.Cfg.
2024-01-23 12:36:22 +01:00
6752a512f3
Auth: Change UI route, add frontend endpoints to api.go ( #80671 )
...
Delete advanced from UI route, fix 404
2024-01-19 11:53:37 +01:00
c18da48e50
Alerting: Separate overlapping legacy and UA alerting routes ( #76517 )
...
* Separate overlapping legacy and UA alerting routes
api/alert-notifiers, alerting/list, and alerting/notifications existed in both
legacy and UA.
Rename legacy route paths and nav ids to be independent of UA ones.
2024-01-04 18:01:57 -05:00
e924627659
Frontend: Reload the browser when backend configuration/assets change ( #79057 )
...
* Detect frontend asset changes
* Update
* merge main
* Frontend: Detect new assets / versions / config changes (#79258 )
* avoid first check
* Updates and add tests
* Update
* Update
* Updated code
* refine
* use context
---------
Co-authored-by: Ryan McKinley <ryantxu@gmail.com>
2024-01-04 08:00:07 +01:00
fdaf6e3f2e
PublicDashboards: Add setting to disable the feature ( #78894 )
...
* Replace feature toggle with configuration setting
* Fix permission alert
* Update documentation
* Add back feature toggle
* revert unwanted commited changes
* fix tests
* run prettier
* Update SharePublicDashboard.test.tsx
* fix linter and frontend tests
* Update api.go
* Apply docs edit from code review
Co-authored-by: Isabel <76437239+imatwawana@users.noreply.github.com>
* Update index.md
* Update docs/sources/setup-grafana/configure-grafana/feature-toggles/index.md
Co-authored-by: Agnès Toulet <35176601+AgnesToulet@users.noreply.github.com>
* Update docs/sources/setup-grafana/configure-grafana/_index.md
Co-authored-by: Agnès Toulet <35176601+AgnesToulet@users.noreply.github.com>
* add isPublicDashboardsEnabled + test
* fix test
* update ff description in registry
* move isPublicDashboardsEnabled
* revert getConfig() update
---------
Co-authored-by: Isabel <76437239+imatwawana@users.noreply.github.com>
Co-authored-by: Christopher Moyer <35463610+chri2547@users.noreply.github.com>
2023-12-19 11:43:54 +01:00
0b511aaace
Plugins: Add backend check for app page role access ( #78269 )
...
* add backend check for roles
* tidy
* fix tests
* incorporate rbac
* fix linter
* apply PR feedback
* add tests
* fix logic
* add comment
* apply PR feedback
2023-12-18 16:12:46 +01:00
1324186f87
Chore: Evaluate if an app is disabled for API requests ( #79564 )
2023-12-15 16:37:39 +01:00
529271d7a8
Perf: Disable core kind registry ( #78568 )
...
Co-authored-by: Ryan McKinley <ryantxu@gmail.com>
2023-11-28 09:09:54 +01:00
0de66a8099
Authz: Remove use of SignedInUser copy for permission evaluation ( #78448 )
...
* remove use of SignedInUserCopies
* add extra safety to not cross assign permissions
unwind circular dependency
dashboardacl->dashboardaccess
fix missing import
* correctly set teams for permissions
* fix missing inits
* nit: check err
* exit early for api keys
2023-11-22 14:20:22 +01:00
9c5daed336
PublicDashboards: Middleware creation ( #77941 )
2023-11-21 17:56:36 -03:00
b6b86bb0b3
RBAC: Check plugins:install globally ( #78438 )
...
* RBAC: Check plugins:install globally
* Add disclamer to the RBACSingleOrganization config option
2023-11-21 15:09:43 +01:00
b8e8d84ef7
Swagger: Show k8s APIs ( #78091 )
2023-11-15 06:42:35 -08:00
f69fd3726b
FeatureToggles: Add context and and an explicit global check ( #78081 )
2023-11-14 12:50:27 -08:00
3509a5abb9
FeatureFlags: Cleanup usage of cfg.IsFeatureToggleEnabled ( #78014 )
2023-11-13 07:55:15 -08:00
e754c5a6c6
Plugins: Change managed plugins installation call ( #77120 )
2023-11-10 12:28:36 +01:00
35c1ee9686
EntityStore: Remove http access (can use apiserver now) ( #77602 )
2023-11-03 08:14:51 -07:00
45d59cf31b
Dashboards: Remove dummy trim dashboard api ( #77249 )
...
Co-authored-by: nikimanoledaki <niki.manoledaki@grafana.com>
2023-11-02 08:35:14 -07:00
dd773e74f1
K8s: Implement playlist api with k8s client ( #77405 )
2023-10-31 10:26:39 -07:00
5c4cece430
Fix: align access to the team page with access to the team tab ( #76868 )
...
align access to the team page with access to the team tab in the navigation bar
2023-10-20 13:51:03 +01:00
9fc0e1566e
Feature Management: Update admin page UI after a successful update ( #76380 )
...
* Feature Management: Update admin page UI after a successful update
* lint
* lint
* refactor
2023-10-13 11:54:34 +01:00
420fb56fda
RBAC: Fix plugins pages access-control ( #76321 )
...
* RBAC: Fix plugins pages access-control
* Better comment
Co-authored-by: Ieva <ieva.vasiljeva@grafana.com>
* Add a small comment on connections/datasources routes
---------
Co-authored-by: Ieva <ieva.vasiljeva@grafana.com>
2023-10-12 10:46:43 +02:00
466f8a1f5a
Teams: Move team API to own service ( #76347 )
...
* move team API to its own service
* remove uneeded import
* reshare pref api logic
2023-10-12 10:10:54 +02:00
bbdd1fc3b1
Playlist: Remove unused/deprecated api and unused wrapper ( #75503 )
2023-09-27 15:28:16 +00:00
8d62ed77f0
instrumentation: set slogroup high-fast for more handlers ( #75449 )
...
Signed-off-by: bergquist <carl.bergquist@gmail.com>
2023-09-26 19:11:29 +02:00
e5fbc4a4cd
web: add slo group to request meta ( #74765 )
...
Signed-off-by: bergquist <carl.bergquist@gmail.com>
2023-09-22 11:52:28 +03:00
764478b9e7
Instrumentation: Set auth as owners for more routes ( #75105 )
...
Signed-off-by: bergquist <carl.bergquist@gmail.com>
2023-09-20 10:18:52 +02:00
3ee26df41e
PublicDashboards: Variables refactor ( #73476 )
...
Co-authored-by: Juan Cabanas <juan.cabanas@grafana.com>
Co-authored-by: Ezequiel Victorero <ezequiel.victorero@grafana.com>
Co-authored-by: Ryan McKinley <ryantxu@gmail.com>
2023-08-25 13:56:02 -05:00
