Authorization: add toggle for LBAC filtering for Tempo datasources (#105688)

add toggle for LBAC filtering for Tempo datasources

packages/grafana-data/src/types/featureToggles.gen.ts

@@ -841,6 +841,10 @@ export interface FeatureToggles {
   */
   teamHttpHeadersMimir?: boolean;
   /**
+  * Enables LBAC for datasources for Tempo to apply LBAC filtering of traces to the client requests for users in teams
+  */
+  teamHttpHeadersTempo?: boolean;
+  /**
   * Test feature toggle to see how cohorts could be set up AB testing
   * @default false
   */

pkg/services/featuremgmt/registry.go

@@ -1430,6 +1430,13 @@ var (
 			AllowSelfServe: true,
 			Owner:          identityAccessTeam,
 		},
+		{
+			Name:         "teamHttpHeadersTempo",
+			Description:  "Enables LBAC for datasources for Tempo to apply LBAC filtering of traces to the client requests for users in teams",
+			Stage:        FeatureStageExperimental,
+			FrontendOnly: false,
+			Owner:        identityAccessTeam,
+		},
 		{
 			Name:         "ABTestFeatureToggleA",
 			Description:  "Test feature toggle to see how cohorts could be set up AB testing",

pkg/services/featuremgmt/toggles_gen.csv

@@ -188,6 +188,7 @@ k8SFolderCounts,experimental,@grafana/search-and-storage,false,false,false
 k8SFolderMove,experimental,@grafana/search-and-storage,false,false,false
 improvedExternalSessionHandlingSAML,preview,@grafana/identity-access-team,false,false,false
 teamHttpHeadersMimir,preview,@grafana/identity-access-team,false,false,false
+teamHttpHeadersTempo,experimental,@grafana/identity-access-team,false,false,false
 ABTestFeatureToggleA,experimental,@grafana/sharing-squad,false,false,false
 templateVariablesUsesCombobox,experimental,@grafana/grafana-frontend-platform,false,false,true
 ABTestFeatureToggleB,experimental,@grafana/sharing-squad,false,false,false

pkg/services/featuremgmt/toggles_gen.go

@@ -763,6 +763,10 @@ const (
 	// Enables LBAC for datasources for Mimir to apply LBAC filtering of metrics to the client requests for users in teams
 	FlagTeamHttpHeadersMimir = "teamHttpHeadersMimir"
 
+	// FlagTeamHttpHeadersTempo
+	// Enables LBAC for datasources for Tempo to apply LBAC filtering of traces to the client requests for users in teams
+	FlagTeamHttpHeadersTempo = "teamHttpHeadersTempo"
+
 	// FlagABTestFeatureToggleA
 	// Test feature toggle to see how cohorts could be set up AB testing
 	FlagABTestFeatureToggleA = "ABTestFeatureToggleA"

pkg/services/featuremgmt/toggles_gen.json

@@ -3109,6 +3109,21 @@
         "allowSelfServe": true
       }
     },
+    {
+      "metadata": {
+        "name": "teamHttpHeadersTempo",
+        "resourceVersion": "1747930192816",
+        "creationTimestamp": "2025-05-20T14:50:32Z",
+        "annotations": {
+          "grafana.app/updatedTimestamp": "2025-05-22 16:09:52.816517 +0000 UTC"
+        }
+      },
+      "spec": {
+        "description": "Enables LBAC for datasources for Tempo to apply LBAC filtering of traces to the client requests for users in teams",
+        "stage": "experimental",
+        "codeowner": "@grafana/identity-access-team"
+      }
+    },
     {
       "metadata": {
         "name": "templateVariablesUsesCombobox",