LBAC for data sources: Enable teamHttpHeadersMimir by default (#106636)

feat: enable mimir lbac by default
This commit is contained in:
Eric Leijonmarck
2025-06-17 09:19:02 +01:00
committed by GitHub
parent 141e0f8e52
commit 25fe2b54fb
5 changed files with 13 additions and 7 deletions
@@ -80,6 +80,7 @@ Most [generally available](https://grafana.com/docs/release-life-cycle/#general-
| `azureMonitorEnableUserAuth` | Enables user auth for Azure Monitor datasource only | Yes |
| `alertingNotificationsStepMode` | Enables simplified step mode in the notifications section | Yes |
| `lokiLabelNamesQueryApi` | Defaults to using the Loki `/labels` API instead of `/series` | Yes |
| `teamHttpHeadersMimir` | Enables LBAC for datasources for Mimir to apply LBAC filtering of metrics to the client requests for users in teams | Yes |
| `alertingMigrationUI` | Enables the alerting migration UI, to migrate data source-managed rules to Grafana-managed rules | Yes |
| `alertingImportYAMLUI` | Enables a UI feature for importing rules from a Prometheus file to Grafana-managed rules | Yes |
| `unifiedNavbars` | Enables unified navbars | |
@@ -108,7 +109,6 @@ Most [generally available](https://grafana.com/docs/release-life-cycle/#general-
| `improvedExternalSessionHandling` | Enables improved support for OAuth external sessions. After enabling this feature, users might need to re-authenticate themselves. |
| `elasticsearchCrossClusterSearch` | Enables cross cluster search in the Elasticsearch datasource |
| `improvedExternalSessionHandlingSAML` | Enables improved support for SAML external sessions. Ensure the NameID format is correctly configured in Grafana for SAML Single Logout to function properly. |
| `teamHttpHeadersMimir` | Enables LBAC for datasources for Mimir to apply LBAC filtering of metrics to the client requests for users in teams |
| `alertRuleRestore` | Enables the alert rule restore feature |
| `azureMonitorLogsBuilderEditor` | Enables the logs builder mode for the Azure Monitor data source |
| `logsPanelControls` | Enables a control component for the logs panel in Explore |
@@ -830,6 +830,7 @@ export interface FeatureToggles {
improvedExternalSessionHandlingSAML?: boolean;
/**
* Enables LBAC for datasources for Mimir to apply LBAC filtering of metrics to the client requests for users in teams
* @default true
*/
teamHttpHeadersMimir?: boolean;
/**
+2 -1
View File
@@ -1411,10 +1411,11 @@ var (
{
Name: "teamHttpHeadersMimir",
Description: "Enables LBAC for datasources for Mimir to apply LBAC filtering of metrics to the client requests for users in teams",
Stage: FeatureStagePublicPreview,
Stage: FeatureStageGeneralAvailability,
FrontendOnly: false,
AllowSelfServe: true,
Owner: identityAccessTeam,
Expression: "true",
},
{
Name: "teamHttpHeadersTempo",
+1 -1
View File
@@ -185,7 +185,7 @@ investigationsBackend,experimental,@grafana/grafana-app-platform-squad,false,fal
k8SFolderCounts,experimental,@grafana/search-and-storage,false,false,false
k8SFolderMove,experimental,@grafana/search-and-storage,false,false,false
improvedExternalSessionHandlingSAML,preview,@grafana/identity-access-team,false,false,false
teamHttpHeadersMimir,preview,@grafana/identity-access-team,false,false,false
teamHttpHeadersMimir,GA,@grafana/identity-access-team,false,false,false
teamHttpHeadersTempo,experimental,@grafana/identity-access-team,false,false,false
templateVariablesUsesCombobox,experimental,@grafana/grafana-frontend-platform,false,false,true
grafanaAdvisor,experimental,@grafana/plugins-platform-backend,false,false,false
1 Name Stage Owner requiresDevMode RequiresRestart FrontendOnly
185 k8SFolderCounts experimental @grafana/search-and-storage false false false
186 k8SFolderMove experimental @grafana/search-and-storage false false false
187 improvedExternalSessionHandlingSAML preview @grafana/identity-access-team false false false
188 teamHttpHeadersMimir preview GA @grafana/identity-access-team false false false
189 teamHttpHeadersTempo experimental @grafana/identity-access-team false false false
190 templateVariablesUsesCombobox experimental @grafana/grafana-frontend-platform false false true
191 grafanaAdvisor experimental @grafana/plugins-platform-backend false false false
+8 -4
View File
@@ -3188,14 +3188,18 @@
{
"metadata": {
"name": "teamHttpHeadersMimir",
"resourceVersion": "1743693517832",
"creationTimestamp": "2025-01-13T10:42:47Z"
"resourceVersion": "1749732225616",
"creationTimestamp": "2025-01-13T10:42:47Z",
"annotations": {
"grafana.app/updatedTimestamp": "2025-06-12 12:43:45.616224 +0000 UTC"
}
},
"spec": {
"description": "Enables LBAC for datasources for Mimir to apply LBAC filtering of metrics to the client requests for users in teams",
"stage": "preview",
"stage": "GA",
"codeowner": "@grafana/identity-access-team",
"allowSelfServe": true
"allowSelfServe": true,
"expression": "true"
}
},
{