Rendering: Add support for renderer token (#54425) (#54436)

(cherry picked from commit a4f75cc0438712c90b02d24740416f8615e3a0cb)
(cherry picked from commit 6ec06f66b9)

pkg/services/rendering/http_mode.go

@@ -28,6 +28,8 @@ var netClient = &http.Client{
 	Transport: netTransport,
 }
 
+const authTokenHeader = "X-Auth-Token" //#nosec G101 -- This is a false positive
+
 func (rs *RenderingService) renderViaHTTP(ctx context.Context, renderKey string, opts Opts) (*RenderResult, error) {
 	filePath, err := rs.getNewFilePath(RenderPNG)
 	if err != nil {
@@ -133,6 +135,7 @@ func (rs *RenderingService) doRequest(ctx context.Context, url *url.URL, headers
 		return nil, err
 	}
 
+	req.Header.Set(authTokenHeader, rs.Cfg.RendererAuthToken)
 	req.Header.Set("User-Agent", fmt.Sprintf("Grafana/%s", rs.Cfg.BuildVersion))
 	for k, v := range headers {
 		req.Header[k] = v

pkg/services/rendering/plugin_mode.go

@@ -42,6 +42,7 @@ func (rs *RenderingService) renderViaPlugin(ctx context.Context, renderKey strin
 		Timezone:          isoTimeOffsetToPosixTz(opts.Timezone),
 		Domain:            rs.domain,
 		Headers:           headers,
+		AuthToken:         rs.Cfg.RendererAuthToken,
 	}
 	rs.log.Debug("Calling renderer plugin", "req", req)
 
@@ -85,6 +86,7 @@ func (rs *RenderingService) renderCSVViaPlugin(ctx context.Context, renderKey st
 		Timeout:   int32(opts.Timeout.Seconds()),
 		Timezone:  isoTimeOffsetToPosixTz(opts.Timezone),
 		Headers:   headers,
+		AuthToken: rs.Cfg.RendererAuthToken,
 	}
 	rs.log.Debug("Calling renderer plugin", "req", req)