From baee9fb214306168c023876f212daad321cb4af0 Mon Sep 17 00:00:00 2001 From: Steve Simpson Date: Wed, 10 Dec 2025 14:05:10 +0100 Subject: [PATCH] Alerting: Add historian.alerting app permissions to service identity. (#115082) --- pkg/apimachinery/identity/context.go | 1 + 1 file changed, 1 insertion(+) diff --git a/pkg/apimachinery/identity/context.go b/pkg/apimachinery/identity/context.go index 984a9b24831..4362c048b0a 100644 --- a/pkg/apimachinery/identity/context.go +++ b/pkg/apimachinery/identity/context.go @@ -161,6 +161,7 @@ var serviceIdentityTokenPermissions = []string{ "preferences.grafana.app:*", // user, team, and org preferences "collections.grafana.app:*", // user stars "plugins.grafana.app:*", + "historian.alerting.grafana.app:*", // Secrets Manager uses a custom verb for secret decryption, and its authorizer does not allow wildcard permissions. "secret.grafana.app/securevalues:decrypt",