diff --git a/.circleci/config.yml b/.circleci/config.yml
index d46d5354089..3dfc9e5e4f0 100644
--- a/.circleci/config.yml
+++ b/.circleci/config.yml
@@ -864,7 +864,7 @@ jobs:
command: "./scripts/ci-job-succeeded.sh"
when: on_success
- scan-docker-master:
+ scan-docker-images:
docker:
- image: circleci/buildpack-deps:stretch
steps:
@@ -887,11 +887,29 @@ jobs:
name: Clear trivy cache
command: trivy --clear-cache
- run:
- name: Scan the latest grafana master alpine image with trivy
+ name: Scan grafana/grafana:master
command: trivy --exit-code 1 grafana/grafana:master
- run:
- name: Scan the latest grafana master ubuntu image with trivy
+ name: Scan grafana/grafana:master-ubuntu
command: trivy --exit-code 1 grafana/grafana:master-ubuntu
+ - run:
+ name: Scan grafana/grafana-enterprise:master
+ command: trivy --exit-code 1 grafana/grafana-enterprise:master
+ - run:
+ name: Scan grafana/grafana-enterprise:master-ubuntu
+ command: trivy --exit-code 1 grafana/grafana-enterprise:master-ubuntu
+ - run:
+ name: Scan grafana/grafana:latest
+ command: trivy --exit-code 1 grafana/grafana:latest
+ - run:
+ name: Scan grafana/grafana:latest-ubuntu
+ command: trivy --exit-code 1 grafana/grafana:latest-ubuntu
+ - run:
+ name: Scan grafana/grafana-enterprise:latest
+ command: trivy --exit-code 1 grafana/grafana-enterprise:latest
+ - run:
+ name: Scan grafana/grafana-enterprise:latest-ubuntu
+ command: trivy --exit-code 1 grafana/grafana-enterprise:latest-ubuntu
- save_cache:
key: vulnerability-db
paths:
@@ -1227,4 +1245,4 @@ workflows:
cron: "0 0 * * *"
filters: *filter-only-master
jobs:
- - scan-docker-master
+ - scan-docker-images
diff --git a/api-extractor.json b/api-extractor.json
index 2751721e9d5..af1049c5a08 100644
--- a/api-extractor.json
+++ b/api-extractor.json
@@ -23,6 +23,10 @@
"extractorMessageReporting": {
"default": {
"logLevel": "warning"
+ },
+ "ae-internal-missing-underscore": {
+ "logLevel": "none",
+ "addToApiReportFile": false
}
},
"tsdocMessageReporting": {
diff --git a/docs/sources/http_api/admin.md b/docs/sources/http_api/admin.md
index 125a8e38bb9..77d56f66cf7 100644
--- a/docs/sources/http_api/admin.md
+++ b/docs/sources/http_api/admin.md
@@ -224,10 +224,13 @@ Content-Type: application/json
"name":"User",
"email":"user@graf.com",
"login":"user",
- "password":"userpassword"
+ "password":"userpassword",
+ "OrgId": 1
}
```
+Note that `OrgId` is an optional parameter that can be used to assign a new user to a different organization when [auto_assign_org](https://grafana.com/docs/grafana/latest/installation/configuration/#auto-assign-org) is set to `true`.
+
**Example Response**:
```http
diff --git a/docs/sources/installation/behind_proxy.md b/docs/sources/installation/behind_proxy.md
deleted file mode 100644
index 4f0a80bfe8d..00000000000
--- a/docs/sources/installation/behind_proxy.md
+++ /dev/null
@@ -1,166 +0,0 @@
-+++
-title = "Running Grafana behind a reverse proxy"
-description = "Guide for running Grafana behind a reverse proxy"
-keywords = ["grafana", "nginx", "documentation", "haproxy", "reverse"]
-type = "docs"
-[menu.docs]
-name = "Running Grafana behind a reverse proxy"
-parent = "tutorials"
-weight = 1
-+++
-
-
-# Running Grafana behind a reverse proxy
-
-It should be straight forward to get Grafana up and running behind a reverse proxy. But here are some things that you might run into.
-
-Links and redirects will not be rendered correctly unless you set the server.domain setting.
-```bash
-[server]
-domain = foo.bar
-```
-
-To use sub *path* ex `http://foo.bar/grafana` make sure to include `/grafana` in the end of root_url.
-Otherwise Grafana will not behave correctly. See example below.
-
-## Examples
-Here are some example configurations for running Grafana behind a reverse proxy.
-
-### Grafana configuration (ex http://foo.bar)
-
-```bash
-[server]
-domain = foo.bar
-```
-
-### Nginx configuration
-
-Nginx is a high performance load balancer, web server and reverse proxy: https://www.nginx.com/
-
-#### Nginx configuration with HTTP and Reverse Proxy enabled
-```nginx
-server {
- listen 80;
- root /usr/share/nginx/html;
- index index.html index.htm;
-
- location / {
- proxy_pass http://localhost:3000/;
- }
-}
-```
-
-### Grafana configuration with hosting HTTPS in Nginx (ex https://foo.bar)
-
-```bash
-[server]
-domain = foo.bar
-root_url = https://foo.bar
-```
-
-#### Nginx configuration with HTTPS, Reverse Proxy, HTTP to HTTPS redirect and URL re-writes enabled
-
-Instead of http://foo.bar:3000/?orgId=1, this configuration will redirect all HTTP requests to HTTPS and re-write the URL so that port 3000 isn't visible and will result in https://foo.bar/?orgId=1
-
-```nginx
-server {
- listen 80;
- server_name foo.bar;
- return 301 https://foo.bar$request_uri;
-}
-
-server {
- listen 443 ssl http2;
- server_name foo.bar;
- root /usr/share/nginx/html;
- index index.html index.htm;
- ssl_certificate /etc/nginx/certs/foo_bar.crt;
- ssl_certificate_key /etc/nginx/certs/foo_bar_decrypted.key;
- ssl_protocols TLSv1.2;
- ssl_ciphers HIGH:!aNULL:!MD5;
-
- location / {
- rewrite /(.*) /$1 break;
- proxy_pass http://localhost:3000/;
- proxy_redirect off;
- proxy_set_header Host $host;
- }
-}
-```
-
-### Examples with **sub path** (ex http://foo.bar/grafana)
-
-#### Grafana configuration with sub path
-```bash
-[server]
-domain = foo.bar
-root_url = %(protocol)s://%(domain)s/grafana/
-```
-
-#### Nginx configuration with sub path
-```nginx
-server {
- listen 80;
- root /usr/share/nginx/www;
- index index.html index.htm;
-
- location /grafana/ {
- proxy_pass http://localhost:3000/;
- }
-}
-```
-
-#### HAProxy configuration with sub path
-```bash
-frontend http-in
- bind *:80
- use_backend grafana_backend if { path /grafana } or { path_beg /grafana/ }
-
-backend grafana_backend
- # Requires haproxy >= 1.6
- http-request set-path %[path,regsub(^/grafana/?,/)]
-
- # Works for haproxy < 1.6
- # reqrep ^([^\ ]*\ /)grafana[/]?(.*) \1\2
-
- server grafana localhost:3000
-```
-
-### IIS URL Rewrite Rule (Windows) with Subpath
-
-IIS requires that the URL Rewrite module is installed.
-
-Given:
-
-- subpath `grafana`
-- Grafana installed on `http://localhost:3000`
-- server config:
-
- ```bash
- [server]
- domain = localhost:8080
- root_url = %(protocol)s://%(domain)s/grafana/
- ```
-
-Create an Inbound Rule for the parent website (localhost:8080 in this example) in IIS Manager with the following settings:
-
-- pattern: `grafana(/)?(.*)`
-- check the `Ignore case` checkbox
-- rewrite URL set to `http://localhost:3000/{R:2}`
-- check the `Append query string` checkbox
-- check the `Stop processing of subsequent rules` checkbox
-
-This is the rewrite rule that is generated in the `web.config`:
-
-```xml
-
-
-