Gabriel MABILLE and Jguer
8e929163a8
RBAC: Add config option to reset basic roles on start up ( #59598 )
...
* RBAC: add config option to reset basic roles on start up
Co-authored-by: Jguer <joao.guerreiro@grafana.com >
* Update docs
Co-authored-by: Jguer <joao.guerreiro@grafana.com >
* Add to sample.ini as well
Co-authored-by: Jguer <joao.guerreiro@grafana.com >
Co-authored-by: Jguer <joao.guerreiro@grafana.com >
2022-12-01 09:41:40 +01:00
bba42b113c
Middleware: Add Custom Headers to HTTP responses ( #59018 )
...
* Middleware: Add Custom Headers to HTTP responses
* Update docs/sources/setup-grafana/configure-grafana/_index.md
Co-authored-by: Christopher Moyer <35463610+chri2547@users.noreply.github.com >
* Update conf/defaults.ini
Co-authored-by: Dave Henderson <dave.henderson@grafana.com >
* Update conf/sample.ini
Co-authored-by: Dave Henderson <dave.henderson@grafana.com >
* Update _index.md
Co-authored-by: Christopher Moyer <35463610+chri2547@users.noreply.github.com >
Co-authored-by: Dave Henderson <dave.henderson@grafana.com >
2022-11-30 17:12:34 +00:00
Stephanie Hingtgen
6805c951e9
Plugins: add option to proxy ds connections through a secure socks proxy ( #59254 )
...
* Plugins: add feature to proxy data source connections
2022-11-29 23:50:59 -06:00
Josh Hunt
460be70261
Internationalization: Change locale preference to language ( #58359 )
...
* backend locale -> language
* frontend locale -> language
* sample.ini and tests
* fix few last locale -> language
* fix few last locale -> language
2022-11-22 12:18:34 +00:00
linoman and Gabriel MABILLE
f8f61c1a69
Auth: Add expiry date for service accounts access tokens ( #58885 )
...
* Add new configuration option for SA tokens
* Add new expiry date option to frontend components
* Add backend validation
Co-authored-by: Gabriel MABILLE <gamab@users.noreply.github.com >
2022-11-22 10:08:40 +01:00
Marcus Efraimsson
79f1a7a4fd
Database: Adds support for enable/disable SQLite Write-Ahead Logging (WAL) via configuration ( #58268 )
...
Adds support for enable/disable SQLite Write-Ahead Logging (WAL) via configuration.
Enables SQLite WAL for E2E tests.
2022-11-16 19:29:33 +01:00
f254a37d35
Middleware: Add CSP Report Only support ( #58074 )
...
* Middleware: Add CSP Report Only support
* Update docs/sources/setup-grafana/configure-grafana/_index.md
Co-authored-by: Christopher Moyer <35463610+chri2547@users.noreply.github.com >
* Update docs/sources/setup-grafana/configure-grafana/_index.md
Co-authored-by: Christopher Moyer <35463610+chri2547@users.noreply.github.com >
* Update csp documentation wording
* Update conf/sample.ini
Co-authored-by: Dave Henderson <dave.henderson@grafana.com >
* Update docs/sources/setup-grafana/configure-grafana/_index.md
Co-authored-by: Dave Henderson <dave.henderson@grafana.com >
* Update docs/sources/setup-grafana/configure-grafana/_index.md
Co-authored-by: Dave Henderson <dave.henderson@grafana.com >
* Update docs/sources/setup-grafana/configure-grafana/_index.md
Co-authored-by: Dave Henderson <dave.henderson@grafana.com >
* Update pkg/middleware/csp.go
Co-authored-by: Dave Henderson <dave.henderson@grafana.com >
Co-authored-by: Christopher Moyer <35463610+chri2547@users.noreply.github.com >
Co-authored-by: Dave Henderson <dave.henderson@grafana.com >
2022-11-16 17:11:26 +00:00
Timur Olzhabayev
008c554d7f
Echo: Add config option to prevent duplicate page views for GA4 ( #57619 )
2022-11-09 15:09:19 +01:00
Conor Evans
40ba2ba18d
fix(config/jwt): the value should be "expect_claims", not "expected_claims" ( #58284 )
...
Signed-off-by: Conor Evans <coevans@tcd.ie >
2022-11-07 12:29:27 +00:00
Villena Guillaume and Joan López de la Franca Beltran
e9dc7fb85c
Rendering: Add configuration options for renderKey lifetime ( #57339 )
...
* Add configuration options for `renderKey` lifetime
* Rename config key to `render_key_lifetime`
* Update conf/defaults.ini
Co-authored-by: Joan López de la Franca Beltran <5459617+joanlopez@users.noreply.github.com >
* Add `render_key_lifetime` to sample.ini
Co-authored-by: Joan López de la Franca Beltran <5459617+joanlopez@users.noreply.github.com >
2022-11-03 12:06:55 +01:00
unknowndevQwQ
6dd3584f77
Server: Make unix socket permission configurable ( #52944 )
2022-11-01 15:04:01 +01:00
Petr Stupka
e99f75f0ca
Alerting: Linking external images securely - Azure Blob ( #1 ) ( #56598 )
2022-11-01 13:02:17 +01:00
Sofia Papagiannaki and Christopher Moyer
46fb4081ba
SQLStore: Optionally retry queries if sqlite returns database is locked ( #56096 )
...
* SQLStore: Retry queries if sqlite returns database is locked
* Configurable retries
* Apply suggestions from code review
Co-authored-by: Christopher Moyer <35463610+chri2547@users.noreply.github.com >
2022-10-17 21:23:44 +03:00
Alex
94ed744454
Auth: Make built-in login configurable ( #46978 )
2022-10-12 15:34:59 +00:00
10c080dad1
LDAP: Add skip_org_role_sync configuration option ( #56679 )
...
* LDAP: Add skip_org_role_sync option
* Document the new config option
* Nit on docs
* Update docs/sources/setup-grafana/configure-security/configure-authentication/ldap.md
Co-authored-by: Christopher Moyer <35463610+chri2547@users.noreply.github.com >
* Docs suggestions
Co-authored-by: Christopher Moyer <35463610+chri2547@users.noreply.github.com >
Co-authored-by: Jguer <joao.guerreiro@grafana.com >
* Add test, Fix disabled user when no role
Co-authored-by: Christopher Moyer <35463610+chri2547@users.noreply.github.com >
Co-authored-by: Jguer <joao.guerreiro@grafana.com >
2022-10-12 13:33:33 +02:00
Alec Sears
c61d6c39a0
Configuration: Update ssl_mode docs in sample.ini to match default.ini ( #55138 )
2022-10-10 09:04:51 +00:00
Levente Balogh and Torkel Ödegaard
55187ebc48
Navtree: Make it possible to configure standalone plugin pages ( #56393 )
...
* feat: make it possible to register standalone app plugin pages under different sections
* refactor(sample.ini): use "admin" instead of "starred" section in the INI
Co-authored-by: Torkel Ödegaard <torkel@grafana.com >
* feat(defaults.ini): add app navigation settings to the defaults.ini as well
* fix: use the correct key in the tests
Co-authored-by: Torkel Ödegaard <torkel@grafana.com >
2022-10-06 12:57:03 +02:00
Sofia Papagiannaki
d0e7765c6a
Annotation: Optionally allow storing longer annotation tags ( #54754 )
...
* Annotation: Optionally allow longer annotation tags
* Do not accept configuration lower than today's default (500)
* Apply suggestion from code review
2022-09-23 06:04:41 -04:00
d014a3a09b
Echo: Add support for Google Analytics 4 ( #55446 )
...
* user essentials mob! 🔱
lastFile:public/app/core/services/echo/backends/analytics/GA4Backend.ts
* user essentials mob! 🔱
* user essentials mob! 🔱
lastFile:public/app/core/services/echo/backends/analytics/GA4Backend.ts
* user essentials mob! 🔱
lastFile:public/app/core/services/echo/backends/analytics/GA4Backend.ts
* user essentials mob! 🔱
lastFile:public/app/app.ts
* user essentials mob! 🔱
Co-authored-by: eledobleefe <laura.fernandez@grafana.com >
Co-authored-by: Leodegario Pasakdal <leodegario.pasakdal@grafana.com >
2022-09-20 03:13:14 -07:00
Dave Henderson
801b61c963
Tracing: Add new [tracing.opentelemetry] custom_attributes config setting ( #54110 )
...
* tracing: Add new [tracing.opentelemetry] custom_attributes config setting
Signed-off-by: Dave Henderson <dave.henderson@grafana.com >
* Fix typos in config
Signed-off-by: Dave Henderson <dave.henderson@grafana.com >
* Return error when custom_attributes contains malformed entries
Signed-off-by: Dave Henderson <dave.henderson@grafana.com >
Signed-off-by: Dave Henderson <dave.henderson@grafana.com >
2022-09-16 09:54:25 -04:00
Jo
ef245874da
OAuth: Allow assigning Server Admin ( #54780 )
...
* extract errors to errors file
* implement oauth server admin assignment
* add server admin tests
* deduplicate autoAssignOrgRole
* deduplicate strict setting
* deduplicate strict setting
* add support for generic oauth
* add role attribute strict support for generic oauth
* add support for github/gitlab
* assignGrafanaAdmin option is here to stay
* unify similar errors
* add config option
* add okta server admin mapping
* remove never used Company attribute
* unify generic oauth role extract with other methods
* case insensitive role match as in azure
* add ini settings
* add server admin to devenv
* remove duplicate fields
* add documentation to oauth
* fix titlecase test
* implement doc feedback
2022-09-08 06:11:00 -04:00
mhuangwm
39102c6656
Admin: Add support to configure default admin email ( #54363 )
2022-09-07 14:38:40 +02:00
Nicholas Wiersma and jguer
9e704fec3c
JWT: Add support for assigning org roles ( #54277 )
...
* feat: allow jwt role to be set
* chore: update documentation
* fix: cr suggestions
* fix: lint issues
* respect org auto assign and default org ID
* add server admin to devenv
Co-authored-by: jguer <joao.guerreiro@grafana.com >
2022-09-07 14:00:33 +02:00
Jo
4952b7f22d
Add JWT url auth documentation ( #54040 )
...
* add jwt auth docs
* add appropriate warnings to docs
* remove unimplemented login_token assumptions
* Update conf/sample.ini
2022-09-05 03:46:50 -04:00
Joan López de la Franca Beltran
6ec06f66b9
Rendering: Add support for renderer token ( #54425 )
...
(cherry picked from commit a4f75cc0438712c90b02d24740416f8615e3a0cb)
2022-08-30 12:09:38 +02:00
Vardan Torosyan
962bf8a906
RBAC: Remove the flag from the config which states that you can disable RBAC ( #53730 )
2022-08-15 14:22:04 +02:00
Andres Martinez Gotor
a31d96d20a
Prometheus: Promote Azure auth flag to configuration ( #53447 )
2022-08-11 16:12:57 +02:00
Dave Henderson
19cf9fa87d
Docs: Correct references to 'lockingMigration' ( #51678 )
...
Signed-off-by: Dave Henderson <dave.henderson@grafana.com >
2022-07-14 15:42:24 -04:00
Matthew Jacobson
28dd413c1d
Alerting: Add config disabled_labels to disable reserved labels ( #51832 )
...
* Alerting: Add config disabled_labels to disable reserved labels
[unified_alerting.reserved_labels]
disabled_labels
* Replace IsGrafanaFolderDisabled with more generic IsReservedLabelDisabled
* Simplify SchedulerCfg by including UnifiedAlertingSettings
2022-07-11 12:41:40 -04:00
Ieva
31e8e17d2f
allow specifying auth style ( #51233 )
2022-06-30 10:27:31 +01:00
Timur Olzhabayev
7c886fb6f9
Frontend Logging: Integrate grafana javascript agent ( #50801 )
...
Add Grafana Javascript Agent integration to Grafana
2022-06-28 03:25:30 -04:00
Josh Hunt
dcf786f3a9
I18n: Add default locale server config option ( #51035 )
...
* I18n: Set default locale in server config and expose in grafanaBootData
* put default locale behind feature flag
* update tests now that default locale is behind feature flag
* little bit of PR feedback
* update sample.ini
2022-06-21 11:12:49 +01:00
Eric Leijonmarck and Emil Tullstedt
b5615a1a18
Docs: CSRF add configuration options and documentation for additional headers and origins ( #50473 )
...
* added troubleshooting for "origin not allowed" messages
* include in configuration.ini
* moved doc to security
* removed enterprise congiruation
* Update conf/sample.ini
Co-authored-by: Emil Tullstedt <emil.tullstedt@grafana.com >
Co-authored-by: Emil Tullstedt <emil.tullstedt@grafana.com >
2022-06-09 09:13:08 +02:00
idafurjes
24c6a73095
Tracing: Deprecate opentracing ( #50058 )
...
* Deprecate opentracing
* Fix comment
* Adjust comment
* Fix docs for opentelemetry
* Add deprecated to sample.ini
2022-06-02 14:13:00 +02:00
Torkel Ödegaard
e1909fe74b
AngularSupport: Update description for angular_support_enabled config option ( #49569 )
...
* AngularSupport: Update description for angular_support_enabled config option
* Update angular deprecration plan doc
* Update
* Update article
* Updated
2022-05-25 11:49:12 +02:00
Piotr Jamróz
5a3cd45f79
Query History: Enable new query history by default ( #49407 )
...
* Enable new Query History
* Update docs and sample.ini
2022-05-23 16:53:36 +02:00
Karl Persson and Jguer
2dc45e3e72
AccessControl: Add enterprise only setting for rbac permission cache ( #49006 )
...
* Add enterprise only setting for RBAC permission cache
Co-authored-by: Jguer <joao.guerreiro@grafana.com >
2022-05-16 17:52:10 +02:00
Ieva and Karl Persson
f256f625d8
AccessControl: Enable RBAC by default ( #48813 )
...
* Add RBAC section to settings
* Default to RBAC enabled settings to true
* Update tests to respect RBAC
Co-authored-by: Karl Persson <kalle.persson@grafana.com >
2022-05-16 12:45:41 +02:00
idafurjes
abb1618291
Add OTLP exporter for OpenTelemetry ( #47987 )
...
* Add OTLP exporter for OpenTelemtry
* Fix lint
* Refactore parse settings
* Add configuration for propagation + fix tests
* Fix tests and lint
* Fix alerting tests
* Add coments to config
* Add propagation to custom.ini
2022-05-05 10:37:26 +02:00
Jean-Philippe Quéméner
0a87ef06af
Alerting: add safeguard for migrations that might cause dataloss ( #48526 )
...
* Alerting: add safeguard for migrations that might cause dataloss
* add test for panic
* add documentation
2022-05-02 10:38:42 +02:00
Jguer
8126331f66
Update cron library for ldap sync ( #47983 )
...
* ldap: update cron library
* Update docs/sources/enterprise/enhanced_ldap.md
2022-04-26 14:14:48 +02:00
Torkel Ödegaard
057ff5bcf5
Prometheus: Query builder UX tweaks and feedback link ( #47655 )
...
* Prometheus: Query builder UX tweaks and feedback link
* Remove .
* Fixed link
* added option to hide feedback links
* feedback link setting name change
* move config check
* fixed ts issue
2022-04-14 15:18:03 +02:00
Will Browne
f3c1448b57
Analytics: Enable grafana and plugin update checks to be operated independently ( #46352 )
...
* add separate cfg for controlling plugin update checks
* https
* add specific version note to docs
* pr feedback
* fixup
2022-04-06 10:50:21 +02:00
Cameron Waterman and achatterjee-grafana
8426cfe400
Profile/Help: Expose option to disable profile section and help menu ( #46308 )
...
* Expose option to disable help menu
* Expose option to disable profile menu
* Add Profile FeatureTogglePage
* Update public/app/features/profile/FeatureTogglePage.tsx
Uptake PR wording suggestion.
Co-authored-by: achatterjee-grafana <70489351+achatterjee-grafana@users.noreply.github.com >
* Fix front end lint issue
* Fix back end lint issue
Co-authored-by: achatterjee-grafana <70489351+achatterjee-grafana@users.noreply.github.com >
2022-03-29 16:27:53 +01:00
9eb2cd537d
Plugins: Make backend plugin metrics endpoints available with optional authentication ( #46467 )
...
* add new endpoint without auth+config
* add cfg check
* fit lint issue
* Add basic auth support
Co-authored-by: Will Browne <wbrowne@users.noreply.github.com >
* WIP docs
* Update docs/sources/administration/view-server/internal-metrics.md
Co-authored-by: Dave Henderson <dhenderson@gmail.com >
* update instructions
Co-authored-by: Will Browne <will.browne@grafana.com >
Co-authored-by: Will Browne <wbrowne@users.noreply.github.com >
Co-authored-by: Dave Henderson <dhenderson@gmail.com >
2022-03-29 11:18:26 +02:00
sivamu
6c468daabc
AzureAD OAuth: Add optional strict parsing of role_attribute_path for Azure AD ( #42157 )
...
* AzureAD OAuth: Add optional strict parsing of role_attribute_path for Azure AD
Fix casting issues
modify unit tests
Unit test fix
Add proper test args
* Return empty role when using strict attribute mode
* Raise error on empty role
* Fix UT for latest case
2022-03-18 10:34:16 +00:00
Joan López de la Franca Beltran
2081f37e95
Encryption: Make DEKs cache TTL & cleanup interval configurable ( #46042 )
...
* Make DEKs cache TTL & cleanup interval configurable
* Improve 'data_keys_cache_ttl' setting description
* Fix test
2022-03-16 20:05:13 +01:00
Sergey Kostrukov
1dca39fb91
Auth Proxy: encoding of non-ASCII headers ( #44797 )
...
* Decode auth proxy headers using URL encoding
* Header encoding configuration via settings file
* Rename configuration setting to headers_encoded
* Quoted-printable encoding
* Tests for AuthProxy
* Fix encoding name
* Remove authproxy init
2022-03-04 04:58:27 -05:00
baez90
6beba5a049
Chore: add setting to skip org assignment for external users ( #34834 )
...
* Chore: add setting to skip org assignment for external users
Introduce 'skip_org_role_update_sync' setting to skip any kind of org assignment during the login of external users.
As a consequence manual organization assignments won't be overridden during the upsert of an external user.
Part of #22605
* Chore: Rename skip_org_role_update_sync to oauth_skip_org_role_update_sync and relocate it to auth section
* Chore: replace global setting access where possible
2022-02-21 17:34:47 +01:00
2b9e46d1f8
Angular: Option to disable angular support and isolate angular dependencies ( #45421 )
...
* Angular: Initial setting that disables angular, load angular support in separate chunk
* Load angular panels on demand
* Load alerting in separate chunk only when angularSupportEnabled
* progress, do not export core_module if angular disabled
* Progress
* Update public/app/features/plugins/built_in_plugins.ts
Co-authored-by: Ryan McKinley <ryantxu@gmail.com >
* Removing remaining usage of angular from outside angular app (not counting plugins)
* Update config and docs
* Fix sample.ini
* Update public/app/features/alerting/AlertTab.tsx
Co-authored-by: Levente Balogh <balogh.levente.hu@gmail.com >
* Fixing prettier issue
Co-authored-by: Ryan McKinley <ryantxu@gmail.com >
Co-authored-by: Levente Balogh <balogh.levente.hu@gmail.com >
2022-02-16 17:14:33 +01:00