Alexander Akhmetov
6ff67722b8
Alerting: Include rules imported in the UI into prometheus_imported_rules metric ( #106229 )
2025-06-02 12:47:09 +02:00
xavi
31a9ddc47a
IAM: Run user creation inside transaction ( #106113 )
2025-06-02 11:29:57 +02:00
linoman
374bd5bec7
SCIM: Change SCIM hook registration ( #106200 )
...
* Add function to skip provisioning hook
* Rework provisioning hook to PostLoginHook
* Revert back to PostAuthHook and remove unused tests
* Fix tests
2025-06-02 11:04:14 +02:00
Alexander Akhmetov
e256f2d5e2
Alerting: Enable recording rules by default ( #105603 )
2025-06-02 10:56:05 +02:00
Alexander Akhmetov
4cde79e802
Alerting: Clean up join errors code ( #106243 )
2025-06-02 10:30:04 +02:00
Mihai Doarna
6ab9c8bf57
Auth: Remove code for authenticating API keys ( #105998 )
...
* remove auth for plain API keys
* move condition to validateApiKey()
* fix typo
* remove GetApiKeyById() method
2025-06-02 09:54:10 +03:00
Alexander Akhmetov
eae77aa695
Alerting: Resend alerts for states that are missing in the eval results ( #105965 )
...
What is this feature?
This PR fixes the MissingSeriesEvalsToResolve behavior when it's set to more than 4 evaluation intervals.
Why do we need this feature?
The MissingSeriesEvalsToResolve setting was not working correctly due to alerts being auto-resolved by Alertmanager after 4 evaluation intervals (via the endsAt field).
Before we had deleteStaleStatesFromCache method that was returning only stale states that had to be resolved. Non-stale states for which the current evaluation does not have a series never had endsAt updated and were never resend to the Alertmanager, so they were automatically resolved after 4 evaluations regardless of the setting.
The new processMissingSeriesStates returns state for each missing series on every evaluation, and resolves the stale ones. This guarantees that alerts without series still alert for the configured number of evaluations.
2025-05-29 23:22:35 +02:00
Ashley Harrison
4ac248a512
Internationalisation: Mark up panel plugins for translations ( #106068 )
...
* config for panel plugin translations
* markup
* tweaks
* prettier
* use data-testid
* rename disable rule now it's been moved
* final markup
2025-05-29 18:13:25 +01:00
David Kim (DK)
939f2c9828
Navigation: Add the new badge to the SLO reports nav item ( #105707 )
...
* attempt to add slo reports badge
* fix build
* add new badge for reports for subitem in grafana-slo-app
2025-05-29 16:37:14 +01:00
Eric Leijonmarck
69653ea3dc
Zanzana: Adds running migrations from openfga w. RunMigrations() ( #105691 )
2025-05-29 15:54:12 +01:00
Mykhailo Zahlada and Misi
fc988c8771
Auth: Add Azure/Entra workload identity support ( #104807 )
...
* fixes/adds azure workload identity authentication. Issue #78249
* Updates default values. Adds `workload_identity_token_file` defaults
* Updates example config. Adds `workload_identity_token_file`
* Updates docummentation: adds Federated credentials for Workload Identity
* Update docs/sources/setup-grafana/configure-security/configure-authentication/azuread/index.md
Co-authored-by: Misi <mgyongyosi@users.noreply.github.com >
* Update docs/sources/setup-grafana/configure-security/configure-authentication/azuread/index.md
Co-authored-by: Misi <mgyongyosi@users.noreply.github.com >
* Docs: add link to official documentation. Clarifies example.
* 1. Add workload_identity_enabled and workload_identity_token_file settings to [auth.azuread] for workload identity support.
2. Extend OAuthInfo struct to include workload identity fields.
3. Update OAuth authentication logic to handle Azure AD workload identity using federated token as client assertion.
4. Update sample configuration and documentation for new settings.
* ensure environment variable overrides are respected for OAuth SSO settings
- Ensure that settings loaded in pkg/services/ssosettings/strategies/oauth_strategy.go correctly reflect environment variable overrides, matching Grafana's config behavior.
- Align config loading logic with main config loader to prevent issues where INI values would override environment variables.
* updates documentation
* test: add workload identity configuration tests for Azure AD OAuth strategy. Add test coverage for workload_identity_enabled and workload_identity_token_file settings
* feat: add workload identity support to Azure AD SSO configuration UI
* updates documentation
* Simplify OAuth flow by removing unnecessary switch-case structure
* Small changes
* Lint + i18n gen
* refactor: remove redundant workload_identity_enabled setting as auth method gets defined by client_authentication
* update documentation
* refactor: remove redundant workload_identity_enabled setting as auth method gets defined by client_authentication
* updates documentation - configuration options table: adds `client_authentication`, `workload_identity_token_file`, and `federated_credential_audience`
* Small changes, lint, i18n
---------
Co-authored-by: Misi <mgyongyosi@users.noreply.github.com >
2025-05-29 14:09:18 +02:00
Stephanie Hingtgen
5303a1cc7e
Org: Fix org deletion ( #106193 )
2025-05-29 09:40:06 +03:00
Stephanie Hingtgen
ab99211b40
Dashboard Provisioning: Reduce db load ( #106114 )
2025-05-29 09:39:07 +03:00
Ezequiel Victorero
3de80ec3d7
Feature Toggles: remove useRawTimeRange FF ( #106154 )
2025-05-28 15:44:48 -07:00
Will Browne
edb0865caa
Chore: Ensure we save correct default admin user in integration test DB setup ( #105752 )
...
* fix helper + amend tests
* fix import + remove unused var
* remove more users
* remove unused code
* update test comment
2025-05-28 11:25:01 +01:00
Alexander Akhmetov
b51d70aad9
Alerting: Fix swagger generation ( #106106 )
2025-05-28 10:15:11 +02:00
Ryan McKinley
d4c446f42c
Chore: Update k8s.io to v0.33.1 ( #105307 )
2025-05-28 00:13:18 +03:00
Nathan Marrs
0178de3109
Feature Toggles: Remove two AB test feature toggles ( #106100 )
2025-05-27 21:18:23 +02:00
Alexander Akhmetov
faeddf334a
Alerting: Fix $value type when single data source is queried ( #106080 )
2025-05-27 21:04:07 +02:00
Jean-Philippe Quéméner
9a565ff46e
chore(authz): contextualize the authz logger ( #106078 )
2025-05-27 16:28:58 +02:00
Domas
d5bb055593
NavTree: Group APM and Infra plugins under "Observability" section ( #104192 )
...
* put o11y department apps under Observability menu section
* fix tests
* change url for observability grouping
* add routing for /observability
2025-05-27 17:05:28 +03:00
Alexander Zobnin
ef14992f00
Zanzana: Fix reconciling role with empty UID ( #106045 )
2025-05-27 14:23:29 +02:00
Jev Forsberg
5963be6f31
Security: Add fix for CVE-2025-3580 ( #105976 )
...
baldm0mma/ add main/404-202504151210.patch to main
2025-05-27 11:21:55 +01:00
Fayzal Ghantiwala
589046bcdc
Alerting: Persist alert instance FiredAt field ( #105927 )
...
* Persist alert instance fired at
* Update protos and tests
2025-05-27 10:04:26 +01:00
Zoltán Bedi and Ivana Huckova
1e383b0c1e
Postgres: Switch the datasource plugin from lib/pq to pgx ( #103961 )
...
* Create libpqToPGX feature toggle
* Refactor PostgreSQL datasource to support PGX with feature toggle
- Updated `ProvideService` to accept feature toggles for enabling PGX.
- Modified integration tests to use the new PGX connection method.
- Introduced new functions for handling PGX connections and queries.
- Enhanced TLS configuration handling for PostgreSQL connections.
- Updated existing tests to ensure compatibility with PGX and new connection methods.
* Update PostgreSQL datasource to enhance connection pooling and error handling
- Increased `MaxOpenConns` to 10 in integration tests for improved connection management.
- Refactored connection handling in `newPostgresPGX` to return a connection pool instead of a single connection.
- Updated health check error handling to utilize context and feature toggles for better error reporting.
- Adjusted `DisposePGX` method to close the connection pool properly.
- Enhanced query execution to acquire connections from the pool, ensuring efficient resource usage.
* Cleanup
* Revert postgres_test unnecessary changes
* Rename feature toggle from `libpqToPGX` to `postgresDSUsePGX`
* Add null check to dispose method
* Fix lint issues
* Refactor connection string generation
* Address comment in health check file
* Rename p to pool
* Refactor executeQueryPGX and split into multiple functions
* Fix lint issues
* The returning error message from PGX is enough no need to separate the error code.
* Move TLS handling to newPostgresPGX function
* Disable ssl for integration tests
* Use MaxIdleConns option
* Remove old feature toggle
* Rename`generateConnectionConfigPGX` to `generateConnectionStringPGX`
* Add back part of the error messages
* Don't show max idle connections option when PGX enabled
* Address comments from Sriram
* Add back Sriram's changes
* PostgreSQL: Rework tls manager to use temporary files instead (#105330 )
* Rework tls manager to use temporary files instead
* Lint and test fixes
* Update pkg/tsdb/grafana-postgresql-datasource/postgres.go
Co-authored-by: Ivana Huckova <30407135+ivanahuckova@users.noreply.github.com >
* Update betterer
---------
Co-authored-by: Ivana Huckova <30407135+ivanahuckova@users.noreply.github.com >
---------
Co-authored-by: Ivana Huckova <30407135+ivanahuckova@users.noreply.github.com >
2025-05-26 08:54:18 +02:00
Stephanie Hingtgen
745eda2848
Dashboard Provisioning: Fix re-provisioning on each run ( #105979 )
...
Dashboard Provisioning: Fix reprovisioning on startup
2025-05-25 13:18:49 +03:00
Stephanie Hingtgen
5c0194955e
Dashboards: Fix FindDashboards when kubernetesClientDashboardsFolders is disabled ( #105974 )
...
Dashboards: fix legacy FindDashboards
2025-05-24 07:06:30 -06:00
Alex Khomenko
0cb6f9584b
Restore dashboards: Re-enable FE feature toggle ( #105820 )
...
* Add dashboardRestore toggle
* Restore the toggle on FE
* Add navtree item
* Fix lint
* Rename feature toggle
* Use the renamed toggle
2025-05-23 17:35:54 +03:00
Peter Štibraný
c4d3eb1cd0
Remove support for Google Spanner database. ( #105846 )
...
* Remove support for Google Spanner database.
2025-05-23 11:35:59 +02:00
Cory Forseth
249e2f3d34
Authorization: add toggle for LBAC filtering for Tempo datasources ( #105688 )
...
add toggle for LBAC filtering for Tempo datasources
2025-05-22 20:13:31 +01:00
Fayzal Ghantiwala
67d28465de
Alerting: Fix debug log line in External Alertmanager sender ( #105855 )
...
Fix log line
2025-05-22 21:07:12 +03:00
Matt Cowley
2ce1c67d92
Home: update setup guide link/title to Getting Started Guide ( #105692 )
...
* Home: update setup guide link/title to Getting Started Guide
* Home: check plugin presence to show getting started guide
* Home: remove now unused homeSetupGuide feature toggle
* Home: use sentence case for Getting started guide item
2025-05-22 14:06:50 +03:00
Sonia Aguilar
fc5472615f
Alerting: Add alertingImportYAMLUI feature flag ( #105742 )
...
Add alertingImportYAMLUI ff
2025-05-21 17:59:41 +02:00
Andre Pereira
b0feaed582
Drilldown: Remove New badge from drilldown menu ( #105746 )
...
Remove isNew flag from drilldown menu
2025-05-21 18:40:43 +03:00
Sofia Papagiannaki
69e657b296
SQLStore: Add index on is_service_account and last_seen_at columns in user table. ( #105727 )
...
Add index on is_service_account and last_seen_at columns in user table.
2025-05-21 17:44:44 +03:00
Yuri Tseretyan
d019b4ff1b
Alerting: Change logging in Alertmanager ( #105704 )
...
* change logger to ngalert.notifier and use component label
* update alerting module
---------
Signed-off-by: Yuri Tseretyan <yuriy.tseretyan@grafana.com >
2025-05-21 10:13:18 -04:00
Gabriel MABILLE
cb3cd021b7
AuthZ-Service: Add traces to cache ( #105718 )
2025-05-21 14:35:43 +02:00
William Wernert
0208231ed6
Alerting: Handle connection errors in remote writer as expected (i.e. user) errors ( #105687 )
2025-05-20 15:14:39 -04:00
maicon
1435eedbc4
Provisioning: Move OSS provisioning to Run step ( #105428 )
...
* Provisioning: Move OSS provisioning to Run step
Signed-off-by: Maicon Costa <maiconscosta@gmail.com >
---------
Signed-off-by: Maicon Costa <maiconscosta@gmail.com >
2025-05-20 14:06:06 -04:00
Mustafa Sencer Özcan
f70edbb6f2
fix(unified-storage): bump unified storage folder list limit ( #105685 )
2025-05-20 17:29:31 +02:00
Ashley Harrison
b727bd1c8d
Chore: Move ml app to root ( #105677 )
...
* move ml app to root
* update translation
* translate subtitle as well
* fix casing
2025-05-20 16:24:21 +01:00
lean.dev
06223868b9
Chore: rename licensing action ( #105143 )
2025-05-20 15:24:06 +01:00
Matheus Macabu
38de0cac3a
Chore: Replace usages of golang.org/x/net/context with stdlib context package ( #105676 )
2025-05-20 14:59:40 +02:00
Matheus Macabu
36c31ce841
NGAlert: Revert change to use math/rand/v2 in tests ( #105661 )
2025-05-20 14:47:57 +02:00
Ana Ivanov
dbd88033f0
Add Cloud provider logo ( #105274 )
...
* Add Cloud provider logo
* remove color
* remove other svg props
2025-05-20 14:55:22 +03:00
Ashley Harrison
546f0c2675
Chore: Remove extraThemes feature toggle ( #105623 )
...
remove extraThemes feature toggle
2025-05-20 09:18:08 +01:00
Tito Lins
15aa879acb
Alerting: ignore multiple org ids on prom writer ( #105652 )
2025-05-20 10:15:25 +02:00
Alexander Zobnin
cfba630f5c
RBAC: Don't additionally cache all users permissions ( #105607 )
...
* RBAC: Don't additionally cache all users permissions
* remove unused tests
2025-05-20 09:28:46 +02:00
Yuri Tseretyan
7dc13d63b9
Alerting: Refactor Grafana Alertmanager ( #105568 )
...
* update alerting module
* use NotificationsConfiguration
* update to use opts and configure new fields
* use TenantID instead of orgId
2025-05-20 04:40:51 +03:00
Michael Mandrus
b4fc33ff6b
Chore: Fix cloud migration test when running against postgres ( #105636 )
...
make postgres integration tests happy
2025-05-19 22:59:31 +02:00