public/grafana
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
64,847 Commits 655 Branches 650 Tags
ash/react-19-ref-changes
Commit Graph
71 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Charandas b96a1ae722 Custom Routes: use existing server's mux container instead of gorilla.Mux (#115605) 2026-01-07 12:46:27 -08:00
Charandas d0792ebe97 Secrets: Add gRPC client retry with exp. backoff" (#115526) 
Provisioning: secrets decrypt client should retry with exponential backoff
 2025-12-18 07:44:33 -08:00
Charandas e525b529a8 fix: Add panic for nil authorizer in installer (#115186) 2025-12-12 05:01:03 -08:00
Charandas 3a4022061d K8s: discourage nil authorizer return for APIBuilder as well (#115116) 2025-12-10 23:06:09 +00:00
Charandas da14be859e Authorization: panic when specific authorizer returns nil (#114982) 2025-12-10 13:01:34 -08:00
Charandas 16f5eab786 MTFF: Allow viewers access in cloud (#114607) 
* Reapply "K8s: read resource configs from API Enablement for API Builders" (#114475)

This reverts commit 4130bd9cd3.

* revert part that broke things

* FF service changes are gonna come later

* MTFF: allow viewers access to MTFF by enforcing runtime_config for custom routes

* unused var

* removed now

* pass the test, include defaults

* revert sample.ini change
 2025-12-08 17:37:10 -08:00
Charandas d1cbef9157 K8s: use runtime config for API Builders (#114601) 
* Reapply "K8s: read resource configs from API Enablement for API Builders" (#114475)

This reverts commit 4130bd9cd3.

* revert part that broke things

* FF service changes are gonna come later
 2025-12-05 11:53:31 -08:00
Charandas d5de92e5b2 fix: propagate service identity correctly for requester (#114423) 
* fix: propagate service identity correctly for requester

* revert
 2025-12-02 10:38:37 +01:00
Charandas 0c2707bbc4 K8s: read resource configs from API Enablement for API Builders (#114329) 2025-11-24 11:09:49 -08:00
Charandas 3c0d5745fe chore: remove remaining references to singular namespace (#114208) 2025-11-20 11:23:36 +01:00
Charandas 9ca6ad3b49 OFREP: add ST builder for the authorizer, APIEnabled=false needs it (#113809) 2025-11-13 09:19:16 -08:00
Charandas cbd794d0b8 Provisioning: fix regression with webhook authz failing in MT (#113793) 2025-11-12 13:21:28 -08:00
Charandas a06905e2d3 fix: switch to test-containers from grafana/e2e for API server tests (#113256) 2025-11-03 16:10:32 -08:00
CharandasandIevaVasiljeva 6c728f8dec Provisioning: allow access check to proceed even when non access policy (#112946) 
* Provisioning: allow access check to proceed even when non access policy

* Provisioning: access checker needs this for MT

* add permissions registration

* remove scopes

* use in MT for now

* no need to document an internal flag here

* revert vscode change

* refactor the authZ permission evaluation and mapper code to allow evaluating unscoped actions beyond creation

* update wire

* gofmt

* add boolean to struct

---------

Co-authored-by: IevaVasiljeva <ieva.vasiljeva@grafana.com>
 2025-11-02 13:14:08 -08:00
Charandas c98259f74a Identity: adds ServiceIdentityForSingleNamespace helper (#113161) 2025-11-01 11:51:25 -07:00
Charandas dc626e897b devenv: fix volumes section when sources don't contain one (#111563) 2025-09-25 07:18:14 -07:00
Charandas 64c700e563 Provisioning: kind name should be singular (#111570) 2025-09-24 15:25:41 -07:00
Charandas e5121e8762 feat: customizable persistent volumes for devenv docker blocks (#111412) 2025-09-19 18:48:31 +00:00
Charandas 76b3d855c7 fix: use multi client for provisioning API builder (#111144) 2025-09-18 16:35:40 -07:00
Charandas d9e099d480 Feature-Flag service: signing middleware for cloud usecase (#107745) 2025-07-17 09:50:25 -07:00
Charandas aa2cf8e398 Remove kube-aggregator from OSS (#103659) 
* feat: remove kube-aggregator for OSS and provide injection points with runner iface

* upgrade authlib to support expiresIn

* new FT

* new FT again

* update go.mod

* get rid of the slice implementation

* reconcile conflicts

* gracefully handle enterprise not being linked situation with kubeAggregator FT true

* allow dataplane agg and kube agg to both be added to delegate chain

* make update-workspace

* address feedback

* revert go.mod changes

* go.mod updates

* elaborate on why and how of skipping the Ready channel handling

* after rebase and make run
 2025-05-15 11:14:23 -07:00
Charandas cedb4ef9c1 fix: testutil blocking PR checks from passing (#101527) 2025-03-03 10:56:30 -08:00
Charandas 22d39f585d fix: don't double set aggregator certs (#101444) 2025-03-03 09:50:11 -08:00
Charandas 33eca9e6fb aggregation: fix config.ini reading of the new bool (#101099) 2025-02-21 04:29:40 +02:00
Charandas f69e81facf K8s: reduce discovery requests pressure on aggregated services (#101012) 2025-02-20 04:51:15 +02:00
Charandas b00f2e02c7 K8s: don't publish metrics for local services that are always available (#101003) 2025-02-19 22:39:40 +02:00
Charandas 883f3c5ce2 K8s: add a bool setting to select request header auth versus enterprise behavior (#100877) 2025-02-19 05:14:22 +02:00
Charandas ea788975e0 K8s: refactor build handler chain func to allow easier injection from enterprise (#100777) 2025-02-15 04:08:00 +02:00
Charandas ccb442558f chore: fix dockerfile for local development (#99721) 2025-02-11 10:00:15 -08:00
Charandas 24bf337c56 Playlists: convert to use reconcilers instead (#98075) 2024-12-19 19:09:31 -08:00
Charandas 9223cd8f59 Cloud Aggregation: make it work for users with no name (#96509) 2024-11-16 01:28:54 +02:00
Charandas 2fd4fe40f0 K8s: for tests to use kubectl access, port-forwarding requires 0.0.0.0 (#94836) 2024-10-17 11:15:57 -07:00
Charandas b4234cb06e K8s: add aggregator metrics (#94579) 2024-10-15 12:41:27 -07:00
Charandas db97da3465 K8s: handle multiple versions of the same group in standalone mode (#93199) 2024-09-23 19:07:52 -07:00
Charandas 4f024d94d8 Authn: resolve issues with setting up a nil identity (#92620) 2024-08-29 00:49:41 +03:00
Charandas af2e79aa83 K8s: namespace mapper should use authlib's util (#92332) 2024-08-27 15:01:42 -07:00
Charandas cf5e49dbb8 build: semconv recently got its own go.mod (#91560) 2024-08-06 16:39:21 -07:00
Charandas abbfc15563 K8s e2e tests: adds e2e package and 10 year certs (#91557) 2024-08-06 03:29:36 +03:00
Charandas a3d3f9a1e4 Revert "Identity: Remove id token from extra info (#91169)" (#91350) 
This reverts commit 10170cb839.
 2024-07-31 21:27:46 +03:00
Charandas 4abb4d1662 ExtJwt: don't log verify errors as they spam for grafana-agent (#90351) 
* ExtJwt: don't log verify errors as they spam for grafana-agent

* remove dead code

* revert unintended change

* revert unintended change
 2024-07-11 18:23:43 -07:00
Charandas 57e2a56876 K8s: fix tracer init by moving Config() above it (#90311) 2024-07-11 00:57:58 +03:00
Charandas 3eef9b3397 Requester/authn: check the interface for nil value to avoid false positives (#90210) 2024-07-09 02:30:03 +03:00
Charandas c210617735 K8s: use contexthandler in standalone handler chain (#90102) 2024-07-08 12:22:10 -07:00
Charandas f50c8566df K8s: handle queries being an empty slice (#89928) 
* K8s: handle queries being an empty slice

* remove unnecessary comment

* remove redundant break
 2024-07-02 19:44:29 +00:00
Charandas d13e175328 K8s: upgrade authlib with correct IDTokenClaims (#87461) 2024-05-07 14:09:02 -07:00
Charandas a9da6ce1d5 ext_jwt: streamline expected aud in access tokens and id tokens (#87401) 2024-05-07 11:20:16 -07:00
Charandas 0c59baf62d ext_jwt: switch to new authlib (#87157) 2024-05-03 12:59:37 -07:00
Charandas d46b163810 Authn (jwt_auth): add tracing spans for validating newer use cases (#86812) 2024-04-24 02:40:00 -07:00
Charandas 2aedd9dacf K8s: add ID token to requests outbound to new query endpoint (#86214) 2024-04-15 20:34:20 +02:00
Charandas a39fe593c2 K8s: remove standalone authenticator in favor of providing one through the factory (#85901) 2024-04-11 21:30:23 +02:00
Charandas 0f1151964c K8s: standalone authenticator that allows a type of downstream forwarding (#85130) 2024-03-28 20:52:28 +02:00
Charandas dd7d4e2656 K8s: replace a noop certKey content func with actual if available (#84524) 2024-03-25 10:12:55 -07:00
Charandas e237b89fe7 K8s: skip invalid items in GetList when not invoked as part of SendInitialEvents (#85050) 2024-03-25 07:50:14 -07:00
Charandas 2f5be54252 Makefile: fix test-go to run all (#85048) 2024-03-25 10:49:36 +03:00
Charandas 3c42a2efd2 K8s: file storage - add sync around resource version (RV) management (#84694) 2024-03-23 23:58:48 -07:00
CharandasandMarcus Efraimsson 2d1cd82a98 K8s: standalone: use Grafana's logger to stream all logs (#84530) 
---
Co-authored-by: Marcus Efraimsson <marcus.efraimsson@gmail.com>
 2024-03-18 19:25:30 +02:00
Charandas 759cefd94c ExtSvcAccounts: FIX tests that accidently depended on enterprise (#84535) 
* ExtSvcAccounts: FIX tests that accidently depended on enterprise

* fix
 2024-03-15 08:18:11 +01:00
Charandas 34b5303daf K8s: file-storage: provide empty for resourceVersion initially (#84523) 2024-03-14 16:33:41 -07:00
Charandas b6a020148b K8s: disallow MT storage functionality for Aggregator builders (#84408) 2024-03-14 01:54:30 +02:00
Charandas 0eee72824c K8s: omit CABundle until insecure is false (#84323) 2024-03-12 21:58:02 +02:00
Charandas da327ce807 K8s: enable insecure to skip server cert validation for now (#84038) 2024-03-12 01:13:14 +02:00
CharandasandTodd Treece e916372249 K8s: bug fixes for file storage to allow for watcher initialization on startup (#83873) 
---------

Co-authored-by: Todd Treece <todd.treece@grafana.com>
 2024-03-05 10:34:47 -08:00
Charandas b87ec69431 K8s: add a remote services file config option to specify aggregation config (#83646) 2024-02-29 17:29:05 -08:00
Charandas 0bd009fb53 K8s: fix nil deref from dummy factory for API Server options (#83132) 2024-02-20 23:00:02 +02:00
Charandas 117a4b4b0a K8s: resolve crash due to looking up aggregation config when running in a K8s environment (#82125) 
K8s: apply authn options only in dev mode - resolves crash due to looking up aggregation config
 2024-02-07 16:43:07 -08:00
Charandas 9167d67c05 K8s: update hack codegen script (#81216) 2024-01-25 12:01:09 -08:00
Charandas 87c3d3b029 K8s: add the CRD server to the grafana-aggregator component (pkg/cmd) (#80759) 2024-01-17 12:21:24 -08:00
Charandas 48612063dd Grafana app platform: an aggregator cmd and package (#79948) 2024-01-08 22:33:42 +02:00
Charandas 28e58c1725 Grafana app platform: drop etcd requirement in example-apiserver (#77886) 2023-11-08 10:57:32 -08:00
Charandas 8a46dc39d0 Grafana App Platform: provide an example-apiserver to easily deploy aggregated APIservers (#77826) 2023-11-07 22:35:15 -08:00
Charandas 614f1af190 Tempo: remove deprecated model package usage (remove replace) (#71687) 
* Tempo: remove deprecated model package usage (remove replace)

* fix root test
 2023-07-18 19:30:29 +03:00