public/grafana
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
64,295 Commits 655 Branches 650 Tags
selectable-fields
Commit Graph
36 Commits
Author SHA1 Message Date
Alexander ZobninandGabriel MABILLE 358d0eb266 Zanzana: Role write APIs (#114533) 
* Zanzana: Role write APIs

* Add tests

* Update pkg/services/authz/zanzana/server/server_mutate_roles.go

Co-authored-by: Gabriel MABILLE <gamab@users.noreply.github.com>

* fix func usage

---------

Co-authored-by: Gabriel MABILLE <gamab@users.noreply.github.com>
 2025-11-28 11:44:58 +01:00
Alexander Zobnin 3fca7cf952 Zanzana: Refactor basic role write APIs (#113397) 
* Zanzana: Refactor basic role write APIs

* Fix updates

* fix linter
 2025-11-04 16:29:56 +01:00
Alexander Zobnin 259c7807cb Zanzana: Respect action sets for dashboards and folders during reconciliation (#113352) 
Zanzana: Respect action sets for dashboards and folders during legacy reconciliation
 2025-11-03 15:19:23 +01:00
Alexander Zobnin d6fa822e89 Zanzana: Write API for org roles (#113339) 
* Zanzana: Add write APIs for user org roles

* Add tests

* Fix tests

* fix role translation
 2025-11-03 14:47:10 +01:00
Alexander Zobnin 7a7fd45bdd Zanzana: app platform style write APIs (#112812) 
* refactor zanzana client instantiation

* refactor client imports

* POC write API (Mutate)

* fix linter

* delete exisitng folder parents

* refactor common functions

* minor refactor

* groupd operations by type

* atomic folder operations

* use deleteExisting for deletes

* Add tests for folders

* more tests

* resource permissions tests

* add more tests

* fix mock zanzana client

* fix linter

* fix linter

* re-use types from apps

* add some comments to the protobuf
 2025-10-28 11:22:13 +01:00
Misi a5c05ba9c1 IAM: Moving code to the /pkg/apps/iam folder (#109985) 
* wip

* Gen GetTeams with app sdk

* Revert some changes, cleanup

* Format iam_manifest.go

* Remove generated file

* Regenerate openapi defs

* Cleanup

* Remove TODO
 2025-08-28 12:32:15 +02:00
Ryan McKinley b09d79b21c K8s/Dashboard: Promote from alpha1 to beta1 (#104009) 2025-04-23 20:54:35 +03:00
Ryan McKinley 0283c98e30 K8s/Folders: Use v1beta1 and app-sdk based spec (#103975) 2025-04-14 23:20:10 +03:00
Stephanie Hingtgen f5ad1ef69b K8s: Folders: Add v1 api (#103842) 2025-04-11 13:09:52 +01:00
Alexander Zobnin 63a2ce7214 Zanzana: Support subresources for users and service accounts (#102874) 
* Zanzana: Support subresources for users and service accounts

* rename relationsFolder

* fix linter error
 2025-03-26 16:07:01 +01:00
Stephanie Hingtgen 7c2890384a K8s: Dashboards: Set v1alpha1 as priority (#102729) 2025-03-25 10:32:49 -06:00
Alexander Zobnin c34394f385 Zanzana: Support subresources for typed resources (#102470) 
* Zanzana: Support subresources for folders

* refactor

* fix subresource requests

* implement listing for folders subresources

* teams subresources PoC

* re-enable tests

* use team resource def from iam

* fix tests

* remove unused code

* refactor: rename to subresource

* split resource schema

* update workspaces

* rename folder relation to subresource

* refactor: rename folder resources to subresources

* update readme

* fix listing

* rename params in subresource filter
 2025-03-25 12:31:06 +01:00
Igor Suleymanov 5d2ba10113 K8s/Dashboards: Extract Dashboard APIs to an app submodule (#102029) 
* Move dashboard k8s APIs to a separate app

Signed-off-by: Igor Suleymanov <igor.suleymanov@grafana.com>

* Copy dashboard code in Dockerfile

Signed-off-by: Igor Suleymanov <igor.suleymanov@grafana.com>

* Fix conversion generation

Signed-off-by: Igor Suleymanov <igor.suleymanov@grafana.com>

* Update OpenAPI snapshot for dashboard/v0alpha1

Signed-off-by: Igor Suleymanov <igor.suleymanov@grafana.com>

---------

Signed-off-by: Igor Suleymanov <igor.suleymanov@grafana.com>
 2025-03-13 11:05:01 +02:00
Alexander Zobnin fcb88f6ccc Zanzana: revert cluster store for fixed roles (#100958) 
* Zanzana: revert cluster store for fixed roles

* update go workspace
 2025-02-19 13:53:25 +01:00
Karl Persson b0347792cc Zazana: Fix verb to relation mapping (#99409) 2025-01-23 13:04:41 +01:00
Karl Persson ce0d986673 Zanzana: Use cache for both streamed and non-stream version of list objects (#98882) 
* Add prefix constants and use string builders / string concatinations

* Use cache for both streamed and non-stream versions of list objects

* Remove unused constants
 2025-01-14 16:00:59 +01:00
Karl Persson 0f9b107201 Zanzana: Consistently add context (#98862) 
* Zanzana: Reworks how contextuals are loaded

* Cleanup listObjectWithStream

* Run list test with streaming enabled
 2025-01-13 12:11:51 +01:00
Karl PerssonandAlexander Zobnin c593b20465 Zanana: Add custom verb for get_permissions and set_permissions. (#98616) 
* Add custom verb for get_permissions and update_permissions.

Co-authored-by: Alexander Zobnin <alexanderzobnin@gmail.com>
 2025-01-10 11:49:26 +01:00
Karl Persson 9ed4bf3cd2 Zanzana: Support sub resources (#98201) 
* Create and use common ResourceInfo struct

* Add support for formatting group resource with subresource

* Add initial support for handling subresource

* Add test for checking subresource for generic resource

* Bump authlib
 2025-01-07 15:16:14 +01:00
Alexander Zobnin 7e5cb7d8d6 Zanzana: Refactor fixed roles (use global store) (#97884) 
* Zanzana: Pass contextual tuples for authorization

* global reconciler for fixed roles

* inject tuples from global store

* fix adding contextual tuples

* cleanup

* don't error on auth context fail

* add todo

* add context for List

* add caching

* remove unused

* use constant for global namespace

* Rename global namespace to cluster namespace
 2025-01-07 13:49:55 +01:00
Alexander Zobnin 61d71ec5b1 Zanzana: Handle anonymous users (#97171) 
* add anonymous users to schema

* sync anonymous user role

* remove unused

* fix linter

* only add anonymous reconciler if feature is enabled
 2024-12-11 12:22:42 +01:00
Karl Persson 87ba9c60b2 Zanzana: change type name from namespace to group_resource (#97741) 
* Change type name from namespace to group_resource

* update function names and test descriptions
 2024-12-10 15:21:54 +01:00
Karl Persson 718612aabf Zanzana: Update relation names (#97638) 
* Update relation names to match k8s verbs

* Only check namespace if relation is valid

* Only list for valid relations
 2024-12-10 09:38:03 +01:00
Alexander Zobnin cd7772204e Zanzana: Handle renderer service authorization requests (#97201) 
* Zanzana: Handle renderer service authorization requests

* only add context if render service is authorizing

* use group and resource from API definitions

* check prefix instead of full identity

* fix AddRenderContext

* remove unused type
 2024-12-09 11:17:44 +01:00
Alexander Zobnin c8caf787d4 Zanzana: handle service accounts (#97123) 
* add service account to the schema

* sync managed permissions for service accounts

* sync SA basic roles

* sync SA roles

* Fix endless loop in reconciler while read openfga
 2024-11-28 10:41:30 +01:00
Karl Persson be54c69fd4 Zanzana: Remove create relation from generic resources (#97042) 
Remove create relation from generic resources.

We cant have a create relation to a resource because they don't exist yet. So
in oder to check create we either have to have that permissions on a folder or the namespace
 2024-11-27 09:02:29 +01:00
Karl Persson a5e743895b Zanzana: Capabilities api (#96682) 
* Add capabilities api
 2024-11-21 10:51:16 +01:00
Karl Persson 11a4a366c6 Zanzana: Optimize batch check (#96669) 
* Restructure check code so we only check namespace access once for each GroupResource during for batch
 2024-11-19 14:39:46 +01:00
Gabriel MABILLE cc9cdbe82d Authz: Move extension proto up a layer (#96254) 
* Authz: Move extension proto up a layer

* Lint
 2024-11-12 10:19:12 +01:00
Alexander Zobnin b1fb581ab1 Zanzana: Evaluate access with Check request (server-side) (#96213) 
* Zanzana: Evaluate access with Check request (server-side)

* Pass parent folder for checking access

* Review suggestions

* remove fixme comment
 2024-11-11 16:39:21 +01:00
Karl Persson acf119a12c Zanzana: resource sets on folder grants read on all children (#96127) 
* resource sets on folder grants read on all children

* remove comment

* Add type for consistency
 2024-11-08 16:53:51 +01:00
Alexander Zobnin 910ec7e7dc Zanzana: Use separate store for each org (#96015) 
* Move server init into server package

* map store name to id

* refactor model loading

* pass namespace into reconcilers and collectors

* refactor

* Extend authz server with Read and Write methods

* use new read/write in reconciler

* implement server side read and write

* Sync permissions for every org

* handle namespace in check and list

* split read and write

* provide conditions

* Fix client implementation

* fix nil conditions

* remove unused client code

* use lock for store access

* move type translators to common package

* fix folder collector

* fix store creation

* remove unused AuthorizationModelId

* fix server tests

* fix linter
 2024-11-08 14:54:36 +01:00
Karl Persson f0a5b444e3 Zanzana: generic resource only (#96019) 
* Remove collectors

* Remove zanzana search check, we need to rewrite that part to the new schema

* Only use generic resource schema and cleanup code we don't want to keep / need to re-write
 2024-11-08 09:30:41 +01:00
Zoltán BediandJack Baldry 85c696c4ad SQL: Add macro support in select case (#88514) 
* Feat: timeGroup macro handling in VQB

* Add tests

* Add functions to SQL ds

* Fix lint errors

* Add feature toggle

* Add rendering based on object

* Fix lint

* Fix CI failures

* Fix tests

* Address review comments

* Add docs

* Fix JSX runtime warnings

* Remove docs part that mentions suggest more macros

* Update docs/sources/shared/datasources/sql-query-builder-macros.md

Co-authored-by: Jack Baldry <jack.baldry@grafana.com>

* Add smoke test for this feature

* lint

* Add supported macros to influx

* Add setupTests.ts to include in tsconfig.json

* Import jest-dom instead of setupTests.ts

---------

Co-authored-by: Jack Baldry <jack.baldry@grafana.com>
 2024-11-04 17:13:35 +01:00
Karl Persson dfa8f786d2 Zanzana: fix generic schema (#95648) 
* Change schema so that resource checks on a folder walks the tree
 2024-10-31 14:34:48 +01:00
Karl Persson e0163c93c2 Zanzana: reconcile generic schema (#95492) 
* Rename to CheckObject

* Implement authz.AccessClient

* Move folder tree to reconciler and use new schema

* Move shared functionality to common package

* Add reconciler for managed permissions and resource translations

* Add support for folder resources
 2024-10-28 16:32:16 +01:00