Commit Graph
8221 Commits
Author SHA1 Message Date
Joan López de la Franca Beltran 39e5d09f9f Rendering: Add support for renderer token (#54425) (#54439)
(cherry picked from commit a4f75cc0438712c90b02d24740416f8615e3a0cb)
(cherry picked from commit 6ec06f66b9)
2022-08-30 14:05:18 +02:00
Grot (@grafanabot)andKarl Persson 73c4bf233f RBAC: Display indicator if a permission is inherited (#54080) (#54381)
* RBAC: Add IsInherited property

* PermissionList: Display inherited indicator

(cherry picked from commit cc78486535)

Co-authored-by: Karl Persson <kalle.persson@grafana.com>
2022-08-29 05:48:00 -04:00
Santiago 438c95892f alerting: redact alertmanagers in scheduler logs (#54183) 2022-08-24 16:52:31 -04:00
Yuriy Tseretyan 45cff4f283 [v9.0.x] Alerting: AlertingProxy to elevate permissions for request forwarded to data proxy when RBAC enabled (#53680)
* fix constants to the ones prior to the refactoring
2022-08-12 13:24:59 -04:00
Grot (@grafanabot)andEmil Tullstedt 718166482c Chore: Panic! in the Logs (#53664) (#53668)
(cherry picked from commit cc777e175e)

Co-authored-by: Emil Tullstedt <emil.tullstedt@grafana.com>
2022-08-12 10:05:31 -04:00
Grot (@grafanabot)andkay delaney 58d5ab6253 LibraryPanels: Rewrite invalid connection deletion query to be MySQL-friendly (#53460) (#53468)
Closes #53456

(cherry picked from commit f4a5e034b3)

Co-authored-by: kay delaney <45561153+kaydelaney@users.noreply.github.com>
2022-08-09 15:37:03 +01:00
Sofia Papagiannaki 1be924fa23 [v9.0.x] API: Fix snapshot responses (#53312)
* API: Fix snapshot responses (#52998)

* API: Fix response status when snapshots are not found

* API: Fix response status when snapshot key is empty

* Apply suggestions from code review

(cherry picked from commit 5fec6cc4f5)
2022-08-04 19:24:12 +03:00
Yuriy Tseretyan a010d12684 [9.0.x] Alerting: Remove user input from error response (#53158)
* omit recipient input from the error
Co-authored-by: Alexander Weaver <weaver.alex.d@gmail.com>
2022-08-02 12:31:42 -04:00
Grot (@grafanabot)andIsabella Siu 0446c57ec4 CloudWatch: add CloudWatchSynthetics namespace (#52956) (#53048)
(cherry picked from commit 52b57fdb1c)

Co-authored-by: Isabella Siu <Isabella.siu@grafana.com>
2022-08-01 11:40:56 -04:00
Grot (@grafanabot)andAndres Martinez Gotor 3dbcd94d43 CloudMonitoring: Remove link setting for SLO queries (#53031) (#53036)
(cherry picked from commit 314eb5223f)

Co-authored-by: Andres Martinez Gotor <andres.martinez@grafana.com>
2022-08-01 09:11:56 -04:00
Grot (@grafanabot)andSofia Papagiannaki 457c110b26 API: Do not expose user input in datasource error responses (#52992) (#52996)
(cherry picked from commit 87004cc22d)

Co-authored-by: Sofia Papagiannaki <1632407+papagian@users.noreply.github.com>
2022-07-29 16:18:53 +03:00
Ieva b0055b3e61 fix tests (#52984) 2022-07-29 06:57:55 -04:00
Ieva c71dfb49da allow org admins to invite new users to Grafana (#52904) 2022-07-27 21:11:17 +02:00
Grot (@grafanabot)andIeva b9c1a3e7f6 [v9.0.x] Access control: role checks before updates (#52900)
* Access control: role checks before updates (#51449)

* add role checks

* linting

(cherry picked from commit 0c0cf36ab8)

* fix tests

Co-authored-by: Ieva <ieva.vasiljeva@grafana.com>
2022-07-27 13:17:25 -04:00
Grot (@grafanabot)andIsabella Siu 5f947c2932 CloudWatch: returnData should default to true (#52759) (#52874)
(cherry picked from commit 542b4f2431)

Co-authored-by: Isabella Siu <Isabella.siu@grafana.com>
2022-07-27 13:09:24 -04:00
Grot (@grafanabot)andWill Browne 649e3aaf2e Plugins: Add validation for plugin manifest (#52787) (#52864)
* add validation for plugin manifest

* no more semver checking

* undo go.mod changes

* undo go.mod changes

* only validate v2 fields where necessary

* remove manifest version field check

(cherry picked from commit 6d066a7aa8)

Co-authored-by: Will Browne <wbrowne@users.noreply.github.com>
2022-07-27 08:43:30 -04:00
Grot (@grafanabot)andCarl Bergquist 7e1df2ac61 Instrumentation: Collect database connection stats (#52797) (#52866)
Signed-off-by: bergquist <carl.bergquist@gmail.com>
(cherry picked from commit 7825ad6aa3)

Co-authored-by: Carl Bergquist <carl.bergquist@gmail.com>
2022-07-27 08:02:17 -04:00
Will Browne 61be62e42b resolve conflicts (#52642) 2022-07-25 11:45:11 +02:00
Eric Leijonmarck 234f29f42b [v9.0.x] Auth: Add prometheus metrics for case insensitive ids (#52634)
* merge backport

* remove sa background service
2022-07-22 12:06:02 +01:00
Grot (@grafanabot)andGabriel MABILLE cc7c8d4cef Fix anonymous access (#52615) (#52636)
(cherry picked from commit 8d938175f5)

Co-authored-by: Gabriel MABILLE <gamab@users.noreply.github.com>
2022-07-22 11:09:05 +02:00
Grot (@grafanabot)andgotjosh 6eb552a595 Alerting: Allow the webhook notifier to support a custom Authorization header (#52515) (#52587)
* Allow the webhook notifier to support a custom Authorization header

Instead of doing something clever of re-using the existing username/password fields of Basic Authentication - I opted for two diffent fields to match the upstream Alertmanager configuration (that in turn is based of the HTTP Basic authentication).

 It'll fail if you have values for both HTTP Basic Authentication and Authorization.

(cherry picked from commit b026f2bc5d)

Co-authored-by: gotjosh <josue.abreu@gmail.com>
2022-07-21 12:07:40 +01:00
Grot (@grafanabot)andJean-Philippe Quéméner 02a7557de4 Alerting: Cleanup the alert_configuration table on write (#51497) (#52539)
(cherry picked from commit 320262c3db)

Co-authored-by: Jean-Philippe Quéméner <JohnnyQQQQ@users.noreply.github.com>
2022-07-21 12:29:37 +02:00
Vardan TorosyanandIeva 89ea9f0e36 Access control: Allow organisation admins to add existing users to org (#51668) (#52553)
* Access control: Allow organisation admins to add existing users to org (#51668)

* check users with user add permission to access the invite endpoint

* undo unneeded changes

* tests and cleanup

* linting

* linting

* betterer

* betterer again

* fix prettier issue

Co-authored-by: jguer <joao.guerreiro@grafana.com>
(cherry picked from commit 0c33b9f211)

* Fix org invites

* Fix tests

* Revert betterer

Co-authored-by: Ieva <ieva.vasiljeva@grafana.com>
2022-07-21 11:44:20 +02:00
Eric Leijonmarck 1f44da3d83 Fix: add alias to subqueries for mysql database (#52576)
(cherry picked from commit 8073502701b172f23a4dfa09a7195217cb4007aa)
2022-07-21 09:03:10 +01:00
Alexander WeaverandJean-Philippe Quéméner 795e2d0a48 Alerting: use static channel configuration to determinate secure fields (#52527) (#52570)
* Alerting: use static channel configuration to determinate secure fields

* move to channels package

* introduce channel_config package to fix cyclic import

* add missing changes

* compare type to type

(cherry picked from commit ba9c18d9c3)

Co-authored-by: Jean-Philippe Quéméner <JohnnyQQQQ@users.noreply.github.com>
2022-07-20 18:34:58 -04:00
Guilherme CauladaandMichael Mandrus d1f1041aba Datasource: Propagate datasource secret decryption errors to the frontend (#52068) (#52557)
* update decrypt secrets function signature and add secrets error handling

* remove a couple instances of unnecessary logging since errors are properly handled now

* add unit test

* fix linting issues

(cherry picked from commit 9aa6ce2a50)

Co-authored-by: Michael Mandrus <41969079+mmandrus@users.noreply.github.com>
2022-07-20 18:03:44 -03:00
Grot (@grafanabot)andGeorge Robinson 21d74574c8 [v9.0.x] Alerting: Fix Slack push notifications (#52476)
This commit fixes push notifications for Slack which used to show "This content cannot be displayed". The text field is shown in both the message and the push notification.

(cherry picked from commit 094dfd0d4d)

Co-authored-by: George Robinson <george.robinson@grafana.com>
2022-07-19 22:17:46 -04:00
Grot (@grafanabot)andIsabella Siu 49db9712ab CloudWatch: fix log explorer context (#52118) (#52478)
(cherry picked from commit 146c90d59e)

Co-authored-by: Isabella Siu <Isabella.siu@grafana.com>
2022-07-19 14:17:11 -04:00
Ieva 24f9baef16 resolve conflicts (#52464) 2022-07-19 17:08:31 +01:00
Ieva 711fc26f7b merge (#52410) 2022-07-19 15:36:42 +01:00
Joey Tawadrous 377acb4cdd [v9.0.x] Traces: Remove serviceMap feature flag (#52433) 2022-07-19 10:25:12 +01:00
Grot (@grafanabot)andJoe Blubaugh b026345459 SQLStore: Support Upserting multiple rows. (#52228) (#52438)
This will be used to reduce write load when the alerting system writes a
large number of events.

(cherry picked from commit a0f96ed4e1)

Co-authored-by: Joe Blubaugh <joe.blubaugh@grafana.com>
2022-07-19 17:05:27 +08:00
Eric LeijonmarckandEmil Tullstedt e4c221afc4 [v9.0.x] CSRF: Fix additional headers option (#52347)
* merged and backport to 9.0.x

* merged http_server

* fix for provider being interface

* fix for provider maybe

* wire inject

* wire inject

* wire inject

Co-authored-by: Emil Tullstedt <emil.tullstedt@grafana.com>
2022-07-19 07:50:31 +01:00
Grot (@grafanabot)andGábor Farkas 198f690667 loki: better handle an empty-response (#52397) (#52431)
(cherry picked from commit 46eec85b1a)

Co-authored-by: Gábor Farkas <gabor.farkas@gmail.com>
2022-07-19 02:30:37 -04:00
George Robinson 47c398b251 Alerting: Move debug log line to where alert rules are updated (#52318) (#52411)
(cherry picked from commit e7feff6d99)
2022-07-18 18:30:44 +01:00
Grot (@grafanabot)andGeorge Robinson 7e89ef052a Datasources: Allow configuration of the TTL (#52161) (#52317)
(cherry picked from commit 91fd0223a4)

Co-authored-by: George Robinson <george.robinson@grafana.com>
2022-07-15 11:24:17 +01:00
Grot (@grafanabot)andSofia Papagiannaki bb9d55cbd9 Log: Fix text logging for unsupported types (#51306) (#52311)
* Fix text log for unsupported types

* Apply suggestions from code review

Co-authored-by: Emil Tullstedt <emil.tullstedt@grafana.com>
(cherry picked from commit 84e2e1ec8e)

Co-authored-by: Sofia Papagiannaki <1632407+papagian@users.noreply.github.com>
2022-07-15 04:46:12 -04:00
Grot (@grafanabot)andJoan López de la Franca Beltran fdc4c47f1c Encryption: Re-order error check (#52251) (#52293)
(cherry picked from commit 973b3112d7)

Co-authored-by: Joan López de la Franca Beltran <5459617+joanlopez@users.noreply.github.com>
2022-07-14 18:11:55 -04:00
4665dc253f Security: Fixes for CVE-2022-31107 and CVE-2022-31097 (#52279)
* WIP: Fix XSS in runbook URL (#378)

(cherry picked from commit f4a8d96a4e1259ea25d9cc702a652f1b819db236)
(cherry picked from commit 337c08507b2b1c78ea470192d34cf611fae4b5da)
(cherry picked from commit 54b36a07406ed4e26ff8e161e50eda5401f504da)

* Update grabpl version

(cherry picked from commit b253e87d730f7b8aabdd0b328c5e7a82547c43b3)
(cherry picked from commit 080d3e46f3fcd61555795b9fe8fd6ee2492b422a)

* Fix: Choose Lookup params per auth module

Co-authored-by: Karl Persson <kalle.persson@grafana.com>

Fix: Prefer pointer to struct in lookup

Co-authored-by: Karl Persson <kalle.persson@grafana.com>

Fix: user email for ldap

Co-authored-by: Karl Persson <kalle.persson@grafana.com>

Fix: Use only login for lookup in LDAP

Co-authored-by: Karl Persson <kalle.persson@grafana.com>

Fix: use user email for ldap

Co-authored-by: Karl Persson <kalle.persson@grafana.com>

fix remaining test

fix nit picks

(cherry picked from commit 1eca4aeed878853743cebcf9790b05dd350c4f83)
(cherry picked from commit 0777d100e9263d08f51dbac71aee0766c8a85a92)

* remove better (broke the pipeline)

Co-authored-by: George Robinson <george.robinson@grafana.com>
Co-authored-by: dsotirakis <sotirakis.dim@gmail.com>
Co-authored-by: jguer <joao.guerreiro@grafana.com>
2022-07-14 14:56:53 -05:00
Matthew Jacobson 1d6190e4ff Alerting: Fix Teams notifier not failing on 200 response with error (#52254) (#52260)
Team's webhook API does not always use the status code to communicate errors.
There are cases where it returns 200 and an error message in the body.
For example, 429 - Too Many Requests or when the message is too large.
Instead, what we should be looking for is a response body = "1".

https://docs.microsoft.com/en-us/microsoftteams/platform/webhooks-and-connectors/how-to/connectors-using?tabs=cURL#send-messages-using-curl-and-powershell
(cherry picked from commit efa0d90093)
2022-07-14 13:38:21 -04:00
Grot (@grafanabot)andEmil Tullstedt d8eada0132 Preferences: Get home dashboard from teams (#52225) (#52229)
(cherry picked from commit c8b5307c61)

Co-authored-by: Emil Tullstedt <emil.tullstedt@grafana.com>
2022-07-14 17:09:36 +02:00
Grot (@grafanabot)andAdam Simpson 9be6d854d9 [v9.0.x] AzureMonitor: Update UI to experimental package (#52235)
* AzureMonitor: Update UI to experimental package (#52123)

* feat: make azure experimental the default

* feat: combine metrics query editor rows

fix: linter errors

* chore: remove test loop for DimensionFields test

(cherry picked from commit 5d199a40b7)

* chore: update .betterer

Co-authored-by: Adam Simpson <adam@adamsimpson.net>
2022-07-14 14:01:33 +00:00
kay delaney 262720a702 Export: Fix export/import of dash with library panels (#49319) (#51760)
(cherry picked from commit 8053f770c1)
2022-07-14 11:17:12 +01:00
Grot (@grafanabot)andMichał Zielonka f00f6e3375 Alerting: fix validation of alertmanager template. (#51538) (#52210)
without setting function map from alertmanager we receive error:
method=PUT path=/api/v1/provisioning/templates/slack.message status=400
level=error msg="invalid object specification: invalid template: template: :1: function \"toUpper\" not defined"

So for validation we should use the same settings as alertmanager do
for templates internally.

(cherry picked from commit b54da68765)

Co-authored-by: Michał Zielonka <michal.zielonka.8001@gmail.com>
2022-07-14 06:11:14 -04:00
Grot (@grafanabot)andGeorge Robinson 314b932ab8 Alerting: Fix bug where state did not change between Alerting and Error (#52204) (#52209)
This commit fixes a bug where the state did not change from Alerting to Error if the evaluation result returned an error, or from Error to Alerting if evaluations stopped returning errors.

(cherry picked from commit 34d45977ca)

Co-authored-by: George Robinson <george.robinson@grafana.com>
2022-07-14 06:10:39 -04:00
Alexander WeaverandJean-Philippe Quémémer f4e7d0d261 Alerting: Provisioning API respects global rule quota (#52190)
* Alerting: Provisioning API respects global rule quota (#52180)

* Inject interface for quota service and create mock

* Check quota and return 403 if limit exceeded

* Implement tests for quota being exceeded

(cherry picked from commit 2d7389c34d)

* backport error check

Co-authored-by: Jean-Philippe Quémémer <jeanphilippe.quemener@grafana.com>
2022-07-14 10:59:04 +02:00
Grot (@grafanabot)andJoe Blubaugh 9457f67210 Alerting: Disable /api/admin/pause-all-alerts with Unified Alerting (#51895) (#52077)
/api/admin/pause-all-alerts only takes effect for legacy alerts. This
change returns a 403 if it's called when legacy alerting is disabled.

Fixes #51729

(cherry picked from commit 0cbc14961a)

Co-authored-by: Joe Blubaugh <joe.blubaugh@grafana.com>
2022-07-14 16:58:37 +08:00
Grot (@grafanabot)andSofia Papagiannaki 4652401964 SQLstore: Fix fetching an inexistent playlist response (#51962) (#52139)
* SQLstore: Fix fetching and deleting an inexistent playlist

xorm's session.Get() does not return an error if the raw does not exist.
It returns a boolean instead.
The playlist `sqlstore.GetPlaylist()` used to check only the error and in case
of inexistent UID didn't return an error.

(cherry picked from commit 4ff0f006dd)

Co-authored-by: Sofia Papagiannaki <1632407+papagian@users.noreply.github.com>
2022-07-13 06:13:38 -04:00
Grot (@grafanabot)andSofia Papagiannaki f3f66f6325 API: Do not validate/save legacy alerts when saving a dashboard if legacy alerting is disabled (#51883) (#52137)
* API: Do not validate/save legacy alerts if legacy alerting is disabled

Co-authored-by: Ida Furjesova <ida.furjesova@grafana.com>
(cherry picked from commit b3992df988)

Co-authored-by: Sofia Papagiannaki <1632407+papagian@users.noreply.github.com>
2022-07-13 05:52:32 -04:00
Grot (@grafanabot)andAlexander Weaver 82f7490f7e Alerting: Allow filtering of contact points by name (#51933) (#52070)
* Define query param and regenerate

* Add query struct for contact points

* Filter contact points by name in query

* Document that name filter is optional

(cherry picked from commit 0e066dd5f8)

Co-authored-by: Alexander Weaver <weaver.alex.d@gmail.com>
2022-07-11 18:26:35 -04:00