c93fd3ee9e
Alerting: idempotent decrypt\encrypt operations on extra configs ( #107592 )
...
* add prefix to encrypted string to distinguish between unencrypted and encrypted ones
---------
Co-authored-by: Alexander Akhmetov <me@alx.cx >
2025-07-07 12:17:41 -04:00
d15e1ad8d0
Alerting: Fix route validation in provisioning service ( #107550 )
...
* introduce ExtraConfigsCrypto
* delete getLastConfiguration and move all code into method Get
* update legacy store to encrypt ExtraConfigs same way we do in MultiOrgAlertmanager
* update legacy store init
* delete PersistConfig
* remove unnecessary unmarshalling
* add better error
* add tests for legacy store
* add tests that cover extra config validation
* add integration test for conflicting routes
---------
Signed-off-by: Yuri Tseretyan <yuriy.tseretyan@grafana.com >
2025-07-07 12:16:31 -04:00
37c480def4
K8s: Add support for stored subresources in app runner ( #105481 )
2025-07-07 11:25:23 -04:00
cc069d301e
Secrets: Skip allowlist check when decrypting if the list is empty ( #107693 )
2025-07-07 15:32:39 +02:00
075770070e
Future-proofing query and data source model in Dashboard Schema v2 ( #104194 )
...
---------
Signed-off-by: Igor Suleymanov <igor.suleymanov@grafana.com >
Co-authored-by: alexandra vargas <alexa1866@gmail.com >
Co-authored-by: Haris Rozajac <haris.rozajac12@gmail.com >
Co-authored-by: Dominik Prokop <dominik.prokop@grafana.com >
Co-authored-by: Igor Suleymanov <igor.suleymanov@grafana.com >
Co-authored-by: spinillos <selenepinillos@gmail.com >
2025-07-07 15:31:25 +02:00
7787ff6b2e
unistore: add more kvstore tests ( #107692 )
...
add more kvstore tests
2025-07-07 15:00:40 +02:00
c2b7acae35
chore(datasources): Adding debug logging to datasource provisioning when resource is not found in SqlStore ( #107652 )
2025-07-07 12:23:51 +00:00
9b7e2aa5f3
unistore: add custom kv grpc ( #107464 )
...
add StorageTypeUnifiedKVGrpc
2025-07-07 09:57:08 +00:00
2d8f751e6d
Auth: make skipTokenRotationIfRecent feature flag enabled by default ( #107676 )
2025-07-07 10:24:36 +02:00
5b5d5fe675
Auth: fix role_attribute_path when using ID tokens in Gitlab OAuth ( #107634 )
2025-07-04 23:58:04 +02:00
59542bb95a
Extensions: Undo removal of required enterprise dependencies ( #107641 )
2025-07-04 15:26:47 +00:00
3abe84121f
feat(config): add config ensure_default_org_and_user ( #107619 )
2025-07-04 17:19:53 +02:00
443ea5924c
Eslint: Allow 'unset' in no-border-radius-literal lint rule ( #106619 )
...
* allow border radius of 0
* Prefer unset or initial over 0
* readme
* add an autofix for 0 -> unset
* replace 0 with unset
* fix fixes tests
* fix snapshot
* Fix lint in SecretFormField
* fix unused cx
2025-07-04 15:43:48 +01:00
650abfd2ff
Unified Storage: Remove distributor todo comment ( #107623 )
...
Remove todo
2025-07-04 12:59:22 +00:00
6bb74ff56a
unistore: add key validation ( #107622 )
2025-07-04 12:52:24 +00:00
46c38fdbb7
SecretsManager: Introduce worker and secret async service ( #107614 )
...
SecretsManager: Introduce worker and secret aysnc service
Co-authored-by: PoorlyDefinedBehaviour <brunotj2015@hotmail.com >
Co-authored-by: Matheus Macabu <macabu@users.noreply.github.com >
Co-authored-by: Michael Mandrus <michael.mandrus@grafana.com >
2025-07-04 13:13:48 +01:00
dcb853d309
Unified Search: Remove resource-server-specific methods from distributor ( #107607 )
...
* Remove resource-server-specific methods from distributor
* Remove BlobStoreServer interface implementation from distributor
2025-07-04 12:48:27 +02:00
713f6d1551
IAM: Move resource definitions to apps/iam step 1 ( #107389 )
...
* wip
* Use serviceaccount model from /apps/iam
* revert version update
* Add tembinding, userteam, other improvements
* Change serviceaccounttoken spec
* Revert the change of ServiceAccountToken
* Revert the change of UserTeam
* Clean up
* Remove files that are not needed for now
* Lint
* Update sql query's integration tests
* Fix tests
* update openapi spec
* Move LastSeenAt to the annotations
* Updte openapi_snapshots
* Change lastSeenAt annotation name
2025-07-04 11:07:48 +02:00
c7374b6910
Alerting: Add Synthetic and IRM link cards ( #107538 )
2025-07-04 10:52:43 +02:00
15e1aa8855
SecretsManager: Introduce decrypt store ( #107586 )
...
Co-authored-by: Matheus Macabu <macabu@users.noreply.github.com >
Co-authored-by: Michael Mandrus <michael.mandrus@grafana.com >
Co-authored-by: PoorlyDefinedBehaviour <brunotj2015@hotmail.com >
2025-07-04 09:22:10 +01:00
20f30462ad
DataSource: Support updating configs using UID ( #107486 )
2025-07-03 10:18:19 -07:00
a59ec345c2
SecretsManager: Introduce metrics and logs ( #107582 )
...
Co-authored-by: Michael Mandrus <michael.mandrus@grafana.com >
2025-07-03 17:32:18 +01:00
66d9a33cc9
Datasources: Update grafana-aws-sdk for new sigv4 middleware and aws-sdk-go v1 removal ( #107522 )
...
Datasources: Update grafana-aws-sdk
2025-07-03 17:48:57 +02:00
cfd3b9f582
SecretsManager: outbox use message id ( #107472 )
...
* SecretsManager: outbox use message id
Co-authored-by: PoorlyDefinedBehaviour <brunotj2015@hotmail.com >
* Remove query timestamp
* Add missing query
---------
Co-authored-by: PoorlyDefinedBehaviour <brunotj2015@hotmail.com >
Co-authored-by: Matheus Macabu <macabu@users.noreply.github.com >
Co-authored-by: Matheus Macabu <macabu.matheus@gmail.com >
2025-07-03 15:21:47 +01:00
e76f470b44
NestedFolderPicker: Migrate to app platform API ( #106926 )
...
* Add /children endpoint
* Update folder client
* Add comment
* Add feature toggle
* Add new version of useFoldersQuery
* Error handling
* Format
* Rename feature toggle
* Remove options and move root folder constant
* Fix feature toggle merge
* Add feature toggle again
* Rename useFoldersQuery files
* Update API spec
* Fix test
* Add test
* Better typings
---------
Co-authored-by: Clarity-89 <homes89@ukr.net >
2025-07-03 16:15:23 +02:00
185ce90a4b
Jaeger: Enable jaegerBackendMigration feature toggle by default ( #107526 )
...
* Jaeger: Enable jaegerBackendMigration feature toggle by default
* fix test
* update old-arch test
2025-07-03 14:45:22 +01:00
4f66c4a2a1
iam: Refresh live connection when ID tokens expire ( #107209 )
...
* iam: refresh live connection when ID tokens expire
* add coverage for the handler functions
* reinstate inadvertently broken unit test
2025-07-03 10:16:24 -03:00
8d8b824f73
unistore: skipping badger test failing atm ( #107572 )
...
skipping badger test failing atm
2025-07-03 12:31:07 +00:00
4d8678c7f2
SecretsManager: Add base encryption manager ( #107562 )
...
Co-authored-by: Michael Mandrus <michael.mandrus@grafana.com >
Co-authored-by: Matheus Macabu <macabu@users.noreply.github.com >
2025-07-03 11:29:14 +01:00
b7153d4d20
fix: grpc resource delete error when qos enabled ( #107560 )
2025-07-03 12:02:05 +02:00
041c343a86
Unified storage: Respect GF_DATABASE_URL override ( #105331 )
...
* Database for unified storage resources now reuses DB code that respects URL override.
Access instrument_queries via section getter.
2025-07-03 09:57:40 +00:00
f51db112d4
SecretsManager: Add decrypt service ( #107473 )
...
* SecretsManager: Add decrypt service
Co-authored-by: Dana Axinte <53751979+dana-axinte@users.noreply.github.com >
* Missed space to sync files
2025-07-03 10:41:38 +01:00
a7bfd8e351
Auth: Remove ssoSettingsApi feature toggle ( #107528 )
...
* Remove ssoSettingsApi feature toggle
* Clean up
* lint
* Fix tests
2025-07-03 10:53:33 +02:00
e076c74869
sqltemplate, dbimpl: Remove single-method function types ( #107525 )
...
* Remove dbProviderFunc function.
This removes one extra indirection that made the code bit more difficult to navigate.
* Remove indirection function types implementing single-method interfaces.
This streamlines the code and makes it bit easier to navigate.
* Update pkg/storage/unified/sql/sqltemplate/dialect_mysql.go
Co-authored-by: Mustafa Sencer Özcan <32759850+mustafasencer@users.noreply.github.com >
---------
Co-authored-by: Mustafa Sencer Özcan <32759850+mustafasencer@users.noreply.github.com >
2025-07-03 10:38:12 +02:00
a68f8107df
Unified Storage/Large Object Support: Add test for dashboardv2 support ( #107470 )
...
* Add more unit tests to cover dashboardv2 and cross version unmarshalling
Signed-off-by: Bruno Abrantes <bruno@brunoabrantes.com >
* Change import name of meta v1
* Rename TestLargeDashboardSupport since there are tests for multiple versions
* Simplify TestLargeDashboardSupportV2
* Use v1 in TestLargeDashboardSupportCrossVersion, simplify original dash
* Marshal spec in TestLargeDashboardSupportCrossVersion
* Remove TestLargeDashboardSupportCrossVersion
---------
Signed-off-by: Bruno Abrantes <bruno@brunoabrantes.com >
Co-authored-by: Bruno Abrantes <bruno@brunoabrantes.com >
2025-07-03 07:13:56 +02:00
acabe86153
APIServer: Exclude internal GroupVersionKind from openapi ( #107551 )
2025-07-02 19:32:01 -07:00
b6eacc929a
Auth: Check SCIM dynamic settings when syncing users ( #107487 )
...
* Auth: Check SCIM dynamic settings when syncing users
* remove enterprise package import
* add CODEOWNERS
* lint
* use default namespace & update tests
* add optional dynamic AllowNonProvisionedUsers setting
* update test case with allowNonProvisionedUsers
2025-07-02 15:23:06 -05:00
b483a04aec
Alerting: Send merged configuration to the remote alertmanager ( #107004 )
2025-07-02 21:35:24 +02:00
d57155a19b
CI: Support large build IDs in artifact builds ( #107533 )
...
* CI: Support large build IDs in artifact builds
* Use run_id instead of run_number in prerelease builds
2025-07-02 18:43:59 +00:00
11ea1dfba8
Alerting: Fix notification policy conflicts originating from provenance mismatch ( #107343 )
...
* Alerting: Fix notification policy conflicts originating from provenance mismatch
Sometimes the provenance field on the notification policy route can mismatch with the actual provenance in the provenance store.
This leads to 409s when trying to update the notification policy via the k8s apis.
We avoid this by ignoring the provenance field when calculating the fingerprint.
Co-authored-by: Matt Jacobson <matthew.jacobson@grafana.com >
* fix tests which validate stability
---------
Co-authored-by: Matt Jacobson <matthew.jacobson@grafana.com >
2025-07-02 17:26:27 +00:00
0e41f58db9
Zanzana: Add detailed instructions for running and instrumenting ( #107237 )
...
* Zanzana: Add detailed instructions for running and instrumenting
* Running Zanzana standalone server WIP
* Describe how to run zanzana server
* Fix readme link
* Update cli info
* update how to run postgres
2025-07-02 15:33:08 +02:00
f32d944b23
Secrets: Add initial tracing instrumentation ( #107513 )
2025-07-02 14:43:36 +02:00
b340b3fb7b
Secrets: Add GetType for KeeperSpec and clean-up unused Envelope ( #107511 )
...
Co-authored-by: Michael Mandrus <michael.mandrus@grafana.com >
2025-07-02 14:33:23 +02:00
7614089077
Secrets: Only register dependencies to start up ( #107504 )
2025-07-02 14:02:52 +02:00
d55541735a
unistore: use different ns for each test ( #107509 )
...
use different ns for each test
2025-07-02 13:50:30 +02:00
696657bdd1
unistore: add kv based storage backend ( #107305 )
...
* Add datastore
* too many slashes
* lint
* add metadata store
* simplify meta
* Add eventstore
* golint
* lint
* Add datastore
* too many slashes
* lint
* pr comments
* extract ParseKey
* readcloser
* remove get prefix
* use dedicated keys
* parsekey
* sameresource
* unrelated
* name
* renmae tests
* add key validation
* fix tests
* refactor a bit
* lint
* allow empty ns
* get keys instead of list
* rename the functions
* refactor yield candidate
* update test
* unistore: add LastResourceVersion to datastore
* lint
* use map string
* missing err check
* fix
* Add storage backend
* remove hasmore
* fix tests
* small refactor
* pre-alloc
* extract the folder
* lint
* refactor
* handle context canceled in ListHistory to pass the tests
* fix the resource test
* unistore: provide generic tests for the kv interface (#107443 )
unistore: move the kv tests to the testing package
* Update pkg/storage/unified/resource/storage_backend_test.go
Co-authored-by: Peter Štibraný <pstibrany@gmail.com >
* address comments
* comments
* comments
* comments
* normalise the names and add helper method
* events comments
* rename function
---------
Co-authored-by: Peter Štibraný <pstibrany@gmail.com >
2025-07-02 10:57:37 +00:00
5cd3ad76ee
Loki: Remove lokiQueryHints feature toggle ( #106620 )
...
* Loki: Remove lokiQueryHints feature toggle
* Remove unused imports
* Fix tests
2025-07-02 12:08:22 +02:00
3674d952a6
fix: use database section for resource server db engine configuration ( #107495 )
2025-07-02 09:00:51 +00:00
01c844b69f
SecretsManager: Revert adding data key tracer ( #107499 )
...
Remove data key tracer
2025-07-02 09:09:12 +01:00
fe7ca61a51
unified-storage: Missing rename of index_server to search_server ( #107469 )
...
* rename
2025-07-01 14:35:46 -04:00
Yuri Tseretyan
Todd Treece
Matheus Macabu
Ivan Ortega Alba
Georges Chaudy
Andres Torres
xavi
Jean-Philippe Quéméner
Josh Hunt
Arati R.
Dana Axinte
Misi
Hugo Kiyodi Oshiro
Ryan McKinley
Nathan Vērzemnieks
Andrej Ocenas
Gareth
Victor Cinaglia
Mustafa Sencer Özcan
Peter Štibraný
colin-stuart
Alexander Akhmetov
Kevin Minehart
Moustafa Baiou
Alexander Zobnin
Ivana Huckova
Will Assis