dfae5e5b4d
Secrets: Add namespace matches checks to authorizer and secure value client ( #109651 )
...
* Decrypt: Add namespace matches to authorizer
* SecureValueClient: Add namespace matches when auth checking
2025-08-14 11:50:56 +02:00
3106abf1a6
SecretsManager: clear unused metrics and standarize labels( #109515 )
2025-08-13 14:01:50 +01:00
7b4fcd486a
Revert "fix: unified resource server list queries order column" ( #109529 )
2025-08-12 17:29:50 +02:00
298b492f1a
search queue index mutex ( #109474 )
...
Use custom mutex for index, and don't hold it during BulkIndex.
2025-08-11 16:20:47 +00:00
e0404f924c
K8s/SecureValues: Wire InlineSecureValueSupport to apistore ( #109449 )
...
* inline wire
* extra fields
* add variable
* wire
2025-08-11 15:22:56 +03:00
6851d8ae0c
Storage: Skip slow test TestIntegrationBenchmarkResourceServer ( #109424 )
2025-08-08 20:51:12 +00:00
c07c0f27d2
Unified Storage: Makes writing and reading index thread-safe in the queue processor ( #109420 )
...
makes writing and reading index thread-safe
2025-08-08 12:53:01 -06:00
9b0dc4614c
Cleanup old indexes in the same goroutine as build of the index. ( #109382 )
...
* Cleanup old indexes in the same goroutine as build of the index.
* Add test.
2025-08-08 14:59:59 +02:00
a5abc6727f
Unistore/dualwriter: delegate SetDefaultPermissions to Unified on Mode3 ( #109308 )
...
* Unistore/dualwriter: delegate SetDefaultPermissions to Unified on Mode3
Signed-off-by: Maicon Costa <maiconscosta@gmail.com >
---------
Signed-off-by: Maicon Costa <maiconscosta@gmail.com >
2025-08-07 18:41:41 -03:00
e667dfed29
Unified Storage: Update index when indexqueueprocessor exists ( #109351 )
...
* Update readme
* When queue processor already exists, update the index on it in case it has been closed.
* Adds regression test.
2025-08-07 11:38:24 -06:00
ace670c6d0
Secrets: Support variadic args in decrypt service ( #109280 )
2025-08-07 09:54:24 +00:00
68059344f8
Unified storage: Remove unifiedStorageSearchPermissionFiltering feature flag ( #109216 )
...
* Unified storage: Remove unifiedStorageSearchPermissionFiltering ff
* unit test
2025-08-06 02:04:32 -06:00
f3b8a891af
chore: use native histogram for search shadow traffic match percentage ( #109189 )
...
Signed-off-by: Bruno Abrantes <bruno@brunoabrantes.com >
2025-08-06 08:56:59 +02:00
cb921dc47a
feat: compare legacy and unified search results via histogram ( #109022 )
...
* feat: compare legacy and unified search results via histogram
Signed-off-by: Bruno Abrantes <bruno@brunoabrantes.com >
* fix: handle cases where request type is not set
Signed-off-by: Bruno Abrantes <bruno@brunoabrantes.com >
* fix: use struct instead of bool because it's more memory efficient
Signed-off-by: Bruno Abrantes <bruno@brunoabrantes.com >
* fix: calculate recall percentage rather than union between legacy and unified
Signed-off-by: Bruno Abrantes <bruno@brunoabrantes.com >
---------
Signed-off-by: Bruno Abrantes <bruno@brunoabrantes.com >
2025-08-05 11:17:32 +02:00
81f544e186
Secrets: Add service name as explicit parameter for Decrypt ( #109054 )
...
* Secrets: Add service name as explicit parameter for Decrypt
* Apply suggestions from code review
Co-authored-by: Stephanie Hingtgen <stephanie.hingtgen@grafana.com >
---------
Co-authored-by: Stephanie Hingtgen <stephanie.hingtgen@grafana.com >
2025-08-04 08:51:15 +02:00
172a69da75
Feature toggle: Cleanup old ones ( #109072 )
2025-08-01 19:29:42 +00:00
7374df7945
Secrets: Add inline secure value create method ( #108987 )
2025-08-01 13:57:51 +02:00
e022b6593b
SecretsManager: fix log ( #108970 )
2025-07-31 11:51:04 +00:00
372f115db9
Finish building index even if original context is canceled. ( #108969 )
2025-07-31 13:45:55 +02:00
6b1143565a
Chore: Make cgo optional (for sqlite) ( #108756 )
...
* make cgo optional for sqlite
* update go.mod; check error code differently
* reduce api surface even more
* move test errors into sqlite package
* add a comment
2025-07-31 09:25:19 +00:00
80d7892d6a
Secrets: Save owner reference fields in secure value db table ( #108905 )
...
* Secrets: Save owner reference fields in secure value db table
* Save api group and version separately
2025-07-31 10:42:19 +02:00
91e5e8019d
chore: add documentation on unified search ( #108847 )
...
* chore: add documentation on unified search
Signed-off-by: Bruno Abrantes <bruno@brunoabrantes.com >
* fix: add additional needed feature flags for unified search
Signed-off-by: Bruno Abrantes <bruno@brunoabrantes.com >
* fix: add docs about index_min_count and index_max_count
Signed-off-by: Bruno Abrantes <bruno@brunoabrantes.com >
* fix: add documentation about sortable fields and the discrepancy with search/sortable
Signed-off-by: Bruno Abrantes <bruno@brunoabrantes.com >
* fix: kubernetesClientDashboardsFolders feature flag is no more, remove it from the docs
Signed-off-by: Bruno Abrantes <bruno@brunoabrantes.com >
* fix: simplify request flow diagrams
Signed-off-by: Bruno Abrantes <bruno@brunoabrantes.com >
---------
Signed-off-by: Bruno Abrantes <bruno@brunoabrantes.com >
2025-07-31 07:18:29 +00:00
6bf542889a
SecretsManager: Refactor and clean metrics ( #108908 )
2025-07-30 20:00:30 +01:00
c28b2215e0
Improve indexing observability ( #108901 )
...
* Add details to tracing spans when creating index.
* Log reason for building index.
* Log reason for building index.
* Remove initialization of labels to avoid unnecessary metrics.
* Track succcessful, failed and skiped index builds. Track index build time for individual index, not all indexes.
* Revert removal of labels initialization.
2025-07-30 16:34:15 +02:00
1f025fe1a3
K8s: Remove kubernetesClientDashboardsFolders feature flag ( #108626 )
2025-07-29 16:52:57 -05:00
41319f90bb
search: Handle index build errors gracefully ( #108862 )
...
* Close new index if we fail to build it.
* Respect context cancellation in getOrCreateIndex.
2025-07-29 17:40:16 +02:00
ef9f9c2d8e
Secrets service: Allow decrypt through gRPC connection ( #108365 )
2025-07-29 07:51:37 -05:00
d9daf2e424
search: Track number of open indexes per storage type. ( #108842 )
...
* Track number of open indexes per storage type.
* Fix tests after changing description.
2025-07-29 12:46:34 +02:00
38cdcb5efd
Unistore: Fix federated stats ( #108738 )
2025-07-29 10:42:20 +02:00
aa7ae5fc65
unified-storage: add tracing to distributor methods ( #108791 )
...
* add tracing to distributor methods
2025-07-28 12:35:20 -04:00
3a54c3abae
chore: adds documentation around the dual writer ( #108687 )
...
* chore: adds documentation around the dual writer
Signed-off-by: Bruno Abrantes <bruno@brunoabrantes.com >
* fix: innacuracies in error returned, disambiguate (validation) and move table upwards for more clarity
Signed-off-by: Bruno Abrantes <bruno@brunoabrantes.com >
---------
Signed-off-by: Bruno Abrantes <bruno@brunoabrantes.com >
2025-07-28 15:50:26 +02:00
227799a9f8
Secrets: Add missing indices for secure value (list) and data key (list+read) ( #108763 )
2025-07-28 14:25:06 +02:00
a95fb3a37c
Chore: Omit integration tests if short test flag is passed ( #108777 )
...
* omit integration tests if short test flag is passed
* Update pkg/services/ngalert/models/receivers_test.go
Co-authored-by: Matheus Macabu <macabu@users.noreply.github.com >
* Update pkg/tests/api/alerting/api_ruler_test.go
Co-authored-by: Matheus Macabu <macabu@users.noreply.github.com >
* Update pkg/tests/api/alerting/api_ruler_test.go
Co-authored-by: Matheus Macabu <macabu@users.noreply.github.com >
* Update pkg/tests/api/alerting/api_ruler_test.go
Co-authored-by: Matheus Macabu <macabu@users.noreply.github.com >
* Update pkg/tests/api/alerting/api_ruler_test.go
Co-authored-by: Matheus Macabu <macabu@users.noreply.github.com >
* Update pkg/tests/api/alerting/api_ruler_test.go
Co-authored-by: Matheus Macabu <macabu@users.noreply.github.com >
* Update pkg/services/ngalert/models/receivers_test.go
Co-authored-by: Matheus Macabu <macabu@users.noreply.github.com >
* Update pkg/cmd/grafana-cli/commands/datamigrations/to_unified_storage_test.go
Co-authored-by: Matheus Macabu <macabu@users.noreply.github.com >
* Update pkg/services/ngalert/models/receivers_test.go
Co-authored-by: Matheus Macabu <macabu@users.noreply.github.com >
* fix the rest
* false positive
---------
Co-authored-by: Matheus Macabu <macabu@users.noreply.github.com >
2025-07-28 13:38:54 +02:00
2ea77a7c05
SecretsManager: Add ability to list all encrypted values ( #108512 )
...
* list all encrypted values and count
* separate interfaces
* add time filter to global queries
* fix lint
2025-07-28 10:50:24 +01:00
b1b9cc43a8
SecretsManager: Adding ability to disable all DEKs ( #108444 )
...
* Adding dek deactivation and rename list dek
* disable data keys from manager
* separate interface and don't use in encryption manager
2025-07-25 17:11:17 +01:00
69743ed1a4
SecretsManager: remove unused metric ( #108694 )
2025-07-25 14:04:43 +00:00
f67713726b
add debug logs to search server distributor ( #108679 )
2025-07-25 12:36:35 +00:00
183cd0843e
keep instance in the ring on shutdown ( #108609 )
2025-07-24 15:39:12 -04:00
16aee8047c
Unified Search: Randomise instance selected by distributor ( #108619 )
...
* Randomise instance selected by distributor
* add namespace to distributor logging
---------
Co-authored-by: Will Assis <william@williamassis.com >
2025-07-24 19:38:35 +00:00
981fdb29d4
update storage-api to only build index if it owns the namespace ( #108418 )
...
* update storage-api to only build index if it owns the namespace
---------
Co-authored-by: Mustafa Sencer Özcan <mustafasencer.ozcan@grafana.com >
2025-07-23 15:59:24 -04:00
0e7b041b27
Secrets: Move decrypt types to contracts and export public at root pkg ( #108376 )
...
* Secrets: Move decrypt types to contracts and export public at root pkg
* Provisioning: Replace decrypt pkg imports
* Merge wire changes
2025-07-23 12:14:28 +02:00
34f1be796d
unified-storage: expose ring replication factor config ( #106345 )
...
* config ring replication factor
* change default
* rename
* fix test
* fix
2025-07-22 09:32:22 +02:00
12a7e03e2f
Secrets: encryptionStoreImpl produces metrics ( #108390 )
2025-07-21 11:00:59 -03:00
6c84461b7a
fix: Always return searchWrapper to enable shadow traffic ( #108373 )
...
Signed-off-by: Bruno Abrantes <bruno@brunoabrantes.com >
2025-07-21 13:53:44 +02:00
4b440cf45d
Remove timeout info from logs when shadow request to search succeeds ( #108324 )
...
Signed-off-by: Maicon Costa <maiconscosta@gmail.com >
2025-07-18 14:03:42 +00:00
2dba473015
Feature/unified storage search dual reader ( #108291 )
...
* Add UnifiedStorageSearchDualReaderEnabled feature flag
Signed-off-by: Maicon Costa <maiconscosta@gmail.com >
* Refactor UniSearch Dual Reader
Signed-off-by: Maicon Costa <maiconscosta@gmail.com >
* Run make gen-feature-toggles
Signed-off-by: Maicon Costa <maiconscosta@gmail.com >
* fix: unit tests search_client
Signed-off-by: Bruno Abrantes <bruno@brunoabrantes.com >
* feat: cancels shadow search requests after 500ms
Signed-off-by: Bruno Abrantes <bruno@brunoabrantes.com >
---------
Signed-off-by: Maicon Costa <maiconscosta@gmail.com >
Signed-off-by: Bruno Abrantes <bruno@brunoabrantes.com >
Co-authored-by: Will Assis <william@williamassis.com >
Co-authored-by: Bruno Abrantes <bruno@brunoabrantes.com >
2025-07-18 14:43:56 +02:00
01692bc876
Secrets: remove unused SecureValueMetadataStorage.ReadForDecrypt method ( #108181 )
...
* Secrets: remove unused SecureValueMetadataStorage.ReadForDecrypt method
* remove unused struct: secureValueForDecrypt
2025-07-16 11:52:26 -03:00
2c4bbf8b1d
Secrets: Reduce amount of feature toggle checks to only app entrypoint ( #108110 )
...
* Secrets: Reduce amount of feature toggle checks to only app entrypoint
* Wire: Fix merge conflict
* Wire: Fix merge conflict
2025-07-16 10:56:59 +02:00
3cda233468
Secrets: Remove temporary allowlist ( #108118 )
2025-07-16 09:39:33 +02:00
4a779c4ccb
fix: unified resource server list queries order column ( #108094 )
2025-07-16 08:09:31 +02:00
Matheus Macabu
lean.dev
Mustafa Sencer Özcan
Peter Štibraný
Ryan McKinley
William Wernert
owensmallwood
maicon
Stephanie Hingtgen
Bruno Abrantes
Serge Zaitsev
Will Assis
Dana Axinte
Arati R.
Bruno