opendev/system-config
Code Issues Proposed changes

Merge "grafana: update to 7.4.2"

Browse Source
This commit is contained in:
Zuul 2021-02-19 06:03:21 +00:00 committed by Gerrit Code Review
commit 464bb363e9
2 changed files with 8 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
docker/grafana/Dockerfile
View File

@ -13,7 +13,7 @@
# See the License for the specific language governing permissions and
# limitations under the License.
FROM docker.io/grafana/grafana:7.4.1-ubuntu
FROM docker.io/grafana/grafana:7.4.2-ubuntu
LABEL maintainer="infra-root@openstack.org"

7
playbooks/roles/grafana/templates/grafana.vhost.j2
View File

@ -34,6 +34,13 @@
SSLCertificateKeyFile /etc/letsencrypt-certs/{{ inventory_hostname }}/{{ inventory_hostname }}.key
SSLCertificateChainFile /etc/letsencrypt-certs/{{ inventory_hostname }}/ca.cer
# NOTE(ianw) 2021-02-19
# This was for a security issue fixed in 7.4.2
# where anonymous users could cause a write to disk, fixed
# with
# https://github.com/grafana/grafana/pull/31263/
# We leave it because we don't use the API, but if we need
# it, we can remove this.
RewriteEngine on
RewriteRule "^/api/snapshots(.*?)$" "-" [F]