Related to https://github.com/grafana/oncall-private/issues/2826 Continuing work started in https://github.com/grafana/oncall/pull/5211, this adds support for Grafana service accounts tokens for API authentication (except alert group actions which will still require a user behind). Next steps would be updating the go client and the terraform provider to allow service account token auth for OnCall resources. Following proposal 1.1 from [doc](https://docs.google.com/document/d/1I3nFbsUEkiNPphBXT-kWefIeramTY71qqZ1OA06Kmls/edit?usp=sharing).
29 lines
1.1 KiB
Python
29 lines
1.1 KiB
Python
# Generated by Django 4.2.15 on 2024-11-12 13:13
|
|
|
|
from django.db import migrations, models
|
|
import django.db.models.deletion
|
|
|
|
|
|
class Migration(migrations.Migration):
|
|
|
|
dependencies = [
|
|
('user_management', '0027_serviceaccount'),
|
|
('auth_token', '0006_googleoauth2token'),
|
|
]
|
|
|
|
operations = [
|
|
migrations.CreateModel(
|
|
name='ServiceAccountToken',
|
|
fields=[
|
|
('id', models.BigAutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')),
|
|
('token_key', models.CharField(db_index=True, max_length=8)),
|
|
('digest', models.CharField(max_length=128)),
|
|
('created_at', models.DateTimeField(auto_now_add=True)),
|
|
('revoked_at', models.DateTimeField(null=True)),
|
|
('service_account', models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, related_name='tokens', to='user_management.serviceaccount')),
|
|
],
|
|
options={
|
|
'unique_together': {('token_key', 'service_account', 'digest')},
|
|
},
|
|
),
|
|
]
|