数据源 LBAC 规则 API
数据源 LBAC 规则仅在 Grafana Cloud 中可用。仅支持 cloud loki 数据源。
可以为团队设置 LBAC(基于标签的访问控制)规则。
获取数据源的 LBAC 规则
GET /api/datasources/uid/:uid/lbac/teams
获取给定 uid
数据源的所有现有 LBAC 规则。
所需权限
操作 | 范围 |
---|---|
datasources:read | datasources: datasources:uid: datasources:uid:my_datasource (单个数据源) |
示例
请求示例
GET /api/datasources/uid/my_datasource/lbac/teams HTTP/1.1
Accept: application/json
Content-Type: application/json
Authorization: Bearer eyJrIjoiT0tTcG1pUlY2RnVKZTFVaDFsNFZXdE9ZWmNrMkZYbk
响应示例
HTTP/1.1 200 OK
Content-Type: application/json; charset=UTF-8
Content-Length: 131
{
"rules": [
{
"teamUId": "fdnd1pf4m9sxvc",
"rules": [
"{ service_name=\"bigquery-sync-mysql\" }"
]
},
{
"teamUid": "dfed1p2m9sxvfc",
"rules": [
"{ service_name=\"api\" }"
]
}
]
}
更新数据源的 LBAC 规则
PUT /api/datasources/uid/:uid/lbac/teams
更新给定 uid
数据源关联团队的 LBAC 规则。您在此提交团队列表及其各自的规则。从列表中删除团队将移除该团队的 LBAC 规则。您必须提交所有要更新的团队及其规则;要移除团队的规则,您必须提交不包含该团队的当前规则列表。
所需权限
操作 | 范围 |
---|---|
datasources:write | datasources: datasources:uid: datasources:uid:my_datasource (单个数据源) |
datasources.permissions:write | datasources: datasources:uid: datasources:uid:my_datasource (单个数据源) |
示例
请求示例
PUT /api/datasources/uid/my_datasource/lbac/teams
Accept: application/json
Content-Type: application/json
Authorization: Bearer eyJrIjoiT0tTcG1pUlY2RnVKZTFVaDFsNFZXdE9ZWmNrMkZYbk
{
"rules": [
{
"teamUId": "fdnd1pf4m9sxvc",
"rules": [
"{ service_name=\"bigquery-sync-mysql\" }"
]
},
{
"teamUid": "dfed1p2m9sxvfc",
"rules": [
"{ service_name=\"api\" }"
]
}
]
}
响应示例
HTTP/1.1 200 OK
Content-Type: application/json; charset=UTF-8
Content-Length: 35
{
"id": 1,
"message": "Data source LBAC rules updated",
"name": "loki",
"rules": [
{
"teamUId": "fdnd1pf4m9sxvc",
"rules": [
"{ service_name=\"bigquery-sync-mysql\" }"
]
},
{
"teamUid": "dfed1p2m9sxvfc",
"rules": [
"{ service_name=\"api\" }"
]
}
],
"uid": "ee1nm1t7spog0e",
}