From 7d036caf689d7d979eb82cc32130e0f8b831a0b5 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 16 Apr 2024 21:43:55 -0400 Subject: [PATCH] Bump github.com/grafana/terraform-provider-grafana/v2 from 2.15.0 to 2.17.0 (#126) * Bump github.com/grafana/terraform-provider-grafana/v2 Bumps [github.com/grafana/terraform-provider-grafana/v2](https://github.com/grafana/terraform-provider-grafana) from 2.15.0 to 2.17.0. - [Release notes](https://github.com/grafana/terraform-provider-grafana/releases) - [Changelog](https://github.com/grafana/terraform-provider-grafana/blob/main/CHANGELOG.md) - [Commits](https://github.com/grafana/terraform-provider-grafana/compare/v2.15.0...v2.17.0) --- updated-dependencies: - dependency-name: github.com/grafana/terraform-provider-grafana/v2 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] * Generate new version --------- Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Julien Duchesne --- Makefile | 4 +- apis/oncall/v1alpha1/zz_escalation_types.go | 37 +- apis/oncall/v1alpha1/zz_generated.deepcopy.go | 15 + apis/oss/v1alpha1/zz_generated.deepcopy.go | 496 +++++++++++++++++ .../v1alpha1/zz_ssosettings_terraformed.go | 2 +- apis/oss/v1alpha1/zz_ssosettings_types.go | 423 ++++++++++++++- config/provider-metadata.yaml | 445 ++++++++++++++- config/schema.json | 2 +- go.mod | 24 +- go.sum | 52 +- ...all.grafana.crossplane.io_escalations.yaml | 39 +- ...oss.grafana.crossplane.io_ssosettings.yaml | 513 +++++++++++++++++- 12 files changed, 1949 insertions(+), 103 deletions(-) diff --git a/Makefile b/Makefile index 76be7e3..24efc86 100644 --- a/Makefile +++ b/Makefile @@ -9,9 +9,9 @@ export TERRAFORM_VERSION := 1.7.5 export TERRAFORM_PROVIDER_SOURCE := grafana/grafana export TERRAFORM_PROVIDER_REPO := https://github.com/grafana/terraform-provider-grafana # UPGRADE THE go.mod also! -export TERRAFORM_PROVIDER_VERSION := 2.15.0 +export TERRAFORM_PROVIDER_VERSION := 2.17.0 export TERRAFORM_PROVIDER_DOWNLOAD_NAME := terraform-provider-grafana -export TERRAFORM_NATIVE_PROVIDER_BINARY := terraform-provider-grafana_v2.15.0 +export TERRAFORM_NATIVE_PROVIDER_BINARY := terraform-provider-grafana_v2.17.0 export TERRAFORM_DOCS_PATH := docs/resources PLATFORMS ?= linux_amd64 linux_arm64 diff --git a/apis/oncall/v1alpha1/zz_escalation_types.go b/apis/oncall/v1alpha1/zz_escalation_types.go index 810869a..d2b7510 100755 --- a/apis/oncall/v1alpha1/zz_escalation_types.go +++ b/apis/oncall/v1alpha1/zz_escalation_types.go @@ -31,8 +31,8 @@ type EscalationInitParameters struct { // The ID of a User Group for notify_user_group type step. GroupToNotify *string `json:"groupToNotify,omitempty" tf:"group_to_notify,omitempty"` - // (Boolean) Will activate "important" personal notification rules. Actual for steps: notify_persons, notify_on_call_from_schedule and notify_user_group - // Will activate "important" personal notification rules. Actual for steps: notify_persons, notify_on_call_from_schedule and notify_user_group + // (Boolean) Will activate "important" personal notification rules. Actual for steps: notify_persons, notify_on_call_from_schedule and notify_user_group,notify_team_members + // Will activate "important" personal notification rules. Actual for steps: notify_persons, notify_on_call_from_schedule and notify_user_group,notify_team_members Important *bool `json:"important,omitempty" tf:"important,omitempty"` // (String) The beginning of the time interval for notify_if_time_from_to type step in UTC (for example 08:00:00Z). @@ -47,6 +47,10 @@ type EscalationInitParameters struct { // ID of a Schedule for notify_on_call_from_schedule type step. NotifyOnCallFromSchedule *string `json:"notifyOnCallFromSchedule,omitempty" tf:"notify_on_call_from_schedule,omitempty"` + // (String) The ID of a Team for a notify_team_members type step. + // The ID of a Team for a notify_team_members type step. + NotifyToTeamMembers *string `json:"notifyToTeamMembers,omitempty" tf:"notify_to_team_members,omitempty"` + // (Set of String) The list of ID's of users for notify_persons type step. // The list of ID's of users for notify_persons type step. // +listType=set @@ -61,8 +65,8 @@ type EscalationInitParameters struct { // The position of the escalation step (starts from 0). Position *float64 `json:"position,omitempty" tf:"position,omitempty"` - // (String) The type of escalation policy. Can be wait, notify_persons, notify_person_next_each_time, notify_on_call_from_schedule, trigger_webhook, notify_user_group, resolve, notify_whole_channel, notify_if_time_from_to, repeat_escalation - // The type of escalation policy. Can be wait, notify_persons, notify_person_next_each_time, notify_on_call_from_schedule, trigger_webhook, notify_user_group, resolve, notify_whole_channel, notify_if_time_from_to, repeat_escalation + // (String) The type of escalation policy. Can be wait, notify_persons, notify_person_next_each_time, notify_on_call_from_schedule, trigger_webhook, notify_user_group, resolve, notify_whole_channel, notify_if_time_from_to, repeat_escalation, notify_team_members + // The type of escalation policy. Can be wait, notify_persons, notify_person_next_each_time, notify_on_call_from_schedule, trigger_webhook, notify_user_group, resolve, notify_whole_channel, notify_if_time_from_to, repeat_escalation, notify_team_members Type *string `json:"type,omitempty" tf:"type,omitempty"` } @@ -87,8 +91,8 @@ type EscalationObservation struct { // (String) The ID of this resource. ID *string `json:"id,omitempty" tf:"id,omitempty"` - // (Boolean) Will activate "important" personal notification rules. Actual for steps: notify_persons, notify_on_call_from_schedule and notify_user_group - // Will activate "important" personal notification rules. Actual for steps: notify_persons, notify_on_call_from_schedule and notify_user_group + // (Boolean) Will activate "important" personal notification rules. Actual for steps: notify_persons, notify_on_call_from_schedule and notify_user_group,notify_team_members + // Will activate "important" personal notification rules. Actual for steps: notify_persons, notify_on_call_from_schedule and notify_user_group,notify_team_members Important *bool `json:"important,omitempty" tf:"important,omitempty"` // (String) The beginning of the time interval for notify_if_time_from_to type step in UTC (for example 08:00:00Z). @@ -103,6 +107,10 @@ type EscalationObservation struct { // ID of a Schedule for notify_on_call_from_schedule type step. NotifyOnCallFromSchedule *string `json:"notifyOnCallFromSchedule,omitempty" tf:"notify_on_call_from_schedule,omitempty"` + // (String) The ID of a Team for a notify_team_members type step. + // The ID of a Team for a notify_team_members type step. + NotifyToTeamMembers *string `json:"notifyToTeamMembers,omitempty" tf:"notify_to_team_members,omitempty"` + // (Set of String) The list of ID's of users for notify_persons type step. // The list of ID's of users for notify_persons type step. // +listType=set @@ -117,8 +125,8 @@ type EscalationObservation struct { // The position of the escalation step (starts from 0). Position *float64 `json:"position,omitempty" tf:"position,omitempty"` - // (String) The type of escalation policy. Can be wait, notify_persons, notify_person_next_each_time, notify_on_call_from_schedule, trigger_webhook, notify_user_group, resolve, notify_whole_channel, notify_if_time_from_to, repeat_escalation - // The type of escalation policy. Can be wait, notify_persons, notify_person_next_each_time, notify_on_call_from_schedule, trigger_webhook, notify_user_group, resolve, notify_whole_channel, notify_if_time_from_to, repeat_escalation + // (String) The type of escalation policy. Can be wait, notify_persons, notify_person_next_each_time, notify_on_call_from_schedule, trigger_webhook, notify_user_group, resolve, notify_whole_channel, notify_if_time_from_to, repeat_escalation, notify_team_members + // The type of escalation policy. Can be wait, notify_persons, notify_person_next_each_time, notify_on_call_from_schedule, trigger_webhook, notify_user_group, resolve, notify_whole_channel, notify_if_time_from_to, repeat_escalation, notify_team_members Type *string `json:"type,omitempty" tf:"type,omitempty"` } @@ -144,8 +152,8 @@ type EscalationParameters struct { // +kubebuilder:validation:Optional GroupToNotify *string `json:"groupToNotify,omitempty" tf:"group_to_notify,omitempty"` - // (Boolean) Will activate "important" personal notification rules. Actual for steps: notify_persons, notify_on_call_from_schedule and notify_user_group - // Will activate "important" personal notification rules. Actual for steps: notify_persons, notify_on_call_from_schedule and notify_user_group + // (Boolean) Will activate "important" personal notification rules. Actual for steps: notify_persons, notify_on_call_from_schedule and notify_user_group,notify_team_members + // Will activate "important" personal notification rules. Actual for steps: notify_persons, notify_on_call_from_schedule and notify_user_group,notify_team_members // +kubebuilder:validation:Optional Important *bool `json:"important,omitempty" tf:"important,omitempty"` @@ -164,6 +172,11 @@ type EscalationParameters struct { // +kubebuilder:validation:Optional NotifyOnCallFromSchedule *string `json:"notifyOnCallFromSchedule,omitempty" tf:"notify_on_call_from_schedule,omitempty"` + // (String) The ID of a Team for a notify_team_members type step. + // The ID of a Team for a notify_team_members type step. + // +kubebuilder:validation:Optional + NotifyToTeamMembers *string `json:"notifyToTeamMembers,omitempty" tf:"notify_to_team_members,omitempty"` + // (Set of String) The list of ID's of users for notify_persons type step. // The list of ID's of users for notify_persons type step. // +kubebuilder:validation:Optional @@ -181,8 +194,8 @@ type EscalationParameters struct { // +kubebuilder:validation:Optional Position *float64 `json:"position,omitempty" tf:"position,omitempty"` - // (String) The type of escalation policy. Can be wait, notify_persons, notify_person_next_each_time, notify_on_call_from_schedule, trigger_webhook, notify_user_group, resolve, notify_whole_channel, notify_if_time_from_to, repeat_escalation - // The type of escalation policy. Can be wait, notify_persons, notify_person_next_each_time, notify_on_call_from_schedule, trigger_webhook, notify_user_group, resolve, notify_whole_channel, notify_if_time_from_to, repeat_escalation + // (String) The type of escalation policy. Can be wait, notify_persons, notify_person_next_each_time, notify_on_call_from_schedule, trigger_webhook, notify_user_group, resolve, notify_whole_channel, notify_if_time_from_to, repeat_escalation, notify_team_members + // The type of escalation policy. Can be wait, notify_persons, notify_person_next_each_time, notify_on_call_from_schedule, trigger_webhook, notify_user_group, resolve, notify_whole_channel, notify_if_time_from_to, repeat_escalation, notify_team_members // +kubebuilder:validation:Optional Type *string `json:"type,omitempty" tf:"type,omitempty"` } diff --git a/apis/oncall/v1alpha1/zz_generated.deepcopy.go b/apis/oncall/v1alpha1/zz_generated.deepcopy.go index f65a9d5..18379b8 100644 --- a/apis/oncall/v1alpha1/zz_generated.deepcopy.go +++ b/apis/oncall/v1alpha1/zz_generated.deepcopy.go @@ -460,6 +460,11 @@ func (in *EscalationInitParameters) DeepCopyInto(out *EscalationInitParameters) *out = new(string) **out = **in } + if in.NotifyToTeamMembers != nil { + in, out := &in.NotifyToTeamMembers, &out.NotifyToTeamMembers + *out = new(string) + **out = **in + } if in.PersonsToNotify != nil { in, out := &in.PersonsToNotify, &out.PersonsToNotify *out = make([]*string, len(*in)) @@ -584,6 +589,11 @@ func (in *EscalationObservation) DeepCopyInto(out *EscalationObservation) { *out = new(string) **out = **in } + if in.NotifyToTeamMembers != nil { + in, out := &in.NotifyToTeamMembers, &out.NotifyToTeamMembers + *out = new(string) + **out = **in + } if in.PersonsToNotify != nil { in, out := &in.PersonsToNotify, &out.PersonsToNotify *out = make([]*string, len(*in)) @@ -671,6 +681,11 @@ func (in *EscalationParameters) DeepCopyInto(out *EscalationParameters) { *out = new(string) **out = **in } + if in.NotifyToTeamMembers != nil { + in, out := &in.NotifyToTeamMembers, &out.NotifyToTeamMembers + *out = new(string) + **out = **in + } if in.PersonsToNotify != nil { in, out := &in.PersonsToNotify, &out.PersonsToNotify *out = make([]*string, len(*in)) diff --git a/apis/oss/v1alpha1/zz_generated.deepcopy.go b/apis/oss/v1alpha1/zz_generated.deepcopy.go index 130d72a..f9e81bd 100644 --- a/apis/oss/v1alpha1/zz_generated.deepcopy.go +++ b/apis/oss/v1alpha1/zz_generated.deepcopy.go @@ -4493,6 +4493,481 @@ func (in *PreferencesParameters) DeepCopy() *PreferencesParameters { return out } +// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil. +func (in *SAMLSettingsInitParameters) DeepCopyInto(out *SAMLSettingsInitParameters) { + *out = *in + if in.AllowIdpInitiated != nil { + in, out := &in.AllowIdpInitiated, &out.AllowIdpInitiated + *out = new(bool) + **out = **in + } + if in.AllowSignUp != nil { + in, out := &in.AllowSignUp, &out.AllowSignUp + *out = new(bool) + **out = **in + } + if in.AllowedOrganizations != nil { + in, out := &in.AllowedOrganizations, &out.AllowedOrganizations + *out = new(string) + **out = **in + } + if in.AssertionAttributeEmail != nil { + in, out := &in.AssertionAttributeEmail, &out.AssertionAttributeEmail + *out = new(string) + **out = **in + } + if in.AssertionAttributeGroups != nil { + in, out := &in.AssertionAttributeGroups, &out.AssertionAttributeGroups + *out = new(string) + **out = **in + } + if in.AssertionAttributeLogin != nil { + in, out := &in.AssertionAttributeLogin, &out.AssertionAttributeLogin + *out = new(string) + **out = **in + } + if in.AssertionAttributeName != nil { + in, out := &in.AssertionAttributeName, &out.AssertionAttributeName + *out = new(string) + **out = **in + } + if in.AssertionAttributeOrg != nil { + in, out := &in.AssertionAttributeOrg, &out.AssertionAttributeOrg + *out = new(string) + **out = **in + } + if in.AssertionAttributeRole != nil { + in, out := &in.AssertionAttributeRole, &out.AssertionAttributeRole + *out = new(string) + **out = **in + } + if in.AutoLogin != nil { + in, out := &in.AutoLogin, &out.AutoLogin + *out = new(bool) + **out = **in + } + if in.CertificatePath != nil { + in, out := &in.CertificatePath, &out.CertificatePath + *out = new(string) + **out = **in + } + if in.Enabled != nil { + in, out := &in.Enabled, &out.Enabled + *out = new(bool) + **out = **in + } + if in.IdpMetadata != nil { + in, out := &in.IdpMetadata, &out.IdpMetadata + *out = new(string) + **out = **in + } + if in.IdpMetadataPath != nil { + in, out := &in.IdpMetadataPath, &out.IdpMetadataPath + *out = new(string) + **out = **in + } + if in.IdpMetadataURL != nil { + in, out := &in.IdpMetadataURL, &out.IdpMetadataURL + *out = new(string) + **out = **in + } + if in.MaxIssueDelay != nil { + in, out := &in.MaxIssueDelay, &out.MaxIssueDelay + *out = new(string) + **out = **in + } + if in.MetadataValidDuration != nil { + in, out := &in.MetadataValidDuration, &out.MetadataValidDuration + *out = new(string) + **out = **in + } + if in.Name != nil { + in, out := &in.Name, &out.Name + *out = new(string) + **out = **in + } + if in.NameIDFormat != nil { + in, out := &in.NameIDFormat, &out.NameIDFormat + *out = new(string) + **out = **in + } + if in.OrgMapping != nil { + in, out := &in.OrgMapping, &out.OrgMapping + *out = new(string) + **out = **in + } + if in.PrivateKeyPath != nil { + in, out := &in.PrivateKeyPath, &out.PrivateKeyPath + *out = new(string) + **out = **in + } + if in.RelayState != nil { + in, out := &in.RelayState, &out.RelayState + *out = new(string) + **out = **in + } + if in.RoleValuesAdmin != nil { + in, out := &in.RoleValuesAdmin, &out.RoleValuesAdmin + *out = new(string) + **out = **in + } + if in.RoleValuesEditor != nil { + in, out := &in.RoleValuesEditor, &out.RoleValuesEditor + *out = new(string) + **out = **in + } + if in.RoleValuesGrafanaAdmin != nil { + in, out := &in.RoleValuesGrafanaAdmin, &out.RoleValuesGrafanaAdmin + *out = new(string) + **out = **in + } + if in.RoleValuesNone != nil { + in, out := &in.RoleValuesNone, &out.RoleValuesNone + *out = new(string) + **out = **in + } + if in.SignatureAlgorithm != nil { + in, out := &in.SignatureAlgorithm, &out.SignatureAlgorithm + *out = new(string) + **out = **in + } + if in.SingleLogout != nil { + in, out := &in.SingleLogout, &out.SingleLogout + *out = new(bool) + **out = **in + } +} + +// DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new SAMLSettingsInitParameters. +func (in *SAMLSettingsInitParameters) DeepCopy() *SAMLSettingsInitParameters { + if in == nil { + return nil + } + out := new(SAMLSettingsInitParameters) + in.DeepCopyInto(out) + return out +} + +// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil. +func (in *SAMLSettingsObservation) DeepCopyInto(out *SAMLSettingsObservation) { + *out = *in + if in.AllowIdpInitiated != nil { + in, out := &in.AllowIdpInitiated, &out.AllowIdpInitiated + *out = new(bool) + **out = **in + } + if in.AllowSignUp != nil { + in, out := &in.AllowSignUp, &out.AllowSignUp + *out = new(bool) + **out = **in + } + if in.AllowedOrganizations != nil { + in, out := &in.AllowedOrganizations, &out.AllowedOrganizations + *out = new(string) + **out = **in + } + if in.AssertionAttributeEmail != nil { + in, out := &in.AssertionAttributeEmail, &out.AssertionAttributeEmail + *out = new(string) + **out = **in + } + if in.AssertionAttributeGroups != nil { + in, out := &in.AssertionAttributeGroups, &out.AssertionAttributeGroups + *out = new(string) + **out = **in + } + if in.AssertionAttributeLogin != nil { + in, out := &in.AssertionAttributeLogin, &out.AssertionAttributeLogin + *out = new(string) + **out = **in + } + if in.AssertionAttributeName != nil { + in, out := &in.AssertionAttributeName, &out.AssertionAttributeName + *out = new(string) + **out = **in + } + if in.AssertionAttributeOrg != nil { + in, out := &in.AssertionAttributeOrg, &out.AssertionAttributeOrg + *out = new(string) + **out = **in + } + if in.AssertionAttributeRole != nil { + in, out := &in.AssertionAttributeRole, &out.AssertionAttributeRole + *out = new(string) + **out = **in + } + if in.AutoLogin != nil { + in, out := &in.AutoLogin, &out.AutoLogin + *out = new(bool) + **out = **in + } + if in.CertificatePath != nil { + in, out := &in.CertificatePath, &out.CertificatePath + *out = new(string) + **out = **in + } + if in.Enabled != nil { + in, out := &in.Enabled, &out.Enabled + *out = new(bool) + **out = **in + } + if in.IdpMetadata != nil { + in, out := &in.IdpMetadata, &out.IdpMetadata + *out = new(string) + **out = **in + } + if in.IdpMetadataPath != nil { + in, out := &in.IdpMetadataPath, &out.IdpMetadataPath + *out = new(string) + **out = **in + } + if in.IdpMetadataURL != nil { + in, out := &in.IdpMetadataURL, &out.IdpMetadataURL + *out = new(string) + **out = **in + } + if in.MaxIssueDelay != nil { + in, out := &in.MaxIssueDelay, &out.MaxIssueDelay + *out = new(string) + **out = **in + } + if in.MetadataValidDuration != nil { + in, out := &in.MetadataValidDuration, &out.MetadataValidDuration + *out = new(string) + **out = **in + } + if in.Name != nil { + in, out := &in.Name, &out.Name + *out = new(string) + **out = **in + } + if in.NameIDFormat != nil { + in, out := &in.NameIDFormat, &out.NameIDFormat + *out = new(string) + **out = **in + } + if in.OrgMapping != nil { + in, out := &in.OrgMapping, &out.OrgMapping + *out = new(string) + **out = **in + } + if in.PrivateKeyPath != nil { + in, out := &in.PrivateKeyPath, &out.PrivateKeyPath + *out = new(string) + **out = **in + } + if in.RelayState != nil { + in, out := &in.RelayState, &out.RelayState + *out = new(string) + **out = **in + } + if in.RoleValuesAdmin != nil { + in, out := &in.RoleValuesAdmin, &out.RoleValuesAdmin + *out = new(string) + **out = **in + } + if in.RoleValuesEditor != nil { + in, out := &in.RoleValuesEditor, &out.RoleValuesEditor + *out = new(string) + **out = **in + } + if in.RoleValuesGrafanaAdmin != nil { + in, out := &in.RoleValuesGrafanaAdmin, &out.RoleValuesGrafanaAdmin + *out = new(string) + **out = **in + } + if in.RoleValuesNone != nil { + in, out := &in.RoleValuesNone, &out.RoleValuesNone + *out = new(string) + **out = **in + } + if in.SignatureAlgorithm != nil { + in, out := &in.SignatureAlgorithm, &out.SignatureAlgorithm + *out = new(string) + **out = **in + } + if in.SingleLogout != nil { + in, out := &in.SingleLogout, &out.SingleLogout + *out = new(bool) + **out = **in + } +} + +// DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new SAMLSettingsObservation. +func (in *SAMLSettingsObservation) DeepCopy() *SAMLSettingsObservation { + if in == nil { + return nil + } + out := new(SAMLSettingsObservation) + in.DeepCopyInto(out) + return out +} + +// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil. +func (in *SAMLSettingsParameters) DeepCopyInto(out *SAMLSettingsParameters) { + *out = *in + if in.AllowIdpInitiated != nil { + in, out := &in.AllowIdpInitiated, &out.AllowIdpInitiated + *out = new(bool) + **out = **in + } + if in.AllowSignUp != nil { + in, out := &in.AllowSignUp, &out.AllowSignUp + *out = new(bool) + **out = **in + } + if in.AllowedOrganizations != nil { + in, out := &in.AllowedOrganizations, &out.AllowedOrganizations + *out = new(string) + **out = **in + } + if in.AssertionAttributeEmail != nil { + in, out := &in.AssertionAttributeEmail, &out.AssertionAttributeEmail + *out = new(string) + **out = **in + } + if in.AssertionAttributeGroups != nil { + in, out := &in.AssertionAttributeGroups, &out.AssertionAttributeGroups + *out = new(string) + **out = **in + } + if in.AssertionAttributeLogin != nil { + in, out := &in.AssertionAttributeLogin, &out.AssertionAttributeLogin + *out = new(string) + **out = **in + } + if in.AssertionAttributeName != nil { + in, out := &in.AssertionAttributeName, &out.AssertionAttributeName + *out = new(string) + **out = **in + } + if in.AssertionAttributeOrg != nil { + in, out := &in.AssertionAttributeOrg, &out.AssertionAttributeOrg + *out = new(string) + **out = **in + } + if in.AssertionAttributeRole != nil { + in, out := &in.AssertionAttributeRole, &out.AssertionAttributeRole + *out = new(string) + **out = **in + } + if in.AutoLogin != nil { + in, out := &in.AutoLogin, &out.AutoLogin + *out = new(bool) + **out = **in + } + if in.CertificatePath != nil { + in, out := &in.CertificatePath, &out.CertificatePath + *out = new(string) + **out = **in + } + if in.CertificateSecretRef != nil { + in, out := &in.CertificateSecretRef, &out.CertificateSecretRef + *out = new(v1.SecretKeySelector) + **out = **in + } + if in.Enabled != nil { + in, out := &in.Enabled, &out.Enabled + *out = new(bool) + **out = **in + } + if in.IdpMetadata != nil { + in, out := &in.IdpMetadata, &out.IdpMetadata + *out = new(string) + **out = **in + } + if in.IdpMetadataPath != nil { + in, out := &in.IdpMetadataPath, &out.IdpMetadataPath + *out = new(string) + **out = **in + } + if in.IdpMetadataURL != nil { + in, out := &in.IdpMetadataURL, &out.IdpMetadataURL + *out = new(string) + **out = **in + } + if in.MaxIssueDelay != nil { + in, out := &in.MaxIssueDelay, &out.MaxIssueDelay + *out = new(string) + **out = **in + } + if in.MetadataValidDuration != nil { + in, out := &in.MetadataValidDuration, &out.MetadataValidDuration + *out = new(string) + **out = **in + } + if in.Name != nil { + in, out := &in.Name, &out.Name + *out = new(string) + **out = **in + } + if in.NameIDFormat != nil { + in, out := &in.NameIDFormat, &out.NameIDFormat + *out = new(string) + **out = **in + } + if in.OrgMapping != nil { + in, out := &in.OrgMapping, &out.OrgMapping + *out = new(string) + **out = **in + } + if in.PrivateKeyPath != nil { + in, out := &in.PrivateKeyPath, &out.PrivateKeyPath + *out = new(string) + **out = **in + } + if in.PrivateKeySecretRef != nil { + in, out := &in.PrivateKeySecretRef, &out.PrivateKeySecretRef + *out = new(v1.SecretKeySelector) + **out = **in + } + if in.RelayState != nil { + in, out := &in.RelayState, &out.RelayState + *out = new(string) + **out = **in + } + if in.RoleValuesAdmin != nil { + in, out := &in.RoleValuesAdmin, &out.RoleValuesAdmin + *out = new(string) + **out = **in + } + if in.RoleValuesEditor != nil { + in, out := &in.RoleValuesEditor, &out.RoleValuesEditor + *out = new(string) + **out = **in + } + if in.RoleValuesGrafanaAdmin != nil { + in, out := &in.RoleValuesGrafanaAdmin, &out.RoleValuesGrafanaAdmin + *out = new(string) + **out = **in + } + if in.RoleValuesNone != nil { + in, out := &in.RoleValuesNone, &out.RoleValuesNone + *out = new(string) + **out = **in + } + if in.SignatureAlgorithm != nil { + in, out := &in.SignatureAlgorithm, &out.SignatureAlgorithm + *out = new(string) + **out = **in + } + if in.SingleLogout != nil { + in, out := &in.SingleLogout, &out.SingleLogout + *out = new(bool) + **out = **in + } +} + +// DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new SAMLSettingsParameters. +func (in *SAMLSettingsParameters) DeepCopy() *SAMLSettingsParameters { + if in == nil { + return nil + } + out := new(SAMLSettingsParameters) + in.DeepCopyInto(out) + return out +} + // DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil. func (in *ServiceAccount) DeepCopyInto(out *ServiceAccount) { *out = *in @@ -5343,6 +5818,13 @@ func (in *SsoSettingsInitParameters) DeepCopyInto(out *SsoSettingsInitParameters *out = new(string) **out = **in } + if in.SAMLSettings != nil { + in, out := &in.SAMLSettings, &out.SAMLSettings + *out = make([]SAMLSettingsInitParameters, len(*in)) + for i := range *in { + (*in)[i].DeepCopyInto(&(*out)[i]) + } + } } // DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new SsoSettingsInitParameters. @@ -5407,6 +5889,13 @@ func (in *SsoSettingsObservation) DeepCopyInto(out *SsoSettingsObservation) { *out = new(string) **out = **in } + if in.SAMLSettings != nil { + in, out := &in.SAMLSettings, &out.SAMLSettings + *out = make([]SAMLSettingsObservation, len(*in)) + for i := range *in { + (*in)[i].DeepCopyInto(&(*out)[i]) + } + } } // DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new SsoSettingsObservation. @@ -5434,6 +5923,13 @@ func (in *SsoSettingsParameters) DeepCopyInto(out *SsoSettingsParameters) { *out = new(string) **out = **in } + if in.SAMLSettings != nil { + in, out := &in.SAMLSettings, &out.SAMLSettings + *out = make([]SAMLSettingsParameters, len(*in)) + for i := range *in { + (*in)[i].DeepCopyInto(&(*out)[i]) + } + } } // DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new SsoSettingsParameters. diff --git a/apis/oss/v1alpha1/zz_ssosettings_terraformed.go b/apis/oss/v1alpha1/zz_ssosettings_terraformed.go index 38c4dbe..3850fb1 100755 --- a/apis/oss/v1alpha1/zz_ssosettings_terraformed.go +++ b/apis/oss/v1alpha1/zz_ssosettings_terraformed.go @@ -21,7 +21,7 @@ func (mg *SsoSettings) GetTerraformResourceType() string { // GetConnectionDetailsMapping for this SsoSettings func (tr *SsoSettings) GetConnectionDetailsMapping() map[string]string { - return map[string]string{"oauth2_settings[*].client_secret": "spec.forProvider.oauth2Settings[*].clientSecretSecretRef"} + return map[string]string{"oauth2_settings[*].client_secret": "spec.forProvider.oauth2Settings[*].clientSecretSecretRef", "saml_settings[*].certificate": "spec.forProvider.samlSettings[*].certificateSecretRef", "saml_settings[*].private_key": "spec.forProvider.samlSettings[*].privateKeySecretRef"} } // GetObservation of this SsoSettings diff --git a/apis/oss/v1alpha1/zz_ssosettings_types.go b/apis/oss/v1alpha1/zz_ssosettings_types.go index f20662d..6397f3a 100755 --- a/apis/oss/v1alpha1/zz_ssosettings_types.go +++ b/apis/oss/v1alpha1/zz_ssosettings_types.go @@ -511,15 +511,402 @@ type Oauth2SettingsParameters struct { UseRefreshToken *bool `json:"useRefreshToken,omitempty" tf:"use_refresh_token,omitempty"` } +type SAMLSettingsInitParameters struct { + + // initiated login is allowed. + // Whether SAML IdP-initiated login is allowed. + AllowIdpInitiated *bool `json:"allowIdpInitiated,omitempty" tf:"allow_idp_initiated,omitempty"` + + // (Boolean) If not enabled, only existing Grafana users can log in using OAuth. + // Whether to allow new Grafana user creation through SAML login. If set to false, then only existing Grafana users can log in with SAML. + AllowSignUp *bool `json:"allowSignUp,omitempty" tf:"allow_sign_up,omitempty"` + + // or space-separated organizations. The user should be a member of at least one organization to log in. + // List of comma- or space-separated organizations. User should be a member of at least one organization to log in. + AllowedOrganizations *string `json:"allowedOrganizations,omitempty" tf:"allowed_organizations,omitempty"` + + // (String) Friendly name or name of the attribute within the SAML assertion to use as the user email. + // Friendly name or name of the attribute within the SAML assertion to use as the user email. + AssertionAttributeEmail *string `json:"assertionAttributeEmail,omitempty" tf:"assertion_attribute_email,omitempty"` + + // (String) Friendly name or name of the attribute within the SAML assertion to use as the user groups. + // Friendly name or name of the attribute within the SAML assertion to use as the user groups. + AssertionAttributeGroups *string `json:"assertionAttributeGroups,omitempty" tf:"assertion_attribute_groups,omitempty"` + + // (String) Friendly name or name of the attribute within the SAML assertion to use as the user login handle. + // Friendly name or name of the attribute within the SAML assertion to use as the user login handle. + AssertionAttributeLogin *string `json:"assertionAttributeLogin,omitempty" tf:"assertion_attribute_login,omitempty"` + + // (String) Friendly name or name of the attribute within the SAML assertion to use as the user name. Alternatively, this can be a template with variables that match the names of attributes within the SAML assertion. + // Friendly name or name of the attribute within the SAML assertion to use as the user name. Alternatively, this can be a template with variables that match the names of attributes within the SAML assertion. + AssertionAttributeName *string `json:"assertionAttributeName,omitempty" tf:"assertion_attribute_name,omitempty"` + + // (String) Friendly name or name of the attribute within the SAML assertion to use as the user organization. + // Friendly name or name of the attribute within the SAML assertion to use as the user organization. + AssertionAttributeOrg *string `json:"assertionAttributeOrg,omitempty" tf:"assertion_attribute_org,omitempty"` + + // (String) Friendly name or name of the attribute within the SAML assertion to use as the user roles. + // Friendly name or name of the attribute within the SAML assertion to use as the user roles. + AssertionAttributeRole *string `json:"assertionAttributeRole,omitempty" tf:"assertion_attribute_role,omitempty"` + + // (Boolean) Log in automatically, skipping the login screen. + // Whether SAML auto login is enabled. + AutoLogin *bool `json:"autoLogin,omitempty" tf:"auto_login,omitempty"` + + // (String) Path for the SP X.509 certificate. + // Path for the SP X.509 certificate. + CertificatePath *string `json:"certificatePath,omitempty" tf:"certificate_path,omitempty"` + + // (Boolean) Define whether this configuration is enabled for the specified provider. Defaults to true. + // Define whether this configuration is enabled for SAML. Defaults to `true`. + Enabled *bool `json:"enabled,omitempty" tf:"enabled,omitempty"` + + // encoded string for the IdP SAML metadata XML. + // Base64-encoded string for the IdP SAML metadata XML. + IdpMetadata *string `json:"idpMetadata,omitempty" tf:"idp_metadata,omitempty"` + + // (String) Path for the IdP SAML metadata XML. + // Path for the IdP SAML metadata XML. + IdpMetadataPath *string `json:"idpMetadataPath,omitempty" tf:"idp_metadata_path,omitempty"` + + // (String) URL for the IdP SAML metadata XML. + // URL for the IdP SAML metadata XML. + IdpMetadataURL *string `json:"idpMetadataUrl,omitempty" tf:"idp_metadata_url,omitempty"` + + // (String) Duration, since the IdP issued a response and the SP is allowed to process it. For example: 90s, 1h. + // Duration, since the IdP issued a response and the SP is allowed to process it. For example: 90s, 1h. + MaxIssueDelay *string `json:"maxIssueDelay,omitempty" tf:"max_issue_delay,omitempty"` + + // (String) Duration, for how long the SP metadata is valid. For example: 48h, 5d. + // Duration, for how long the SP metadata is valid. For example: 48h, 5d. + MetadataValidDuration *string `json:"metadataValidDuration,omitempty" tf:"metadata_valid_duration,omitempty"` + + // (String) Helpful if you use more than one identity providers or SSO protocols. + // Name used to refer to the SAML authentication. + Name *string `json:"name,omitempty" tf:"name,omitempty"` + + // format:transient + // The Name ID Format to request within the SAML assertion. Defaults to urn:oasis:names:tc:SAML:2.0:nameid-format:transient + NameIDFormat *string `json:"nameIdFormat,omitempty" tf:"name_id_format,omitempty"` + + // or space-separated Organization:OrgId:Role mappings. Organization can be * meaning “All users”. Role is optional and can have the following values: Viewer, Editor or Admin. + // List of comma- or space-separated Organization:OrgId:Role mappings. Organization can be * meaning “All users”. Role is optional and can have the following values: Viewer, Editor or Admin. + OrgMapping *string `json:"orgMapping,omitempty" tf:"org_mapping,omitempty"` + + // (String) Path for the SP private key. + // Path for the SP private key. + PrivateKeyPath *string `json:"privateKeyPath,omitempty" tf:"private_key_path,omitempty"` + + // initiated login. Should match relay state configured in IdP. + // Relay state for IdP-initiated login. Should match relay state configured in IdP. + RelayState *string `json:"relayState,omitempty" tf:"relay_state,omitempty"` + + // or space-separated roles which will be mapped into the Admin role. + // List of comma- or space-separated roles which will be mapped into the Admin role. + RoleValuesAdmin *string `json:"roleValuesAdmin,omitempty" tf:"role_values_admin,omitempty"` + + // or space-separated roles which will be mapped into the Editor role. + // List of comma- or space-separated roles which will be mapped into the Editor role. + RoleValuesEditor *string `json:"roleValuesEditor,omitempty" tf:"role_values_editor,omitempty"` + + // or space-separated roles which will be mapped into the Grafana Admin (Super Admin) role. + // List of comma- or space-separated roles which will be mapped into the Grafana Admin (Super Admin) role. + RoleValuesGrafanaAdmin *string `json:"roleValuesGrafanaAdmin,omitempty" tf:"role_values_grafana_admin,omitempty"` + + // or space-separated roles which will be mapped into the None role. + // List of comma- or space-separated roles which will be mapped into the None role. + RoleValuesNone *string `json:"roleValuesNone,omitempty" tf:"role_values_none,omitempty"` + + // sha1, rsa-sha256, rsa-sha512. + // Signature algorithm used for signing requests to the IdP. Supported values are rsa-sha1, rsa-sha256, rsa-sha512. + SignatureAlgorithm *string `json:"signatureAlgorithm,omitempty" tf:"signature_algorithm,omitempty"` + + // (Boolean) Whether SAML Single Logout is enabled. + // Whether SAML Single Logout is enabled. + SingleLogout *bool `json:"singleLogout,omitempty" tf:"single_logout,omitempty"` +} + +type SAMLSettingsObservation struct { + + // initiated login is allowed. + // Whether SAML IdP-initiated login is allowed. + AllowIdpInitiated *bool `json:"allowIdpInitiated,omitempty" tf:"allow_idp_initiated,omitempty"` + + // (Boolean) If not enabled, only existing Grafana users can log in using OAuth. + // Whether to allow new Grafana user creation through SAML login. If set to false, then only existing Grafana users can log in with SAML. + AllowSignUp *bool `json:"allowSignUp,omitempty" tf:"allow_sign_up,omitempty"` + + // or space-separated organizations. The user should be a member of at least one organization to log in. + // List of comma- or space-separated organizations. User should be a member of at least one organization to log in. + AllowedOrganizations *string `json:"allowedOrganizations,omitempty" tf:"allowed_organizations,omitempty"` + + // (String) Friendly name or name of the attribute within the SAML assertion to use as the user email. + // Friendly name or name of the attribute within the SAML assertion to use as the user email. + AssertionAttributeEmail *string `json:"assertionAttributeEmail,omitempty" tf:"assertion_attribute_email,omitempty"` + + // (String) Friendly name or name of the attribute within the SAML assertion to use as the user groups. + // Friendly name or name of the attribute within the SAML assertion to use as the user groups. + AssertionAttributeGroups *string `json:"assertionAttributeGroups,omitempty" tf:"assertion_attribute_groups,omitempty"` + + // (String) Friendly name or name of the attribute within the SAML assertion to use as the user login handle. + // Friendly name or name of the attribute within the SAML assertion to use as the user login handle. + AssertionAttributeLogin *string `json:"assertionAttributeLogin,omitempty" tf:"assertion_attribute_login,omitempty"` + + // (String) Friendly name or name of the attribute within the SAML assertion to use as the user name. Alternatively, this can be a template with variables that match the names of attributes within the SAML assertion. + // Friendly name or name of the attribute within the SAML assertion to use as the user name. Alternatively, this can be a template with variables that match the names of attributes within the SAML assertion. + AssertionAttributeName *string `json:"assertionAttributeName,omitempty" tf:"assertion_attribute_name,omitempty"` + + // (String) Friendly name or name of the attribute within the SAML assertion to use as the user organization. + // Friendly name or name of the attribute within the SAML assertion to use as the user organization. + AssertionAttributeOrg *string `json:"assertionAttributeOrg,omitempty" tf:"assertion_attribute_org,omitempty"` + + // (String) Friendly name or name of the attribute within the SAML assertion to use as the user roles. + // Friendly name or name of the attribute within the SAML assertion to use as the user roles. + AssertionAttributeRole *string `json:"assertionAttributeRole,omitempty" tf:"assertion_attribute_role,omitempty"` + + // (Boolean) Log in automatically, skipping the login screen. + // Whether SAML auto login is enabled. + AutoLogin *bool `json:"autoLogin,omitempty" tf:"auto_login,omitempty"` + + // (String) Path for the SP X.509 certificate. + // Path for the SP X.509 certificate. + CertificatePath *string `json:"certificatePath,omitempty" tf:"certificate_path,omitempty"` + + // (Boolean) Define whether this configuration is enabled for the specified provider. Defaults to true. + // Define whether this configuration is enabled for SAML. Defaults to `true`. + Enabled *bool `json:"enabled,omitempty" tf:"enabled,omitempty"` + + // encoded string for the IdP SAML metadata XML. + // Base64-encoded string for the IdP SAML metadata XML. + IdpMetadata *string `json:"idpMetadata,omitempty" tf:"idp_metadata,omitempty"` + + // (String) Path for the IdP SAML metadata XML. + // Path for the IdP SAML metadata XML. + IdpMetadataPath *string `json:"idpMetadataPath,omitempty" tf:"idp_metadata_path,omitempty"` + + // (String) URL for the IdP SAML metadata XML. + // URL for the IdP SAML metadata XML. + IdpMetadataURL *string `json:"idpMetadataUrl,omitempty" tf:"idp_metadata_url,omitempty"` + + // (String) Duration, since the IdP issued a response and the SP is allowed to process it. For example: 90s, 1h. + // Duration, since the IdP issued a response and the SP is allowed to process it. For example: 90s, 1h. + MaxIssueDelay *string `json:"maxIssueDelay,omitempty" tf:"max_issue_delay,omitempty"` + + // (String) Duration, for how long the SP metadata is valid. For example: 48h, 5d. + // Duration, for how long the SP metadata is valid. For example: 48h, 5d. + MetadataValidDuration *string `json:"metadataValidDuration,omitempty" tf:"metadata_valid_duration,omitempty"` + + // (String) Helpful if you use more than one identity providers or SSO protocols. + // Name used to refer to the SAML authentication. + Name *string `json:"name,omitempty" tf:"name,omitempty"` + + // format:transient + // The Name ID Format to request within the SAML assertion. Defaults to urn:oasis:names:tc:SAML:2.0:nameid-format:transient + NameIDFormat *string `json:"nameIdFormat,omitempty" tf:"name_id_format,omitempty"` + + // or space-separated Organization:OrgId:Role mappings. Organization can be * meaning “All users”. Role is optional and can have the following values: Viewer, Editor or Admin. + // List of comma- or space-separated Organization:OrgId:Role mappings. Organization can be * meaning “All users”. Role is optional and can have the following values: Viewer, Editor or Admin. + OrgMapping *string `json:"orgMapping,omitempty" tf:"org_mapping,omitempty"` + + // (String) Path for the SP private key. + // Path for the SP private key. + PrivateKeyPath *string `json:"privateKeyPath,omitempty" tf:"private_key_path,omitempty"` + + // initiated login. Should match relay state configured in IdP. + // Relay state for IdP-initiated login. Should match relay state configured in IdP. + RelayState *string `json:"relayState,omitempty" tf:"relay_state,omitempty"` + + // or space-separated roles which will be mapped into the Admin role. + // List of comma- or space-separated roles which will be mapped into the Admin role. + RoleValuesAdmin *string `json:"roleValuesAdmin,omitempty" tf:"role_values_admin,omitempty"` + + // or space-separated roles which will be mapped into the Editor role. + // List of comma- or space-separated roles which will be mapped into the Editor role. + RoleValuesEditor *string `json:"roleValuesEditor,omitempty" tf:"role_values_editor,omitempty"` + + // or space-separated roles which will be mapped into the Grafana Admin (Super Admin) role. + // List of comma- or space-separated roles which will be mapped into the Grafana Admin (Super Admin) role. + RoleValuesGrafanaAdmin *string `json:"roleValuesGrafanaAdmin,omitempty" tf:"role_values_grafana_admin,omitempty"` + + // or space-separated roles which will be mapped into the None role. + // List of comma- or space-separated roles which will be mapped into the None role. + RoleValuesNone *string `json:"roleValuesNone,omitempty" tf:"role_values_none,omitempty"` + + // sha1, rsa-sha256, rsa-sha512. + // Signature algorithm used for signing requests to the IdP. Supported values are rsa-sha1, rsa-sha256, rsa-sha512. + SignatureAlgorithm *string `json:"signatureAlgorithm,omitempty" tf:"signature_algorithm,omitempty"` + + // (Boolean) Whether SAML Single Logout is enabled. + // Whether SAML Single Logout is enabled. + SingleLogout *bool `json:"singleLogout,omitempty" tf:"single_logout,omitempty"` +} + +type SAMLSettingsParameters struct { + + // initiated login is allowed. + // Whether SAML IdP-initiated login is allowed. + // +kubebuilder:validation:Optional + AllowIdpInitiated *bool `json:"allowIdpInitiated,omitempty" tf:"allow_idp_initiated,omitempty"` + + // (Boolean) If not enabled, only existing Grafana users can log in using OAuth. + // Whether to allow new Grafana user creation through SAML login. If set to false, then only existing Grafana users can log in with SAML. + // +kubebuilder:validation:Optional + AllowSignUp *bool `json:"allowSignUp,omitempty" tf:"allow_sign_up,omitempty"` + + // or space-separated organizations. The user should be a member of at least one organization to log in. + // List of comma- or space-separated organizations. User should be a member of at least one organization to log in. + // +kubebuilder:validation:Optional + AllowedOrganizations *string `json:"allowedOrganizations,omitempty" tf:"allowed_organizations,omitempty"` + + // (String) Friendly name or name of the attribute within the SAML assertion to use as the user email. + // Friendly name or name of the attribute within the SAML assertion to use as the user email. + // +kubebuilder:validation:Optional + AssertionAttributeEmail *string `json:"assertionAttributeEmail,omitempty" tf:"assertion_attribute_email,omitempty"` + + // (String) Friendly name or name of the attribute within the SAML assertion to use as the user groups. + // Friendly name or name of the attribute within the SAML assertion to use as the user groups. + // +kubebuilder:validation:Optional + AssertionAttributeGroups *string `json:"assertionAttributeGroups,omitempty" tf:"assertion_attribute_groups,omitempty"` + + // (String) Friendly name or name of the attribute within the SAML assertion to use as the user login handle. + // Friendly name or name of the attribute within the SAML assertion to use as the user login handle. + // +kubebuilder:validation:Optional + AssertionAttributeLogin *string `json:"assertionAttributeLogin,omitempty" tf:"assertion_attribute_login,omitempty"` + + // (String) Friendly name or name of the attribute within the SAML assertion to use as the user name. Alternatively, this can be a template with variables that match the names of attributes within the SAML assertion. + // Friendly name or name of the attribute within the SAML assertion to use as the user name. Alternatively, this can be a template with variables that match the names of attributes within the SAML assertion. + // +kubebuilder:validation:Optional + AssertionAttributeName *string `json:"assertionAttributeName,omitempty" tf:"assertion_attribute_name,omitempty"` + + // (String) Friendly name or name of the attribute within the SAML assertion to use as the user organization. + // Friendly name or name of the attribute within the SAML assertion to use as the user organization. + // +kubebuilder:validation:Optional + AssertionAttributeOrg *string `json:"assertionAttributeOrg,omitempty" tf:"assertion_attribute_org,omitempty"` + + // (String) Friendly name or name of the attribute within the SAML assertion to use as the user roles. + // Friendly name or name of the attribute within the SAML assertion to use as the user roles. + // +kubebuilder:validation:Optional + AssertionAttributeRole *string `json:"assertionAttributeRole,omitempty" tf:"assertion_attribute_role,omitempty"` + + // (Boolean) Log in automatically, skipping the login screen. + // Whether SAML auto login is enabled. + // +kubebuilder:validation:Optional + AutoLogin *bool `json:"autoLogin,omitempty" tf:"auto_login,omitempty"` + + // (String) Path for the SP X.509 certificate. + // Path for the SP X.509 certificate. + // +kubebuilder:validation:Optional + CertificatePath *string `json:"certificatePath,omitempty" tf:"certificate_path,omitempty"` + + // encoded string for the SP X.509 certificate. + // Base64-encoded string for the SP X.509 certificate. + // +kubebuilder:validation:Optional + CertificateSecretRef *v1.SecretKeySelector `json:"certificateSecretRef,omitempty" tf:"-"` + + // (Boolean) Define whether this configuration is enabled for the specified provider. Defaults to true. + // Define whether this configuration is enabled for SAML. Defaults to `true`. + // +kubebuilder:validation:Optional + Enabled *bool `json:"enabled,omitempty" tf:"enabled,omitempty"` + + // encoded string for the IdP SAML metadata XML. + // Base64-encoded string for the IdP SAML metadata XML. + // +kubebuilder:validation:Optional + IdpMetadata *string `json:"idpMetadata,omitempty" tf:"idp_metadata,omitempty"` + + // (String) Path for the IdP SAML metadata XML. + // Path for the IdP SAML metadata XML. + // +kubebuilder:validation:Optional + IdpMetadataPath *string `json:"idpMetadataPath,omitempty" tf:"idp_metadata_path,omitempty"` + + // (String) URL for the IdP SAML metadata XML. + // URL for the IdP SAML metadata XML. + // +kubebuilder:validation:Optional + IdpMetadataURL *string `json:"idpMetadataUrl,omitempty" tf:"idp_metadata_url,omitempty"` + + // (String) Duration, since the IdP issued a response and the SP is allowed to process it. For example: 90s, 1h. + // Duration, since the IdP issued a response and the SP is allowed to process it. For example: 90s, 1h. + // +kubebuilder:validation:Optional + MaxIssueDelay *string `json:"maxIssueDelay,omitempty" tf:"max_issue_delay,omitempty"` + + // (String) Duration, for how long the SP metadata is valid. For example: 48h, 5d. + // Duration, for how long the SP metadata is valid. For example: 48h, 5d. + // +kubebuilder:validation:Optional + MetadataValidDuration *string `json:"metadataValidDuration,omitempty" tf:"metadata_valid_duration,omitempty"` + + // (String) Helpful if you use more than one identity providers or SSO protocols. + // Name used to refer to the SAML authentication. + // +kubebuilder:validation:Optional + Name *string `json:"name,omitempty" tf:"name,omitempty"` + + // format:transient + // The Name ID Format to request within the SAML assertion. Defaults to urn:oasis:names:tc:SAML:2.0:nameid-format:transient + // +kubebuilder:validation:Optional + NameIDFormat *string `json:"nameIdFormat,omitempty" tf:"name_id_format,omitempty"` + + // or space-separated Organization:OrgId:Role mappings. Organization can be * meaning “All users”. Role is optional and can have the following values: Viewer, Editor or Admin. + // List of comma- or space-separated Organization:OrgId:Role mappings. Organization can be * meaning “All users”. Role is optional and can have the following values: Viewer, Editor or Admin. + // +kubebuilder:validation:Optional + OrgMapping *string `json:"orgMapping,omitempty" tf:"org_mapping,omitempty"` + + // (String) Path for the SP private key. + // Path for the SP private key. + // +kubebuilder:validation:Optional + PrivateKeyPath *string `json:"privateKeyPath,omitempty" tf:"private_key_path,omitempty"` + + // encoded string for the SP private key. + // Base64-encoded string for the SP private key. + // +kubebuilder:validation:Optional + PrivateKeySecretRef *v1.SecretKeySelector `json:"privateKeySecretRef,omitempty" tf:"-"` + + // initiated login. Should match relay state configured in IdP. + // Relay state for IdP-initiated login. Should match relay state configured in IdP. + // +kubebuilder:validation:Optional + RelayState *string `json:"relayState,omitempty" tf:"relay_state,omitempty"` + + // or space-separated roles which will be mapped into the Admin role. + // List of comma- or space-separated roles which will be mapped into the Admin role. + // +kubebuilder:validation:Optional + RoleValuesAdmin *string `json:"roleValuesAdmin,omitempty" tf:"role_values_admin,omitempty"` + + // or space-separated roles which will be mapped into the Editor role. + // List of comma- or space-separated roles which will be mapped into the Editor role. + // +kubebuilder:validation:Optional + RoleValuesEditor *string `json:"roleValuesEditor,omitempty" tf:"role_values_editor,omitempty"` + + // or space-separated roles which will be mapped into the Grafana Admin (Super Admin) role. + // List of comma- or space-separated roles which will be mapped into the Grafana Admin (Super Admin) role. + // +kubebuilder:validation:Optional + RoleValuesGrafanaAdmin *string `json:"roleValuesGrafanaAdmin,omitempty" tf:"role_values_grafana_admin,omitempty"` + + // or space-separated roles which will be mapped into the None role. + // List of comma- or space-separated roles which will be mapped into the None role. + // +kubebuilder:validation:Optional + RoleValuesNone *string `json:"roleValuesNone,omitempty" tf:"role_values_none,omitempty"` + + // sha1, rsa-sha256, rsa-sha512. + // Signature algorithm used for signing requests to the IdP. Supported values are rsa-sha1, rsa-sha256, rsa-sha512. + // +kubebuilder:validation:Optional + SignatureAlgorithm *string `json:"signatureAlgorithm,omitempty" tf:"signature_algorithm,omitempty"` + + // (Boolean) Whether SAML Single Logout is enabled. + // Whether SAML Single Logout is enabled. + // +kubebuilder:validation:Optional + SingleLogout *bool `json:"singleLogout,omitempty" tf:"single_logout,omitempty"` +} + type SsoSettingsInitParameters struct { - // (Block Set, Min: 1, Max: 1) The SSO settings set. (see below for nested schema) - // The SSO settings set. + // (Block Set, Max: 1) The OAuth2 settings set. Required for github, gitlab, google, azuread, okta, generic_oauth providers. (see below for nested schema) + // The OAuth2 settings set. Required for github, gitlab, google, azuread, okta, generic_oauth providers. Oauth2Settings []Oauth2SettingsInitParameters `json:"oauth2Settings,omitempty" tf:"oauth2_settings,omitempty"` - // (String) The name of the SSO provider. Supported values: github, gitlab, google, azuread, okta, generic_oauth. - // The name of the SSO provider. Supported values: github, gitlab, google, azuread, okta, generic_oauth. + // (String) The name of the SSO provider. Supported values: github, gitlab, google, azuread, okta, generic_oauth, saml. + // The name of the SSO provider. Supported values: github, gitlab, google, azuread, okta, generic_oauth, saml. ProviderName *string `json:"providerName,omitempty" tf:"provider_name,omitempty"` + + // (Block Set, Max: 1) The SAML settings set. Required for the saml provider. (see below for nested schema) + // The SAML settings set. Required for the saml provider. + SAMLSettings []SAMLSettingsInitParameters `json:"samlSettings,omitempty" tf:"saml_settings,omitempty"` } type SsoSettingsObservation struct { @@ -527,26 +914,35 @@ type SsoSettingsObservation struct { // (String) The ID of this resource. ID *string `json:"id,omitempty" tf:"id,omitempty"` - // (Block Set, Min: 1, Max: 1) The SSO settings set. (see below for nested schema) - // The SSO settings set. + // (Block Set, Max: 1) The OAuth2 settings set. Required for github, gitlab, google, azuread, okta, generic_oauth providers. (see below for nested schema) + // The OAuth2 settings set. Required for github, gitlab, google, azuread, okta, generic_oauth providers. Oauth2Settings []Oauth2SettingsObservation `json:"oauth2Settings,omitempty" tf:"oauth2_settings,omitempty"` - // (String) The name of the SSO provider. Supported values: github, gitlab, google, azuread, okta, generic_oauth. - // The name of the SSO provider. Supported values: github, gitlab, google, azuread, okta, generic_oauth. + // (String) The name of the SSO provider. Supported values: github, gitlab, google, azuread, okta, generic_oauth, saml. + // The name of the SSO provider. Supported values: github, gitlab, google, azuread, okta, generic_oauth, saml. ProviderName *string `json:"providerName,omitempty" tf:"provider_name,omitempty"` + + // (Block Set, Max: 1) The SAML settings set. Required for the saml provider. (see below for nested schema) + // The SAML settings set. Required for the saml provider. + SAMLSettings []SAMLSettingsObservation `json:"samlSettings,omitempty" tf:"saml_settings,omitempty"` } type SsoSettingsParameters struct { - // (Block Set, Min: 1, Max: 1) The SSO settings set. (see below for nested schema) - // The SSO settings set. + // (Block Set, Max: 1) The OAuth2 settings set. Required for github, gitlab, google, azuread, okta, generic_oauth providers. (see below for nested schema) + // The OAuth2 settings set. Required for github, gitlab, google, azuread, okta, generic_oauth providers. // +kubebuilder:validation:Optional Oauth2Settings []Oauth2SettingsParameters `json:"oauth2Settings,omitempty" tf:"oauth2_settings,omitempty"` - // (String) The name of the SSO provider. Supported values: github, gitlab, google, azuread, okta, generic_oauth. - // The name of the SSO provider. Supported values: github, gitlab, google, azuread, okta, generic_oauth. + // (String) The name of the SSO provider. Supported values: github, gitlab, google, azuread, okta, generic_oauth, saml. + // The name of the SSO provider. Supported values: github, gitlab, google, azuread, okta, generic_oauth, saml. // +kubebuilder:validation:Optional ProviderName *string `json:"providerName,omitempty" tf:"provider_name,omitempty"` + + // (Block Set, Max: 1) The SAML settings set. Required for the saml provider. (see below for nested schema) + // The SAML settings set. Required for the saml provider. + // +kubebuilder:validation:Optional + SAMLSettings []SAMLSettingsParameters `json:"samlSettings,omitempty" tf:"saml_settings,omitempty"` } // SsoSettingsSpec defines the desired state of SsoSettings @@ -576,7 +972,7 @@ type SsoSettingsStatus struct { // +kubebuilder:subresource:status // +kubebuilder:storageversion -// SsoSettings is the Schema for the SsoSettingss API. Manages Grafana SSO Settings for OAuth2. SAML support will be added soon. Official documentation https://grafana.com/docs/grafana/latest/setup-grafana/configure-security/configure-authentication/HTTP API https://grafana.com/docs/grafana/latest/developers/http_api/sso-settings/ +// SsoSettings is the Schema for the SsoSettingss API. Manages Grafana SSO Settings for OAuth2 and SAML. Official documentation https://grafana.com/docs/grafana/latest/setup-grafana/configure-security/configure-authentication/HTTP API https://grafana.com/docs/grafana/latest/developers/http_api/sso-settings/ // +kubebuilder:printcolumn:name="READY",type="string",JSONPath=".status.conditions[?(@.type=='Ready')].status" // +kubebuilder:printcolumn:name="SYNCED",type="string",JSONPath=".status.conditions[?(@.type=='Synced')].status" // +kubebuilder:printcolumn:name="EXTERNAL-NAME",type="string",JSONPath=".metadata.annotations.crossplane\\.io/external-name" @@ -585,7 +981,6 @@ type SsoSettingsStatus struct { type SsoSettings struct { metav1.TypeMeta `json:",inline"` metav1.ObjectMeta `json:"metadata,omitempty"` - // +kubebuilder:validation:XValidation:rule="!('*' in self.managementPolicies || 'Create' in self.managementPolicies || 'Update' in self.managementPolicies) || has(self.forProvider.oauth2Settings) || (has(self.initProvider) && has(self.initProvider.oauth2Settings))",message="spec.forProvider.oauth2Settings is a required parameter" // +kubebuilder:validation:XValidation:rule="!('*' in self.managementPolicies || 'Create' in self.managementPolicies || 'Update' in self.managementPolicies) || has(self.forProvider.providerName) || (has(self.initProvider) && has(self.initProvider.providerName))",message="spec.forProvider.providerName is a required parameter" Spec SsoSettingsSpec `json:"spec"` Status SsoSettingsStatus `json:"status,omitempty"` diff --git a/config/provider-metadata.yaml b/config/provider-metadata.yaml index 7cf42af..7da0b8a 100644 --- a/config/provider-metadata.yaml +++ b/config/provider-metadata.yaml @@ -571,6 +571,98 @@ resources: - |- terraform import grafana_dashboard_permission.name "{{ dashboardUID }}" terraform import grafana_dashboard_permission.name "{{ orgID }}:{{ dashboardUID }}" + grafana_dashboard_permission_item: + subCategory: Grafana OSS + description: Manages a single permission item for a dashboard. Conflicts with the "grafanadashboardpermission" resource which manages the entire set of permissions for a dashboard. + name: grafana_dashboard_permission_item + title: grafana_dashboard_permission_item Resource - terraform-provider-grafana + examples: + - name: role + manifest: |- + { + "dashboard_uid": "${grafana_dashboard.dashboard.uid}", + "permission": "View", + "role": "Viewer" + } + references: + dashboard_uid: grafana_dashboard.dashboard.uid + dependencies: + grafana_dashboard.dashboard: |- + { + "config_json": "${jsonencode({\n \"title\" : \"My Dashboard\",\n \"uid\" : \"my-dashboard-uid\"\n })}" + } + grafana_team.team: |- + { + "name": "Team Name" + } + grafana_user.user: |- + { + "email": "user.name@example.com", + "login": "user.name", + "password": "my-password" + } + - name: user + manifest: |- + { + "dashboard_uid": "${grafana_dashboard.dashboard.uid}", + "permission": "Admin", + "user": "${grafana_user.user.id}" + } + references: + dashboard_uid: grafana_dashboard.dashboard.uid + user: grafana_user.user.id + dependencies: + grafana_dashboard.dashboard: |- + { + "config_json": "${jsonencode({\n \"title\" : \"My Dashboard\",\n \"uid\" : \"my-dashboard-uid\"\n })}" + } + grafana_team.team: |- + { + "name": "Team Name" + } + grafana_user.user: |- + { + "email": "user.name@example.com", + "login": "user.name", + "password": "my-password" + } + - name: team + manifest: |- + { + "dashboard_uid": "${grafana_dashboard.dashboard.uid}", + "permission": "Edit", + "team": "${grafana_team.team.id}" + } + references: + dashboard_uid: grafana_dashboard.dashboard.uid + team: grafana_team.team.id + dependencies: + grafana_dashboard.dashboard: |- + { + "config_json": "${jsonencode({\n \"title\" : \"My Dashboard\",\n \"uid\" : \"my-dashboard-uid\"\n })}" + } + grafana_team.team: |- + { + "name": "Team Name" + } + grafana_user.user: |- + { + "email": "user.name@example.com", + "login": "user.name", + "password": "my-password" + } + argumentDocs: + dashboard_uid: (String) The UID of the dashboard. + id: (String) The ID of this resource. + org_id: (String) The Organization ID. If not set, the Org ID defined in the provider block will be used. + permission: (String) the permission to be assigned + role: (String) the role onto which the permission is to be assigned + team: (String) the team onto which the permission is to be assigned + user: (String) the user or service account onto which the permission is to be assigned + importStatements: + - |- + terraform import grafana_dashboard_permission_item.name "{{ dashboardUID }}:{{ type (role, team, or user) }}:{{ identifier }}" + terraform import grafana_dashboard_permission_item.name "{{ orgID }}:{{ dashboardUID }}:{{ type (role, team, or user) }}:{{ identifier }}" grafana_dashboard_public: subCategory: Grafana OSS description: 'Manages Grafana public dashboards. Note: This resource is available only with Grafana 10.2+. Official documentation https://grafana.com/docs/grafana/latest/dashboards/dashboard-public/HTTP API https://grafana.com/docs/grafana/next/developers/http_api/dashboard_public/' @@ -892,6 +984,159 @@ resources: - |- terraform import grafana_data_source_permission.name "{{ datasourceID }}" terraform import grafana_data_source_permission.name "{{ orgID }}:{{ datasourceID }}" + grafana_data_source_permission_item: + subCategory: Grafana Enterprise + description: Manages a single permission item for a datasource. Conflicts with the "grafanadatasource_permission" resource which manages the entire set of permissions for a datasource. + name: grafana_data_source_permission_item + title: grafana_data_source_permission_item Resource - terraform-provider-grafana + examples: + - name: team + manifest: |- + { + "datasource_uid": "${grafana_data_source.foo.uid}", + "permission": "Edit", + "team": "${grafana_team.team.id}" + } + references: + datasource_uid: grafana_data_source.foo.uid + team: grafana_team.team.id + dependencies: + grafana_data_source.foo: |- + { + "json_data_encoded": "${jsonencode({\n defaultRegion = \"us-east-1\"\n authType = \"keys\"\n })}", + "name": "cw-example", + "secure_json_data_encoded": "${jsonencode({\n accessKey = \"123\"\n secretKey = \"456\"\n })}", + "type": "cloudwatch" + } + grafana_service_account.sa: |- + { + "name": "test-ds-permissions", + "role": "Viewer" + } + grafana_team.team: |- + { + "name": "Team Name" + } + grafana_user.user: |- + { + "email": "test-ds-permissions@example.com", + "login": "test-ds-permissions", + "name": "test-ds-permissions", + "password": "hunter2" + } + - name: user + manifest: |- + { + "datasource_uid": "${grafana_data_source.foo.uid}", + "permission": "Edit", + "user": "${grafana_user.user.id}" + } + references: + datasource_uid: grafana_data_source.foo.uid + user: grafana_user.user.id + dependencies: + grafana_data_source.foo: |- + { + "json_data_encoded": "${jsonencode({\n defaultRegion = \"us-east-1\"\n authType = \"keys\"\n })}", + "name": "cw-example", + "secure_json_data_encoded": "${jsonencode({\n accessKey = \"123\"\n secretKey = \"456\"\n })}", + "type": "cloudwatch" + } + grafana_service_account.sa: |- + { + "name": "test-ds-permissions", + "role": "Viewer" + } + grafana_team.team: |- + { + "name": "Team Name" + } + grafana_user.user: |- + { + "email": "test-ds-permissions@example.com", + "login": "test-ds-permissions", + "name": "test-ds-permissions", + "password": "hunter2" + } + - name: role + manifest: |- + { + "datasource_uid": "${grafana_data_source.foo.uid}", + "permission": "Query", + "role": "Viewer" + } + references: + datasource_uid: grafana_data_source.foo.uid + dependencies: + grafana_data_source.foo: |- + { + "json_data_encoded": "${jsonencode({\n defaultRegion = \"us-east-1\"\n authType = \"keys\"\n })}", + "name": "cw-example", + "secure_json_data_encoded": "${jsonencode({\n accessKey = \"123\"\n secretKey = \"456\"\n })}", + "type": "cloudwatch" + } + grafana_service_account.sa: |- + { + "name": "test-ds-permissions", + "role": "Viewer" + } + grafana_team.team: |- + { + "name": "Team Name" + } + grafana_user.user: |- + { + "email": "test-ds-permissions@example.com", + "login": "test-ds-permissions", + "name": "test-ds-permissions", + "password": "hunter2" + } + - name: service_account + manifest: |- + { + "datasource_uid": "${grafana_data_source.foo.uid}", + "permission": "Query", + "user": "${grafana_service_account.sa.id}" + } + references: + datasource_uid: grafana_data_source.foo.uid + user: grafana_service_account.sa.id + dependencies: + grafana_data_source.foo: |- + { + "json_data_encoded": "${jsonencode({\n defaultRegion = \"us-east-1\"\n authType = \"keys\"\n })}", + "name": "cw-example", + "secure_json_data_encoded": "${jsonencode({\n accessKey = \"123\"\n secretKey = \"456\"\n })}", + "type": "cloudwatch" + } + grafana_service_account.sa: |- + { + "name": "test-ds-permissions", + "role": "Viewer" + } + grafana_team.team: |- + { + "name": "Team Name" + } + grafana_user.user: |- + { + "email": "test-ds-permissions@example.com", + "login": "test-ds-permissions", + "name": "test-ds-permissions", + "password": "hunter2" + } + argumentDocs: + datasource_uid: (String) The UID of the datasource. + id: (String) The ID of this resource. + org_id: (String) The Organization ID. If not set, the Org ID defined in the provider block will be used. + permission: (String) the permission to be assigned + role: (String) the role onto which the permission is to be assigned + team: (String) the team onto which the permission is to be assigned + user: (String) the user or service account onto which the permission is to be assigned + importStatements: + - |- + terraform import grafana_data_source_permission_item.name "{{ datasourceUID }}:{{ type (role, team, or user) }}:{{ identifier }}" + terraform import grafana_data_source_permission_item.name "{{ orgID }}:{{ datasourceUID }}:{{ type (role, team, or user) }}:{{ identifier }}" grafana_folder: subCategory: Grafana OSS description: Official documentation https://grafana.com/docs/grafana/latest/dashboards/manage-dashboards/HTTP API https://grafana.com/docs/grafana/latest/developers/http_api/folder/ @@ -990,6 +1235,98 @@ resources: - |- terraform import grafana_folder_permission.name "{{ folderUID }}" terraform import grafana_folder_permission.name "{{ orgID }}:{{ folderUID }}" + grafana_folder_permission_item: + subCategory: Grafana OSS + description: Manages a single permission item for a folder. Conflicts with the "grafanafolderpermission" resource which manages the entire set of permissions for a folder. * Official documentation https://grafana.com/docs/grafana/latest/administration/roles-and-permissions/access-control/ * HTTP API https://grafana.com/docs/grafana/latest/developers/http_api/folder_permissions/ + name: grafana_folder_permission_item + title: grafana_folder_permission_item Resource - terraform-provider-grafana + examples: + - name: on_role + manifest: |- + { + "folder_uid": "${grafana_folder.collection.uid}", + "permission": "Edit", + "role": "Viewer" + } + references: + folder_uid: grafana_folder.collection.uid + dependencies: + grafana_folder.collection: |- + { + "title": "Folder Title" + } + grafana_team.team: |- + { + "name": "Team Name" + } + grafana_user.user: |- + { + "email": "user.name@example.com", + "login": "user.name", + "password": "my-password" + } + - name: on_team + manifest: |- + { + "folder_uid": "${grafana_folder.collection.uid}", + "permission": "View", + "team": "${grafana_team.team.id}" + } + references: + folder_uid: grafana_folder.collection.uid + team: grafana_team.team.id + dependencies: + grafana_folder.collection: |- + { + "title": "Folder Title" + } + grafana_team.team: |- + { + "name": "Team Name" + } + grafana_user.user: |- + { + "email": "user.name@example.com", + "login": "user.name", + "password": "my-password" + } + - name: on_user + manifest: |- + { + "folder_uid": "${grafana_folder.collection.uid}", + "permission": "Admin", + "user": "${grafana_user.user.id}" + } + references: + folder_uid: grafana_folder.collection.uid + user: grafana_user.user.id + dependencies: + grafana_folder.collection: |- + { + "title": "Folder Title" + } + grafana_team.team: |- + { + "name": "Team Name" + } + grafana_user.user: |- + { + "email": "user.name@example.com", + "login": "user.name", + "password": "my-password" + } + argumentDocs: + folder_uid: (String) The UID of the folder. + id: (String) The ID of this resource. + org_id: (String) The Organization ID. If not set, the Org ID defined in the provider block will be used. + permission: (String) the permission to be assigned + role: (String) the role onto which the permission is to be assigned + team: (String) the team onto which the permission is to be assigned + user: (String) the user or service account onto which the permission is to be assigned + importStatements: + - |- + terraform import grafana_folder_permission_item.name "{{ folderUID }}:{{ type (role, team, or user) }}:{{ identifier }}" + terraform import grafana_folder_permission_item.name "{{ orgID }}:{{ folderUID }}:{{ type (role, team, or user) }}:{{ identifier }}" grafana_library_panel: subCategory: Grafana OSS description: Manages Grafana library panels. Official documentation https://grafana.com/docs/grafana/latest/dashboards/build-dashboards/manage-library-panels/HTTP API https://grafana.com/docs/grafana/latest/developers/http_api/library_element/ @@ -1346,14 +1683,15 @@ resources: escalation_chain_id: (String) The ID of the escalation chain. group_to_notify: (String) The ID of a User Group for notify_user_group type step. id: (String) The ID of this resource. - important: '(Boolean) Will activate "important" personal notification rules. Actual for steps: notify_persons, notify_on_call_from_schedule and notify_user_group' + important: '(Boolean) Will activate "important" personal notification rules. Actual for steps: notify_persons, notify_on_call_from_schedule and notify_user_group,notify_team_members' notify_if_time_from: (String) The beginning of the time interval for notify_if_time_from_to type step in UTC (for example 08:00:00Z). notify_if_time_to: (String) The end of the time interval for notify_if_time_from_to type step in UTC (for example 18:00:00Z). notify_on_call_from_schedule: (String) ID of a Schedule for notify_on_call_from_schedule type step. + notify_to_team_members: (String) The ID of a Team for a notify_team_members type step. persons_to_notify: (Set of String) The list of ID's of users for notify_persons type step. persons_to_notify_next_each_time: (Set of String) The list of ID's of users for notify_person_next_each_time type step. position: (Number) The position of the escalation step (starts from 0). - type: (String) The type of escalation policy. Can be wait, notify_persons, notify_person_next_each_time, notify_on_call_from_schedule, trigger_webhook, notify_user_group, resolve, notify_whole_channel, notify_if_time_from_to, repeat_escalation + type: (String) The type of escalation policy. Can be wait, notify_persons, notify_person_next_each_time, notify_on_call_from_schedule, trigger_webhook, notify_user_group, resolve, notify_whole_channel, notify_if_time_from_to, repeat_escalation, notify_team_members importStatements: - terraform import grafana_oncall_escalation.name "{{ id }}" grafana_oncall_escalation_chain: @@ -2124,6 +2462,77 @@ resources: - |- terraform import grafana_service_account_permission.name "{{ serviceAccountID }}" terraform import grafana_service_account_permission.name "{{ orgID }}:{{ serviceAccountID }}" + grafana_service_account_permission_item: + subCategory: Grafana OSS + description: Manages a single permission item for a service account. Conflicts with the "grafanaserviceaccount_permission" resource which manages the entire set of permissions for a service account. + name: grafana_service_account_permission_item + title: grafana_service_account_permission_item Resource - terraform-provider-grafana + examples: + - name: on_team + manifest: |- + { + "permission": "Admin", + "service_account_id": "${grafana_service_account.test.id}", + "team": "${grafana_team.team.id}" + } + references: + service_account_id: grafana_service_account.test.id + team: grafana_team.team.id + dependencies: + grafana_service_account.test: |- + { + "is_disabled": false, + "name": "terraform-sa", + "role": "Editor" + } + grafana_team.team: |- + { + "name": "Team Name" + } + grafana_user.user: |- + { + "email": "user.name@example.com", + "login": "user.name", + "password": "my-password" + } + - name: on_user + manifest: |- + { + "permission": "Admin", + "service_account_id": "${grafana_service_account.test.id}", + "user": "${grafana_user.user.id}" + } + references: + service_account_id: grafana_service_account.test.id + user: grafana_user.user.id + dependencies: + grafana_service_account.test: |- + { + "is_disabled": false, + "name": "terraform-sa", + "role": "Editor" + } + grafana_team.team: |- + { + "name": "Team Name" + } + grafana_user.user: |- + { + "email": "user.name@example.com", + "login": "user.name", + "password": "my-password" + } + argumentDocs: + id: (String) The ID of this resource. + org_id: (String) The Organization ID. If not set, the Org ID defined in the provider block will be used. + permission: (String) the permission to be assigned + service_account_id: (String) The ID of the service account. + team: (String) the team onto which the permission is to be assigned + user: (String) the user or service account onto which the permission is to be assigned + importStatements: + - |- + terraform import grafana_service_account_permission_item.name "{{ serviceAccountID }}:{{ type (role, team, or user) }}:{{ identifier }}" + terraform import grafana_service_account_permission_item.name "{{ orgID }}:{{ serviceAccountID }}:{{ type (role, team, or user) }}:{{ identifier }}" grafana_service_account_token: subCategory: Grafana OSS description: 'Note: This resource is available only with Grafana 9.1+. Official documentation https://grafana.com/docs/grafana/latest/administration/service-accounts/HTTP API https://grafana.com/docs/grafana/latest/developers/http_api/serviceaccount/#service-account-api' @@ -2352,7 +2761,7 @@ resources: - terraform import grafana_slo.name "{{ uuid }}" grafana_sso_settings: subCategory: Grafana OSS - description: Manages Grafana SSO Settings for OAuth2. SAML support will be added soon. Official documentation https://grafana.com/docs/grafana/latest/setup-grafana/configure-security/configure-authentication/HTTP API https://grafana.com/docs/grafana/latest/developers/http_api/sso-settings/ + description: Manages Grafana SSO Settings for OAuth2 and SAML. Official documentation https://grafana.com/docs/grafana/latest/setup-grafana/configure-security/configure-authentication/HTTP API https://grafana.com/docs/grafana/latest/developers/http_api/sso-settings/ name: grafana_sso_settings title: grafana_sso_settings Resource - terraform-provider-grafana examples: @@ -2371,14 +2780,23 @@ resources: } argumentDocs: allow_assign_grafana_admin: (Boolean) If enabled, it will automatically sync the Grafana server administrator role. + allow_idp_initiated: (Boolean) Whether SAML IdP-initiated login is allowed. allow_sign_up: (Boolean) If not enabled, only existing Grafana users can log in using OAuth. allowed_domains: (String) List of comma- or space-separated domains. The user should belong to at least one domain to log in. allowed_groups: (String) List of comma- or space-separated groups. The user should be a member of at least one group to log in. For Generic OAuth, if you configure allowed_groups, you must also configure groups_attribute_path. allowed_organizations: (String) List of comma- or space-separated organizations. The user should be a member of at least one organization to log in. api_url: (String) The user information endpoint of your OAuth2 provider. Required for azuread, okta and generic_oauth providers. + assertion_attribute_email: (String) Friendly name or name of the attribute within the SAML assertion to use as the user email. + assertion_attribute_groups: (String) Friendly name or name of the attribute within the SAML assertion to use as the user groups. + assertion_attribute_login: (String) Friendly name or name of the attribute within the SAML assertion to use as the user login handle. + assertion_attribute_name: (String) Friendly name or name of the attribute within the SAML assertion to use as the user name. Alternatively, this can be a template with variables that match the names of attributes within the SAML assertion. + assertion_attribute_org: (String) Friendly name or name of the attribute within the SAML assertion to use as the user organization. + assertion_attribute_role: (String) Friendly name or name of the attribute within the SAML assertion to use as the user roles. auth_style: (String) It determines how client_id and client_secret are sent to Oauth2 provider. Possible values are AutoDetect, InParams, InHeader. Default is AutoDetect. auth_url: (String) The authorization endpoint of your OAuth2 provider. Required for azuread, okta and generic_oauth providers. auto_login: (Boolean) Log in automatically, skipping the login screen. + certificate: (String, Sensitive) Base64-encoded string for the SP X.509 certificate. + certificate_path: (String) Path for the SP X.509 certificate. client_id: (String) The client Id of your OAuth2 app. client_secret: (String, Sensitive) The client secret of your OAuth2 app. custom: (Map of String) Custom fields to configure for OAuth2 such as the force_use_graph_api field. @@ -2391,15 +2809,32 @@ resources: groups_attribute_path: (String) JMESPath expression to use for user group lookup. If you configure allowed_groups, you must also configure groups_attribute_path. id: (String) The ID of this resource. id_token_attribute_name: (String) The name of the key used to extract the ID token from the returned OAuth2 token. Only applicable to Generic OAuth. + idp_metadata: (String) Base64-encoded string for the IdP SAML metadata XML. + idp_metadata_path: (String) Path for the IdP SAML metadata XML. + idp_metadata_url: (String) URL for the IdP SAML metadata XML. login_attribute_path: (String) JMESPath expression to use for user login lookup from the user ID token. Only applicable to Generic OAuth. + max_issue_delay: '(String) Duration, since the IdP issued a response and the SP is allowed to process it. For example: 90s, 1h.' + metadata_valid_duration: '(String) Duration, for how long the SP metadata is valid. For example: 48h, 5d.' name: (String) Helpful if you use more than one identity providers or SSO protocols. name_attribute_path: (String) JMESPath expression to use for user name lookup from the user ID token. This name will be used as the user’s display name. Only applicable to Generic OAuth. - oauth2_settings: '(Block Set, Min: 1, Max: 1) The SSO settings set. (see below for nested schema)' - provider_name: '(String) The name of the SSO provider. Supported values: github, gitlab, google, azuread, okta, generic_oauth.' + name_id_format: (String) The Name ID Format to request within the SAML assertion. Defaults to urn:oasis:names:tc:SAML:2.0:nameid-format:transient + oauth2_settings: '(Block Set, Max: 1) The OAuth2 settings set. Required for github, gitlab, google, azuread, okta, generic_oauth providers. (see below for nested schema)' + org_mapping: '(String) List of comma- or space-separated Organization:OrgId:Role mappings. Organization can be * meaning “All users”. Role is optional and can have the following values: Viewer, Editor or Admin.' + private_key: (String, Sensitive) Base64-encoded string for the SP private key. + private_key_path: (String) Path for the SP private key. + provider_name: '(String) The name of the SSO provider. Supported values: github, gitlab, google, azuread, okta, generic_oauth, saml.' + relay_state: (String) Relay state for IdP-initiated login. Should match relay state configured in IdP. role_attribute_path: (String) JMESPath expression to use for Grafana role lookup. role_attribute_strict: (Boolean) If enabled, denies user login if the Grafana role cannot be extracted using Role attribute path. + role_values_admin: (String) List of comma- or space-separated roles which will be mapped into the Admin role. + role_values_editor: (String) List of comma- or space-separated roles which will be mapped into the Editor role. + role_values_grafana_admin: (String) List of comma- or space-separated roles which will be mapped into the Grafana Admin (Super Admin) role. + role_values_none: (String) List of comma- or space-separated roles which will be mapped into the None role. + saml_settings: '(Block Set, Max: 1) The SAML settings set. Required for the saml provider. (see below for nested schema)' scopes: (String) List of comma- or space-separated OAuth2 scopes. + signature_algorithm: (String) Signature algorithm used for signing requests to the IdP. Supported values are rsa-sha1, rsa-sha256, rsa-sha512. signout_redirect_url: (String) The URL to redirect the user to after signing out from Grafana. + single_logout: (Boolean) Whether SAML Single Logout is enabled. skip_org_role_sync: (Boolean) Prevent synchronizing users’ organization roles from your IdP. team_ids: (String) String list of Team Ids. If set, the user must be a member of one of the given teams to log in. If you configure team_ids, you must also configure teams_url and team_ids_attribute_path. team_ids_attribute_path: (String) The JMESPath expression to use for Grafana Team Id lookup within the results returned by the teams_url endpoint. Only applicable to Generic OAuth. diff --git a/config/schema.json b/config/schema.json index 79ab624..e1cb123 100644 --- a/config/schema.json +++ b/config/schema.json @@ -1 +1 @@ -{"format_version":"1.0","provider_schemas":{"registry.terraform.io/grafana/grafana":{"provider":{"version":0,"block":{"attributes":{"auth":{"type":"string","description":"API token, basic auth in the `username:password` format or `anonymous` (string literal). May alternatively be set via the `GRAFANA_AUTH` environment variable.","description_kind":"markdown","optional":true,"sensitive":true},"ca_cert":{"type":"string","description":"Certificate CA bundle (file path or literal value) to use to verify the Grafana server's certificate. May alternatively be set via the `GRAFANA_CA_CERT` environment variable.","description_kind":"markdown","optional":true},"cloud_access_policy_token":{"type":"string","description":"Access Policy Token for Grafana Cloud. May alternatively be set via the `GRAFANA_CLOUD_ACCESS_POLICY_TOKEN` environment variable.","description_kind":"markdown","optional":true,"sensitive":true},"cloud_api_key":{"type":"string","description":"Deprecated: Use `cloud_access_policy_token` instead.","description_kind":"markdown","deprecated":true,"optional":true,"sensitive":true},"cloud_api_url":{"type":"string","description":"Grafana Cloud's API URL. May alternatively be set via the `GRAFANA_CLOUD_API_URL` environment variable.","description_kind":"markdown","optional":true},"http_headers":{"type":["map","string"],"description":"Optional. HTTP headers mapping keys to values used for accessing the Grafana and Grafana Cloud APIs. May alternatively be set via the `GRAFANA_HTTP_HEADERS` environment variable in JSON format.","description_kind":"markdown","optional":true,"sensitive":true},"insecure_skip_verify":{"type":"bool","description":"Skip TLS certificate verification. May alternatively be set via the `GRAFANA_INSECURE_SKIP_VERIFY` environment variable.","description_kind":"markdown","optional":true},"oncall_access_token":{"type":"string","description":"A Grafana OnCall access token. May alternatively be set via the `GRAFANA_ONCALL_ACCESS_TOKEN` environment variable.","description_kind":"markdown","optional":true,"sensitive":true},"oncall_url":{"type":"string","description":"An Grafana OnCall backend address. May alternatively be set via the `GRAFANA_ONCALL_URL` environment variable.","description_kind":"markdown","optional":true},"org_id":{"type":"number","description":"Deprecated: Use the `org_id` attributes on resources instead.","description_kind":"markdown","deprecated":true,"optional":true},"retries":{"type":"number","description":"The amount of retries to use for Grafana API and Grafana Cloud API calls. May alternatively be set via the `GRAFANA_RETRIES` environment variable.","description_kind":"markdown","optional":true},"retry_status_codes":{"type":["set","string"],"description":"The status codes to retry on for Grafana API and Grafana Cloud API calls. Use `x` as a digit wildcard. Defaults to 429 and 5xx. May alternatively be set via the `GRAFANA_RETRY_STATUS_CODES` environment variable.","description_kind":"markdown","optional":true},"retry_wait":{"type":"number","description":"The amount of time in seconds to wait between retries for Grafana API and Grafana Cloud API calls. May alternatively be set via the `GRAFANA_RETRY_WAIT` environment variable.","description_kind":"markdown","optional":true},"sm_access_token":{"type":"string","description":"A Synthetic Monitoring access token. May alternatively be set via the `GRAFANA_SM_ACCESS_TOKEN` environment variable.","description_kind":"markdown","optional":true,"sensitive":true},"sm_url":{"type":"string","description":"Synthetic monitoring backend address. May alternatively be set via the `GRAFANA_SM_URL` environment variable. The correct value for each service region is cited in the [Synthetic Monitoring documentation](https://grafana.com/docs/grafana-cloud/monitor-public-endpoints/set-up/set-up-private-probes/#probe-api-server-url). Note the `sm_url` value is optional, but it must correspond with the value specified as the `region_slug` in the `grafana_cloud_stack` resource. Also note that when a Terraform configuration contains multiple provider instances managing SM resources associated with the same Grafana stack, specifying an explicit `sm_url` set to the same value for each provider ensures all providers interact with the same SM API.","description_kind":"markdown","optional":true},"store_dashboard_sha256":{"type":"bool","description":"Set to true if you want to save only the sha256sum instead of complete dashboard model JSON in the tfstate.","description_kind":"markdown","optional":true},"tls_cert":{"type":"string","description":"Client TLS certificate (file path or literal value) to use to authenticate to the Grafana server. May alternatively be set via the `GRAFANA_TLS_CERT` environment variable.","description_kind":"markdown","optional":true},"tls_key":{"type":"string","description":"Client TLS key (file path or literal value) to use to authenticate to the Grafana server. May alternatively be set via the `GRAFANA_TLS_KEY` environment variable.","description_kind":"markdown","optional":true},"url":{"type":"string","description":"The root URL of a Grafana server. May alternatively be set via the `GRAFANA_URL` environment variable.","description_kind":"markdown","optional":true}},"description_kind":"plain"}},"resource_schemas":{"grafana_annotation":{"version":0,"block":{"attributes":{"dashboard_id":{"type":"number","description":"The ID of the dashboard on which to create the annotation. Deprecated: Use dashboard_uid instead.","description_kind":"markdown","deprecated":true,"optional":true},"dashboard_uid":{"type":"string","description":"The ID of the dashboard on which to create the annotation.","description_kind":"markdown","optional":true},"id":{"type":"string","description_kind":"plain","optional":true,"computed":true},"org_id":{"type":"string","description":"The Organization ID. If not set, the Org ID defined in the provider block will be used.","description_kind":"markdown","optional":true},"panel_id":{"type":"number","description":"The ID of the dashboard panel on which to create the annotation.","description_kind":"markdown","optional":true},"tags":{"type":["set","string"],"description":"The tags to associate with the annotation.","description_kind":"markdown","optional":true},"text":{"type":"string","description":"The text to associate with the annotation.","description_kind":"markdown","required":true},"time":{"type":"string","description":"The RFC 3339-formatted time string indicating the annotation's time.","description_kind":"markdown","optional":true,"computed":true},"time_end":{"type":"string","description":"The RFC 3339-formatted time string indicating the annotation's end time.","description_kind":"markdown","optional":true,"computed":true}},"description":"\n* [Official documentation](https://grafana.com/docs/grafana/latest/dashboards/build-dashboards/annotate-visualizations/)\n* [HTTP API](https://grafana.com/docs/grafana/latest/developers/http_api/annotations/)\n","description_kind":"markdown"}},"grafana_api_key":{"version":0,"block":{"attributes":{"expiration":{"type":"string","description_kind":"plain","computed":true},"id":{"type":"string","description_kind":"plain","computed":true},"key":{"type":"string","description_kind":"plain","computed":true,"sensitive":true},"name":{"type":"string","description_kind":"plain","required":true},"org_id":{"type":"string","description":"The Organization ID. If not set, the Org ID defined in the provider block will be used.","description_kind":"markdown","optional":true},"role":{"type":"string","description_kind":"plain","required":true},"seconds_to_live":{"type":"number","description_kind":"plain","optional":true}},"description":"\nManages Grafana API Keys.\n\n* [HTTP API](https://grafana.com/docs/grafana/latest/developers/http_api/auth/)\n\n!\u003e Deprecated: please use `grafana_service_account` and `grafana_service_account_token` instead, see [Migrate API keys to Grafana service accounts using Terraform](https://grafana.com/docs/grafana/latest/administration/api-keys/#migrate-api-keys-to-grafana-service-accounts-using-terraform) for more information.\n","description_kind":"markdown","deprecated":true}},"grafana_cloud_access_policy":{"version":0,"block":{"attributes":{"created_at":{"type":"string","description":"Creation date of the access policy.","description_kind":"markdown","computed":true},"display_name":{"type":"string","description":"Display name of the access policy. Defaults to the name.","description_kind":"markdown","optional":true},"id":{"type":"string","description_kind":"plain","optional":true,"computed":true},"name":{"type":"string","description":"Name of the access policy.","description_kind":"markdown","required":true},"policy_id":{"type":"string","description":"ID of the access policy.","description_kind":"markdown","computed":true},"region":{"type":"string","description":"Region where the API is deployed. Generally where the stack is deployed. Use the region list API to get the list of available regions: https://grafana.com/docs/grafana-cloud/developer-resources/api-reference/cloud-api/#list-regions.","description_kind":"markdown","required":true},"scopes":{"type":["set","string"],"description":"Scopes of the access policy. See https://grafana.com/docs/grafana-cloud/account-management/authentication-and-permissions/access-policies/#scopes for possible values.","description_kind":"markdown","required":true},"updated_at":{"type":"string","description":"Last update date of the access policy.","description_kind":"markdown","computed":true}},"block_types":{"realm":{"nesting_mode":"set","block":{"attributes":{"identifier":{"type":"string","description":"The identifier of the org or stack. For orgs, this is the slug, for stacks, this is the stack ID.","description_kind":"markdown","required":true},"type":{"type":"string","description":"Whether a policy applies to a Cloud org or a specific stack. Should be one of `org` or `stack`.","description_kind":"markdown","required":true}},"block_types":{"label_policy":{"nesting_mode":"set","block":{"attributes":{"selector":{"type":"string","description":"The label selector to match in metrics or logs query. Should be in PromQL or LogQL format.","description_kind":"markdown","required":true}},"description_kind":"plain"}}},"description_kind":"plain"},"min_items":1}},"description":"\n* [Official documentation](https://grafana.com/docs/grafana-cloud/account-management/authentication-and-permissions/access-policies/)\n* [API documentation](https://grafana.com/docs/grafana-cloud/developer-resources/api-reference/cloud-api/#create-an-access-policy)\n\nRequired access policy scopes:\n\n* accesspolicies:read\n* accesspolicies:write\n* accesspolicies:delete\n","description_kind":"markdown"}},"grafana_cloud_access_policy_token":{"version":0,"block":{"attributes":{"access_policy_id":{"type":"string","description":"ID of the access policy for which to create a token.","description_kind":"markdown","required":true},"created_at":{"type":"string","description":"Creation date of the access policy token.","description_kind":"markdown","computed":true},"display_name":{"type":"string","description":"Display name of the access policy token. Defaults to the name.","description_kind":"markdown","optional":true},"expires_at":{"type":"string","description":"Expiration date of the access policy token. Does not expire by default.","description_kind":"markdown","optional":true},"id":{"type":"string","description_kind":"plain","optional":true,"computed":true},"name":{"type":"string","description":"Name of the access policy token.","description_kind":"markdown","required":true},"region":{"type":"string","description":"Region of the access policy. Should be set to the same region as the access policy. Use the region list API to get the list of available regions: https://grafana.com/docs/grafana-cloud/developer-resources/api-reference/cloud-api/#list-regions.","description_kind":"markdown","required":true},"token":{"type":"string","description_kind":"plain","computed":true,"sensitive":true},"updated_at":{"type":"string","description":"Last update date of the access policy token.","description_kind":"markdown","computed":true}},"description":"\n* [Official documentation](https://grafana.com/docs/grafana-cloud/account-management/authentication-and-permissions/access-policies/)\n* [API documentation](https://grafana.com/docs/grafana-cloud/developer-resources/api-reference/cloud-api/#create-a-token)\n\nRequired access policy scopes:\n\n* accesspolicies:read\n* accesspolicies:write\n* accesspolicies:delete\n","description_kind":"markdown"}},"grafana_cloud_api_key":{"version":0,"block":{"attributes":{"cloud_org_slug":{"type":"string","description":"The slug of the organization to create the API key in. This is the same slug as the organization name in the URL.","description_kind":"markdown","required":true},"id":{"type":"string","description_kind":"plain","optional":true,"computed":true},"key":{"type":"string","description":"The generated API key.","description_kind":"markdown","computed":true,"sensitive":true},"name":{"type":"string","description":"Name of the API key.","description_kind":"markdown","required":true},"role":{"type":"string","description":"Role of the API key. Should be one of [Viewer Editor Admin MetricsPublisher PluginPublisher]. See https://grafana.com/docs/grafana-cloud/api/#create-api-key for details.","description_kind":"markdown","required":true}},"description":"This resource is deprecated and will be removed in a future release. Please use grafana_cloud_access_policy instead.\n\nManages a single API key on the Grafana Cloud portal (on the organization level)\n* [API documentation](https://grafana.com/docs/grafana-cloud/developer-resources/api-reference/cloud-api/#api-keys)\n\nRequired access policy scopes:\n\n* api-keys:read\n* api-keys:write\n* api-keys:delete\n","description_kind":"markdown","deprecated":true}},"grafana_cloud_org_member":{"version":0,"block":{"attributes":{"id":{"type":"string","description_kind":"plain","computed":true},"org":{"type":"string","description":"The slug or ID of the organization.","description_kind":"markdown","required":true},"receive_billing_emails":{"type":"bool","description":"Whether the user should receive billing emails.","description_kind":"markdown","optional":true,"computed":true},"role":{"type":"string","description":"The role to assign to the user in the organization.","description_kind":"markdown","required":true},"user":{"type":"string","description":"Username or ID of the user to add to the org's members.","description_kind":"markdown","required":true}},"description":"Manages the membership of a user in an organization.","description_kind":"markdown"}},"grafana_cloud_plugin_installation":{"version":0,"block":{"attributes":{"id":{"type":"string","description_kind":"plain","optional":true,"computed":true},"slug":{"type":"string","description":"Slug of the plugin to be installed.","description_kind":"markdown","required":true},"stack_slug":{"type":"string","description":"The stack id to which the plugin should be installed.","description_kind":"markdown","required":true},"version":{"type":"string","description":"Version of the plugin to be installed.","description_kind":"markdown","required":true}},"description":"\nManages Grafana Cloud Plugin Installations.\n\n* [Plugin Catalog](https://grafana.com/grafana/plugins/)\n\nRequired access policy scopes:\n\n* stack-plugins:read\n* stack-plugins:write\n* stack-plugins:delete\n","description_kind":"markdown"}},"grafana_cloud_stack":{"version":0,"block":{"attributes":{"alertmanager_name":{"type":"string","description":"Name of the Alertmanager instance configured for this stack.","description_kind":"markdown","computed":true},"alertmanager_status":{"type":"string","description":"Status of the Alertmanager instance configured for this stack.","description_kind":"markdown","computed":true},"alertmanager_url":{"type":"string","description":"Base URL of the Alertmanager instance configured for this stack.","description_kind":"markdown","computed":true},"alertmanager_user_id":{"type":"number","description":"User ID of the Alertmanager instance configured for this stack.","description_kind":"markdown","computed":true},"description":{"type":"string","description":"Description of stack.","description_kind":"markdown","optional":true},"graphite_name":{"type":"string","description_kind":"plain","computed":true},"graphite_status":{"type":"string","description_kind":"plain","computed":true},"graphite_url":{"type":"string","description_kind":"plain","computed":true},"graphite_user_id":{"type":"number","description_kind":"plain","computed":true},"id":{"type":"string","description":"The stack id assigned to this stack by Grafana.","description_kind":"markdown","computed":true},"labels":{"type":["map","string"],"description":"A map of labels to assign to the stack. Label keys and values must match the following regexp: \"^[a-zA-Z0-9/\\\\-.]+$\" and stacks cannot have more than 10 labels.","description_kind":"markdown","optional":true},"logs_name":{"type":"string","description_kind":"plain","computed":true},"logs_status":{"type":"string","description_kind":"plain","computed":true},"logs_url":{"type":"string","description_kind":"plain","computed":true},"logs_user_id":{"type":"number","description_kind":"plain","computed":true},"name":{"type":"string","description":"Name of stack. Conventionally matches the url of the instance (e.g. `\u003cstack_slug\u003e.grafana.net`).","description_kind":"markdown","required":true},"org_id":{"type":"number","description":"Organization id to assign to this stack.","description_kind":"markdown","computed":true},"org_name":{"type":"string","description":"Organization name to assign to this stack.","description_kind":"markdown","computed":true},"org_slug":{"type":"string","description":"Organization slug to assign to this stack.","description_kind":"markdown","computed":true},"otlp_url":{"type":"string","description":"Base URL of the OTLP instance configured for this stack. See https://grafana.com/docs/grafana-cloud/send-data/otlp/send-data-otlp/ for docs on how to use this.","description_kind":"markdown","computed":true},"profiles_name":{"type":"string","description_kind":"plain","computed":true},"profiles_status":{"type":"string","description_kind":"plain","computed":true},"profiles_url":{"type":"string","description_kind":"plain","computed":true},"profiles_user_id":{"type":"number","description_kind":"plain","computed":true},"prometheus_name":{"type":"string","description":"Prometheus name for this instance.","description_kind":"markdown","computed":true},"prometheus_remote_endpoint":{"type":"string","description":"Use this URL to query hosted metrics data e.g. Prometheus data source in Grafana","description_kind":"markdown","computed":true},"prometheus_remote_write_endpoint":{"type":"string","description":"Use this URL to send prometheus metrics to Grafana cloud","description_kind":"markdown","computed":true},"prometheus_status":{"type":"string","description":"Prometheus status for this instance.","description_kind":"markdown","computed":true},"prometheus_url":{"type":"string","description":"Prometheus url for this instance.","description_kind":"markdown","computed":true},"prometheus_user_id":{"type":"number","description":"Prometheus user ID. Used for e.g. remote_write.","description_kind":"markdown","computed":true},"region_slug":{"type":"string","description":"Region slug to assign to this stack. Changing region will destroy the existing stack and create a new one in the desired region. Use the region list API to get the list of available regions: https://grafana.com/docs/grafana-cloud/developer-resources/api-reference/cloud-api/#list-regions.","description_kind":"markdown","optional":true},"slug":{"type":"string","description":"Subdomain that the Grafana instance will be available at. Setting slug to `\u003cstack_slug\u003e` will make the instance available at `https://\u003cstack_slug\u003e.grafana.net`.","description_kind":"markdown","required":true},"status":{"type":"string","description":"Status of the stack.","description_kind":"markdown","computed":true},"traces_name":{"type":"string","description_kind":"plain","computed":true},"traces_status":{"type":"string","description_kind":"plain","computed":true},"traces_url":{"type":"string","description":"Base URL of the Traces instance configured for this stack. To use this in the Tempo data source in Grafana, append `/tempo` to the URL.","description_kind":"markdown","computed":true},"traces_user_id":{"type":"number","description_kind":"plain","computed":true},"url":{"type":"string","description":"Custom URL for the Grafana instance. Must have a CNAME setup to point to `.grafana.net` before creating the stack","description_kind":"markdown","optional":true},"wait_for_readiness":{"type":"bool","description":"Whether to wait for readiness of the stack after creating it. The check is a HEAD request to the stack URL (Grafana instance). Defaults to `true`.","description_kind":"markdown","optional":true},"wait_for_readiness_timeout":{"type":"string","description":"How long to wait for readiness (if enabled). Defaults to `5m0s`.","description_kind":"markdown","optional":true}},"description":"\n* [Official documentation](https://grafana.com/docs/grafana-cloud/developer-resources/api-reference/cloud-api/#stacks/)\n\nRequired access policy scopes:\n\n* stacks:read\n* stacks:write\n* stacks:delete\n","description_kind":"markdown"}},"grafana_cloud_stack_api_key":{"version":0,"block":{"attributes":{"expiration":{"type":"string","description_kind":"plain","computed":true},"id":{"type":"string","description_kind":"plain","computed":true},"key":{"type":"string","description_kind":"plain","computed":true,"sensitive":true},"name":{"type":"string","description_kind":"plain","required":true},"role":{"type":"string","description_kind":"plain","required":true},"seconds_to_live":{"type":"number","description_kind":"plain","optional":true},"stack_slug":{"type":"string","description_kind":"plain","required":true}},"description":"\nManages API keys of a Grafana Cloud stack using the Cloud API\nThis can be used to bootstrap a management API key for a new stack\n\n* [HTTP API](https://grafana.com/docs/grafana/latest/developers/http_api/auth/)\n\nRequired access policy scopes:\n\n* stack-api-keys:write\n\n!\u003e Deprecated: please use `grafana_cloud_stack_service_account` and `grafana_cloud_stack_service_account_token` instead, see https://grafana.com/docs/grafana/next/administration/api-keys/#migrate-api-keys-to-grafana-service-accounts-using-terraform.\n","description_kind":"markdown","deprecated":true}},"grafana_cloud_stack_service_account":{"version":0,"block":{"attributes":{"id":{"type":"string","description_kind":"plain","optional":true,"computed":true},"is_disabled":{"type":"bool","description":"The disabled status for the service account. Defaults to `false`.","description_kind":"markdown","optional":true},"name":{"type":"string","description":"The name of the service account.","description_kind":"markdown","required":true},"role":{"type":"string","description":"The basic role of the service account in the organization.","description_kind":"markdown","required":true},"stack_slug":{"type":"string","description_kind":"plain","required":true}},"description":"\nManages service accounts of a Grafana Cloud stack using the Cloud API\nThis can be used to bootstrap a management service account for a new stack\n\n* [Official documentation](https://grafana.com/docs/grafana/latest/administration/service-accounts/)\n* [HTTP API](https://grafana.com/docs/grafana/latest/developers/http_api/serviceaccount/#service-account-api)\n\nRequired access policy scopes:\n\n* stacks:read\n* stack-service-accounts:write\n","description_kind":"markdown"}},"grafana_cloud_stack_service_account_token":{"version":0,"block":{"attributes":{"expiration":{"type":"string","description_kind":"plain","computed":true},"has_expired":{"type":"bool","description_kind":"plain","computed":true},"id":{"type":"string","description_kind":"plain","optional":true,"computed":true},"key":{"type":"string","description_kind":"plain","computed":true,"sensitive":true},"name":{"type":"string","description_kind":"plain","required":true},"seconds_to_live":{"type":"number","description_kind":"plain","optional":true},"service_account_id":{"type":"string","description_kind":"plain","required":true},"stack_slug":{"type":"string","description_kind":"plain","required":true}},"description":"\nManages service account tokens of a Grafana Cloud stack using the Cloud API\nThis can be used to bootstrap a management service account token for a new stack\n\n* [Official documentation](https://grafana.com/docs/grafana/latest/administration/service-accounts/)\n* [HTTP API](https://grafana.com/docs/grafana/latest/developers/http_api/serviceaccount/#service-account-api)\n\nRequired access policy scopes:\n\n* stack-service-accounts:write\n","description_kind":"markdown"}},"grafana_contact_point":{"version":0,"block":{"attributes":{"disable_provenance":{"type":"bool","description":"Allow modifying the contact point from other sources than Terraform or the Grafana API. Defaults to `false`.","description_kind":"markdown","optional":true},"id":{"type":"string","description_kind":"plain","optional":true,"computed":true},"name":{"type":"string","description":"The name of the contact point.","description_kind":"markdown","required":true},"org_id":{"type":"string","description":"The Organization ID. If not set, the Org ID defined in the provider block will be used.","description_kind":"markdown","optional":true}},"block_types":{"alertmanager":{"nesting_mode":"set","block":{"attributes":{"basic_auth_password":{"type":"string","description":"The password component of the basic auth credentials to use.","description_kind":"markdown","optional":true,"sensitive":true},"basic_auth_user":{"type":"string","description":"The username component of the basic auth credentials to use.","description_kind":"markdown","optional":true},"disable_resolve_message":{"type":"bool","description":"Whether to disable sending resolve messages. Defaults to `false`.","description_kind":"markdown","optional":true},"settings":{"type":["map","string"],"description":"Additional custom properties to attach to the notifier. Defaults to `map[]`.","description_kind":"markdown","optional":true,"sensitive":true},"uid":{"type":"string","description":"The UID of the contact point.","description_kind":"markdown","computed":true},"url":{"type":"string","description":"The URL of the Alertmanager instance.","description_kind":"markdown","required":true}},"description":"A contact point that sends notifications to other Alertmanager instances.","description_kind":"markdown"}},"dingding":{"nesting_mode":"set","block":{"attributes":{"disable_resolve_message":{"type":"bool","description":"Whether to disable sending resolve messages. Defaults to `false`.","description_kind":"markdown","optional":true},"message":{"type":"string","description":"The templated content of the message.","description_kind":"markdown","optional":true},"message_type":{"type":"string","description":"The format of message to send - either 'link' or 'actionCard'","description_kind":"markdown","optional":true},"settings":{"type":["map","string"],"description":"Additional custom properties to attach to the notifier. Defaults to `map[]`.","description_kind":"markdown","optional":true,"sensitive":true},"title":{"type":"string","description":"The templated title of the message.","description_kind":"markdown","optional":true},"uid":{"type":"string","description":"The UID of the contact point.","description_kind":"markdown","computed":true},"url":{"type":"string","description":"The DingDing webhook URL.","description_kind":"markdown","required":true}},"description":"A contact point that sends notifications to DingDing.","description_kind":"markdown"}},"discord":{"nesting_mode":"set","block":{"attributes":{"avatar_url":{"type":"string","description":"The URL of a custom avatar image to use. Defaults to ``.","description_kind":"markdown","optional":true},"disable_resolve_message":{"type":"bool","description":"Whether to disable sending resolve messages. Defaults to `false`.","description_kind":"markdown","optional":true},"message":{"type":"string","description":"The templated content of the message. Defaults to ``.","description_kind":"markdown","optional":true},"settings":{"type":["map","string"],"description":"Additional custom properties to attach to the notifier. Defaults to `map[]`.","description_kind":"markdown","optional":true,"sensitive":true},"title":{"type":"string","description":"The templated content of the title.","description_kind":"markdown","optional":true},"uid":{"type":"string","description":"The UID of the contact point.","description_kind":"markdown","computed":true},"url":{"type":"string","description":"The discord webhook URL.","description_kind":"markdown","required":true,"sensitive":true},"use_discord_username":{"type":"bool","description":"Whether to use the bot account's plain username instead of \"Grafana.\" Defaults to `false`.","description_kind":"markdown","optional":true}},"description":"A contact point that sends notifications as Discord messages","description_kind":"markdown"}},"email":{"nesting_mode":"set","block":{"attributes":{"addresses":{"type":["list","string"],"description":"The addresses to send emails to.","description_kind":"markdown","required":true},"disable_resolve_message":{"type":"bool","description":"Whether to disable sending resolve messages. Defaults to `false`.","description_kind":"markdown","optional":true},"message":{"type":"string","description":"The templated content of the email. Defaults to ``.","description_kind":"markdown","optional":true},"settings":{"type":["map","string"],"description":"Additional custom properties to attach to the notifier. Defaults to `map[]`.","description_kind":"markdown","optional":true,"sensitive":true},"single_email":{"type":"bool","description":"Whether to send a single email CC'ing all addresses, rather than a separate email to each address. Defaults to `false`.","description_kind":"markdown","optional":true},"subject":{"type":"string","description":"The templated subject line of the email. Defaults to ``.","description_kind":"markdown","optional":true},"uid":{"type":"string","description":"The UID of the contact point.","description_kind":"markdown","computed":true}},"description":"A contact point that sends notifications to an email address.","description_kind":"markdown"}},"googlechat":{"nesting_mode":"set","block":{"attributes":{"disable_resolve_message":{"type":"bool","description":"Whether to disable sending resolve messages. Defaults to `false`.","description_kind":"markdown","optional":true},"message":{"type":"string","description":"The templated content of the message.","description_kind":"markdown","optional":true},"settings":{"type":["map","string"],"description":"Additional custom properties to attach to the notifier. Defaults to `map[]`.","description_kind":"markdown","optional":true,"sensitive":true},"title":{"type":"string","description":"The templated content of the title.","description_kind":"markdown","optional":true},"uid":{"type":"string","description":"The UID of the contact point.","description_kind":"markdown","computed":true},"url":{"type":"string","description":"The Google Chat webhook URL.","description_kind":"markdown","required":true,"sensitive":true}},"description":"A contact point that sends notifications to Google Chat.","description_kind":"markdown"}},"kafka":{"nesting_mode":"set","block":{"attributes":{"api_version":{"type":"string","description":"The API version to use when contacting the Kafka REST Server. Supported: v2 (default) and v3. Defaults to `v2`.","description_kind":"markdown","optional":true},"cluster_id":{"type":"string","description":"The Id of cluster to use when contacting the Kafka REST Server. Required api_version to be 'v3'","description_kind":"markdown","optional":true},"description":{"type":"string","description":"The templated description of the Kafka message.","description_kind":"markdown","optional":true},"details":{"type":"string","description":"The templated details to include with the message.","description_kind":"markdown","optional":true},"disable_resolve_message":{"type":"bool","description":"Whether to disable sending resolve messages. Defaults to `false`.","description_kind":"markdown","optional":true},"password":{"type":"string","description":"The password to use when making a call to the Kafka REST Proxy","description_kind":"markdown","optional":true,"sensitive":true},"rest_proxy_url":{"type":"string","description":"The URL of the Kafka REST proxy to send requests to.","description_kind":"markdown","required":true,"sensitive":true},"settings":{"type":["map","string"],"description":"Additional custom properties to attach to the notifier. Defaults to `map[]`.","description_kind":"markdown","optional":true,"sensitive":true},"topic":{"type":"string","description":"The name of the Kafka topic to publish to.","description_kind":"markdown","required":true},"uid":{"type":"string","description":"The UID of the contact point.","description_kind":"markdown","computed":true},"username":{"type":"string","description":"The user name to use when making a call to the Kafka REST Proxy","description_kind":"markdown","optional":true}},"description":"A contact point that publishes notifications to Apache Kafka topics.","description_kind":"markdown"}},"line":{"nesting_mode":"set","block":{"attributes":{"description":{"type":"string","description":"The templated description of the message.","description_kind":"markdown","optional":true},"disable_resolve_message":{"type":"bool","description":"Whether to disable sending resolve messages. Defaults to `false`.","description_kind":"markdown","optional":true},"settings":{"type":["map","string"],"description":"Additional custom properties to attach to the notifier. Defaults to `map[]`.","description_kind":"markdown","optional":true,"sensitive":true},"title":{"type":"string","description":"The templated title of the message.","description_kind":"markdown","optional":true},"token":{"type":"string","description":"The bearer token used to authorize the client.","description_kind":"markdown","required":true,"sensitive":true},"uid":{"type":"string","description":"The UID of the contact point.","description_kind":"markdown","computed":true}},"description":"A contact point that sends notifications to LINE.me.","description_kind":"markdown"}},"oncall":{"nesting_mode":"set","block":{"attributes":{"authorization_credentials":{"type":"string","description":"Allows a custom authorization scheme - attaches an auth header with this value. Do not use in conjunction with basic auth parameters.","description_kind":"markdown","optional":true,"sensitive":true},"authorization_scheme":{"type":"string","description":"Allows a custom authorization scheme - attaches an auth header with this name. Do not use in conjunction with basic auth parameters.","description_kind":"markdown","optional":true},"basic_auth_password":{"type":"string","description":"The username to use in basic auth headers attached to the request. If omitted, basic auth will not be used.","description_kind":"markdown","optional":true,"sensitive":true},"basic_auth_user":{"type":"string","description":"The username to use in basic auth headers attached to the request. If omitted, basic auth will not be used.","description_kind":"markdown","optional":true},"disable_resolve_message":{"type":"bool","description":"Whether to disable sending resolve messages. Defaults to `false`.","description_kind":"markdown","optional":true},"http_method":{"type":"string","description":"The HTTP method to use in the request. Defaults to `POST`.","description_kind":"markdown","optional":true},"max_alerts":{"type":"number","description":"The maximum number of alerts to send in a single request. This can be helpful in limiting the size of the request body. The default is 0, which indicates no limit.","description_kind":"markdown","optional":true},"message":{"type":"string","description":"Custom message. You can use template variables.","description_kind":"markdown","optional":true},"settings":{"type":["map","string"],"description":"Additional custom properties to attach to the notifier. Defaults to `map[]`.","description_kind":"markdown","optional":true,"sensitive":true},"title":{"type":"string","description":"Templated title of the message.","description_kind":"markdown","optional":true},"uid":{"type":"string","description":"The UID of the contact point.","description_kind":"markdown","computed":true},"url":{"type":"string","description":"The URL to send webhook requests to.","description_kind":"markdown","required":true}},"description":"A contact point that sends notifications to Grafana On-Call.","description_kind":"markdown"}},"opsgenie":{"nesting_mode":"set","block":{"attributes":{"api_key":{"type":"string","description":"The OpsGenie API key to use.","description_kind":"markdown","required":true,"sensitive":true},"auto_close":{"type":"bool","description":"Whether to auto-close alerts in OpsGenie when they resolve in the Alertmanager.","description_kind":"markdown","optional":true},"description":{"type":"string","description":"A templated high-level description to use for the alert.","description_kind":"markdown","optional":true},"disable_resolve_message":{"type":"bool","description":"Whether to disable sending resolve messages. Defaults to `false`.","description_kind":"markdown","optional":true},"message":{"type":"string","description":"The templated content of the message.","description_kind":"markdown","optional":true},"override_priority":{"type":"bool","description":"Whether to allow the alert priority to be configured via the value of the `og_priority` annotation on the alert.","description_kind":"markdown","optional":true},"send_tags_as":{"type":"string","description":"Whether to send annotations to OpsGenie as Tags, Details, or both. Supported values are `tags`, `details`, `both`, or empty to use the default behavior of Tags.","description_kind":"markdown","optional":true},"settings":{"type":["map","string"],"description":"Additional custom properties to attach to the notifier. Defaults to `map[]`.","description_kind":"markdown","optional":true,"sensitive":true},"uid":{"type":"string","description":"The UID of the contact point.","description_kind":"markdown","computed":true},"url":{"type":"string","description":"Allows customization of the OpsGenie API URL.","description_kind":"markdown","optional":true}},"block_types":{"responders":{"nesting_mode":"list","block":{"attributes":{"id":{"type":"string","description":"ID of the responder. Must be specified if name and username are empty.","description_kind":"markdown","optional":true},"name":{"type":"string","description":"Name of the responder. Must be specified if username and id are empty.","description_kind":"markdown","optional":true},"type":{"type":"string","description":"Type of the responder. Supported: team, teams, user, escalation, schedule or a template that is expanded to one of these values.","description_kind":"markdown","required":true},"username":{"type":"string","description":"User name of the responder. Must be specified if name and id are empty.","description_kind":"markdown","optional":true}},"description":"Teams, users, escalations and schedules that the alert will be routed to send notifications. If the API Key belongs to a team integration, this field will be overwritten with the owner team. This feature is available from Grafana 10.3+.","description_kind":"markdown"}}},"description":"A contact point that sends notifications to OpsGenie.","description_kind":"markdown"}},"pagerduty":{"nesting_mode":"set","block":{"attributes":{"class":{"type":"string","description":"The class or type of event, for example `ping failure`.","description_kind":"markdown","optional":true},"client":{"type":"string","description":"The name of the monitoring client that is triggering this event.","description_kind":"markdown","optional":true},"client_url":{"type":"string","description":"The URL of the monitoring client that is triggering this event.","description_kind":"markdown","optional":true},"component":{"type":"string","description":"The component being affected by the event.","description_kind":"markdown","optional":true},"details":{"type":["map","string"],"description":"A set of arbitrary key/value pairs that provide further detail about the incident.","description_kind":"markdown","optional":true},"disable_resolve_message":{"type":"bool","description":"Whether to disable sending resolve messages. Defaults to `false`.","description_kind":"markdown","optional":true},"group":{"type":"string","description":"The group to which the provided component belongs to.","description_kind":"markdown","optional":true},"integration_key":{"type":"string","description":"The PagerDuty API key.","description_kind":"markdown","required":true,"sensitive":true},"settings":{"type":["map","string"],"description":"Additional custom properties to attach to the notifier. Defaults to `map[]`.","description_kind":"markdown","optional":true,"sensitive":true},"severity":{"type":"string","description":"The PagerDuty event severity level. Default is `critical`.","description_kind":"markdown","optional":true},"source":{"type":"string","description":"The unique location of the affected system.","description_kind":"markdown","optional":true},"summary":{"type":"string","description":"The templated summary message of the event.","description_kind":"markdown","optional":true},"uid":{"type":"string","description":"The UID of the contact point.","description_kind":"markdown","computed":true}},"description":"A contact point that sends notifications to PagerDuty.","description_kind":"markdown"}},"pushover":{"nesting_mode":"set","block":{"attributes":{"api_token":{"type":"string","description":"The Pushover API token.","description_kind":"markdown","required":true,"sensitive":true},"device":{"type":"string","description":"Comma-separated list of devices to which the event is associated.","description_kind":"markdown","optional":true},"disable_resolve_message":{"type":"bool","description":"Whether to disable sending resolve messages. Defaults to `false`.","description_kind":"markdown","optional":true},"expire":{"type":"number","description":"How many seconds for which the notification will continue to be retried by Pushover.","description_kind":"markdown","optional":true},"message":{"type":"string","description":"The templated notification message content.","description_kind":"markdown","optional":true},"ok_priority":{"type":"number","description":"The priority level of the resolved event.","description_kind":"markdown","optional":true},"ok_sound":{"type":"string","description":"The sound associated with the resolved notification.","description_kind":"markdown","optional":true},"priority":{"type":"number","description":"The priority level of the event.","description_kind":"markdown","optional":true},"retry":{"type":"number","description":"How often, in seconds, the Pushover servers will send the same notification to the user.","description_kind":"markdown","optional":true},"settings":{"type":["map","string"],"description":"Additional custom properties to attach to the notifier. Defaults to `map[]`.","description_kind":"markdown","optional":true,"sensitive":true},"sound":{"type":"string","description":"The sound associated with the notification.","description_kind":"markdown","optional":true},"title":{"type":"string","description":"The templated title of the message.","description_kind":"markdown","optional":true},"uid":{"type":"string","description":"The UID of the contact point.","description_kind":"markdown","computed":true},"upload_image":{"type":"bool","description":"Whether to send images in the notification or not. Default is true. Requires Grafana to be configured to send images in notifications.","description_kind":"markdown","optional":true},"user_key":{"type":"string","description":"The Pushover user key.","description_kind":"markdown","required":true,"sensitive":true}},"description":"A contact point that sends notifications to Pushover.","description_kind":"markdown"}},"sensugo":{"nesting_mode":"set","block":{"attributes":{"api_key":{"type":"string","description":"The SensuGo API key.","description_kind":"markdown","required":true,"sensitive":true},"check":{"type":"string","description":"The SensuGo check to which the event should be routed.","description_kind":"markdown","optional":true},"disable_resolve_message":{"type":"bool","description":"Whether to disable sending resolve messages. Defaults to `false`.","description_kind":"markdown","optional":true},"entity":{"type":"string","description":"The entity being monitored.","description_kind":"markdown","optional":true},"handler":{"type":"string","description":"A custom handler to execute in addition to the check.","description_kind":"markdown","optional":true},"message":{"type":"string","description":"Templated message content describing the alert.","description_kind":"markdown","optional":true},"namespace":{"type":"string","description":"The namespace in which the check resides.","description_kind":"markdown","optional":true},"settings":{"type":["map","string"],"description":"Additional custom properties to attach to the notifier. Defaults to `map[]`.","description_kind":"markdown","optional":true,"sensitive":true},"uid":{"type":"string","description":"The UID of the contact point.","description_kind":"markdown","computed":true},"url":{"type":"string","description":"The SensuGo URL to send requests to.","description_kind":"markdown","required":true}},"description":"A contact point that sends notifications to SensuGo.","description_kind":"markdown"}},"slack":{"nesting_mode":"set","block":{"attributes":{"disable_resolve_message":{"type":"bool","description":"Whether to disable sending resolve messages. Defaults to `false`.","description_kind":"markdown","optional":true},"endpoint_url":{"type":"string","description":"Use this to override the Slack API endpoint URL to send requests to.","description_kind":"markdown","optional":true},"icon_emoji":{"type":"string","description":"The name of a Slack workspace emoji to use as the bot icon.","description_kind":"markdown","optional":true},"icon_url":{"type":"string","description":"A URL of an image to use as the bot icon.","description_kind":"markdown","optional":true},"mention_channel":{"type":"string","description":"Describes how to ping the slack channel that messages are being sent to. Options are `here` for an @here ping, `channel` for @channel, or empty for no ping.","description_kind":"markdown","optional":true},"mention_groups":{"type":"string","description":"Comma-separated list of groups to mention in the message.","description_kind":"markdown","optional":true},"mention_users":{"type":"string","description":"Comma-separated list of users to mention in the message.","description_kind":"markdown","optional":true},"recipient":{"type":"string","description":"Channel, private group, or IM channel (can be an encoded ID or a name) to send messages to.","description_kind":"markdown","optional":true},"settings":{"type":["map","string"],"description":"Additional custom properties to attach to the notifier. Defaults to `map[]`.","description_kind":"markdown","optional":true,"sensitive":true},"text":{"type":"string","description":"Templated content of the message.","description_kind":"markdown","optional":true},"title":{"type":"string","description":"Templated title of the message.","description_kind":"markdown","optional":true},"token":{"type":"string","description":"A Slack API token,for sending messages directly without the webhook method.","description_kind":"markdown","optional":true,"sensitive":true},"uid":{"type":"string","description":"The UID of the contact point.","description_kind":"markdown","computed":true},"url":{"type":"string","description":"A Slack webhook URL,for sending messages via the webhook method.","description_kind":"markdown","optional":true,"sensitive":true},"username":{"type":"string","description":"Username for the bot to use.","description_kind":"markdown","optional":true}},"description":"A contact point that sends notifications to Slack.","description_kind":"markdown"}},"sns":{"nesting_mode":"set","block":{"attributes":{"access_key":{"type":"string","description":"AWS access key ID used to authenticate with Amazon SNS.","description_kind":"markdown","optional":true,"sensitive":true},"assume_role_arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the role to assume to send notifications to Amazon SNS.","description_kind":"markdown","optional":true},"auth_provider":{"type":"string","description":"The authentication provider to use. Valid values are `default`, `arn` and `keys`. Default is `default`. Defaults to `default`.","description_kind":"markdown","optional":true},"body":{"type":"string","description_kind":"plain","optional":true},"disable_resolve_message":{"type":"bool","description":"Whether to disable sending resolve messages. Defaults to `false`.","description_kind":"markdown","optional":true},"external_id":{"type":"string","description":"The external ID to use when assuming the role.","description_kind":"markdown","optional":true},"message_format":{"type":"string","description":"The format of the message to send. Valid values are `text`, `body` and `json`. Default is `text`. Defaults to `text`.","description_kind":"markdown","optional":true},"secret_key":{"type":"string","description":"AWS secret access key used to authenticate with Amazon SNS.","description_kind":"markdown","optional":true,"sensitive":true},"settings":{"type":["map","string"],"description":"Additional custom properties to attach to the notifier. Defaults to `map[]`.","description_kind":"markdown","optional":true,"sensitive":true},"subject":{"type":"string","description_kind":"plain","optional":true},"topic":{"type":"string","description":"The Amazon SNS topic to send notifications to.","description_kind":"markdown","required":true},"uid":{"type":"string","description":"The UID of the contact point.","description_kind":"markdown","computed":true}},"description":"A contact point that sends notifications to Amazon SNS. Requires Amazon Managed Grafana.","description_kind":"markdown"}},"teams":{"nesting_mode":"set","block":{"attributes":{"disable_resolve_message":{"type":"bool","description":"Whether to disable sending resolve messages. Defaults to `false`.","description_kind":"markdown","optional":true},"message":{"type":"string","description":"The templated message content to send.","description_kind":"markdown","optional":true},"section_title":{"type":"string","description":"The templated subtitle for each message section.","description_kind":"markdown","optional":true},"settings":{"type":["map","string"],"description":"Additional custom properties to attach to the notifier. Defaults to `map[]`.","description_kind":"markdown","optional":true,"sensitive":true},"title":{"type":"string","description":"The templated title of the message.","description_kind":"markdown","optional":true},"uid":{"type":"string","description":"The UID of the contact point.","description_kind":"markdown","computed":true},"url":{"type":"string","description":"A Teams webhook URL.","description_kind":"markdown","required":true,"sensitive":true}},"description":"A contact point that sends notifications to Microsoft Teams.","description_kind":"markdown"}},"telegram":{"nesting_mode":"set","block":{"attributes":{"chat_id":{"type":"string","description":"The chat ID to send messages to.","description_kind":"markdown","required":true},"disable_notifications":{"type":"bool","description":"When set users will receive a notification with no sound.","description_kind":"markdown","optional":true},"disable_resolve_message":{"type":"bool","description":"Whether to disable sending resolve messages. Defaults to `false`.","description_kind":"markdown","optional":true},"disable_web_page_preview":{"type":"bool","description":"When set it disables link previews for links in the message.","description_kind":"markdown","optional":true},"message":{"type":"string","description":"The templated content of the message.","description_kind":"markdown","optional":true},"parse_mode":{"type":"string","description":"Mode for parsing entities in the message text. Supported: None, Markdown, MarkdownV2, and HTML. HTML is the default.","description_kind":"markdown","optional":true},"protect_content":{"type":"bool","description":"When set it protects the contents of the message from forwarding and saving.","description_kind":"markdown","optional":true},"settings":{"type":["map","string"],"description":"Additional custom properties to attach to the notifier. Defaults to `map[]`.","description_kind":"markdown","optional":true,"sensitive":true},"token":{"type":"string","description":"The Telegram bot token.","description_kind":"markdown","required":true,"sensitive":true},"uid":{"type":"string","description":"The UID of the contact point.","description_kind":"markdown","computed":true}},"description":"A contact point that sends notifications to Telegram.","description_kind":"markdown"}},"threema":{"nesting_mode":"set","block":{"attributes":{"api_secret":{"type":"string","description":"The Threema API key.","description_kind":"markdown","required":true,"sensitive":true},"description":{"type":"string","description":"The templated description of the message.","description_kind":"markdown","optional":true},"disable_resolve_message":{"type":"bool","description":"Whether to disable sending resolve messages. Defaults to `false`.","description_kind":"markdown","optional":true},"gateway_id":{"type":"string","description":"The Threema gateway ID.","description_kind":"markdown","required":true},"recipient_id":{"type":"string","description":"The ID of the recipient of the message.","description_kind":"markdown","required":true},"settings":{"type":["map","string"],"description":"Additional custom properties to attach to the notifier. Defaults to `map[]`.","description_kind":"markdown","optional":true,"sensitive":true},"title":{"type":"string","description":"The templated title of the message.","description_kind":"markdown","optional":true},"uid":{"type":"string","description":"The UID of the contact point.","description_kind":"markdown","computed":true}},"description":"A contact point that sends notifications to Threema.","description_kind":"markdown"}},"victorops":{"nesting_mode":"set","block":{"attributes":{"description":{"type":"string","description":"Templated description of the message.","description_kind":"markdown","optional":true},"disable_resolve_message":{"type":"bool","description":"Whether to disable sending resolve messages. Defaults to `false`.","description_kind":"markdown","optional":true},"message_type":{"type":"string","description":"The VictorOps alert state - typically either `CRITICAL` or `RECOVERY`.","description_kind":"markdown","optional":true},"settings":{"type":["map","string"],"description":"Additional custom properties to attach to the notifier. Defaults to `map[]`.","description_kind":"markdown","optional":true,"sensitive":true},"title":{"type":"string","description":"Templated title to display.","description_kind":"markdown","optional":true},"uid":{"type":"string","description":"The UID of the contact point.","description_kind":"markdown","computed":true},"url":{"type":"string","description":"The VictorOps webhook URL.","description_kind":"markdown","required":true}},"description":"A contact point that sends notifications to VictorOps (now known as Splunk OnCall).","description_kind":"markdown"}},"webex":{"nesting_mode":"set","block":{"attributes":{"api_url":{"type":"string","description":"The URL to send webhook requests to.","description_kind":"markdown","optional":true},"disable_resolve_message":{"type":"bool","description":"Whether to disable sending resolve messages. Defaults to `false`.","description_kind":"markdown","optional":true},"message":{"type":"string","description":"The templated title of the message to send.","description_kind":"markdown","optional":true},"room_id":{"type":"string","description":"ID of the Webex Teams room where to send the messages.","description_kind":"markdown","optional":true},"settings":{"type":["map","string"],"description":"Additional custom properties to attach to the notifier. Defaults to `map[]`.","description_kind":"markdown","optional":true,"sensitive":true},"token":{"type":"string","description":"The bearer token used to authorize the client.","description_kind":"markdown","optional":true,"sensitive":true},"uid":{"type":"string","description":"The UID of the contact point.","description_kind":"markdown","computed":true}},"description":"A contact point that sends notifications to Cisco Webex.","description_kind":"markdown"}},"webhook":{"nesting_mode":"set","block":{"attributes":{"authorization_credentials":{"type":"string","description":"Allows a custom authorization scheme - attaches an auth header with this value. Do not use in conjunction with basic auth parameters.","description_kind":"markdown","optional":true,"sensitive":true},"authorization_scheme":{"type":"string","description":"Allows a custom authorization scheme - attaches an auth header with this name. Do not use in conjunction with basic auth parameters.","description_kind":"markdown","optional":true},"basic_auth_password":{"type":"string","description":"The username to use in basic auth headers attached to the request. If omitted, basic auth will not be used.","description_kind":"markdown","optional":true,"sensitive":true},"basic_auth_user":{"type":"string","description":"The username to use in basic auth headers attached to the request. If omitted, basic auth will not be used.","description_kind":"markdown","optional":true},"disable_resolve_message":{"type":"bool","description":"Whether to disable sending resolve messages. Defaults to `false`.","description_kind":"markdown","optional":true},"http_method":{"type":"string","description":"The HTTP method to use in the request. Defaults to `POST`.","description_kind":"markdown","optional":true},"max_alerts":{"type":"number","description":"The maximum number of alerts to send in a single request. This can be helpful in limiting the size of the request body. The default is 0, which indicates no limit.","description_kind":"markdown","optional":true},"message":{"type":"string","description":"Custom message. You can use template variables.","description_kind":"markdown","optional":true},"settings":{"type":["map","string"],"description":"Additional custom properties to attach to the notifier. Defaults to `map[]`.","description_kind":"markdown","optional":true,"sensitive":true},"title":{"type":"string","description":"Templated title of the message.","description_kind":"markdown","optional":true},"uid":{"type":"string","description":"The UID of the contact point.","description_kind":"markdown","computed":true},"url":{"type":"string","description":"The URL to send webhook requests to.","description_kind":"markdown","required":true}},"description":"A contact point that sends notifications to an arbitrary webhook, using the Prometheus webhook format defined here: https://prometheus.io/docs/alerting/latest/configuration/#webhook_config","description_kind":"markdown"}},"wecom":{"nesting_mode":"set","block":{"attributes":{"agent_id":{"type":"string","description":"Agent ID added to the request payload when using APIAPP.","description_kind":"markdown","optional":true},"corp_id":{"type":"string","description":"Corp ID used to get token when using APIAPP.","description_kind":"markdown","optional":true},"disable_resolve_message":{"type":"bool","description":"Whether to disable sending resolve messages. Defaults to `false`.","description_kind":"markdown","optional":true},"message":{"type":"string","description":"The templated content of the message to send.","description_kind":"markdown","optional":true},"msg_type":{"type":"string","description":"The type of them message. Supported: markdown, text. Default: text.","description_kind":"markdown","optional":true},"secret":{"type":"string","description":"The secret key required to obtain access token when using APIAPP. See https://work.weixin.qq.com/wework_admin/frame#apps to create APIAPP.","description_kind":"markdown","optional":true,"sensitive":true},"settings":{"type":["map","string"],"description":"Additional custom properties to attach to the notifier. Defaults to `map[]`.","description_kind":"markdown","optional":true,"sensitive":true},"title":{"type":"string","description":"The templated title of the message to send.","description_kind":"markdown","optional":true},"to_user":{"type":"string","description":"The ID of user that should receive the message. Multiple entries should be separated by '|'. Default: @all.","description_kind":"markdown","optional":true},"uid":{"type":"string","description":"The UID of the contact point.","description_kind":"markdown","computed":true},"url":{"type":"string","description":"The WeCom webhook URL. Required if using GroupRobot.","description_kind":"markdown","optional":true,"sensitive":true}},"description":"A contact point that sends notifications to WeCom.","description_kind":"markdown"}}},"description":"\nManages Grafana Alerting contact points.\n\n* [Official documentation](https://grafana.com/docs/grafana/next/alerting/fundamentals/notifications/contact-points/)\n* [HTTP API](https://grafana.com/docs/grafana/latest/developers/http_api/alerting_provisioning/#contact-points)\n\nThis resource requires Grafana 9.1.0 or later.\n","description_kind":"markdown"}},"grafana_dashboard":{"version":1,"block":{"attributes":{"config_json":{"type":"string","description":"The complete dashboard model JSON.","description_kind":"markdown","required":true},"dashboard_id":{"type":"number","description":"The numeric ID of the dashboard computed by Grafana.","description_kind":"markdown","computed":true},"folder":{"type":"string","description":"The id or UID of the folder to save the dashboard in.","description_kind":"markdown","optional":true},"id":{"type":"string","description_kind":"plain","optional":true,"computed":true},"message":{"type":"string","description":"Set a commit message for the version history.","description_kind":"markdown","optional":true},"org_id":{"type":"string","description":"The Organization ID. If not set, the Org ID defined in the provider block will be used.","description_kind":"markdown","optional":true},"overwrite":{"type":"bool","description":"Set to true if you want to overwrite existing dashboard with newer version, same dashboard title in folder or same dashboard uid.","description_kind":"markdown","optional":true},"uid":{"type":"string","description":"The unique identifier of a dashboard. This is used to construct its URL. It's automatically generated if not provided when creating a dashboard. The uid allows having consistent URLs for accessing dashboards and when syncing dashboards between multiple Grafana installs.","description_kind":"markdown","computed":true},"url":{"type":"string","description":"The full URL of the dashboard.","description_kind":"markdown","computed":true},"version":{"type":"number","description":"Whenever you save a version of your dashboard, a copy of that version is saved so that previous versions of your dashboard are not lost.","description_kind":"markdown","computed":true}},"description":"\nManages Grafana dashboards.\n\n* [Official documentation](https://grafana.com/docs/grafana/latest/dashboards/)\n* [HTTP API](https://grafana.com/docs/grafana/latest/developers/http_api/dashboard/)\n","description_kind":"markdown"}},"grafana_dashboard_permission":{"version":0,"block":{"attributes":{"dashboard_id":{"type":"number","description":"ID of the dashboard to apply permissions to. Deprecated: use `dashboard_uid` instead.","description_kind":"markdown","deprecated":true,"optional":true,"computed":true},"dashboard_uid":{"type":"string","description":"UID of the dashboard to apply permissions to.","description_kind":"markdown","optional":true,"computed":true},"id":{"type":"string","description_kind":"plain","optional":true,"computed":true},"org_id":{"type":"string","description":"The Organization ID. If not set, the Org ID defined in the provider block will be used.","description_kind":"markdown","optional":true}},"block_types":{"permissions":{"nesting_mode":"set","block":{"attributes":{"permission":{"type":"string","description":"Permission to associate with item. Must be one of `View`, `Edit`, or `Admin`.","description_kind":"markdown","required":true},"role":{"type":"string","description":"Manage permissions for `Viewer` or `Editor` roles.","description_kind":"markdown","optional":true},"team_id":{"type":"string","description":"ID of the team to manage permissions for. Defaults to `0`.","description_kind":"markdown","optional":true},"user_id":{"type":"string","description":"ID of the user or service account to manage permissions for. Defaults to `0`.","description_kind":"markdown","optional":true}},"description":"The permission items to add/update. Items that are omitted from the list will be removed.","description_kind":"markdown"}}},"description":"\nManages the entire set of permissions for a dashboard. Permissions that aren't specified when applying this resource will be removed.\n* [Official documentation](https://grafana.com/docs/grafana/latest/administration/roles-and-permissions/access-control/)\n* [HTTP API](https://grafana.com/docs/grafana/latest/developers/http_api/dashboard_permissions/)\n","description_kind":"markdown"}},"grafana_dashboard_public":{"version":0,"block":{"attributes":{"access_token":{"type":"string","description":"A public unique identifier of a public dashboard. This is used to construct its URL. It's automatically generated if not provided when creating a public dashboard.","description_kind":"markdown","optional":true,"computed":true},"annotations_enabled":{"type":"bool","description":"Set to `true` to show annotations. The default value is `false`.","description_kind":"markdown","optional":true},"dashboard_uid":{"type":"string","description":"The unique identifier of the original dashboard.","description_kind":"markdown","required":true},"id":{"type":"string","description_kind":"plain","optional":true,"computed":true},"is_enabled":{"type":"bool","description":"Set to `true` to enable the public dashboard. The default value is `false`.","description_kind":"markdown","optional":true},"org_id":{"type":"string","description":"The Organization ID. If not set, the Org ID defined in the provider block will be used.","description_kind":"markdown","optional":true},"share":{"type":"string","description":"Set the share mode. The default value is `public`.","description_kind":"markdown","optional":true},"time_selection_enabled":{"type":"bool","description":"Set to `true` to enable the time picker in the public dashboard. The default value is `false`.","description_kind":"markdown","optional":true},"uid":{"type":"string","description":"The unique identifier of a public dashboard. It's automatically generated if not provided when creating a public dashboard.","description_kind":"markdown","optional":true,"computed":true}},"description":"\nManages Grafana public dashboards.\n\n**Note:** This resource is available only with Grafana 10.2+.\n\n* [Official documentation](https://grafana.com/docs/grafana/latest/dashboards/dashboard-public/)\n* [HTTP API](https://grafana.com/docs/grafana/next/developers/http_api/dashboard_public/)\n","description_kind":"markdown"}},"grafana_data_source":{"version":1,"block":{"attributes":{"access_mode":{"type":"string","description":"The method by which Grafana will access the data source: `proxy` or `direct`. Defaults to `proxy`.","description_kind":"markdown","optional":true},"basic_auth_enabled":{"type":"bool","description":"Whether to enable basic auth for the data source. Defaults to `false`.","description_kind":"markdown","optional":true},"basic_auth_username":{"type":"string","description":"Basic auth username. Defaults to ``.","description_kind":"markdown","optional":true},"database_name":{"type":"string","description":"(Required by some data source types) The name of the database to use on the selected data source server. Defaults to ``.","description_kind":"markdown","optional":true},"http_headers":{"type":["map","string"],"description":"Custom HTTP headers","description_kind":"markdown","optional":true,"sensitive":true},"id":{"type":"string","description_kind":"plain","optional":true,"computed":true},"is_default":{"type":"bool","description":"Whether to set the data source as default. This should only be `true` to a single data source. Defaults to `false`.","description_kind":"markdown","optional":true},"json_data_encoded":{"type":"string","description":"Serialized JSON string containing the json data. This attribute can be used to pass configuration options to the data source. To figure out what options a datasource has available, see its docs or inspect the network data when saving it from the Grafana UI. Note that keys in this map are usually camelCased.","description_kind":"markdown","optional":true},"name":{"type":"string","description":"A unique name for the data source.","description_kind":"markdown","required":true},"org_id":{"type":"string","description":"The Organization ID. If not set, the Org ID defined in the provider block will be used.","description_kind":"markdown","optional":true},"secure_json_data_encoded":{"type":"string","description":"Serialized JSON string containing the secure json data. This attribute can be used to pass secure configuration options to the data source. To figure out what options a datasource has available, see its docs or inspect the network data when saving it from the Grafana UI. Note that keys in this map are usually camelCased.","description_kind":"markdown","optional":true,"sensitive":true},"type":{"type":"string","description":"The data source type. Must be one of the supported data source keywords.","description_kind":"markdown","required":true},"uid":{"type":"string","description":"Unique identifier. If unset, this will be automatically generated.","description_kind":"markdown","optional":true,"computed":true},"url":{"type":"string","description":"The URL for the data source. The type of URL required varies depending on the chosen data source type.","description_kind":"markdown","optional":true},"username":{"type":"string","description":"(Required by some data source types) The username to use to authenticate to the data source. Defaults to ``.","description_kind":"markdown","optional":true}},"description":"\n* [Official documentation](https://grafana.com/docs/grafana/latest/datasources/)\n* [HTTP API](https://grafana.com/docs/grafana/latest/developers/http_api/data_source/)\n\nThe required arguments for this resource vary depending on the type of data\nsource selected (via the 'type' argument).\n","description_kind":"markdown"}},"grafana_data_source_config":{"version":0,"block":{"attributes":{"http_headers":{"type":["map","string"],"description":"Custom HTTP headers","description_kind":"markdown","optional":true,"sensitive":true},"id":{"type":"string","description_kind":"plain","optional":true,"computed":true},"json_data_encoded":{"type":"string","description":"Serialized JSON string containing the json data. This attribute can be used to pass configuration options to the data source. To figure out what options a datasource has available, see its docs or inspect the network data when saving it from the Grafana UI. Note that keys in this map are usually camelCased.","description_kind":"markdown","optional":true},"org_id":{"type":"string","description":"The Organization ID. If not set, the Org ID defined in the provider block will be used.","description_kind":"markdown","optional":true},"secure_json_data_encoded":{"type":"string","description":"Serialized JSON string containing the secure json data. This attribute can be used to pass secure configuration options to the data source. To figure out what options a datasource has available, see its docs or inspect the network data when saving it from the Grafana UI. Note that keys in this map are usually camelCased.","description_kind":"markdown","optional":true,"sensitive":true},"uid":{"type":"string","description":"Unique identifier. If unset, this will be automatically generated.","description_kind":"markdown","optional":true,"computed":true}},"description":"* [Official documentation](https://grafana.com/docs/grafana/latest/datasources/)\n* [HTTP API](https://grafana.com/docs/grafana/latest/developers/http_api/data_source/)\n\nThe required arguments for this resource vary depending on the type of data\nsource selected (via the 'type' argument).\n\nUse this resource for configuring multiple datasources, when that configuration (`json_data_encoded` field) requires circular references like in the example below.\n\n\u003e When using the `grafana_data_source_config` resource, the corresponding `grafana_data_source` resources must have the `json_data_encoded` and `http_headers` fields ignored. Otherwise, an infinite update loop will occur. See the example below.\n","description_kind":"markdown"}},"grafana_data_source_permission":{"version":0,"block":{"attributes":{"datasource_id":{"type":"string","description":"Deprecated: Use `datasource_uid` instead.","description_kind":"markdown","deprecated":true,"optional":true},"datasource_uid":{"type":"string","description":"UID of the datasource to apply permissions to.","description_kind":"markdown","optional":true},"id":{"type":"string","description_kind":"plain","optional":true,"computed":true},"org_id":{"type":"string","description":"The Organization ID. If not set, the Org ID defined in the provider block will be used.","description_kind":"markdown","optional":true}},"block_types":{"permissions":{"nesting_mode":"set","block":{"attributes":{"built_in_role":{"type":"string","description":"Name of the basic role to manage permissions for. Options: `Viewer`, `Editor` or `Admin`. Can only be set from Grafana v9.2.3+. Defaults to ``.","description_kind":"markdown","optional":true},"permission":{"type":"string","description":"Permission to associate with item. Options: `Query`, `Edit` or `Admin` (`Admin` can only be used with Grafana v10.3.0+).","description_kind":"markdown","required":true},"team_id":{"type":"string","description":"ID of the team to manage permissions for. Defaults to `0`.","description_kind":"markdown","optional":true},"user_id":{"type":"string","description":"ID of the user or service account to manage permissions for. Defaults to `0`.","description_kind":"markdown","optional":true}},"description":"The permission items to add/update. Items that are omitted from the list will be removed.","description_kind":"markdown"}}},"description":"\nManages the entire set of permissions for a datasource. Permissions that aren't specified when applying this resource will be removed.\n* [HTTP API](https://grafana.com/docs/grafana/latest/developers/http_api/datasource_permissions/)\n","description_kind":"markdown"}},"grafana_folder":{"version":0,"block":{"attributes":{"id":{"type":"string","description_kind":"plain","optional":true,"computed":true},"org_id":{"type":"string","description":"The Organization ID. If not set, the Org ID defined in the provider block will be used.","description_kind":"markdown","optional":true},"parent_folder_uid":{"type":"string","description":"The uid of the parent folder. If set, the folder will be nested. If not set, the folder will be created in the root folder. Note: This requires the nestedFolders feature flag to be enabled on your Grafana instance.","description_kind":"markdown","optional":true},"prevent_destroy_if_not_empty":{"type":"bool","description":"Prevent deletion of the folder if it is not empty (contains dashboards or alert rules). Defaults to `false`.","description_kind":"markdown","optional":true},"title":{"type":"string","description":"The title of the folder.","description_kind":"markdown","required":true},"uid":{"type":"string","description":"Unique identifier.","description_kind":"markdown","optional":true,"computed":true},"url":{"type":"string","description":"The full URL of the folder.","description_kind":"markdown","computed":true}},"description":"\n* [Official documentation](https://grafana.com/docs/grafana/latest/dashboards/manage-dashboards/)\n* [HTTP API](https://grafana.com/docs/grafana/latest/developers/http_api/folder/)\n","description_kind":"markdown"}},"grafana_folder_permission":{"version":0,"block":{"attributes":{"folder_uid":{"type":"string","description":"The UID of the folder.","description_kind":"markdown","required":true},"id":{"type":"string","description_kind":"plain","optional":true,"computed":true},"org_id":{"type":"string","description":"The Organization ID. If not set, the Org ID defined in the provider block will be used.","description_kind":"markdown","optional":true}},"block_types":{"permissions":{"nesting_mode":"set","block":{"attributes":{"permission":{"type":"string","description":"Permission to associate with item. Must be one of `View`, `Edit`, or `Admin`.","description_kind":"markdown","required":true},"role":{"type":"string","description":"Manage permissions for `Viewer` or `Editor` roles.","description_kind":"markdown","optional":true},"team_id":{"type":"string","description":"ID of the team to manage permissions for. Defaults to `0`.","description_kind":"markdown","optional":true},"user_id":{"type":"string","description":"ID of the user or service account to manage permissions for. Defaults to `0`.","description_kind":"markdown","optional":true}},"description":"The permission items to add/update. Items that are omitted from the list will be removed.","description_kind":"markdown"}}},"description":"\nManages the entire set of permissions for a folder. Permissions that aren't specified when applying this resource will be removed.\n* [Official documentation](https://grafana.com/docs/grafana/latest/administration/roles-and-permissions/access-control/)\n* [HTTP API](https://grafana.com/docs/grafana/latest/developers/http_api/folder_permissions/)\n","description_kind":"markdown"}},"grafana_library_panel":{"version":0,"block":{"attributes":{"created":{"type":"string","description":"Timestamp when the library panel was created.","description_kind":"markdown","computed":true},"dashboard_ids":{"type":["list","number"],"description":"Numerical IDs of Grafana dashboards containing the library panel.","description_kind":"markdown","computed":true},"description":{"type":"string","description":"Description of the library panel.","description_kind":"markdown","computed":true},"folder_id":{"type":"string","description":"Deprecated. Use `folder_uid` instead","description_kind":"markdown","deprecated":true,"optional":true},"folder_name":{"type":"string","description":"Name of the folder containing the library panel.","description_kind":"markdown","computed":true},"folder_uid":{"type":"string","description":"Unique ID (UID) of the folder containing the library panel.","description_kind":"markdown","optional":true},"id":{"type":"string","description_kind":"plain","optional":true,"computed":true},"model_json":{"type":"string","description":"The JSON model for the library panel.","description_kind":"markdown","required":true},"name":{"type":"string","description":"Name of the library panel.","description_kind":"markdown","required":true},"org_id":{"type":"string","description":"The Organization ID. If not set, the Org ID defined in the provider block will be used.","description_kind":"markdown","optional":true},"panel_id":{"type":"number","description":"The numeric ID of the library panel computed by Grafana.","description_kind":"markdown","computed":true},"type":{"type":"string","description":"Type of the library panel (eg. text).","description_kind":"markdown","computed":true},"uid":{"type":"string","description":"The unique identifier (UID) of a library panel uniquely identifies library panels between multiple Grafana installs. It’s automatically generated unless you specify it during library panel creation.The UID provides consistent URLs for accessing library panels and when syncing library panels between multiple Grafana installs.","description_kind":"markdown","optional":true,"computed":true},"updated":{"type":"string","description":"Timestamp when the library panel was last modified.","description_kind":"markdown","computed":true},"version":{"type":"number","description":"Version of the library panel.","description_kind":"markdown","computed":true}},"description":"\nManages Grafana library panels.\n\n* [Official documentation](https://grafana.com/docs/grafana/latest/dashboards/build-dashboards/manage-library-panels/)\n* [HTTP API](https://grafana.com/docs/grafana/latest/developers/http_api/library_element/)\n","description_kind":"markdown"}},"grafana_machine_learning_holiday":{"version":0,"block":{"attributes":{"description":{"type":"string","description":"A description of the holiday.","description_kind":"markdown","optional":true},"ical_timezone":{"type":"string","description":"The timezone to use for events in the iCal file pointed to by ical_url.","description_kind":"markdown","optional":true},"ical_url":{"type":"string","description":"A URL to an iCal file containing all occurrences of the holiday.","description_kind":"markdown","optional":true},"id":{"type":"string","description":"The ID of the holiday.","description_kind":"markdown","computed":true},"name":{"type":"string","description":"The name of the holiday.","description_kind":"markdown","required":true}},"block_types":{"custom_periods":{"nesting_mode":"list","block":{"attributes":{"end_time":{"type":"string","description_kind":"plain","required":true},"name":{"type":"string","description":"The name of the custom period.","description_kind":"markdown","optional":true},"start_time":{"type":"string","description_kind":"plain","required":true}},"description":"A list of custom periods for the holiday.","description_kind":"markdown"}}},"description":"\nA holiday describes time periods where a time series is expected to behave differently to normal.\n\nTo use a holiday in a job, use its id in the `holidays` attribute of a `grafana_machine_learning_job`:\n\n```terraform\nresource \"grafana_machine_learning_job\" \"test_job\" {\n ...\n holidays = [\n grafana_machine_learning_holiday.my_holiday.id\n ]\n}\n```","description_kind":"markdown"}},"grafana_machine_learning_job":{"version":0,"block":{"attributes":{"custom_labels":{"type":["map","string"],"description":"An object representing the custom labels added on the forecast.","description_kind":"markdown","optional":true},"datasource_id":{"type":"number","description":"The id of the datasource to query.","description_kind":"markdown","deprecated":true,"optional":true},"datasource_type":{"type":"string","description":"The type of datasource being queried. Currently allowed values are prometheus, graphite, loki, postgres, and datadog.","description_kind":"markdown","required":true},"datasource_uid":{"type":"string","description":"The uid of the datasource to query.","description_kind":"markdown","optional":true},"description":{"type":"string","description":"A description of the job.","description_kind":"markdown","optional":true},"holidays":{"type":["list","string"],"description":"A list of holiday IDs or names to take into account when training the model.","description_kind":"markdown","optional":true},"hyper_params":{"type":["map","string"],"description":"The hyperparameters used to fine tune the algorithm. See https://grafana.com/docs/grafana-cloud/machine-learning/models/ for the full list of available hyperparameters. Defaults to `map[]`.","description_kind":"markdown","optional":true},"id":{"type":"string","description":"The ID of the job.","description_kind":"markdown","computed":true},"interval":{"type":"number","description":"The data interval in seconds to train the data on. Defaults to `300`.","description_kind":"markdown","optional":true},"metric":{"type":"string","description":"The metric used to query the job results.","description_kind":"markdown","required":true},"name":{"type":"string","description":"The name of the job.","description_kind":"markdown","required":true},"query_params":{"type":["map","string"],"description":"An object representing the query params to query Grafana with.","description_kind":"markdown","required":true},"training_window":{"type":"number","description":"The data interval in seconds to train the data on. Defaults to `7776000`.","description_kind":"markdown","optional":true}},"description":"\nA job defines the queries and model parameters for a machine learning task.\n","description_kind":"markdown"}},"grafana_machine_learning_outlier_detector":{"version":0,"block":{"attributes":{"datasource_id":{"type":"number","description":"The id of the datasource to query.","description_kind":"markdown","deprecated":true,"optional":true},"datasource_type":{"type":"string","description":"The type of datasource being queried. Currently allowed values are prometheus, graphite, loki, postgres, and datadog.","description_kind":"markdown","required":true},"datasource_uid":{"type":"string","description":"The uid of the datasource to query.","description_kind":"markdown","optional":true},"description":{"type":"string","description":"A description of the outlier detector.","description_kind":"markdown","optional":true},"id":{"type":"string","description":"The ID of the outlier detector.","description_kind":"markdown","computed":true},"interval":{"type":"number","description":"The data interval in seconds to monitor. Defaults to `300`.","description_kind":"markdown","optional":true},"metric":{"type":"string","description":"The metric used to query the outlier detector results.","description_kind":"markdown","required":true},"name":{"type":"string","description":"The name of the outlier detector.","description_kind":"markdown","required":true},"query_params":{"type":["map","string"],"description":"An object representing the query params to query Grafana with.","description_kind":"markdown","required":true}},"block_types":{"algorithm":{"nesting_mode":"set","block":{"attributes":{"name":{"type":"string","description":"The name of the algorithm to use ('mad' or 'dbscan').","description_kind":"markdown","required":true},"sensitivity":{"type":"number","description":"Specify the sensitivity of the detector (in range [0,1]).","description_kind":"markdown","required":true}},"block_types":{"config":{"nesting_mode":"set","block":{"attributes":{"epsilon":{"type":"number","description":"Specify the epsilon parameter (positive float)","description_kind":"markdown","required":true}},"description":"For DBSCAN only, specify the configuration map","description_kind":"markdown"},"max_items":1}},"description":"The algorithm to use and its configuration. See https://grafana.com/docs/grafana-cloud/machine-learning/outlier-detection/ for details.","description_kind":"markdown"},"min_items":1,"max_items":1}},"description":"\nAn outlier detector monitors the results of a query and reports when its values are outside normal bands.\n\nThe normal band is configured by choice of algorithm, its sensitivity and other configuration.\n\nVisit https://grafana.com/docs/grafana-cloud/machine-learning/outlier-detection/ for more details.\n","description_kind":"markdown"}},"grafana_message_template":{"version":0,"block":{"attributes":{"disable_provenance":{"type":"bool","description":"Allow modifying the message template from other sources than Terraform or the Grafana API. Defaults to `false`.","description_kind":"markdown","optional":true},"id":{"type":"string","description_kind":"plain","optional":true,"computed":true},"name":{"type":"string","description":"The name of the message template.","description_kind":"markdown","required":true},"org_id":{"type":"string","description":"The Organization ID. If not set, the Org ID defined in the provider block will be used.","description_kind":"markdown","optional":true},"template":{"type":"string","description":"The content of the message template.","description_kind":"markdown","required":true}},"description":"\nManages Grafana Alerting message templates.\n\n* [Official documentation](https://grafana.com/docs/grafana/latest/alerting/manage-notifications/template-notifications/create-notification-templates/)\n* [HTTP API](https://grafana.com/docs/grafana/next/developers/http_api/alerting_provisioning/#templates)\n\nThis resource requires Grafana 9.1.0 or later.\n","description_kind":"markdown"}},"grafana_mute_timing":{"version":0,"block":{"attributes":{"disable_provenance":{"type":"bool","description":"Allow modifying the mute timing from other sources than Terraform or the Grafana API. Defaults to `false`.","description_kind":"markdown","optional":true},"id":{"type":"string","description_kind":"plain","optional":true,"computed":true},"name":{"type":"string","description":"The name of the mute timing.","description_kind":"markdown","required":true},"org_id":{"type":"string","description":"The Organization ID. If not set, the Org ID defined in the provider block will be used.","description_kind":"markdown","optional":true}},"block_types":{"intervals":{"nesting_mode":"list","block":{"attributes":{"days_of_month":{"type":["list","string"],"description":"An inclusive range of days, 1-31, within a month, e.g. \"1\" or \"14:16\". Negative values can be used to represent days counting from the end of a month, e.g. \"-1\".","description_kind":"markdown","optional":true},"location":{"type":"string","description":"Provides the time zone for the time interval. Must be a location in the IANA time zone database, e.g \"America/New_York\"","description_kind":"markdown","optional":true},"months":{"type":["list","string"],"description":"An inclusive range of months, either numerical or full calendar month, e.g. \"1:3\", \"december\", or \"may:august\".","description_kind":"markdown","optional":true},"weekdays":{"type":["list","string"],"description":"An inclusive range of weekdays, e.g. \"monday\" or \"tuesday:thursday\".","description_kind":"markdown","optional":true},"years":{"type":["list","string"],"description":"A positive inclusive range of years, e.g. \"2030\" or \"2025:2026\".","description_kind":"markdown","optional":true}},"block_types":{"times":{"nesting_mode":"list","block":{"attributes":{"end":{"type":"string","description":"The time, in hh:mm format, of when the interval should end exclusively.","description_kind":"markdown","required":true},"start":{"type":"string","description":"The time, in hh:mm format, of when the interval should begin inclusively.","description_kind":"markdown","required":true}},"description":"The time ranges, represented in minutes, during which to mute in a given day.","description_kind":"markdown"}}},"description":"The time intervals at which to mute notifications. Use an empty block to mute all the time.","description_kind":"markdown"}}},"description":"\nManages Grafana Alerting mute timings.\n\n* [Official documentation](https://grafana.com/docs/grafana/latest/alerting/manage-notifications/mute-timings/)\n* [HTTP API](https://grafana.com/docs/grafana/next/developers/http_api/alerting_provisioning/#mute-timings)\n\nThis resource requires Grafana 9.1.0 or later.\n","description_kind":"markdown"}},"grafana_notification_policy":{"version":0,"block":{"attributes":{"contact_point":{"type":"string","description":"The default contact point to route all unmatched notifications to.","description_kind":"markdown","required":true},"disable_provenance":{"type":"bool","description":"Allow modifying the notification policy from other sources than Terraform or the Grafana API. Defaults to `false`.","description_kind":"markdown","optional":true},"group_by":{"type":["list","string"],"description":"A list of alert labels to group alerts into notifications by. Use the special label `...` to group alerts by all labels, effectively disabling grouping.","description_kind":"markdown","required":true},"group_interval":{"type":"string","description":"Minimum time interval between two notifications for the same group. Default is 5 minutes.","description_kind":"markdown","optional":true},"group_wait":{"type":"string","description":"Time to wait to buffer alerts of the same group before sending a notification. Default is 30 seconds.","description_kind":"markdown","optional":true},"id":{"type":"string","description_kind":"plain","optional":true,"computed":true},"org_id":{"type":"string","description":"The Organization ID. If not set, the Org ID defined in the provider block will be used.","description_kind":"markdown","optional":true},"repeat_interval":{"type":"string","description":"Minimum time interval for re-sending a notification if an alert is still firing. Default is 4 hours.","description_kind":"markdown","optional":true}},"block_types":{"policy":{"nesting_mode":"list","block":{"attributes":{"contact_point":{"type":"string","description":"The contact point to route notifications that match this rule to.","description_kind":"markdown","required":true},"continue":{"type":"bool","description":"Whether to continue matching subsequent rules if an alert matches the current rule. Otherwise, the rule will be 'consumed' by the first policy to match it.","description_kind":"markdown","optional":true},"group_by":{"type":["list","string"],"description":"A list of alert labels to group alerts into notifications by. Use the special label `...` to group alerts by all labels, effectively disabling grouping. Required for root policy only. If empty, the parent grouping is used.","description_kind":"markdown","optional":true},"group_interval":{"type":"string","description":"Minimum time interval between two notifications for the same group. Default is 5 minutes.","description_kind":"markdown","optional":true},"group_wait":{"type":"string","description":"Time to wait to buffer alerts of the same group before sending a notification. Default is 30 seconds.","description_kind":"markdown","optional":true},"mute_timings":{"type":["list","string"],"description":"A list of mute timing names to apply to alerts that match this policy.","description_kind":"markdown","optional":true},"repeat_interval":{"type":"string","description":"Minimum time interval for re-sending a notification if an alert is still firing. Default is 4 hours.","description_kind":"markdown","optional":true}},"block_types":{"matcher":{"nesting_mode":"set","block":{"attributes":{"label":{"type":"string","description":"The name of the label to match against.","description_kind":"markdown","required":true},"match":{"type":"string","description":"The operator to apply when matching values of the given label. Allowed operators are `=` for equality, `!=` for negated equality, `=~` for regex equality, and `!~` for negated regex equality.","description_kind":"markdown","required":true},"value":{"type":"string","description":"The label value to match against.","description_kind":"markdown","required":true}},"description":"Describes which labels this rule should match. When multiple matchers are supplied, an alert must match ALL matchers to be accepted by this policy. When no matchers are supplied, the rule will match all alert instances.","description_kind":"markdown"}},"policy":{"nesting_mode":"list","block":{"attributes":{"contact_point":{"type":"string","description":"The contact point to route notifications that match this rule to.","description_kind":"markdown","required":true},"continue":{"type":"bool","description":"Whether to continue matching subsequent rules if an alert matches the current rule. Otherwise, the rule will be 'consumed' by the first policy to match it.","description_kind":"markdown","optional":true},"group_by":{"type":["list","string"],"description":"A list of alert labels to group alerts into notifications by. Use the special label `...` to group alerts by all labels, effectively disabling grouping. Required for root policy only. If empty, the parent grouping is used.","description_kind":"markdown","optional":true},"group_interval":{"type":"string","description":"Minimum time interval between two notifications for the same group. Default is 5 minutes.","description_kind":"markdown","optional":true},"group_wait":{"type":"string","description":"Time to wait to buffer alerts of the same group before sending a notification. Default is 30 seconds.","description_kind":"markdown","optional":true},"mute_timings":{"type":["list","string"],"description":"A list of mute timing names to apply to alerts that match this policy.","description_kind":"markdown","optional":true},"repeat_interval":{"type":"string","description":"Minimum time interval for re-sending a notification if an alert is still firing. Default is 4 hours.","description_kind":"markdown","optional":true}},"block_types":{"matcher":{"nesting_mode":"set","block":{"attributes":{"label":{"type":"string","description":"The name of the label to match against.","description_kind":"markdown","required":true},"match":{"type":"string","description":"The operator to apply when matching values of the given label. Allowed operators are `=` for equality, `!=` for negated equality, `=~` for regex equality, and `!~` for negated regex equality.","description_kind":"markdown","required":true},"value":{"type":"string","description":"The label value to match against.","description_kind":"markdown","required":true}},"description":"Describes which labels this rule should match. When multiple matchers are supplied, an alert must match ALL matchers to be accepted by this policy. When no matchers are supplied, the rule will match all alert instances.","description_kind":"markdown"}},"policy":{"nesting_mode":"list","block":{"attributes":{"contact_point":{"type":"string","description":"The contact point to route notifications that match this rule to.","description_kind":"markdown","required":true},"continue":{"type":"bool","description":"Whether to continue matching subsequent rules if an alert matches the current rule. Otherwise, the rule will be 'consumed' by the first policy to match it.","description_kind":"markdown","optional":true},"group_by":{"type":["list","string"],"description":"A list of alert labels to group alerts into notifications by. Use the special label `...` to group alerts by all labels, effectively disabling grouping. Required for root policy only. If empty, the parent grouping is used.","description_kind":"markdown","optional":true},"group_interval":{"type":"string","description":"Minimum time interval between two notifications for the same group. Default is 5 minutes.","description_kind":"markdown","optional":true},"group_wait":{"type":"string","description":"Time to wait to buffer alerts of the same group before sending a notification. Default is 30 seconds.","description_kind":"markdown","optional":true},"mute_timings":{"type":["list","string"],"description":"A list of mute timing names to apply to alerts that match this policy.","description_kind":"markdown","optional":true},"repeat_interval":{"type":"string","description":"Minimum time interval for re-sending a notification if an alert is still firing. Default is 4 hours.","description_kind":"markdown","optional":true}},"block_types":{"matcher":{"nesting_mode":"set","block":{"attributes":{"label":{"type":"string","description":"The name of the label to match against.","description_kind":"markdown","required":true},"match":{"type":"string","description":"The operator to apply when matching values of the given label. Allowed operators are `=` for equality, `!=` for negated equality, `=~` for regex equality, and `!~` for negated regex equality.","description_kind":"markdown","required":true},"value":{"type":"string","description":"The label value to match against.","description_kind":"markdown","required":true}},"description":"Describes which labels this rule should match. When multiple matchers are supplied, an alert must match ALL matchers to be accepted by this policy. When no matchers are supplied, the rule will match all alert instances.","description_kind":"markdown"}},"policy":{"nesting_mode":"list","block":{"attributes":{"contact_point":{"type":"string","description":"The contact point to route notifications that match this rule to.","description_kind":"markdown","required":true},"continue":{"type":"bool","description":"Whether to continue matching subsequent rules if an alert matches the current rule. Otherwise, the rule will be 'consumed' by the first policy to match it.","description_kind":"markdown","optional":true},"group_by":{"type":["list","string"],"description":"A list of alert labels to group alerts into notifications by. Use the special label `...` to group alerts by all labels, effectively disabling grouping. Required for root policy only. If empty, the parent grouping is used.","description_kind":"markdown","required":true},"group_interval":{"type":"string","description":"Minimum time interval between two notifications for the same group. Default is 5 minutes.","description_kind":"markdown","optional":true},"group_wait":{"type":"string","description":"Time to wait to buffer alerts of the same group before sending a notification. Default is 30 seconds.","description_kind":"markdown","optional":true},"mute_timings":{"type":["list","string"],"description":"A list of mute timing names to apply to alerts that match this policy.","description_kind":"markdown","optional":true},"repeat_interval":{"type":"string","description":"Minimum time interval for re-sending a notification if an alert is still firing. Default is 4 hours.","description_kind":"markdown","optional":true}},"block_types":{"matcher":{"nesting_mode":"set","block":{"attributes":{"label":{"type":"string","description":"The name of the label to match against.","description_kind":"markdown","required":true},"match":{"type":"string","description":"The operator to apply when matching values of the given label. Allowed operators are `=` for equality, `!=` for negated equality, `=~` for regex equality, and `!~` for negated regex equality.","description_kind":"markdown","required":true},"value":{"type":"string","description":"The label value to match against.","description_kind":"markdown","required":true}},"description":"Describes which labels this rule should match. When multiple matchers are supplied, an alert must match ALL matchers to be accepted by this policy. When no matchers are supplied, the rule will match all alert instances.","description_kind":"markdown"}}},"description":"Routing rules for specific label sets.","description_kind":"markdown"}}},"description":"Routing rules for specific label sets.","description_kind":"markdown"}}},"description":"Routing rules for specific label sets.","description_kind":"markdown"}}},"description":"Routing rules for specific label sets.","description_kind":"markdown"}}},"description":"\nSets the global notification policy for Grafana.\n\n!\u003e This resource manages the entire notification policy tree, and will overwrite any existing policies.\n\n* [Official documentation](https://grafana.com/docs/grafana/latest/alerting/manage-notifications/)\n* [HTTP API](https://grafana.com/docs/grafana/latest/developers/http_api/alerting_provisioning/)\n\nThis resource requires Grafana 9.1.0 or later.\n","description_kind":"markdown"}},"grafana_oncall_escalation":{"version":0,"block":{"attributes":{"action_to_trigger":{"type":"string","description":"The ID of an Action for trigger_webhook type step.","description_kind":"markdown","optional":true},"duration":{"type":"number","description":"The duration of delay for wait type step.","description_kind":"markdown","optional":true},"escalation_chain_id":{"type":"string","description":"The ID of the escalation chain.","description_kind":"markdown","required":true},"group_to_notify":{"type":"string","description":"The ID of a User Group for notify_user_group type step.","description_kind":"markdown","optional":true},"id":{"type":"string","description_kind":"plain","optional":true,"computed":true},"important":{"type":"bool","description":"Will activate \"important\" personal notification rules. Actual for steps: notify_persons, notify_on_call_from_schedule and notify_user_group","description_kind":"markdown","optional":true},"notify_if_time_from":{"type":"string","description":"The beginning of the time interval for notify_if_time_from_to type step in UTC (for example 08:00:00Z).","description_kind":"markdown","optional":true},"notify_if_time_to":{"type":"string","description":"The end of the time interval for notify_if_time_from_to type step in UTC (for example 18:00:00Z).","description_kind":"markdown","optional":true},"notify_on_call_from_schedule":{"type":"string","description":"ID of a Schedule for notify_on_call_from_schedule type step.","description_kind":"markdown","optional":true},"persons_to_notify":{"type":["set","string"],"description":"The list of ID's of users for notify_persons type step.","description_kind":"markdown","optional":true},"persons_to_notify_next_each_time":{"type":["set","string"],"description":"The list of ID's of users for notify_person_next_each_time type step.","description_kind":"markdown","optional":true},"position":{"type":"number","description":"The position of the escalation step (starts from 0).","description_kind":"markdown","required":true},"type":{"type":"string","description":"The type of escalation policy. Can be wait, notify_persons, notify_person_next_each_time, notify_on_call_from_schedule, trigger_webhook, notify_user_group, resolve, notify_whole_channel, notify_if_time_from_to, repeat_escalation","description_kind":"markdown","optional":true}},"description":"\n* [Official documentation](https://grafana.com/docs/oncall/latest/configure/escalation-chains-and-routes/)\n* [HTTP API](https://grafana.com/docs/oncall/latest/oncall-api-reference/escalation_policies/)\n","description_kind":"markdown"}},"grafana_oncall_escalation_chain":{"version":0,"block":{"attributes":{"id":{"type":"string","description_kind":"plain","optional":true,"computed":true},"name":{"type":"string","description":"The name of the escalation chain.","description_kind":"markdown","required":true},"team_id":{"type":"string","description":"The ID of the OnCall team. To get one, create a team in Grafana, and navigate to the OnCall plugin (to sync the team with OnCall). You can then get the ID using the `grafana_oncall_team` datasource.","description_kind":"markdown","optional":true}},"description":"\n* [HTTP API](https://grafana.com/docs/oncall/latest/oncall-api-reference/escalation_chains/)\n","description_kind":"markdown"}},"grafana_oncall_integration":{"version":0,"block":{"attributes":{"id":{"type":"string","description_kind":"plain","optional":true,"computed":true},"link":{"type":"string","description":"The link for using in an integrated tool.","description_kind":"markdown","computed":true},"name":{"type":"string","description":"The name of the service integration.","description_kind":"markdown","required":true},"team_id":{"type":"string","description":"The ID of the OnCall team. To get one, create a team in Grafana, and navigate to the OnCall plugin (to sync the team with OnCall). You can then get the ID using the `grafana_oncall_team` datasource.","description_kind":"markdown","optional":true},"type":{"type":"string","description":"The type of integration. Can be grafana, grafana_alerting, webhook, alertmanager, kapacitor, fabric, newrelic, datadog, pagerduty, pingdom, elastalert, amazon_sns, curler, sentry, formatted_webhook, heartbeat, demo, manual, stackdriver, uptimerobot, sentry_platform, zabbix, prtg, slack_channel, inbound_email, direct_paging, jira.","description_kind":"markdown","required":true}},"block_types":{"default_route":{"nesting_mode":"list","block":{"attributes":{"escalation_chain_id":{"type":"string","description":"The ID of the escalation chain.","description_kind":"markdown","optional":true},"id":{"type":"string","description_kind":"plain","computed":true}},"block_types":{"msteams":{"nesting_mode":"list","block":{"attributes":{"enabled":{"type":"bool","description":"Enable notification in MS teams. Defaults to `true`.","description_kind":"markdown","optional":true},"id":{"type":"string","description":"MS teams channel id. Alerts will be directed to this channel in Microsoft teams.","description_kind":"markdown","optional":true}},"description":"MS teams-specific settings for a route.","description_kind":"markdown"},"max_items":1},"slack":{"nesting_mode":"list","block":{"attributes":{"channel_id":{"type":"string","description":"Slack channel id. Alerts will be directed to this channel in Slack.","description_kind":"markdown","optional":true},"enabled":{"type":"bool","description":"Enable notification in Slack. Defaults to `true`.","description_kind":"markdown","optional":true}},"description":"Slack-specific settings for a route.","description_kind":"markdown"},"max_items":1},"telegram":{"nesting_mode":"list","block":{"attributes":{"enabled":{"type":"bool","description":"Enable notification in Telegram. Defaults to `true`.","description_kind":"markdown","optional":true},"id":{"type":"string","description":"Telegram channel id. Alerts will be directed to this channel in Telegram.","description_kind":"markdown","optional":true}},"description":"Telegram-specific settings for a route.","description_kind":"markdown"},"max_items":1}},"description":"The Default route for all alerts from the given integration","description_kind":"markdown"},"min_items":1,"max_items":1},"templates":{"nesting_mode":"list","block":{"attributes":{"acknowledge_signal":{"type":"string","description":"Template for sending a signal to acknowledge the Incident.","description_kind":"markdown","optional":true},"grouping_key":{"type":"string","description":"Template for the key by which alerts are grouped.","description_kind":"markdown","optional":true},"resolve_signal":{"type":"string","description":"Template for sending a signal to resolve the Incident.","description_kind":"markdown","optional":true},"source_link":{"type":"string","description":"Template for a source link.","description_kind":"markdown","optional":true}},"block_types":{"email":{"nesting_mode":"list","block":{"attributes":{"message":{"type":"string","description":"Template for Alert message.","description_kind":"markdown","optional":true},"title":{"type":"string","description":"Template for Alert title.","description_kind":"markdown","optional":true}},"description":"Templates for Email.","description_kind":"markdown"},"max_items":1},"microsoft_teams":{"nesting_mode":"list","block":{"attributes":{"image_url":{"type":"string","description":"Template for Alert image url.","description_kind":"markdown","optional":true},"message":{"type":"string","description":"Template for Alert message.","description_kind":"markdown","optional":true},"title":{"type":"string","description":"Template for Alert title.","description_kind":"markdown","optional":true}},"description":"Templates for Microsoft Teams.","description_kind":"markdown"},"max_items":1},"phone_call":{"nesting_mode":"list","block":{"attributes":{"title":{"type":"string","description":"Template for Alert title.","description_kind":"markdown","optional":true}},"description":"Templates for Phone Call.","description_kind":"markdown"},"max_items":1},"slack":{"nesting_mode":"list","block":{"attributes":{"image_url":{"type":"string","description":"Template for Alert image url.","description_kind":"markdown","optional":true},"message":{"type":"string","description":"Template for Alert message.","description_kind":"markdown","optional":true},"title":{"type":"string","description":"Template for Alert title.","description_kind":"markdown","optional":true}},"description":"Templates for Slack.","description_kind":"markdown"},"max_items":1},"sms":{"nesting_mode":"list","block":{"attributes":{"title":{"type":"string","description":"Template for Alert title.","description_kind":"markdown","optional":true}},"description":"Templates for SMS.","description_kind":"markdown"},"max_items":1},"telegram":{"nesting_mode":"list","block":{"attributes":{"image_url":{"type":"string","description":"Template for Alert image url.","description_kind":"markdown","optional":true},"message":{"type":"string","description":"Template for Alert message.","description_kind":"markdown","optional":true},"title":{"type":"string","description":"Template for Alert title.","description_kind":"markdown","optional":true}},"description":"Templates for Telegram.","description_kind":"markdown"},"max_items":1},"web":{"nesting_mode":"list","block":{"attributes":{"image_url":{"type":"string","description":"Template for Alert image url.","description_kind":"markdown","optional":true},"message":{"type":"string","description":"Template for Alert message.","description_kind":"markdown","optional":true},"title":{"type":"string","description":"Template for Alert title.","description_kind":"markdown","optional":true}},"description":"Templates for Web.","description_kind":"markdown"},"max_items":1}},"description":"Jinja2 templates for Alert payload. An empty templates block will be ignored.","description_kind":"markdown"},"max_items":1}},"description":"\n* [Official documentation](https://grafana.com/docs/oncall/latest/integrations/)\n* [HTTP API](https://grafana.com/docs/oncall/latest/oncall-api-reference/)\n","description_kind":"markdown"}},"grafana_oncall_on_call_shift":{"version":0,"block":{"attributes":{"by_day":{"type":["set","string"],"description":"This parameter takes a list of days in iCal format. Can be MO, TU, WE, TH, FR, SA, SU","description_kind":"markdown","optional":true},"by_month":{"type":["set","number"],"description":"This parameter takes a list of months. Valid values are 1 to 12","description_kind":"markdown","optional":true},"by_monthday":{"type":["set","number"],"description":"This parameter takes a list of days of the month. Valid values are 1 to 31 or -31 to -1","description_kind":"markdown","optional":true},"duration":{"type":"number","description":"The duration of the event.","description_kind":"markdown","required":true},"frequency":{"type":"string","description":"The frequency of the event. Can be hourly, daily, weekly, monthly","description_kind":"markdown","optional":true},"id":{"type":"string","description_kind":"plain","optional":true,"computed":true},"interval":{"type":"number","description":"The positive integer representing at which intervals the recurrence rule repeats.","description_kind":"markdown","optional":true},"level":{"type":"number","description":"The priority level. The higher the value, the higher the priority.","description_kind":"markdown","optional":true},"name":{"type":"string","description":"The shift's name.","description_kind":"markdown","required":true},"rolling_users":{"type":["list",["set","string"]],"description":"The list of lists with on-call users (for rolling_users event type)","description_kind":"markdown","optional":true},"start":{"type":"string","description":"The start time of the on-call shift. This parameter takes a date format as yyyy-MM-dd'T'HH:mm:ss (for example \"2020-09-05T08:00:00\")","description_kind":"markdown","required":true},"start_rotation_from_user_index":{"type":"number","description":"The index of the list of users in rolling_users, from which on-call rotation starts.","description_kind":"markdown","optional":true},"team_id":{"type":"string","description":"The ID of the OnCall team. To get one, create a team in Grafana, and navigate to the OnCall plugin (to sync the team with OnCall). You can then get the ID using the `grafana_oncall_team` datasource.","description_kind":"markdown","optional":true},"time_zone":{"type":"string","description":"The shift's timezone. Overrides schedule's timezone.","description_kind":"markdown","optional":true},"type":{"type":"string","description":"The shift's type. Can be rolling_users, recurrent_event, single_event","description_kind":"markdown","required":true},"users":{"type":["set","string"],"description":"The list of on-call users (for single_event and recurrent_event event type).","description_kind":"markdown","optional":true},"week_start":{"type":"string","description":"Start day of the week in iCal format. Can be MO, TU, WE, TH, FR, SA, SU","description_kind":"markdown","optional":true}},"description":"\n* [HTTP API](https://grafana.com/docs/oncall/latest/oncall-api-reference/on_call_shifts/)\n","description_kind":"markdown"}},"grafana_oncall_outgoing_webhook":{"version":0,"block":{"attributes":{"authorization_header":{"type":"string","description":"The auth data of the webhook. Used in Authorization header instead of user/password auth.","description_kind":"markdown","optional":true,"sensitive":true},"data":{"type":"string","description":"The data of the webhook.","description_kind":"markdown","optional":true},"forward_whole_payload":{"type":"bool","description":"Toggle to send the entire webhook payload instead of using the values in the Data field.","description_kind":"markdown","optional":true},"headers":{"type":"string","description":"Headers to add to the outgoing webhook request.","description_kind":"markdown","optional":true},"http_method":{"type":"string","description":"The HTTP method used in the request made by the outgoing webhook. Defaults to `POST`.","description_kind":"markdown","optional":true},"id":{"type":"string","description_kind":"plain","optional":true,"computed":true},"integration_filter":{"type":["list","string"],"description":"Restricts the outgoing webhook to only trigger if the event came from a selected integration. If no integrations are selected the outgoing webhook will trigger for any integration.","description_kind":"markdown","optional":true},"is_webhook_enabled":{"type":"bool","description":"Controls whether the outgoing webhook will trigger or is ignored. The default is `true`.","description_kind":"markdown","optional":true},"name":{"type":"string","description":"The name of the outgoing webhook.","description_kind":"markdown","required":true},"password":{"type":"string","description":"The auth data of the webhook. Used for Basic authentication","description_kind":"markdown","optional":true,"sensitive":true},"team_id":{"type":"string","description":"The ID of the OnCall team. To get one, create a team in Grafana, and navigate to the OnCall plugin (to sync the team with OnCall). You can then get the ID using the `grafana_oncall_team` datasource.","description_kind":"markdown","optional":true},"trigger_template":{"type":"string","description":"A template used to dynamically determine whether the webhook should execute based on the content of the payload.","description_kind":"markdown","optional":true},"trigger_type":{"type":"string","description":"The type of event that will cause this outgoing webhook to execute. The types of triggers are: `escalation`, `alert group created`, `acknowledge`, `resolve`, `silence`, `unsilence`, `unresolve`, `unacknowledge`. Defaults to `escalation`.","description_kind":"markdown","optional":true},"url":{"type":"string","description":"The webhook URL.","description_kind":"markdown","required":true},"user":{"type":"string","description":"Username to use when making the outgoing webhook request.","description_kind":"markdown","optional":true}},"description":"\n* [HTTP API](https://grafana.com/docs/oncall/latest/oncall-api-reference/outgoing_webhooks/)\n","description_kind":"markdown"}},"grafana_oncall_route":{"version":0,"block":{"attributes":{"escalation_chain_id":{"type":"string","description":"The ID of the escalation chain.","description_kind":"markdown","required":true},"id":{"type":"string","description_kind":"plain","optional":true,"computed":true},"integration_id":{"type":"string","description":"The ID of the integration.","description_kind":"markdown","required":true},"position":{"type":"number","description":"The position of the route (starts from 0).","description_kind":"markdown","required":true},"routing_regex":{"type":"string","description":"Python Regex query. Route is chosen for an alert if there is a match inside the alert payload.","description_kind":"markdown","required":true},"routing_type":{"type":"string","description":"The type of route. Can be jinja2, regex Defaults to `regex`.","description_kind":"markdown","optional":true}},"block_types":{"msteams":{"nesting_mode":"list","block":{"attributes":{"enabled":{"type":"bool","description":"Enable notification in MS teams. Defaults to `true`.","description_kind":"markdown","optional":true},"id":{"type":"string","description":"MS teams channel id. Alerts will be directed to this channel in Microsoft teams.","description_kind":"markdown","optional":true}},"description":"MS teams-specific settings for a route.","description_kind":"markdown"},"max_items":1},"slack":{"nesting_mode":"list","block":{"attributes":{"channel_id":{"type":"string","description":"Slack channel id. Alerts will be directed to this channel in Slack.","description_kind":"markdown","optional":true},"enabled":{"type":"bool","description":"Enable notification in Slack. Defaults to `true`.","description_kind":"markdown","optional":true}},"description":"Slack-specific settings for a route.","description_kind":"markdown"},"max_items":1},"telegram":{"nesting_mode":"list","block":{"attributes":{"enabled":{"type":"bool","description":"Enable notification in Telegram. Defaults to `true`.","description_kind":"markdown","optional":true},"id":{"type":"string","description":"Telegram channel id. Alerts will be directed to this channel in Telegram.","description_kind":"markdown","optional":true}},"description":"Telegram-specific settings for a route.","description_kind":"markdown"},"max_items":1}},"description":"\n* [HTTP API](https://grafana.com/docs/oncall/latest/oncall-api-reference/routes/)\n","description_kind":"markdown"}},"grafana_oncall_schedule":{"version":0,"block":{"attributes":{"enable_web_overrides":{"type":"bool","description":"Enable overrides via web UI (it will ignore ical_url_overrides).","description_kind":"markdown","optional":true},"ical_url_overrides":{"type":"string","description":"The URL of external iCal calendar which override primary events.","description_kind":"markdown","optional":true},"ical_url_primary":{"type":"string","description":"The URL of the external calendar iCal file.","description_kind":"markdown","optional":true},"id":{"type":"string","description_kind":"plain","optional":true,"computed":true},"name":{"type":"string","description":"The schedule's name.","description_kind":"markdown","required":true},"shifts":{"type":["set","string"],"description":"The list of ID's of on-call shifts.","description_kind":"markdown","optional":true},"team_id":{"type":"string","description":"The ID of the OnCall team. To get one, create a team in Grafana, and navigate to the OnCall plugin (to sync the team with OnCall). You can then get the ID using the `grafana_oncall_team` datasource.","description_kind":"markdown","optional":true},"time_zone":{"type":"string","description":"The schedule's time zone.","description_kind":"markdown","optional":true},"type":{"type":"string","description":"The schedule's type.","description_kind":"markdown","required":true}},"block_types":{"slack":{"nesting_mode":"list","block":{"attributes":{"channel_id":{"type":"string","description":"Slack channel id. Reminder about schedule shifts will be directed to this channel in Slack.","description_kind":"markdown","optional":true},"user_group_id":{"type":"string","description":"Slack user group id. Members of user group will be updated when on-call users change.","description_kind":"markdown","optional":true}},"description":"The Slack-specific settings for a schedule.","description_kind":"markdown"},"max_items":1}},"description":"\n* [HTTP API](https://grafana.com/docs/oncall/latest/oncall-api-reference/schedules/)\n","description_kind":"markdown"}},"grafana_organization":{"version":0,"block":{"attributes":{"admin_user":{"type":"string","description":"The login name of the configured default admin user for the Grafana\ninstallation. If unset, this value defaults to admin, the Grafana default.\nGrafana adds the default admin user to all organizations automatically upon\ncreation, and this parameter keeps Terraform from removing it from\norganizations.\n Defaults to `admin`.","description_kind":"markdown","optional":true},"admins":{"type":["set","string"],"description":"A list of email addresses corresponding to users who should be given admin\naccess to the organization. Note: users specified here must already exist in\nGrafana unless 'create_users' is set to true.","description_kind":"markdown","optional":true},"create_users":{"type":"bool","description":"Whether or not to create Grafana users specified in the organization's\nmembership if they don't already exist in Grafana. If unspecified, this\nparameter defaults to true, creating placeholder users with the name, login,\nand email set to the email of the user, and a random password. Setting this\noption to false will cause an error to be thrown for any users that do not\nalready exist in Grafana.\n Defaults to `true`.","description_kind":"markdown","optional":true},"editors":{"type":["set","string"],"description":"A list of email addresses corresponding to users who should be given editor\naccess to the organization. Note: users specified here must already exist in\nGrafana unless 'create_users' is set to true.","description_kind":"markdown","optional":true},"id":{"type":"string","description_kind":"plain","optional":true,"computed":true},"name":{"type":"string","description":"The display name for the Grafana organization created.","description_kind":"markdown","required":true},"org_id":{"type":"number","description":"The organization id assigned to this organization by Grafana.","description_kind":"markdown","computed":true},"users_without_access":{"type":["set","string"],"description":"A list of email addresses corresponding to users who should be given none access to the organization.\nNote: users specified here must already exist in Grafana, unless 'create_users' is\nset to true. This feature is only available in Grafana 10.2+.","description_kind":"markdown","optional":true},"viewers":{"type":["set","string"],"description":"A list of email addresses corresponding to users who should be given viewer\naccess to the organization. Note: users specified here must already exist in\nGrafana unless 'create_users' is set to true.","description_kind":"markdown","optional":true}},"description":"\n* [Official documentation](https://grafana.com/docs/grafana/latest/administration/organization-management/)\n* [HTTP API](https://grafana.com/docs/grafana/latest/developers/http_api/org/)\n\nThis resource represents an instance-scoped resource and uses Grafana's admin APIs.\nIt does not work with API tokens or service accounts which are org-scoped.\nYou must use basic auth.\n","description_kind":"markdown"}},"grafana_organization_preferences":{"version":0,"block":{"attributes":{"home_dashboard_id":{"type":"number","description":"The Organization home dashboard ID. Deprecated: Use `home_dashboard_uid` instead.","description_kind":"markdown","deprecated":true,"optional":true},"home_dashboard_uid":{"type":"string","description":"The Organization home dashboard UID. This is only available in Grafana 9.0+.","description_kind":"markdown","optional":true},"id":{"type":"string","description_kind":"plain","optional":true,"computed":true},"org_id":{"type":"string","description":"The Organization ID. If not set, the Org ID defined in the provider block will be used.","description_kind":"markdown","optional":true},"theme":{"type":"string","description":"The Organization theme. Available values are `light`, `dark`, `system`, or an empty string for the default.","description_kind":"markdown","optional":true},"timezone":{"type":"string","description":"The Organization timezone. Available values are `utc`, `browser`, or an empty string for the default.","description_kind":"markdown","optional":true},"week_start":{"type":"string","description":"The Organization week start day. Available values are `sunday`, `monday`, `saturday`, or an empty string for the default. Defaults to ``.","description_kind":"markdown","optional":true}},"description":"\n* [Official documentation](https://grafana.com/docs/grafana/latest/administration/organization-management/)\n* [HTTP API](https://grafana.com/docs/grafana/latest/developers/http_api/preferences/#get-current-org-prefs)\n","description_kind":"markdown"}},"grafana_playlist":{"version":0,"block":{"attributes":{"id":{"type":"string","description_kind":"plain","optional":true,"computed":true},"interval":{"type":"string","description_kind":"plain","required":true},"name":{"type":"string","description":"The name of the playlist.","description_kind":"markdown","required":true},"org_id":{"type":"string","description":"The Organization ID. If not set, the Org ID defined in the provider block will be used.","description_kind":"markdown","optional":true}},"block_types":{"item":{"nesting_mode":"set","block":{"attributes":{"id":{"type":"string","description_kind":"plain","computed":true},"order":{"type":"number","description_kind":"plain","required":true},"title":{"type":"string","description_kind":"plain","required":true},"type":{"type":"string","description_kind":"plain","optional":true},"value":{"type":"string","description_kind":"plain","optional":true}},"description_kind":"plain"},"min_items":1}},"description":"\n* [Official documentation](https://grafana.com/docs/grafana/latest/dashboards/create-manage-playlists/)\n* [HTTP API](https://grafana.com/docs/grafana/latest/developers/http_api/playlist/)\n","description_kind":"markdown"}},"grafana_report":{"version":0,"block":{"attributes":{"dashboard_id":{"type":"number","description":"Dashboard to be sent in the report. This field is deprecated, use `dashboard_uid` instead.","description_kind":"markdown","deprecated":true,"optional":true,"computed":true},"dashboard_uid":{"type":"string","description":"Dashboard to be sent in the report.","description_kind":"markdown","deprecated":true,"optional":true,"computed":true},"formats":{"type":["set","string"],"description":"Specifies what kind of attachment to generate for the report. Allowed values: `pdf`, `csv`, `image`.","description_kind":"markdown","optional":true},"id":{"type":"string","description":"Generated identifier of the report.","description_kind":"markdown","computed":true},"include_dashboard_link":{"type":"bool","description":"Whether to include a link to the dashboard in the report. Defaults to `true`.","description_kind":"markdown","optional":true},"include_table_csv":{"type":"bool","description":"Whether to include a CSV file of table panel data. Defaults to `false`.","description_kind":"markdown","optional":true},"layout":{"type":"string","description":"Layout of the report. Allowed values: `simple`, `grid`. Defaults to `grid`.","description_kind":"markdown","optional":true},"message":{"type":"string","description":"Message to be sent in the report.","description_kind":"markdown","optional":true},"name":{"type":"string","description":"Name of the report.","description_kind":"markdown","required":true},"org_id":{"type":"string","description":"The Organization ID. If not set, the Org ID defined in the provider block will be used.","description_kind":"markdown","optional":true},"orientation":{"type":"string","description":"Orientation of the report. Allowed values: `landscape`, `portrait`. Defaults to `landscape`.","description_kind":"markdown","optional":true},"recipients":{"type":["list","string"],"description":"List of recipients of the report.","description_kind":"markdown","required":true},"reply_to":{"type":"string","description":"Reply-to email address of the report.","description_kind":"markdown","optional":true}},"block_types":{"dashboards":{"nesting_mode":"list","block":{"attributes":{"report_variables":{"type":["map","string"],"description":"Add report variables to the dashboard. Values should be separated by commas.","description_kind":"markdown","optional":true},"uid":{"type":"string","description":"Dashboard uid.","description_kind":"markdown","required":true}},"block_types":{"time_range":{"nesting_mode":"list","block":{"attributes":{"from":{"type":"string","description":"Start of the time range.","description_kind":"markdown","optional":true},"to":{"type":"string","description":"End of the time range.","description_kind":"markdown","optional":true}},"description":"Time range of the report.","description_kind":"markdown"},"max_items":1}},"description":"List of dashboards to render into the report","description_kind":"markdown"}},"schedule":{"nesting_mode":"list","block":{"attributes":{"custom_interval":{"type":"string","description":"Custom interval of the report.\n**Note:** This field is only available when frequency is set to `custom`.","description_kind":"markdown","optional":true},"end_time":{"type":"string","description":"End time of the report. If empty, the report will be sent indefinitely (according to frequency). Note that times will be saved as UTC in Grafana. Use 2006-01-02T15:04:05 format if you want to set a custom timezone","description_kind":"markdown","optional":true},"frequency":{"type":"string","description":"Frequency of the report. Allowed values: `never`, `once`, `hourly`, `daily`, `weekly`, `monthly`, `custom`.","description_kind":"markdown","required":true},"last_day_of_month":{"type":"bool","description":"Send the report on the last day of the month Defaults to `false`.","description_kind":"markdown","optional":true},"start_time":{"type":"string","description":"Start time of the report. If empty, the start date will be set to the creation time. Note that times will be saved as UTC in Grafana. Use 2006-01-02T15:04:05 format if you want to set a custom timezone","description_kind":"markdown","optional":true},"timezone":{"type":"string","description":"Set the report time zone. Defaults to `GMT`.","description_kind":"markdown","optional":true},"workdays_only":{"type":"bool","description":"Whether to send the report only on work days. Defaults to `false`.","description_kind":"markdown","optional":true}},"description":"Schedule of the report.","description_kind":"markdown"},"min_items":1,"max_items":1},"time_range":{"nesting_mode":"list","block":{"attributes":{"from":{"type":"string","description":"Start of the time range.","description_kind":"markdown","optional":true},"to":{"type":"string","description":"End of the time range.","description_kind":"markdown","optional":true}},"description":"Time range of the report.","description_kind":"markdown","deprecated":true},"max_items":1}},"description":"\n**Note:** This resource is available only with Grafana Enterprise 7.+.\n\n* [Official documentation](https://grafana.com/docs/grafana/latest/dashboards/create-reports/)\n* [HTTP API](https://grafana.com/docs/grafana/latest/developers/http_api/reporting/)\n","description_kind":"markdown"}},"grafana_role":{"version":0,"block":{"attributes":{"auto_increment_version":{"type":"bool","description":"Whether the role version should be incremented automatically on updates (and set to 1 on creation). This field or `version` should be set.","description_kind":"markdown","optional":true},"description":{"type":"string","description":"Description of the role.","description_kind":"markdown","optional":true},"display_name":{"type":"string","description":"Display name of the role. Available with Grafana 8.5+.","description_kind":"markdown","optional":true},"global":{"type":"bool","description":"Boolean to state whether the role is available across all organizations or not. Defaults to `false`.","description_kind":"markdown","optional":true},"group":{"type":"string","description":"Group of the role. Available with Grafana 8.5+.","description_kind":"markdown","optional":true},"hidden":{"type":"bool","description":"Boolean to state whether the role should be visible in the Grafana UI or not. Available with Grafana 8.5+. Defaults to `false`.","description_kind":"markdown","optional":true},"id":{"type":"string","description_kind":"plain","optional":true,"computed":true},"name":{"type":"string","description":"Name of the role","description_kind":"markdown","required":true},"org_id":{"type":"string","description":"The Organization ID. If not set, the Org ID defined in the provider block will be used.","description_kind":"markdown","optional":true},"uid":{"type":"string","description":"Unique identifier of the role. Used for assignments.","description_kind":"markdown","optional":true,"computed":true},"version":{"type":"number","description":"Version of the role. A role is updated only on version increase. This field or `auto_increment_version` should be set.","description_kind":"markdown","optional":true}},"block_types":{"permissions":{"nesting_mode":"set","block":{"attributes":{"action":{"type":"string","description":"Specific action users granted with the role will be allowed to perform (for example: `users:read`)","description_kind":"markdown","required":true},"scope":{"type":"string","description":"Scope to restrict the action to a set of resources (for example: `users:*` or `roles:customrole1`) Defaults to ``.","description_kind":"markdown","optional":true}},"description":"Specific set of actions granted by the role.","description_kind":"markdown"}}},"description":"\n**Note:** This resource is available only with Grafana Enterprise 8.+.\n\n* [Official documentation](https://grafana.com/docs/grafana/latest/administration/roles-and-permissions/access-control/)\n* [HTTP API](https://grafana.com/docs/grafana/latest/developers/http_api/access_control/)\n","description_kind":"markdown"}},"grafana_role_assignment":{"version":0,"block":{"attributes":{"id":{"type":"string","description_kind":"plain","optional":true,"computed":true},"org_id":{"type":"string","description":"The Organization ID. If not set, the Org ID defined in the provider block will be used.","description_kind":"markdown","optional":true},"role_uid":{"type":"string","description":"Grafana RBAC role UID.","description_kind":"markdown","required":true},"service_accounts":{"type":["set","string"],"description":"IDs of service accounts that the role should be assigned to.","description_kind":"markdown","optional":true},"teams":{"type":["set","string"],"description":"IDs of teams that the role should be assigned to.","description_kind":"markdown","optional":true},"users":{"type":["set","number"],"description":"IDs of users that the role should be assigned to.","description_kind":"markdown","optional":true}},"description":"\nManages the entire set of assignments for a role. Assignments that aren't specified when applying this resource will be removed.\n**Note:** This resource is available only with Grafana Enterprise 9.2+.\n* [Official documentation](https://grafana.com/docs/grafana/latest/administration/roles-and-permissions/access-control/)\n* [HTTP API](https://grafana.com/docs/grafana/latest/developers/http_api/access_control/)\n","description_kind":"markdown"}},"grafana_rule_group":{"version":0,"block":{"attributes":{"disable_provenance":{"type":"bool","description":"Allow modifying the rule group from other sources than Terraform or the Grafana API. Defaults to `false`.","description_kind":"markdown","optional":true},"folder_uid":{"type":"string","description":"The UID of the folder that the group belongs to.","description_kind":"markdown","required":true},"id":{"type":"string","description_kind":"plain","optional":true,"computed":true},"interval_seconds":{"type":"number","description":"The interval, in seconds, at which all rules in the group are evaluated. If a group contains many rules, the rules are evaluated sequentially.","description_kind":"markdown","required":true},"name":{"type":"string","description":"The name of the rule group.","description_kind":"markdown","required":true},"org_id":{"type":"string","description":"The Organization ID. If not set, the Org ID defined in the provider block will be used.","description_kind":"markdown","optional":true}},"block_types":{"rule":{"nesting_mode":"list","block":{"attributes":{"annotations":{"type":["map","string"],"description":"Key-value pairs of metadata to attach to the alert rule that may add user-defined context, but cannot be used for matching, grouping, or routing. Defaults to `map[]`.","description_kind":"markdown","optional":true},"condition":{"type":"string","description":"The `ref_id` of the query node in the `data` field to use as the alert condition.","description_kind":"markdown","required":true},"exec_err_state":{"type":"string","description":"Describes what state to enter when the rule's query is invalid and the rule cannot be executed. Options are OK, Error, KeepLast, and Alerting. Defaults to `Alerting`.","description_kind":"markdown","optional":true},"for":{"type":"string","description":"The amount of time for which the rule must be breached for the rule to be considered to be Firing. Before this time has elapsed, the rule is only considered to be Pending. Defaults to `0`.","description_kind":"markdown","optional":true},"is_paused":{"type":"bool","description":"Sets whether the alert should be paused or not. Defaults to `false`.","description_kind":"markdown","optional":true},"labels":{"type":["map","string"],"description":"Key-value pairs to attach to the alert rule that can be used in matching, grouping, and routing. Defaults to `map[]`.","description_kind":"markdown","optional":true},"name":{"type":"string","description":"The name of the alert rule.","description_kind":"markdown","required":true},"no_data_state":{"type":"string","description":"Describes what state to enter when the rule's query returns No Data. Options are OK, NoData, KeepLast, and Alerting. Defaults to `NoData`.","description_kind":"markdown","optional":true},"uid":{"type":"string","description":"The unique identifier of the alert rule.","description_kind":"markdown","computed":true}},"block_types":{"data":{"nesting_mode":"list","block":{"attributes":{"datasource_uid":{"type":"string","description":"The UID of the datasource being queried, or \"-100\" if this stage is an expression stage.","description_kind":"markdown","required":true},"model":{"type":"string","description":"Custom JSON data to send to the specified datasource when querying.","description_kind":"markdown","required":true},"query_type":{"type":"string","description":"An optional identifier for the type of query being executed. Defaults to ``.","description_kind":"markdown","optional":true},"ref_id":{"type":"string","description":"A unique string to identify this query stage within a rule.","description_kind":"markdown","required":true}},"block_types":{"relative_time_range":{"nesting_mode":"list","block":{"attributes":{"from":{"type":"number","description":"The number of seconds in the past, relative to when the rule is evaluated, at which the time range begins.","description_kind":"markdown","required":true},"to":{"type":"number","description":"The number of seconds in the past, relative to when the rule is evaluated, at which the time range ends.","description_kind":"markdown","required":true}},"description":"The time range, relative to when the query is executed, across which to query.","description_kind":"markdown"},"min_items":1,"max_items":1}},"description":"A sequence of stages that describe the contents of the rule.","description_kind":"markdown"},"min_items":1},"notification_settings":{"nesting_mode":"list","block":{"attributes":{"contact_point":{"type":"string","description":"The contact point to route notifications that match this rule to.","description_kind":"markdown","required":true},"group_by":{"type":["list","string"],"description":"A list of alert labels to group alerts into notifications by. Use the special label `...` to group alerts by all labels, effectively disabling grouping. If empty, no grouping is used. If specified, requires labels 'alertname' and 'grafana_folder' to be included.","description_kind":"markdown","optional":true},"group_interval":{"type":"string","description":"Minimum time interval between two notifications for the same group. Default is 5 minutes.","description_kind":"markdown","optional":true},"group_wait":{"type":"string","description":"Time to wait to buffer alerts of the same group before sending a notification. Default is 30 seconds.","description_kind":"markdown","optional":true},"mute_timings":{"type":["list","string"],"description":"A list of mute timing names to apply to alerts that match this policy.","description_kind":"markdown","optional":true},"repeat_interval":{"type":"string","description":"Minimum time interval for re-sending a notification if an alert is still firing. Default is 4 hours.","description_kind":"markdown","optional":true}},"description":"Notification settings for the rule. If specified, it overrides the notification policies. Available since Grafana 10.4, requires feature flag 'alertingSimplifiedRouting' enabled.","description_kind":"markdown"},"max_items":1}},"description":"The rules within the group.","description_kind":"markdown"},"min_items":1}},"description":"\nManages Grafana Alerting rule groups.\n\n* [Official documentation](https://grafana.com/docs/grafana/latest/alerting/alerting-rules/)\n* [HTTP API](https://grafana.com/docs/grafana/latest/developers/http_api/alerting_provisioning/#alert-rules)\n\nThis resource requires Grafana 9.1.0 or later.\n","description_kind":"markdown"}},"grafana_service_account":{"version":0,"block":{"attributes":{"id":{"type":"string","description_kind":"plain","optional":true,"computed":true},"is_disabled":{"type":"bool","description":"The disabled status for the service account. Defaults to `false`.","description_kind":"markdown","optional":true},"name":{"type":"string","description":"The name of the service account.","description_kind":"markdown","required":true},"org_id":{"type":"string","description":"The Organization ID. If not set, the Org ID defined in the provider block will be used.","description_kind":"markdown","optional":true},"role":{"type":"string","description":"The basic role of the service account in the organization.","description_kind":"markdown","optional":true}},"description":"\n**Note:** This resource is available only with Grafana 9.1+.\n\n* [Official documentation](https://grafana.com/docs/grafana/latest/administration/service-accounts/)\n* [HTTP API](https://grafana.com/docs/grafana/latest/developers/http_api/serviceaccount/#service-account-api)","description_kind":"markdown"}},"grafana_service_account_permission":{"version":0,"block":{"attributes":{"id":{"type":"string","description_kind":"plain","optional":true,"computed":true},"org_id":{"type":"string","description":"The Organization ID. If not set, the Org ID defined in the provider block will be used.","description_kind":"markdown","optional":true},"service_account_id":{"type":"string","description":"The id of the service account.","description_kind":"markdown","required":true}},"block_types":{"permissions":{"nesting_mode":"set","block":{"attributes":{"permission":{"type":"string","description":"Permission to associate with item. Must be `Edit` or `Admin`.","description_kind":"markdown","required":true},"team_id":{"type":"string","description":"ID of the team to manage permissions for. Specify either this or `user_id`. Defaults to `0`.","description_kind":"markdown","optional":true},"user_id":{"type":"string","description":"ID of the user or service account to manage permissions for. Specify either this or `team_id`. Defaults to `0`.","description_kind":"markdown","optional":true}},"description":"The permission items to add/update. Items that are omitted from the list will be removed.","description_kind":"markdown"}}},"description":"\nManages the entire set of permissions for a service account. Permissions that aren't specified when applying this resource will be removed.\n\n**Note:** This resource is available from Grafana 9.2.4 onwards.\n\n* [Official documentation](https://grafana.com/docs/grafana/latest/administration/service-accounts/#manage-users-and-teams-permissions-for-a-service-account-in-grafana)","description_kind":"markdown"}},"grafana_service_account_token":{"version":0,"block":{"attributes":{"expiration":{"type":"string","description":"The expiration date of the service account token.","description_kind":"markdown","computed":true},"has_expired":{"type":"bool","description":"The status of the service account token.","description_kind":"markdown","computed":true},"id":{"type":"string","description_kind":"plain","optional":true,"computed":true},"key":{"type":"string","description":"The key of the service account token.","description_kind":"markdown","computed":true,"sensitive":true},"name":{"type":"string","description":"The name of the service account token.","description_kind":"markdown","required":true},"seconds_to_live":{"type":"number","description":"The key expiration in seconds. It is optional. If it is a positive number an expiration date for the key is set. If it is null, zero or is omitted completely (unless `api_key_max_seconds_to_live` configuration option is set) the key will never expire.","description_kind":"markdown","optional":true},"service_account_id":{"type":"string","description":"The ID of the service account to which the token belongs.","description_kind":"markdown","required":true}},"description":"\n**Note:** This resource is available only with Grafana 9.1+.\n\n* [Official documentation](https://grafana.com/docs/grafana/latest/administration/service-accounts/)\n* [HTTP API](https://grafana.com/docs/grafana/latest/developers/http_api/serviceaccount/#service-account-api)","description_kind":"markdown"}},"grafana_slo":{"version":0,"block":{"attributes":{"description":{"type":"string","description":"Description is a free-text field that can provide more context to an SLO.","description_kind":"markdown","required":true},"id":{"type":"string","description_kind":"plain","optional":true,"computed":true},"name":{"type":"string","description":"Name should be a short description of your indicator. Consider names like \"API Availability\"","description_kind":"markdown","required":true}},"block_types":{"alerting":{"nesting_mode":"list","block":{"block_types":{"annotation":{"nesting_mode":"list","block":{"attributes":{"key":{"type":"string","description_kind":"plain","required":true},"value":{"type":"string","description_kind":"plain","required":true}},"description":"Annotations will be attached to all alerts generated by any of these rules.","description_kind":"markdown"}},"fastburn":{"nesting_mode":"list","block":{"block_types":{"annotation":{"nesting_mode":"list","block":{"attributes":{"key":{"type":"string","description_kind":"plain","required":true},"value":{"type":"string","description_kind":"plain","required":true}},"description":"Annotations to attach only to Fast Burn alerts.","description_kind":"markdown"}},"label":{"nesting_mode":"list","block":{"attributes":{"key":{"type":"string","description_kind":"plain","required":true},"value":{"type":"string","description_kind":"plain","required":true}},"description":"Labels to attach only to Fast Burn alerts.","description_kind":"markdown"}}},"description":"Alerting Rules generated for Fast Burn alerts","description_kind":"markdown"},"max_items":1},"label":{"nesting_mode":"list","block":{"attributes":{"key":{"type":"string","description_kind":"plain","required":true},"value":{"type":"string","description_kind":"plain","required":true}},"description":"Labels will be attached to all alerts generated by any of these rules.","description_kind":"markdown"}},"slowburn":{"nesting_mode":"list","block":{"block_types":{"annotation":{"nesting_mode":"list","block":{"attributes":{"key":{"type":"string","description_kind":"plain","required":true},"value":{"type":"string","description_kind":"plain","required":true}},"description":"Annotations to attach only to Slow Burn alerts.","description_kind":"markdown"}},"label":{"nesting_mode":"list","block":{"attributes":{"key":{"type":"string","description_kind":"plain","required":true},"value":{"type":"string","description_kind":"plain","required":true}},"description":"Labels to attach only to Slow Burn alerts.","description_kind":"markdown"}}},"description":"Alerting Rules generated for Slow Burn alerts","description_kind":"markdown"},"max_items":1}},"description":"Configures the alerting rules that will be generated for each\n\t\t\t\ttime window associated with the SLO. Grafana SLOs can generate\n\t\t\t\talerts when the short-term error budget burn is very high, the\n\t\t\t\tlong-term error budget burn rate is high, or when the remaining\n\t\t\t\terror budget is below a certain threshold. Annotations and Labels support templating.","description_kind":"markdown"},"max_items":1},"destination_datasource":{"nesting_mode":"list","block":{"attributes":{"uid":{"type":"string","description":"UID for the Mimir Datasource","description_kind":"markdown","optional":true}},"description":"Destination Datasource sets the datasource defined for an SLO","description_kind":"markdown"},"max_items":1},"label":{"nesting_mode":"list","block":{"attributes":{"key":{"type":"string","description_kind":"plain","required":true},"value":{"type":"string","description_kind":"plain","required":true}},"description":"Additional labels that will be attached to all metrics generated from the query. These labels are useful for grouping SLOs in dashboard views that you create by hand. Labels must adhere to Prometheus label name schema - \"^[a-zA-Z_][a-zA-Z0-9_]*$\"","description_kind":"markdown"}},"objectives":{"nesting_mode":"list","block":{"attributes":{"value":{"type":"number","description":"Value between 0 and 1. If the value of the query is above the objective, the SLO is met.","description_kind":"markdown","required":true},"window":{"type":"string","description":"A Prometheus-parsable time duration string like 24h, 60m. This is the time window the objective is measured over.","description_kind":"markdown","required":true}},"description":"Over each rolling time window, the remaining error budget will be calculated, and separate alerts can be generated for each time window based on the SLO burn rate or remaining error budget.","description_kind":"markdown"},"min_items":1},"query":{"nesting_mode":"list","block":{"attributes":{"type":{"type":"string","description":"Query type must be one of: \"freeform\", \"query\", \"ratio\", or \"threshold\"","description_kind":"markdown","required":true}},"block_types":{"freeform":{"nesting_mode":"list","block":{"attributes":{"query":{"type":"string","description":"Freeform Query Field","description_kind":"markdown","required":true}},"description_kind":"plain"},"max_items":1},"ratio":{"nesting_mode":"list","block":{"attributes":{"group_by_labels":{"type":["list","string"],"description":"Defines Group By Labels used for per-label alerting. These appear as variables on SLO dashboards to enable filtering and aggregation. Labels must adhere to Prometheus label name schema - \"^[a-zA-Z_][a-zA-Z0-9_]*$\"","description_kind":"markdown","optional":true},"success_metric":{"type":"string","description":"Counter metric for success events (numerator)","description_kind":"markdown","required":true},"total_metric":{"type":"string","description":"Metric for total events (denominator)","description_kind":"markdown","required":true}},"description_kind":"plain"},"max_items":1}},"description":"Query describes the indicator that will be measured against the objective. Freeform Query types are currently supported.","description_kind":"markdown"},"min_items":1}},"description":"\nResource manages Grafana SLOs. \n\n* [Official documentation](https://grafana.com/docs/grafana-cloud/alerting-and-irm/slo/)\n* [API documentation](https://grafana.com/docs/grafana-cloud/alerting-and-irm/slo/api/)\n* [Additional Information On Alerting Rule Annotations and Labels](https://prometheus.io/docs/prometheus/latest/configuration/alerting_rules/#templating/)\n\t\t","description_kind":"markdown"}},"grafana_sso_settings":{"version":0,"block":{"attributes":{"id":{"type":"string","description_kind":"plain","optional":true,"computed":true},"provider_name":{"type":"string","description":"The name of the SSO provider. Supported values: github, gitlab, google, azuread, okta, generic_oauth.","description_kind":"markdown","required":true}},"block_types":{"oauth2_settings":{"nesting_mode":"set","block":{"attributes":{"allow_assign_grafana_admin":{"type":"bool","description":"If enabled, it will automatically sync the Grafana server administrator role.","description_kind":"markdown","optional":true},"allow_sign_up":{"type":"bool","description":"If not enabled, only existing Grafana users can log in using OAuth.","description_kind":"markdown","optional":true},"allowed_domains":{"type":"string","description":"List of comma- or space-separated domains. The user should belong to at least one domain to log in.","description_kind":"markdown","optional":true},"allowed_groups":{"type":"string","description":"List of comma- or space-separated groups. The user should be a member of at least one group to log in. For Generic OAuth, if you configure allowed_groups, you must also configure groups_attribute_path.","description_kind":"markdown","optional":true},"allowed_organizations":{"type":"string","description":"List of comma- or space-separated organizations. The user should be a member of at least one organization to log in.","description_kind":"markdown","optional":true},"api_url":{"type":"string","description":"The user information endpoint of your OAuth2 provider. Required for azuread, okta and generic_oauth providers.","description_kind":"markdown","optional":true},"auth_style":{"type":"string","description":"It determines how client_id and client_secret are sent to Oauth2 provider. Possible values are AutoDetect, InParams, InHeader. Default is AutoDetect.","description_kind":"markdown","optional":true},"auth_url":{"type":"string","description":"The authorization endpoint of your OAuth2 provider. Required for azuread, okta and generic_oauth providers.","description_kind":"markdown","optional":true},"auto_login":{"type":"bool","description":"Log in automatically, skipping the login screen.","description_kind":"markdown","optional":true},"client_id":{"type":"string","description":"The client Id of your OAuth2 app.","description_kind":"markdown","required":true},"client_secret":{"type":"string","description":"The client secret of your OAuth2 app.","description_kind":"markdown","optional":true,"sensitive":true},"custom":{"type":["map","string"],"description":"Custom fields to configure for OAuth2 such as the [force_use_graph_api](https://grafana.com/docs/grafana/latest/setup-grafana/configure-security/configure-authentication/azuread/#force-fetching-groups-from-microsoft-graph-api) field.","description_kind":"markdown","optional":true},"define_allowed_groups":{"type":"bool","description":"Define allowed groups.","description_kind":"markdown","optional":true},"define_allowed_teams_ids":{"type":"bool","description":"Define allowed teams ids.","description_kind":"markdown","optional":true},"email_attribute_name":{"type":"string","description":"Name of the key to use for user email lookup within the attributes map of OAuth2 ID token. Only applicable to Generic OAuth.","description_kind":"markdown","optional":true},"email_attribute_path":{"type":"string","description":"JMESPath expression to use for user email lookup from the user information. Only applicable to Generic OAuth.","description_kind":"markdown","optional":true},"empty_scopes":{"type":"bool","description":"If enabled, no scopes will be sent to the OAuth2 provider.","description_kind":"markdown","optional":true},"enabled":{"type":"bool","description":"Define whether this configuration is enabled for the specified provider. Defaults to `true`.","description_kind":"markdown","optional":true},"groups_attribute_path":{"type":"string","description":"JMESPath expression to use for user group lookup. If you configure allowed_groups, you must also configure groups_attribute_path.","description_kind":"markdown","optional":true},"id_token_attribute_name":{"type":"string","description":"The name of the key used to extract the ID token from the returned OAuth2 token. Only applicable to Generic OAuth.","description_kind":"markdown","optional":true},"login_attribute_path":{"type":"string","description":"JMESPath expression to use for user login lookup from the user ID token. Only applicable to Generic OAuth.","description_kind":"markdown","optional":true},"name":{"type":"string","description":"Helpful if you use more than one identity providers or SSO protocols.","description_kind":"markdown","optional":true},"name_attribute_path":{"type":"string","description":"JMESPath expression to use for user name lookup from the user ID token. This name will be used as the user’s display name. Only applicable to Generic OAuth.","description_kind":"markdown","optional":true},"role_attribute_path":{"type":"string","description":"JMESPath expression to use for Grafana role lookup.","description_kind":"markdown","optional":true},"role_attribute_strict":{"type":"bool","description":"If enabled, denies user login if the Grafana role cannot be extracted using Role attribute path.","description_kind":"markdown","optional":true},"scopes":{"type":"string","description":"List of comma- or space-separated OAuth2 scopes.","description_kind":"markdown","optional":true},"signout_redirect_url":{"type":"string","description":"The URL to redirect the user to after signing out from Grafana.","description_kind":"markdown","optional":true},"skip_org_role_sync":{"type":"bool","description":"Prevent synchronizing users’ organization roles from your IdP.","description_kind":"markdown","optional":true},"team_ids":{"type":"string","description":"String list of Team Ids. If set, the user must be a member of one of the given teams to log in. If you configure team_ids, you must also configure teams_url and team_ids_attribute_path.","description_kind":"markdown","optional":true},"team_ids_attribute_path":{"type":"string","description":"The JMESPath expression to use for Grafana Team Id lookup within the results returned by the teams_url endpoint. Only applicable to Generic OAuth.","description_kind":"markdown","optional":true},"teams_url":{"type":"string","description":"The URL used to query for Team Ids. If not set, the default value is /teams. If you configure teams_url, you must also configure team_ids_attribute_path. Only applicable to Generic OAuth.","description_kind":"markdown","optional":true},"tls_client_ca":{"type":"string","description":"The path to the trusted certificate authority list. Is not applicable on Grafana Cloud.","description_kind":"markdown","optional":true},"tls_client_cert":{"type":"string","description":"The path to the certificate. Is not applicable on Grafana Cloud.","description_kind":"markdown","optional":true},"tls_client_key":{"type":"string","description":"The path to the key. Is not applicable on Grafana Cloud.","description_kind":"markdown","optional":true},"tls_skip_verify_insecure":{"type":"bool","description":"If enabled, the client accepts any certificate presented by the server and any host name in that certificate. You should only use this for testing, because this mode leaves SSL/TLS susceptible to man-in-the-middle attacks.","description_kind":"markdown","optional":true},"token_url":{"type":"string","description":"The token endpoint of your OAuth2 provider. Required for azuread, okta and generic_oauth providers.","description_kind":"markdown","optional":true},"use_pkce":{"type":"bool","description":"If enabled, Grafana will use Proof Key for Code Exchange (PKCE) with the OAuth2 Authorization Code Grant.","description_kind":"markdown","optional":true},"use_refresh_token":{"type":"bool","description":"If enabled, Grafana will fetch a new access token using the refresh token provided by the OAuth2 provider.","description_kind":"markdown","optional":true}},"description":"The SSO settings set.","description_kind":"markdown"},"min_items":1,"max_items":1}},"description":"\nManages Grafana SSO Settings for OAuth2. SAML support will be added soon.\n\n* [Official documentation](https://grafana.com/docs/grafana/latest/setup-grafana/configure-security/configure-authentication/)\n* [HTTP API](https://grafana.com/docs/grafana/latest/developers/http_api/sso-settings/)\n","description_kind":"markdown"}},"grafana_synthetic_monitoring_check":{"version":0,"block":{"attributes":{"alert_sensitivity":{"type":"string","description":"Can be set to `none`, `low`, `medium`, or `high` to correspond to the check [alert levels](https://grafana.com/docs/grafana-cloud/monitor-public-endpoints/configure-alerts/synthetic-monitoring-alerting/). Defaults to `none`.","description_kind":"markdown","optional":true},"basic_metrics_only":{"type":"bool","description":"Metrics are reduced by default. Set this to `false` if you'd like to publish all metrics. We maintain a [full list of metrics](https://github.com/grafana/synthetic-monitoring-agent/tree/main/internal/scraper/testdata) collected for each. Defaults to `true`.","description_kind":"markdown","optional":true},"enabled":{"type":"bool","description":"Whether to enable the check. Defaults to `true`.","description_kind":"markdown","optional":true},"frequency":{"type":"number","description":"How often the check runs in milliseconds (the value is not truly a \"frequency\" but a \"period\"). The minimum acceptable value is 1 second (1000 ms), and the maximum is 120 seconds (120000 ms). Defaults to `60000`.","description_kind":"markdown","optional":true},"id":{"type":"string","description":"The ID of the check.","description_kind":"markdown","computed":true},"job":{"type":"string","description":"Name used for job label.","description_kind":"markdown","required":true},"labels":{"type":["map","string"],"description":"Custom labels to be included with collected metrics and logs. The maximum number of labels that can be specified per check is 5. These are applied, along with the probe-specific labels, to the outgoing metrics. The names and values of the labels cannot be empty, and the maximum length is 32 bytes.","description_kind":"markdown","optional":true},"probes":{"type":["set","number"],"description":"List of probe location IDs where this target will be checked from.","description_kind":"markdown","required":true},"target":{"type":"string","description":"Hostname to ping.","description_kind":"markdown","required":true},"tenant_id":{"type":"number","description":"The tenant ID of the check.","description_kind":"markdown","computed":true},"timeout":{"type":"number","description":"Specifies the maximum running time for the check in milliseconds. The minimum acceptable value is 1 second (1000 ms), and the maximum 10 seconds (10000 ms). Defaults to `3000`.","description_kind":"markdown","optional":true}},"block_types":{"settings":{"nesting_mode":"set","block":{"block_types":{"dns":{"nesting_mode":"set","block":{"attributes":{"ip_version":{"type":"string","description":"Options are `V4`, `V6`, `Any`. Specifies whether the corresponding check will be performed using IPv4 or IPv6. The `Any` value indicates that IPv6 should be used, falling back to IPv4 if that's not available. Defaults to `V4`.","description_kind":"markdown","optional":true},"port":{"type":"number","description":"Port to target. Defaults to `53`.","description_kind":"markdown","optional":true},"protocol":{"type":"string","description":"`TCP` or `UDP`. Defaults to `UDP`.","description_kind":"markdown","optional":true},"record_type":{"type":"string","description":"One of `ANY`, `A`, `AAAA`, `CNAME`, `MX`, `NS`, `PTR`, `SOA`, `SRV`, `TXT`. Defaults to `A`.","description_kind":"markdown","optional":true},"server":{"type":"string","description":"DNS server address to target. Defaults to `8.8.8.8`.","description_kind":"markdown","optional":true},"source_ip_address":{"type":"string","description":"Source IP address.","description_kind":"markdown","optional":true},"valid_r_codes":{"type":["set","string"],"description":"List of valid response codes. Options include `NOERROR`, `BADALG`, `BADMODE`, `BADKEY`, `BADCOOKIE`, `BADNAME`, `BADSIG`, `BADTIME`, `BADTRUNC`, `BADVERS`, `FORMERR`, `NOTIMP`, `NOTAUTH`, `NOTZONE`, `NXDOMAIN`, `NXRRSET`, `REFUSED`, `SERVFAIL`, `YXDOMAIN`, `YXRRSET`.","description_kind":"markdown","optional":true}},"block_types":{"validate_additional_rrs":{"nesting_mode":"set","block":{"attributes":{"fail_if_matches_regexp":{"type":["set","string"],"description":"Fail if value matches regex.","description_kind":"markdown","optional":true},"fail_if_not_matches_regexp":{"type":["set","string"],"description":"Fail if value does not match regex.","description_kind":"markdown","optional":true}},"description":"Validate additional matches.","description_kind":"markdown"}},"validate_answer_rrs":{"nesting_mode":"set","block":{"attributes":{"fail_if_matches_regexp":{"type":["set","string"],"description":"Fail if value matches regex.","description_kind":"markdown","optional":true},"fail_if_not_matches_regexp":{"type":["set","string"],"description":"Fail if value does not match regex.","description_kind":"markdown","optional":true}},"description":"Validate response answer.","description_kind":"markdown"},"max_items":1},"validate_authority_rrs":{"nesting_mode":"set","block":{"attributes":{"fail_if_matches_regexp":{"type":["set","string"],"description":"Fail if value matches regex.","description_kind":"markdown","optional":true},"fail_if_not_matches_regexp":{"type":["set","string"],"description":"Fail if value does not match regex.","description_kind":"markdown","optional":true}},"description":"Validate response authority.","description_kind":"markdown"},"max_items":1}},"description":"Settings for DNS check. The target must be a valid hostname (or IP address for `PTR` records).","description_kind":"markdown"},"max_items":1},"http":{"nesting_mode":"set","block":{"attributes":{"bearer_token":{"type":"string","description":"Token for use with bearer authorization header.","description_kind":"markdown","optional":true},"body":{"type":"string","description":"The body of the HTTP request used in probe.","description_kind":"markdown","optional":true},"cache_busting_query_param_name":{"type":"string","description":"The name of the query parameter used to prevent the server from using a cached response. Each probe will assign a random value to this parameter each time a request is made.","description_kind":"markdown","optional":true},"fail_if_body_matches_regexp":{"type":["set","string"],"description":"List of regexes. If any match the response body, the check will fail.","description_kind":"markdown","optional":true},"fail_if_body_not_matches_regexp":{"type":["set","string"],"description":"List of regexes. If any do not match the response body, the check will fail.","description_kind":"markdown","optional":true},"fail_if_not_ssl":{"type":"bool","description":"Fail if SSL is not present. Defaults to `false`.","description_kind":"markdown","optional":true},"fail_if_ssl":{"type":"bool","description":"Fail if SSL is present. Defaults to `false`.","description_kind":"markdown","optional":true},"headers":{"type":["set","string"],"description":"The HTTP headers set for the probe.","description_kind":"markdown","optional":true},"ip_version":{"type":"string","description":"Options are `V4`, `V6`, `Any`. Specifies whether the corresponding check will be performed using IPv4 or IPv6. The `Any` value indicates that IPv6 should be used, falling back to IPv4 if that's not available. Defaults to `V4`.","description_kind":"markdown","optional":true},"method":{"type":"string","description":"Request method. One of `GET`, `CONNECT`, `DELETE`, `HEAD`, `OPTIONS`, `POST`, `PUT`, `TRACE` Defaults to `GET`.","description_kind":"markdown","optional":true},"no_follow_redirects":{"type":"bool","description":"Do not follow redirects. Defaults to `false`.","description_kind":"markdown","optional":true},"proxy_connect_headers":{"type":["set","string"],"description":"The HTTP headers sent to the proxy URL","description_kind":"markdown","optional":true},"proxy_url":{"type":"string","description":"Proxy URL.","description_kind":"markdown","optional":true},"valid_http_versions":{"type":["set","string"],"description":"List of valid HTTP versions. Options include `HTTP/1.0`, `HTTP/1.1`, `HTTP/2.0`","description_kind":"markdown","optional":true},"valid_status_codes":{"type":["set","number"],"description":"Accepted status codes. If unset, defaults to 2xx.","description_kind":"markdown","optional":true}},"block_types":{"basic_auth":{"nesting_mode":"set","block":{"attributes":{"password":{"type":"string","description":"Basic auth password.","description_kind":"markdown","required":true},"username":{"type":"string","description":"Basic auth username.","description_kind":"markdown","required":true}},"description":"Basic auth settings.","description_kind":"markdown"},"max_items":1},"fail_if_header_matches_regexp":{"nesting_mode":"set","block":{"attributes":{"allow_missing":{"type":"bool","description":"Allow header to be missing from responses. Defaults to `false`.","description_kind":"markdown","optional":true},"header":{"type":"string","description":"Header name.","description_kind":"markdown","required":true},"regexp":{"type":"string","description":"Regex that header value should match.","description_kind":"markdown","required":true}},"description":"Check fails if headers match.","description_kind":"markdown"}},"fail_if_header_not_matches_regexp":{"nesting_mode":"set","block":{"attributes":{"allow_missing":{"type":"bool","description":"Allow header to be missing from responses. Defaults to `false`.","description_kind":"markdown","optional":true},"header":{"type":"string","description":"Header name.","description_kind":"markdown","required":true},"regexp":{"type":"string","description":"Regex that header value should match.","description_kind":"markdown","required":true}},"description":"Check fails if headers do not match.","description_kind":"markdown"}},"tls_config":{"nesting_mode":"set","block":{"attributes":{"ca_cert":{"type":"string","description":"CA certificate in PEM format.","description_kind":"markdown","optional":true},"client_cert":{"type":"string","description":"Client certificate in PEM format.","description_kind":"markdown","optional":true},"client_key":{"type":"string","description":"Client key in PEM format.","description_kind":"markdown","optional":true,"sensitive":true},"insecure_skip_verify":{"type":"bool","description":"Disable target certificate validation. Defaults to `false`.","description_kind":"markdown","optional":true},"server_name":{"type":"string","description":"Used to verify the hostname for the targets.","description_kind":"markdown","optional":true}},"description":"TLS config.","description_kind":"markdown"},"max_items":1}},"description":"Settings for HTTP check. The target must be a URL (http or https).","description_kind":"markdown"},"max_items":1},"multihttp":{"nesting_mode":"set","block":{"block_types":{"entries":{"nesting_mode":"list","block":{"block_types":{"assertions":{"nesting_mode":"list","block":{"attributes":{"condition":{"type":"string","description":"The condition of the assertion: NOT_CONTAINS, EQUALS, STARTS_WITH, ENDS_WITH, TYPE_OF, CONTAINS","description_kind":"markdown","optional":true},"expression":{"type":"string","description":"The expression of the assertion. Should start with $.","description_kind":"markdown","optional":true},"subject":{"type":"string","description":"The subject of the assertion: RESPONSE_HEADERS, HTTP_STATUS_CODE, RESPONSE_BODY","description_kind":"markdown","optional":true},"type":{"type":"string","description":"The type of assertion to make: TEXT, JSON_PATH_VALUE, JSON_PATH_ASSERTION, REGEX_ASSERTION","description_kind":"markdown","required":true},"value":{"type":"string","description":"The value of the assertion","description_kind":"markdown","optional":true}},"description":"Assertions to make on the request response","description_kind":"markdown"}},"request":{"nesting_mode":"set","block":{"attributes":{"method":{"type":"string","description":"The HTTP method to use","description_kind":"markdown","required":true},"url":{"type":"string","description":"The URL for the request","description_kind":"markdown","required":true}},"block_types":{"body":{"nesting_mode":"set","block":{"attributes":{"content_encoding":{"type":"string","description":"The content encoding of the body","description_kind":"markdown","optional":true},"content_type":{"type":"string","description":"The content type of the body","description_kind":"markdown","optional":true},"payload":{"type":"string","description":"The body payload","description_kind":"markdown","optional":true}},"description":"The body of the HTTP request used in probe.","description_kind":"markdown"}},"headers":{"nesting_mode":"set","block":{"attributes":{"name":{"type":"string","description":"Name of the header to send","description_kind":"markdown","required":true},"value":{"type":"string","description":"Value of the header to send","description_kind":"markdown","required":true}},"description":"The headers to send with the request","description_kind":"markdown"}},"query_fields":{"nesting_mode":"set","block":{"attributes":{"name":{"type":"string","description":"Name of the query field to send","description_kind":"markdown","required":true},"value":{"type":"string","description":"Value of the query field to send","description_kind":"markdown","required":true}},"description":"Query fields to send with the request","description_kind":"markdown"}}},"description":"An individual MultiHTTP request","description_kind":"markdown"},"max_items":1},"variables":{"nesting_mode":"list","block":{"attributes":{"attribute":{"type":"string","description":"The attribute to use when finding the variable value. Only used when type is CSS_SELECTOR","description_kind":"markdown","optional":true},"expression":{"type":"string","description":"The expression to when finding the variable. Should start with $. Only use when type is JSON_PATH or REGEX","description_kind":"markdown","optional":true},"name":{"type":"string","description":"The name of the variable to extract","description_kind":"markdown","optional":true},"type":{"type":"string","description":"The method of finding the variable value to extract. JSON_PATH, REGEX, CSS_SELECTOR","description_kind":"markdown","required":true}},"description":"Variables to extract from the request response","description_kind":"markdown"}}},"description_kind":"plain"}}},"description":"Settings for MultiHTTP check. The target must be a URL (http or https)","description_kind":"markdown"},"max_items":1},"ping":{"nesting_mode":"set","block":{"attributes":{"dont_fragment":{"type":"bool","description":"Set the DF-bit in the IP-header. Only works with ipV4. Defaults to `false`.","description_kind":"markdown","optional":true},"ip_version":{"type":"string","description":"Options are `V4`, `V6`, `Any`. Specifies whether the corresponding check will be performed using IPv4 or IPv6. The `Any` value indicates that IPv6 should be used, falling back to IPv4 if that's not available. Defaults to `V4`.","description_kind":"markdown","optional":true},"payload_size":{"type":"number","description":"Payload size. Defaults to `0`.","description_kind":"markdown","optional":true},"source_ip_address":{"type":"string","description":"Source IP address.","description_kind":"markdown","optional":true}},"description":"Settings for ping (ICMP) check. The target must be a valid hostname or IP address.","description_kind":"markdown"},"max_items":1},"tcp":{"nesting_mode":"set","block":{"attributes":{"ip_version":{"type":"string","description":"Options are `V4`, `V6`, `Any`. Specifies whether the corresponding check will be performed using IPv4 or IPv6. The `Any` value indicates that IPv6 should be used, falling back to IPv4 if that's not available. Defaults to `V4`.","description_kind":"markdown","optional":true},"source_ip_address":{"type":"string","description":"Source IP address.","description_kind":"markdown","optional":true},"tls":{"type":"bool","description":"Whether or not TLS is used when the connection is initiated. Defaults to `false`.","description_kind":"markdown","optional":true}},"block_types":{"query_response":{"nesting_mode":"set","block":{"attributes":{"expect":{"type":"string","description":"Response to expect.","description_kind":"markdown","required":true},"send":{"type":"string","description":"Data to send.","description_kind":"markdown","required":true},"start_tls":{"type":"bool","description":"Upgrade TCP connection to TLS. Defaults to `false`.","description_kind":"markdown","optional":true}},"description":"The query sent in the TCP probe and the expected associated response.","description_kind":"markdown"}},"tls_config":{"nesting_mode":"set","block":{"attributes":{"ca_cert":{"type":"string","description":"CA certificate in PEM format.","description_kind":"markdown","optional":true},"client_cert":{"type":"string","description":"Client certificate in PEM format.","description_kind":"markdown","optional":true},"client_key":{"type":"string","description":"Client key in PEM format.","description_kind":"markdown","optional":true,"sensitive":true},"insecure_skip_verify":{"type":"bool","description":"Disable target certificate validation. Defaults to `false`.","description_kind":"markdown","optional":true},"server_name":{"type":"string","description":"Used to verify the hostname for the targets.","description_kind":"markdown","optional":true}},"description":"TLS config.","description_kind":"markdown"},"max_items":1}},"description":"Settings for TCP check. The target must be of the form `\u003chost\u003e:\u003cport\u003e`, where the host portion must be a valid hostname or IP address.","description_kind":"markdown"},"max_items":1},"traceroute":{"nesting_mode":"set","block":{"attributes":{"max_hops":{"type":"number","description":"Maximum TTL for the trace Defaults to `64`.","description_kind":"markdown","optional":true},"max_unknown_hops":{"type":"number","description":"Maximum number of hosts to travers that give no response Defaults to `15`.","description_kind":"markdown","optional":true},"ptr_lookup":{"type":"bool","description":"Reverse lookup hostnames from IP addresses Defaults to `true`.","description_kind":"markdown","optional":true}},"description":"Settings for traceroute check. The target must be a valid hostname or IP address","description_kind":"markdown"},"max_items":1}},"description":"Check settings. Should contain exactly one nested block.","description_kind":"markdown"},"min_items":1,"max_items":1}},"description":"\nSynthetic Monitoring checks are tests that run on selected probes at defined\nintervals and report metrics and logs back to your Grafana Cloud account. The\ntarget for checks can be a domain name, a server, or a website, depending on\nwhat information you would like to gather about your endpoint. You can define\nmultiple checks for a single endpoint to check different capabilities.\n\n* [Official documentation](https://grafana.com/docs/grafana-cloud/monitor-public-endpoints/create-checks/checks/)\n","description_kind":"markdown"}},"grafana_synthetic_monitoring_installation":{"version":0,"block":{"attributes":{"id":{"type":"string","description_kind":"plain","optional":true,"computed":true},"metrics_publisher_key":{"type":"string","description":"The [Grafana Cloud access policy](https://grafana.com/docs/grafana-cloud/account-management/authentication-and-permissions/access-policies/) with the following scopes: `stacks:read`, `metrics:write`, `logs:write`, `traces:write`. This is used to publish metrics and logs to Grafana Cloud stack.","description_kind":"markdown","required":true,"sensitive":true},"sm_access_token":{"type":"string","description":"Generated token to access the SM API.","description_kind":"markdown","computed":true},"stack_id":{"type":"string","description":"The ID or slug of the stack to install SM on.","description_kind":"markdown","required":true},"stack_sm_api_url":{"type":"string","description":"The URL of the SM API to install SM on. This depends on the stack region, find the list of API URLs here: https://grafana.com/docs/grafana-cloud/monitor-public-endpoints/set-up/set-up-private-probes/#probe-api-server-url. A static mapping exists in the provider but it may not contain all the regions. If it does contain the stack's region, this field is computed automatically and readable.","description_kind":"markdown","optional":true,"computed":true}},"description":"\nSets up Synthetic Monitoring on a Grafana cloud stack and generates a token. \nOnce a Grafana Cloud stack is created, a user can either use this resource or go into the UI to install synthetic monitoring.\nThis resource cannot be imported but it can be used on an existing Synthetic Monitoring installation without issues.\n\n**Note that this resource must be used on a provider configured with Grafana Cloud credentials.**\n\n* [Official documentation](https://grafana.com/docs/grafana-cloud/monitor-public-endpoints/set-up/installation/)\n* [API documentation](https://github.com/grafana/synthetic-monitoring-api-go-client/blob/main/docs/API.md#apiv1registerinstall)\n\nRequired access policy scopes:\n\n* stacks:read\n","description_kind":"markdown"}},"grafana_synthetic_monitoring_probe":{"version":0,"block":{"attributes":{"auth_token":{"type":"string","description":"The probe authentication token. Your probe must use this to authenticate with Grafana Cloud.","description_kind":"markdown","computed":true,"sensitive":true},"id":{"type":"string","description":"The ID of the probe.","description_kind":"markdown","computed":true},"labels":{"type":["map","string"],"description":"Custom labels to be included with collected metrics and logs.","description_kind":"markdown","optional":true},"latitude":{"type":"number","description":"Latitude coordinates.","description_kind":"markdown","required":true},"longitude":{"type":"number","description":"Longitude coordinates.","description_kind":"markdown","required":true},"name":{"type":"string","description":"Name of the probe.","description_kind":"markdown","required":true},"public":{"type":"bool","description":"Public probes are run by Grafana Labs and can be used by all users. Only Grafana Labs managed public probes will be set to `true`. Defaults to `false`.","description_kind":"markdown","optional":true},"region":{"type":"string","description":"Region of the probe.","description_kind":"markdown","required":true},"tenant_id":{"type":"number","description":"The tenant ID of the probe.","description_kind":"markdown","computed":true}},"description":"\nBesides the public probes run by Grafana Labs, you can also install your\nown private probes. These are only accessible to you and only write data to\nyour Grafana Cloud account. Private probes are instances of the open source\nGrafana Synthetic Monitoring Agent.\n\n* [Official documentation](https://grafana.com/docs/grafana-cloud/monitor-public-endpoints/set-up/set-up-private-probes/)\n","description_kind":"markdown"}},"grafana_team":{"version":0,"block":{"attributes":{"email":{"type":"string","description":"An email address for the team.","description_kind":"markdown","optional":true},"id":{"type":"string","description_kind":"plain","optional":true,"computed":true},"ignore_externally_synced_members":{"type":"bool","description":"Ignores team members that have been added to team by [Team Sync](https://grafana.com/docs/grafana/latest/setup-grafana/configure-security/configure-team-sync/).\nTeam Sync can be provisioned using [grafana_team_external_group resource](https://registry.terraform.io/providers/grafana/grafana/latest/docs/resources/team_external_group).\n Defaults to `true`.","description_kind":"markdown","optional":true},"members":{"type":["set","string"],"description":"A set of email addresses corresponding to users who should be given membership\nto the team. Note: users specified here must already exist in Grafana.","description_kind":"markdown","optional":true},"name":{"type":"string","description":"The display name for the Grafana team created.","description_kind":"markdown","required":true},"org_id":{"type":"string","description":"The Organization ID. If not set, the Org ID defined in the provider block will be used.","description_kind":"markdown","optional":true},"team_id":{"type":"number","description":"The team id assigned to this team by Grafana.","description_kind":"markdown","computed":true}},"block_types":{"preferences":{"nesting_mode":"list","block":{"attributes":{"home_dashboard_uid":{"type":"string","description":"The UID of the dashboard to display when a team member logs in. Defaults to ``.","description_kind":"markdown","optional":true},"theme":{"type":"string","description":"The default theme for this team. Available themes are `light`, `dark`, `system`, or an empty string for the default theme. Defaults to ``.","description_kind":"markdown","optional":true},"timezone":{"type":"string","description":"The default timezone for this team. Available values are `utc`, `browser`, or an empty string for the default. Defaults to ``.","description_kind":"markdown","optional":true},"week_start":{"type":"string","description":"The default week start day for this team. Available values are `sunday`, `monday`, `saturday`, or an empty string for the default. Defaults to ``.","description_kind":"markdown","optional":true}},"description_kind":"plain"},"max_items":1},"team_sync":{"nesting_mode":"list","block":{"attributes":{"groups":{"type":["set","string"],"description_kind":"plain","optional":true}},"description":"Sync external auth provider groups with this Grafana team. Only available in Grafana Enterprise.\n\t* [Official documentation](https://grafana.com/docs/grafana/latest/setup-grafana/configure-security/configure-team-sync/)\n\t* [HTTP API](https://grafana.com/docs/grafana/latest/developers/http_api/team_sync/)","description_kind":"markdown"},"max_items":1}},"description":"\n* [Official documentation](https://grafana.com/docs/grafana/latest/administration/team-management/)\n* [HTTP API](https://grafana.com/docs/grafana/latest/developers/http_api/team/)\n","description_kind":"markdown"}},"grafana_team_external_group":{"version":0,"block":{"attributes":{"groups":{"type":["set","string"],"description":"The team external groups list","description_kind":"markdown","required":true},"id":{"type":"string","description_kind":"plain","optional":true,"computed":true},"team_id":{"type":"string","description":"The Team ID","description_kind":"markdown","required":true}},"description":"Equivalent to the the `team_sync` attribute of the `grafana_team` resource. Use one or the other to configure a team's external groups syncing config.","description_kind":"markdown"}},"grafana_user":{"version":0,"block":{"attributes":{"email":{"type":"string","description":"The email address of the Grafana user.","description_kind":"markdown","required":true},"id":{"type":"string","description_kind":"plain","optional":true,"computed":true},"is_admin":{"type":"bool","description":"Whether to make user an admin. Defaults to `false`.","description_kind":"markdown","optional":true},"login":{"type":"string","description":"The username for the Grafana user.","description_kind":"markdown","optional":true},"name":{"type":"string","description":"The display name for the Grafana user.","description_kind":"markdown","optional":true},"password":{"type":"string","description":"The password for the Grafana user.","description_kind":"markdown","required":true,"sensitive":true},"user_id":{"type":"number","description":"The numerical ID of the Grafana user.","description_kind":"markdown","computed":true}},"description":"\n* [Official documentation](https://grafana.com/docs/grafana/latest/administration/user-management/server-user-management/)\n* [HTTP API](https://grafana.com/docs/grafana/latest/developers/http_api/user/)\n\nThis resource represents an instance-scoped resource and uses Grafana's admin APIs.\nIt does not work with API tokens or service accounts which are org-scoped. \nYou must use basic auth.\n","description_kind":"markdown"}}},"data_source_schemas":{"grafana_cloud_ips":{"version":0,"block":{"attributes":{"hosted_alerts":{"type":["set","string"],"description":"Set of IP addresses that are used for hosted alerts.","description_kind":"markdown","computed":true},"hosted_grafana":{"type":["set","string"],"description":"Set of IP addresses that are used for hosted Grafana.","description_kind":"markdown","computed":true},"hosted_logs":{"type":["set","string"],"description":"Set of IP addresses that are used for hosted logs.","description_kind":"markdown","computed":true},"hosted_metrics":{"type":["set","string"],"description":"Set of IP addresses that are used for hosted metrics.","description_kind":"markdown","computed":true},"hosted_traces":{"type":["set","string"],"description":"Set of IP addresses that are used for hosted traces.","description_kind":"markdown","computed":true},"id":{"type":"string","description_kind":"plain","optional":true,"computed":true}},"description":"Data source for retrieving sets of cloud IPs. See https://grafana.com/docs/grafana-cloud/reference/allow-list/ for more info","description_kind":"markdown"}},"grafana_cloud_organization":{"version":0,"block":{"attributes":{"created_at":{"type":"string","description_kind":"plain","computed":true},"id":{"type":"string","description_kind":"plain","optional":true,"computed":true},"name":{"type":"string","description_kind":"plain","computed":true},"slug":{"type":"string","description_kind":"plain","optional":true,"computed":true},"updated_at":{"type":"string","description_kind":"plain","computed":true},"url":{"type":"string","description_kind":"plain","computed":true}},"description_kind":"plain"}},"grafana_cloud_stack":{"version":0,"block":{"attributes":{"alertmanager_name":{"type":"string","description":"Name of the Alertmanager instance configured for this stack.","description_kind":"markdown","computed":true},"alertmanager_status":{"type":"string","description":"Status of the Alertmanager instance configured for this stack.","description_kind":"markdown","computed":true},"alertmanager_url":{"type":"string","description":"Base URL of the Alertmanager instance configured for this stack.","description_kind":"markdown","computed":true},"alertmanager_user_id":{"type":"number","description":"User ID of the Alertmanager instance configured for this stack.","description_kind":"markdown","computed":true},"description":{"type":"string","description":"Description of stack.","description_kind":"markdown","computed":true},"graphite_name":{"type":"string","description_kind":"plain","computed":true},"graphite_status":{"type":"string","description_kind":"plain","computed":true},"graphite_url":{"type":"string","description_kind":"plain","computed":true},"graphite_user_id":{"type":"number","description_kind":"plain","computed":true},"id":{"type":"string","description":"The stack id assigned to this stack by Grafana.","description_kind":"markdown","computed":true},"labels":{"type":["map","string"],"description":"A map of labels to assign to the stack. Label keys and values must match the following regexp: \"^[a-zA-Z0-9/\\\\-.]+$\" and stacks cannot have more than 10 labels.","description_kind":"markdown","computed":true},"logs_name":{"type":"string","description_kind":"plain","computed":true},"logs_status":{"type":"string","description_kind":"plain","computed":true},"logs_url":{"type":"string","description_kind":"plain","computed":true},"logs_user_id":{"type":"number","description_kind":"plain","computed":true},"name":{"type":"string","description":"Name of stack. Conventionally matches the url of the instance (e.g. `\u003cstack_slug\u003e.grafana.net`).","description_kind":"markdown","computed":true},"org_id":{"type":"number","description":"Organization id to assign to this stack.","description_kind":"markdown","computed":true},"org_name":{"type":"string","description":"Organization name to assign to this stack.","description_kind":"markdown","computed":true},"org_slug":{"type":"string","description":"Organization slug to assign to this stack.","description_kind":"markdown","computed":true},"otlp_url":{"type":"string","description":"Base URL of the OTLP instance configured for this stack. See https://grafana.com/docs/grafana-cloud/send-data/otlp/send-data-otlp/ for docs on how to use this.","description_kind":"markdown","computed":true},"profiles_name":{"type":"string","description_kind":"plain","computed":true},"profiles_status":{"type":"string","description_kind":"plain","computed":true},"profiles_url":{"type":"string","description_kind":"plain","computed":true},"profiles_user_id":{"type":"number","description_kind":"plain","computed":true},"prometheus_name":{"type":"string","description":"Prometheus name for this instance.","description_kind":"markdown","computed":true},"prometheus_remote_endpoint":{"type":"string","description":"Use this URL to query hosted metrics data e.g. Prometheus data source in Grafana","description_kind":"markdown","computed":true},"prometheus_remote_write_endpoint":{"type":"string","description":"Use this URL to send prometheus metrics to Grafana cloud","description_kind":"markdown","computed":true},"prometheus_status":{"type":"string","description":"Prometheus status for this instance.","description_kind":"markdown","computed":true},"prometheus_url":{"type":"string","description":"Prometheus url for this instance.","description_kind":"markdown","computed":true},"prometheus_user_id":{"type":"number","description":"Prometheus user ID. Used for e.g. remote_write.","description_kind":"markdown","computed":true},"region_slug":{"type":"string","description":"The region this stack is deployed to.","description_kind":"markdown","computed":true},"slug":{"type":"string","description":"Subdomain that the Grafana instance will be available at (i.e. setting slug to “\u003cstack_slug\u003e” will make the instance\navailable at “https://\u003cstack_slug\u003e.grafana.net\".","description_kind":"markdown","required":true},"status":{"type":"string","description":"Status of the stack.","description_kind":"markdown","computed":true},"traces_name":{"type":"string","description_kind":"plain","computed":true},"traces_status":{"type":"string","description_kind":"plain","computed":true},"traces_url":{"type":"string","description":"Base URL of the Traces instance configured for this stack. To use this in the Tempo data source in Grafana, append `/tempo` to the URL.","description_kind":"markdown","computed":true},"traces_user_id":{"type":"number","description_kind":"plain","computed":true},"url":{"type":"string","description":"Custom URL for the Grafana instance. Must have a CNAME setup to point to `.grafana.net` before creating the stack","description_kind":"markdown","computed":true}},"description":"Data source for Grafana Stack","description_kind":"markdown"}},"grafana_dashboard":{"version":0,"block":{"attributes":{"config_json":{"type":"string","description":"The complete dashboard model JSON.","description_kind":"markdown","computed":true},"dashboard_id":{"type":"number","description":"The numerical ID of the Grafana dashboard. Specify either this or `uid`. Defaults to `-1`.","description_kind":"markdown","optional":true},"folder":{"type":"number","description":"Deprecated. Use `folder_uid` instead","description_kind":"markdown","deprecated":true,"computed":true},"folder_uid":{"type":"string","description":"The UID of the folder where the Grafana dashboard is found.","description_kind":"markdown","computed":true},"id":{"type":"string","description_kind":"plain","optional":true,"computed":true},"is_starred":{"type":"bool","description":"Whether or not the Grafana dashboard is starred. Starred Dashboards will show up on your own Home Dashboard by default, and are a convenient way to mark Dashboards that you’re interested in.","description_kind":"markdown","computed":true},"org_id":{"type":"string","description":"The Organization ID. If not set, the Org ID defined in the provider block will be used.","description_kind":"markdown","optional":true},"slug":{"type":"string","description":"URL slug of the dashboard (deprecated).","description_kind":"markdown","computed":true},"title":{"type":"string","description":"The title of the Grafana dashboard.","description_kind":"markdown","computed":true},"uid":{"type":"string","description":"The uid of the Grafana dashboard. Specify either this or `dashboard_id`. Defaults to ``.","description_kind":"markdown","optional":true},"url":{"type":"string","description":"The full URL of the dashboard.","description_kind":"markdown","computed":true},"version":{"type":"number","description":"The numerical version of the Grafana dashboard.","description_kind":"markdown","computed":true}},"description":"\n* [Official documentation](https://grafana.com/docs/grafana/latest/dashboards/)\n* [Folder/Dashboard Search HTTP API](https://grafana.com/docs/grafana/latest/developers/http_api/folder_dashboard_search/)\n* [Dashboard HTTP API](https://grafana.com/docs/grafana/latest/developers/http_api/dashboard/)\n","description_kind":"markdown"}},"grafana_dashboards":{"version":0,"block":{"attributes":{"dashboards":{"type":["list",["object",{"folder_title":"string","title":"string","uid":"string"}]],"description_kind":"plain","computed":true},"folder_ids":{"type":["list","number"],"description":"Deprecated, use `folder_uids` instead.","description_kind":"markdown","deprecated":true,"optional":true},"folder_uids":{"type":["list","string"],"description":"UIDs of Grafana folders containing dashboards. Specify to filter for dashboards by folder (eg. `[\"General\"]` for General folder), or leave blank to get all dashboards in all folders.","description_kind":"markdown","optional":true},"id":{"type":"string","description_kind":"plain","optional":true,"computed":true},"limit":{"type":"number","description":"Maximum number of dashboard search results to return. Defaults to `5000`.","description_kind":"markdown","optional":true},"org_id":{"type":"string","description":"The Organization ID. If not set, the Org ID defined in the provider block will be used.","description_kind":"markdown","optional":true},"tags":{"type":["list","string"],"description":"List of string Grafana dashboard tags to search for, eg. `[\"prod\"]`. Used only as search input, i.e., attribute value will remain unchanged.","description_kind":"markdown","optional":true}},"description":"\nDatasource for retrieving all dashboards. Specify list of folder IDs to search in for dashboards.\n\n* [Official documentation](https://grafana.com/docs/grafana/latest/dashboards/)\n* [Folder/Dashboard Search HTTP API](https://grafana.com/docs/grafana/latest/developers/http_api/folder_dashboard_search/)\n* [Dashboard HTTP API](https://grafana.com/docs/grafana/latest/developers/http_api/dashboard/)\n","description_kind":"markdown"}},"grafana_data_source":{"version":0,"block":{"attributes":{"access_mode":{"type":"string","description":"The method by which Grafana will access the data source: `proxy` or `direct`.","description_kind":"markdown","computed":true},"basic_auth_enabled":{"type":"bool","description":"Whether to enable basic auth for the data source.","description_kind":"markdown","computed":true},"basic_auth_username":{"type":"string","description":"Basic auth username.","description_kind":"markdown","computed":true},"database_name":{"type":"string","description":"(Required by some data source types) The name of the database to use on the selected data source server.","description_kind":"markdown","computed":true},"id":{"type":"string","description":"Deprecated: Use `uid` instead of `id`","description_kind":"markdown","deprecated":true,"optional":true,"computed":true},"is_default":{"type":"bool","description":"Whether to set the data source as default. This should only be `true` to a single data source.","description_kind":"markdown","computed":true},"json_data_encoded":{"type":"string","description":"Serialized JSON string containing the json data. This attribute can be used to pass configuration options to the data source. To figure out what options a datasource has available, see its docs or inspect the network data when saving it from the Grafana UI. Note that keys in this map are usually camelCased.","description_kind":"markdown","computed":true},"name":{"type":"string","description_kind":"plain","optional":true,"computed":true},"org_id":{"type":"string","description":"The Organization ID. If not set, the Org ID defined in the provider block will be used.","description_kind":"markdown","optional":true},"type":{"type":"string","description":"The data source type. Must be one of the supported data source keywords.","description_kind":"markdown","computed":true},"uid":{"type":"string","description_kind":"plain","optional":true,"computed":true},"url":{"type":"string","description":"The URL for the data source. The type of URL required varies depending on the chosen data source type.","description_kind":"markdown","computed":true},"username":{"type":"string","description":"(Required by some data source types) The username to use to authenticate to the data source.","description_kind":"markdown","computed":true}},"description":"Get details about a Grafana Datasource querying by either name, uid or ID","description_kind":"markdown"}},"grafana_folder":{"version":0,"block":{"attributes":{"id":{"type":"string","description_kind":"plain","optional":true,"computed":true},"org_id":{"type":"string","description":"The Organization ID. If not set, the Org ID defined in the provider block will be used.","description_kind":"markdown","optional":true},"parent_folder_uid":{"type":"string","description":"The uid of the parent folder. If set, the folder will be nested. If not set, the folder will be created in the root folder. Note: This requires the nestedFolders feature flag to be enabled on your Grafana instance.","description_kind":"markdown","computed":true},"title":{"type":"string","description":"The title of the folder.","description_kind":"markdown","required":true},"uid":{"type":"string","description":"Unique identifier.","description_kind":"markdown","computed":true},"url":{"type":"string","description":"The full URL of the folder.","description_kind":"markdown","computed":true}},"description":"\n* [Official documentation](https://grafana.com/docs/grafana/latest/dashboards/manage-dashboards/)\n* [HTTP API](https://grafana.com/docs/grafana/latest/developers/http_api/folder/)\n","description_kind":"markdown"}},"grafana_folders":{"version":0,"block":{"attributes":{"folders":{"type":["set",["object",{"id":"number","title":"string","uid":"string","url":"string"}]],"description":"The Grafana instance's folders.","description_kind":"markdown","computed":true},"id":{"type":"string","description_kind":"plain","optional":true,"computed":true},"org_id":{"type":"string","description":"The Organization ID. If not set, the Org ID defined in the provider block will be used.","description_kind":"markdown","optional":true}},"description":"\n* [Official documentation](https://grafana.com/docs/grafana/latest/dashboards/manage-dashboards/)\n* [HTTP API](https://grafana.com/docs/grafana/latest/developers/http_api/folder/)\n","description_kind":"markdown"}},"grafana_library_panel":{"version":0,"block":{"attributes":{"created":{"type":"string","description":"Timestamp when the library panel was created.","description_kind":"markdown","computed":true},"dashboard_ids":{"type":["list","number"],"description":"Numerical IDs of Grafana dashboards containing the library panel.","description_kind":"markdown","computed":true},"description":{"type":"string","description":"Description of the library panel.","description_kind":"markdown","computed":true},"folder_id":{"type":"string","description":"Deprecated. Use `folder_uid` instead","description_kind":"markdown","deprecated":true,"computed":true},"folder_name":{"type":"string","description":"Name of the folder containing the library panel.","description_kind":"markdown","computed":true},"folder_uid":{"type":"string","description":"Unique ID (UID) of the folder containing the library panel.","description_kind":"markdown","computed":true},"id":{"type":"string","description_kind":"plain","optional":true,"computed":true},"model_json":{"type":"string","description":"The JSON model for the library panel.","description_kind":"markdown","computed":true},"name":{"type":"string","description":"Name of the library panel.","description_kind":"markdown","optional":true},"org_id":{"type":"string","description":"The Organization ID. If not set, the Org ID defined in the provider block will be used.","description_kind":"markdown","optional":true},"panel_id":{"type":"number","description":"The numeric ID of the library panel computed by Grafana.","description_kind":"markdown","computed":true},"type":{"type":"string","description":"Type of the library panel (eg. text).","description_kind":"markdown","computed":true},"uid":{"type":"string","description":"The unique identifier (UID) of the library panel.","description_kind":"markdown","optional":true},"updated":{"type":"string","description":"Timestamp when the library panel was last modified.","description_kind":"markdown","computed":true},"version":{"type":"number","description":"Version of the library panel.","description_kind":"markdown","computed":true}},"description":"Data source for retrieving a single library panel by name or uid.","description_kind":"markdown"}},"grafana_oncall_action":{"version":0,"block":{"attributes":{"id":{"type":"string","description_kind":"plain","optional":true,"computed":true},"name":{"type":"string","description":"The action name.","description_kind":"markdown","required":true}},"description":"\n**Note:** This data source is going to be deprecated, please use outgoing webhook data source instead.\n* [HTTP API](https://grafana.com/docs/oncall/latest/oncall-api-reference/outgoing_webhooks/)\n\n!\u003e Deprecated: Use the `grafana_oncall_outgoing_webhook` data source instead.\n","description_kind":"markdown","deprecated":true}},"grafana_oncall_escalation_chain":{"version":0,"block":{"attributes":{"id":{"type":"string","description_kind":"plain","optional":true,"computed":true},"name":{"type":"string","description":"The escalation chain name.","description_kind":"markdown","required":true}},"description":"\n* [HTTP API](https://grafana.com/docs/oncall/latest/oncall-api-reference/escalation_chains/)\n","description_kind":"markdown"}},"grafana_oncall_outgoing_webhook":{"version":0,"block":{"attributes":{"id":{"type":"string","description_kind":"plain","optional":true,"computed":true},"name":{"type":"string","description":"The outgoing webhook name.","description_kind":"markdown","required":true}},"description":"\n* [HTTP API](https://grafana.com/docs/oncall/latest/oncall-api-reference/outgoing_webhooks/)\n","description_kind":"markdown"}},"grafana_oncall_schedule":{"version":0,"block":{"attributes":{"id":{"type":"string","description_kind":"plain","optional":true,"computed":true},"name":{"type":"string","description":"The schedule name.","description_kind":"markdown","required":true},"type":{"type":"string","description":"The schedule type.","description_kind":"markdown","computed":true}},"description":"\n* [Official documentation](https://grafana.com/docs/oncall/latest/manage/on-call-schedules/)\n* [HTTP API](https://grafana.com/docs/oncall/latest/oncall-api-reference/schedules/)\n","description_kind":"markdown"}},"grafana_oncall_slack_channel":{"version":0,"block":{"attributes":{"id":{"type":"string","description_kind":"plain","optional":true,"computed":true},"name":{"type":"string","description":"The Slack channel name.","description_kind":"markdown","required":true},"slack_id":{"type":"string","description":"The Slack ID of the channel.","description_kind":"markdown","computed":true}},"description":"\n* [HTTP API](https://grafana.com/docs/oncall/latest/oncall-api-reference/slack_channels/)\n","description_kind":"markdown"}},"grafana_oncall_team":{"version":0,"block":{"attributes":{"avatar_url":{"type":"string","description_kind":"plain","computed":true},"email":{"type":"string","description_kind":"plain","computed":true},"id":{"type":"string","description_kind":"plain","optional":true,"computed":true},"name":{"type":"string","description":"The team name.","description_kind":"markdown","required":true}},"description_kind":"plain"}},"grafana_oncall_user":{"version":0,"block":{"attributes":{"email":{"type":"string","description":"The email of the user.","description_kind":"markdown","computed":true},"id":{"type":"string","description_kind":"plain","optional":true,"computed":true},"role":{"type":"string","description":"The role of the user.","description_kind":"markdown","computed":true},"username":{"type":"string","description":"The username of the user.","description_kind":"markdown","required":true}},"description":"\n* [HTTP API](https://grafana.com/docs/oncall/latest/oncall-api-reference/users/)\n","description_kind":"markdown"}},"grafana_oncall_user_group":{"version":0,"block":{"attributes":{"id":{"type":"string","description_kind":"plain","optional":true,"computed":true},"slack_handle":{"type":"string","description_kind":"plain","required":true},"slack_id":{"type":"string","description_kind":"plain","computed":true}},"description":"\n* [HTTP API](https://grafana.com/docs/oncall/latest/oncall-api-reference/user_groups/)\n","description_kind":"markdown"}},"grafana_organization":{"version":0,"block":{"attributes":{"admins":{"type":["set","string"],"description":"A list of email addresses corresponding to users given admin access to the organization.","description_kind":"markdown","computed":true},"editors":{"type":["set","string"],"description":"A list of email addresses corresponding to users given editor access to the organization.","description_kind":"markdown","computed":true},"id":{"type":"string","description_kind":"plain","optional":true,"computed":true},"name":{"type":"string","description":"The name of the Organization.","description_kind":"markdown","required":true},"viewers":{"type":["set","string"],"description":"A list of email addresses corresponding to users given viewer access to the organization.","description_kind":"markdown","computed":true}},"description":"\n* [Official documentation](https://grafana.com/docs/grafana/latest/administration/organization-management/)\n* [HTTP API](https://grafana.com/docs/grafana/latest/developers/http_api/org/)\n","description_kind":"markdown"}},"grafana_organization_preferences":{"version":0,"block":{"attributes":{"home_dashboard_id":{"type":"number","description":"The Organization home dashboard ID. Deprecated: Use `home_dashboard_uid` instead.","description_kind":"markdown","deprecated":true,"computed":true},"home_dashboard_uid":{"type":"string","description":"The Organization home dashboard UID. This is only available in Grafana 9.0+.","description_kind":"markdown","computed":true},"id":{"type":"string","description_kind":"plain","optional":true,"computed":true},"org_id":{"type":"string","description":"The Organization ID. If not set, the Org ID defined in the provider block will be used.","description_kind":"markdown","optional":true},"theme":{"type":"string","description":"The Organization theme. Available values are `light`, `dark`, `system`, or an empty string for the default.","description_kind":"markdown","computed":true},"timezone":{"type":"string","description":"The Organization timezone. Available values are `utc`, `browser`, or an empty string for the default.","description_kind":"markdown","computed":true},"week_start":{"type":"string","description":"The Organization week start day. Available values are `sunday`, `monday`, `saturday`, or an empty string for the default.","description_kind":"markdown","computed":true}},"description":"\n* [Official documentation](https://grafana.com/docs/grafana/latest/administration/organization-management/)\n* [HTTP API](https://grafana.com/docs/grafana/latest/developers/http_api/preferences/#get-current-org-prefs)\n","description_kind":"markdown"}},"grafana_role":{"version":0,"block":{"attributes":{"description":{"type":"string","description":"Description of the role.","description_kind":"markdown","computed":true},"display_name":{"type":"string","description":"Display name of the role. Available with Grafana 8.5+.","description_kind":"markdown","computed":true},"global":{"type":"bool","description":"Boolean to state whether the role is available across all organizations or not.","description_kind":"markdown","computed":true},"group":{"type":"string","description":"Group of the role. Available with Grafana 8.5+.","description_kind":"markdown","computed":true},"hidden":{"type":"bool","description":"Boolean to state whether the role should be visible in the Grafana UI or not. Available with Grafana 8.5+.","description_kind":"markdown","computed":true},"id":{"type":"string","description_kind":"plain","optional":true,"computed":true},"name":{"type":"string","description":"Name of the role","description_kind":"markdown","required":true},"org_id":{"type":"string","description":"The Organization ID. If not set, the Org ID defined in the provider block will be used.","description_kind":"markdown","computed":true},"permissions":{"type":["set",["object",{"action":"string","scope":"string"}]],"description":"Specific set of actions granted by the role.","description_kind":"markdown","computed":true},"uid":{"type":"string","description":"Unique identifier of the role. Used for assignments.","description_kind":"markdown","computed":true},"version":{"type":"number","description":"Version of the role. A role is updated only on version increase. This field or `auto_increment_version` should be set.","description_kind":"markdown","computed":true}},"description":"\n**Note:** This resource is available only with Grafana Enterprise 8.+.\n\n* [Official documentation](https://grafana.com/docs/grafana/latest/administration/roles-and-permissions/access-control/)\n* [HTTP API](https://grafana.com/docs/grafana/latest/developers/http_api/access_control/)\n","description_kind":"markdown"}},"grafana_service_account":{"version":0,"block":{"attributes":{"id":{"type":"string","description_kind":"plain","optional":true,"computed":true},"is_disabled":{"type":"bool","description":"The disabled status for the service account.","description_kind":"markdown","computed":true},"name":{"type":"string","description":"The name of the Service Account.","description_kind":"markdown","required":true},"org_id":{"type":"string","description":"The Organization ID. If not set, the Org ID defined in the provider block will be used.","description_kind":"markdown","optional":true},"role":{"type":"string","description":"The basic role of the service account in the organization.","description_kind":"markdown","computed":true}},"description":"\n\t\t* [Official documentation](https://grafana.com/docs/grafana/latest/administration/service-accounts/)\n\t\t* [HTTP API](https://grafana.com/docs/grafana/latest/developers/http_api/serviceaccount/#service-account-api)\n","description_kind":"markdown"}},"grafana_slos":{"version":0,"block":{"attributes":{"id":{"type":"string","description_kind":"plain","optional":true,"computed":true},"slos":{"type":["list",["object",{"alerting":["list",["object",{"annotation":["list",["object",{"key":"string","value":"string"}]],"fastburn":["list",["object",{"annotation":["list",["object",{"key":"string","value":"string"}]],"label":["list",["object",{"key":"string","value":"string"}]]}]],"label":["list",["object",{"key":"string","value":"string"}]],"slowburn":["list",["object",{"annotation":["list",["object",{"key":"string","value":"string"}]],"label":["list",["object",{"key":"string","value":"string"}]]}]]}]],"description":"string","destination_datasource":["list",["object",{"uid":"string"}]],"label":["list",["object",{"key":"string","value":"string"}]],"name":"string","objectives":["list",["object",{"value":"number","window":"string"}]],"query":["list",["object",{"freeform":["list",["object",{"query":"string"}]],"ratio":["list",["object",{"group_by_labels":["list","string"],"success_metric":"string","total_metric":"string"}]],"type":"string"}]],"uuid":"string"}]],"description":"Returns a list of all SLOs\"","description_kind":"markdown","computed":true}},"description":"\nDatasource for retrieving all SLOs.\n\t\t\n* [Official documentation](https://grafana.com/docs/grafana-cloud/alerting-and-irm/slo/)\n* [API documentation](https://grafana.com/docs/grafana-cloud/alerting-and-irm/slo/api/)\n* [Additional Information On Alerting Rule Annotations and Labels](https://prometheus.io/docs/prometheus/latest/configuration/alerting_rules/#templating/)\n\t\t\t\t","description_kind":"markdown"}},"grafana_synthetic_monitoring_probe":{"version":0,"block":{"attributes":{"id":{"type":"string","description":"The ID of the probe.","description_kind":"markdown","computed":true},"labels":{"type":["map","string"],"description":"Custom labels to be included with collected metrics and logs.","description_kind":"markdown","computed":true},"latitude":{"type":"number","description":"Latitude coordinates.","description_kind":"markdown","computed":true},"longitude":{"type":"number","description":"Longitude coordinates.","description_kind":"markdown","computed":true},"name":{"type":"string","description":"Name of the probe.","description_kind":"markdown","required":true},"public":{"type":"bool","description":"Public probes are run by Grafana Labs and can be used by all users. Only Grafana Labs managed public probes will be set to `true`.","description_kind":"markdown","computed":true},"region":{"type":"string","description":"Region of the probe.","description_kind":"markdown","computed":true},"tenant_id":{"type":"number","description":"The tenant ID of the probe.","description_kind":"markdown","computed":true}},"description":"Data source for retrieving a single probe by name.","description_kind":"markdown"}},"grafana_synthetic_monitoring_probes":{"version":0,"block":{"attributes":{"filter_deprecated":{"type":"bool","description":"If true, only probes that are not deprecated will be returned. Defaults to `true`.","description_kind":"markdown","optional":true},"id":{"type":"string","description_kind":"plain","optional":true,"computed":true},"probes":{"type":["map","number"],"description":"Map of probes with their names as keys and IDs as values.","description_kind":"markdown","computed":true}},"description":"Data source for retrieving all probes.","description_kind":"markdown"}},"grafana_team":{"version":0,"block":{"attributes":{"email":{"type":"string","description":"An email address for the team.","description_kind":"markdown","computed":true},"id":{"type":"string","description_kind":"plain","optional":true,"computed":true},"members":{"type":["set","string"],"description":"A set of email addresses corresponding to users who should be given membership\nto the team. Note: users specified here must already exist in Grafana.","description_kind":"markdown","computed":true},"name":{"type":"string","description":"The name of the Grafana team","description_kind":"markdown","required":true},"org_id":{"type":"string","description":"The Organization ID. If not set, the Org ID defined in the provider block will be used.","description_kind":"markdown","optional":true},"preferences":{"type":["list",["object",{"home_dashboard_uid":"string","theme":"string","timezone":"string","week_start":"string"}]],"description_kind":"plain","computed":true},"read_team_sync":{"type":"bool","description":"Whether to read the team sync settings. This is only available in Grafana Enterprise. Defaults to `false`.","description_kind":"markdown","optional":true},"team_id":{"type":"number","description":"The team id assigned to this team by Grafana.","description_kind":"markdown","computed":true},"team_sync":{"type":["list",["object",{"groups":["set","string"]}]],"description":"Sync external auth provider groups with this Grafana team. Only available in Grafana Enterprise.\n\t* [Official documentation](https://grafana.com/docs/grafana/latest/setup-grafana/configure-security/configure-team-sync/)\n\t* [HTTP API](https://grafana.com/docs/grafana/latest/developers/http_api/team_sync/)","description_kind":"markdown","computed":true}},"description":"\n* [Official documentation](https://grafana.com/docs/grafana/latest/administration/team-management/)\n* [HTTP API](https://grafana.com/docs/grafana/latest/developers/http_api/team/)\n","description_kind":"markdown"}},"grafana_user":{"version":0,"block":{"attributes":{"email":{"type":"string","description":"The email address of the Grafana user. Defaults to ``.","description_kind":"markdown","optional":true},"id":{"type":"string","description_kind":"plain","optional":true,"computed":true},"is_admin":{"type":"bool","description":"Whether the user is an admin.","description_kind":"markdown","computed":true},"login":{"type":"string","description":"The username for the Grafana user. Defaults to ``.","description_kind":"markdown","optional":true},"name":{"type":"string","description":"The display name for the Grafana user.","description_kind":"markdown","computed":true},"user_id":{"type":"number","description":"The numerical ID of the Grafana user. Defaults to `-1`.","description_kind":"markdown","optional":true}},"description":"\n* [Official documentation](https://grafana.com/docs/grafana/latest/administration/user-management/server-user-management/)\n* [HTTP API](https://grafana.com/docs/grafana/latest/developers/http_api/user/)\n\nThis data source uses Grafana's admin APIs for reading users which\ndoes not currently work with API Tokens. You must use basic auth.\n","description_kind":"markdown"}},"grafana_users":{"version":0,"block":{"attributes":{"id":{"type":"string","description_kind":"plain","optional":true,"computed":true},"users":{"type":["set",["object",{"email":"string","id":"number","is_admin":"bool","login":"string","name":"string"}]],"description":"The Grafana instance's users.","description_kind":"markdown","computed":true}},"description":"\n* [Official documentation](https://grafana.com/docs/grafana/latest/administration/user-management/server-user-management/)\n* [HTTP API](https://grafana.com/docs/grafana/latest/developers/http_api/user/)\n\t\t\nThis data source uses Grafana's admin APIs for reading users which\ndoes not currently work with API Tokens. You must use basic auth.\n\t\t","description_kind":"markdown"}}}}}} +{"format_version":"1.0","provider_schemas":{"registry.terraform.io/grafana/grafana":{"provider":{"version":0,"block":{"attributes":{"auth":{"type":"string","description":"API token, basic auth in the `username:password` format or `anonymous` (string literal). May alternatively be set via the `GRAFANA_AUTH` environment variable.","description_kind":"markdown","optional":true,"sensitive":true},"ca_cert":{"type":"string","description":"Certificate CA bundle (file path or literal value) to use to verify the Grafana server's certificate. May alternatively be set via the `GRAFANA_CA_CERT` environment variable.","description_kind":"markdown","optional":true},"cloud_access_policy_token":{"type":"string","description":"Access Policy Token for Grafana Cloud. May alternatively be set via the `GRAFANA_CLOUD_ACCESS_POLICY_TOKEN` environment variable.","description_kind":"markdown","optional":true,"sensitive":true},"cloud_api_key":{"type":"string","description":"Deprecated: Use `cloud_access_policy_token` instead.","description_kind":"markdown","deprecated":true,"optional":true,"sensitive":true},"cloud_api_url":{"type":"string","description":"Grafana Cloud's API URL. May alternatively be set via the `GRAFANA_CLOUD_API_URL` environment variable.","description_kind":"markdown","optional":true},"http_headers":{"type":["map","string"],"description":"Optional. HTTP headers mapping keys to values used for accessing the Grafana and Grafana Cloud APIs. May alternatively be set via the `GRAFANA_HTTP_HEADERS` environment variable in JSON format.","description_kind":"markdown","optional":true,"sensitive":true},"insecure_skip_verify":{"type":"bool","description":"Skip TLS certificate verification. May alternatively be set via the `GRAFANA_INSECURE_SKIP_VERIFY` environment variable.","description_kind":"markdown","optional":true},"oncall_access_token":{"type":"string","description":"A Grafana OnCall access token. May alternatively be set via the `GRAFANA_ONCALL_ACCESS_TOKEN` environment variable.","description_kind":"markdown","optional":true,"sensitive":true},"oncall_url":{"type":"string","description":"An Grafana OnCall backend address. May alternatively be set via the `GRAFANA_ONCALL_URL` environment variable.","description_kind":"markdown","optional":true},"org_id":{"type":"number","description":"Deprecated: Use the `org_id` attributes on resources instead.","description_kind":"markdown","deprecated":true,"optional":true},"retries":{"type":"number","description":"The amount of retries to use for Grafana API and Grafana Cloud API calls. May alternatively be set via the `GRAFANA_RETRIES` environment variable.","description_kind":"markdown","optional":true},"retry_status_codes":{"type":["set","string"],"description":"The status codes to retry on for Grafana API and Grafana Cloud API calls. Use `x` as a digit wildcard. Defaults to 429 and 5xx. May alternatively be set via the `GRAFANA_RETRY_STATUS_CODES` environment variable.","description_kind":"markdown","optional":true},"retry_wait":{"type":"number","description":"The amount of time in seconds to wait between retries for Grafana API and Grafana Cloud API calls. May alternatively be set via the `GRAFANA_RETRY_WAIT` environment variable.","description_kind":"markdown","optional":true},"sm_access_token":{"type":"string","description":"A Synthetic Monitoring access token. May alternatively be set via the `GRAFANA_SM_ACCESS_TOKEN` environment variable.","description_kind":"markdown","optional":true,"sensitive":true},"sm_url":{"type":"string","description":"Synthetic monitoring backend address. May alternatively be set via the `GRAFANA_SM_URL` environment variable. The correct value for each service region is cited in the [Synthetic Monitoring documentation](https://grafana.com/docs/grafana-cloud/monitor-public-endpoints/set-up/set-up-private-probes/#probe-api-server-url). Note the `sm_url` value is optional, but it must correspond with the value specified as the `region_slug` in the `grafana_cloud_stack` resource. Also note that when a Terraform configuration contains multiple provider instances managing SM resources associated with the same Grafana stack, specifying an explicit `sm_url` set to the same value for each provider ensures all providers interact with the same SM API.","description_kind":"markdown","optional":true},"store_dashboard_sha256":{"type":"bool","description":"Set to true if you want to save only the sha256sum instead of complete dashboard model JSON in the tfstate.","description_kind":"markdown","optional":true},"tls_cert":{"type":"string","description":"Client TLS certificate (file path or literal value) to use to authenticate to the Grafana server. May alternatively be set via the `GRAFANA_TLS_CERT` environment variable.","description_kind":"markdown","optional":true},"tls_key":{"type":"string","description":"Client TLS key (file path or literal value) to use to authenticate to the Grafana server. May alternatively be set via the `GRAFANA_TLS_KEY` environment variable.","description_kind":"markdown","optional":true},"url":{"type":"string","description":"The root URL of a Grafana server. May alternatively be set via the `GRAFANA_URL` environment variable.","description_kind":"markdown","optional":true}},"description_kind":"plain"}},"resource_schemas":{"grafana_annotation":{"version":0,"block":{"attributes":{"dashboard_id":{"type":"number","description":"The ID of the dashboard on which to create the annotation. Deprecated: Use dashboard_uid instead.","description_kind":"markdown","deprecated":true,"optional":true},"dashboard_uid":{"type":"string","description":"The ID of the dashboard on which to create the annotation.","description_kind":"markdown","optional":true},"id":{"type":"string","description_kind":"plain","optional":true,"computed":true},"org_id":{"type":"string","description":"The Organization ID. If not set, the Org ID defined in the provider block will be used.","description_kind":"markdown","optional":true},"panel_id":{"type":"number","description":"The ID of the dashboard panel on which to create the annotation.","description_kind":"markdown","optional":true},"tags":{"type":["set","string"],"description":"The tags to associate with the annotation.","description_kind":"markdown","optional":true},"text":{"type":"string","description":"The text to associate with the annotation.","description_kind":"markdown","required":true},"time":{"type":"string","description":"The RFC 3339-formatted time string indicating the annotation's time.","description_kind":"markdown","optional":true,"computed":true},"time_end":{"type":"string","description":"The RFC 3339-formatted time string indicating the annotation's end time.","description_kind":"markdown","optional":true,"computed":true}},"description":"\n* [Official documentation](https://grafana.com/docs/grafana/latest/dashboards/build-dashboards/annotate-visualizations/)\n* [HTTP API](https://grafana.com/docs/grafana/latest/developers/http_api/annotations/)\n","description_kind":"markdown"}},"grafana_api_key":{"version":0,"block":{"attributes":{"expiration":{"type":"string","description_kind":"plain","computed":true},"id":{"type":"string","description_kind":"plain","computed":true},"key":{"type":"string","description_kind":"plain","computed":true,"sensitive":true},"name":{"type":"string","description_kind":"plain","required":true},"org_id":{"type":"string","description":"The Organization ID. If not set, the Org ID defined in the provider block will be used.","description_kind":"markdown","optional":true},"role":{"type":"string","description_kind":"plain","required":true},"seconds_to_live":{"type":"number","description_kind":"plain","optional":true}},"description":"\nManages Grafana API Keys.\n\n* [HTTP API](https://grafana.com/docs/grafana/latest/developers/http_api/auth/)\n\n!\u003e Deprecated: please use `grafana_service_account` and `grafana_service_account_token` instead, see [Migrate API keys to Grafana service accounts using Terraform](https://grafana.com/docs/grafana/latest/administration/api-keys/#migrate-api-keys-to-grafana-service-accounts-using-terraform) for more information.\n","description_kind":"markdown","deprecated":true}},"grafana_cloud_access_policy":{"version":0,"block":{"attributes":{"created_at":{"type":"string","description":"Creation date of the access policy.","description_kind":"markdown","computed":true},"display_name":{"type":"string","description":"Display name of the access policy. Defaults to the name.","description_kind":"markdown","optional":true},"id":{"type":"string","description_kind":"plain","optional":true,"computed":true},"name":{"type":"string","description":"Name of the access policy.","description_kind":"markdown","required":true},"policy_id":{"type":"string","description":"ID of the access policy.","description_kind":"markdown","computed":true},"region":{"type":"string","description":"Region where the API is deployed. Generally where the stack is deployed. Use the region list API to get the list of available regions: https://grafana.com/docs/grafana-cloud/developer-resources/api-reference/cloud-api/#list-regions.","description_kind":"markdown","required":true},"scopes":{"type":["set","string"],"description":"Scopes of the access policy. See https://grafana.com/docs/grafana-cloud/account-management/authentication-and-permissions/access-policies/#scopes for possible values.","description_kind":"markdown","required":true},"updated_at":{"type":"string","description":"Last update date of the access policy.","description_kind":"markdown","computed":true}},"block_types":{"realm":{"nesting_mode":"set","block":{"attributes":{"identifier":{"type":"string","description":"The identifier of the org or stack. For orgs, this is the slug, for stacks, this is the stack ID.","description_kind":"markdown","required":true},"type":{"type":"string","description":"Whether a policy applies to a Cloud org or a specific stack. Should be one of `org` or `stack`.","description_kind":"markdown","required":true}},"block_types":{"label_policy":{"nesting_mode":"set","block":{"attributes":{"selector":{"type":"string","description":"The label selector to match in metrics or logs query. Should be in PromQL or LogQL format.","description_kind":"markdown","required":true}},"description_kind":"plain"}}},"description_kind":"plain"},"min_items":1}},"description":"\n* [Official documentation](https://grafana.com/docs/grafana-cloud/account-management/authentication-and-permissions/access-policies/)\n* [API documentation](https://grafana.com/docs/grafana-cloud/developer-resources/api-reference/cloud-api/#create-an-access-policy)\n\nRequired access policy scopes:\n\n* accesspolicies:read\n* accesspolicies:write\n* accesspolicies:delete\n","description_kind":"markdown"}},"grafana_cloud_access_policy_token":{"version":0,"block":{"attributes":{"access_policy_id":{"type":"string","description":"ID of the access policy for which to create a token.","description_kind":"markdown","required":true},"created_at":{"type":"string","description":"Creation date of the access policy token.","description_kind":"markdown","computed":true},"display_name":{"type":"string","description":"Display name of the access policy token. Defaults to the name.","description_kind":"markdown","optional":true},"expires_at":{"type":"string","description":"Expiration date of the access policy token. Does not expire by default.","description_kind":"markdown","optional":true},"id":{"type":"string","description_kind":"plain","optional":true,"computed":true},"name":{"type":"string","description":"Name of the access policy token.","description_kind":"markdown","required":true},"region":{"type":"string","description":"Region of the access policy. Should be set to the same region as the access policy. Use the region list API to get the list of available regions: https://grafana.com/docs/grafana-cloud/developer-resources/api-reference/cloud-api/#list-regions.","description_kind":"markdown","required":true},"token":{"type":"string","description_kind":"plain","computed":true,"sensitive":true},"updated_at":{"type":"string","description":"Last update date of the access policy token.","description_kind":"markdown","computed":true}},"description":"\n* [Official documentation](https://grafana.com/docs/grafana-cloud/account-management/authentication-and-permissions/access-policies/)\n* [API documentation](https://grafana.com/docs/grafana-cloud/developer-resources/api-reference/cloud-api/#create-a-token)\n\nRequired access policy scopes:\n\n* accesspolicies:read\n* accesspolicies:write\n* accesspolicies:delete\n","description_kind":"markdown"}},"grafana_cloud_api_key":{"version":0,"block":{"attributes":{"cloud_org_slug":{"type":"string","description":"The slug of the organization to create the API key in. This is the same slug as the organization name in the URL.","description_kind":"markdown","required":true},"id":{"type":"string","description_kind":"plain","optional":true,"computed":true},"key":{"type":"string","description":"The generated API key.","description_kind":"markdown","computed":true,"sensitive":true},"name":{"type":"string","description":"Name of the API key.","description_kind":"markdown","required":true},"role":{"type":"string","description":"Role of the API key. Should be one of [Viewer Editor Admin MetricsPublisher PluginPublisher]. See https://grafana.com/docs/grafana-cloud/api/#create-api-key for details.","description_kind":"markdown","required":true}},"description":"This resource is deprecated and will be removed in a future release. Please use grafana_cloud_access_policy instead.\n\nManages a single API key on the Grafana Cloud portal (on the organization level)\n* [API documentation](https://grafana.com/docs/grafana-cloud/developer-resources/api-reference/cloud-api/#api-keys)\n\nRequired access policy scopes:\n\n* api-keys:read\n* api-keys:write\n* api-keys:delete\n","description_kind":"markdown","deprecated":true}},"grafana_cloud_org_member":{"version":0,"block":{"attributes":{"id":{"type":"string","description_kind":"plain","computed":true},"org":{"type":"string","description":"The slug or ID of the organization.","description_kind":"markdown","required":true},"receive_billing_emails":{"type":"bool","description":"Whether the user should receive billing emails.","description_kind":"markdown","optional":true,"computed":true},"role":{"type":"string","description":"The role to assign to the user in the organization.","description_kind":"markdown","required":true},"user":{"type":"string","description":"Username or ID of the user to add to the org's members.","description_kind":"markdown","required":true}},"description":"Manages the membership of a user in an organization.","description_kind":"markdown"}},"grafana_cloud_plugin_installation":{"version":0,"block":{"attributes":{"id":{"type":"string","description_kind":"plain","optional":true,"computed":true},"slug":{"type":"string","description":"Slug of the plugin to be installed.","description_kind":"markdown","required":true},"stack_slug":{"type":"string","description":"The stack id to which the plugin should be installed.","description_kind":"markdown","required":true},"version":{"type":"string","description":"Version of the plugin to be installed.","description_kind":"markdown","required":true}},"description":"\nManages Grafana Cloud Plugin Installations.\n\n* [Plugin Catalog](https://grafana.com/grafana/plugins/)\n\nRequired access policy scopes:\n\n* stack-plugins:read\n* stack-plugins:write\n* stack-plugins:delete\n","description_kind":"markdown"}},"grafana_cloud_stack":{"version":0,"block":{"attributes":{"alertmanager_name":{"type":"string","description":"Name of the Alertmanager instance configured for this stack.","description_kind":"markdown","computed":true},"alertmanager_status":{"type":"string","description":"Status of the Alertmanager instance configured for this stack.","description_kind":"markdown","computed":true},"alertmanager_url":{"type":"string","description":"Base URL of the Alertmanager instance configured for this stack.","description_kind":"markdown","computed":true},"alertmanager_user_id":{"type":"number","description":"User ID of the Alertmanager instance configured for this stack.","description_kind":"markdown","computed":true},"description":{"type":"string","description":"Description of stack.","description_kind":"markdown","optional":true},"graphite_name":{"type":"string","description_kind":"plain","computed":true},"graphite_status":{"type":"string","description_kind":"plain","computed":true},"graphite_url":{"type":"string","description_kind":"plain","computed":true},"graphite_user_id":{"type":"number","description_kind":"plain","computed":true},"id":{"type":"string","description":"The stack id assigned to this stack by Grafana.","description_kind":"markdown","computed":true},"labels":{"type":["map","string"],"description":"A map of labels to assign to the stack. Label keys and values must match the following regexp: \"^[a-zA-Z0-9/\\\\-.]+$\" and stacks cannot have more than 10 labels.","description_kind":"markdown","optional":true},"logs_name":{"type":"string","description_kind":"plain","computed":true},"logs_status":{"type":"string","description_kind":"plain","computed":true},"logs_url":{"type":"string","description_kind":"plain","computed":true},"logs_user_id":{"type":"number","description_kind":"plain","computed":true},"name":{"type":"string","description":"Name of stack. Conventionally matches the url of the instance (e.g. `\u003cstack_slug\u003e.grafana.net`).","description_kind":"markdown","required":true},"org_id":{"type":"number","description":"Organization id to assign to this stack.","description_kind":"markdown","computed":true},"org_name":{"type":"string","description":"Organization name to assign to this stack.","description_kind":"markdown","computed":true},"org_slug":{"type":"string","description":"Organization slug to assign to this stack.","description_kind":"markdown","computed":true},"otlp_url":{"type":"string","description":"Base URL of the OTLP instance configured for this stack. See https://grafana.com/docs/grafana-cloud/send-data/otlp/send-data-otlp/ for docs on how to use this.","description_kind":"markdown","computed":true},"profiles_name":{"type":"string","description_kind":"plain","computed":true},"profiles_status":{"type":"string","description_kind":"plain","computed":true},"profiles_url":{"type":"string","description_kind":"plain","computed":true},"profiles_user_id":{"type":"number","description_kind":"plain","computed":true},"prometheus_name":{"type":"string","description":"Prometheus name for this instance.","description_kind":"markdown","computed":true},"prometheus_remote_endpoint":{"type":"string","description":"Use this URL to query hosted metrics data e.g. Prometheus data source in Grafana","description_kind":"markdown","computed":true},"prometheus_remote_write_endpoint":{"type":"string","description":"Use this URL to send prometheus metrics to Grafana cloud","description_kind":"markdown","computed":true},"prometheus_status":{"type":"string","description":"Prometheus status for this instance.","description_kind":"markdown","computed":true},"prometheus_url":{"type":"string","description":"Prometheus url for this instance.","description_kind":"markdown","computed":true},"prometheus_user_id":{"type":"number","description":"Prometheus user ID. Used for e.g. remote_write.","description_kind":"markdown","computed":true},"region_slug":{"type":"string","description":"Region slug to assign to this stack. Changing region will destroy the existing stack and create a new one in the desired region. Use the region list API to get the list of available regions: https://grafana.com/docs/grafana-cloud/developer-resources/api-reference/cloud-api/#list-regions.","description_kind":"markdown","optional":true},"slug":{"type":"string","description":"Subdomain that the Grafana instance will be available at. Setting slug to `\u003cstack_slug\u003e` will make the instance available at `https://\u003cstack_slug\u003e.grafana.net`.","description_kind":"markdown","required":true},"status":{"type":"string","description":"Status of the stack.","description_kind":"markdown","computed":true},"traces_name":{"type":"string","description_kind":"plain","computed":true},"traces_status":{"type":"string","description_kind":"plain","computed":true},"traces_url":{"type":"string","description":"Base URL of the Traces instance configured for this stack. To use this in the Tempo data source in Grafana, append `/tempo` to the URL.","description_kind":"markdown","computed":true},"traces_user_id":{"type":"number","description_kind":"plain","computed":true},"url":{"type":"string","description":"Custom URL for the Grafana instance. Must have a CNAME setup to point to `.grafana.net` before creating the stack","description_kind":"markdown","optional":true},"wait_for_readiness":{"type":"bool","description":"Whether to wait for readiness of the stack after creating it. The check is a HEAD request to the stack URL (Grafana instance). Defaults to `true`.","description_kind":"markdown","optional":true},"wait_for_readiness_timeout":{"type":"string","description":"How long to wait for readiness (if enabled). Defaults to `5m0s`.","description_kind":"markdown","optional":true}},"description":"\n* [Official documentation](https://grafana.com/docs/grafana-cloud/developer-resources/api-reference/cloud-api/#stacks/)\n\nRequired access policy scopes:\n\n* stacks:read\n* stacks:write\n* stacks:delete\n","description_kind":"markdown"}},"grafana_cloud_stack_api_key":{"version":0,"block":{"attributes":{"expiration":{"type":"string","description_kind":"plain","computed":true},"id":{"type":"string","description_kind":"plain","computed":true},"key":{"type":"string","description_kind":"plain","computed":true,"sensitive":true},"name":{"type":"string","description_kind":"plain","required":true},"role":{"type":"string","description_kind":"plain","required":true},"seconds_to_live":{"type":"number","description_kind":"plain","optional":true},"stack_slug":{"type":"string","description_kind":"plain","required":true}},"description":"\nManages API keys of a Grafana Cloud stack using the Cloud API\nThis can be used to bootstrap a management API key for a new stack\n\n* [HTTP API](https://grafana.com/docs/grafana/latest/developers/http_api/auth/)\n\nRequired access policy scopes:\n\n* stack-api-keys:write\n\n!\u003e Deprecated: please use `grafana_cloud_stack_service_account` and `grafana_cloud_stack_service_account_token` instead, see https://grafana.com/docs/grafana/next/administration/api-keys/#migrate-api-keys-to-grafana-service-accounts-using-terraform.\n","description_kind":"markdown","deprecated":true}},"grafana_cloud_stack_service_account":{"version":0,"block":{"attributes":{"id":{"type":"string","description_kind":"plain","optional":true,"computed":true},"is_disabled":{"type":"bool","description":"The disabled status for the service account. Defaults to `false`.","description_kind":"markdown","optional":true},"name":{"type":"string","description":"The name of the service account.","description_kind":"markdown","required":true},"role":{"type":"string","description":"The basic role of the service account in the organization.","description_kind":"markdown","required":true},"stack_slug":{"type":"string","description_kind":"plain","required":true}},"description":"\nManages service accounts of a Grafana Cloud stack using the Cloud API\nThis can be used to bootstrap a management service account for a new stack\n\n* [Official documentation](https://grafana.com/docs/grafana/latest/administration/service-accounts/)\n* [HTTP API](https://grafana.com/docs/grafana/latest/developers/http_api/serviceaccount/#service-account-api)\n\nRequired access policy scopes:\n\n* stacks:read\n* stack-service-accounts:write\n","description_kind":"markdown"}},"grafana_cloud_stack_service_account_token":{"version":0,"block":{"attributes":{"expiration":{"type":"string","description_kind":"plain","computed":true},"has_expired":{"type":"bool","description_kind":"plain","computed":true},"id":{"type":"string","description_kind":"plain","optional":true,"computed":true},"key":{"type":"string","description_kind":"plain","computed":true,"sensitive":true},"name":{"type":"string","description_kind":"plain","required":true},"seconds_to_live":{"type":"number","description_kind":"plain","optional":true},"service_account_id":{"type":"string","description_kind":"plain","required":true},"stack_slug":{"type":"string","description_kind":"plain","required":true}},"description":"\nManages service account tokens of a Grafana Cloud stack using the Cloud API\nThis can be used to bootstrap a management service account token for a new stack\n\n* [Official documentation](https://grafana.com/docs/grafana/latest/administration/service-accounts/)\n* [HTTP API](https://grafana.com/docs/grafana/latest/developers/http_api/serviceaccount/#service-account-api)\n\nRequired access policy scopes:\n\n* stack-service-accounts:write\n","description_kind":"markdown"}},"grafana_contact_point":{"version":0,"block":{"attributes":{"disable_provenance":{"type":"bool","description":"Allow modifying the contact point from other sources than Terraform or the Grafana API. Defaults to `false`.","description_kind":"markdown","optional":true},"id":{"type":"string","description_kind":"plain","optional":true,"computed":true},"name":{"type":"string","description":"The name of the contact point.","description_kind":"markdown","required":true},"org_id":{"type":"string","description":"The Organization ID. If not set, the Org ID defined in the provider block will be used.","description_kind":"markdown","optional":true}},"block_types":{"alertmanager":{"nesting_mode":"set","block":{"attributes":{"basic_auth_password":{"type":"string","description":"The password component of the basic auth credentials to use.","description_kind":"markdown","optional":true,"sensitive":true},"basic_auth_user":{"type":"string","description":"The username component of the basic auth credentials to use.","description_kind":"markdown","optional":true},"disable_resolve_message":{"type":"bool","description":"Whether to disable sending resolve messages. Defaults to `false`.","description_kind":"markdown","optional":true},"settings":{"type":["map","string"],"description":"Additional custom properties to attach to the notifier. Defaults to `map[]`.","description_kind":"markdown","optional":true,"sensitive":true},"uid":{"type":"string","description":"The UID of the contact point.","description_kind":"markdown","computed":true},"url":{"type":"string","description":"The URL of the Alertmanager instance.","description_kind":"markdown","required":true}},"description":"A contact point that sends notifications to other Alertmanager instances.","description_kind":"markdown"}},"dingding":{"nesting_mode":"set","block":{"attributes":{"disable_resolve_message":{"type":"bool","description":"Whether to disable sending resolve messages. Defaults to `false`.","description_kind":"markdown","optional":true},"message":{"type":"string","description":"The templated content of the message.","description_kind":"markdown","optional":true},"message_type":{"type":"string","description":"The format of message to send - either 'link' or 'actionCard'","description_kind":"markdown","optional":true},"settings":{"type":["map","string"],"description":"Additional custom properties to attach to the notifier. Defaults to `map[]`.","description_kind":"markdown","optional":true,"sensitive":true},"title":{"type":"string","description":"The templated title of the message.","description_kind":"markdown","optional":true},"uid":{"type":"string","description":"The UID of the contact point.","description_kind":"markdown","computed":true},"url":{"type":"string","description":"The DingDing webhook URL.","description_kind":"markdown","required":true}},"description":"A contact point that sends notifications to DingDing.","description_kind":"markdown"}},"discord":{"nesting_mode":"set","block":{"attributes":{"avatar_url":{"type":"string","description":"The URL of a custom avatar image to use. Defaults to ``.","description_kind":"markdown","optional":true},"disable_resolve_message":{"type":"bool","description":"Whether to disable sending resolve messages. Defaults to `false`.","description_kind":"markdown","optional":true},"message":{"type":"string","description":"The templated content of the message. Defaults to ``.","description_kind":"markdown","optional":true},"settings":{"type":["map","string"],"description":"Additional custom properties to attach to the notifier. Defaults to `map[]`.","description_kind":"markdown","optional":true,"sensitive":true},"title":{"type":"string","description":"The templated content of the title.","description_kind":"markdown","optional":true},"uid":{"type":"string","description":"The UID of the contact point.","description_kind":"markdown","computed":true},"url":{"type":"string","description":"The discord webhook URL.","description_kind":"markdown","required":true,"sensitive":true},"use_discord_username":{"type":"bool","description":"Whether to use the bot account's plain username instead of \"Grafana.\" Defaults to `false`.","description_kind":"markdown","optional":true}},"description":"A contact point that sends notifications as Discord messages","description_kind":"markdown"}},"email":{"nesting_mode":"set","block":{"attributes":{"addresses":{"type":["list","string"],"description":"The addresses to send emails to.","description_kind":"markdown","required":true},"disable_resolve_message":{"type":"bool","description":"Whether to disable sending resolve messages. Defaults to `false`.","description_kind":"markdown","optional":true},"message":{"type":"string","description":"The templated content of the email. Defaults to ``.","description_kind":"markdown","optional":true},"settings":{"type":["map","string"],"description":"Additional custom properties to attach to the notifier. Defaults to `map[]`.","description_kind":"markdown","optional":true,"sensitive":true},"single_email":{"type":"bool","description":"Whether to send a single email CC'ing all addresses, rather than a separate email to each address. Defaults to `false`.","description_kind":"markdown","optional":true},"subject":{"type":"string","description":"The templated subject line of the email. Defaults to ``.","description_kind":"markdown","optional":true},"uid":{"type":"string","description":"The UID of the contact point.","description_kind":"markdown","computed":true}},"description":"A contact point that sends notifications to an email address.","description_kind":"markdown"}},"googlechat":{"nesting_mode":"set","block":{"attributes":{"disable_resolve_message":{"type":"bool","description":"Whether to disable sending resolve messages. Defaults to `false`.","description_kind":"markdown","optional":true},"message":{"type":"string","description":"The templated content of the message.","description_kind":"markdown","optional":true},"settings":{"type":["map","string"],"description":"Additional custom properties to attach to the notifier. Defaults to `map[]`.","description_kind":"markdown","optional":true,"sensitive":true},"title":{"type":"string","description":"The templated content of the title.","description_kind":"markdown","optional":true},"uid":{"type":"string","description":"The UID of the contact point.","description_kind":"markdown","computed":true},"url":{"type":"string","description":"The Google Chat webhook URL.","description_kind":"markdown","required":true,"sensitive":true}},"description":"A contact point that sends notifications to Google Chat.","description_kind":"markdown"}},"kafka":{"nesting_mode":"set","block":{"attributes":{"api_version":{"type":"string","description":"The API version to use when contacting the Kafka REST Server. Supported: v2 (default) and v3. Defaults to `v2`.","description_kind":"markdown","optional":true},"cluster_id":{"type":"string","description":"The Id of cluster to use when contacting the Kafka REST Server. Required api_version to be 'v3'","description_kind":"markdown","optional":true},"description":{"type":"string","description":"The templated description of the Kafka message.","description_kind":"markdown","optional":true},"details":{"type":"string","description":"The templated details to include with the message.","description_kind":"markdown","optional":true},"disable_resolve_message":{"type":"bool","description":"Whether to disable sending resolve messages. Defaults to `false`.","description_kind":"markdown","optional":true},"password":{"type":"string","description":"The password to use when making a call to the Kafka REST Proxy","description_kind":"markdown","optional":true,"sensitive":true},"rest_proxy_url":{"type":"string","description":"The URL of the Kafka REST proxy to send requests to.","description_kind":"markdown","required":true,"sensitive":true},"settings":{"type":["map","string"],"description":"Additional custom properties to attach to the notifier. Defaults to `map[]`.","description_kind":"markdown","optional":true,"sensitive":true},"topic":{"type":"string","description":"The name of the Kafka topic to publish to.","description_kind":"markdown","required":true},"uid":{"type":"string","description":"The UID of the contact point.","description_kind":"markdown","computed":true},"username":{"type":"string","description":"The user name to use when making a call to the Kafka REST Proxy","description_kind":"markdown","optional":true}},"description":"A contact point that publishes notifications to Apache Kafka topics.","description_kind":"markdown"}},"line":{"nesting_mode":"set","block":{"attributes":{"description":{"type":"string","description":"The templated description of the message.","description_kind":"markdown","optional":true},"disable_resolve_message":{"type":"bool","description":"Whether to disable sending resolve messages. Defaults to `false`.","description_kind":"markdown","optional":true},"settings":{"type":["map","string"],"description":"Additional custom properties to attach to the notifier. Defaults to `map[]`.","description_kind":"markdown","optional":true,"sensitive":true},"title":{"type":"string","description":"The templated title of the message.","description_kind":"markdown","optional":true},"token":{"type":"string","description":"The bearer token used to authorize the client.","description_kind":"markdown","required":true,"sensitive":true},"uid":{"type":"string","description":"The UID of the contact point.","description_kind":"markdown","computed":true}},"description":"A contact point that sends notifications to LINE.me.","description_kind":"markdown"}},"oncall":{"nesting_mode":"set","block":{"attributes":{"authorization_credentials":{"type":"string","description":"Allows a custom authorization scheme - attaches an auth header with this value. Do not use in conjunction with basic auth parameters.","description_kind":"markdown","optional":true,"sensitive":true},"authorization_scheme":{"type":"string","description":"Allows a custom authorization scheme - attaches an auth header with this name. Do not use in conjunction with basic auth parameters.","description_kind":"markdown","optional":true},"basic_auth_password":{"type":"string","description":"The username to use in basic auth headers attached to the request. If omitted, basic auth will not be used.","description_kind":"markdown","optional":true,"sensitive":true},"basic_auth_user":{"type":"string","description":"The username to use in basic auth headers attached to the request. If omitted, basic auth will not be used.","description_kind":"markdown","optional":true},"disable_resolve_message":{"type":"bool","description":"Whether to disable sending resolve messages. Defaults to `false`.","description_kind":"markdown","optional":true},"http_method":{"type":"string","description":"The HTTP method to use in the request. Defaults to `POST`.","description_kind":"markdown","optional":true},"max_alerts":{"type":"number","description":"The maximum number of alerts to send in a single request. This can be helpful in limiting the size of the request body. The default is 0, which indicates no limit.","description_kind":"markdown","optional":true},"message":{"type":"string","description":"Custom message. You can use template variables.","description_kind":"markdown","optional":true},"settings":{"type":["map","string"],"description":"Additional custom properties to attach to the notifier. Defaults to `map[]`.","description_kind":"markdown","optional":true,"sensitive":true},"title":{"type":"string","description":"Templated title of the message.","description_kind":"markdown","optional":true},"uid":{"type":"string","description":"The UID of the contact point.","description_kind":"markdown","computed":true},"url":{"type":"string","description":"The URL to send webhook requests to.","description_kind":"markdown","required":true}},"description":"A contact point that sends notifications to Grafana On-Call.","description_kind":"markdown"}},"opsgenie":{"nesting_mode":"set","block":{"attributes":{"api_key":{"type":"string","description":"The OpsGenie API key to use.","description_kind":"markdown","required":true,"sensitive":true},"auto_close":{"type":"bool","description":"Whether to auto-close alerts in OpsGenie when they resolve in the Alertmanager.","description_kind":"markdown","optional":true},"description":{"type":"string","description":"A templated high-level description to use for the alert.","description_kind":"markdown","optional":true},"disable_resolve_message":{"type":"bool","description":"Whether to disable sending resolve messages. Defaults to `false`.","description_kind":"markdown","optional":true},"message":{"type":"string","description":"The templated content of the message.","description_kind":"markdown","optional":true},"override_priority":{"type":"bool","description":"Whether to allow the alert priority to be configured via the value of the `og_priority` annotation on the alert.","description_kind":"markdown","optional":true},"send_tags_as":{"type":"string","description":"Whether to send annotations to OpsGenie as Tags, Details, or both. Supported values are `tags`, `details`, `both`, or empty to use the default behavior of Tags.","description_kind":"markdown","optional":true},"settings":{"type":["map","string"],"description":"Additional custom properties to attach to the notifier. Defaults to `map[]`.","description_kind":"markdown","optional":true,"sensitive":true},"uid":{"type":"string","description":"The UID of the contact point.","description_kind":"markdown","computed":true},"url":{"type":"string","description":"Allows customization of the OpsGenie API URL.","description_kind":"markdown","optional":true}},"block_types":{"responders":{"nesting_mode":"list","block":{"attributes":{"id":{"type":"string","description":"ID of the responder. Must be specified if name and username are empty.","description_kind":"markdown","optional":true},"name":{"type":"string","description":"Name of the responder. Must be specified if username and id are empty.","description_kind":"markdown","optional":true},"type":{"type":"string","description":"Type of the responder. Supported: team, teams, user, escalation, schedule or a template that is expanded to one of these values.","description_kind":"markdown","required":true},"username":{"type":"string","description":"User name of the responder. Must be specified if name and id are empty.","description_kind":"markdown","optional":true}},"description":"Teams, users, escalations and schedules that the alert will be routed to send notifications. If the API Key belongs to a team integration, this field will be overwritten with the owner team. This feature is available from Grafana 10.3+.","description_kind":"markdown"}}},"description":"A contact point that sends notifications to OpsGenie.","description_kind":"markdown"}},"pagerduty":{"nesting_mode":"set","block":{"attributes":{"class":{"type":"string","description":"The class or type of event, for example `ping failure`.","description_kind":"markdown","optional":true},"client":{"type":"string","description":"The name of the monitoring client that is triggering this event.","description_kind":"markdown","optional":true},"client_url":{"type":"string","description":"The URL of the monitoring client that is triggering this event.","description_kind":"markdown","optional":true},"component":{"type":"string","description":"The component being affected by the event.","description_kind":"markdown","optional":true},"details":{"type":["map","string"],"description":"A set of arbitrary key/value pairs that provide further detail about the incident.","description_kind":"markdown","optional":true},"disable_resolve_message":{"type":"bool","description":"Whether to disable sending resolve messages. Defaults to `false`.","description_kind":"markdown","optional":true},"group":{"type":"string","description":"The group to which the provided component belongs to.","description_kind":"markdown","optional":true},"integration_key":{"type":"string","description":"The PagerDuty API key.","description_kind":"markdown","required":true,"sensitive":true},"settings":{"type":["map","string"],"description":"Additional custom properties to attach to the notifier. Defaults to `map[]`.","description_kind":"markdown","optional":true,"sensitive":true},"severity":{"type":"string","description":"The PagerDuty event severity level. Default is `critical`.","description_kind":"markdown","optional":true},"source":{"type":"string","description":"The unique location of the affected system.","description_kind":"markdown","optional":true},"summary":{"type":"string","description":"The templated summary message of the event.","description_kind":"markdown","optional":true},"uid":{"type":"string","description":"The UID of the contact point.","description_kind":"markdown","computed":true}},"description":"A contact point that sends notifications to PagerDuty.","description_kind":"markdown"}},"pushover":{"nesting_mode":"set","block":{"attributes":{"api_token":{"type":"string","description":"The Pushover API token.","description_kind":"markdown","required":true,"sensitive":true},"device":{"type":"string","description":"Comma-separated list of devices to which the event is associated.","description_kind":"markdown","optional":true},"disable_resolve_message":{"type":"bool","description":"Whether to disable sending resolve messages. Defaults to `false`.","description_kind":"markdown","optional":true},"expire":{"type":"number","description":"How many seconds for which the notification will continue to be retried by Pushover.","description_kind":"markdown","optional":true},"message":{"type":"string","description":"The templated notification message content.","description_kind":"markdown","optional":true},"ok_priority":{"type":"number","description":"The priority level of the resolved event.","description_kind":"markdown","optional":true},"ok_sound":{"type":"string","description":"The sound associated with the resolved notification.","description_kind":"markdown","optional":true},"priority":{"type":"number","description":"The priority level of the event.","description_kind":"markdown","optional":true},"retry":{"type":"number","description":"How often, in seconds, the Pushover servers will send the same notification to the user.","description_kind":"markdown","optional":true},"settings":{"type":["map","string"],"description":"Additional custom properties to attach to the notifier. Defaults to `map[]`.","description_kind":"markdown","optional":true,"sensitive":true},"sound":{"type":"string","description":"The sound associated with the notification.","description_kind":"markdown","optional":true},"title":{"type":"string","description":"The templated title of the message.","description_kind":"markdown","optional":true},"uid":{"type":"string","description":"The UID of the contact point.","description_kind":"markdown","computed":true},"upload_image":{"type":"bool","description":"Whether to send images in the notification or not. Default is true. Requires Grafana to be configured to send images in notifications.","description_kind":"markdown","optional":true},"user_key":{"type":"string","description":"The Pushover user key.","description_kind":"markdown","required":true,"sensitive":true}},"description":"A contact point that sends notifications to Pushover.","description_kind":"markdown"}},"sensugo":{"nesting_mode":"set","block":{"attributes":{"api_key":{"type":"string","description":"The SensuGo API key.","description_kind":"markdown","required":true,"sensitive":true},"check":{"type":"string","description":"The SensuGo check to which the event should be routed.","description_kind":"markdown","optional":true},"disable_resolve_message":{"type":"bool","description":"Whether to disable sending resolve messages. Defaults to `false`.","description_kind":"markdown","optional":true},"entity":{"type":"string","description":"The entity being monitored.","description_kind":"markdown","optional":true},"handler":{"type":"string","description":"A custom handler to execute in addition to the check.","description_kind":"markdown","optional":true},"message":{"type":"string","description":"Templated message content describing the alert.","description_kind":"markdown","optional":true},"namespace":{"type":"string","description":"The namespace in which the check resides.","description_kind":"markdown","optional":true},"settings":{"type":["map","string"],"description":"Additional custom properties to attach to the notifier. Defaults to `map[]`.","description_kind":"markdown","optional":true,"sensitive":true},"uid":{"type":"string","description":"The UID of the contact point.","description_kind":"markdown","computed":true},"url":{"type":"string","description":"The SensuGo URL to send requests to.","description_kind":"markdown","required":true}},"description":"A contact point that sends notifications to SensuGo.","description_kind":"markdown"}},"slack":{"nesting_mode":"set","block":{"attributes":{"disable_resolve_message":{"type":"bool","description":"Whether to disable sending resolve messages. Defaults to `false`.","description_kind":"markdown","optional":true},"endpoint_url":{"type":"string","description":"Use this to override the Slack API endpoint URL to send requests to.","description_kind":"markdown","optional":true},"icon_emoji":{"type":"string","description":"The name of a Slack workspace emoji to use as the bot icon.","description_kind":"markdown","optional":true},"icon_url":{"type":"string","description":"A URL of an image to use as the bot icon.","description_kind":"markdown","optional":true},"mention_channel":{"type":"string","description":"Describes how to ping the slack channel that messages are being sent to. Options are `here` for an @here ping, `channel` for @channel, or empty for no ping.","description_kind":"markdown","optional":true},"mention_groups":{"type":"string","description":"Comma-separated list of groups to mention in the message.","description_kind":"markdown","optional":true},"mention_users":{"type":"string","description":"Comma-separated list of users to mention in the message.","description_kind":"markdown","optional":true},"recipient":{"type":"string","description":"Channel, private group, or IM channel (can be an encoded ID or a name) to send messages to.","description_kind":"markdown","optional":true},"settings":{"type":["map","string"],"description":"Additional custom properties to attach to the notifier. Defaults to `map[]`.","description_kind":"markdown","optional":true,"sensitive":true},"text":{"type":"string","description":"Templated content of the message.","description_kind":"markdown","optional":true},"title":{"type":"string","description":"Templated title of the message.","description_kind":"markdown","optional":true},"token":{"type":"string","description":"A Slack API token,for sending messages directly without the webhook method.","description_kind":"markdown","optional":true,"sensitive":true},"uid":{"type":"string","description":"The UID of the contact point.","description_kind":"markdown","computed":true},"url":{"type":"string","description":"A Slack webhook URL,for sending messages via the webhook method.","description_kind":"markdown","optional":true,"sensitive":true},"username":{"type":"string","description":"Username for the bot to use.","description_kind":"markdown","optional":true}},"description":"A contact point that sends notifications to Slack.","description_kind":"markdown"}},"sns":{"nesting_mode":"set","block":{"attributes":{"access_key":{"type":"string","description":"AWS access key ID used to authenticate with Amazon SNS.","description_kind":"markdown","optional":true,"sensitive":true},"assume_role_arn":{"type":"string","description":"The Amazon Resource Name (ARN) of the role to assume to send notifications to Amazon SNS.","description_kind":"markdown","optional":true},"auth_provider":{"type":"string","description":"The authentication provider to use. Valid values are `default`, `arn` and `keys`. Default is `default`. Defaults to `default`.","description_kind":"markdown","optional":true},"body":{"type":"string","description_kind":"plain","optional":true},"disable_resolve_message":{"type":"bool","description":"Whether to disable sending resolve messages. Defaults to `false`.","description_kind":"markdown","optional":true},"external_id":{"type":"string","description":"The external ID to use when assuming the role.","description_kind":"markdown","optional":true},"message_format":{"type":"string","description":"The format of the message to send. Valid values are `text`, `body` and `json`. Default is `text`. Defaults to `text`.","description_kind":"markdown","optional":true},"secret_key":{"type":"string","description":"AWS secret access key used to authenticate with Amazon SNS.","description_kind":"markdown","optional":true,"sensitive":true},"settings":{"type":["map","string"],"description":"Additional custom properties to attach to the notifier. Defaults to `map[]`.","description_kind":"markdown","optional":true,"sensitive":true},"subject":{"type":"string","description_kind":"plain","optional":true},"topic":{"type":"string","description":"The Amazon SNS topic to send notifications to.","description_kind":"markdown","required":true},"uid":{"type":"string","description":"The UID of the contact point.","description_kind":"markdown","computed":true}},"description":"A contact point that sends notifications to Amazon SNS. Requires Amazon Managed Grafana.","description_kind":"markdown"}},"teams":{"nesting_mode":"set","block":{"attributes":{"disable_resolve_message":{"type":"bool","description":"Whether to disable sending resolve messages. Defaults to `false`.","description_kind":"markdown","optional":true},"message":{"type":"string","description":"The templated message content to send.","description_kind":"markdown","optional":true},"section_title":{"type":"string","description":"The templated subtitle for each message section.","description_kind":"markdown","optional":true},"settings":{"type":["map","string"],"description":"Additional custom properties to attach to the notifier. Defaults to `map[]`.","description_kind":"markdown","optional":true,"sensitive":true},"title":{"type":"string","description":"The templated title of the message.","description_kind":"markdown","optional":true},"uid":{"type":"string","description":"The UID of the contact point.","description_kind":"markdown","computed":true},"url":{"type":"string","description":"A Teams webhook URL.","description_kind":"markdown","required":true,"sensitive":true}},"description":"A contact point that sends notifications to Microsoft Teams.","description_kind":"markdown"}},"telegram":{"nesting_mode":"set","block":{"attributes":{"chat_id":{"type":"string","description":"The chat ID to send messages to.","description_kind":"markdown","required":true},"disable_notifications":{"type":"bool","description":"When set users will receive a notification with no sound.","description_kind":"markdown","optional":true},"disable_resolve_message":{"type":"bool","description":"Whether to disable sending resolve messages. Defaults to `false`.","description_kind":"markdown","optional":true},"disable_web_page_preview":{"type":"bool","description":"When set it disables link previews for links in the message.","description_kind":"markdown","optional":true},"message":{"type":"string","description":"The templated content of the message.","description_kind":"markdown","optional":true},"parse_mode":{"type":"string","description":"Mode for parsing entities in the message text. Supported: None, Markdown, MarkdownV2, and HTML. HTML is the default.","description_kind":"markdown","optional":true},"protect_content":{"type":"bool","description":"When set it protects the contents of the message from forwarding and saving.","description_kind":"markdown","optional":true},"settings":{"type":["map","string"],"description":"Additional custom properties to attach to the notifier. Defaults to `map[]`.","description_kind":"markdown","optional":true,"sensitive":true},"token":{"type":"string","description":"The Telegram bot token.","description_kind":"markdown","required":true,"sensitive":true},"uid":{"type":"string","description":"The UID of the contact point.","description_kind":"markdown","computed":true}},"description":"A contact point that sends notifications to Telegram.","description_kind":"markdown"}},"threema":{"nesting_mode":"set","block":{"attributes":{"api_secret":{"type":"string","description":"The Threema API key.","description_kind":"markdown","required":true,"sensitive":true},"description":{"type":"string","description":"The templated description of the message.","description_kind":"markdown","optional":true},"disable_resolve_message":{"type":"bool","description":"Whether to disable sending resolve messages. Defaults to `false`.","description_kind":"markdown","optional":true},"gateway_id":{"type":"string","description":"The Threema gateway ID.","description_kind":"markdown","required":true},"recipient_id":{"type":"string","description":"The ID of the recipient of the message.","description_kind":"markdown","required":true},"settings":{"type":["map","string"],"description":"Additional custom properties to attach to the notifier. Defaults to `map[]`.","description_kind":"markdown","optional":true,"sensitive":true},"title":{"type":"string","description":"The templated title of the message.","description_kind":"markdown","optional":true},"uid":{"type":"string","description":"The UID of the contact point.","description_kind":"markdown","computed":true}},"description":"A contact point that sends notifications to Threema.","description_kind":"markdown"}},"victorops":{"nesting_mode":"set","block":{"attributes":{"description":{"type":"string","description":"Templated description of the message.","description_kind":"markdown","optional":true},"disable_resolve_message":{"type":"bool","description":"Whether to disable sending resolve messages. Defaults to `false`.","description_kind":"markdown","optional":true},"message_type":{"type":"string","description":"The VictorOps alert state - typically either `CRITICAL` or `RECOVERY`.","description_kind":"markdown","optional":true},"settings":{"type":["map","string"],"description":"Additional custom properties to attach to the notifier. Defaults to `map[]`.","description_kind":"markdown","optional":true,"sensitive":true},"title":{"type":"string","description":"Templated title to display.","description_kind":"markdown","optional":true},"uid":{"type":"string","description":"The UID of the contact point.","description_kind":"markdown","computed":true},"url":{"type":"string","description":"The VictorOps webhook URL.","description_kind":"markdown","required":true}},"description":"A contact point that sends notifications to VictorOps (now known as Splunk OnCall).","description_kind":"markdown"}},"webex":{"nesting_mode":"set","block":{"attributes":{"api_url":{"type":"string","description":"The URL to send webhook requests to.","description_kind":"markdown","optional":true},"disable_resolve_message":{"type":"bool","description":"Whether to disable sending resolve messages. Defaults to `false`.","description_kind":"markdown","optional":true},"message":{"type":"string","description":"The templated title of the message to send.","description_kind":"markdown","optional":true},"room_id":{"type":"string","description":"ID of the Webex Teams room where to send the messages.","description_kind":"markdown","optional":true},"settings":{"type":["map","string"],"description":"Additional custom properties to attach to the notifier. Defaults to `map[]`.","description_kind":"markdown","optional":true,"sensitive":true},"token":{"type":"string","description":"The bearer token used to authorize the client.","description_kind":"markdown","optional":true,"sensitive":true},"uid":{"type":"string","description":"The UID of the contact point.","description_kind":"markdown","computed":true}},"description":"A contact point that sends notifications to Cisco Webex.","description_kind":"markdown"}},"webhook":{"nesting_mode":"set","block":{"attributes":{"authorization_credentials":{"type":"string","description":"Allows a custom authorization scheme - attaches an auth header with this value. Do not use in conjunction with basic auth parameters.","description_kind":"markdown","optional":true,"sensitive":true},"authorization_scheme":{"type":"string","description":"Allows a custom authorization scheme - attaches an auth header with this name. Do not use in conjunction with basic auth parameters.","description_kind":"markdown","optional":true},"basic_auth_password":{"type":"string","description":"The username to use in basic auth headers attached to the request. If omitted, basic auth will not be used.","description_kind":"markdown","optional":true,"sensitive":true},"basic_auth_user":{"type":"string","description":"The username to use in basic auth headers attached to the request. If omitted, basic auth will not be used.","description_kind":"markdown","optional":true},"disable_resolve_message":{"type":"bool","description":"Whether to disable sending resolve messages. Defaults to `false`.","description_kind":"markdown","optional":true},"http_method":{"type":"string","description":"The HTTP method to use in the request. Defaults to `POST`.","description_kind":"markdown","optional":true},"max_alerts":{"type":"number","description":"The maximum number of alerts to send in a single request. This can be helpful in limiting the size of the request body. The default is 0, which indicates no limit.","description_kind":"markdown","optional":true},"message":{"type":"string","description":"Custom message. You can use template variables.","description_kind":"markdown","optional":true},"settings":{"type":["map","string"],"description":"Additional custom properties to attach to the notifier. Defaults to `map[]`.","description_kind":"markdown","optional":true,"sensitive":true},"title":{"type":"string","description":"Templated title of the message.","description_kind":"markdown","optional":true},"uid":{"type":"string","description":"The UID of the contact point.","description_kind":"markdown","computed":true},"url":{"type":"string","description":"The URL to send webhook requests to.","description_kind":"markdown","required":true}},"description":"A contact point that sends notifications to an arbitrary webhook, using the Prometheus webhook format defined here: https://prometheus.io/docs/alerting/latest/configuration/#webhook_config","description_kind":"markdown"}},"wecom":{"nesting_mode":"set","block":{"attributes":{"agent_id":{"type":"string","description":"Agent ID added to the request payload when using APIAPP.","description_kind":"markdown","optional":true},"corp_id":{"type":"string","description":"Corp ID used to get token when using APIAPP.","description_kind":"markdown","optional":true},"disable_resolve_message":{"type":"bool","description":"Whether to disable sending resolve messages. Defaults to `false`.","description_kind":"markdown","optional":true},"message":{"type":"string","description":"The templated content of the message to send.","description_kind":"markdown","optional":true},"msg_type":{"type":"string","description":"The type of them message. Supported: markdown, text. Default: text.","description_kind":"markdown","optional":true},"secret":{"type":"string","description":"The secret key required to obtain access token when using APIAPP. See https://work.weixin.qq.com/wework_admin/frame#apps to create APIAPP.","description_kind":"markdown","optional":true,"sensitive":true},"settings":{"type":["map","string"],"description":"Additional custom properties to attach to the notifier. Defaults to `map[]`.","description_kind":"markdown","optional":true,"sensitive":true},"title":{"type":"string","description":"The templated title of the message to send.","description_kind":"markdown","optional":true},"to_user":{"type":"string","description":"The ID of user that should receive the message. Multiple entries should be separated by '|'. Default: @all.","description_kind":"markdown","optional":true},"uid":{"type":"string","description":"The UID of the contact point.","description_kind":"markdown","computed":true},"url":{"type":"string","description":"The WeCom webhook URL. Required if using GroupRobot.","description_kind":"markdown","optional":true,"sensitive":true}},"description":"A contact point that sends notifications to WeCom.","description_kind":"markdown"}}},"description":"\nManages Grafana Alerting contact points.\n\n* [Official documentation](https://grafana.com/docs/grafana/next/alerting/fundamentals/notifications/contact-points/)\n* [HTTP API](https://grafana.com/docs/grafana/latest/developers/http_api/alerting_provisioning/#contact-points)\n\nThis resource requires Grafana 9.1.0 or later.\n","description_kind":"markdown"}},"grafana_dashboard":{"version":1,"block":{"attributes":{"config_json":{"type":"string","description":"The complete dashboard model JSON.","description_kind":"markdown","required":true},"dashboard_id":{"type":"number","description":"The numeric ID of the dashboard computed by Grafana.","description_kind":"markdown","computed":true},"folder":{"type":"string","description":"The id or UID of the folder to save the dashboard in.","description_kind":"markdown","optional":true},"id":{"type":"string","description_kind":"plain","optional":true,"computed":true},"message":{"type":"string","description":"Set a commit message for the version history.","description_kind":"markdown","optional":true},"org_id":{"type":"string","description":"The Organization ID. If not set, the Org ID defined in the provider block will be used.","description_kind":"markdown","optional":true},"overwrite":{"type":"bool","description":"Set to true if you want to overwrite existing dashboard with newer version, same dashboard title in folder or same dashboard uid.","description_kind":"markdown","optional":true},"uid":{"type":"string","description":"The unique identifier of a dashboard. This is used to construct its URL. It's automatically generated if not provided when creating a dashboard. The uid allows having consistent URLs for accessing dashboards and when syncing dashboards between multiple Grafana installs.","description_kind":"markdown","computed":true},"url":{"type":"string","description":"The full URL of the dashboard.","description_kind":"markdown","computed":true},"version":{"type":"number","description":"Whenever you save a version of your dashboard, a copy of that version is saved so that previous versions of your dashboard are not lost.","description_kind":"markdown","computed":true}},"description":"\nManages Grafana dashboards.\n\n* [Official documentation](https://grafana.com/docs/grafana/latest/dashboards/)\n* [HTTP API](https://grafana.com/docs/grafana/latest/developers/http_api/dashboard/)\n","description_kind":"markdown"}},"grafana_dashboard_permission":{"version":0,"block":{"attributes":{"dashboard_id":{"type":"number","description":"ID of the dashboard to apply permissions to. Deprecated: use `dashboard_uid` instead.","description_kind":"markdown","deprecated":true,"optional":true,"computed":true},"dashboard_uid":{"type":"string","description":"UID of the dashboard to apply permissions to.","description_kind":"markdown","optional":true,"computed":true},"id":{"type":"string","description_kind":"plain","optional":true,"computed":true},"org_id":{"type":"string","description":"The Organization ID. If not set, the Org ID defined in the provider block will be used.","description_kind":"markdown","optional":true}},"block_types":{"permissions":{"nesting_mode":"set","block":{"attributes":{"permission":{"type":"string","description":"Permission to associate with item. Must be one of `View`, `Edit`, or `Admin`.","description_kind":"markdown","required":true},"role":{"type":"string","description":"Manage permissions for `Viewer` or `Editor` roles.","description_kind":"markdown","optional":true},"team_id":{"type":"string","description":"ID of the team to manage permissions for. Defaults to `0`.","description_kind":"markdown","optional":true},"user_id":{"type":"string","description":"ID of the user or service account to manage permissions for. Defaults to `0`.","description_kind":"markdown","optional":true}},"description":"The permission items to add/update. Items that are omitted from the list will be removed.","description_kind":"markdown"}}},"description":"\nManages the entire set of permissions for a dashboard. Permissions that aren't specified when applying this resource will be removed.\n* [Official documentation](https://grafana.com/docs/grafana/latest/administration/roles-and-permissions/access-control/)\n* [HTTP API](https://grafana.com/docs/grafana/latest/developers/http_api/dashboard_permissions/)\n","description_kind":"markdown"}},"grafana_dashboard_permission_item":{"version":0,"block":{"attributes":{"dashboard_uid":{"type":"string","description":"The UID of the dashboard.","description_kind":"plain","required":true},"id":{"type":"string","description_kind":"plain","computed":true},"org_id":{"type":"string","description":"The Organization ID. If not set, the Org ID defined in the provider block will be used.","description_kind":"plain","optional":true,"computed":true},"permission":{"type":"string","description":"the permission to be assigned","description_kind":"plain","required":true},"role":{"type":"string","description":"the role onto which the permission is to be assigned","description_kind":"plain","optional":true},"team":{"type":"string","description":"the team onto which the permission is to be assigned","description_kind":"plain","optional":true},"user":{"type":"string","description":"the user or service account onto which the permission is to be assigned","description_kind":"plain","optional":true}},"description":"Manages a single permission item for a dashboard. Conflicts with the \"grafana_dashboard_permission\" resource which manages the entire set of permissions for a dashboard.","description_kind":"markdown"}},"grafana_dashboard_public":{"version":0,"block":{"attributes":{"access_token":{"type":"string","description":"A public unique identifier of a public dashboard. This is used to construct its URL. It's automatically generated if not provided when creating a public dashboard.","description_kind":"markdown","optional":true,"computed":true},"annotations_enabled":{"type":"bool","description":"Set to `true` to show annotations. The default value is `false`.","description_kind":"markdown","optional":true},"dashboard_uid":{"type":"string","description":"The unique identifier of the original dashboard.","description_kind":"markdown","required":true},"id":{"type":"string","description_kind":"plain","optional":true,"computed":true},"is_enabled":{"type":"bool","description":"Set to `true` to enable the public dashboard. The default value is `false`.","description_kind":"markdown","optional":true},"org_id":{"type":"string","description":"The Organization ID. If not set, the Org ID defined in the provider block will be used.","description_kind":"markdown","optional":true},"share":{"type":"string","description":"Set the share mode. The default value is `public`.","description_kind":"markdown","optional":true},"time_selection_enabled":{"type":"bool","description":"Set to `true` to enable the time picker in the public dashboard. The default value is `false`.","description_kind":"markdown","optional":true},"uid":{"type":"string","description":"The unique identifier of a public dashboard. It's automatically generated if not provided when creating a public dashboard.","description_kind":"markdown","optional":true,"computed":true}},"description":"\nManages Grafana public dashboards.\n\n**Note:** This resource is available only with Grafana 10.2+.\n\n* [Official documentation](https://grafana.com/docs/grafana/latest/dashboards/dashboard-public/)\n* [HTTP API](https://grafana.com/docs/grafana/next/developers/http_api/dashboard_public/)\n","description_kind":"markdown"}},"grafana_data_source":{"version":1,"block":{"attributes":{"access_mode":{"type":"string","description":"The method by which Grafana will access the data source: `proxy` or `direct`. Defaults to `proxy`.","description_kind":"markdown","optional":true},"basic_auth_enabled":{"type":"bool","description":"Whether to enable basic auth for the data source. Defaults to `false`.","description_kind":"markdown","optional":true},"basic_auth_username":{"type":"string","description":"Basic auth username. Defaults to ``.","description_kind":"markdown","optional":true},"database_name":{"type":"string","description":"(Required by some data source types) The name of the database to use on the selected data source server. Defaults to ``.","description_kind":"markdown","optional":true},"http_headers":{"type":["map","string"],"description":"Custom HTTP headers","description_kind":"markdown","optional":true,"sensitive":true},"id":{"type":"string","description_kind":"plain","optional":true,"computed":true},"is_default":{"type":"bool","description":"Whether to set the data source as default. This should only be `true` to a single data source. Defaults to `false`.","description_kind":"markdown","optional":true},"json_data_encoded":{"type":"string","description":"Serialized JSON string containing the json data. This attribute can be used to pass configuration options to the data source. To figure out what options a datasource has available, see its docs or inspect the network data when saving it from the Grafana UI. Note that keys in this map are usually camelCased.","description_kind":"markdown","optional":true},"name":{"type":"string","description":"A unique name for the data source.","description_kind":"markdown","required":true},"org_id":{"type":"string","description":"The Organization ID. If not set, the Org ID defined in the provider block will be used.","description_kind":"markdown","optional":true},"secure_json_data_encoded":{"type":"string","description":"Serialized JSON string containing the secure json data. This attribute can be used to pass secure configuration options to the data source. To figure out what options a datasource has available, see its docs or inspect the network data when saving it from the Grafana UI. Note that keys in this map are usually camelCased.","description_kind":"markdown","optional":true,"sensitive":true},"type":{"type":"string","description":"The data source type. Must be one of the supported data source keywords.","description_kind":"markdown","required":true},"uid":{"type":"string","description":"Unique identifier. If unset, this will be automatically generated.","description_kind":"markdown","optional":true,"computed":true},"url":{"type":"string","description":"The URL for the data source. The type of URL required varies depending on the chosen data source type.","description_kind":"markdown","optional":true},"username":{"type":"string","description":"(Required by some data source types) The username to use to authenticate to the data source. Defaults to ``.","description_kind":"markdown","optional":true}},"description":"\n* [Official documentation](https://grafana.com/docs/grafana/latest/datasources/)\n* [HTTP API](https://grafana.com/docs/grafana/latest/developers/http_api/data_source/)\n\nThe required arguments for this resource vary depending on the type of data\nsource selected (via the 'type' argument).\n","description_kind":"markdown"}},"grafana_data_source_config":{"version":0,"block":{"attributes":{"http_headers":{"type":["map","string"],"description":"Custom HTTP headers","description_kind":"markdown","optional":true,"sensitive":true},"id":{"type":"string","description_kind":"plain","optional":true,"computed":true},"json_data_encoded":{"type":"string","description":"Serialized JSON string containing the json data. This attribute can be used to pass configuration options to the data source. To figure out what options a datasource has available, see its docs or inspect the network data when saving it from the Grafana UI. Note that keys in this map are usually camelCased.","description_kind":"markdown","optional":true},"org_id":{"type":"string","description":"The Organization ID. If not set, the Org ID defined in the provider block will be used.","description_kind":"markdown","optional":true},"secure_json_data_encoded":{"type":"string","description":"Serialized JSON string containing the secure json data. This attribute can be used to pass secure configuration options to the data source. To figure out what options a datasource has available, see its docs or inspect the network data when saving it from the Grafana UI. Note that keys in this map are usually camelCased.","description_kind":"markdown","optional":true,"sensitive":true},"uid":{"type":"string","description":"Unique identifier. If unset, this will be automatically generated.","description_kind":"markdown","optional":true,"computed":true}},"description":"* [Official documentation](https://grafana.com/docs/grafana/latest/datasources/)\n* [HTTP API](https://grafana.com/docs/grafana/latest/developers/http_api/data_source/)\n\nThe required arguments for this resource vary depending on the type of data\nsource selected (via the 'type' argument).\n\nUse this resource for configuring multiple datasources, when that configuration (`json_data_encoded` field) requires circular references like in the example below.\n\n\u003e When using the `grafana_data_source_config` resource, the corresponding `grafana_data_source` resources must have the `json_data_encoded` and `http_headers` fields ignored. Otherwise, an infinite update loop will occur. See the example below.\n","description_kind":"markdown"}},"grafana_data_source_permission":{"version":0,"block":{"attributes":{"datasource_id":{"type":"string","description":"Deprecated: Use `datasource_uid` instead.","description_kind":"markdown","deprecated":true,"optional":true},"datasource_uid":{"type":"string","description":"UID of the datasource to apply permissions to.","description_kind":"markdown","optional":true},"id":{"type":"string","description_kind":"plain","optional":true,"computed":true},"org_id":{"type":"string","description":"The Organization ID. If not set, the Org ID defined in the provider block will be used.","description_kind":"markdown","optional":true}},"block_types":{"permissions":{"nesting_mode":"set","block":{"attributes":{"built_in_role":{"type":"string","description":"Name of the basic role to manage permissions for. Options: `Viewer`, `Editor` or `Admin`. Can only be set from Grafana v9.2.3+. Defaults to ``.","description_kind":"markdown","optional":true},"permission":{"type":"string","description":"Permission to associate with item. Options: `Query`, `Edit` or `Admin` (`Admin` can only be used with Grafana v10.3.0+).","description_kind":"markdown","required":true},"team_id":{"type":"string","description":"ID of the team to manage permissions for. Defaults to `0`.","description_kind":"markdown","optional":true},"user_id":{"type":"string","description":"ID of the user or service account to manage permissions for. Defaults to `0`.","description_kind":"markdown","optional":true}},"description":"The permission items to add/update. Items that are omitted from the list will be removed.","description_kind":"markdown"}}},"description":"\nManages the entire set of permissions for a datasource. Permissions that aren't specified when applying this resource will be removed.\n* [HTTP API](https://grafana.com/docs/grafana/latest/developers/http_api/datasource_permissions/)\n","description_kind":"markdown"}},"grafana_data_source_permission_item":{"version":0,"block":{"attributes":{"datasource_uid":{"type":"string","description":"The UID of the datasource.","description_kind":"plain","required":true},"id":{"type":"string","description_kind":"plain","computed":true},"org_id":{"type":"string","description":"The Organization ID. If not set, the Org ID defined in the provider block will be used.","description_kind":"plain","optional":true,"computed":true},"permission":{"type":"string","description":"the permission to be assigned","description_kind":"plain","required":true},"role":{"type":"string","description":"the role onto which the permission is to be assigned","description_kind":"plain","optional":true},"team":{"type":"string","description":"the team onto which the permission is to be assigned","description_kind":"plain","optional":true},"user":{"type":"string","description":"the user or service account onto which the permission is to be assigned","description_kind":"plain","optional":true}},"description":"Manages a single permission item for a datasource. Conflicts with the \"grafana_data_source_permission\" resource which manages the entire set of permissions for a datasource.","description_kind":"markdown"}},"grafana_folder":{"version":0,"block":{"attributes":{"id":{"type":"string","description_kind":"plain","optional":true,"computed":true},"org_id":{"type":"string","description":"The Organization ID. If not set, the Org ID defined in the provider block will be used.","description_kind":"markdown","optional":true},"parent_folder_uid":{"type":"string","description":"The uid of the parent folder. If set, the folder will be nested. If not set, the folder will be created in the root folder. Note: This requires the nestedFolders feature flag to be enabled on your Grafana instance.","description_kind":"markdown","optional":true},"prevent_destroy_if_not_empty":{"type":"bool","description":"Prevent deletion of the folder if it is not empty (contains dashboards or alert rules). Defaults to `false`.","description_kind":"markdown","optional":true},"title":{"type":"string","description":"The title of the folder.","description_kind":"markdown","required":true},"uid":{"type":"string","description":"Unique identifier.","description_kind":"markdown","optional":true,"computed":true},"url":{"type":"string","description":"The full URL of the folder.","description_kind":"markdown","computed":true}},"description":"\n* [Official documentation](https://grafana.com/docs/grafana/latest/dashboards/manage-dashboards/)\n* [HTTP API](https://grafana.com/docs/grafana/latest/developers/http_api/folder/)\n","description_kind":"markdown"}},"grafana_folder_permission":{"version":0,"block":{"attributes":{"folder_uid":{"type":"string","description":"The UID of the folder.","description_kind":"markdown","required":true},"id":{"type":"string","description_kind":"plain","optional":true,"computed":true},"org_id":{"type":"string","description":"The Organization ID. If not set, the Org ID defined in the provider block will be used.","description_kind":"markdown","optional":true}},"block_types":{"permissions":{"nesting_mode":"set","block":{"attributes":{"permission":{"type":"string","description":"Permission to associate with item. Must be one of `View`, `Edit`, or `Admin`.","description_kind":"markdown","required":true},"role":{"type":"string","description":"Manage permissions for `Viewer` or `Editor` roles.","description_kind":"markdown","optional":true},"team_id":{"type":"string","description":"ID of the team to manage permissions for. Defaults to `0`.","description_kind":"markdown","optional":true},"user_id":{"type":"string","description":"ID of the user or service account to manage permissions for. Defaults to `0`.","description_kind":"markdown","optional":true}},"description":"The permission items to add/update. Items that are omitted from the list will be removed.","description_kind":"markdown"}}},"description":"\nManages the entire set of permissions for a folder. Permissions that aren't specified when applying this resource will be removed.\n* [Official documentation](https://grafana.com/docs/grafana/latest/administration/roles-and-permissions/access-control/)\n* [HTTP API](https://grafana.com/docs/grafana/latest/developers/http_api/folder_permissions/)\n","description_kind":"markdown"}},"grafana_folder_permission_item":{"version":0,"block":{"attributes":{"folder_uid":{"type":"string","description":"The UID of the folder.","description_kind":"plain","required":true},"id":{"type":"string","description_kind":"plain","computed":true},"org_id":{"type":"string","description":"The Organization ID. If not set, the Org ID defined in the provider block will be used.","description_kind":"plain","optional":true,"computed":true},"permission":{"type":"string","description":"the permission to be assigned","description_kind":"plain","required":true},"role":{"type":"string","description":"the role onto which the permission is to be assigned","description_kind":"plain","optional":true},"team":{"type":"string","description":"the team onto which the permission is to be assigned","description_kind":"plain","optional":true},"user":{"type":"string","description":"the user or service account onto which the permission is to be assigned","description_kind":"plain","optional":true}},"description":"Manages a single permission item for a folder. Conflicts with the \"grafana_folder_permission\" resource which manages the entire set of permissions for a folder.\n\t\t* [Official documentation](https://grafana.com/docs/grafana/latest/administration/roles-and-permissions/access-control/)\n\t\t* [HTTP API](https://grafana.com/docs/grafana/latest/developers/http_api/folder_permissions/)","description_kind":"markdown"}},"grafana_library_panel":{"version":0,"block":{"attributes":{"created":{"type":"string","description":"Timestamp when the library panel was created.","description_kind":"markdown","computed":true},"dashboard_ids":{"type":["list","number"],"description":"Numerical IDs of Grafana dashboards containing the library panel.","description_kind":"markdown","computed":true},"description":{"type":"string","description":"Description of the library panel.","description_kind":"markdown","computed":true},"folder_id":{"type":"string","description":"Deprecated. Use `folder_uid` instead","description_kind":"markdown","deprecated":true,"optional":true},"folder_name":{"type":"string","description":"Name of the folder containing the library panel.","description_kind":"markdown","computed":true},"folder_uid":{"type":"string","description":"Unique ID (UID) of the folder containing the library panel.","description_kind":"markdown","optional":true},"id":{"type":"string","description_kind":"plain","optional":true,"computed":true},"model_json":{"type":"string","description":"The JSON model for the library panel.","description_kind":"markdown","required":true},"name":{"type":"string","description":"Name of the library panel.","description_kind":"markdown","required":true},"org_id":{"type":"string","description":"The Organization ID. If not set, the Org ID defined in the provider block will be used.","description_kind":"markdown","optional":true},"panel_id":{"type":"number","description":"The numeric ID of the library panel computed by Grafana.","description_kind":"markdown","computed":true},"type":{"type":"string","description":"Type of the library panel (eg. text).","description_kind":"markdown","computed":true},"uid":{"type":"string","description":"The unique identifier (UID) of a library panel uniquely identifies library panels between multiple Grafana installs. It’s automatically generated unless you specify it during library panel creation.The UID provides consistent URLs for accessing library panels and when syncing library panels between multiple Grafana installs.","description_kind":"markdown","optional":true,"computed":true},"updated":{"type":"string","description":"Timestamp when the library panel was last modified.","description_kind":"markdown","computed":true},"version":{"type":"number","description":"Version of the library panel.","description_kind":"markdown","computed":true}},"description":"\nManages Grafana library panels.\n\n* [Official documentation](https://grafana.com/docs/grafana/latest/dashboards/build-dashboards/manage-library-panels/)\n* [HTTP API](https://grafana.com/docs/grafana/latest/developers/http_api/library_element/)\n","description_kind":"markdown"}},"grafana_machine_learning_holiday":{"version":0,"block":{"attributes":{"description":{"type":"string","description":"A description of the holiday.","description_kind":"markdown","optional":true},"ical_timezone":{"type":"string","description":"The timezone to use for events in the iCal file pointed to by ical_url.","description_kind":"markdown","optional":true},"ical_url":{"type":"string","description":"A URL to an iCal file containing all occurrences of the holiday.","description_kind":"markdown","optional":true},"id":{"type":"string","description":"The ID of the holiday.","description_kind":"markdown","computed":true},"name":{"type":"string","description":"The name of the holiday.","description_kind":"markdown","required":true}},"block_types":{"custom_periods":{"nesting_mode":"list","block":{"attributes":{"end_time":{"type":"string","description_kind":"plain","required":true},"name":{"type":"string","description":"The name of the custom period.","description_kind":"markdown","optional":true},"start_time":{"type":"string","description_kind":"plain","required":true}},"description":"A list of custom periods for the holiday.","description_kind":"markdown"}}},"description":"\nA holiday describes time periods where a time series is expected to behave differently to normal.\n\nTo use a holiday in a job, use its id in the `holidays` attribute of a `grafana_machine_learning_job`:\n\n```terraform\nresource \"grafana_machine_learning_job\" \"test_job\" {\n ...\n holidays = [\n grafana_machine_learning_holiday.my_holiday.id\n ]\n}\n```","description_kind":"markdown"}},"grafana_machine_learning_job":{"version":0,"block":{"attributes":{"custom_labels":{"type":["map","string"],"description":"An object representing the custom labels added on the forecast.","description_kind":"markdown","optional":true},"datasource_id":{"type":"number","description":"The id of the datasource to query.","description_kind":"markdown","deprecated":true,"optional":true},"datasource_type":{"type":"string","description":"The type of datasource being queried. Currently allowed values are prometheus, graphite, loki, postgres, and datadog.","description_kind":"markdown","required":true},"datasource_uid":{"type":"string","description":"The uid of the datasource to query.","description_kind":"markdown","optional":true},"description":{"type":"string","description":"A description of the job.","description_kind":"markdown","optional":true},"holidays":{"type":["list","string"],"description":"A list of holiday IDs or names to take into account when training the model.","description_kind":"markdown","optional":true},"hyper_params":{"type":["map","string"],"description":"The hyperparameters used to fine tune the algorithm. See https://grafana.com/docs/grafana-cloud/machine-learning/models/ for the full list of available hyperparameters. Defaults to `map[]`.","description_kind":"markdown","optional":true},"id":{"type":"string","description":"The ID of the job.","description_kind":"markdown","computed":true},"interval":{"type":"number","description":"The data interval in seconds to train the data on. Defaults to `300`.","description_kind":"markdown","optional":true},"metric":{"type":"string","description":"The metric used to query the job results.","description_kind":"markdown","required":true},"name":{"type":"string","description":"The name of the job.","description_kind":"markdown","required":true},"query_params":{"type":["map","string"],"description":"An object representing the query params to query Grafana with.","description_kind":"markdown","required":true},"training_window":{"type":"number","description":"The data interval in seconds to train the data on. Defaults to `7776000`.","description_kind":"markdown","optional":true}},"description":"\nA job defines the queries and model parameters for a machine learning task.\n","description_kind":"markdown"}},"grafana_machine_learning_outlier_detector":{"version":0,"block":{"attributes":{"datasource_id":{"type":"number","description":"The id of the datasource to query.","description_kind":"markdown","deprecated":true,"optional":true},"datasource_type":{"type":"string","description":"The type of datasource being queried. Currently allowed values are prometheus, graphite, loki, postgres, and datadog.","description_kind":"markdown","required":true},"datasource_uid":{"type":"string","description":"The uid of the datasource to query.","description_kind":"markdown","optional":true},"description":{"type":"string","description":"A description of the outlier detector.","description_kind":"markdown","optional":true},"id":{"type":"string","description":"The ID of the outlier detector.","description_kind":"markdown","computed":true},"interval":{"type":"number","description":"The data interval in seconds to monitor. Defaults to `300`.","description_kind":"markdown","optional":true},"metric":{"type":"string","description":"The metric used to query the outlier detector results.","description_kind":"markdown","required":true},"name":{"type":"string","description":"The name of the outlier detector.","description_kind":"markdown","required":true},"query_params":{"type":["map","string"],"description":"An object representing the query params to query Grafana with.","description_kind":"markdown","required":true}},"block_types":{"algorithm":{"nesting_mode":"set","block":{"attributes":{"name":{"type":"string","description":"The name of the algorithm to use ('mad' or 'dbscan').","description_kind":"markdown","required":true},"sensitivity":{"type":"number","description":"Specify the sensitivity of the detector (in range [0,1]).","description_kind":"markdown","required":true}},"block_types":{"config":{"nesting_mode":"set","block":{"attributes":{"epsilon":{"type":"number","description":"Specify the epsilon parameter (positive float)","description_kind":"markdown","required":true}},"description":"For DBSCAN only, specify the configuration map","description_kind":"markdown"},"max_items":1}},"description":"The algorithm to use and its configuration. See https://grafana.com/docs/grafana-cloud/machine-learning/outlier-detection/ for details.","description_kind":"markdown"},"min_items":1,"max_items":1}},"description":"\nAn outlier detector monitors the results of a query and reports when its values are outside normal bands.\n\nThe normal band is configured by choice of algorithm, its sensitivity and other configuration.\n\nVisit https://grafana.com/docs/grafana-cloud/machine-learning/outlier-detection/ for more details.\n","description_kind":"markdown"}},"grafana_message_template":{"version":0,"block":{"attributes":{"disable_provenance":{"type":"bool","description":"Allow modifying the message template from other sources than Terraform or the Grafana API. Defaults to `false`.","description_kind":"markdown","optional":true},"id":{"type":"string","description_kind":"plain","optional":true,"computed":true},"name":{"type":"string","description":"The name of the message template.","description_kind":"markdown","required":true},"org_id":{"type":"string","description":"The Organization ID. If not set, the Org ID defined in the provider block will be used.","description_kind":"markdown","optional":true},"template":{"type":"string","description":"The content of the message template.","description_kind":"markdown","required":true}},"description":"\nManages Grafana Alerting message templates.\n\n* [Official documentation](https://grafana.com/docs/grafana/latest/alerting/manage-notifications/template-notifications/create-notification-templates/)\n* [HTTP API](https://grafana.com/docs/grafana/next/developers/http_api/alerting_provisioning/#templates)\n\nThis resource requires Grafana 9.1.0 or later.\n","description_kind":"markdown"}},"grafana_mute_timing":{"version":0,"block":{"attributes":{"disable_provenance":{"type":"bool","description":"Allow modifying the mute timing from other sources than Terraform or the Grafana API. Defaults to `false`.","description_kind":"markdown","optional":true},"id":{"type":"string","description_kind":"plain","optional":true,"computed":true},"name":{"type":"string","description":"The name of the mute timing.","description_kind":"markdown","required":true},"org_id":{"type":"string","description":"The Organization ID. If not set, the Org ID defined in the provider block will be used.","description_kind":"markdown","optional":true}},"block_types":{"intervals":{"nesting_mode":"list","block":{"attributes":{"days_of_month":{"type":["list","string"],"description":"An inclusive range of days, 1-31, within a month, e.g. \"1\" or \"14:16\". Negative values can be used to represent days counting from the end of a month, e.g. \"-1\".","description_kind":"markdown","optional":true},"location":{"type":"string","description":"Provides the time zone for the time interval. Must be a location in the IANA time zone database, e.g \"America/New_York\"","description_kind":"markdown","optional":true},"months":{"type":["list","string"],"description":"An inclusive range of months, either numerical or full calendar month, e.g. \"1:3\", \"december\", or \"may:august\".","description_kind":"markdown","optional":true},"weekdays":{"type":["list","string"],"description":"An inclusive range of weekdays, e.g. \"monday\" or \"tuesday:thursday\".","description_kind":"markdown","optional":true},"years":{"type":["list","string"],"description":"A positive inclusive range of years, e.g. \"2030\" or \"2025:2026\".","description_kind":"markdown","optional":true}},"block_types":{"times":{"nesting_mode":"list","block":{"attributes":{"end":{"type":"string","description":"The time, in hh:mm format, of when the interval should end exclusively.","description_kind":"markdown","required":true},"start":{"type":"string","description":"The time, in hh:mm format, of when the interval should begin inclusively.","description_kind":"markdown","required":true}},"description":"The time ranges, represented in minutes, during which to mute in a given day.","description_kind":"markdown"}}},"description":"The time intervals at which to mute notifications. Use an empty block to mute all the time.","description_kind":"markdown"}}},"description":"\nManages Grafana Alerting mute timings.\n\n* [Official documentation](https://grafana.com/docs/grafana/latest/alerting/manage-notifications/mute-timings/)\n* [HTTP API](https://grafana.com/docs/grafana/next/developers/http_api/alerting_provisioning/#mute-timings)\n\nThis resource requires Grafana 9.1.0 or later.\n","description_kind":"markdown"}},"grafana_notification_policy":{"version":0,"block":{"attributes":{"contact_point":{"type":"string","description":"The default contact point to route all unmatched notifications to.","description_kind":"markdown","required":true},"disable_provenance":{"type":"bool","description":"Allow modifying the notification policy from other sources than Terraform or the Grafana API. Defaults to `false`.","description_kind":"markdown","optional":true},"group_by":{"type":["list","string"],"description":"A list of alert labels to group alerts into notifications by. Use the special label `...` to group alerts by all labels, effectively disabling grouping.","description_kind":"markdown","required":true},"group_interval":{"type":"string","description":"Minimum time interval between two notifications for the same group. Default is 5 minutes.","description_kind":"markdown","optional":true},"group_wait":{"type":"string","description":"Time to wait to buffer alerts of the same group before sending a notification. Default is 30 seconds.","description_kind":"markdown","optional":true},"id":{"type":"string","description_kind":"plain","optional":true,"computed":true},"org_id":{"type":"string","description":"The Organization ID. If not set, the Org ID defined in the provider block will be used.","description_kind":"markdown","optional":true},"repeat_interval":{"type":"string","description":"Minimum time interval for re-sending a notification if an alert is still firing. Default is 4 hours.","description_kind":"markdown","optional":true}},"block_types":{"policy":{"nesting_mode":"list","block":{"attributes":{"contact_point":{"type":"string","description":"The contact point to route notifications that match this rule to.","description_kind":"markdown","required":true},"continue":{"type":"bool","description":"Whether to continue matching subsequent rules if an alert matches the current rule. Otherwise, the rule will be 'consumed' by the first policy to match it.","description_kind":"markdown","optional":true},"group_by":{"type":["list","string"],"description":"A list of alert labels to group alerts into notifications by. Use the special label `...` to group alerts by all labels, effectively disabling grouping. Required for root policy only. If empty, the parent grouping is used.","description_kind":"markdown","optional":true},"group_interval":{"type":"string","description":"Minimum time interval between two notifications for the same group. Default is 5 minutes.","description_kind":"markdown","optional":true},"group_wait":{"type":"string","description":"Time to wait to buffer alerts of the same group before sending a notification. Default is 30 seconds.","description_kind":"markdown","optional":true},"mute_timings":{"type":["list","string"],"description":"A list of mute timing names to apply to alerts that match this policy.","description_kind":"markdown","optional":true},"repeat_interval":{"type":"string","description":"Minimum time interval for re-sending a notification if an alert is still firing. Default is 4 hours.","description_kind":"markdown","optional":true}},"block_types":{"matcher":{"nesting_mode":"set","block":{"attributes":{"label":{"type":"string","description":"The name of the label to match against.","description_kind":"markdown","required":true},"match":{"type":"string","description":"The operator to apply when matching values of the given label. Allowed operators are `=` for equality, `!=` for negated equality, `=~` for regex equality, and `!~` for negated regex equality.","description_kind":"markdown","required":true},"value":{"type":"string","description":"The label value to match against.","description_kind":"markdown","required":true}},"description":"Describes which labels this rule should match. When multiple matchers are supplied, an alert must match ALL matchers to be accepted by this policy. When no matchers are supplied, the rule will match all alert instances.","description_kind":"markdown"}},"policy":{"nesting_mode":"list","block":{"attributes":{"contact_point":{"type":"string","description":"The contact point to route notifications that match this rule to.","description_kind":"markdown","required":true},"continue":{"type":"bool","description":"Whether to continue matching subsequent rules if an alert matches the current rule. Otherwise, the rule will be 'consumed' by the first policy to match it.","description_kind":"markdown","optional":true},"group_by":{"type":["list","string"],"description":"A list of alert labels to group alerts into notifications by. Use the special label `...` to group alerts by all labels, effectively disabling grouping. Required for root policy only. If empty, the parent grouping is used.","description_kind":"markdown","optional":true},"group_interval":{"type":"string","description":"Minimum time interval between two notifications for the same group. Default is 5 minutes.","description_kind":"markdown","optional":true},"group_wait":{"type":"string","description":"Time to wait to buffer alerts of the same group before sending a notification. Default is 30 seconds.","description_kind":"markdown","optional":true},"mute_timings":{"type":["list","string"],"description":"A list of mute timing names to apply to alerts that match this policy.","description_kind":"markdown","optional":true},"repeat_interval":{"type":"string","description":"Minimum time interval for re-sending a notification if an alert is still firing. Default is 4 hours.","description_kind":"markdown","optional":true}},"block_types":{"matcher":{"nesting_mode":"set","block":{"attributes":{"label":{"type":"string","description":"The name of the label to match against.","description_kind":"markdown","required":true},"match":{"type":"string","description":"The operator to apply when matching values of the given label. Allowed operators are `=` for equality, `!=` for negated equality, `=~` for regex equality, and `!~` for negated regex equality.","description_kind":"markdown","required":true},"value":{"type":"string","description":"The label value to match against.","description_kind":"markdown","required":true}},"description":"Describes which labels this rule should match. When multiple matchers are supplied, an alert must match ALL matchers to be accepted by this policy. When no matchers are supplied, the rule will match all alert instances.","description_kind":"markdown"}},"policy":{"nesting_mode":"list","block":{"attributes":{"contact_point":{"type":"string","description":"The contact point to route notifications that match this rule to.","description_kind":"markdown","required":true},"continue":{"type":"bool","description":"Whether to continue matching subsequent rules if an alert matches the current rule. Otherwise, the rule will be 'consumed' by the first policy to match it.","description_kind":"markdown","optional":true},"group_by":{"type":["list","string"],"description":"A list of alert labels to group alerts into notifications by. Use the special label `...` to group alerts by all labels, effectively disabling grouping. Required for root policy only. If empty, the parent grouping is used.","description_kind":"markdown","optional":true},"group_interval":{"type":"string","description":"Minimum time interval between two notifications for the same group. Default is 5 minutes.","description_kind":"markdown","optional":true},"group_wait":{"type":"string","description":"Time to wait to buffer alerts of the same group before sending a notification. Default is 30 seconds.","description_kind":"markdown","optional":true},"mute_timings":{"type":["list","string"],"description":"A list of mute timing names to apply to alerts that match this policy.","description_kind":"markdown","optional":true},"repeat_interval":{"type":"string","description":"Minimum time interval for re-sending a notification if an alert is still firing. Default is 4 hours.","description_kind":"markdown","optional":true}},"block_types":{"matcher":{"nesting_mode":"set","block":{"attributes":{"label":{"type":"string","description":"The name of the label to match against.","description_kind":"markdown","required":true},"match":{"type":"string","description":"The operator to apply when matching values of the given label. Allowed operators are `=` for equality, `!=` for negated equality, `=~` for regex equality, and `!~` for negated regex equality.","description_kind":"markdown","required":true},"value":{"type":"string","description":"The label value to match against.","description_kind":"markdown","required":true}},"description":"Describes which labels this rule should match. When multiple matchers are supplied, an alert must match ALL matchers to be accepted by this policy. When no matchers are supplied, the rule will match all alert instances.","description_kind":"markdown"}},"policy":{"nesting_mode":"list","block":{"attributes":{"contact_point":{"type":"string","description":"The contact point to route notifications that match this rule to.","description_kind":"markdown","required":true},"continue":{"type":"bool","description":"Whether to continue matching subsequent rules if an alert matches the current rule. Otherwise, the rule will be 'consumed' by the first policy to match it.","description_kind":"markdown","optional":true},"group_by":{"type":["list","string"],"description":"A list of alert labels to group alerts into notifications by. Use the special label `...` to group alerts by all labels, effectively disabling grouping. Required for root policy only. If empty, the parent grouping is used.","description_kind":"markdown","required":true},"group_interval":{"type":"string","description":"Minimum time interval between two notifications for the same group. Default is 5 minutes.","description_kind":"markdown","optional":true},"group_wait":{"type":"string","description":"Time to wait to buffer alerts of the same group before sending a notification. Default is 30 seconds.","description_kind":"markdown","optional":true},"mute_timings":{"type":["list","string"],"description":"A list of mute timing names to apply to alerts that match this policy.","description_kind":"markdown","optional":true},"repeat_interval":{"type":"string","description":"Minimum time interval for re-sending a notification if an alert is still firing. Default is 4 hours.","description_kind":"markdown","optional":true}},"block_types":{"matcher":{"nesting_mode":"set","block":{"attributes":{"label":{"type":"string","description":"The name of the label to match against.","description_kind":"markdown","required":true},"match":{"type":"string","description":"The operator to apply when matching values of the given label. Allowed operators are `=` for equality, `!=` for negated equality, `=~` for regex equality, and `!~` for negated regex equality.","description_kind":"markdown","required":true},"value":{"type":"string","description":"The label value to match against.","description_kind":"markdown","required":true}},"description":"Describes which labels this rule should match. When multiple matchers are supplied, an alert must match ALL matchers to be accepted by this policy. When no matchers are supplied, the rule will match all alert instances.","description_kind":"markdown"}}},"description":"Routing rules for specific label sets.","description_kind":"markdown"}}},"description":"Routing rules for specific label sets.","description_kind":"markdown"}}},"description":"Routing rules for specific label sets.","description_kind":"markdown"}}},"description":"Routing rules for specific label sets.","description_kind":"markdown"}}},"description":"\nSets the global notification policy for Grafana.\n\n!\u003e This resource manages the entire notification policy tree, and will overwrite any existing policies.\n\n* [Official documentation](https://grafana.com/docs/grafana/latest/alerting/manage-notifications/)\n* [HTTP API](https://grafana.com/docs/grafana/latest/developers/http_api/alerting_provisioning/)\n\nThis resource requires Grafana 9.1.0 or later.\n","description_kind":"markdown"}},"grafana_oncall_escalation":{"version":0,"block":{"attributes":{"action_to_trigger":{"type":"string","description":"The ID of an Action for trigger_webhook type step.","description_kind":"markdown","optional":true},"duration":{"type":"number","description":"The duration of delay for wait type step.","description_kind":"markdown","optional":true},"escalation_chain_id":{"type":"string","description":"The ID of the escalation chain.","description_kind":"markdown","required":true},"group_to_notify":{"type":"string","description":"The ID of a User Group for notify_user_group type step.","description_kind":"markdown","optional":true},"id":{"type":"string","description_kind":"plain","optional":true,"computed":true},"important":{"type":"bool","description":"Will activate \"important\" personal notification rules. Actual for steps: notify_persons, notify_on_call_from_schedule and notify_user_group,notify_team_members","description_kind":"markdown","optional":true},"notify_if_time_from":{"type":"string","description":"The beginning of the time interval for notify_if_time_from_to type step in UTC (for example 08:00:00Z).","description_kind":"markdown","optional":true},"notify_if_time_to":{"type":"string","description":"The end of the time interval for notify_if_time_from_to type step in UTC (for example 18:00:00Z).","description_kind":"markdown","optional":true},"notify_on_call_from_schedule":{"type":"string","description":"ID of a Schedule for notify_on_call_from_schedule type step.","description_kind":"markdown","optional":true},"notify_to_team_members":{"type":"string","description":"The ID of a Team for a notify_team_members type step.","description_kind":"markdown","optional":true},"persons_to_notify":{"type":["set","string"],"description":"The list of ID's of users for notify_persons type step.","description_kind":"markdown","optional":true},"persons_to_notify_next_each_time":{"type":["set","string"],"description":"The list of ID's of users for notify_person_next_each_time type step.","description_kind":"markdown","optional":true},"position":{"type":"number","description":"The position of the escalation step (starts from 0).","description_kind":"markdown","required":true},"type":{"type":"string","description":"The type of escalation policy. Can be wait, notify_persons, notify_person_next_each_time, notify_on_call_from_schedule, trigger_webhook, notify_user_group, resolve, notify_whole_channel, notify_if_time_from_to, repeat_escalation, notify_team_members","description_kind":"markdown","optional":true}},"description":"\n* [Official documentation](https://grafana.com/docs/oncall/latest/configure/escalation-chains-and-routes/)\n* [HTTP API](https://grafana.com/docs/oncall/latest/oncall-api-reference/escalation_policies/)\n","description_kind":"markdown"}},"grafana_oncall_escalation_chain":{"version":0,"block":{"attributes":{"id":{"type":"string","description_kind":"plain","optional":true,"computed":true},"name":{"type":"string","description":"The name of the escalation chain.","description_kind":"markdown","required":true},"team_id":{"type":"string","description":"The ID of the OnCall team. To get one, create a team in Grafana, and navigate to the OnCall plugin (to sync the team with OnCall). You can then get the ID using the `grafana_oncall_team` datasource.","description_kind":"markdown","optional":true}},"description":"\n* [HTTP API](https://grafana.com/docs/oncall/latest/oncall-api-reference/escalation_chains/)\n","description_kind":"markdown"}},"grafana_oncall_integration":{"version":0,"block":{"attributes":{"id":{"type":"string","description_kind":"plain","optional":true,"computed":true},"link":{"type":"string","description":"The link for using in an integrated tool.","description_kind":"markdown","computed":true},"name":{"type":"string","description":"The name of the service integration.","description_kind":"markdown","required":true},"team_id":{"type":"string","description":"The ID of the OnCall team. To get one, create a team in Grafana, and navigate to the OnCall plugin (to sync the team with OnCall). You can then get the ID using the `grafana_oncall_team` datasource.","description_kind":"markdown","optional":true},"type":{"type":"string","description":"The type of integration. Can be grafana, grafana_alerting, webhook, alertmanager, kapacitor, fabric, newrelic, datadog, pagerduty, pingdom, elastalert, amazon_sns, curler, sentry, formatted_webhook, heartbeat, demo, manual, stackdriver, uptimerobot, sentry_platform, zabbix, prtg, slack_channel, inbound_email, direct_paging, jira.","description_kind":"markdown","required":true}},"block_types":{"default_route":{"nesting_mode":"list","block":{"attributes":{"escalation_chain_id":{"type":"string","description":"The ID of the escalation chain.","description_kind":"markdown","optional":true},"id":{"type":"string","description_kind":"plain","computed":true}},"block_types":{"msteams":{"nesting_mode":"list","block":{"attributes":{"enabled":{"type":"bool","description":"Enable notification in MS teams. Defaults to `true`.","description_kind":"markdown","optional":true},"id":{"type":"string","description":"MS teams channel id. Alerts will be directed to this channel in Microsoft teams.","description_kind":"markdown","optional":true}},"description":"MS teams-specific settings for a route.","description_kind":"markdown"},"max_items":1},"slack":{"nesting_mode":"list","block":{"attributes":{"channel_id":{"type":"string","description":"Slack channel id. Alerts will be directed to this channel in Slack.","description_kind":"markdown","optional":true},"enabled":{"type":"bool","description":"Enable notification in Slack. Defaults to `true`.","description_kind":"markdown","optional":true}},"description":"Slack-specific settings for a route.","description_kind":"markdown"},"max_items":1},"telegram":{"nesting_mode":"list","block":{"attributes":{"enabled":{"type":"bool","description":"Enable notification in Telegram. Defaults to `true`.","description_kind":"markdown","optional":true},"id":{"type":"string","description":"Telegram channel id. Alerts will be directed to this channel in Telegram.","description_kind":"markdown","optional":true}},"description":"Telegram-specific settings for a route.","description_kind":"markdown"},"max_items":1}},"description":"The Default route for all alerts from the given integration","description_kind":"markdown"},"min_items":1,"max_items":1},"templates":{"nesting_mode":"list","block":{"attributes":{"acknowledge_signal":{"type":"string","description":"Template for sending a signal to acknowledge the Incident.","description_kind":"markdown","optional":true},"grouping_key":{"type":"string","description":"Template for the key by which alerts are grouped.","description_kind":"markdown","optional":true},"resolve_signal":{"type":"string","description":"Template for sending a signal to resolve the Incident.","description_kind":"markdown","optional":true},"source_link":{"type":"string","description":"Template for a source link.","description_kind":"markdown","optional":true}},"block_types":{"email":{"nesting_mode":"list","block":{"attributes":{"message":{"type":"string","description":"Template for Alert message.","description_kind":"markdown","optional":true},"title":{"type":"string","description":"Template for Alert title.","description_kind":"markdown","optional":true}},"description":"Templates for Email.","description_kind":"markdown"},"max_items":1},"microsoft_teams":{"nesting_mode":"list","block":{"attributes":{"image_url":{"type":"string","description":"Template for Alert image url.","description_kind":"markdown","optional":true},"message":{"type":"string","description":"Template for Alert message.","description_kind":"markdown","optional":true},"title":{"type":"string","description":"Template for Alert title.","description_kind":"markdown","optional":true}},"description":"Templates for Microsoft Teams.","description_kind":"markdown"},"max_items":1},"phone_call":{"nesting_mode":"list","block":{"attributes":{"title":{"type":"string","description":"Template for Alert title.","description_kind":"markdown","optional":true}},"description":"Templates for Phone Call.","description_kind":"markdown"},"max_items":1},"slack":{"nesting_mode":"list","block":{"attributes":{"image_url":{"type":"string","description":"Template for Alert image url.","description_kind":"markdown","optional":true},"message":{"type":"string","description":"Template for Alert message.","description_kind":"markdown","optional":true},"title":{"type":"string","description":"Template for Alert title.","description_kind":"markdown","optional":true}},"description":"Templates for Slack.","description_kind":"markdown"},"max_items":1},"sms":{"nesting_mode":"list","block":{"attributes":{"title":{"type":"string","description":"Template for Alert title.","description_kind":"markdown","optional":true}},"description":"Templates for SMS.","description_kind":"markdown"},"max_items":1},"telegram":{"nesting_mode":"list","block":{"attributes":{"image_url":{"type":"string","description":"Template for Alert image url.","description_kind":"markdown","optional":true},"message":{"type":"string","description":"Template for Alert message.","description_kind":"markdown","optional":true},"title":{"type":"string","description":"Template for Alert title.","description_kind":"markdown","optional":true}},"description":"Templates for Telegram.","description_kind":"markdown"},"max_items":1},"web":{"nesting_mode":"list","block":{"attributes":{"image_url":{"type":"string","description":"Template for Alert image url.","description_kind":"markdown","optional":true},"message":{"type":"string","description":"Template for Alert message.","description_kind":"markdown","optional":true},"title":{"type":"string","description":"Template for Alert title.","description_kind":"markdown","optional":true}},"description":"Templates for Web.","description_kind":"markdown"},"max_items":1}},"description":"Jinja2 templates for Alert payload. An empty templates block will be ignored.","description_kind":"markdown"},"max_items":1}},"description":"\n* [Official documentation](https://grafana.com/docs/oncall/latest/integrations/)\n* [HTTP API](https://grafana.com/docs/oncall/latest/oncall-api-reference/)\n","description_kind":"markdown"}},"grafana_oncall_on_call_shift":{"version":0,"block":{"attributes":{"by_day":{"type":["set","string"],"description":"This parameter takes a list of days in iCal format. Can be MO, TU, WE, TH, FR, SA, SU","description_kind":"markdown","optional":true},"by_month":{"type":["set","number"],"description":"This parameter takes a list of months. Valid values are 1 to 12","description_kind":"markdown","optional":true},"by_monthday":{"type":["set","number"],"description":"This parameter takes a list of days of the month. Valid values are 1 to 31 or -31 to -1","description_kind":"markdown","optional":true},"duration":{"type":"number","description":"The duration of the event.","description_kind":"markdown","required":true},"frequency":{"type":"string","description":"The frequency of the event. Can be hourly, daily, weekly, monthly","description_kind":"markdown","optional":true},"id":{"type":"string","description_kind":"plain","optional":true,"computed":true},"interval":{"type":"number","description":"The positive integer representing at which intervals the recurrence rule repeats.","description_kind":"markdown","optional":true},"level":{"type":"number","description":"The priority level. The higher the value, the higher the priority.","description_kind":"markdown","optional":true},"name":{"type":"string","description":"The shift's name.","description_kind":"markdown","required":true},"rolling_users":{"type":["list",["set","string"]],"description":"The list of lists with on-call users (for rolling_users event type)","description_kind":"markdown","optional":true},"start":{"type":"string","description":"The start time of the on-call shift. This parameter takes a date format as yyyy-MM-dd'T'HH:mm:ss (for example \"2020-09-05T08:00:00\")","description_kind":"markdown","required":true},"start_rotation_from_user_index":{"type":"number","description":"The index of the list of users in rolling_users, from which on-call rotation starts.","description_kind":"markdown","optional":true},"team_id":{"type":"string","description":"The ID of the OnCall team. To get one, create a team in Grafana, and navigate to the OnCall plugin (to sync the team with OnCall). You can then get the ID using the `grafana_oncall_team` datasource.","description_kind":"markdown","optional":true},"time_zone":{"type":"string","description":"The shift's timezone. Overrides schedule's timezone.","description_kind":"markdown","optional":true},"type":{"type":"string","description":"The shift's type. Can be rolling_users, recurrent_event, single_event","description_kind":"markdown","required":true},"users":{"type":["set","string"],"description":"The list of on-call users (for single_event and recurrent_event event type).","description_kind":"markdown","optional":true},"week_start":{"type":"string","description":"Start day of the week in iCal format. Can be MO, TU, WE, TH, FR, SA, SU","description_kind":"markdown","optional":true}},"description":"\n* [HTTP API](https://grafana.com/docs/oncall/latest/oncall-api-reference/on_call_shifts/)\n","description_kind":"markdown"}},"grafana_oncall_outgoing_webhook":{"version":0,"block":{"attributes":{"authorization_header":{"type":"string","description":"The auth data of the webhook. Used in Authorization header instead of user/password auth.","description_kind":"markdown","optional":true,"sensitive":true},"data":{"type":"string","description":"The data of the webhook.","description_kind":"markdown","optional":true},"forward_whole_payload":{"type":"bool","description":"Toggle to send the entire webhook payload instead of using the values in the Data field.","description_kind":"markdown","optional":true},"headers":{"type":"string","description":"Headers to add to the outgoing webhook request.","description_kind":"markdown","optional":true},"http_method":{"type":"string","description":"The HTTP method used in the request made by the outgoing webhook. Defaults to `POST`.","description_kind":"markdown","optional":true},"id":{"type":"string","description_kind":"plain","optional":true,"computed":true},"integration_filter":{"type":["list","string"],"description":"Restricts the outgoing webhook to only trigger if the event came from a selected integration. If no integrations are selected the outgoing webhook will trigger for any integration.","description_kind":"markdown","optional":true},"is_webhook_enabled":{"type":"bool","description":"Controls whether the outgoing webhook will trigger or is ignored. The default is `true`.","description_kind":"markdown","optional":true},"name":{"type":"string","description":"The name of the outgoing webhook.","description_kind":"markdown","required":true},"password":{"type":"string","description":"The auth data of the webhook. Used for Basic authentication","description_kind":"markdown","optional":true,"sensitive":true},"team_id":{"type":"string","description":"The ID of the OnCall team. To get one, create a team in Grafana, and navigate to the OnCall plugin (to sync the team with OnCall). You can then get the ID using the `grafana_oncall_team` datasource.","description_kind":"markdown","optional":true},"trigger_template":{"type":"string","description":"A template used to dynamically determine whether the webhook should execute based on the content of the payload.","description_kind":"markdown","optional":true},"trigger_type":{"type":"string","description":"The type of event that will cause this outgoing webhook to execute. The types of triggers are: `escalation`, `alert group created`, `acknowledge`, `resolve`, `silence`, `unsilence`, `unresolve`, `unacknowledge`. Defaults to `escalation`.","description_kind":"markdown","optional":true},"url":{"type":"string","description":"The webhook URL.","description_kind":"markdown","required":true},"user":{"type":"string","description":"Username to use when making the outgoing webhook request.","description_kind":"markdown","optional":true}},"description":"\n* [HTTP API](https://grafana.com/docs/oncall/latest/oncall-api-reference/outgoing_webhooks/)\n","description_kind":"markdown"}},"grafana_oncall_route":{"version":0,"block":{"attributes":{"escalation_chain_id":{"type":"string","description":"The ID of the escalation chain.","description_kind":"markdown","required":true},"id":{"type":"string","description_kind":"plain","optional":true,"computed":true},"integration_id":{"type":"string","description":"The ID of the integration.","description_kind":"markdown","required":true},"position":{"type":"number","description":"The position of the route (starts from 0).","description_kind":"markdown","required":true},"routing_regex":{"type":"string","description":"Python Regex query. Route is chosen for an alert if there is a match inside the alert payload.","description_kind":"markdown","required":true},"routing_type":{"type":"string","description":"The type of route. Can be jinja2, regex Defaults to `regex`.","description_kind":"markdown","optional":true}},"block_types":{"msteams":{"nesting_mode":"list","block":{"attributes":{"enabled":{"type":"bool","description":"Enable notification in MS teams. Defaults to `true`.","description_kind":"markdown","optional":true},"id":{"type":"string","description":"MS teams channel id. Alerts will be directed to this channel in Microsoft teams.","description_kind":"markdown","optional":true}},"description":"MS teams-specific settings for a route.","description_kind":"markdown"},"max_items":1},"slack":{"nesting_mode":"list","block":{"attributes":{"channel_id":{"type":"string","description":"Slack channel id. Alerts will be directed to this channel in Slack.","description_kind":"markdown","optional":true},"enabled":{"type":"bool","description":"Enable notification in Slack. Defaults to `true`.","description_kind":"markdown","optional":true}},"description":"Slack-specific settings for a route.","description_kind":"markdown"},"max_items":1},"telegram":{"nesting_mode":"list","block":{"attributes":{"enabled":{"type":"bool","description":"Enable notification in Telegram. Defaults to `true`.","description_kind":"markdown","optional":true},"id":{"type":"string","description":"Telegram channel id. Alerts will be directed to this channel in Telegram.","description_kind":"markdown","optional":true}},"description":"Telegram-specific settings for a route.","description_kind":"markdown"},"max_items":1}},"description":"\n* [HTTP API](https://grafana.com/docs/oncall/latest/oncall-api-reference/routes/)\n","description_kind":"markdown"}},"grafana_oncall_schedule":{"version":0,"block":{"attributes":{"enable_web_overrides":{"type":"bool","description":"Enable overrides via web UI (it will ignore ical_url_overrides).","description_kind":"markdown","optional":true},"ical_url_overrides":{"type":"string","description":"The URL of external iCal calendar which override primary events.","description_kind":"markdown","optional":true},"ical_url_primary":{"type":"string","description":"The URL of the external calendar iCal file.","description_kind":"markdown","optional":true},"id":{"type":"string","description_kind":"plain","optional":true,"computed":true},"name":{"type":"string","description":"The schedule's name.","description_kind":"markdown","required":true},"shifts":{"type":["set","string"],"description":"The list of ID's of on-call shifts.","description_kind":"markdown","optional":true},"team_id":{"type":"string","description":"The ID of the OnCall team. To get one, create a team in Grafana, and navigate to the OnCall plugin (to sync the team with OnCall). You can then get the ID using the `grafana_oncall_team` datasource.","description_kind":"markdown","optional":true},"time_zone":{"type":"string","description":"The schedule's time zone.","description_kind":"markdown","optional":true},"type":{"type":"string","description":"The schedule's type.","description_kind":"markdown","required":true}},"block_types":{"slack":{"nesting_mode":"list","block":{"attributes":{"channel_id":{"type":"string","description":"Slack channel id. Reminder about schedule shifts will be directed to this channel in Slack.","description_kind":"markdown","optional":true},"user_group_id":{"type":"string","description":"Slack user group id. Members of user group will be updated when on-call users change.","description_kind":"markdown","optional":true}},"description":"The Slack-specific settings for a schedule.","description_kind":"markdown"},"max_items":1}},"description":"\n* [HTTP API](https://grafana.com/docs/oncall/latest/oncall-api-reference/schedules/)\n","description_kind":"markdown"}},"grafana_organization":{"version":0,"block":{"attributes":{"admin_user":{"type":"string","description":"The login name of the configured default admin user for the Grafana\ninstallation. If unset, this value defaults to admin, the Grafana default.\nGrafana adds the default admin user to all organizations automatically upon\ncreation, and this parameter keeps Terraform from removing it from\norganizations.\n Defaults to `admin`.","description_kind":"markdown","optional":true},"admins":{"type":["set","string"],"description":"A list of email addresses corresponding to users who should be given admin\naccess to the organization. Note: users specified here must already exist in\nGrafana unless 'create_users' is set to true.","description_kind":"markdown","optional":true},"create_users":{"type":"bool","description":"Whether or not to create Grafana users specified in the organization's\nmembership if they don't already exist in Grafana. If unspecified, this\nparameter defaults to true, creating placeholder users with the name, login,\nand email set to the email of the user, and a random password. Setting this\noption to false will cause an error to be thrown for any users that do not\nalready exist in Grafana.\n Defaults to `true`.","description_kind":"markdown","optional":true},"editors":{"type":["set","string"],"description":"A list of email addresses corresponding to users who should be given editor\naccess to the organization. Note: users specified here must already exist in\nGrafana unless 'create_users' is set to true.","description_kind":"markdown","optional":true},"id":{"type":"string","description_kind":"plain","optional":true,"computed":true},"name":{"type":"string","description":"The display name for the Grafana organization created.","description_kind":"markdown","required":true},"org_id":{"type":"number","description":"The organization id assigned to this organization by Grafana.","description_kind":"markdown","computed":true},"users_without_access":{"type":["set","string"],"description":"A list of email addresses corresponding to users who should be given none access to the organization.\nNote: users specified here must already exist in Grafana, unless 'create_users' is\nset to true. This feature is only available in Grafana 10.2+.","description_kind":"markdown","optional":true},"viewers":{"type":["set","string"],"description":"A list of email addresses corresponding to users who should be given viewer\naccess to the organization. Note: users specified here must already exist in\nGrafana unless 'create_users' is set to true.","description_kind":"markdown","optional":true}},"description":"\n* [Official documentation](https://grafana.com/docs/grafana/latest/administration/organization-management/)\n* [HTTP API](https://grafana.com/docs/grafana/latest/developers/http_api/org/)\n\nThis resource represents an instance-scoped resource and uses Grafana's admin APIs.\nIt does not work with API tokens or service accounts which are org-scoped.\nYou must use basic auth.\n","description_kind":"markdown"}},"grafana_organization_preferences":{"version":0,"block":{"attributes":{"home_dashboard_id":{"type":"number","description":"The Organization home dashboard ID. Deprecated: Use `home_dashboard_uid` instead.","description_kind":"markdown","deprecated":true,"optional":true},"home_dashboard_uid":{"type":"string","description":"The Organization home dashboard UID. This is only available in Grafana 9.0+.","description_kind":"markdown","optional":true},"id":{"type":"string","description_kind":"plain","optional":true,"computed":true},"org_id":{"type":"string","description":"The Organization ID. If not set, the Org ID defined in the provider block will be used.","description_kind":"markdown","optional":true},"theme":{"type":"string","description":"The Organization theme. Available values are `light`, `dark`, `system`, or an empty string for the default.","description_kind":"markdown","optional":true},"timezone":{"type":"string","description":"The Organization timezone. Available values are `utc`, `browser`, or an empty string for the default.","description_kind":"markdown","optional":true},"week_start":{"type":"string","description":"The Organization week start day. Available values are `sunday`, `monday`, `saturday`, or an empty string for the default. Defaults to ``.","description_kind":"markdown","optional":true}},"description":"\n* [Official documentation](https://grafana.com/docs/grafana/latest/administration/organization-management/)\n* [HTTP API](https://grafana.com/docs/grafana/latest/developers/http_api/preferences/#get-current-org-prefs)\n","description_kind":"markdown"}},"grafana_playlist":{"version":0,"block":{"attributes":{"id":{"type":"string","description_kind":"plain","optional":true,"computed":true},"interval":{"type":"string","description_kind":"plain","required":true},"name":{"type":"string","description":"The name of the playlist.","description_kind":"markdown","required":true},"org_id":{"type":"string","description":"The Organization ID. If not set, the Org ID defined in the provider block will be used.","description_kind":"markdown","optional":true}},"block_types":{"item":{"nesting_mode":"set","block":{"attributes":{"id":{"type":"string","description_kind":"plain","computed":true},"order":{"type":"number","description_kind":"plain","required":true},"title":{"type":"string","description_kind":"plain","required":true},"type":{"type":"string","description_kind":"plain","optional":true},"value":{"type":"string","description_kind":"plain","optional":true}},"description_kind":"plain"},"min_items":1}},"description":"\n* [Official documentation](https://grafana.com/docs/grafana/latest/dashboards/create-manage-playlists/)\n* [HTTP API](https://grafana.com/docs/grafana/latest/developers/http_api/playlist/)\n","description_kind":"markdown"}},"grafana_report":{"version":0,"block":{"attributes":{"dashboard_id":{"type":"number","description":"Dashboard to be sent in the report. This field is deprecated, use `dashboard_uid` instead.","description_kind":"markdown","deprecated":true,"optional":true,"computed":true},"dashboard_uid":{"type":"string","description":"Dashboard to be sent in the report.","description_kind":"markdown","deprecated":true,"optional":true,"computed":true},"formats":{"type":["set","string"],"description":"Specifies what kind of attachment to generate for the report. Allowed values: `pdf`, `csv`, `image`.","description_kind":"markdown","optional":true},"id":{"type":"string","description":"Generated identifier of the report.","description_kind":"markdown","computed":true},"include_dashboard_link":{"type":"bool","description":"Whether to include a link to the dashboard in the report. Defaults to `true`.","description_kind":"markdown","optional":true},"include_table_csv":{"type":"bool","description":"Whether to include a CSV file of table panel data. Defaults to `false`.","description_kind":"markdown","optional":true},"layout":{"type":"string","description":"Layout of the report. Allowed values: `simple`, `grid`. Defaults to `grid`.","description_kind":"markdown","optional":true},"message":{"type":"string","description":"Message to be sent in the report.","description_kind":"markdown","optional":true},"name":{"type":"string","description":"Name of the report.","description_kind":"markdown","required":true},"org_id":{"type":"string","description":"The Organization ID. If not set, the Org ID defined in the provider block will be used.","description_kind":"markdown","optional":true},"orientation":{"type":"string","description":"Orientation of the report. Allowed values: `landscape`, `portrait`. Defaults to `landscape`.","description_kind":"markdown","optional":true},"recipients":{"type":["list","string"],"description":"List of recipients of the report.","description_kind":"markdown","required":true},"reply_to":{"type":"string","description":"Reply-to email address of the report.","description_kind":"markdown","optional":true}},"block_types":{"dashboards":{"nesting_mode":"list","block":{"attributes":{"report_variables":{"type":["map","string"],"description":"Add report variables to the dashboard. Values should be separated by commas.","description_kind":"markdown","optional":true},"uid":{"type":"string","description":"Dashboard uid.","description_kind":"markdown","required":true}},"block_types":{"time_range":{"nesting_mode":"list","block":{"attributes":{"from":{"type":"string","description":"Start of the time range.","description_kind":"markdown","optional":true},"to":{"type":"string","description":"End of the time range.","description_kind":"markdown","optional":true}},"description":"Time range of the report.","description_kind":"markdown"},"max_items":1}},"description":"List of dashboards to render into the report","description_kind":"markdown"}},"schedule":{"nesting_mode":"list","block":{"attributes":{"custom_interval":{"type":"string","description":"Custom interval of the report.\n**Note:** This field is only available when frequency is set to `custom`.","description_kind":"markdown","optional":true},"end_time":{"type":"string","description":"End time of the report. If empty, the report will be sent indefinitely (according to frequency). Note that times will be saved as UTC in Grafana. Use 2006-01-02T15:04:05 format if you want to set a custom timezone","description_kind":"markdown","optional":true},"frequency":{"type":"string","description":"Frequency of the report. Allowed values: `never`, `once`, `hourly`, `daily`, `weekly`, `monthly`, `custom`.","description_kind":"markdown","required":true},"last_day_of_month":{"type":"bool","description":"Send the report on the last day of the month Defaults to `false`.","description_kind":"markdown","optional":true},"start_time":{"type":"string","description":"Start time of the report. If empty, the start date will be set to the creation time. Note that times will be saved as UTC in Grafana. Use 2006-01-02T15:04:05 format if you want to set a custom timezone","description_kind":"markdown","optional":true},"timezone":{"type":"string","description":"Set the report time zone. Defaults to `GMT`.","description_kind":"markdown","optional":true},"workdays_only":{"type":"bool","description":"Whether to send the report only on work days. Defaults to `false`.","description_kind":"markdown","optional":true}},"description":"Schedule of the report.","description_kind":"markdown"},"min_items":1,"max_items":1},"time_range":{"nesting_mode":"list","block":{"attributes":{"from":{"type":"string","description":"Start of the time range.","description_kind":"markdown","optional":true},"to":{"type":"string","description":"End of the time range.","description_kind":"markdown","optional":true}},"description":"Time range of the report.","description_kind":"markdown","deprecated":true},"max_items":1}},"description":"\n**Note:** This resource is available only with Grafana Enterprise 7.+.\n\n* [Official documentation](https://grafana.com/docs/grafana/latest/dashboards/create-reports/)\n* [HTTP API](https://grafana.com/docs/grafana/latest/developers/http_api/reporting/)\n","description_kind":"markdown"}},"grafana_role":{"version":0,"block":{"attributes":{"auto_increment_version":{"type":"bool","description":"Whether the role version should be incremented automatically on updates (and set to 1 on creation). This field or `version` should be set.","description_kind":"markdown","optional":true},"description":{"type":"string","description":"Description of the role.","description_kind":"markdown","optional":true},"display_name":{"type":"string","description":"Display name of the role. Available with Grafana 8.5+.","description_kind":"markdown","optional":true},"global":{"type":"bool","description":"Boolean to state whether the role is available across all organizations or not. Defaults to `false`.","description_kind":"markdown","optional":true},"group":{"type":"string","description":"Group of the role. Available with Grafana 8.5+.","description_kind":"markdown","optional":true},"hidden":{"type":"bool","description":"Boolean to state whether the role should be visible in the Grafana UI or not. Available with Grafana 8.5+. Defaults to `false`.","description_kind":"markdown","optional":true},"id":{"type":"string","description_kind":"plain","optional":true,"computed":true},"name":{"type":"string","description":"Name of the role","description_kind":"markdown","required":true},"org_id":{"type":"string","description":"The Organization ID. If not set, the Org ID defined in the provider block will be used.","description_kind":"markdown","optional":true},"uid":{"type":"string","description":"Unique identifier of the role. Used for assignments.","description_kind":"markdown","optional":true,"computed":true},"version":{"type":"number","description":"Version of the role. A role is updated only on version increase. This field or `auto_increment_version` should be set.","description_kind":"markdown","optional":true}},"block_types":{"permissions":{"nesting_mode":"set","block":{"attributes":{"action":{"type":"string","description":"Specific action users granted with the role will be allowed to perform (for example: `users:read`)","description_kind":"markdown","required":true},"scope":{"type":"string","description":"Scope to restrict the action to a set of resources (for example: `users:*` or `roles:customrole1`) Defaults to ``.","description_kind":"markdown","optional":true}},"description":"Specific set of actions granted by the role.","description_kind":"markdown"}}},"description":"\n**Note:** This resource is available only with Grafana Enterprise 8.+.\n\n* [Official documentation](https://grafana.com/docs/grafana/latest/administration/roles-and-permissions/access-control/)\n* [HTTP API](https://grafana.com/docs/grafana/latest/developers/http_api/access_control/)\n","description_kind":"markdown"}},"grafana_role_assignment":{"version":0,"block":{"attributes":{"id":{"type":"string","description_kind":"plain","optional":true,"computed":true},"org_id":{"type":"string","description":"The Organization ID. If not set, the Org ID defined in the provider block will be used.","description_kind":"markdown","optional":true},"role_uid":{"type":"string","description":"Grafana RBAC role UID.","description_kind":"markdown","required":true},"service_accounts":{"type":["set","string"],"description":"IDs of service accounts that the role should be assigned to.","description_kind":"markdown","optional":true},"teams":{"type":["set","string"],"description":"IDs of teams that the role should be assigned to.","description_kind":"markdown","optional":true},"users":{"type":["set","number"],"description":"IDs of users that the role should be assigned to.","description_kind":"markdown","optional":true}},"description":"\nManages the entire set of assignments for a role. Assignments that aren't specified when applying this resource will be removed.\n**Note:** This resource is available only with Grafana Enterprise 9.2+.\n* [Official documentation](https://grafana.com/docs/grafana/latest/administration/roles-and-permissions/access-control/)\n* [HTTP API](https://grafana.com/docs/grafana/latest/developers/http_api/access_control/)\n","description_kind":"markdown"}},"grafana_rule_group":{"version":0,"block":{"attributes":{"disable_provenance":{"type":"bool","description":"Allow modifying the rule group from other sources than Terraform or the Grafana API. Defaults to `false`.","description_kind":"markdown","optional":true},"folder_uid":{"type":"string","description":"The UID of the folder that the group belongs to.","description_kind":"markdown","required":true},"id":{"type":"string","description_kind":"plain","optional":true,"computed":true},"interval_seconds":{"type":"number","description":"The interval, in seconds, at which all rules in the group are evaluated. If a group contains many rules, the rules are evaluated sequentially.","description_kind":"markdown","required":true},"name":{"type":"string","description":"The name of the rule group.","description_kind":"markdown","required":true},"org_id":{"type":"string","description":"The Organization ID. If not set, the Org ID defined in the provider block will be used.","description_kind":"markdown","optional":true}},"block_types":{"rule":{"nesting_mode":"list","block":{"attributes":{"annotations":{"type":["map","string"],"description":"Key-value pairs of metadata to attach to the alert rule that may add user-defined context, but cannot be used for matching, grouping, or routing. Defaults to `map[]`.","description_kind":"markdown","optional":true},"condition":{"type":"string","description":"The `ref_id` of the query node in the `data` field to use as the alert condition.","description_kind":"markdown","required":true},"exec_err_state":{"type":"string","description":"Describes what state to enter when the rule's query is invalid and the rule cannot be executed. Options are OK, Error, KeepLast, and Alerting. Defaults to `Alerting`.","description_kind":"markdown","optional":true},"for":{"type":"string","description":"The amount of time for which the rule must be breached for the rule to be considered to be Firing. Before this time has elapsed, the rule is only considered to be Pending. Defaults to `0`.","description_kind":"markdown","optional":true},"is_paused":{"type":"bool","description":"Sets whether the alert should be paused or not. Defaults to `false`.","description_kind":"markdown","optional":true},"labels":{"type":["map","string"],"description":"Key-value pairs to attach to the alert rule that can be used in matching, grouping, and routing. Defaults to `map[]`.","description_kind":"markdown","optional":true},"name":{"type":"string","description":"The name of the alert rule.","description_kind":"markdown","required":true},"no_data_state":{"type":"string","description":"Describes what state to enter when the rule's query returns No Data. Options are OK, NoData, KeepLast, and Alerting. Defaults to `NoData`.","description_kind":"markdown","optional":true},"uid":{"type":"string","description":"The unique identifier of the alert rule.","description_kind":"markdown","computed":true}},"block_types":{"data":{"nesting_mode":"list","block":{"attributes":{"datasource_uid":{"type":"string","description":"The UID of the datasource being queried, or \"-100\" if this stage is an expression stage.","description_kind":"markdown","required":true},"model":{"type":"string","description":"Custom JSON data to send to the specified datasource when querying.","description_kind":"markdown","required":true},"query_type":{"type":"string","description":"An optional identifier for the type of query being executed. Defaults to ``.","description_kind":"markdown","optional":true},"ref_id":{"type":"string","description":"A unique string to identify this query stage within a rule.","description_kind":"markdown","required":true}},"block_types":{"relative_time_range":{"nesting_mode":"list","block":{"attributes":{"from":{"type":"number","description":"The number of seconds in the past, relative to when the rule is evaluated, at which the time range begins.","description_kind":"markdown","required":true},"to":{"type":"number","description":"The number of seconds in the past, relative to when the rule is evaluated, at which the time range ends.","description_kind":"markdown","required":true}},"description":"The time range, relative to when the query is executed, across which to query.","description_kind":"markdown"},"min_items":1,"max_items":1}},"description":"A sequence of stages that describe the contents of the rule.","description_kind":"markdown"},"min_items":1},"notification_settings":{"nesting_mode":"list","block":{"attributes":{"contact_point":{"type":"string","description":"The contact point to route notifications that match this rule to.","description_kind":"markdown","required":true},"group_by":{"type":["list","string"],"description":"A list of alert labels to group alerts into notifications by. Use the special label `...` to group alerts by all labels, effectively disabling grouping. If empty, no grouping is used. If specified, requires labels 'alertname' and 'grafana_folder' to be included.","description_kind":"markdown","optional":true},"group_interval":{"type":"string","description":"Minimum time interval between two notifications for the same group. Default is 5 minutes.","description_kind":"markdown","optional":true},"group_wait":{"type":"string","description":"Time to wait to buffer alerts of the same group before sending a notification. Default is 30 seconds.","description_kind":"markdown","optional":true},"mute_timings":{"type":["list","string"],"description":"A list of mute timing names to apply to alerts that match this policy.","description_kind":"markdown","optional":true},"repeat_interval":{"type":"string","description":"Minimum time interval for re-sending a notification if an alert is still firing. Default is 4 hours.","description_kind":"markdown","optional":true}},"description":"Notification settings for the rule. If specified, it overrides the notification policies. Available since Grafana 10.4, requires feature flag 'alertingSimplifiedRouting' enabled.","description_kind":"markdown"},"max_items":1}},"description":"The rules within the group.","description_kind":"markdown"},"min_items":1}},"description":"\nManages Grafana Alerting rule groups.\n\n* [Official documentation](https://grafana.com/docs/grafana/latest/alerting/alerting-rules/)\n* [HTTP API](https://grafana.com/docs/grafana/latest/developers/http_api/alerting_provisioning/#alert-rules)\n\nThis resource requires Grafana 9.1.0 or later.\n","description_kind":"markdown"}},"grafana_service_account":{"version":0,"block":{"attributes":{"id":{"type":"string","description_kind":"plain","optional":true,"computed":true},"is_disabled":{"type":"bool","description":"The disabled status for the service account. Defaults to `false`.","description_kind":"markdown","optional":true},"name":{"type":"string","description":"The name of the service account.","description_kind":"markdown","required":true},"org_id":{"type":"string","description":"The Organization ID. If not set, the Org ID defined in the provider block will be used.","description_kind":"markdown","optional":true},"role":{"type":"string","description":"The basic role of the service account in the organization.","description_kind":"markdown","optional":true}},"description":"\n**Note:** This resource is available only with Grafana 9.1+.\n\n* [Official documentation](https://grafana.com/docs/grafana/latest/administration/service-accounts/)\n* [HTTP API](https://grafana.com/docs/grafana/latest/developers/http_api/serviceaccount/#service-account-api)","description_kind":"markdown"}},"grafana_service_account_permission":{"version":0,"block":{"attributes":{"id":{"type":"string","description_kind":"plain","optional":true,"computed":true},"org_id":{"type":"string","description":"The Organization ID. If not set, the Org ID defined in the provider block will be used.","description_kind":"markdown","optional":true},"service_account_id":{"type":"string","description":"The id of the service account.","description_kind":"markdown","required":true}},"block_types":{"permissions":{"nesting_mode":"set","block":{"attributes":{"permission":{"type":"string","description":"Permission to associate with item. Must be `Edit` or `Admin`.","description_kind":"markdown","required":true},"team_id":{"type":"string","description":"ID of the team to manage permissions for. Specify either this or `user_id`. Defaults to `0`.","description_kind":"markdown","optional":true},"user_id":{"type":"string","description":"ID of the user or service account to manage permissions for. Specify either this or `team_id`. Defaults to `0`.","description_kind":"markdown","optional":true}},"description":"The permission items to add/update. Items that are omitted from the list will be removed.","description_kind":"markdown"}}},"description":"\nManages the entire set of permissions for a service account. Permissions that aren't specified when applying this resource will be removed.\n\n**Note:** This resource is available from Grafana 9.2.4 onwards.\n\n* [Official documentation](https://grafana.com/docs/grafana/latest/administration/service-accounts/#manage-users-and-teams-permissions-for-a-service-account-in-grafana)","description_kind":"markdown"}},"grafana_service_account_permission_item":{"version":0,"block":{"attributes":{"id":{"type":"string","description_kind":"plain","computed":true},"org_id":{"type":"string","description":"The Organization ID. If not set, the Org ID defined in the provider block will be used.","description_kind":"plain","optional":true,"computed":true},"permission":{"type":"string","description":"the permission to be assigned","description_kind":"plain","required":true},"service_account_id":{"type":"string","description":"The ID of the service account.","description_kind":"plain","required":true},"team":{"type":"string","description":"the team onto which the permission is to be assigned","description_kind":"plain","optional":true},"user":{"type":"string","description":"the user or service account onto which the permission is to be assigned","description_kind":"plain","optional":true}},"description":"Manages a single permission item for a service account. Conflicts with the \"grafana_service_account_permission\" resource which manages the entire set of permissions for a service account.\n* [Official documentation](https://grafana.com/docs/grafana/latest/administration/service-accounts/#manage-users-and-teams-permissions-for-a-service-account-in-grafana)","description_kind":"markdown"}},"grafana_service_account_token":{"version":0,"block":{"attributes":{"expiration":{"type":"string","description":"The expiration date of the service account token.","description_kind":"markdown","computed":true},"has_expired":{"type":"bool","description":"The status of the service account token.","description_kind":"markdown","computed":true},"id":{"type":"string","description_kind":"plain","optional":true,"computed":true},"key":{"type":"string","description":"The key of the service account token.","description_kind":"markdown","computed":true,"sensitive":true},"name":{"type":"string","description":"The name of the service account token.","description_kind":"markdown","required":true},"seconds_to_live":{"type":"number","description":"The key expiration in seconds. It is optional. If it is a positive number an expiration date for the key is set. If it is null, zero or is omitted completely (unless `api_key_max_seconds_to_live` configuration option is set) the key will never expire.","description_kind":"markdown","optional":true},"service_account_id":{"type":"string","description":"The ID of the service account to which the token belongs.","description_kind":"markdown","required":true}},"description":"\n**Note:** This resource is available only with Grafana 9.1+.\n\n* [Official documentation](https://grafana.com/docs/grafana/latest/administration/service-accounts/)\n* [HTTP API](https://grafana.com/docs/grafana/latest/developers/http_api/serviceaccount/#service-account-api)","description_kind":"markdown"}},"grafana_slo":{"version":0,"block":{"attributes":{"description":{"type":"string","description":"Description is a free-text field that can provide more context to an SLO.","description_kind":"markdown","required":true},"id":{"type":"string","description_kind":"plain","optional":true,"computed":true},"name":{"type":"string","description":"Name should be a short description of your indicator. Consider names like \"API Availability\"","description_kind":"markdown","required":true}},"block_types":{"alerting":{"nesting_mode":"list","block":{"block_types":{"annotation":{"nesting_mode":"list","block":{"attributes":{"key":{"type":"string","description_kind":"plain","required":true},"value":{"type":"string","description_kind":"plain","required":true}},"description":"Annotations will be attached to all alerts generated by any of these rules.","description_kind":"markdown"}},"fastburn":{"nesting_mode":"list","block":{"block_types":{"annotation":{"nesting_mode":"list","block":{"attributes":{"key":{"type":"string","description_kind":"plain","required":true},"value":{"type":"string","description_kind":"plain","required":true}},"description":"Annotations to attach only to Fast Burn alerts.","description_kind":"markdown"}},"label":{"nesting_mode":"list","block":{"attributes":{"key":{"type":"string","description_kind":"plain","required":true},"value":{"type":"string","description_kind":"plain","required":true}},"description":"Labels to attach only to Fast Burn alerts.","description_kind":"markdown"}}},"description":"Alerting Rules generated for Fast Burn alerts","description_kind":"markdown"},"max_items":1},"label":{"nesting_mode":"list","block":{"attributes":{"key":{"type":"string","description_kind":"plain","required":true},"value":{"type":"string","description_kind":"plain","required":true}},"description":"Labels will be attached to all alerts generated by any of these rules.","description_kind":"markdown"}},"slowburn":{"nesting_mode":"list","block":{"block_types":{"annotation":{"nesting_mode":"list","block":{"attributes":{"key":{"type":"string","description_kind":"plain","required":true},"value":{"type":"string","description_kind":"plain","required":true}},"description":"Annotations to attach only to Slow Burn alerts.","description_kind":"markdown"}},"label":{"nesting_mode":"list","block":{"attributes":{"key":{"type":"string","description_kind":"plain","required":true},"value":{"type":"string","description_kind":"plain","required":true}},"description":"Labels to attach only to Slow Burn alerts.","description_kind":"markdown"}}},"description":"Alerting Rules generated for Slow Burn alerts","description_kind":"markdown"},"max_items":1}},"description":"Configures the alerting rules that will be generated for each\n\t\t\t\ttime window associated with the SLO. Grafana SLOs can generate\n\t\t\t\talerts when the short-term error budget burn is very high, the\n\t\t\t\tlong-term error budget burn rate is high, or when the remaining\n\t\t\t\terror budget is below a certain threshold. Annotations and Labels support templating.","description_kind":"markdown"},"max_items":1},"destination_datasource":{"nesting_mode":"list","block":{"attributes":{"uid":{"type":"string","description":"UID for the Mimir Datasource","description_kind":"markdown","optional":true}},"description":"Destination Datasource sets the datasource defined for an SLO","description_kind":"markdown"},"max_items":1},"label":{"nesting_mode":"list","block":{"attributes":{"key":{"type":"string","description_kind":"plain","required":true},"value":{"type":"string","description_kind":"plain","required":true}},"description":"Additional labels that will be attached to all metrics generated from the query. These labels are useful for grouping SLOs in dashboard views that you create by hand. Labels must adhere to Prometheus label name schema - \"^[a-zA-Z_][a-zA-Z0-9_]*$\"","description_kind":"markdown"}},"objectives":{"nesting_mode":"list","block":{"attributes":{"value":{"type":"number","description":"Value between 0 and 1. If the value of the query is above the objective, the SLO is met.","description_kind":"markdown","required":true},"window":{"type":"string","description":"A Prometheus-parsable time duration string like 24h, 60m. This is the time window the objective is measured over.","description_kind":"markdown","required":true}},"description":"Over each rolling time window, the remaining error budget will be calculated, and separate alerts can be generated for each time window based on the SLO burn rate or remaining error budget.","description_kind":"markdown"},"min_items":1},"query":{"nesting_mode":"list","block":{"attributes":{"type":{"type":"string","description":"Query type must be one of: \"freeform\", \"query\", \"ratio\", or \"threshold\"","description_kind":"markdown","required":true}},"block_types":{"freeform":{"nesting_mode":"list","block":{"attributes":{"query":{"type":"string","description":"Freeform Query Field","description_kind":"markdown","required":true}},"description_kind":"plain"},"max_items":1},"ratio":{"nesting_mode":"list","block":{"attributes":{"group_by_labels":{"type":["list","string"],"description":"Defines Group By Labels used for per-label alerting. These appear as variables on SLO dashboards to enable filtering and aggregation. Labels must adhere to Prometheus label name schema - \"^[a-zA-Z_][a-zA-Z0-9_]*$\"","description_kind":"markdown","optional":true},"success_metric":{"type":"string","description":"Counter metric for success events (numerator)","description_kind":"markdown","required":true},"total_metric":{"type":"string","description":"Metric for total events (denominator)","description_kind":"markdown","required":true}},"description_kind":"plain"},"max_items":1}},"description":"Query describes the indicator that will be measured against the objective. Freeform Query types are currently supported.","description_kind":"markdown"},"min_items":1}},"description":"\nResource manages Grafana SLOs. \n\n* [Official documentation](https://grafana.com/docs/grafana-cloud/alerting-and-irm/slo/)\n* [API documentation](https://grafana.com/docs/grafana-cloud/alerting-and-irm/slo/api/)\n* [Additional Information On Alerting Rule Annotations and Labels](https://prometheus.io/docs/prometheus/latest/configuration/alerting_rules/#templating/)\n\t\t","description_kind":"markdown"}},"grafana_sso_settings":{"version":0,"block":{"attributes":{"id":{"type":"string","description_kind":"plain","optional":true,"computed":true},"provider_name":{"type":"string","description":"The name of the SSO provider. Supported values: github, gitlab, google, azuread, okta, generic_oauth, saml.","description_kind":"markdown","required":true}},"block_types":{"oauth2_settings":{"nesting_mode":"set","block":{"attributes":{"allow_assign_grafana_admin":{"type":"bool","description":"If enabled, it will automatically sync the Grafana server administrator role.","description_kind":"markdown","optional":true},"allow_sign_up":{"type":"bool","description":"If not enabled, only existing Grafana users can log in using OAuth.","description_kind":"markdown","optional":true},"allowed_domains":{"type":"string","description":"List of comma- or space-separated domains. The user should belong to at least one domain to log in.","description_kind":"markdown","optional":true},"allowed_groups":{"type":"string","description":"List of comma- or space-separated groups. The user should be a member of at least one group to log in. For Generic OAuth, if you configure allowed_groups, you must also configure groups_attribute_path.","description_kind":"markdown","optional":true},"allowed_organizations":{"type":"string","description":"List of comma- or space-separated organizations. The user should be a member of at least one organization to log in.","description_kind":"markdown","optional":true},"api_url":{"type":"string","description":"The user information endpoint of your OAuth2 provider. Required for azuread, okta and generic_oauth providers.","description_kind":"markdown","optional":true},"auth_style":{"type":"string","description":"It determines how client_id and client_secret are sent to Oauth2 provider. Possible values are AutoDetect, InParams, InHeader. Default is AutoDetect.","description_kind":"markdown","optional":true},"auth_url":{"type":"string","description":"The authorization endpoint of your OAuth2 provider. Required for azuread, okta and generic_oauth providers.","description_kind":"markdown","optional":true},"auto_login":{"type":"bool","description":"Log in automatically, skipping the login screen.","description_kind":"markdown","optional":true},"client_id":{"type":"string","description":"The client Id of your OAuth2 app.","description_kind":"markdown","required":true},"client_secret":{"type":"string","description":"The client secret of your OAuth2 app.","description_kind":"markdown","optional":true,"sensitive":true},"custom":{"type":["map","string"],"description":"Custom fields to configure for OAuth2 such as the [force_use_graph_api](https://grafana.com/docs/grafana/latest/setup-grafana/configure-security/configure-authentication/azuread/#force-fetching-groups-from-microsoft-graph-api) field.","description_kind":"markdown","optional":true},"define_allowed_groups":{"type":"bool","description":"Define allowed groups.","description_kind":"markdown","optional":true},"define_allowed_teams_ids":{"type":"bool","description":"Define allowed teams ids.","description_kind":"markdown","optional":true},"email_attribute_name":{"type":"string","description":"Name of the key to use for user email lookup within the attributes map of OAuth2 ID token. Only applicable to Generic OAuth.","description_kind":"markdown","optional":true},"email_attribute_path":{"type":"string","description":"JMESPath expression to use for user email lookup from the user information. Only applicable to Generic OAuth.","description_kind":"markdown","optional":true},"empty_scopes":{"type":"bool","description":"If enabled, no scopes will be sent to the OAuth2 provider.","description_kind":"markdown","optional":true},"enabled":{"type":"bool","description":"Define whether this configuration is enabled for the specified provider. Defaults to `true`.","description_kind":"markdown","optional":true},"groups_attribute_path":{"type":"string","description":"JMESPath expression to use for user group lookup. If you configure allowed_groups, you must also configure groups_attribute_path.","description_kind":"markdown","optional":true},"id_token_attribute_name":{"type":"string","description":"The name of the key used to extract the ID token from the returned OAuth2 token. Only applicable to Generic OAuth.","description_kind":"markdown","optional":true},"login_attribute_path":{"type":"string","description":"JMESPath expression to use for user login lookup from the user ID token. Only applicable to Generic OAuth.","description_kind":"markdown","optional":true},"name":{"type":"string","description":"Helpful if you use more than one identity providers or SSO protocols.","description_kind":"markdown","optional":true},"name_attribute_path":{"type":"string","description":"JMESPath expression to use for user name lookup from the user ID token. This name will be used as the user’s display name. Only applicable to Generic OAuth.","description_kind":"markdown","optional":true},"role_attribute_path":{"type":"string","description":"JMESPath expression to use for Grafana role lookup.","description_kind":"markdown","optional":true},"role_attribute_strict":{"type":"bool","description":"If enabled, denies user login if the Grafana role cannot be extracted using Role attribute path.","description_kind":"markdown","optional":true},"scopes":{"type":"string","description":"List of comma- or space-separated OAuth2 scopes.","description_kind":"markdown","optional":true},"signout_redirect_url":{"type":"string","description":"The URL to redirect the user to after signing out from Grafana.","description_kind":"markdown","optional":true},"skip_org_role_sync":{"type":"bool","description":"Prevent synchronizing users’ organization roles from your IdP.","description_kind":"markdown","optional":true},"team_ids":{"type":"string","description":"String list of Team Ids. If set, the user must be a member of one of the given teams to log in. If you configure team_ids, you must also configure teams_url and team_ids_attribute_path.","description_kind":"markdown","optional":true},"team_ids_attribute_path":{"type":"string","description":"The JMESPath expression to use for Grafana Team Id lookup within the results returned by the teams_url endpoint. Only applicable to Generic OAuth.","description_kind":"markdown","optional":true},"teams_url":{"type":"string","description":"The URL used to query for Team Ids. If not set, the default value is /teams. If you configure teams_url, you must also configure team_ids_attribute_path. Only applicable to Generic OAuth.","description_kind":"markdown","optional":true},"tls_client_ca":{"type":"string","description":"The path to the trusted certificate authority list. Is not applicable on Grafana Cloud.","description_kind":"markdown","optional":true},"tls_client_cert":{"type":"string","description":"The path to the certificate. Is not applicable on Grafana Cloud.","description_kind":"markdown","optional":true},"tls_client_key":{"type":"string","description":"The path to the key. Is not applicable on Grafana Cloud.","description_kind":"markdown","optional":true},"tls_skip_verify_insecure":{"type":"bool","description":"If enabled, the client accepts any certificate presented by the server and any host name in that certificate. You should only use this for testing, because this mode leaves SSL/TLS susceptible to man-in-the-middle attacks.","description_kind":"markdown","optional":true},"token_url":{"type":"string","description":"The token endpoint of your OAuth2 provider. Required for azuread, okta and generic_oauth providers.","description_kind":"markdown","optional":true},"use_pkce":{"type":"bool","description":"If enabled, Grafana will use Proof Key for Code Exchange (PKCE) with the OAuth2 Authorization Code Grant.","description_kind":"markdown","optional":true},"use_refresh_token":{"type":"bool","description":"If enabled, Grafana will fetch a new access token using the refresh token provided by the OAuth2 provider.","description_kind":"markdown","optional":true}},"description":"The OAuth2 settings set. Required for github, gitlab, google, azuread, okta, generic_oauth providers.","description_kind":"markdown"},"max_items":1},"saml_settings":{"nesting_mode":"set","block":{"attributes":{"allow_idp_initiated":{"type":"bool","description":"Whether SAML IdP-initiated login is allowed.","description_kind":"markdown","optional":true},"allow_sign_up":{"type":"bool","description":"Whether to allow new Grafana user creation through SAML login. If set to false, then only existing Grafana users can log in with SAML.","description_kind":"markdown","optional":true},"allowed_organizations":{"type":"string","description":"List of comma- or space-separated organizations. User should be a member of at least one organization to log in.","description_kind":"markdown","optional":true},"assertion_attribute_email":{"type":"string","description":"Friendly name or name of the attribute within the SAML assertion to use as the user email.","description_kind":"markdown","optional":true},"assertion_attribute_groups":{"type":"string","description":"Friendly name or name of the attribute within the SAML assertion to use as the user groups.","description_kind":"markdown","optional":true},"assertion_attribute_login":{"type":"string","description":"Friendly name or name of the attribute within the SAML assertion to use as the user login handle.","description_kind":"markdown","optional":true},"assertion_attribute_name":{"type":"string","description":"Friendly name or name of the attribute within the SAML assertion to use as the user name. Alternatively, this can be a template with variables that match the names of attributes within the SAML assertion.","description_kind":"markdown","optional":true},"assertion_attribute_org":{"type":"string","description":"Friendly name or name of the attribute within the SAML assertion to use as the user organization.","description_kind":"markdown","optional":true},"assertion_attribute_role":{"type":"string","description":"Friendly name or name of the attribute within the SAML assertion to use as the user roles.","description_kind":"markdown","optional":true},"auto_login":{"type":"bool","description":"Whether SAML auto login is enabled.","description_kind":"markdown","optional":true},"certificate":{"type":"string","description":"Base64-encoded string for the SP X.509 certificate.","description_kind":"markdown","optional":true,"sensitive":true},"certificate_path":{"type":"string","description":"Path for the SP X.509 certificate.","description_kind":"markdown","optional":true},"enabled":{"type":"bool","description":"Define whether this configuration is enabled for SAML. Defaults to `true`.","description_kind":"markdown","optional":true},"idp_metadata":{"type":"string","description":"Base64-encoded string for the IdP SAML metadata XML.","description_kind":"markdown","optional":true},"idp_metadata_path":{"type":"string","description":"Path for the IdP SAML metadata XML.","description_kind":"markdown","optional":true},"idp_metadata_url":{"type":"string","description":"URL for the IdP SAML metadata XML.","description_kind":"markdown","optional":true},"max_issue_delay":{"type":"string","description":"Duration, since the IdP issued a response and the SP is allowed to process it. For example: 90s, 1h.","description_kind":"markdown","optional":true},"metadata_valid_duration":{"type":"string","description":"Duration, for how long the SP metadata is valid. For example: 48h, 5d.","description_kind":"markdown","optional":true},"name":{"type":"string","description":"Name used to refer to the SAML authentication.","description_kind":"markdown","optional":true},"name_id_format":{"type":"string","description":"The Name ID Format to request within the SAML assertion. Defaults to urn:oasis:names:tc:SAML:2.0:nameid-format:transient","description_kind":"markdown","optional":true},"org_mapping":{"type":"string","description":"List of comma- or space-separated Organization:OrgId:Role mappings. Organization can be * meaning “All users”. Role is optional and can have the following values: Viewer, Editor or Admin.","description_kind":"markdown","optional":true},"private_key":{"type":"string","description":"Base64-encoded string for the SP private key.","description_kind":"markdown","optional":true,"sensitive":true},"private_key_path":{"type":"string","description":"Path for the SP private key.","description_kind":"markdown","optional":true},"relay_state":{"type":"string","description":"Relay state for IdP-initiated login. Should match relay state configured in IdP.","description_kind":"markdown","optional":true},"role_values_admin":{"type":"string","description":"List of comma- or space-separated roles which will be mapped into the Admin role.","description_kind":"markdown","optional":true},"role_values_editor":{"type":"string","description":"List of comma- or space-separated roles which will be mapped into the Editor role.","description_kind":"markdown","optional":true},"role_values_grafana_admin":{"type":"string","description":"List of comma- or space-separated roles which will be mapped into the Grafana Admin (Super Admin) role.","description_kind":"markdown","optional":true},"role_values_none":{"type":"string","description":"List of comma- or space-separated roles which will be mapped into the None role.","description_kind":"markdown","optional":true},"signature_algorithm":{"type":"string","description":"Signature algorithm used for signing requests to the IdP. Supported values are rsa-sha1, rsa-sha256, rsa-sha512.","description_kind":"markdown","optional":true},"single_logout":{"type":"bool","description":"Whether SAML Single Logout is enabled.","description_kind":"markdown","optional":true}},"description":"The SAML settings set. Required for the saml provider.","description_kind":"markdown"},"max_items":1}},"description":"\nManages Grafana SSO Settings for OAuth2 and SAML.\n\n* [Official documentation](https://grafana.com/docs/grafana/latest/setup-grafana/configure-security/configure-authentication/)\n* [HTTP API](https://grafana.com/docs/grafana/latest/developers/http_api/sso-settings/)\n","description_kind":"markdown"}},"grafana_synthetic_monitoring_check":{"version":0,"block":{"attributes":{"alert_sensitivity":{"type":"string","description":"Can be set to `none`, `low`, `medium`, or `high` to correspond to the check [alert levels](https://grafana.com/docs/grafana-cloud/monitor-public-endpoints/configure-alerts/synthetic-monitoring-alerting/). Defaults to `none`.","description_kind":"markdown","optional":true},"basic_metrics_only":{"type":"bool","description":"Metrics are reduced by default. Set this to `false` if you'd like to publish all metrics. We maintain a [full list of metrics](https://github.com/grafana/synthetic-monitoring-agent/tree/main/internal/scraper/testdata) collected for each. Defaults to `true`.","description_kind":"markdown","optional":true},"enabled":{"type":"bool","description":"Whether to enable the check. Defaults to `true`.","description_kind":"markdown","optional":true},"frequency":{"type":"number","description":"How often the check runs in milliseconds (the value is not truly a \"frequency\" but a \"period\"). The minimum acceptable value is 1 second (1000 ms), and the maximum is 120 seconds (120000 ms). Defaults to `60000`.","description_kind":"markdown","optional":true},"id":{"type":"string","description":"The ID of the check.","description_kind":"markdown","computed":true},"job":{"type":"string","description":"Name used for job label.","description_kind":"markdown","required":true},"labels":{"type":["map","string"],"description":"Custom labels to be included with collected metrics and logs. The maximum number of labels that can be specified per check is 5. These are applied, along with the probe-specific labels, to the outgoing metrics. The names and values of the labels cannot be empty, and the maximum length is 32 bytes.","description_kind":"markdown","optional":true},"probes":{"type":["set","number"],"description":"List of probe location IDs where this target will be checked from.","description_kind":"markdown","required":true},"target":{"type":"string","description":"Hostname to ping.","description_kind":"markdown","required":true},"tenant_id":{"type":"number","description":"The tenant ID of the check.","description_kind":"markdown","computed":true},"timeout":{"type":"number","description":"Specifies the maximum running time for the check in milliseconds. The minimum acceptable value is 1 second (1000 ms), and the maximum 10 seconds (10000 ms). Defaults to `3000`.","description_kind":"markdown","optional":true}},"block_types":{"settings":{"nesting_mode":"set","block":{"block_types":{"dns":{"nesting_mode":"set","block":{"attributes":{"ip_version":{"type":"string","description":"Options are `V4`, `V6`, `Any`. Specifies whether the corresponding check will be performed using IPv4 or IPv6. The `Any` value indicates that IPv6 should be used, falling back to IPv4 if that's not available. Defaults to `V4`.","description_kind":"markdown","optional":true},"port":{"type":"number","description":"Port to target. Defaults to `53`.","description_kind":"markdown","optional":true},"protocol":{"type":"string","description":"`TCP` or `UDP`. Defaults to `UDP`.","description_kind":"markdown","optional":true},"record_type":{"type":"string","description":"One of `ANY`, `A`, `AAAA`, `CNAME`, `MX`, `NS`, `PTR`, `SOA`, `SRV`, `TXT`. Defaults to `A`.","description_kind":"markdown","optional":true},"server":{"type":"string","description":"DNS server address to target. Defaults to `8.8.8.8`.","description_kind":"markdown","optional":true},"source_ip_address":{"type":"string","description":"Source IP address.","description_kind":"markdown","optional":true},"valid_r_codes":{"type":["set","string"],"description":"List of valid response codes. Options include `NOERROR`, `BADALG`, `BADMODE`, `BADKEY`, `BADCOOKIE`, `BADNAME`, `BADSIG`, `BADTIME`, `BADTRUNC`, `BADVERS`, `FORMERR`, `NOTIMP`, `NOTAUTH`, `NOTZONE`, `NXDOMAIN`, `NXRRSET`, `REFUSED`, `SERVFAIL`, `YXDOMAIN`, `YXRRSET`.","description_kind":"markdown","optional":true}},"block_types":{"validate_additional_rrs":{"nesting_mode":"set","block":{"attributes":{"fail_if_matches_regexp":{"type":["set","string"],"description":"Fail if value matches regex.","description_kind":"markdown","optional":true},"fail_if_not_matches_regexp":{"type":["set","string"],"description":"Fail if value does not match regex.","description_kind":"markdown","optional":true}},"description":"Validate additional matches.","description_kind":"markdown"}},"validate_answer_rrs":{"nesting_mode":"set","block":{"attributes":{"fail_if_matches_regexp":{"type":["set","string"],"description":"Fail if value matches regex.","description_kind":"markdown","optional":true},"fail_if_not_matches_regexp":{"type":["set","string"],"description":"Fail if value does not match regex.","description_kind":"markdown","optional":true}},"description":"Validate response answer.","description_kind":"markdown"},"max_items":1},"validate_authority_rrs":{"nesting_mode":"set","block":{"attributes":{"fail_if_matches_regexp":{"type":["set","string"],"description":"Fail if value matches regex.","description_kind":"markdown","optional":true},"fail_if_not_matches_regexp":{"type":["set","string"],"description":"Fail if value does not match regex.","description_kind":"markdown","optional":true}},"description":"Validate response authority.","description_kind":"markdown"},"max_items":1}},"description":"Settings for DNS check. The target must be a valid hostname (or IP address for `PTR` records).","description_kind":"markdown"},"max_items":1},"http":{"nesting_mode":"set","block":{"attributes":{"bearer_token":{"type":"string","description":"Token for use with bearer authorization header.","description_kind":"markdown","optional":true},"body":{"type":"string","description":"The body of the HTTP request used in probe.","description_kind":"markdown","optional":true},"cache_busting_query_param_name":{"type":"string","description":"The name of the query parameter used to prevent the server from using a cached response. Each probe will assign a random value to this parameter each time a request is made.","description_kind":"markdown","optional":true},"fail_if_body_matches_regexp":{"type":["set","string"],"description":"List of regexes. If any match the response body, the check will fail.","description_kind":"markdown","optional":true},"fail_if_body_not_matches_regexp":{"type":["set","string"],"description":"List of regexes. If any do not match the response body, the check will fail.","description_kind":"markdown","optional":true},"fail_if_not_ssl":{"type":"bool","description":"Fail if SSL is not present. Defaults to `false`.","description_kind":"markdown","optional":true},"fail_if_ssl":{"type":"bool","description":"Fail if SSL is present. Defaults to `false`.","description_kind":"markdown","optional":true},"headers":{"type":["set","string"],"description":"The HTTP headers set for the probe.","description_kind":"markdown","optional":true},"ip_version":{"type":"string","description":"Options are `V4`, `V6`, `Any`. Specifies whether the corresponding check will be performed using IPv4 or IPv6. The `Any` value indicates that IPv6 should be used, falling back to IPv4 if that's not available. Defaults to `V4`.","description_kind":"markdown","optional":true},"method":{"type":"string","description":"Request method. One of `GET`, `CONNECT`, `DELETE`, `HEAD`, `OPTIONS`, `POST`, `PUT`, `TRACE` Defaults to `GET`.","description_kind":"markdown","optional":true},"no_follow_redirects":{"type":"bool","description":"Do not follow redirects. Defaults to `false`.","description_kind":"markdown","optional":true},"proxy_connect_headers":{"type":["set","string"],"description":"The HTTP headers sent to the proxy URL","description_kind":"markdown","optional":true},"proxy_url":{"type":"string","description":"Proxy URL.","description_kind":"markdown","optional":true},"valid_http_versions":{"type":["set","string"],"description":"List of valid HTTP versions. Options include `HTTP/1.0`, `HTTP/1.1`, `HTTP/2.0`","description_kind":"markdown","optional":true},"valid_status_codes":{"type":["set","number"],"description":"Accepted status codes. If unset, defaults to 2xx.","description_kind":"markdown","optional":true}},"block_types":{"basic_auth":{"nesting_mode":"set","block":{"attributes":{"password":{"type":"string","description":"Basic auth password.","description_kind":"markdown","required":true},"username":{"type":"string","description":"Basic auth username.","description_kind":"markdown","required":true}},"description":"Basic auth settings.","description_kind":"markdown"},"max_items":1},"fail_if_header_matches_regexp":{"nesting_mode":"set","block":{"attributes":{"allow_missing":{"type":"bool","description":"Allow header to be missing from responses. Defaults to `false`.","description_kind":"markdown","optional":true},"header":{"type":"string","description":"Header name.","description_kind":"markdown","required":true},"regexp":{"type":"string","description":"Regex that header value should match.","description_kind":"markdown","required":true}},"description":"Check fails if headers match.","description_kind":"markdown"}},"fail_if_header_not_matches_regexp":{"nesting_mode":"set","block":{"attributes":{"allow_missing":{"type":"bool","description":"Allow header to be missing from responses. Defaults to `false`.","description_kind":"markdown","optional":true},"header":{"type":"string","description":"Header name.","description_kind":"markdown","required":true},"regexp":{"type":"string","description":"Regex that header value should match.","description_kind":"markdown","required":true}},"description":"Check fails if headers do not match.","description_kind":"markdown"}},"tls_config":{"nesting_mode":"set","block":{"attributes":{"ca_cert":{"type":"string","description":"CA certificate in PEM format.","description_kind":"markdown","optional":true},"client_cert":{"type":"string","description":"Client certificate in PEM format.","description_kind":"markdown","optional":true},"client_key":{"type":"string","description":"Client key in PEM format.","description_kind":"markdown","optional":true,"sensitive":true},"insecure_skip_verify":{"type":"bool","description":"Disable target certificate validation. Defaults to `false`.","description_kind":"markdown","optional":true},"server_name":{"type":"string","description":"Used to verify the hostname for the targets.","description_kind":"markdown","optional":true}},"description":"TLS config.","description_kind":"markdown"},"max_items":1}},"description":"Settings for HTTP check. The target must be a URL (http or https).","description_kind":"markdown"},"max_items":1},"multihttp":{"nesting_mode":"set","block":{"block_types":{"entries":{"nesting_mode":"list","block":{"block_types":{"assertions":{"nesting_mode":"list","block":{"attributes":{"condition":{"type":"string","description":"The condition of the assertion: NOT_CONTAINS, EQUALS, STARTS_WITH, ENDS_WITH, TYPE_OF, CONTAINS","description_kind":"markdown","optional":true},"expression":{"type":"string","description":"The expression of the assertion. Should start with $.","description_kind":"markdown","optional":true},"subject":{"type":"string","description":"The subject of the assertion: RESPONSE_HEADERS, HTTP_STATUS_CODE, RESPONSE_BODY","description_kind":"markdown","optional":true},"type":{"type":"string","description":"The type of assertion to make: TEXT, JSON_PATH_VALUE, JSON_PATH_ASSERTION, REGEX_ASSERTION","description_kind":"markdown","required":true},"value":{"type":"string","description":"The value of the assertion","description_kind":"markdown","optional":true}},"description":"Assertions to make on the request response","description_kind":"markdown"}},"request":{"nesting_mode":"set","block":{"attributes":{"method":{"type":"string","description":"The HTTP method to use","description_kind":"markdown","required":true},"url":{"type":"string","description":"The URL for the request","description_kind":"markdown","required":true}},"block_types":{"body":{"nesting_mode":"set","block":{"attributes":{"content_encoding":{"type":"string","description":"The content encoding of the body","description_kind":"markdown","optional":true},"content_type":{"type":"string","description":"The content type of the body","description_kind":"markdown","optional":true},"payload":{"type":"string","description":"The body payload","description_kind":"markdown","optional":true}},"description":"The body of the HTTP request used in probe.","description_kind":"markdown"}},"headers":{"nesting_mode":"set","block":{"attributes":{"name":{"type":"string","description":"Name of the header to send","description_kind":"markdown","required":true},"value":{"type":"string","description":"Value of the header to send","description_kind":"markdown","required":true}},"description":"The headers to send with the request","description_kind":"markdown"}},"query_fields":{"nesting_mode":"set","block":{"attributes":{"name":{"type":"string","description":"Name of the query field to send","description_kind":"markdown","required":true},"value":{"type":"string","description":"Value of the query field to send","description_kind":"markdown","required":true}},"description":"Query fields to send with the request","description_kind":"markdown"}}},"description":"An individual MultiHTTP request","description_kind":"markdown"},"max_items":1},"variables":{"nesting_mode":"list","block":{"attributes":{"attribute":{"type":"string","description":"The attribute to use when finding the variable value. Only used when type is CSS_SELECTOR","description_kind":"markdown","optional":true},"expression":{"type":"string","description":"The expression to when finding the variable. Should start with $. Only use when type is JSON_PATH or REGEX","description_kind":"markdown","optional":true},"name":{"type":"string","description":"The name of the variable to extract","description_kind":"markdown","optional":true},"type":{"type":"string","description":"The method of finding the variable value to extract. JSON_PATH, REGEX, CSS_SELECTOR","description_kind":"markdown","required":true}},"description":"Variables to extract from the request response","description_kind":"markdown"}}},"description_kind":"plain"}}},"description":"Settings for MultiHTTP check. The target must be a URL (http or https)","description_kind":"markdown"},"max_items":1},"ping":{"nesting_mode":"set","block":{"attributes":{"dont_fragment":{"type":"bool","description":"Set the DF-bit in the IP-header. Only works with ipV4. Defaults to `false`.","description_kind":"markdown","optional":true},"ip_version":{"type":"string","description":"Options are `V4`, `V6`, `Any`. Specifies whether the corresponding check will be performed using IPv4 or IPv6. The `Any` value indicates that IPv6 should be used, falling back to IPv4 if that's not available. Defaults to `V4`.","description_kind":"markdown","optional":true},"payload_size":{"type":"number","description":"Payload size. Defaults to `0`.","description_kind":"markdown","optional":true},"source_ip_address":{"type":"string","description":"Source IP address.","description_kind":"markdown","optional":true}},"description":"Settings for ping (ICMP) check. The target must be a valid hostname or IP address.","description_kind":"markdown"},"max_items":1},"tcp":{"nesting_mode":"set","block":{"attributes":{"ip_version":{"type":"string","description":"Options are `V4`, `V6`, `Any`. Specifies whether the corresponding check will be performed using IPv4 or IPv6. The `Any` value indicates that IPv6 should be used, falling back to IPv4 if that's not available. Defaults to `V4`.","description_kind":"markdown","optional":true},"source_ip_address":{"type":"string","description":"Source IP address.","description_kind":"markdown","optional":true},"tls":{"type":"bool","description":"Whether or not TLS is used when the connection is initiated. Defaults to `false`.","description_kind":"markdown","optional":true}},"block_types":{"query_response":{"nesting_mode":"set","block":{"attributes":{"expect":{"type":"string","description":"Response to expect.","description_kind":"markdown","required":true},"send":{"type":"string","description":"Data to send.","description_kind":"markdown","required":true},"start_tls":{"type":"bool","description":"Upgrade TCP connection to TLS. Defaults to `false`.","description_kind":"markdown","optional":true}},"description":"The query sent in the TCP probe and the expected associated response.","description_kind":"markdown"}},"tls_config":{"nesting_mode":"set","block":{"attributes":{"ca_cert":{"type":"string","description":"CA certificate in PEM format.","description_kind":"markdown","optional":true},"client_cert":{"type":"string","description":"Client certificate in PEM format.","description_kind":"markdown","optional":true},"client_key":{"type":"string","description":"Client key in PEM format.","description_kind":"markdown","optional":true,"sensitive":true},"insecure_skip_verify":{"type":"bool","description":"Disable target certificate validation. Defaults to `false`.","description_kind":"markdown","optional":true},"server_name":{"type":"string","description":"Used to verify the hostname for the targets.","description_kind":"markdown","optional":true}},"description":"TLS config.","description_kind":"markdown"},"max_items":1}},"description":"Settings for TCP check. The target must be of the form `\u003chost\u003e:\u003cport\u003e`, where the host portion must be a valid hostname or IP address.","description_kind":"markdown"},"max_items":1},"traceroute":{"nesting_mode":"set","block":{"attributes":{"max_hops":{"type":"number","description":"Maximum TTL for the trace Defaults to `64`.","description_kind":"markdown","optional":true},"max_unknown_hops":{"type":"number","description":"Maximum number of hosts to travers that give no response Defaults to `15`.","description_kind":"markdown","optional":true},"ptr_lookup":{"type":"bool","description":"Reverse lookup hostnames from IP addresses Defaults to `true`.","description_kind":"markdown","optional":true}},"description":"Settings for traceroute check. The target must be a valid hostname or IP address","description_kind":"markdown"},"max_items":1}},"description":"Check settings. Should contain exactly one nested block.","description_kind":"markdown"},"min_items":1,"max_items":1}},"description":"\nSynthetic Monitoring checks are tests that run on selected probes at defined\nintervals and report metrics and logs back to your Grafana Cloud account. The\ntarget for checks can be a domain name, a server, or a website, depending on\nwhat information you would like to gather about your endpoint. You can define\nmultiple checks for a single endpoint to check different capabilities.\n\n* [Official documentation](https://grafana.com/docs/grafana-cloud/monitor-public-endpoints/create-checks/checks/)\n","description_kind":"markdown"}},"grafana_synthetic_monitoring_installation":{"version":0,"block":{"attributes":{"id":{"type":"string","description_kind":"plain","optional":true,"computed":true},"metrics_publisher_key":{"type":"string","description":"The [Grafana Cloud access policy](https://grafana.com/docs/grafana-cloud/account-management/authentication-and-permissions/access-policies/) with the following scopes: `stacks:read`, `metrics:write`, `logs:write`, `traces:write`. This is used to publish metrics and logs to Grafana Cloud stack.","description_kind":"markdown","required":true,"sensitive":true},"sm_access_token":{"type":"string","description":"Generated token to access the SM API.","description_kind":"markdown","computed":true},"stack_id":{"type":"string","description":"The ID or slug of the stack to install SM on.","description_kind":"markdown","required":true},"stack_sm_api_url":{"type":"string","description":"The URL of the SM API to install SM on. This depends on the stack region, find the list of API URLs here: https://grafana.com/docs/grafana-cloud/monitor-public-endpoints/set-up/set-up-private-probes/#probe-api-server-url. A static mapping exists in the provider but it may not contain all the regions. If it does contain the stack's region, this field is computed automatically and readable.","description_kind":"markdown","optional":true,"computed":true}},"description":"\nSets up Synthetic Monitoring on a Grafana cloud stack and generates a token. \nOnce a Grafana Cloud stack is created, a user can either use this resource or go into the UI to install synthetic monitoring.\nThis resource cannot be imported but it can be used on an existing Synthetic Monitoring installation without issues.\n\n**Note that this resource must be used on a provider configured with Grafana Cloud credentials.**\n\n* [Official documentation](https://grafana.com/docs/grafana-cloud/monitor-public-endpoints/set-up/installation/)\n* [API documentation](https://github.com/grafana/synthetic-monitoring-api-go-client/blob/main/docs/API.md#apiv1registerinstall)\n\nRequired access policy scopes:\n\n* stacks:read\n","description_kind":"markdown"}},"grafana_synthetic_monitoring_probe":{"version":0,"block":{"attributes":{"auth_token":{"type":"string","description":"The probe authentication token. Your probe must use this to authenticate with Grafana Cloud.","description_kind":"markdown","computed":true,"sensitive":true},"id":{"type":"string","description":"The ID of the probe.","description_kind":"markdown","computed":true},"labels":{"type":["map","string"],"description":"Custom labels to be included with collected metrics and logs.","description_kind":"markdown","optional":true},"latitude":{"type":"number","description":"Latitude coordinates.","description_kind":"markdown","required":true},"longitude":{"type":"number","description":"Longitude coordinates.","description_kind":"markdown","required":true},"name":{"type":"string","description":"Name of the probe.","description_kind":"markdown","required":true},"public":{"type":"bool","description":"Public probes are run by Grafana Labs and can be used by all users. Only Grafana Labs managed public probes will be set to `true`. Defaults to `false`.","description_kind":"markdown","optional":true},"region":{"type":"string","description":"Region of the probe.","description_kind":"markdown","required":true},"tenant_id":{"type":"number","description":"The tenant ID of the probe.","description_kind":"markdown","computed":true}},"description":"\nBesides the public probes run by Grafana Labs, you can also install your\nown private probes. These are only accessible to you and only write data to\nyour Grafana Cloud account. Private probes are instances of the open source\nGrafana Synthetic Monitoring Agent.\n\n* [Official documentation](https://grafana.com/docs/grafana-cloud/monitor-public-endpoints/set-up/set-up-private-probes/)\n","description_kind":"markdown"}},"grafana_team":{"version":0,"block":{"attributes":{"email":{"type":"string","description":"An email address for the team.","description_kind":"markdown","optional":true},"id":{"type":"string","description_kind":"plain","optional":true,"computed":true},"ignore_externally_synced_members":{"type":"bool","description":"Ignores team members that have been added to team by [Team Sync](https://grafana.com/docs/grafana/latest/setup-grafana/configure-security/configure-team-sync/).\nTeam Sync can be provisioned using [grafana_team_external_group resource](https://registry.terraform.io/providers/grafana/grafana/latest/docs/resources/team_external_group).\n Defaults to `true`.","description_kind":"markdown","optional":true},"members":{"type":["set","string"],"description":"A set of email addresses corresponding to users who should be given membership\nto the team. Note: users specified here must already exist in Grafana.","description_kind":"markdown","optional":true},"name":{"type":"string","description":"The display name for the Grafana team created.","description_kind":"markdown","required":true},"org_id":{"type":"string","description":"The Organization ID. If not set, the Org ID defined in the provider block will be used.","description_kind":"markdown","optional":true},"team_id":{"type":"number","description":"The team id assigned to this team by Grafana.","description_kind":"markdown","computed":true}},"block_types":{"preferences":{"nesting_mode":"list","block":{"attributes":{"home_dashboard_uid":{"type":"string","description":"The UID of the dashboard to display when a team member logs in. Defaults to ``.","description_kind":"markdown","optional":true},"theme":{"type":"string","description":"The default theme for this team. Available themes are `light`, `dark`, `system`, or an empty string for the default theme. Defaults to ``.","description_kind":"markdown","optional":true},"timezone":{"type":"string","description":"The default timezone for this team. Available values are `utc`, `browser`, or an empty string for the default. Defaults to ``.","description_kind":"markdown","optional":true},"week_start":{"type":"string","description":"The default week start day for this team. Available values are `sunday`, `monday`, `saturday`, or an empty string for the default. Defaults to ``.","description_kind":"markdown","optional":true}},"description_kind":"plain"},"max_items":1},"team_sync":{"nesting_mode":"list","block":{"attributes":{"groups":{"type":["set","string"],"description_kind":"plain","optional":true}},"description":"Sync external auth provider groups with this Grafana team. Only available in Grafana Enterprise.\n\t* [Official documentation](https://grafana.com/docs/grafana/latest/setup-grafana/configure-security/configure-team-sync/)\n\t* [HTTP API](https://grafana.com/docs/grafana/latest/developers/http_api/team_sync/)","description_kind":"markdown"},"max_items":1}},"description":"\n* [Official documentation](https://grafana.com/docs/grafana/latest/administration/team-management/)\n* [HTTP API](https://grafana.com/docs/grafana/latest/developers/http_api/team/)\n","description_kind":"markdown"}},"grafana_team_external_group":{"version":0,"block":{"attributes":{"groups":{"type":["set","string"],"description":"The team external groups list","description_kind":"markdown","required":true},"id":{"type":"string","description_kind":"plain","optional":true,"computed":true},"team_id":{"type":"string","description":"The Team ID","description_kind":"markdown","required":true}},"description":"Equivalent to the the `team_sync` attribute of the `grafana_team` resource. Use one or the other to configure a team's external groups syncing config.","description_kind":"markdown"}},"grafana_user":{"version":0,"block":{"attributes":{"email":{"type":"string","description":"The email address of the Grafana user.","description_kind":"markdown","required":true},"id":{"type":"string","description_kind":"plain","optional":true,"computed":true},"is_admin":{"type":"bool","description":"Whether to make user an admin. Defaults to `false`.","description_kind":"markdown","optional":true},"login":{"type":"string","description":"The username for the Grafana user.","description_kind":"markdown","optional":true},"name":{"type":"string","description":"The display name for the Grafana user.","description_kind":"markdown","optional":true},"password":{"type":"string","description":"The password for the Grafana user.","description_kind":"markdown","required":true,"sensitive":true},"user_id":{"type":"number","description":"The numerical ID of the Grafana user.","description_kind":"markdown","computed":true}},"description":"\n* [Official documentation](https://grafana.com/docs/grafana/latest/administration/user-management/server-user-management/)\n* [HTTP API](https://grafana.com/docs/grafana/latest/developers/http_api/user/)\n\nThis resource represents an instance-scoped resource and uses Grafana's admin APIs.\nIt does not work with API tokens or service accounts which are org-scoped. \nYou must use basic auth.\n","description_kind":"markdown"}}},"data_source_schemas":{"grafana_cloud_ips":{"version":0,"block":{"attributes":{"hosted_alerts":{"type":["set","string"],"description":"Set of IP addresses that are used for hosted alerts.","description_kind":"markdown","computed":true},"hosted_grafana":{"type":["set","string"],"description":"Set of IP addresses that are used for hosted Grafana.","description_kind":"markdown","computed":true},"hosted_logs":{"type":["set","string"],"description":"Set of IP addresses that are used for hosted logs.","description_kind":"markdown","computed":true},"hosted_metrics":{"type":["set","string"],"description":"Set of IP addresses that are used for hosted metrics.","description_kind":"markdown","computed":true},"hosted_traces":{"type":["set","string"],"description":"Set of IP addresses that are used for hosted traces.","description_kind":"markdown","computed":true},"id":{"type":"string","description_kind":"plain","optional":true,"computed":true}},"description":"Data source for retrieving sets of cloud IPs. See https://grafana.com/docs/grafana-cloud/reference/allow-list/ for more info","description_kind":"markdown"}},"grafana_cloud_organization":{"version":0,"block":{"attributes":{"created_at":{"type":"string","description_kind":"plain","computed":true},"id":{"type":"string","description_kind":"plain","optional":true,"computed":true},"name":{"type":"string","description_kind":"plain","computed":true},"slug":{"type":"string","description_kind":"plain","optional":true,"computed":true},"updated_at":{"type":"string","description_kind":"plain","computed":true},"url":{"type":"string","description_kind":"plain","computed":true}},"description_kind":"plain"}},"grafana_cloud_stack":{"version":0,"block":{"attributes":{"alertmanager_name":{"type":"string","description":"Name of the Alertmanager instance configured for this stack.","description_kind":"markdown","computed":true},"alertmanager_status":{"type":"string","description":"Status of the Alertmanager instance configured for this stack.","description_kind":"markdown","computed":true},"alertmanager_url":{"type":"string","description":"Base URL of the Alertmanager instance configured for this stack.","description_kind":"markdown","computed":true},"alertmanager_user_id":{"type":"number","description":"User ID of the Alertmanager instance configured for this stack.","description_kind":"markdown","computed":true},"description":{"type":"string","description":"Description of stack.","description_kind":"markdown","computed":true},"graphite_name":{"type":"string","description_kind":"plain","computed":true},"graphite_status":{"type":"string","description_kind":"plain","computed":true},"graphite_url":{"type":"string","description_kind":"plain","computed":true},"graphite_user_id":{"type":"number","description_kind":"plain","computed":true},"id":{"type":"string","description":"The stack id assigned to this stack by Grafana.","description_kind":"markdown","computed":true},"labels":{"type":["map","string"],"description":"A map of labels to assign to the stack. Label keys and values must match the following regexp: \"^[a-zA-Z0-9/\\\\-.]+$\" and stacks cannot have more than 10 labels.","description_kind":"markdown","computed":true},"logs_name":{"type":"string","description_kind":"plain","computed":true},"logs_status":{"type":"string","description_kind":"plain","computed":true},"logs_url":{"type":"string","description_kind":"plain","computed":true},"logs_user_id":{"type":"number","description_kind":"plain","computed":true},"name":{"type":"string","description":"Name of stack. Conventionally matches the url of the instance (e.g. `\u003cstack_slug\u003e.grafana.net`).","description_kind":"markdown","computed":true},"org_id":{"type":"number","description":"Organization id to assign to this stack.","description_kind":"markdown","computed":true},"org_name":{"type":"string","description":"Organization name to assign to this stack.","description_kind":"markdown","computed":true},"org_slug":{"type":"string","description":"Organization slug to assign to this stack.","description_kind":"markdown","computed":true},"otlp_url":{"type":"string","description":"Base URL of the OTLP instance configured for this stack. See https://grafana.com/docs/grafana-cloud/send-data/otlp/send-data-otlp/ for docs on how to use this.","description_kind":"markdown","computed":true},"profiles_name":{"type":"string","description_kind":"plain","computed":true},"profiles_status":{"type":"string","description_kind":"plain","computed":true},"profiles_url":{"type":"string","description_kind":"plain","computed":true},"profiles_user_id":{"type":"number","description_kind":"plain","computed":true},"prometheus_name":{"type":"string","description":"Prometheus name for this instance.","description_kind":"markdown","computed":true},"prometheus_remote_endpoint":{"type":"string","description":"Use this URL to query hosted metrics data e.g. Prometheus data source in Grafana","description_kind":"markdown","computed":true},"prometheus_remote_write_endpoint":{"type":"string","description":"Use this URL to send prometheus metrics to Grafana cloud","description_kind":"markdown","computed":true},"prometheus_status":{"type":"string","description":"Prometheus status for this instance.","description_kind":"markdown","computed":true},"prometheus_url":{"type":"string","description":"Prometheus url for this instance.","description_kind":"markdown","computed":true},"prometheus_user_id":{"type":"number","description":"Prometheus user ID. Used for e.g. remote_write.","description_kind":"markdown","computed":true},"region_slug":{"type":"string","description":"The region this stack is deployed to.","description_kind":"markdown","computed":true},"slug":{"type":"string","description":"Subdomain that the Grafana instance will be available at (i.e. setting slug to “\u003cstack_slug\u003e” will make the instance\navailable at “https://\u003cstack_slug\u003e.grafana.net\".","description_kind":"markdown","required":true},"status":{"type":"string","description":"Status of the stack.","description_kind":"markdown","computed":true},"traces_name":{"type":"string","description_kind":"plain","computed":true},"traces_status":{"type":"string","description_kind":"plain","computed":true},"traces_url":{"type":"string","description":"Base URL of the Traces instance configured for this stack. To use this in the Tempo data source in Grafana, append `/tempo` to the URL.","description_kind":"markdown","computed":true},"traces_user_id":{"type":"number","description_kind":"plain","computed":true},"url":{"type":"string","description":"Custom URL for the Grafana instance. Must have a CNAME setup to point to `.grafana.net` before creating the stack","description_kind":"markdown","computed":true}},"description":"Data source for Grafana Stack","description_kind":"markdown"}},"grafana_dashboard":{"version":0,"block":{"attributes":{"config_json":{"type":"string","description":"The complete dashboard model JSON.","description_kind":"markdown","computed":true},"dashboard_id":{"type":"number","description":"The numerical ID of the Grafana dashboard. Specify either this or `uid`. Defaults to `-1`.","description_kind":"markdown","optional":true},"folder":{"type":"number","description":"Deprecated. Use `folder_uid` instead","description_kind":"markdown","deprecated":true,"computed":true},"folder_uid":{"type":"string","description":"The UID of the folder where the Grafana dashboard is found.","description_kind":"markdown","computed":true},"id":{"type":"string","description_kind":"plain","optional":true,"computed":true},"is_starred":{"type":"bool","description":"Whether or not the Grafana dashboard is starred. Starred Dashboards will show up on your own Home Dashboard by default, and are a convenient way to mark Dashboards that you’re interested in.","description_kind":"markdown","computed":true},"org_id":{"type":"string","description":"The Organization ID. If not set, the Org ID defined in the provider block will be used.","description_kind":"markdown","optional":true},"slug":{"type":"string","description":"URL slug of the dashboard (deprecated).","description_kind":"markdown","computed":true},"title":{"type":"string","description":"The title of the Grafana dashboard.","description_kind":"markdown","computed":true},"uid":{"type":"string","description":"The uid of the Grafana dashboard. Specify either this or `dashboard_id`. Defaults to ``.","description_kind":"markdown","optional":true},"url":{"type":"string","description":"The full URL of the dashboard.","description_kind":"markdown","computed":true},"version":{"type":"number","description":"The numerical version of the Grafana dashboard.","description_kind":"markdown","computed":true}},"description":"\n* [Official documentation](https://grafana.com/docs/grafana/latest/dashboards/)\n* [Folder/Dashboard Search HTTP API](https://grafana.com/docs/grafana/latest/developers/http_api/folder_dashboard_search/)\n* [Dashboard HTTP API](https://grafana.com/docs/grafana/latest/developers/http_api/dashboard/)\n","description_kind":"markdown"}},"grafana_dashboards":{"version":0,"block":{"attributes":{"dashboards":{"type":["list",["object",{"folder_title":"string","title":"string","uid":"string"}]],"description_kind":"plain","computed":true},"folder_ids":{"type":["list","number"],"description":"Deprecated, use `folder_uids` instead.","description_kind":"markdown","deprecated":true,"optional":true},"folder_uids":{"type":["list","string"],"description":"UIDs of Grafana folders containing dashboards. Specify to filter for dashboards by folder (eg. `[\"General\"]` for General folder), or leave blank to get all dashboards in all folders.","description_kind":"markdown","optional":true},"id":{"type":"string","description_kind":"plain","optional":true,"computed":true},"limit":{"type":"number","description":"Maximum number of dashboard search results to return. Defaults to `5000`.","description_kind":"markdown","optional":true},"org_id":{"type":"string","description":"The Organization ID. If not set, the Org ID defined in the provider block will be used.","description_kind":"markdown","optional":true},"tags":{"type":["list","string"],"description":"List of string Grafana dashboard tags to search for, eg. `[\"prod\"]`. Used only as search input, i.e., attribute value will remain unchanged.","description_kind":"markdown","optional":true}},"description":"\nDatasource for retrieving all dashboards. Specify list of folder IDs to search in for dashboards.\n\n* [Official documentation](https://grafana.com/docs/grafana/latest/dashboards/)\n* [Folder/Dashboard Search HTTP API](https://grafana.com/docs/grafana/latest/developers/http_api/folder_dashboard_search/)\n* [Dashboard HTTP API](https://grafana.com/docs/grafana/latest/developers/http_api/dashboard/)\n","description_kind":"markdown"}},"grafana_data_source":{"version":0,"block":{"attributes":{"access_mode":{"type":"string","description":"The method by which Grafana will access the data source: `proxy` or `direct`.","description_kind":"markdown","computed":true},"basic_auth_enabled":{"type":"bool","description":"Whether to enable basic auth for the data source.","description_kind":"markdown","computed":true},"basic_auth_username":{"type":"string","description":"Basic auth username.","description_kind":"markdown","computed":true},"database_name":{"type":"string","description":"(Required by some data source types) The name of the database to use on the selected data source server.","description_kind":"markdown","computed":true},"id":{"type":"string","description":"Deprecated: Use `uid` instead of `id`","description_kind":"markdown","deprecated":true,"optional":true,"computed":true},"is_default":{"type":"bool","description":"Whether to set the data source as default. This should only be `true` to a single data source.","description_kind":"markdown","computed":true},"json_data_encoded":{"type":"string","description":"Serialized JSON string containing the json data. This attribute can be used to pass configuration options to the data source. To figure out what options a datasource has available, see its docs or inspect the network data when saving it from the Grafana UI. Note that keys in this map are usually camelCased.","description_kind":"markdown","computed":true},"name":{"type":"string","description_kind":"plain","optional":true,"computed":true},"org_id":{"type":"string","description":"The Organization ID. If not set, the Org ID defined in the provider block will be used.","description_kind":"markdown","optional":true},"type":{"type":"string","description":"The data source type. Must be one of the supported data source keywords.","description_kind":"markdown","computed":true},"uid":{"type":"string","description_kind":"plain","optional":true,"computed":true},"url":{"type":"string","description":"The URL for the data source. The type of URL required varies depending on the chosen data source type.","description_kind":"markdown","computed":true},"username":{"type":"string","description":"(Required by some data source types) The username to use to authenticate to the data source.","description_kind":"markdown","computed":true}},"description":"Get details about a Grafana Datasource querying by either name, uid or ID","description_kind":"markdown"}},"grafana_folder":{"version":0,"block":{"attributes":{"id":{"type":"string","description_kind":"plain","optional":true,"computed":true},"org_id":{"type":"string","description":"The Organization ID. If not set, the Org ID defined in the provider block will be used.","description_kind":"markdown","optional":true},"parent_folder_uid":{"type":"string","description":"The uid of the parent folder. If set, the folder will be nested. If not set, the folder will be created in the root folder. Note: This requires the nestedFolders feature flag to be enabled on your Grafana instance.","description_kind":"markdown","computed":true},"title":{"type":"string","description":"The title of the folder.","description_kind":"markdown","required":true},"uid":{"type":"string","description":"Unique identifier.","description_kind":"markdown","computed":true},"url":{"type":"string","description":"The full URL of the folder.","description_kind":"markdown","computed":true}},"description":"\n* [Official documentation](https://grafana.com/docs/grafana/latest/dashboards/manage-dashboards/)\n* [HTTP API](https://grafana.com/docs/grafana/latest/developers/http_api/folder/)\n","description_kind":"markdown"}},"grafana_folders":{"version":0,"block":{"attributes":{"folders":{"type":["set",["object",{"id":"number","title":"string","uid":"string","url":"string"}]],"description":"The Grafana instance's folders.","description_kind":"markdown","computed":true},"id":{"type":"string","description_kind":"plain","optional":true,"computed":true},"org_id":{"type":"string","description":"The Organization ID. If not set, the Org ID defined in the provider block will be used.","description_kind":"markdown","optional":true}},"description":"\n* [Official documentation](https://grafana.com/docs/grafana/latest/dashboards/manage-dashboards/)\n* [HTTP API](https://grafana.com/docs/grafana/latest/developers/http_api/folder/)\n","description_kind":"markdown"}},"grafana_library_panel":{"version":0,"block":{"attributes":{"created":{"type":"string","description":"Timestamp when the library panel was created.","description_kind":"markdown","computed":true},"dashboard_ids":{"type":["list","number"],"description":"Numerical IDs of Grafana dashboards containing the library panel.","description_kind":"markdown","computed":true},"description":{"type":"string","description":"Description of the library panel.","description_kind":"markdown","computed":true},"folder_id":{"type":"string","description":"Deprecated. Use `folder_uid` instead","description_kind":"markdown","deprecated":true,"computed":true},"folder_name":{"type":"string","description":"Name of the folder containing the library panel.","description_kind":"markdown","computed":true},"folder_uid":{"type":"string","description":"Unique ID (UID) of the folder containing the library panel.","description_kind":"markdown","computed":true},"id":{"type":"string","description_kind":"plain","optional":true,"computed":true},"model_json":{"type":"string","description":"The JSON model for the library panel.","description_kind":"markdown","computed":true},"name":{"type":"string","description":"Name of the library panel.","description_kind":"markdown","optional":true},"org_id":{"type":"string","description":"The Organization ID. If not set, the Org ID defined in the provider block will be used.","description_kind":"markdown","optional":true},"panel_id":{"type":"number","description":"The numeric ID of the library panel computed by Grafana.","description_kind":"markdown","computed":true},"type":{"type":"string","description":"Type of the library panel (eg. text).","description_kind":"markdown","computed":true},"uid":{"type":"string","description":"The unique identifier (UID) of the library panel.","description_kind":"markdown","optional":true},"updated":{"type":"string","description":"Timestamp when the library panel was last modified.","description_kind":"markdown","computed":true},"version":{"type":"number","description":"Version of the library panel.","description_kind":"markdown","computed":true}},"description":"Data source for retrieving a single library panel by name or uid.","description_kind":"markdown"}},"grafana_oncall_action":{"version":0,"block":{"attributes":{"id":{"type":"string","description_kind":"plain","optional":true,"computed":true},"name":{"type":"string","description":"The action name.","description_kind":"markdown","required":true}},"description":"\n**Note:** This data source is going to be deprecated, please use outgoing webhook data source instead.\n* [HTTP API](https://grafana.com/docs/oncall/latest/oncall-api-reference/outgoing_webhooks/)\n\n!\u003e Deprecated: Use the `grafana_oncall_outgoing_webhook` data source instead.\n","description_kind":"markdown","deprecated":true}},"grafana_oncall_escalation_chain":{"version":0,"block":{"attributes":{"id":{"type":"string","description_kind":"plain","optional":true,"computed":true},"name":{"type":"string","description":"The escalation chain name.","description_kind":"markdown","required":true}},"description":"\n* [HTTP API](https://grafana.com/docs/oncall/latest/oncall-api-reference/escalation_chains/)\n","description_kind":"markdown"}},"grafana_oncall_outgoing_webhook":{"version":0,"block":{"attributes":{"id":{"type":"string","description_kind":"plain","optional":true,"computed":true},"name":{"type":"string","description":"The outgoing webhook name.","description_kind":"markdown","required":true}},"description":"\n* [HTTP API](https://grafana.com/docs/oncall/latest/oncall-api-reference/outgoing_webhooks/)\n","description_kind":"markdown"}},"grafana_oncall_schedule":{"version":0,"block":{"attributes":{"id":{"type":"string","description_kind":"plain","optional":true,"computed":true},"name":{"type":"string","description":"The schedule name.","description_kind":"markdown","required":true},"type":{"type":"string","description":"The schedule type.","description_kind":"markdown","computed":true}},"description":"\n* [Official documentation](https://grafana.com/docs/oncall/latest/manage/on-call-schedules/)\n* [HTTP API](https://grafana.com/docs/oncall/latest/oncall-api-reference/schedules/)\n","description_kind":"markdown"}},"grafana_oncall_slack_channel":{"version":0,"block":{"attributes":{"id":{"type":"string","description_kind":"plain","optional":true,"computed":true},"name":{"type":"string","description":"The Slack channel name.","description_kind":"markdown","required":true},"slack_id":{"type":"string","description":"The Slack ID of the channel.","description_kind":"markdown","computed":true}},"description":"\n* [HTTP API](https://grafana.com/docs/oncall/latest/oncall-api-reference/slack_channels/)\n","description_kind":"markdown"}},"grafana_oncall_team":{"version":0,"block":{"attributes":{"avatar_url":{"type":"string","description_kind":"plain","computed":true},"email":{"type":"string","description_kind":"plain","computed":true},"id":{"type":"string","description_kind":"plain","optional":true,"computed":true},"name":{"type":"string","description":"The team name.","description_kind":"markdown","required":true}},"description_kind":"plain"}},"grafana_oncall_user":{"version":0,"block":{"attributes":{"email":{"type":"string","description":"The email of the user.","description_kind":"markdown","computed":true},"id":{"type":"string","description_kind":"plain","optional":true,"computed":true},"role":{"type":"string","description":"The role of the user.","description_kind":"markdown","computed":true},"username":{"type":"string","description":"The username of the user.","description_kind":"markdown","required":true}},"description":"\n* [HTTP API](https://grafana.com/docs/oncall/latest/oncall-api-reference/users/)\n","description_kind":"markdown"}},"grafana_oncall_user_group":{"version":0,"block":{"attributes":{"id":{"type":"string","description_kind":"plain","optional":true,"computed":true},"slack_handle":{"type":"string","description_kind":"plain","required":true},"slack_id":{"type":"string","description_kind":"plain","computed":true}},"description":"\n* [HTTP API](https://grafana.com/docs/oncall/latest/oncall-api-reference/user_groups/)\n","description_kind":"markdown"}},"grafana_organization":{"version":0,"block":{"attributes":{"admins":{"type":["set","string"],"description":"A list of email addresses corresponding to users given admin access to the organization.","description_kind":"markdown","computed":true},"editors":{"type":["set","string"],"description":"A list of email addresses corresponding to users given editor access to the organization.","description_kind":"markdown","computed":true},"id":{"type":"string","description_kind":"plain","optional":true,"computed":true},"name":{"type":"string","description":"The name of the Organization.","description_kind":"markdown","required":true},"viewers":{"type":["set","string"],"description":"A list of email addresses corresponding to users given viewer access to the organization.","description_kind":"markdown","computed":true}},"description":"\n* [Official documentation](https://grafana.com/docs/grafana/latest/administration/organization-management/)\n* [HTTP API](https://grafana.com/docs/grafana/latest/developers/http_api/org/)\n","description_kind":"markdown"}},"grafana_organization_preferences":{"version":0,"block":{"attributes":{"home_dashboard_id":{"type":"number","description":"The Organization home dashboard ID. Deprecated: Use `home_dashboard_uid` instead.","description_kind":"markdown","deprecated":true,"computed":true},"home_dashboard_uid":{"type":"string","description":"The Organization home dashboard UID. This is only available in Grafana 9.0+.","description_kind":"markdown","computed":true},"id":{"type":"string","description_kind":"plain","optional":true,"computed":true},"org_id":{"type":"string","description":"The Organization ID. If not set, the Org ID defined in the provider block will be used.","description_kind":"markdown","optional":true},"theme":{"type":"string","description":"The Organization theme. Available values are `light`, `dark`, `system`, or an empty string for the default.","description_kind":"markdown","computed":true},"timezone":{"type":"string","description":"The Organization timezone. Available values are `utc`, `browser`, or an empty string for the default.","description_kind":"markdown","computed":true},"week_start":{"type":"string","description":"The Organization week start day. Available values are `sunday`, `monday`, `saturday`, or an empty string for the default.","description_kind":"markdown","computed":true}},"description":"\n* [Official documentation](https://grafana.com/docs/grafana/latest/administration/organization-management/)\n* [HTTP API](https://grafana.com/docs/grafana/latest/developers/http_api/preferences/#get-current-org-prefs)\n","description_kind":"markdown"}},"grafana_role":{"version":0,"block":{"attributes":{"description":{"type":"string","description":"Description of the role.","description_kind":"markdown","computed":true},"display_name":{"type":"string","description":"Display name of the role. Available with Grafana 8.5+.","description_kind":"markdown","computed":true},"global":{"type":"bool","description":"Boolean to state whether the role is available across all organizations or not.","description_kind":"markdown","computed":true},"group":{"type":"string","description":"Group of the role. Available with Grafana 8.5+.","description_kind":"markdown","computed":true},"hidden":{"type":"bool","description":"Boolean to state whether the role should be visible in the Grafana UI or not. Available with Grafana 8.5+.","description_kind":"markdown","computed":true},"id":{"type":"string","description_kind":"plain","optional":true,"computed":true},"name":{"type":"string","description":"Name of the role","description_kind":"markdown","required":true},"org_id":{"type":"string","description":"The Organization ID. If not set, the Org ID defined in the provider block will be used.","description_kind":"markdown","computed":true},"permissions":{"type":["set",["object",{"action":"string","scope":"string"}]],"description":"Specific set of actions granted by the role.","description_kind":"markdown","computed":true},"uid":{"type":"string","description":"Unique identifier of the role. Used for assignments.","description_kind":"markdown","computed":true},"version":{"type":"number","description":"Version of the role. A role is updated only on version increase. This field or `auto_increment_version` should be set.","description_kind":"markdown","computed":true}},"description":"\n**Note:** This resource is available only with Grafana Enterprise 8.+.\n\n* [Official documentation](https://grafana.com/docs/grafana/latest/administration/roles-and-permissions/access-control/)\n* [HTTP API](https://grafana.com/docs/grafana/latest/developers/http_api/access_control/)\n","description_kind":"markdown"}},"grafana_service_account":{"version":0,"block":{"attributes":{"id":{"type":"string","description_kind":"plain","optional":true,"computed":true},"is_disabled":{"type":"bool","description":"The disabled status for the service account.","description_kind":"markdown","computed":true},"name":{"type":"string","description":"The name of the Service Account.","description_kind":"markdown","required":true},"org_id":{"type":"string","description":"The Organization ID. If not set, the Org ID defined in the provider block will be used.","description_kind":"markdown","optional":true},"role":{"type":"string","description":"The basic role of the service account in the organization.","description_kind":"markdown","computed":true}},"description":"\n\t\t* [Official documentation](https://grafana.com/docs/grafana/latest/administration/service-accounts/)\n\t\t* [HTTP API](https://grafana.com/docs/grafana/latest/developers/http_api/serviceaccount/#service-account-api)\n","description_kind":"markdown"}},"grafana_slos":{"version":0,"block":{"attributes":{"id":{"type":"string","description_kind":"plain","optional":true,"computed":true},"slos":{"type":["list",["object",{"alerting":["list",["object",{"annotation":["list",["object",{"key":"string","value":"string"}]],"fastburn":["list",["object",{"annotation":["list",["object",{"key":"string","value":"string"}]],"label":["list",["object",{"key":"string","value":"string"}]]}]],"label":["list",["object",{"key":"string","value":"string"}]],"slowburn":["list",["object",{"annotation":["list",["object",{"key":"string","value":"string"}]],"label":["list",["object",{"key":"string","value":"string"}]]}]]}]],"description":"string","destination_datasource":["list",["object",{"uid":"string"}]],"label":["list",["object",{"key":"string","value":"string"}]],"name":"string","objectives":["list",["object",{"value":"number","window":"string"}]],"query":["list",["object",{"freeform":["list",["object",{"query":"string"}]],"ratio":["list",["object",{"group_by_labels":["list","string"],"success_metric":"string","total_metric":"string"}]],"type":"string"}]],"uuid":"string"}]],"description":"Returns a list of all SLOs\"","description_kind":"markdown","computed":true}},"description":"\nDatasource for retrieving all SLOs.\n\t\t\n* [Official documentation](https://grafana.com/docs/grafana-cloud/alerting-and-irm/slo/)\n* [API documentation](https://grafana.com/docs/grafana-cloud/alerting-and-irm/slo/api/)\n* [Additional Information On Alerting Rule Annotations and Labels](https://prometheus.io/docs/prometheus/latest/configuration/alerting_rules/#templating/)\n\t\t\t\t","description_kind":"markdown"}},"grafana_synthetic_monitoring_probe":{"version":0,"block":{"attributes":{"id":{"type":"string","description":"The ID of the probe.","description_kind":"markdown","computed":true},"labels":{"type":["map","string"],"description":"Custom labels to be included with collected metrics and logs.","description_kind":"markdown","computed":true},"latitude":{"type":"number","description":"Latitude coordinates.","description_kind":"markdown","computed":true},"longitude":{"type":"number","description":"Longitude coordinates.","description_kind":"markdown","computed":true},"name":{"type":"string","description":"Name of the probe.","description_kind":"markdown","required":true},"public":{"type":"bool","description":"Public probes are run by Grafana Labs and can be used by all users. Only Grafana Labs managed public probes will be set to `true`.","description_kind":"markdown","computed":true},"region":{"type":"string","description":"Region of the probe.","description_kind":"markdown","computed":true},"tenant_id":{"type":"number","description":"The tenant ID of the probe.","description_kind":"markdown","computed":true}},"description":"Data source for retrieving a single probe by name.","description_kind":"markdown"}},"grafana_synthetic_monitoring_probes":{"version":0,"block":{"attributes":{"filter_deprecated":{"type":"bool","description":"If true, only probes that are not deprecated will be returned. Defaults to `true`.","description_kind":"markdown","optional":true},"id":{"type":"string","description_kind":"plain","optional":true,"computed":true},"probes":{"type":["map","number"],"description":"Map of probes with their names as keys and IDs as values.","description_kind":"markdown","computed":true}},"description":"Data source for retrieving all probes.","description_kind":"markdown"}},"grafana_team":{"version":0,"block":{"attributes":{"email":{"type":"string","description":"An email address for the team.","description_kind":"markdown","computed":true},"id":{"type":"string","description_kind":"plain","optional":true,"computed":true},"members":{"type":["set","string"],"description":"A set of email addresses corresponding to users who should be given membership\nto the team. Note: users specified here must already exist in Grafana.","description_kind":"markdown","computed":true},"name":{"type":"string","description":"The name of the Grafana team","description_kind":"markdown","required":true},"org_id":{"type":"string","description":"The Organization ID. If not set, the Org ID defined in the provider block will be used.","description_kind":"markdown","optional":true},"preferences":{"type":["list",["object",{"home_dashboard_uid":"string","theme":"string","timezone":"string","week_start":"string"}]],"description_kind":"plain","computed":true},"read_team_sync":{"type":"bool","description":"Whether to read the team sync settings. This is only available in Grafana Enterprise. Defaults to `false`.","description_kind":"markdown","optional":true},"team_id":{"type":"number","description":"The team id assigned to this team by Grafana.","description_kind":"markdown","computed":true},"team_sync":{"type":["list",["object",{"groups":["set","string"]}]],"description":"Sync external auth provider groups with this Grafana team. Only available in Grafana Enterprise.\n\t* [Official documentation](https://grafana.com/docs/grafana/latest/setup-grafana/configure-security/configure-team-sync/)\n\t* [HTTP API](https://grafana.com/docs/grafana/latest/developers/http_api/team_sync/)","description_kind":"markdown","computed":true}},"description":"\n* [Official documentation](https://grafana.com/docs/grafana/latest/administration/team-management/)\n* [HTTP API](https://grafana.com/docs/grafana/latest/developers/http_api/team/)\n","description_kind":"markdown"}},"grafana_user":{"version":0,"block":{"attributes":{"email":{"type":"string","description":"The email address of the Grafana user. Defaults to ``.","description_kind":"markdown","optional":true},"id":{"type":"string","description_kind":"plain","optional":true,"computed":true},"is_admin":{"type":"bool","description":"Whether the user is an admin.","description_kind":"markdown","computed":true},"login":{"type":"string","description":"The username for the Grafana user. Defaults to ``.","description_kind":"markdown","optional":true},"name":{"type":"string","description":"The display name for the Grafana user.","description_kind":"markdown","computed":true},"user_id":{"type":"number","description":"The numerical ID of the Grafana user. Defaults to `-1`.","description_kind":"markdown","optional":true}},"description":"\n* [Official documentation](https://grafana.com/docs/grafana/latest/administration/user-management/server-user-management/)\n* [HTTP API](https://grafana.com/docs/grafana/latest/developers/http_api/user/)\n\nThis data source uses Grafana's admin APIs for reading users which\ndoes not currently work with API Tokens. You must use basic auth.\n","description_kind":"markdown"}},"grafana_users":{"version":0,"block":{"attributes":{"id":{"type":"string","description_kind":"plain","optional":true,"computed":true},"users":{"type":["set",["object",{"email":"string","id":"number","is_admin":"bool","login":"string","name":"string"}]],"description":"The Grafana instance's users.","description_kind":"markdown","computed":true}},"description":"\n* [Official documentation](https://grafana.com/docs/grafana/latest/administration/user-management/server-user-management/)\n* [HTTP API](https://grafana.com/docs/grafana/latest/developers/http_api/user/)\n\t\t\nThis data source uses Grafana's admin APIs for reading users which\ndoes not currently work with API Tokens. You must use basic auth.\n\t\t","description_kind":"markdown"}}}}}} diff --git a/go.mod b/go.mod index c56fae2..9f8bfdc 100644 --- a/go.mod +++ b/go.mod @@ -9,7 +9,7 @@ require ( github.com/crossplane/crossplane-runtime v1.15.1 github.com/crossplane/crossplane-tools v0.0.0-20230925130601-628280f8bf79 github.com/crossplane/upjet v1.2.4 - github.com/grafana/terraform-provider-grafana/v2 v2.15.0 + github.com/grafana/terraform-provider-grafana/v2 v2.17.0 github.com/hashicorp/terraform-json v0.21.0 github.com/hashicorp/terraform-plugin-sdk/v2 v2.33.0 github.com/pkg/errors v0.9.1 @@ -62,12 +62,12 @@ require ( github.com/google/go-querystring v1.0.0 // indirect github.com/google/gofuzz v1.2.0 // indirect github.com/google/uuid v1.6.0 // indirect - github.com/grafana/amixr-api-go-client v0.0.11 // indirect + github.com/grafana/amixr-api-go-client v0.0.12-0.20240410110211-c9f68db085c4 // indirect github.com/grafana/grafana-com-public-clients/go/gcom v0.0.0-20240322153219-42c6a1d2bcab // indirect github.com/grafana/grafana-openapi-client-go v0.0.0-20240325012504-4958bdd139e7 // indirect github.com/grafana/machine-learning-go-client v0.5.0 // indirect github.com/grafana/slo-openapi-client/go v0.0.0-20240112175006-de02e75b9d73 // indirect - github.com/grafana/synthetic-monitoring-agent v0.23.1 // indirect + github.com/grafana/synthetic-monitoring-agent v0.23.2 // indirect github.com/grafana/synthetic-monitoring-api-go-client v0.8.0 // indirect github.com/hashicorp/go-cleanhttp v0.5.2 // indirect github.com/hashicorp/go-cty v1.4.1-0.20200414143053-d3edf31b6320 // indirect @@ -108,8 +108,8 @@ require ( github.com/oklog/ulid v1.3.1 // indirect github.com/opentracing/opentracing-go v1.2.0 // indirect github.com/prometheus/client_golang v1.19.0 // indirect - github.com/prometheus/client_model v0.6.0 // indirect - github.com/prometheus/common v0.50.0 // indirect + github.com/prometheus/client_model v0.6.1 // indirect + github.com/prometheus/common v0.52.2 // indirect github.com/prometheus/procfs v0.12.0 // indirect github.com/spf13/afero v1.11.0 // indirect github.com/spf13/cobra v1.8.0 // indirect @@ -127,18 +127,18 @@ require ( go.opentelemetry.io/otel/trace v1.24.0 // indirect go.uber.org/multierr v1.11.0 // indirect golang.org/x/exp v0.0.0-20240119083558-1b970713d09a // indirect - golang.org/x/mod v0.15.0 // indirect - golang.org/x/net v0.22.0 // indirect + golang.org/x/mod v0.16.0 // indirect + golang.org/x/net v0.24.0 // indirect golang.org/x/oauth2 v0.18.0 // indirect - golang.org/x/sync v0.6.0 // indirect - golang.org/x/sys v0.18.0 // indirect - golang.org/x/term v0.18.0 // indirect + golang.org/x/sync v0.7.0 // indirect + golang.org/x/sys v0.19.0 // indirect + golang.org/x/term v0.19.0 // indirect golang.org/x/text v0.14.0 // indirect golang.org/x/time v0.5.0 // indirect - golang.org/x/tools v0.17.0 // indirect + golang.org/x/tools v0.19.0 // indirect gomodules.xyz/jsonpatch/v2 v2.4.0 // indirect google.golang.org/appengine v1.6.8 // indirect - google.golang.org/genproto/googleapis/rpc v0.0.0-20240123012728-ef4313101c80 // indirect + google.golang.org/genproto/googleapis/rpc v0.0.0-20240304161311-37d4d3c04a78 // indirect google.golang.org/grpc v1.62.1 // indirect google.golang.org/protobuf v1.33.0 // indirect gopkg.in/inf.v0 v0.9.1 // indirect diff --git a/go.sum b/go.sum index d6ee542..1789a78 100644 --- a/go.sum +++ b/go.sum @@ -126,8 +126,8 @@ github.com/google/pprof v0.0.0-20240117000934-35fc243c5815 h1:WzfWbQz/Ze8v6l++GG github.com/google/pprof v0.0.0-20240117000934-35fc243c5815/go.mod h1:czg5+yv1E0ZGTi6S6vVK1mke0fV+FaUhNGcd6VRS9Ik= github.com/google/uuid v1.6.0 h1:NIvaJDMOsjHA8n1jAhLSgzrAzy1Hgr+hNrb57e+94F0= github.com/google/uuid v1.6.0/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo= -github.com/grafana/amixr-api-go-client v0.0.11 h1:jlE+5t0tRuCtjbpM81j70Dr2J4eCySuWyNGdfLMGdhE= -github.com/grafana/amixr-api-go-client v0.0.11/go.mod h1:N6x26XUrM5zGtK5zL5vNJnAn2JFMxLFPPLTw/6pDkFE= +github.com/grafana/amixr-api-go-client v0.0.12-0.20240410110211-c9f68db085c4 h1:e7cZfDiNodjQn63be9m8zfnvMEQAMqHVFswjcbdlspk= +github.com/grafana/amixr-api-go-client v0.0.12-0.20240410110211-c9f68db085c4/go.mod h1:N6x26XUrM5zGtK5zL5vNJnAn2JFMxLFPPLTw/6pDkFE= github.com/grafana/grafana-com-public-clients/go/gcom v0.0.0-20240322153219-42c6a1d2bcab h1:/5R8NO996/keDkZqKXEkU3/QgFs1wzChKYkakjsBpRk= github.com/grafana/grafana-com-public-clients/go/gcom v0.0.0-20240322153219-42c6a1d2bcab/go.mod h1:6sYY1qgwYfSDNQhKQA0tar8Oc38cIGfyqwejhxoOsPs= github.com/grafana/grafana-openapi-client-go v0.0.0-20240325012504-4958bdd139e7 h1:gn7iZ9YacDvM04w4QzIGvnO4mQ9lhbmtBcWXWjEtR/o= @@ -136,12 +136,12 @@ github.com/grafana/machine-learning-go-client v0.5.0 h1:Q1K+MPSy8vfMm2jsk3WQ7O77 github.com/grafana/machine-learning-go-client v0.5.0/go.mod h1:QFfZz8NkqVF8++skjkKQXJEZfpCYd8S0yTWJUpsLLTA= github.com/grafana/slo-openapi-client/go v0.0.0-20240112175006-de02e75b9d73 h1:E5vAeB5q1H3BVeNhtd1dI8RubucJdPwpx/ElNtKD3ls= github.com/grafana/slo-openapi-client/go v0.0.0-20240112175006-de02e75b9d73/go.mod h1:EvM3pcxqS+avXd0G8VMyo/kITr9QsN1CwZTNgYtQ9lI= -github.com/grafana/synthetic-monitoring-agent v0.23.1 h1:otz9813Oc4s783Km3gVDbcttaFQO0HNU2RmVeS0Rmn8= -github.com/grafana/synthetic-monitoring-agent v0.23.1/go.mod h1:TiHZavRfF0kqekz5RFpn0XC9KpInKXQ3zDBq1/8pvKk= +github.com/grafana/synthetic-monitoring-agent v0.23.2 h1:f+ZsKNkKBbyjrUUu0l4WkU96fXOf45/T5KtajiFjFkw= +github.com/grafana/synthetic-monitoring-agent v0.23.2/go.mod h1:qxa/j3Ze57ptNEVALKvpE5Dh7olHRPUWoedu0WbGamg= github.com/grafana/synthetic-monitoring-api-go-client v0.8.0 h1:Tm4MtwwYmPNInGfnj66l6j6KOshMkNV4emIVKJdlXMg= github.com/grafana/synthetic-monitoring-api-go-client v0.8.0/go.mod h1:TGaywTdL2Z+PJhpWzJEmJFRF5K55vKz2f39mWY/GvV8= -github.com/grafana/terraform-provider-grafana/v2 v2.15.0 h1:sMzqGSEQi3z/RINTdO9b1WD3KREfD7lE+F/r3f2aHV0= -github.com/grafana/terraform-provider-grafana/v2 v2.15.0/go.mod h1:/2cJTEG4bRclnfD5loAns4ZyXxyPDLXVBzdp381eGiI= +github.com/grafana/terraform-provider-grafana/v2 v2.17.0 h1:OYwRaiX/l1nTE1XmVSm8GBIWVS9XohMPC5qWGTEashY= +github.com/grafana/terraform-provider-grafana/v2 v2.17.0/go.mod h1:IKVi2wUfr5OHw5Sidg8TYtU7BjFUiwXLDuz6k38uKaU= github.com/hashicorp/errwrap v1.1.0 h1:OxrOeh75EUXMY8TBjag2fzXGZ40LB6IKw45YeGUDY2I= github.com/hashicorp/errwrap v1.1.0/go.mod h1:YH+1FKiLXxHSkmPseP+kNlulaMuP3n2brvKWEqk/Jc4= github.com/hashicorp/go-checkpoint v0.5.0 h1:MFYpPZCnQqQTE18jFwSII6eUQrD/oxMFp3mlgcqk5mU= @@ -273,10 +273,10 @@ github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2 h1:Jamvg5psRI github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4= github.com/prometheus/client_golang v1.19.0 h1:ygXvpU1AoN1MhdzckN+PyD9QJOSD4x7kmXYlnfbA6JU= github.com/prometheus/client_golang v1.19.0/go.mod h1:ZRM9uEAypZakd+q/x7+gmsvXdURP+DABIEIjnmDdp+k= -github.com/prometheus/client_model v0.6.0 h1:k1v3CzpSRUTrKMppY35TLwPvxHqBu0bYgxZzqGIgaos= -github.com/prometheus/client_model v0.6.0/go.mod h1:NTQHnmxFpouOD0DpvP4XujX3CdOAGQPoaGhyTchlyt8= -github.com/prometheus/common v0.50.0 h1:YSZE6aa9+luNa2da6/Tik0q0A5AbR+U003TItK57CPQ= -github.com/prometheus/common v0.50.0/go.mod h1:wHFBCEVWVmHMUpg7pYcOm2QUR/ocQdYSJVQJKnHc3xQ= +github.com/prometheus/client_model v0.6.1 h1:ZKSh/rekM+n3CeS952MLRAdFwIKqeY8b62p8ais2e9E= +github.com/prometheus/client_model v0.6.1/go.mod h1:OrxVMOVHjw3lKMa8+x6HeMGkHMQyHDk9E3jmP2AmGiY= +github.com/prometheus/common v0.52.2 h1:LW8Vk7BccEdONfrJBDffQGRtpSzi5CQaRZGtboOO2ck= +github.com/prometheus/common v0.52.2/go.mod h1:lrWtQx+iDfn2mbH5GUzlH9TSHyfZpHkSiG1W7y3sF2Q= github.com/prometheus/procfs v0.12.0 h1:jluTpSng7V9hY0O2R9DzzJHYb2xULk9VTR1V1R/k6Bo= github.com/prometheus/procfs v0.12.0/go.mod h1:pcuDEFsWDnvcgNzo4EEweacyhjeA9Zk3cnaOZAZEfOo= github.com/rogpeppe/go-internal v1.11.0 h1:cWPaGQEPrBb5/AsnsZesgZZ9yb1OQ+GOISoDNXVBh4M= @@ -349,16 +349,16 @@ golang.org/x/crypto v0.0.0-20190426145343-a29dc8fdc734/go.mod h1:yigFU9vqHzYiE8U golang.org/x/crypto v0.0.0-20191011191535-87dc89f01550/go.mod h1:yigFU9vqHzYiE8UmvKecakEJjdnWj3jj499lnFckfCI= golang.org/x/crypto v0.0.0-20200622213623-75b288015ac9/go.mod h1:LzIPMQfyMNhhGPhUkYOs5KpL4U8rLKemX1yGLhDgUto= golang.org/x/crypto v0.0.0-20210921155107-089bfa567519/go.mod h1:GvvjBRRGRdwPK5ydBHafDWAxML/pGHZbMvKqRZ5+Abc= -golang.org/x/crypto v0.21.0 h1:X31++rzVUdKhX5sWmSOFZxx8UW/ldWx55cbf08iNAMA= -golang.org/x/crypto v0.21.0/go.mod h1:0BP7YvVV9gBbVKyeTG0Gyn+gZm94bibOW5BjDEYAOMs= +golang.org/x/crypto v0.22.0 h1:g1v0xeRhjcugydODzvb3mEM9SQ0HGp9s/nh3COQ/C30= +golang.org/x/crypto v0.22.0/go.mod h1:vr6Su+7cTlO45qkww3VDJlzDn0ctJvRgYbC2NvXHt+M= golang.org/x/exp v0.0.0-20240119083558-1b970713d09a h1:Q8/wZp0KX97QFTc2ywcOE0YRjZPVIx+MXInMzdvQqcA= golang.org/x/exp v0.0.0-20240119083558-1b970713d09a/go.mod h1:idGWGoKP1toJGkd5/ig9ZLuPcZBC3ewk7SzmH0uou08= golang.org/x/mod v0.2.0/go.mod h1:s0Qsj1ACt9ePp/hMypM3fl4fZqREWJwdYDEqhRiZZUA= golang.org/x/mod v0.3.0/go.mod h1:s0Qsj1ACt9ePp/hMypM3fl4fZqREWJwdYDEqhRiZZUA= golang.org/x/mod v0.4.2/go.mod h1:s0Qsj1ACt9ePp/hMypM3fl4fZqREWJwdYDEqhRiZZUA= golang.org/x/mod v0.6.0-dev.0.20220419223038-86c51ed26bb4/go.mod h1:jJ57K6gSWd91VN4djpZkiMVwK6gcyfeH4XE8wZrZaV4= -golang.org/x/mod v0.15.0 h1:SernR4v+D55NyBH2QiEQrlBAnj1ECL6AGrA5+dPaMY8= -golang.org/x/mod v0.15.0/go.mod h1:hTbmBsO62+eylJbnUtE2MGJUyE7QWk4xUqPFrRgJ+7c= +golang.org/x/mod v0.16.0 h1:QX4fJ0Rr5cPQCF7O9lh9Se4pmwfwskqZfq5moyldzic= +golang.org/x/mod v0.16.0/go.mod h1:hTbmBsO62+eylJbnUtE2MGJUyE7QWk4xUqPFrRgJ+7c= golang.org/x/net v0.0.0-20180811021610-c39426892332/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4= golang.org/x/net v0.0.0-20190404232315-eb5bcb51f2a3/go.mod h1:t9HGtf8HONx5eT2rtn7q6eTqICYqUVnKs3thJo3Qplg= golang.org/x/net v0.0.0-20190603091049-60506f45cf65/go.mod h1:HSz+uSET+XFnRR8LxR5pz3Of3rY3CfYBVs4xY44aLks= @@ -370,8 +370,8 @@ golang.org/x/net v0.0.0-20201021035429-f5854403a974/go.mod h1:sp8m0HH+o8qH0wwXwY golang.org/x/net v0.0.0-20210226172049-e18ecbb05110/go.mod h1:m0MpNAwzfU5UDzcl9v0D8zg8gWTRqZa9RBIspLL5mdg= golang.org/x/net v0.0.0-20210405180319-a5a99cb37ef4/go.mod h1:p54w0d4576C0XHj96bSt6lcn1PtDYWL6XObtHCRCNQM= golang.org/x/net v0.0.0-20220722155237-a158d28d115b/go.mod h1:XRhObCWvk6IyKnWLug+ECip1KBveYUHfp+8e9klMJ9c= -golang.org/x/net v0.22.0 h1:9sGLhx7iRIHEiX0oAJ3MRZMUCElJgy7Br1nO+AMN3Tc= -golang.org/x/net v0.22.0/go.mod h1:JKghWKKOSdJwpW2GEx0Ja7fmaKnMsbu+MWVZTokSYmg= +golang.org/x/net v0.24.0 h1:1PcaxkF854Fu3+lvBIx5SYn9wRlBzzcnHZSiaFFAb0w= +golang.org/x/net v0.24.0/go.mod h1:2Q7sJY5mzlzWjKtYUEXSlBWCdyaioyXzRB2RtU8KVE8= golang.org/x/oauth2 v0.18.0 h1:09qnuIAgzdx1XplqJvW6CQqMCtGZykZWcXzPMPUusvI= golang.org/x/oauth2 v0.18.0/go.mod h1:Wf7knwG0MPoWIMMBgFlEaSUDaKskp0dCfrlJRJXbBi8= golang.org/x/sync v0.0.0-20180314180146-1d60e4601c6f/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM= @@ -380,8 +380,8 @@ golang.org/x/sync v0.0.0-20190911185100-cd5d95a43a6e/go.mod h1:RxMgew5VJxzue5/jJ golang.org/x/sync v0.0.0-20201020160332-67f06af15bc9/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM= golang.org/x/sync v0.0.0-20210220032951-036812b2e83c/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM= golang.org/x/sync v0.0.0-20220722155255-886fb9371eb4/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM= -golang.org/x/sync v0.6.0 h1:5BMeUDZ7vkXGfEr1x9B4bRcTH4lpkTkpdh0T/J+qjbQ= -golang.org/x/sync v0.6.0/go.mod h1:Czt+wKu1gCyEFDUtn0jG5QVvpJ6rzVqr5aXyt9drQfk= +golang.org/x/sync v0.7.0 h1:YsImfSBoP9QPYL0xyKJPq0gcaJdG3rInoqxTWbfQu9M= +golang.org/x/sync v0.7.0/go.mod h1:Czt+wKu1gCyEFDUtn0jG5QVvpJ6rzVqr5aXyt9drQfk= golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY= golang.org/x/sys v0.0.0-20190412213103-97732733099d/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= golang.org/x/sys v0.0.0-20190502175342-a43fa875dd82/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= @@ -401,12 +401,12 @@ golang.org/x/sys v0.0.0-20220520151302-bc2c85ada10a/go.mod h1:oPkhp1MJrh7nUepCBc golang.org/x/sys v0.0.0-20220722155257-8c9f86f7a55f/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= golang.org/x/sys v0.0.0-20220811171246-fbc7d0a398ab/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= golang.org/x/sys v0.6.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= -golang.org/x/sys v0.18.0 h1:DBdB3niSjOA/O0blCZBqDefyWNYveAYMNF1Wum0DYQ4= -golang.org/x/sys v0.18.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA= +golang.org/x/sys v0.19.0 h1:q5f1RH2jigJ1MoAWp2KTp3gm5zAGFUTarQZ5U386+4o= +golang.org/x/sys v0.19.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA= golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo= golang.org/x/term v0.0.0-20210927222741-03fcf44c2211/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8= -golang.org/x/term v0.18.0 h1:FcHjZXDMxI8mM3nwhX9HlKop4C0YQvCVCdwYl2wOtE8= -golang.org/x/term v0.18.0/go.mod h1:ILwASektA3OnRv7amZ1xhE/KTR+u50pbXfZ03+6Nx58= +golang.org/x/term v0.19.0 h1:+ThwsDv+tYfnJFhF4L8jITxu1tdTWRTZpdsWgEgjL6Q= +golang.org/x/term v0.19.0/go.mod h1:2CuTdWZ7KHSQwUzKva0cbMg6q2DMI3Mmxp+gKJbskEk= golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ= golang.org/x/text v0.3.2/go.mod h1:bEr9sfX3Q8Zfm5fL9x+3itogRgK3+ptLWKqgva+5dAk= golang.org/x/text v0.3.3/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ= @@ -425,8 +425,8 @@ golang.org/x/tools v0.0.0-20210106214847-113979e3529a/go.mod h1:emZCQorbCU4vsT4f golang.org/x/tools v0.1.0/go.mod h1:xkSsbof2nBLbhDlRMhhhyNLN/zl3eTqcnHD5viDpcZ0= golang.org/x/tools v0.1.1/go.mod h1:o0xws9oXOQQZyjljx8fwUC0k7L1pTE6eaCbjGeHmOkk= golang.org/x/tools v0.1.12/go.mod h1:hNGJHUnrk76NpqgfD5Aqm5Crs+Hm0VOH/i9J2+nxYbc= -golang.org/x/tools v0.17.0 h1:FvmRgNOcs3kOa+T20R1uhfP9F6HgG2mfxDv1vrx1Htc= -golang.org/x/tools v0.17.0/go.mod h1:xsh6VxdV005rRVaS6SSAf9oiAqljS7UZUacMZ8Bnsps= +golang.org/x/tools v0.19.0 h1:tfGCXNR1OsFG+sVdLAitlpjAvD/I6dHDKnYrpEZUHkw= +golang.org/x/tools v0.19.0/go.mod h1:qoJWxmGSIBmAeriMx19ogtrEPrGtDbPK634QFIcLAhc= golang.org/x/xerrors v0.0.0-20190717185122-a985d3407aa7/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0= golang.org/x/xerrors v0.0.0-20191011141410-1b5146add898/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0= golang.org/x/xerrors v0.0.0-20191204190536-9bdfabe68543/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0= @@ -437,8 +437,8 @@ google.golang.org/appengine v1.1.0/go.mod h1:EbEs0AVv82hx2wNQdGPgUI5lhzA/G0D9Ywl google.golang.org/appengine v1.6.5/go.mod h1:8WjMMxjGQR8xUklV/ARdw2HLXBOI7O7uCIDZVag1xfc= google.golang.org/appengine v1.6.8 h1:IhEN5q69dyKagZPYMSdIjS2HqprW324FRQZJcGqPAsM= google.golang.org/appengine v1.6.8/go.mod h1:1jJ3jBArFh5pcgW8gCtRJnepW8FzD1V44FJffLiz/Ds= -google.golang.org/genproto/googleapis/rpc v0.0.0-20240123012728-ef4313101c80 h1:AjyfHzEPEFp/NpvfN5g+KDla3EMojjhRVZc1i7cj+oM= -google.golang.org/genproto/googleapis/rpc v0.0.0-20240123012728-ef4313101c80/go.mod h1:PAREbraiVEVGVdTZsVWjSbbTtSyGbAgIIvni8a8CD5s= +google.golang.org/genproto/googleapis/rpc v0.0.0-20240304161311-37d4d3c04a78 h1:Xs9lu+tLXxLIfuci70nG4cpwaRC+mRQPUL7LoIeDJC4= +google.golang.org/genproto/googleapis/rpc v0.0.0-20240304161311-37d4d3c04a78/go.mod h1:UCOku4NytXMJuLQE5VuqA5lX3PcHCBo8pxNyvkf4xBs= google.golang.org/grpc v1.62.1 h1:B4n+nfKzOICUXMgyrNd19h/I9oH0L1pizfk1d4zSgTk= google.golang.org/grpc v1.62.1/go.mod h1:IWTG0VlJLCh1SkC58F7np9ka9mx/WNkjl4PGJaiq+QE= google.golang.org/protobuf v1.26.0-rc.1/go.mod h1:jlhhOSvTdKEhbULTjvd4ARK9grFBp09yW+WbY/TyQbw= diff --git a/package/crds/oncall.grafana.crossplane.io_escalations.yaml b/package/crds/oncall.grafana.crossplane.io_escalations.yaml index 5b27f7a..e9ee4aa 100644 --- a/package/crds/oncall.grafana.crossplane.io_escalations.yaml +++ b/package/crds/oncall.grafana.crossplane.io_escalations.yaml @@ -96,8 +96,8 @@ spec: type: string important: description: |- - (Boolean) Will activate "important" personal notification rules. Actual for steps: notify_persons, notify_on_call_from_schedule and notify_user_group - Will activate "important" personal notification rules. Actual for steps: notify_persons, notify_on_call_from_schedule and notify_user_group + (Boolean) Will activate "important" personal notification rules. Actual for steps: notify_persons, notify_on_call_from_schedule and notify_user_group,notify_team_members + Will activate "important" personal notification rules. Actual for steps: notify_persons, notify_on_call_from_schedule and notify_user_group,notify_team_members type: boolean notifyIfTimeFrom: description: |- @@ -114,6 +114,11 @@ spec: (String) ID of a Schedule for notify_on_call_from_schedule type step. ID of a Schedule for notify_on_call_from_schedule type step. type: string + notifyToTeamMembers: + description: |- + (String) The ID of a Team for a notify_team_members type step. + The ID of a Team for a notify_team_members type step. + type: string personsToNotify: description: |- (Set of String) The list of ID's of users for notify_persons type step. @@ -137,8 +142,8 @@ spec: type: number type: description: |- - (String) The type of escalation policy. Can be wait, notify_persons, notify_person_next_each_time, notify_on_call_from_schedule, trigger_webhook, notify_user_group, resolve, notify_whole_channel, notify_if_time_from_to, repeat_escalation - The type of escalation policy. Can be wait, notify_persons, notify_person_next_each_time, notify_on_call_from_schedule, trigger_webhook, notify_user_group, resolve, notify_whole_channel, notify_if_time_from_to, repeat_escalation + (String) The type of escalation policy. Can be wait, notify_persons, notify_person_next_each_time, notify_on_call_from_schedule, trigger_webhook, notify_user_group, resolve, notify_whole_channel, notify_if_time_from_to, repeat_escalation, notify_team_members + The type of escalation policy. Can be wait, notify_persons, notify_person_next_each_time, notify_on_call_from_schedule, trigger_webhook, notify_user_group, resolve, notify_whole_channel, notify_if_time_from_to, repeat_escalation, notify_team_members type: string type: object initProvider: @@ -176,8 +181,8 @@ spec: type: string important: description: |- - (Boolean) Will activate "important" personal notification rules. Actual for steps: notify_persons, notify_on_call_from_schedule and notify_user_group - Will activate "important" personal notification rules. Actual for steps: notify_persons, notify_on_call_from_schedule and notify_user_group + (Boolean) Will activate "important" personal notification rules. Actual for steps: notify_persons, notify_on_call_from_schedule and notify_user_group,notify_team_members + Will activate "important" personal notification rules. Actual for steps: notify_persons, notify_on_call_from_schedule and notify_user_group,notify_team_members type: boolean notifyIfTimeFrom: description: |- @@ -194,6 +199,11 @@ spec: (String) ID of a Schedule for notify_on_call_from_schedule type step. ID of a Schedule for notify_on_call_from_schedule type step. type: string + notifyToTeamMembers: + description: |- + (String) The ID of a Team for a notify_team_members type step. + The ID of a Team for a notify_team_members type step. + type: string personsToNotify: description: |- (Set of String) The list of ID's of users for notify_persons type step. @@ -217,8 +227,8 @@ spec: type: number type: description: |- - (String) The type of escalation policy. Can be wait, notify_persons, notify_person_next_each_time, notify_on_call_from_schedule, trigger_webhook, notify_user_group, resolve, notify_whole_channel, notify_if_time_from_to, repeat_escalation - The type of escalation policy. Can be wait, notify_persons, notify_person_next_each_time, notify_on_call_from_schedule, trigger_webhook, notify_user_group, resolve, notify_whole_channel, notify_if_time_from_to, repeat_escalation + (String) The type of escalation policy. Can be wait, notify_persons, notify_person_next_each_time, notify_on_call_from_schedule, trigger_webhook, notify_user_group, resolve, notify_whole_channel, notify_if_time_from_to, repeat_escalation, notify_team_members + The type of escalation policy. Can be wait, notify_persons, notify_person_next_each_time, notify_on_call_from_schedule, trigger_webhook, notify_user_group, resolve, notify_whole_channel, notify_if_time_from_to, repeat_escalation, notify_team_members type: string type: object managementPolicies: @@ -427,8 +437,8 @@ spec: type: string important: description: |- - (Boolean) Will activate "important" personal notification rules. Actual for steps: notify_persons, notify_on_call_from_schedule and notify_user_group - Will activate "important" personal notification rules. Actual for steps: notify_persons, notify_on_call_from_schedule and notify_user_group + (Boolean) Will activate "important" personal notification rules. Actual for steps: notify_persons, notify_on_call_from_schedule and notify_user_group,notify_team_members + Will activate "important" personal notification rules. Actual for steps: notify_persons, notify_on_call_from_schedule and notify_user_group,notify_team_members type: boolean notifyIfTimeFrom: description: |- @@ -445,6 +455,11 @@ spec: (String) ID of a Schedule for notify_on_call_from_schedule type step. ID of a Schedule for notify_on_call_from_schedule type step. type: string + notifyToTeamMembers: + description: |- + (String) The ID of a Team for a notify_team_members type step. + The ID of a Team for a notify_team_members type step. + type: string personsToNotify: description: |- (Set of String) The list of ID's of users for notify_persons type step. @@ -468,8 +483,8 @@ spec: type: number type: description: |- - (String) The type of escalation policy. Can be wait, notify_persons, notify_person_next_each_time, notify_on_call_from_schedule, trigger_webhook, notify_user_group, resolve, notify_whole_channel, notify_if_time_from_to, repeat_escalation - The type of escalation policy. Can be wait, notify_persons, notify_person_next_each_time, notify_on_call_from_schedule, trigger_webhook, notify_user_group, resolve, notify_whole_channel, notify_if_time_from_to, repeat_escalation + (String) The type of escalation policy. Can be wait, notify_persons, notify_person_next_each_time, notify_on_call_from_schedule, trigger_webhook, notify_user_group, resolve, notify_whole_channel, notify_if_time_from_to, repeat_escalation, notify_team_members + The type of escalation policy. Can be wait, notify_persons, notify_person_next_each_time, notify_on_call_from_schedule, trigger_webhook, notify_user_group, resolve, notify_whole_channel, notify_if_time_from_to, repeat_escalation, notify_team_members type: string type: object conditions: diff --git a/package/crds/oss.grafana.crossplane.io_ssosettings.yaml b/package/crds/oss.grafana.crossplane.io_ssosettings.yaml index a8d789a..29b8ade 100644 --- a/package/crds/oss.grafana.crossplane.io_ssosettings.yaml +++ b/package/crds/oss.grafana.crossplane.io_ssosettings.yaml @@ -35,8 +35,7 @@ spec: schema: openAPIV3Schema: description: SsoSettings is the Schema for the SsoSettingss API. Manages Grafana - SSO Settings for OAuth2. SAML support will be added soon. Official documentation - https://grafana.com/docs/grafana/latest/setup-grafana/configure-security/configure-authentication/HTTP + SSO Settings for OAuth2 and SAML. Official documentation https://grafana.com/docs/grafana/latest/setup-grafana/configure-security/configure-authentication/HTTP API https://grafana.com/docs/grafana/latest/developers/http_api/sso-settings/ properties: apiVersion: @@ -77,8 +76,8 @@ spec: properties: oauth2Settings: description: |- - (Block Set, Min: 1, Max: 1) The SSO settings set. (see below for nested schema) - The SSO settings set. + (Block Set, Max: 1) The OAuth2 settings set. Required for github, gitlab, google, azuread, okta, generic_oauth providers. (see below for nested schema) + The OAuth2 settings set. Required for github, gitlab, google, azuread, okta, generic_oauth providers. items: properties: allowAssignGrafanaAdmin: @@ -292,9 +291,195 @@ spec: type: array providerName: description: |- - (String) The name of the SSO provider. Supported values: github, gitlab, google, azuread, okta, generic_oauth. - The name of the SSO provider. Supported values: github, gitlab, google, azuread, okta, generic_oauth. + (String) The name of the SSO provider. Supported values: github, gitlab, google, azuread, okta, generic_oauth, saml. + The name of the SSO provider. Supported values: github, gitlab, google, azuread, okta, generic_oauth, saml. type: string + samlSettings: + description: |- + (Block Set, Max: 1) The SAML settings set. Required for the saml provider. (see below for nested schema) + The SAML settings set. Required for the saml provider. + items: + properties: + allowIdpInitiated: + description: |- + initiated login is allowed. + Whether SAML IdP-initiated login is allowed. + type: boolean + allowSignUp: + description: |- + (Boolean) If not enabled, only existing Grafana users can log in using OAuth. + Whether to allow new Grafana user creation through SAML login. If set to false, then only existing Grafana users can log in with SAML. + type: boolean + allowedOrganizations: + description: |- + or space-separated organizations. The user should be a member of at least one organization to log in. + List of comma- or space-separated organizations. User should be a member of at least one organization to log in. + type: string + assertionAttributeEmail: + description: |- + (String) Friendly name or name of the attribute within the SAML assertion to use as the user email. + Friendly name or name of the attribute within the SAML assertion to use as the user email. + type: string + assertionAttributeGroups: + description: |- + (String) Friendly name or name of the attribute within the SAML assertion to use as the user groups. + Friendly name or name of the attribute within the SAML assertion to use as the user groups. + type: string + assertionAttributeLogin: + description: |- + (String) Friendly name or name of the attribute within the SAML assertion to use as the user login handle. + Friendly name or name of the attribute within the SAML assertion to use as the user login handle. + type: string + assertionAttributeName: + description: |- + (String) Friendly name or name of the attribute within the SAML assertion to use as the user name. Alternatively, this can be a template with variables that match the names of attributes within the SAML assertion. + Friendly name or name of the attribute within the SAML assertion to use as the user name. Alternatively, this can be a template with variables that match the names of attributes within the SAML assertion. + type: string + assertionAttributeOrg: + description: |- + (String) Friendly name or name of the attribute within the SAML assertion to use as the user organization. + Friendly name or name of the attribute within the SAML assertion to use as the user organization. + type: string + assertionAttributeRole: + description: |- + (String) Friendly name or name of the attribute within the SAML assertion to use as the user roles. + Friendly name or name of the attribute within the SAML assertion to use as the user roles. + type: string + autoLogin: + description: |- + (Boolean) Log in automatically, skipping the login screen. + Whether SAML auto login is enabled. + type: boolean + certificatePath: + description: |- + (String) Path for the SP X.509 certificate. + Path for the SP X.509 certificate. + type: string + certificateSecretRef: + description: |- + encoded string for the SP X.509 certificate. + Base64-encoded string for the SP X.509 certificate. + properties: + key: + description: The key to select. + type: string + name: + description: Name of the secret. + type: string + namespace: + description: Namespace of the secret. + type: string + required: + - key + - name + - namespace + type: object + enabled: + description: |- + (Boolean) Define whether this configuration is enabled for the specified provider. Defaults to true. + Define whether this configuration is enabled for SAML. Defaults to `true`. + type: boolean + idpMetadata: + description: |- + encoded string for the IdP SAML metadata XML. + Base64-encoded string for the IdP SAML metadata XML. + type: string + idpMetadataPath: + description: |- + (String) Path for the IdP SAML metadata XML. + Path for the IdP SAML metadata XML. + type: string + idpMetadataUrl: + description: |- + (String) URL for the IdP SAML metadata XML. + URL for the IdP SAML metadata XML. + type: string + maxIssueDelay: + description: |- + (String) Duration, since the IdP issued a response and the SP is allowed to process it. For example: 90s, 1h. + Duration, since the IdP issued a response and the SP is allowed to process it. For example: 90s, 1h. + type: string + metadataValidDuration: + description: |- + (String) Duration, for how long the SP metadata is valid. For example: 48h, 5d. + Duration, for how long the SP metadata is valid. For example: 48h, 5d. + type: string + name: + description: |- + (String) Helpful if you use more than one identity providers or SSO protocols. + Name used to refer to the SAML authentication. + type: string + nameIdFormat: + description: |- + format:transient + The Name ID Format to request within the SAML assertion. Defaults to urn:oasis:names:tc:SAML:2.0:nameid-format:transient + type: string + orgMapping: + description: |- + or space-separated Organization:OrgId:Role mappings. Organization can be * meaning “All users”. Role is optional and can have the following values: Viewer, Editor or Admin. + List of comma- or space-separated Organization:OrgId:Role mappings. Organization can be * meaning “All users”. Role is optional and can have the following values: Viewer, Editor or Admin. + type: string + privateKeyPath: + description: |- + (String) Path for the SP private key. + Path for the SP private key. + type: string + privateKeySecretRef: + description: |- + encoded string for the SP private key. + Base64-encoded string for the SP private key. + properties: + key: + description: The key to select. + type: string + name: + description: Name of the secret. + type: string + namespace: + description: Namespace of the secret. + type: string + required: + - key + - name + - namespace + type: object + relayState: + description: |- + initiated login. Should match relay state configured in IdP. + Relay state for IdP-initiated login. Should match relay state configured in IdP. + type: string + roleValuesAdmin: + description: |- + or space-separated roles which will be mapped into the Admin role. + List of comma- or space-separated roles which will be mapped into the Admin role. + type: string + roleValuesEditor: + description: |- + or space-separated roles which will be mapped into the Editor role. + List of comma- or space-separated roles which will be mapped into the Editor role. + type: string + roleValuesGrafanaAdmin: + description: |- + or space-separated roles which will be mapped into the Grafana Admin (Super Admin) role. + List of comma- or space-separated roles which will be mapped into the Grafana Admin (Super Admin) role. + type: string + roleValuesNone: + description: |- + or space-separated roles which will be mapped into the None role. + List of comma- or space-separated roles which will be mapped into the None role. + type: string + signatureAlgorithm: + description: |- + sha1, rsa-sha256, rsa-sha512. + Signature algorithm used for signing requests to the IdP. Supported values are rsa-sha1, rsa-sha256, rsa-sha512. + type: string + singleLogout: + description: |- + (Boolean) Whether SAML Single Logout is enabled. + Whether SAML Single Logout is enabled. + type: boolean + type: object + type: array type: object initProvider: description: |- @@ -311,8 +496,8 @@ spec: properties: oauth2Settings: description: |- - (Block Set, Min: 1, Max: 1) The SSO settings set. (see below for nested schema) - The SSO settings set. + (Block Set, Max: 1) The OAuth2 settings set. Required for github, gitlab, google, azuread, okta, generic_oauth providers. (see below for nested schema) + The OAuth2 settings set. Required for github, gitlab, google, azuread, okta, generic_oauth providers. items: properties: allowAssignGrafanaAdmin: @@ -507,9 +692,157 @@ spec: type: array providerName: description: |- - (String) The name of the SSO provider. Supported values: github, gitlab, google, azuread, okta, generic_oauth. - The name of the SSO provider. Supported values: github, gitlab, google, azuread, okta, generic_oauth. + (String) The name of the SSO provider. Supported values: github, gitlab, google, azuread, okta, generic_oauth, saml. + The name of the SSO provider. Supported values: github, gitlab, google, azuread, okta, generic_oauth, saml. type: string + samlSettings: + description: |- + (Block Set, Max: 1) The SAML settings set. Required for the saml provider. (see below for nested schema) + The SAML settings set. Required for the saml provider. + items: + properties: + allowIdpInitiated: + description: |- + initiated login is allowed. + Whether SAML IdP-initiated login is allowed. + type: boolean + allowSignUp: + description: |- + (Boolean) If not enabled, only existing Grafana users can log in using OAuth. + Whether to allow new Grafana user creation through SAML login. If set to false, then only existing Grafana users can log in with SAML. + type: boolean + allowedOrganizations: + description: |- + or space-separated organizations. The user should be a member of at least one organization to log in. + List of comma- or space-separated organizations. User should be a member of at least one organization to log in. + type: string + assertionAttributeEmail: + description: |- + (String) Friendly name or name of the attribute within the SAML assertion to use as the user email. + Friendly name or name of the attribute within the SAML assertion to use as the user email. + type: string + assertionAttributeGroups: + description: |- + (String) Friendly name or name of the attribute within the SAML assertion to use as the user groups. + Friendly name or name of the attribute within the SAML assertion to use as the user groups. + type: string + assertionAttributeLogin: + description: |- + (String) Friendly name or name of the attribute within the SAML assertion to use as the user login handle. + Friendly name or name of the attribute within the SAML assertion to use as the user login handle. + type: string + assertionAttributeName: + description: |- + (String) Friendly name or name of the attribute within the SAML assertion to use as the user name. Alternatively, this can be a template with variables that match the names of attributes within the SAML assertion. + Friendly name or name of the attribute within the SAML assertion to use as the user name. Alternatively, this can be a template with variables that match the names of attributes within the SAML assertion. + type: string + assertionAttributeOrg: + description: |- + (String) Friendly name or name of the attribute within the SAML assertion to use as the user organization. + Friendly name or name of the attribute within the SAML assertion to use as the user organization. + type: string + assertionAttributeRole: + description: |- + (String) Friendly name or name of the attribute within the SAML assertion to use as the user roles. + Friendly name or name of the attribute within the SAML assertion to use as the user roles. + type: string + autoLogin: + description: |- + (Boolean) Log in automatically, skipping the login screen. + Whether SAML auto login is enabled. + type: boolean + certificatePath: + description: |- + (String) Path for the SP X.509 certificate. + Path for the SP X.509 certificate. + type: string + enabled: + description: |- + (Boolean) Define whether this configuration is enabled for the specified provider. Defaults to true. + Define whether this configuration is enabled for SAML. Defaults to `true`. + type: boolean + idpMetadata: + description: |- + encoded string for the IdP SAML metadata XML. + Base64-encoded string for the IdP SAML metadata XML. + type: string + idpMetadataPath: + description: |- + (String) Path for the IdP SAML metadata XML. + Path for the IdP SAML metadata XML. + type: string + idpMetadataUrl: + description: |- + (String) URL for the IdP SAML metadata XML. + URL for the IdP SAML metadata XML. + type: string + maxIssueDelay: + description: |- + (String) Duration, since the IdP issued a response and the SP is allowed to process it. For example: 90s, 1h. + Duration, since the IdP issued a response and the SP is allowed to process it. For example: 90s, 1h. + type: string + metadataValidDuration: + description: |- + (String) Duration, for how long the SP metadata is valid. For example: 48h, 5d. + Duration, for how long the SP metadata is valid. For example: 48h, 5d. + type: string + name: + description: |- + (String) Helpful if you use more than one identity providers or SSO protocols. + Name used to refer to the SAML authentication. + type: string + nameIdFormat: + description: |- + format:transient + The Name ID Format to request within the SAML assertion. Defaults to urn:oasis:names:tc:SAML:2.0:nameid-format:transient + type: string + orgMapping: + description: |- + or space-separated Organization:OrgId:Role mappings. Organization can be * meaning “All users”. Role is optional and can have the following values: Viewer, Editor or Admin. + List of comma- or space-separated Organization:OrgId:Role mappings. Organization can be * meaning “All users”. Role is optional and can have the following values: Viewer, Editor or Admin. + type: string + privateKeyPath: + description: |- + (String) Path for the SP private key. + Path for the SP private key. + type: string + relayState: + description: |- + initiated login. Should match relay state configured in IdP. + Relay state for IdP-initiated login. Should match relay state configured in IdP. + type: string + roleValuesAdmin: + description: |- + or space-separated roles which will be mapped into the Admin role. + List of comma- or space-separated roles which will be mapped into the Admin role. + type: string + roleValuesEditor: + description: |- + or space-separated roles which will be mapped into the Editor role. + List of comma- or space-separated roles which will be mapped into the Editor role. + type: string + roleValuesGrafanaAdmin: + description: |- + or space-separated roles which will be mapped into the Grafana Admin (Super Admin) role. + List of comma- or space-separated roles which will be mapped into the Grafana Admin (Super Admin) role. + type: string + roleValuesNone: + description: |- + or space-separated roles which will be mapped into the None role. + List of comma- or space-separated roles which will be mapped into the None role. + type: string + signatureAlgorithm: + description: |- + sha1, rsa-sha256, rsa-sha512. + Signature algorithm used for signing requests to the IdP. Supported values are rsa-sha1, rsa-sha256, rsa-sha512. + type: string + singleLogout: + description: |- + (Boolean) Whether SAML Single Logout is enabled. + Whether SAML Single Logout is enabled. + type: boolean + type: object + type: array type: object managementPolicies: default: @@ -679,10 +1012,6 @@ spec: - forProvider type: object x-kubernetes-validations: - - message: spec.forProvider.oauth2Settings is a required parameter - rule: '!(''*'' in self.managementPolicies || ''Create'' in self.managementPolicies - || ''Update'' in self.managementPolicies) || has(self.forProvider.oauth2Settings) - || (has(self.initProvider) && has(self.initProvider.oauth2Settings))' - message: spec.forProvider.providerName is a required parameter rule: '!(''*'' in self.managementPolicies || ''Create'' in self.managementPolicies || ''Update'' in self.managementPolicies) || has(self.forProvider.providerName) @@ -697,8 +1026,8 @@ spec: type: string oauth2Settings: description: |- - (Block Set, Min: 1, Max: 1) The SSO settings set. (see below for nested schema) - The SSO settings set. + (Block Set, Max: 1) The OAuth2 settings set. Required for github, gitlab, google, azuread, okta, generic_oauth providers. (see below for nested schema) + The OAuth2 settings set. Required for github, gitlab, google, azuread, okta, generic_oauth providers. items: properties: allowAssignGrafanaAdmin: @@ -893,9 +1222,157 @@ spec: type: array providerName: description: |- - (String) The name of the SSO provider. Supported values: github, gitlab, google, azuread, okta, generic_oauth. - The name of the SSO provider. Supported values: github, gitlab, google, azuread, okta, generic_oauth. + (String) The name of the SSO provider. Supported values: github, gitlab, google, azuread, okta, generic_oauth, saml. + The name of the SSO provider. Supported values: github, gitlab, google, azuread, okta, generic_oauth, saml. type: string + samlSettings: + description: |- + (Block Set, Max: 1) The SAML settings set. Required for the saml provider. (see below for nested schema) + The SAML settings set. Required for the saml provider. + items: + properties: + allowIdpInitiated: + description: |- + initiated login is allowed. + Whether SAML IdP-initiated login is allowed. + type: boolean + allowSignUp: + description: |- + (Boolean) If not enabled, only existing Grafana users can log in using OAuth. + Whether to allow new Grafana user creation through SAML login. If set to false, then only existing Grafana users can log in with SAML. + type: boolean + allowedOrganizations: + description: |- + or space-separated organizations. The user should be a member of at least one organization to log in. + List of comma- or space-separated organizations. User should be a member of at least one organization to log in. + type: string + assertionAttributeEmail: + description: |- + (String) Friendly name or name of the attribute within the SAML assertion to use as the user email. + Friendly name or name of the attribute within the SAML assertion to use as the user email. + type: string + assertionAttributeGroups: + description: |- + (String) Friendly name or name of the attribute within the SAML assertion to use as the user groups. + Friendly name or name of the attribute within the SAML assertion to use as the user groups. + type: string + assertionAttributeLogin: + description: |- + (String) Friendly name or name of the attribute within the SAML assertion to use as the user login handle. + Friendly name or name of the attribute within the SAML assertion to use as the user login handle. + type: string + assertionAttributeName: + description: |- + (String) Friendly name or name of the attribute within the SAML assertion to use as the user name. Alternatively, this can be a template with variables that match the names of attributes within the SAML assertion. + Friendly name or name of the attribute within the SAML assertion to use as the user name. Alternatively, this can be a template with variables that match the names of attributes within the SAML assertion. + type: string + assertionAttributeOrg: + description: |- + (String) Friendly name or name of the attribute within the SAML assertion to use as the user organization. + Friendly name or name of the attribute within the SAML assertion to use as the user organization. + type: string + assertionAttributeRole: + description: |- + (String) Friendly name or name of the attribute within the SAML assertion to use as the user roles. + Friendly name or name of the attribute within the SAML assertion to use as the user roles. + type: string + autoLogin: + description: |- + (Boolean) Log in automatically, skipping the login screen. + Whether SAML auto login is enabled. + type: boolean + certificatePath: + description: |- + (String) Path for the SP X.509 certificate. + Path for the SP X.509 certificate. + type: string + enabled: + description: |- + (Boolean) Define whether this configuration is enabled for the specified provider. Defaults to true. + Define whether this configuration is enabled for SAML. Defaults to `true`. + type: boolean + idpMetadata: + description: |- + encoded string for the IdP SAML metadata XML. + Base64-encoded string for the IdP SAML metadata XML. + type: string + idpMetadataPath: + description: |- + (String) Path for the IdP SAML metadata XML. + Path for the IdP SAML metadata XML. + type: string + idpMetadataUrl: + description: |- + (String) URL for the IdP SAML metadata XML. + URL for the IdP SAML metadata XML. + type: string + maxIssueDelay: + description: |- + (String) Duration, since the IdP issued a response and the SP is allowed to process it. For example: 90s, 1h. + Duration, since the IdP issued a response and the SP is allowed to process it. For example: 90s, 1h. + type: string + metadataValidDuration: + description: |- + (String) Duration, for how long the SP metadata is valid. For example: 48h, 5d. + Duration, for how long the SP metadata is valid. For example: 48h, 5d. + type: string + name: + description: |- + (String) Helpful if you use more than one identity providers or SSO protocols. + Name used to refer to the SAML authentication. + type: string + nameIdFormat: + description: |- + format:transient + The Name ID Format to request within the SAML assertion. Defaults to urn:oasis:names:tc:SAML:2.0:nameid-format:transient + type: string + orgMapping: + description: |- + or space-separated Organization:OrgId:Role mappings. Organization can be * meaning “All users”. Role is optional and can have the following values: Viewer, Editor or Admin. + List of comma- or space-separated Organization:OrgId:Role mappings. Organization can be * meaning “All users”. Role is optional and can have the following values: Viewer, Editor or Admin. + type: string + privateKeyPath: + description: |- + (String) Path for the SP private key. + Path for the SP private key. + type: string + relayState: + description: |- + initiated login. Should match relay state configured in IdP. + Relay state for IdP-initiated login. Should match relay state configured in IdP. + type: string + roleValuesAdmin: + description: |- + or space-separated roles which will be mapped into the Admin role. + List of comma- or space-separated roles which will be mapped into the Admin role. + type: string + roleValuesEditor: + description: |- + or space-separated roles which will be mapped into the Editor role. + List of comma- or space-separated roles which will be mapped into the Editor role. + type: string + roleValuesGrafanaAdmin: + description: |- + or space-separated roles which will be mapped into the Grafana Admin (Super Admin) role. + List of comma- or space-separated roles which will be mapped into the Grafana Admin (Super Admin) role. + type: string + roleValuesNone: + description: |- + or space-separated roles which will be mapped into the None role. + List of comma- or space-separated roles which will be mapped into the None role. + type: string + signatureAlgorithm: + description: |- + sha1, rsa-sha256, rsa-sha512. + Signature algorithm used for signing requests to the IdP. Supported values are rsa-sha1, rsa-sha256, rsa-sha512. + type: string + singleLogout: + description: |- + (Boolean) Whether SAML Single Logout is enabled. + Whether SAML Single Logout is enabled. + type: boolean + type: object + type: array type: object conditions: description: Conditions of the resource.