rrc_steady_13.0.0-22843068776.patch2: Health check: gate /api/health on apiserver readiness (#120349)
2026-03-14T08:51:39Z•d4556bf15cff2631389cc80c04677debea3ff908c0767a85e50a5a046f5c58ce
access-controlapiauthorizationgo-updategrafanaimage-rendererkubernetesrbacrelease-notestls
What happened
Grafana release notes (Mar 2026) include several security-relevant changes: a missing scope check on dashboard APIs was added (authorization fix), AccessControl cache invalidation on datasource deletion was implemented (fixes scope/cache consistency that could affect permissions), and new RBAC permissions for alerting/enrichment (Enterprise) were added. Multiple releases also update Go to 1.25.8 (upstream runtime/security updates) and add support for custom CA certs in the Image Renderer (changes to TLS trust handling that should be reviewed). Other non-security changes include a Kubernetes /‑
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- grafana_grafana_releases
- Record identifier
- d4556bf15cff2631389cc80c04677debea3ff908c0767a85e50a5a046f5c58ce
- Enrichment time
- 2026-03-14T08:51:39Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.