feat(workspace): migrate controller from owner-based auth to workspace model

Author: duanhongyi

charts/grafana/templates/grafana-configmap.yaml

@@ -63,7 +63,8 @@ data:
     [users]
     allow_sign_up = false
     allow_org_create = false
-    auto_assign_org = false
+    auto_assign_org = true
+    auto_assign_org_role = None
     login_hint = email or username
 
     [auth]
@@ -102,12 +103,12 @@ data:
 
     [quota]
     enabled = true
-    org_user = 2
+    org_user = -1
     org_dashboard = 20
     org_data_source = 5
     org_api_key = 2
     org_alert_rule = 20
-    user_org = 2
+    user_org = -1
     alerting_rule_group_rules = 20
     alerting_rule_evaluation_results = 20
 

rootfs/Dockerfile

@@ -4,9 +4,9 @@ FROM registry.drycc.cc/drycc/base:${CODENAME}
 ARG DRYCC_UID=1001 \
   DRYCC_GID=1001 \
   DRYCC_HOME_DIR=/usr/share/grafana \
-  GRAFANA_VERSION="12.2.1" \
+  GRAFANA_VERSION="12.4.2" \
   JQ_VERSION="1.7.1" \
-  CADDY_VERSION="2.10.2" \
+  CADDY_VERSION="2.11.2" \
   PYTHON_VERSION="3.14"
 
 RUN groupadd drycc --gid ${DRYCC_GID} \

rootfs/usr/share/grafana/oauth2/datasources/prometheus.json

@@ -2,7 +2,7 @@
     "name": "Prometheus on Drycc",
     "type": "prometheus",
     "uid": "prometheus_on_drycc",
-    "url": "${controller_url}/v2/prometheus/${username}",
+    "url": "${controller_url}/v2/prometheus/${workspace}",
     "access": "proxy",
     "isDefault": true,
     "basicAuth": false,

rootfs/usr/share/grafana/oauth2/datasources/quickwit.json

@@ -2,7 +2,7 @@
     "name": "Application Logs",
     "type": "quickwit-quickwit-datasource",
     "uid": "application_logs",
-    "url": "${controller_url}/v2/quickwit/${username}",
+    "url": "${controller_url}/v2/quickwit/${workspace}",
     "access": "proxy",
     "basicAuth": false,
     "jsonData": {