Grafana v7.0.0 - Plugin must be signed

[nevesing]

I have updated to Grafana v7.0.0 and it requires the plugins to be signed.

From Grafana:

Grafana now requires backend plugins to be signed, otherwise Grafana will not load/start them. This is an additional security measure to make sure backend plugin binaries and files haven't been tampered with

[tigerlinux]

Does anyone knows if the original devel can be contacted?

[angela-d]

Haven't seen him post since October or November last year.

This is a pretty lame move by Grafana. I imagine this will break any customizations one does to the plugins after it's installed. (Some of the defaults of this plugin are pretty ugly)

It’s possible to allow unsigned plugins using a configuration setting, but is something we strongly advise against doing. https://grafana.com/docs/grafana/latest/installation/configuration/#allow-loading-unsigned-plugins

I haven't given this a try myself, as I'm several versions behind - but it was nice to see this hidden in the changelog.

[b-reich]

can anyone fork this an publish a new version? I would do this but I dont have any js skills.

[b-reich]

But there is a way to run unsigned plugins https://grafana.com/docs/grafana/latest/administration/configuration/#allow_loading_unsigned_plugins