diff options
author | Christian Pointner <equinox@spreadspace.org> | 2023-09-09 20:13:20 +0200 |
---|---|---|
committer | Christian Pointner <equinox@spreadspace.org> | 2023-09-09 20:13:20 +0200 |
commit | a7f8038feaf923acda8c9a3a64b5c7f064d47056 (patch) | |
tree | b08ba61121bc9505794bf043c17766fd2834c9cd /roles/monitoring/grafana/tasks | |
parent | ele-winvm: some more tests with Intel Arc A380 pass-through (diff) |
monitoring/grafana: add automatic handling for admin password and additonal users
Diffstat (limited to 'roles/monitoring/grafana/tasks')
-rw-r--r-- | roles/monitoring/grafana/tasks/main.yml | 3 | ||||
-rw-r--r-- | roles/monitoring/grafana/tasks/users.yml | 36 |
2 files changed, 39 insertions, 0 deletions
diff --git a/roles/monitoring/grafana/tasks/main.yml b/roles/monitoring/grafana/tasks/main.yml index 48a0ec96..1e21ea39 100644 --- a/roles/monitoring/grafana/tasks/main.yml +++ b/roles/monitoring/grafana/tasks/main.yml @@ -147,3 +147,6 @@ name: grafana-server state: started enabled: yes + +- name: manage grafana users + include_tasks: users.yml diff --git a/roles/monitoring/grafana/tasks/users.yml b/roles/monitoring/grafana/tasks/users.yml new file mode 100644 index 00000000..695d34d8 --- /dev/null +++ b/roles/monitoring/grafana/tasks/users.yml @@ -0,0 +1,36 @@ +--- +- name: check if admin password is already set + check_mode: no + uri: + url: "{{ grafana_root_url | resolve_grafana_url(grafana_config_server) }}/api/user" + user: admin + password: "{{ grafana_admin_password }}" + force_basic_auth: true + body_format: json + status_code: + - 200 + - 400 + - 401 + register: grafana_admin_user_info + +- name: set password for admin user + when: grafana_admin_user_info.status != 200 + command: grafana-cli admin reset-admin-password --password-from-stdin + args: + stdin: "{{ grafana_admin_password }}" + stdin_add_newline: false + +- name: add additional users to grafana + loop: "{{ grafana_users | dict2items }}" + loop_control: + label: "{{ item.key }}" + community.grafana.grafana_user: + url: "{{ grafana_root_url | resolve_grafana_url(grafana_config_server) }}" + url_username: admin + url_password: "{{ grafana_admin_password }}" + name: "{{ item.value.name | default(omit) }}" + email: "{{ item.value.email | default(omit) }}" + login: "{{ item.key }}" + password: "{{ item.value.password }}" + is_admin: "{{ item.value.is_admin | default(False) }}" + state: present |