adding users from list

README.md

@@ -33,6 +33,7 @@ grafana_protocol: http
 grafana_http_addr: 0.0.0.0                  # The ip address to bind to
 grafana_http_port: 3000                     # The http port  to use
 grafana_domain: localhost                   # The public facing domain name used to access grafana from a browser
+grafana_api_base_url: "http://{{ grafana_domain }}"
 grafana_enforce_domain: false
 grafana_root_url: "%(protocol)s://%(domain)s:%(http_port)s/"
 grafana_router_logging: false                  # Log web requests
@@ -159,6 +160,9 @@ grafana_nginx_ssl_key: ""
 grafana_nginx_ssl_redirect: "{{grafana_nginx_ssl}}"
 grafana_nginx_port: 80
 
+# Grafana users (add using api)
+grafana_users: []                              # list of dict with format: {username: 'user1', password: 'pass1'}
+
 ```
 
 #### Usage

defaults/main.yml

@@ -19,6 +19,7 @@ grafana_protocol: http
 grafana_http_addr: 0.0.0.0                  # The ip address to bind to
 grafana_http_port: 3000                     # The http port  to use
 grafana_domain: localhost                   # The public facing domain name used to access grafana from a browser
+grafana_api_base_url: "http://{{ grafana_domain }}"
 grafana_enforce_domain: false
 grafana_root_url: "%(protocol)s://%(domain)s:%(http_port)s/"
 grafana_router_logging: false                  # Log web requests
@@ -145,4 +146,7 @@ grafana_nginx_ssl_key: ""
 grafana_nginx_ssl_redirect: "{{grafana_nginx_ssl}}"
 grafana_nginx_port: 80
 
+# Grafana users (add using api)
+grafana_users: []                              # list of dict with format: {username: 'user1', password: 'pass1'}
+
 # vim:sw=2

tasks/grafana.yml

@@ -6,3 +6,7 @@
 
 - include: configure.yml
   tags: [grafana, grafana-configure]
+
+- include: users.yml
+  tags: [grafana, grafana-users]
+  when: grafana_users|length > 0

tasks/users.yml

@@ -0,0 +1,21 @@
+---
+
+# if admin user is set up in this run, we depend on application run with recent config
+- meta: flush_handlers
+
+- name: Add users using API
+  uri:
+    url: "{{ grafana_api_base_url }}/api/admin/users"
+    method: POST
+    body_format: json
+    # can't use api-key for this at the moment: http://docs.grafana.org/http_api/admin/
+    force_basic_auth: true
+    user: "{{ grafana_admin_user }}"
+    password: "{{ grafana_admin_password }}"
+    body:
+      name: "{{ item.username }}"
+      #email: "{{ item.username }}@domain" # not mandatory, users will have email = name in this case
+      login: "{{ item.username }}"
+      password: "{{ item.password }}"
+    status_code: 200,500 # existing users are not checked, inserting existing user causing 500 internal server error
+  with_items: "{{ grafana_users }}"

templates/grafana.ini.j2

@@ -113,12 +113,14 @@ google_analytics_ua_id = {{ grafana_google_analytics_ua_id }}
 
 #################################### Security ####################################
 [security]
+{% if grafana_admin_user and grafana_admin_password %}
 # default admin user, created on startup
 admin_user = {{ grafana_admin_user }}
 
 # default admin password, can be changed before first start of grafana,  or in profile settings
 admin_password = {{ grafana_admin_password }}
 
+{% endif %}
 # used for signing
 secret_key = {{ grafana_secret_key }}