From 8f6bf752c51ad3f65e07ced71fe8f431c0dfc828 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Thorben=20G=C3=BCnther?= <admin@xenrox.net>
Date: Tue, 14 Feb 2023 01:54:50 +0100
Subject: [PATCH] grafana: Add basic auth to Alertmanager datasource

---
 roles/grafana/tasks/main.yml                                | 5 +++--
 .../{files/datasources.yml => templates/datasources.yml.j2} | 6 +++++-
 2 files changed, 8 insertions(+), 3 deletions(-)
 rename roles/grafana/{files/datasources.yml => templates/datasources.yml.j2} (54%)

diff --git a/roles/grafana/tasks/main.yml b/roles/grafana/tasks/main.yml
index 29867d4..9330ee0 100644
--- a/roles/grafana/tasks/main.yml
+++ b/roles/grafana/tasks/main.yml
@@ -1,6 +1,7 @@
 ---
 - name: Get secrets
   ansible.builtin.set_fact:
+    alertmanager_secrets: "{{ lookup('community.hashi_vault.hashi_vault', 'ansible/data/alertmanager') }}"
     grafana_secrets: "{{ lookup('community.hashi_vault.hashi_vault', 'ansible/data/grafana') }}"
 
 - name: Install
@@ -31,8 +32,8 @@
     - /var/lib/grafana/dashboards
 
 - name: Configure datasources
-  ansible.builtin.copy:
-    src: datasources.yml
+  ansible.builtin.template:
+    src: datasources.yml.j2
     dest: /etc/grafana/provisioning/datasources/datasources.yml
     owner: grafana
     group: grafana
diff --git a/roles/grafana/files/datasources.yml b/roles/grafana/templates/datasources.yml.j2
similarity index 54%
rename from roles/grafana/files/datasources.yml
rename to roles/grafana/templates/datasources.yml.j2
index 4b09529..6983b51 100644
--- a/roles/grafana/files/datasources.yml
+++ b/roles/grafana/templates/datasources.yml.j2
@@ -8,6 +8,10 @@ datasources:
   - name: Alertmanager
     type: alertmanager
     access: proxy
-    url: http://localhost:9093
+    url: https://alertmanager.xenrox.net
+    basicAuth: true
+    basicAuthUser: {{ alertmanager_secrets['user'] }}
+    secureJsonData:
+      basicAuthPassword: {{ alertmanager_secrets['pass'] }}
     jsonData:
       implementation: prometheus
-- 
2.44.0