infra/ansible/roles/grafana/templates
Graham McIntire 0970e29364
ansible: fix two latent bugs surfaced by repo audit
- grafana role: empty grafana_admin_password by default, and only emit
  admin_password into grafana.ini when the var is set. Previously the
  default 'admin' was rewritten on every run, clobbering passwords
  rotated via the Grafana UI.

- bootstrap.yml: probe for sudo state before attempting su-as-root.
  The first play was using become_method=su unconditionally; on hosts
  where graham already has passwordless sudo (or where -K isn't passed),
  ansible blocked indefinitely waiting for a root password prompt.
  Now the install-via-su task only runs when sudo is actually missing,
  and the python3 task uses sudo when available.

Also bring in latest microwaveprop dashboard tweaks.
2026-05-08 11:09:14 -05:00
..
dashboard-providers.yaml.j2 prom: feed home-cluster metrics + provision standard k8s dashboards 2026-05-08 10:08:32 -05:00
datasources.yaml.j2 prom: add prometheus stack (prometheus, alertmanager, grafana, node_exporter) 2026-05-08 09:50:31 -05:00
grafana.ini.j2 ansible: fix two latent bugs surfaced by repo audit 2026-05-08 11:09:14 -05:00