feat: add database generation to grafana

- ensure a database, user and credential is created for each grafana node
- ensure all databases for a region are included in a mariadb cluster
- refine params with stdlib types

site/profiles/manifests/metrics/grafana.pp

@@ -1,13 +1,14 @@
 # profiles::metrics::grafana
 class profiles::metrics::grafana (
-  Integer   $http_port      = 8080,
+  Stdlib::Port $http_port   = 8080,
   String    $app_mode       = 'production',
   Boolean   $allow_sign_up  = false,
   Boolean   $mysql_backend  = true,
-  String    $mysql_host     = '127.0.0.1:3306',
   String    $mysql_user     = 'grafana',
-  Sensitive $mysql_pass     = 'grafana',
-  Sensitive $mysql_name     = 'grafana',
+  String    $mysql_name     = 'grafana',
+  String    $mysql_pass     = fqdn_rand_string(16),
+  Stdlib::Host $mysql_host  = '127.0.0.1',
+  Stdlib::Port $mysql_port  = 3306,
 
 ) {
 
@@ -17,25 +18,27 @@ class profiles::metrics::grafana (
   # when using mysql backend
   if $mysql_backend {
 
-    # create a db for grafana
-    @@mysql::db { "mydb_${fqdn}":
-      user     => $mysql_user,
-      password => $mysql_pass,
-      dbname   => $mysql_name,
-      host     => $fqdn,
-      grant    => ['SELECT', 'UPDATE'],
-      #tag      => $domain,
+    @@mysql_user { "${mysql_user}@${facts['networking']['fqdn']}":
+      ensure        => present,
+      password_hash => mysql::password(fqdn_rand_string(16)),
+      tag           => $facts['region'],
+    }
+
+    @@mysql_grant { "${mysql_user}@${facts['networking']['fqdn']}/${mysql_name}.*":
+      ensure     => present,
+      table      => "${mysql_name}.*",
+      user       => "${mysql_user}@${facts['networking']['fqdn']}",
+      privileges => ['ALL'],
+      tag        => $facts['region'],
     }
 
     $database_config = {
       type     => 'mysql',
-      host     => $mysql_host,
+      host     => "${mysql_host}:${mysql_port}",
       name     => $mysql_name,
       user     => $mysql_user,
       password => $mysql_pass.unwrap,
     }
-
-    $sensitive_database_config = Sensitive($database_config)
   }
 
   # build the grafana config hash
@@ -44,7 +47,7 @@ class profiles::metrics::grafana (
     server   => {
       http_port => $http_port,
     },
-    database => $sensitive_database_config,
+    database => $database_config,
     users    => {
       allow_sign_up => $allow_sign_up,
     },
@@ -55,4 +58,10 @@ class profiles::metrics::grafana (
     cfg => $cfg,
   }
 
+  # fix the package provided systemd service
+  systemd::unit_file { 'grafana-server.service':
+    content => template('profiles/metrics/grafana.service.erb'),
+    require => Package['grafana'],
+    before  => Service['grafana'],
+  }
 }