From aab3eaf9e79376dfa204e4890bbe79d99c01f4d1 Mon Sep 17 00:00:00 2001
From: Ben Vincent <ben@unkin.net>
Date: Mon, 30 Jun 2025 19:17:56 +1000
Subject: [PATCH] feat: add grafana service to ldap (#331)

- add grafana service account for binding
- add grafana_user group
- add users to group

Reviewed-on: https://git.query.consul/unkinben/puppet-prod/pulls/331
---
 hieradata/roles/infra/auth/glauth.yaml | 11 +++++++++++
 1 file changed, 11 insertions(+)

diff --git a/hieradata/roles/infra/auth/glauth.yaml b/hieradata/roles/infra/auth/glauth.yaml
index e313e40..0f1a579 100644
--- a/hieradata/roles/infra/auth/glauth.yaml
+++ b/hieradata/roles/infra/auth/glauth.yaml
@@ -65,6 +65,7 @@ glauth::users:
       - 20024
       - 20025   # jupyterhub_admin
       - 20026   # jupyterhub_user
+      - 20027   # grafana_user
     loginshell: '/bin/bash'
     homedir: '/home/benvin'
     passsha256: 'd2434f6b4764ef75d5b7b96a876a32deedbd6aa726a109c3f32e823ca66f604a'
@@ -85,6 +86,7 @@ glauth::users:
       - 20014
       - 20015
       - 20016
+      - 20027 # grafana user
     loginshell: '/bin/bash'
     homedir: '/home/matsol'
     passsha256: '369263e2455a57c8c21388860c417b640fcf045a303cfc88def18c5197493600'
@@ -279,6 +281,12 @@ glauth::services:
     uidnumber: 30010
     primarygroup: 20001
     passsha256: '09db1e0c2498214da35f3f2ed46a90a7b90635c207f8725e7abf76b48345a39b'
+  svc_grafana:
+    service_name: 'svc_grafana'
+    mail: 'grafana@service.main.unkin.net'
+    uidnumber: 30011
+    primarygroup: 20001
+    passsha256: '09db1e0c2498214da35f3f2ed46a90a7b90635c207f8725e7abf76b48345a39b'
 
 glauth::groups:
   users:
@@ -338,3 +346,6 @@ glauth::groups:
   jupyterhub_user:
     group_name: 'jupyterhub_user'
     gidnumber: 20026
+  grafana_user:
+    group_name: 'grafana_user'
+    gidnumber: 20027