servers/roles/telegraf/tasks/token.yml
Timotej Lazar 0a0ce7e2a5 Add telegraf role
And enable it for ceph nodes.
2024-11-27 17:37:00 +01:00

54 lines
1.8 KiB
YAML

- name: Get influxdb organization ID
delegate_to: localhost
uri:
url: '{{ influxdb_info.influxdb_url }}/api/v2/orgs'
headers:
Authorization: Token {{ influxdb_info.influxdb_operator_token }}
register: response
- name: Parse influxdb orgID
set_fact:
influxdb_orgID: '{{ response.json.orgs | selectattr("name", "==", influxdb_info.influxdb_org) | map(attribute="id") | first }}'
- name: Get influxdb bucket ID
delegate_to: localhost
uri:
url: '{{ influxdb_info.influxdb_url }}/api/v2/buckets?orgID={{ influxdb_orgID }}'
headers:
Authorization: Token {{ influxdb_info.influxdb_operator_token }}
register: response
- name: Parse influxdb bucketID
set_fact:
influxdb_bucketID: '{{ response.json.buckets | selectattr("name", "==", "servers") | map(attribute="id") | first }}'
- name: Create influxdb token
delegate_to: localhost
uri:
url: '{{ influxdb_info.influxdb_url }}/api/v2/authorizations'
method: POST
body_format: json
status_code: 201
headers:
Authorization: Token {{ influxdb_info.influxdb_operator_token }}
Content-Type: application/json
body: |
{
"description": "{{ inventory_hostname }}",
"orgID": "{{ influxdb_orgID }}",
"permissions": [{ "action": "write", "resource": { "type": "buckets", "id": "{{ influxdb_bucketID }}" } }]
}
register: response
- name: Parse influxdb token
set_fact:
influxdb_token: '{{ response.json.token }}'
# Ansible’s passwordstore lookup plugin should be able to do that but is pretty broken,
# so we do it manually.
- name: Store influxdb token in password store
delegate_to: localhost
command:
cmd: 'pass insert --force --multiline {{ ("vm/" if is_virtual else "host/")~inventory_hostname }}'
stdin: '{{ password | to_nice_yaml(sort_keys=false) }}influxdb_token: {{ influxdb_token }}'