Page MenuHomePhabricator

Sync users and permissions from LDAP to Grafana
Closed, ResolvedPublic

Description

As per parent task, to implement CAS for Grafana we'll need to sync users and their permissions from LDAP to Grafana.

Event Timeline

JMeybohm triaged this task as Medium priority.Oct 16 2020, 1:09 PM

Change 635562 had a related patch set uploaded (by Filippo Giunchedi; owner: Filippo Giunchedi):
[operations/puppet@production] tox: move grafana tests to python3

https://gerrit.wikimedia.org/r/635562

Change 635566 had a related patch set uploaded (by Filippo Giunchedi; owner: Filippo Giunchedi):
[integration/config@master] operations-puppet: add python3-ldap and release docker image 0.7.9

https://gerrit.wikimedia.org/r/635566

Change 635562 merged by Filippo Giunchedi:
[operations/puppet@production] tox: move grafana tests to python3

https://gerrit.wikimedia.org/r/635562

Change 635566 merged by jenkins-bot:
[integration/config@master] operations-puppet: add python3-ldap and release docker image 0.7.9

https://gerrit.wikimedia.org/r/635566

Change 635559 had a related patch set uploaded (by Filippo Giunchedi; owner: Filippo Giunchedi):
[operations/puppet@production] grafana: sync users and roles from LDAP

https://gerrit.wikimedia.org/r/635559

Change 636637 had a related patch set uploaded (by Filippo Giunchedi; owner: Filippo Giunchedi):
[operations/puppet@production] grafana: introduce 'profile::grafana::active_host'

https://gerrit.wikimedia.org/r/636637

Change 636638 had a related patch set uploaded (by Filippo Giunchedi; owner: Filippo Giunchedi):
[operations/puppet@production] grafana: add user sync from LDAP

https://gerrit.wikimedia.org/r/636638

Change 635559 merged by Filippo Giunchedi:
[operations/puppet@production] grafana: sync users and roles from LDAP

https://gerrit.wikimedia.org/r/635559

Change 636637 merged by Filippo Giunchedi:
[operations/puppet@production] grafana: introduce 'profile::grafana::active_host'

https://gerrit.wikimedia.org/r/636637

Change 636638 merged by Filippo Giunchedi:
[operations/puppet@production] grafana: add user sync from LDAP

https://gerrit.wikimedia.org/r/636638

Change 636917 had a related patch set uploaded (by Filippo Giunchedi; owner: Filippo Giunchedi):
[operations/puppet@production] grafana: fix bytes vs string error in ldap_users_sync

https://gerrit.wikimedia.org/r/636917

Change 636927 had a related patch set uploaded (by Filippo Giunchedi; owner: Filippo Giunchedi):
[operations/puppet@production] grafana: make grafana-rw dashboards link work for anonymous users

https://gerrit.wikimedia.org/r/636927

Change 636917 merged by Filippo Giunchedi:
[operations/puppet@production] grafana: fix bytes vs string error in ldap_users_sync

https://gerrit.wikimedia.org/r/636917

Change 636929 had a related patch set uploaded (by Muehlenhoff; owner: Muehlenhoff):
[operations/puppet@production] Fold Grafana settings for CAS into the Hiera role data

https://gerrit.wikimedia.org/r/636929

Change 636930 had a related patch set uploaded (by Muehlenhoff; owner: Muehlenhoff):
[operations/puppet@production] Point grafana-rw to grafana1002

https://gerrit.wikimedia.org/r/636930

Change 636927 merged by Filippo Giunchedi:
[operations/puppet@production] grafana: make grafana-rw dashboards link work for anonymous users

https://gerrit.wikimedia.org/r/636927

Change 639452 had a related patch set uploaded (by Filippo Giunchedi; owner: Filippo Giunchedi):
[operations/puppet@production] grafana: commit ldap-users-sync changes

https://gerrit.wikimedia.org/r/639452

Change 636929 merged by Muehlenhoff:
[operations/puppet@production] Fold Grafana settings for CAS into the Hiera role data

https://gerrit.wikimedia.org/r/636929

Change 636930 merged by Muehlenhoff:
[operations/puppet@production] Point grafana-rw to grafana1002

https://gerrit.wikimedia.org/r/636930

Change 639482 had a related patch set uploaded (by Filippo Giunchedi; owner: Filippo Giunchedi):
[operations/puppet@production] grafana: sync multiple-groups users only once

https://gerrit.wikimedia.org/r/639482

Change 639483 had a related patch set uploaded (by Filippo Giunchedi; owner: Filippo Giunchedi):
[operations/puppet@production] grafana: enforce 'admin' user role

https://gerrit.wikimedia.org/r/639483

Change 639483 merged by Filippo Giunchedi:
[operations/puppet@production] grafana: enforce 'admin' user role

https://gerrit.wikimedia.org/r/639483

Change 639482 merged by Filippo Giunchedi:
[operations/puppet@production] grafana: sync multiple-groups users only once

https://gerrit.wikimedia.org/r/639482

Change 639525 had a related patch set uploaded (by Filippo Giunchedi; owner: Filippo Giunchedi):
[operations/puppet@production] grafana: set 'admin' user as Org admin only

https://gerrit.wikimedia.org/r/639525

Change 639525 merged by Filippo Giunchedi:
[operations/puppet@production] grafana: set 'admin' user as Org admin only

https://gerrit.wikimedia.org/r/639525

Change 639452 merged by Filippo Giunchedi:
[operations/puppet@production] grafana: commit ldap-users-sync changes

https://gerrit.wikimedia.org/r/639452

fgiunchedi claimed this task.

This is live now, LDAP users are synced daily to Grafana.