play.yml

gistfile1.txt

---
- name: test
  hosts: localhost
  connection: local
 
  vars:
    containers:
      grafana:
        image: grafana/grafana:6.0.0
        ports: 3000:3000
        networks:
          - grafana-network
          - traefik-network
        volumes:
          - /data/docker-data/grafana/conf/:/var/lib/grafana/
        secrets:
          GF_SECURITY_ADMIN_PASSWORD: https://MYVAULT.vault.azure.net/secrets/grafana-aad-discovery1/ff177dcf5a734ad69563908fdcb45933
          GF_SESSION_PROVIDER_CONFIG: https://MYVAULT.vault.azure.net/secrets/grafana-aad-discovery2/ff177dcf5a734ad69563908fdcb45933
          GF_DATABASE_PASSWORD: https://MYVAULT.vault.azure.net/secrets/grafana-aad-discovery3/ff177dcf5a734ad69563908fdcb45933
          GF_AUTH_GENERIC_OAUTH_CLIENT_SECRET: https://MYVAULT.vault.azure.net/secrets/grafana-aad-discovery4/ff177dcf5a734ad69563908fdcb45933
        variables:
          docker:
            - GF_INSTALL_PLUGINS: grafana-azure-monitor-datasource,grafana-azure-data-explorer-datasource
            - GF_SESSION_PROVIDER: postgres
            - GF_DATABASE_TYPE: postgres
            - GF_DATABASE_HOST: redacted.postgres.database.azure.com
            - GF_DATABASE_NAME: grafana
            - GF_DATABASE_USER: sysadmin@prometheus-monitoring-postgresql
            - GF_SERVER_ROOT_URL: https://grafana.production.redacted/
            - GF_DATABASE_SSL_MODE: require
            - GF_AUTH_GENERIC_OAUTH_ENABLED: true
            - GF_AUTH_GENERIC_OAUTH_ALLOW_SIGN_UP: true
            - GF_AUTH_GENERIC_OAUTH_CLIENT_ID: redacted
            - GF_AUTH_GENERIC_OAUTH_SCOPES: openid email profile
            - GF_AUTH_GENERIC_OAUTH_AUTH_URL: https://login.microsoftonline.com/redacted/oauth2/v2.0/authorize
            - GF_AUTH_GENERIC_OAUTH_TOKEN_URL: https://login.microsoftonline.com/redacted/oauth2/v2.0/token
            - GF_AUTH_GENERIC_OAUTH_API_URL: https://graph.microsoft.com/oidc/userinfo
      prometheus:
         image: prom/prometheus:v2.6.0
         ports: 9090:9090
         networks:
           - grafana-network
           - traefik-network
         volumes:
           - /data/sadisk/prometheusmonitoring/shared/prometheus/conf/:/etc/prometheus/
           - /data/datadisk/docker-data/prometheus/data:/prometheus
         secrets:
           PROM_PWD1: https://MYVAULT.vault.azure.net/secrets/prom1/ff177dcf5a734ad69563908fdcb45912
           PROM_PWD2: https://MYVAULT.vault.azure.net/secrets/prom2/ff177dcf5a734ad69563908fdcb45911
         cmd: "--storage.tsdb.path=/prometheus"
         user: root
 
 
  tasks:
 
         #- shell: "az keyvault secret show --id {{ item.value }} --query '{ {{ item.key }} : value }' " #
         - shell: >-
            echo '{ "{{ item.key }}" : "{{ 100 | random   }}" }'
           loop_control:
             label: "{{ item }} {{ item.key }} {{ item.value }}"
           loop: |
             [
             {% for p in containers %}
             {% for o in containers[p].secrets %}
             {
             "name": "{{ p }}",
             "key": "{{ o }}",
             "value": "{{ containers[p].secrets[o] }}",
             "all" : "{{ containers[p] }}"
             },
             {% endfor %}
             {% endfor %}
             ]
           register: output
 
 
         - debug:
             msg: "upstream-item={{ item.item.name }}, key={{ data.keys().0 }}, value={{ data.values().0 }}"
           vars:
             data: "{{ item.stdout|from_json }}"
           loop: "{{ output.results }}"
 
         - set_fact:
             "{{ item.item.name }}" : "{{ item.item.name|default({}) | combine( { data.keys().0  :  data.values().0  } ) }}"
           vars:
             data: "{{ item.stdout|from_json }}"
           loop: "{{ output.results }}"
 
         - debug:
             msg: "{{ grafana }}"
 
         - debug:
             msg: "{{ prometheus }}"