Hacker News Reader

How about adding support for configuring Grafana with files?

This would allow us to deploy immutable Grafana instances using infrastructure-as-code tools like Terraform and Docker. Specifically, I want a way to eliminate post-install steps such as adding users and organizations and setting user passwords.

View on HN

Wouldn't a better way to configure users and passwords be to use an external auth provider such as OAuth or LDAP? If you don't already have a auth provider, you could deploy Keycloak as your user DB.

OAuth/LDAP are great for large organizations. Small organizations don't need such complexity.

Even if you use OAuth/LDAP for accounts and passwords, Grafana still requires manual steps to create the organization, install plugins, and set the admin password. I wrote a Python script to do this on Docker container startup. That script is a workaround for Grafana server's poor ops design. It's extra code that we must maintain.

The admin password can be set with an environment variable. That just leaves the org and plugins.

Reply on news.ycombinator.com