Ori.livneh has submitted this change and it was merged.
Change subject: grafana2: don't allow users to create orgs or accounts
......................................................................
grafana2: don't allow users to create orgs or accounts
accounts are automagically created based on LDAP credentials.
orgs shouldn't be created at all.
Change-Id: Id1acdbabb4f61ef7e667e04253d3e4600ea08943
---
M manifests/role/grafana2.pp
1 file changed, 4 insertions(+), 1 deletion(-)
Approvals:
Ori.livneh: Verified; Looks good to me, approved
diff --git a/manifests/role/grafana2.pp b/manifests/role/grafana2.pp
index b40dac5..cc89933 100644
--- a/manifests/role/grafana2.pp
+++ b/manifests/role/grafana2.pp
@@ -60,13 +60,16 @@
# 'Viewer', the default).
'users' => {
auto_assign_org_role => 'Editor',
+ allow_org_create => false,
+ allow_user_create => false,
},
# Because we enable `auth.proxy` (see above), if session data
# is lost, Grafana will simply create a new session on the next
# request, so it's OK for session storage to be volatile.
'session' => {
- provider => 'memory',
+ provider => 'memory',
+ cookie_secure => true,
},
# Don't send anonymous usage stats to stats.grafana.org.
--
To view, visit https://gerrit.wikimedia.org/r/245971
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings
Gerrit-MessageType: merged
Gerrit-Change-Id: Id1acdbabb4f61ef7e667e04253d3e4600ea08943
Gerrit-PatchSet: 2
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Ori.livneh <[email protected]>
Gerrit-Reviewer: Ori.livneh <[email protected]>
_______________________________________________
MediaWiki-commits mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits
