Hacker News new | ask | show | jobs
by dharmab 2223 days ago
Wouldn't a better way to configure users and passwords be to use an external auth provider such as OAuth or LDAP? If you don't already have a auth provider, you could deploy Keycloak as your user DB.
1 comments

OAuth/LDAP are great for large organizations. Small organizations don't need such complexity.

Even if you use OAuth/LDAP for accounts and passwords, Grafana still requires manual steps to create the organization, install plugins, and set the admin password. I wrote a Python script to do this on Docker container startup. That script is a workaround for Grafana server's poor ops design. It's extra code that we must maintain.

The admin password can be set with an environment variable. That just leaves the org and plugins.