roles/grafana: Deploy Grafana

This commit introduces the *grafana* role and the corresponding
`grafana.yml` playbook.  The role installs Grafana using the system
package manager, and configures the server (including LDAP
authentication).

group_vars/grafana/main.yml

@@ -0,0 +1,17 @@
+grafana_ldap_enabled: true
+grafana_http_addr: '[::1]'
+grafana_ldap_host: dc0.pyrocufflink.blue
+grafana_ldap_ssl: true
+grafana_ldap_start_tls: true
+grafana_ldap_bind_dn: CN=svc.grafana,CN=Users,DC=pyrocufflink,DC=blue
+grafana_ldap_search_filter: (sAMAccountName=%s)
+grafana_ldap_search_base_dns:
+- DC=pyrocufflink,DC=blue
+grafana_ldap_attr_username: sAMAccountName
+grafana_ldap_attr_email: mail
+grafana_ldap_group_mappings:
+- group_dn: CN=Grafana Admins,CN=Users,DC=pyrocufflink,DC=blue
+  org_role: Admin
+  grafana_admin: true
+- group_dn: '*'
+  org_role: Viewer

group_vars/grafana/secrets

@@ -0,0 +1,9 @@
+$ANSIBLE_VAULT;1.1;AES256
+35333639333036633432663463313536316163366130626436623962363466616234306462333239
+3338353961306664326137343262373565643234666238340a316163616236373636323836366363
+38653732643539666465323537613634376238343833313063623964363862633939376164313961
+3837366130386631370a323131333561353638353738393835346533393563393132323763316663
+37353735346438346435336465333565353866323434346131316434366362343964613933316530
+31633933346263323262323631623138326337343132383035613634383233313963663530333636
+33376232383937336463353837346264316537396431376636336264613439613538613038633637
+63316336313661386135