kandra: Template and insert email credentials.

puppet/kandra/manifests/profile/grafana.pp

@@ -56,6 +56,10 @@ class kandra::profile::grafana inherits kandra::profile::base {
     notify  => Service[supervisor],
   }
 
+  $email_host = zulipconf('grafana', 'email_host', '')
+  $email_from = zulipconf('grafana', 'email_from', '')
+  $email_user = zulipsecret('secrets', 'grafana_email_user', '')
+  $email_password = zulipsecret('secrets', 'grafana_email_password', '')
   file { '/etc/grafana':
     ensure => directory,
     owner  => 'root',
@@ -67,7 +71,7 @@ class kandra::profile::grafana inherits kandra::profile::base {
     owner   => 'root',
     group   => 'root',
     mode    => '0644',
-    source => 'puppet:///modules/kandra/grafana/grafana.ini',
+    content => template('kandra/grafana.ini.template.erb'),
     notify  => Service[supervisor],
   }
 }

puppet/kandra/templates/grafana.ini.template.erb

@@ -29,6 +29,17 @@ domain = monitoring.teleport.zulipchat.net
 root_url = https://monitoring.teleport.zulipchat.net/
 
 
+#################################### SMTP ####################################
+[smtp]
+enabled = true
+from_name = Grafana
+from_address = <%= @email_from %>
+host = <%= @email_host %>
+user = <%= @email_user %>
+password = <%= @email_password %>
+startTLS_policy = MandatoryStartTLS
+
+
 #################################### Auth JWT ####################################
 [auth.jwt]
 # Grafana should trust the JWT that is provided in a header from Teleport; see