Expose oncall_access_token from within the Grafana Terraform provider's grafana_cloud_stack resource

[Alex3k]

What would you like to see!

Today to fully automate OnCall you use Oncall resources within a Grafana provider and pass the oncall_access_token which seems to only be accessible via the UI.

This poses a major challenge when trying to automate everything end to end because I don't want to go into the UI after creating a grafana cloud stack via terraform, then trigger more automation to automate terraform.

It would be much easier if this token was accessible within the grafana_cloud_stack resource so that I can automate everything end to end without any human intervention

Product Area

Terraform/Crossplane

Anything else to add?

No response

[github-actions]

The current version of Grafana OnCall, at the time this issue was opened, is v1.7.2. If your issue pertains to an older version of Grafana OnCall, please be sure to list it in the PR description. Thank you 😄!

[iskhakov]

It is probably easier to support Grafana Service Accounts, and get rid of OnCall API keys completely
See #3812 (comment)

[vstpme]

@joeyorlando @matiasb should we close this one / reschedule?

[FecoDoo]

This is a very needed feature as it's blocking any automation possibilities with Terraform, regardless of where to obtain the token from (SA or oncall plugin). Is there any update on this?

[matiasb]

This is a very needed feature as it's blocking any automation possibilities with Terraform, regardless of where to obtain the token from (SA or oncall plugin). Is there any update on this?

FYI, it is now possible to manage OnCall resources authenticating the provider via a service account token.

[FecoDoo]

This is a very needed feature as it's blocking any automation possibilities with Terraform, regardless of where to obtain the token from (SA or oncall plugin). Is there any update on this?

FYI, it is now possible to manage OnCall resources authenticating the provider via a service account token.

Thanks, but AFAIK the service account for oncall is auto created with externalServiceAccounts feature toggle, and there's no way (at least I couldn't find) to obtain the pre-populated token with Grafana Terraform provider.

[matiasb]

This is a very needed feature as it's blocking any automation possibilities with Terraform, regardless of where to obtain the token from (SA or oncall plugin). Is there any update on this?

FYI, it is now possible to manage OnCall resources authenticating the provider via a service account token.

Thanks, but AFAIK the service account for oncall is auto created with externalServiceAccounts feature toggle, and there's no way (at least I couldn't find) to obtain the pre-populated token with Grafana Terraform provider.

You should create a service account (and token) as described in the docs, ie. via a cloud access token, and use that to manage OnCall resources too. You should also be able to setup a service account in OSS setups. So, you won't be using the plugin external service account but your own. Makes sense?