bundles/icinga2: generate icinga_users from users.json

bundles/icinga2/files/icinga2/users.conf

@@ -2,13 +2,20 @@ object UserGroup "on-call_sms" {
     display_name = "On-Call Support"
 }
 
-% for username in sorted(node.metadata.get('icinga2', {}).get('icinga_users', {})):
+% for username, config in sorted(node.metadata.get('icinga2', {}).get('icinga_users', {}).items()):
 object User "${username}" {
   display_name = "${username}"
   enable_notifications = true
-  period = "24x7"  # Is overwritten in notifications.conf
+  period = "24x7"
   states = [ OK, Critical, Up, Down ]
   types = [ Problem, Recovery ]
+
+% if config['is_admin']:
+  groups = [ "on-call_sms" ]
+% endif
+
+  email = "${config['email']}"
+  vars.mobile = "${config['phone']}"
 }
 
 % endfor

bundles/icinga2/metadata.py

@@ -1,3 +1,6 @@
+from json import loads
+from os.path import join
+
 defaults = {
     'apt': {
         'repos': {
@@ -46,3 +49,27 @@ defaults = {
         },
     },
 }
+
+@metadata_reactor
+def add_users_from_json(metadata):
+    with open(join(repo.path, 'users.json'), 'r') as f:
+        json = loads(f.read())
+
+    users = {}
+    for uname, config in json.items():
+        users[uname] = {
+            'email': '',
+            'phone': '',
+            'is_admin': config.get('is_admin', False),
+        }
+
+        if 'email' in config:
+            users[uname]['email'] = repo.vault.decrypt(config['email'])
+        if 'phone' in config:
+            users[uname]['phone'] = repo.vault.decrypt(config['phone'])
+
+    return {
+        'icinga2': {
+            'icinga_users': users,
+        },
+    }