Question
Grafana Provisioned Data Source secureJsonData Rotation on Config Reload
Ira Maple
0 reputation · 01 Jul 2022, 15:22 UTC
43.5K views0
Grafana Provisioned Data Source secureJsonData Rotation on Config Reload
Goal: rotate a provisioned data source password stored in secureJsonData by updating the provisioning YAML and reloading configuration, without deleting and recreating the data source or breaking dashboard UID references.
Uncertainty: Grafana documentation does not explicitly define whether secureJsonData fields are overwritten for an existing data source during provisioning reconciliation. Behavior may depend on the editable flag and differ between Grafana OSS versions such as 9.x and 10.x, and between OSS and Grafana Cloud. It is also unclear whether UI edits can overwrite provisioned secrets when editable is true.
- Does Grafana OSS 10.4 update secureJsonData for an existing provisioned data source on provisioning reload?
- Can secrets be rotated without deleting and recreating the data source while preserving dashboard references?
- Is there a documented permission boundary preventing UI edits from overwriting provisioned secrets?
grafana