Add dashboard UID auto-generation and Gitea dev workflow

environments/modules/grafana_dashboard/locals.tf

@@ -0,0 +1,101 @@
+locals {
+  # Dashboards with both manual changes allowed and destroy protection
+  dashboards_ignore_and_protect = flatten([
+    for group in var.groups : [
+      for file in(group.dashboard_path_if_exist != null ? fileset(group.dashboard_path_if_exist, "**/*.json") : []) : {
+        group_name     = group.dashboard_alert_group_name
+        file_path      = "${group.dashboard_path_if_exist}/${file}"
+        dashboard_json = jsondecode(file("${group.dashboard_path_if_exist}/${file}"))
+        dashboard_uid = substr(
+          regexreplace(
+            lower(
+              "${try(jsondecode(file("${group.dashboard_path_if_exist}/${file}")).uid, trimsuffix(basename(file), ".json"))}_${group.dashboard_path_if_exist}/${file}"
+            ),
+            "[^a-z0-9_-]",
+            "_"
+          ),
+          0,
+          var.dashboard_uid_max_length
+        )
+        folder_id                   = lookup(var.folder_ids, group.dashboard_alert_group_name, null)
+        keep_manual_changes         = lookup(group, "keep_manual_changes", false)
+        prevent_destroy_on_recreate = lookup(group, "prevent_destroy_on_recreate", false)
+      }
+    ] if lookup(group, "keep_manual_changes", false) && lookup(group, "prevent_destroy_on_recreate", false)
+  ])
+
+  # Dashboards with only manual changes allowed
+  dashboards_ignore_only = flatten([
+    for group in var.groups : [
+      for file in(group.dashboard_path_if_exist != null ? fileset(group.dashboard_path_if_exist, "**/*.json") : []) : {
+        group_name     = group.dashboard_alert_group_name
+        file_path      = "${group.dashboard_path_if_exist}/${file}"
+        dashboard_json = jsondecode(file("${group.dashboard_path_if_exist}/${file}"))
+        dashboard_uid = substr(
+          regexreplace(
+            lower(
+              "${try(jsondecode(file("${group.dashboard_path_if_exist}/${file}")).uid, trimsuffix(basename(file), ".json"))}_${group.dashboard_path_if_exist}/${file}"
+            ),
+            "[^a-z0-9_-]",
+            "_"
+          ),
+          0,
+          var.dashboard_uid_max_length
+        )
+        folder_id                   = lookup(var.folder_ids, group.dashboard_alert_group_name, null)
+        keep_manual_changes         = lookup(group, "keep_manual_changes", false)
+        prevent_destroy_on_recreate = lookup(group, "prevent_destroy_on_recreate", false)
+      }
+    ] if lookup(group, "keep_manual_changes", false) && !lookup(group, "prevent_destroy_on_recreate", false)
+  ])
+
+  # Dashboards with only destroy protection
+  dashboards_protect_only = flatten([
+    for group in var.groups : [
+      for file in(group.dashboard_path_if_exist != null ? fileset(group.dashboard_path_if_exist, "**/*.json") : []) : {
+        group_name     = group.dashboard_alert_group_name
+        file_path      = "${group.dashboard_path_if_exist}/${file}"
+        dashboard_json = jsondecode(file("${group.dashboard_path_if_exist}/${file}"))
+        dashboard_uid = substr(
+          regexreplace(
+            lower(
+              "${try(jsondecode(file("${group.dashboard_path_if_exist}/${file}")).uid, trimsuffix(basename(file), ".json"))}_${group.dashboard_path_if_exist}/${file}"
+            ),
+            "[^a-z0-9_-]",
+            "_"
+          ),
+          0,
+          var.dashboard_uid_max_length
+        )
+        folder_id                   = lookup(var.folder_ids, group.dashboard_alert_group_name, null)
+        keep_manual_changes         = lookup(group, "keep_manual_changes", false)
+        prevent_destroy_on_recreate = lookup(group, "prevent_destroy_on_recreate", false)
+      }
+    ] if !lookup(group, "keep_manual_changes", false) && lookup(group, "prevent_destroy_on_recreate", false)
+  ])
+
+  # Standard dashboards without any special lifecycle management
+  dashboards_standard = flatten([
+    for group in var.groups : [
+      for file in(group.dashboard_path_if_exist != null ? fileset(group.dashboard_path_if_exist, "**/*.json") : []) : {
+        group_name     = group.dashboard_alert_group_name
+        file_path      = "${group.dashboard_path_if_exist}/${file}"
+        dashboard_json = jsondecode(file("${group.dashboard_path_if_exist}/${file}"))
+        dashboard_uid = substr(
+          regexreplace(
+            lower(
+              "${try(jsondecode(file("${group.dashboard_path_if_exist}/${file}")).uid, trimsuffix(basename(file), ".json"))}_${group.dashboard_path_if_exist}/${file}"
+            ),
+            "[^a-z0-9_-]",
+            "_"
+          ),
+          0,
+          var.dashboard_uid_max_length
+        )
+        folder_id                   = lookup(var.folder_ids, group.dashboard_alert_group_name, null)
+        keep_manual_changes         = lookup(group, "keep_manual_changes", false)
+        prevent_destroy_on_recreate = lookup(group, "prevent_destroy_on_recreate", false)
+      }
+    ] if !lookup(group, "keep_manual_changes", false) && !lookup(group, "prevent_destroy_on_recreate", false)
+  ])
+}

environments/modules/grafana_dashboard/main.tf

@@ -0,0 +1,52 @@
+# Dashboards with both manual changes allowed and destroy protection
+resource "grafana_dashboard" "dashboards_ignore_and_protect" {
+  for_each = { for d in local.dashboards_ignore_and_protect : d.file_path => d }
+
+  config_json = jsonencode(merge(each.value.dashboard_json, { uid = each.value.dashboard_uid }))
+  folder      = each.value.folder_id
+  org_id      = var.org_id
+  overwrite   = true
+
+  lifecycle {
+    prevent_destroy = true
+    ignore_changes  = [config_json]
+  }
+}
+
+# Dashboards with only manual changes allowed
+resource "grafana_dashboard" "dashboards_ignore_only" {
+  for_each = { for d in local.dashboards_ignore_only : d.file_path => d }
+
+  config_json = jsonencode(merge(each.value.dashboard_json, { uid = each.value.dashboard_uid }))
+  folder      = each.value.folder_id
+  org_id      = var.org_id
+  overwrite   = true
+
+  lifecycle {
+    ignore_changes = [config_json]
+  }
+}
+
+# Dashboards with only destroy protection
+resource "grafana_dashboard" "dashboards_protect_only" {
+  for_each = { for d in local.dashboards_protect_only : d.file_path => d }
+
+  config_json = jsonencode(merge(each.value.dashboard_json, { uid = each.value.dashboard_uid }))
+  folder      = each.value.folder_id
+  org_id      = var.org_id
+  overwrite   = true
+
+  lifecycle {
+    prevent_destroy = true
+  }
+}
+
+# Standard dashboards without any special lifecycle management
+resource "grafana_dashboard" "dashboards_standard" {
+  for_each = { for d in local.dashboards_standard : d.file_path => d }
+
+  config_json = jsonencode(merge(each.value.dashboard_json, { uid = each.value.dashboard_uid }))
+  folder      = each.value.folder_id
+  org_id      = var.org_id
+  overwrite   = true
+}

environments/modules/grafana_dashboard/variables.tf

@@ -0,0 +1,32 @@
+variable "org_id" {
+  description = "ID of the organization for dashboards"
+  type        = string
+}
+
+variable "groups" {
+  description = "List of alert groups with their definitions and data sources"
+  type = list(object({
+    dashboard_alert_group_name  = string
+    alert_definitions_path      = string
+    dashboard_path_if_exist     = optional(string, null)
+    keep_manual_changes         = optional(bool, false)
+    prevent_destroy_on_recreate = optional(bool, false)
+    alerts_on_datasources_uid   = list(string)
+  }))
+}
+
+variable "folder_ids" {
+  description = "Mapping of folder IDs for each alert group"
+  type        = map(string)
+}
+
+variable "dashboard_uid_max_length" {
+  description = "Maximum length of generated dashboard UID"
+  type        = number
+  default     = 40
+
+  validation {
+    condition     = var.dashboard_uid_max_length > 0 && var.dashboard_uid_max_length <= 40
+    error_message = "dashboard_uid_max_length must be between 1 and 40."
+  }
+}