Why delegate the "Download grafana.net dashboards" block to localhost?

[germebl]

Hey guys,

I don't quite understand the point of delegating the block for “Download grafana.net dashboards” to “localhost.”

For an enterprise environment where “localhost” is a GitLab Runner with very limited firewall permissions, this is very useless, since the target system already needs firewall permissions for grafana.com anyway, and you have to unnecessarily grant these permissions to “n” systems, especially if you have a handful of Ansible Runners.

So there must be some reason not to simply perform this task on the target system, and if—due to the aforementioned regex applications—that is the reason, then couldn't this be done on the target system, e.g., in the /tmp folder?

I would appreciate a quick response.

[germebl]

Further, when using the provisioning with a bigger size of Dashboards (Issue starts from more then 6), the server responds with "429 - Too Many Requests" while the Task has already up to 6 retries, that seems not to be enough or there should be something like a short waiting between the downloads, to not get into a burst filter from the webserver.

But in the long time, as when using HA with for in my example 3 servers and 6 dashboards which using the same outbound nat ip (usual), this webserver filter denies very fast and very long so that even (i've tested it) not even 24 retries are enough, to get all dashboards on all nodes.