Feature: Add web_config to blackbox_exporter

roles/blackbox_exporter/defaults/main.yml

@@ -5,6 +5,11 @@ blackbox_exporter_binary_url: "https://github.com/{{ _blackbox_exporter_repo }}/
 blackbox_exporter_checksums_url: "https://github.com/{{ _blackbox_exporter_repo }}/releases/download/v{{ blackbox_exporter_version }}/sha256sums.txt"
 
 blackbox_exporter_web_listen_address: "0.0.0.0:9115"
+blackbox_exporter_web_config:
+  tls_server_config: {}
+  http_server_config: {}
+  basic_auth_users: {}
+
 
 blackbox_exporter_system_user: blackbox-exp
 blackbox_exporter_system_group: "{{ blackbox_exporter_system_user }}"

roles/blackbox_exporter/meta/argument_specs.yml

@@ -50,3 +50,6 @@ argument_specs:
       blackbox_exporter_local_cache_path:
         description: 'Local path to stash the archive and its extraction'
         default: "/tmp/blackbox_exporter-{{ ansible_system | lower }}-{{ _blackbox_exporter_go_ansible_arch }}/{{ blackbox_exporter_version }}"
+      blackbox_exporter_web_config:
+        description: "A Prometheus L(web config yaml,https://github.com/prometheus/exporter-toolkit/blob/master/docs/web-configuration.md) for configuring TLS and auth."
+        type: "dict"

roles/blackbox_exporter/tasks/configure.yml

@@ -7,6 +7,9 @@
     _common_system_user: "{{ blackbox_exporter_system_user }}"
     _common_system_group: "{{ blackbox_exporter_system_group }}"
     _common_config_dir: "{{ blackbox_exporter_config_dir }}"
+    _common_tls_server_config: "{{ blackbox_exporter_web_config.tls_server_config }}"
+    _common_http_server_config: "{{ blackbox_exporter_web_config.http_server_config }}"
+    _common_basic_auth_users: "{{ blackbox_exporter_web_config.basic_auth_users }}"
   tags:
     - blackbox_exporter
     - configure

roles/blackbox_exporter/templates/blackbox_exporter.service.j2

@@ -13,6 +13,9 @@ PermissionsStartOnly=true
 ExecReload=/bin/kill -HUP $MAINPID
 ExecStart={{ blackbox_exporter_binary_install_dir }}/blackbox_exporter \
   --config.file={{ blackbox_exporter_config_dir }}/blackbox_exporter.yml \
+{% if blackbox_exporter_web_config.values() | map('length') | select('gt', 0) | list is any %}
+  --web.config.file={{ blackbox_exporter_config_dir }}/web_config.yml \
+{% endif %}
   {% for flag, flag_value in blackbox_exporter_cli_flags.items() -%}
   --{{ flag }}={{ flag_value }} \
   {% endfor -%}