allow unattended upgrades from apt.grafana.com

roles/monitoring/tasks/promtail.yml

@@ -13,6 +13,11 @@
     repo: "deb [signed-by=/etc/apt/keyrings/grafana.gpg] https://apt.grafana.com stable main"
     filename: "grafana"
 
+- name: allow unattended upgrades from the grafana repo
+  template:
+    src: unattended-upgrades-promtail
+    dest: /etc/apt/apt.conf.d/unattended-upgrades-promtail
+
 - name: install promtail
   apt:
     name: promtail

roles/monitoring/templates/unattended-upgrades-promtail

@@ -0,0 +1,3 @@
+Unattended-Upgrade::Origins-Pattern {
+        "site=apt.grafana.com"
+}