allow ACLs in stats

[magenbrot]

Hi,

this MR allows to use ACLs in stats. This is useful if you have a userlist with 'read-only' and 'admin' users.

Here's an example configuration (haproxy_stats_auth needs to be empty):

# Userlist
haproxy_userlist:
  - stats-auth:
      groups:
        - "admin users admin"
        - "readonly users user"
      users:
        - "admin insecure-password opqrstuvw"
        - "user insecure-password abcdefghi"

# Stats
haproxy_stats_address: "::"
haproxy_stats_port: 8081
haproxy_stats_ssl: true
haproxy_stats_uri: /stats
haproxy_stats_acls:
  - "AUTH http_auth(stats-auth)"
  - "AUTH_ADMIN http_auth_group(stats-auth) admin"
haproxy_stats_options:
  - refresh 5s
  - show-legends
  - show-node
  - http-request auth unless AUTH
  - admin if AUTH_ADMIN
haproxy_stats_auth:

[goldyfruit]

Hi @magenbrot

Could you please update the defaults.yml and README.md to reflect your changes as well?

Thanks for the PR.

[magenbrot]

Hi @goldyfruit,
sure, I've added an empty value for the new variable to the defaults.yml and an example section to the README.md

[goldyfruit]

Good job!