Ceph

[ceph: root@vm-00 /]# cat grafana.yaml 
service_type: grafana
service_name: grafana
placement:
  count: 1
spec:
  anonymous_access: False
  initial_admin_password: password
  protocol: https
[ceph: root@vm-00 /]# 
[ceph: root@vm-00 /]# 
[ceph: root@vm-00 /]# ceph orch apply -i grafana.yaml 
Scheduled grafana update...
[ceph: root@vm-00 /]# 
[ceph: root@vm-00 /]# 
[ceph: root@vm-00 /]# ceph orch ls grafana --export               
service_type: grafana
service_name: grafana
placement:
  count: 1
spec:
  anonymous_access: true
  initial_admin_password: password
  protocol: https

This seems to be because it is a bool that defaults to true, which in hindsight was a bad idea. However, it has been merged and backported to the reef and quincy branches for over a year now, so it's hard to change the attribute. I think for this case we may need special handling when converting grafana specs from python objects to JSON serializable dicts.