added admin ability to access prometheus directly

templates/prometheus_site.j2

@@ -4,11 +4,22 @@ server {
   server_name {{fqdn}};
 
   location / {
-    if ($ssl_client_s_dn != "CN={{grafana_cn}}" ){
-    return 403;
+    set $deny_access 1;
+{% if admin_cns is defined %}
+{%   for admin_cn in admin_cns %}
+    if ($ssl_client_s_dn = "CN={{admin_cn}}" ){
+      set $deny_access 0;
+    }
+{%   endfor %}
+{% endif %}
+    if ($ssl_client_s_dn = "CN={{grafana_cn}}" ){
+      set $deny_access 0;
     }
     if ($ssl_client_verify != "SUCCESS"){
-    return 403;
+      set $deny_access 1;
+    }
+    if ($deny_access != 0){
+      return 403;
     }
     proxy_pass  http://[::1]:9090;
   }