准备 OpenBao 受鉴权监控与快照续期修复

2026-09-25 20:02:22 +00:00
parent 52322116f9
commit 005d8341ed
11 changed files with 202 additions and 10 deletions
@@ -96,3 +96,6 @@ openbao_snapshot_oncalendar: "*-*-* 02:00:00"
 #   3. terraform apply                          # mounts, roles, policies
 #   4. ansible-playbook bootstrap-openbao.yml   # CA material, OIDC secret, snapshots
 openbao_config_managed_by_terraform: true
+
+# 仅在维护窗口显式启用，用于替换已失效的快照 token；不读取/打印 token。
+openbao_snapshot_rotate_token: false