补齐 OpenBao 内部健康与快照新鲜度告警

Co-authored-by: panxiao81 <[email protected]>
2026-09-25 20:59:36 +00:00
parent 834f654941
commit 7137426e8f
14 changed files with 525 additions and 44 deletions
@@ -0,0 +1,34 @@
+---
+- name: Ensure the snapshot output directory exists
+  ansible.builtin.file:
+    path: "{{ openbao_snapshot_dir }}"
+    state: directory
+    owner: root
+    group: root
+    mode: "0700"
+
+- name: Install the snapshot script
+  ansible.builtin.template:
+    src: bao-snapshot.sh.j2
+    dest: /usr/local/bin/bao-snapshot.sh
+    owner: root
+    group: root
+    mode: "0755"
+
+- name: Install the snapshot systemd service + timer
+  ansible.builtin.template:
+    src: "{{ item }}.j2"
+    dest: "/etc/systemd/system/{{ item }}"
+    owner: root
+    group: root
+    mode: "0644"
+  loop:
+    - openbao-snapshot.service
+    - openbao-snapshot.timer
+
+- name: Enable and start the snapshot timer
+  ansible.builtin.systemd:
+    name: openbao-snapshot.timer
+    state: started
+    enabled: true
+    daemon_reload: true
@@ -35,36 +35,9 @@
  when: (not snap_tok_stat.stat.exists) or (openbao_snapshot_rotate_token | bool)
  no_log: true

- name: Ensure the snapshot output directory exists
-  ansible.builtin.file:
-    path: "{{ openbao_snapshot_dir }}"
-    state: directory
-    owner: root
-    group: root
-    mode: "0700"
+- name: 安装独立的主机与快照指标 exporter
+  ansible.builtin.include_role:
+    name: openbao_monitoring

- name: Install the snapshot script
-  ansible.builtin.template:
-    src: bao-snapshot.sh.j2
-    dest: /usr/local/bin/bao-snapshot.sh
-    owner: root
-    group: root
-    mode: "0755"
-
- name: Install the snapshot systemd service + timer
-  ansible.builtin.template:
-    src: "{{ item }}.j2"
-    dest: "/etc/systemd/system/{{ item }}"
-    owner: root
-    group: root
-    mode: "0644"
-  loop:
-    - openbao-snapshot.service
-    - openbao-snapshot.timer
-
- name: Enable and start the snapshot timer
-  ansible.builtin.systemd:
-    name: openbao-snapshot.timer
-    state: started
-    enabled: true
-    daemon_reload: true
+- name: 部署快照脚本和定时器
+  ansible.builtin.import_tasks: snapshot-runtime.yml