mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2026-11-06 19:01:54 +00:00
evangelostsak
71e4437634
The lookup now returns only scraped roles, so the fragment is rules and nothing else.
15 lines
603 B
Django/Jinja
15 lines
603 B
Django/Jinja
- name: openbao_seal
|
|
interval: 30s
|
|
rules:
|
|
- alert: OpenBaoSealed
|
|
expr: vault_core_active{job="openbao"} == 0 or absent(vault_core_active{job="openbao"})
|
|
for: 2m
|
|
labels:
|
|
severity: critical
|
|
annotations:
|
|
summary: "OpenBao is sealed or unreachable"
|
|
description: >
|
|
OpenBao has not reported an active, unsealed core for more than 2 minutes.
|
|
Secrets, PKI issuance and machine logins are unavailable while it is sealed.
|
|
Check the container and confirm the static seal key reached its environment.
|