feat: manage openbao audit devices

- manage openbao audit devices in the configuration file
- enable audit and audit_raw logs
This commit is contained in:
2025-11-20 19:48:37 +11:00
parent a5b9850e82
commit 60b023dc0f
2 changed files with 14 additions and 20 deletions
+12 -1
View File
@@ -4,7 +4,18 @@ profiles::vault::server::members_lookup: true
profiles::vault::server::data_dir: /data/vault
profiles::vault::server::manage_storage_dir: true
profiles::vault::server::tls_disable: false
profiles::vault::server::audit_log: /data/vault/audit.log
profiles::vault::server::audit_devices:
- file:
audit-file:
options:
file_path: /data/vault/audit_raw.log
log_raw: true
type: request
- file:
audit-file:
options:
file_path: /data/vault/audit.log
log_raw: false
vault::package_name: openbao
vault::package_ensure: latest