feat: manage openbao audit devices

- manage openbao audit devices in the configuration file
- enable audit and audit_raw logs
- enable api access to creating audit devices
- restart vault service when changing the configuration file
This commit is contained in:
2025-11-20 19:48:37 +11:00
parent a5b9850e82
commit 81d68c571e
2 changed files with 19 additions and 22 deletions
+14 -1
View File
@@ -4,7 +4,20 @@ profiles::vault::server::members_lookup: true
profiles::vault::server::data_dir: /data/vault
profiles::vault::server::manage_storage_dir: true
profiles::vault::server::tls_disable: false
profiles::vault::server::audit_log: /data/vault/audit.log
profiles::vault::server::audit_devices:
- file:
audit_raw:
options:
path: audit_raw
file_path: /data/vault/audit_raw.log
log_raw: "true"
type: request
- file:
audit_file:
options:
path: audit_file
file_path: /data/vault/audit.log
log_raw: "false"
vault::package_name: openbao
vault::package_ensure: latest