Files

T

DerLinkman 30f3e9a4c6 rename dmc12 inventory to cloudlorean and vault admin_password

- replace inventory/dmc12.yml with cloudlorean.yml (+ group_vars) and update
  all README/AGENTS call examples and the inventory table
- move admin_password hash into encrypted vault.yml; remove plaintext copies
  from roles/bootstrap/defaults and group_vars/external.yml
- bootstrap.yml loads vault.yml via vars_files (same pattern as monitoring)
- monitoring: PSK config/registration updates, docker role defaults,
  os-updates logging/reboot refinements, ansible.cfg/execute.sh tweaks
- add .project-wiki knowledge base and .github agent instructions

2026-09-09 14:14:18 +02:00

1.7 KiB

Raw Blame History

id, type, status, title, created, updated, tags, related, source_paths, confidence

type

status

title

created

updated

Healthcheck Role

Responsibility

Post-update quality gate: verify that every Docker container on the host is running and record the result in the update log.

Source Paths

roles/healthcheck/tasks/main.yml (single file, no subtasks)
roles/healthcheck/defaults/main.yml

Public Interfaces

Playbook: playbooks/os-updates-deb.yml (runs after os-updates)
Key variables: healthcheck_fail_on_unhealthy (default false), healthcheck_logging_enabled (derives from os_update_logging_enabled), healthcheck_log_file (reuses os-updates log path conventions).

Important Flows

Detect Docker binary (which docker, tolerant).
If Docker present: list all container names and running container names (docker ps -a / docker ps --filter status=running), compute non-running set.
If Docker absent: neutral result (0 containers, passed).
Append a quality_gate: section (docker_installed, total/running counts, non-running list, healthcheck_passed) to logs/<inventory>/<hostname>/update.log via blockinfile delegated to localhost.
Fail the play when healthcheck_fail_on_unhealthy is true and any container is not running.

Dependencies

Shares log file conventions with os-updates.

Tests

None automated.

Notes For Agents

The gate does not fail by default; set healthcheck_fail_on_unhealthy to make failures visible in CI-like runs.

1.7 KiB Raw Blame History