fix(recovery): package Wazuh verifier snapshots

This commit is contained in:
ogt
2026-07-14 10:35:32 +08:00
parent e71403f50b
commit 7282dad5a9
2 changed files with 7 additions and 1 deletions

View File

@@ -222,6 +222,8 @@ create_payload() {
ops/maintenance \
ops/monitoring \
ops/reboot-recovery \
docs/security/wazuh-managed-host-coverage-gate.snapshot.json \
docs/security/wazuh-agent-visibility-runtime-gate.snapshot.json \
docs/runbooks/PUBLIC-MAINTENANCE-FALLBACK-RUNBOOK.md
}
@@ -232,7 +234,7 @@ case "$MODE" in
cat <<DRYRUN
DRY_RUN=1
would_create_tarball_from=$ROOT_DIR/scripts/reboot-recovery,$ROOT_DIR/scripts/security
would_include_source_gates=$ROOT_DIR/apps/api/migrations/awooop_conversation_event_hot_path_indexes_2026-07-01.sql,$ROOT_DIR/ops/nginx,$ROOT_DIR/ops/maintenance,$ROOT_DIR/ops/monitoring,$ROOT_DIR/ops/reboot-recovery,$ROOT_DIR/docs/runbooks/PUBLIC-MAINTENANCE-FALLBACK-RUNBOOK.md
would_include_source_gates=$ROOT_DIR/apps/api/migrations/awooop_conversation_event_hot_path_indexes_2026-07-01.sql,$ROOT_DIR/ops/nginx,$ROOT_DIR/ops/maintenance,$ROOT_DIR/ops/monitoring,$ROOT_DIR/ops/reboot-recovery,$ROOT_DIR/docs/security/wazuh-managed-host-coverage-gate.snapshot.json,$ROOT_DIR/docs/security/wazuh-agent-visibility-runtime-gate.snapshot.json,$ROOT_DIR/docs/runbooks/PUBLIC-MAINTENANCE-FALLBACK-RUNBOOK.md
would_copy_tarball_to=$HOST:$REMOTE_TARBALL
would_enable_timer=${UNIT_NAME}.timer
would_start_service_once=$RUN_ONCE

View File

@@ -28,6 +28,8 @@ def test_installer_dry_run_exposes_apply_rollback_and_verify_contract() -> None:
assert "awooop_conversation_event_hot_path_indexes_2026-07-01.sql" in result.stdout
assert "ops/nginx" in result.stdout
assert "ops/reboot-recovery" in result.stdout
assert "wazuh-managed-host-coverage-gate.snapshot.json" in result.stdout
assert "wazuh-agent-visibility-runtime-gate.snapshot.json" in result.stdout
assert "would_enable_timer=awoooi-reboot-auto-recovery-slo.timer" in result.stdout
@@ -65,6 +67,8 @@ def test_installer_is_limited_to_verifier_timer_not_product_restarts() -> None:
assert "ops/reboot-recovery" in text
assert "ops/maintenance" in text
assert "ops/monitoring" in text
assert "docs/security/wazuh-managed-host-coverage-gate.snapshot.json" in text
assert "docs/security/wazuh-agent-visibility-runtime-gate.snapshot.json" in text
assert "PUBLIC-MAINTENANCE-FALLBACK-RUNBOOK.md" in text
assert "ServerAliveInterval" in text
assert "ServerAliveCountMax" in text