chore(sre): reconcile host ansible readiness
This commit is contained in:
@@ -486,23 +486,34 @@
|
||||
"title": "Host/systemd 專屬 Ansible executor inventory",
|
||||
"owner_lane": "HostAutomation",
|
||||
"risk": "high",
|
||||
"status": "in_progress",
|
||||
"status": "source_implemented_runtime_pending",
|
||||
"dependencies": [
|
||||
"AIA-SRE-004"
|
||||
],
|
||||
"source_refs": [
|
||||
"infra/ansible/inventory/hosts.yml",
|
||||
"apps/api/src/services/awooop_ansible_audit_service.py"
|
||||
"infra/ansible/playbooks/111-ollama-fallback.yml",
|
||||
"apps/api/src/services/awooop_ansible_audit_service.py",
|
||||
"apps/api/src/services/awooop_ansible_check_mode_service.py",
|
||||
"apps/api/src/services/host_ansible_controlled_executor.py",
|
||||
"apps/api/src/services/awooop_ansible_post_verifier.py",
|
||||
"apps/api/src/services/awooop_ansible_learning_writeback.py"
|
||||
],
|
||||
"executor": "host_ansible_executor",
|
||||
"verifier": "host_runtime_independent_verifier",
|
||||
"rollback": "catalog-specific compensating action",
|
||||
"exit_condition": "every host action has one exact inventory host, runtime manager identity, check mode, bounded apply and postcondition; host111 uses its LaunchAgent catalog and is verified locally plus from host120/host121",
|
||||
"confirmed_truth": [
|
||||
"all 13 auto-apply and all 16 check-mode catalogs are registered with independent postconditions; the only no-check catalog is explicit break-glass restore-password-auth",
|
||||
"Host111 Ollama uses one exact LaunchAgent catalog with host111 plus host120/host121 verifier origins and no Host110 fallback",
|
||||
"check-mode and bounded apply are separate receipts, and executor return code alone cannot satisfy the post-verifier",
|
||||
"inventory transport uses fixed strict host identities and does not permit accept-new host-key behavior"
|
||||
],
|
||||
"runtime_gaps": [
|
||||
"host111 LaunchAgent catalog and sensor are source candidates without production apply receipt",
|
||||
"host120 and host121 independent origin probes have no same-run production verifier receipt"
|
||||
],
|
||||
"next_action": "close broad catalogs, then check/apply the exact host111 LaunchAgent playbook and verify local, host120 and host121 readbacks plus the canonical sensor rule"
|
||||
"next_action": "deploy one exact source revision through the authorized Agent99/Ansible release lane, then check/apply the Host111 LaunchAgent catalog and independently read back host111 plus host120/host121 and the canonical sensor; retain no-write or rollback terminal on any mismatch"
|
||||
},
|
||||
{
|
||||
"id": "AIA-SRE-009",
|
||||
@@ -861,11 +872,11 @@
|
||||
"P1": 2
|
||||
},
|
||||
"by_status": {
|
||||
"source_implemented_runtime_pending": 12,
|
||||
"in_progress": 2,
|
||||
"source_implemented_runtime_pending": 13,
|
||||
"in_progress": 1,
|
||||
"planned": 4
|
||||
},
|
||||
"source_implemented_items": 12,
|
||||
"source_implemented_items": 13,
|
||||
"runtime_closed_items": 0,
|
||||
"program_completion_percent": 0,
|
||||
"asset_coverage_status": "partial",
|
||||
|
||||
Reference in New Issue
Block a user