GeneralBots/botserver
2
1
Fork 0
Code Issues Pull requests Projects Releases 323 Packages Wiki Activity Actions

fix(bootstrap): start_all() must re-bootstrap when Vault unseal fails

Browse source 
When start_all() detects Vault init.json is missing (unseal fails),
it now:
1. Kills all stack processes
2. Cleans the stack directory
3. Runs full bootstrap()
4. Returns (bootstrap starts all services)

Also made SecretsManager init failure in start_all() a hard error
instead of a warning - if Vault is supposed to be working but
SecretsManager can't connect, that's a fatal error.
This commit is contained in:
Rodrigo Rodriguez (Pragmatismo) 2025-12-09 08:56:58 -03:00
parent 1e98083d13
commit a2b091914f
1 changed files with 20 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

23
src/core/bootstrap/mod.rs
View file

@ -155,9 +155,22 @@ impl BootstrapManager {
}
}
// Try to unseal Vault
// Try to unseal Vault - if this fails, we need to re-bootstrap
if let Err(e) = self.ensure_vault_unsealed().await {
warn!("Vault unseal check: {}", e);
warn!("Vault unseal failed: {} - running re-bootstrap", e);
// Kill all processes and run fresh bootstrap
Self::kill_stack_processes();
if let Err(e) = Self::clean_stack_directory() {
error!("Failed to clean stack directory: {}", e);
}
// Run bootstrap from scratch
self.bootstrap().await?;
// After bootstrap, services are already running
info!("Re-bootstrap complete from start_all");
return Ok(());
}
// Initialize SecretsManager so other code can use Vault
@ -165,7 +178,11 @@ impl BootstrapManager {
match init_secrets_manager().await {
Ok(_) => info!("SecretsManager initialized successfully"),
Err(e) => {
warn!("Failed to initialize SecretsManager: {}", e);
error!("Failed to initialize SecretsManager: {}", e);
return Err(anyhow::anyhow!(
"SecretsManager initialization failed: {}",
e
));
}
}
}