479 lines
12 KiB
YAML
479 lines
12 KiB
YAML
# Telegram 分類按鈕 Action 規格註冊表
|
||
# ============================================
|
||
# Phase 5 Sprint 5.0 — 2026-04-14 Claude Sonnet 4.6
|
||
# 相關: docs/superpowers/plans/2026-04-14-PHASE-5-category-buttons-completion.md
|
||
#
|
||
# 格式:
|
||
# actions:
|
||
# <action_name>:
|
||
# label: <UI 顯示文字>
|
||
# emoji: <按鈕 emoji>
|
||
# risk: low | medium | high | critical
|
||
# callback_format: info | nonce # info=2-part (查類), nonce=4-part (寫類)
|
||
# category: <alert_category> # 綁定於 classify_alert_early 輸出
|
||
# mcp:
|
||
# provider: k8s | ssh | prometheus | signoz | database | internal
|
||
# tool: <MCP tool name>
|
||
# params: # 參數模板 (支援 {incident_id}/{labels.xxx}/{signals[0].xxx})
|
||
# <key>: <template>
|
||
# reply_format: text | code | url | truncated # 執行結果 reply 樣式
|
||
# requires_multi_sig: false # secops 類設 true
|
||
# timeout_sec: 10 # MCP 呼叫 timeout
|
||
# description: <說明>
|
||
|
||
version: "1.0"
|
||
last_updated: "2026-05-01"
|
||
|
||
actions:
|
||
# ==========================================================================
|
||
# 查類按鈕（無副作用，2-part info callback）
|
||
# ==========================================================================
|
||
|
||
check_process:
|
||
label: "查程序"
|
||
emoji: "🔍"
|
||
risk: low
|
||
callback_format: info
|
||
category: host_resource
|
||
mcp:
|
||
provider: ssh
|
||
tool: ssh_get_top_processes
|
||
params:
|
||
host: "{labels.instance}"
|
||
limit: 10
|
||
reply_format: code
|
||
timeout_sec: 8
|
||
description: "列出主機上 CPU 最高的 10 個程序"
|
||
|
||
check_log_nginx:
|
||
label: "查 Nginx Log"
|
||
emoji: "📋"
|
||
risk: low
|
||
callback_format: info
|
||
category: network
|
||
mcp:
|
||
provider: ssh
|
||
tool: ssh_get_nginx_error_log
|
||
params:
|
||
host: "{labels.instance}"
|
||
lines: 50
|
||
reply_format: truncated
|
||
timeout_sec: 10
|
||
description: "最後 50 行 Nginx error log"
|
||
|
||
check_log_container:
|
||
label: "查容器 Log"
|
||
emoji: "📋"
|
||
risk: low
|
||
callback_format: info
|
||
category: devops_tool
|
||
mcp:
|
||
provider: ssh
|
||
tool: ssh_get_container_logs
|
||
params:
|
||
host: "{labels.instance}"
|
||
container: "{labels.container}"
|
||
lines: 50
|
||
reply_format: truncated
|
||
timeout_sec: 10
|
||
description: "最後 50 行容器 stdout/stderr log"
|
||
|
||
check_log_minio:
|
||
label: "查 MinIO Log"
|
||
emoji: "📋"
|
||
risk: low
|
||
callback_format: info
|
||
category: storage
|
||
mcp:
|
||
provider: ssh
|
||
tool: ssh_get_container_logs
|
||
params:
|
||
host: "192.168.0.188"
|
||
container: "minio"
|
||
lines: 50
|
||
reply_format: truncated
|
||
timeout_sec: 10
|
||
description: "MinIO 容器最後 50 行 log"
|
||
|
||
check_port:
|
||
label: "查 Port"
|
||
emoji: "🔌"
|
||
risk: low
|
||
callback_format: info
|
||
category: network
|
||
mcp:
|
||
provider: ssh
|
||
tool: ssh_check_port
|
||
params:
|
||
host: "{labels.instance}"
|
||
port: "{labels.port}"
|
||
reply_format: text
|
||
timeout_sec: 5
|
||
description: "檢查主機上指定 port 是否 LISTEN"
|
||
|
||
check_health:
|
||
label: "查健康狀態"
|
||
emoji: "🔍"
|
||
risk: low
|
||
callback_format: info
|
||
category: external_site
|
||
mcp:
|
||
provider: prometheus
|
||
tool: prometheus_query
|
||
params:
|
||
query: 'probe_success{{instance="{labels.instance}"}}'
|
||
reply_format: text
|
||
timeout_sec: 5
|
||
description: "Blackbox probe 健康狀態"
|
||
|
||
check_pod_logs:
|
||
label: "查 Pod Log"
|
||
emoji: "📋"
|
||
risk: low
|
||
callback_format: info
|
||
category: kubernetes
|
||
mcp:
|
||
provider: k8s
|
||
tool: k8s_get_pod_logs
|
||
params:
|
||
namespace: "{labels.namespace}"
|
||
pod_name: "{labels.pod}"
|
||
tail: 50
|
||
reply_format: truncated
|
||
timeout_sec: 8
|
||
description: "Pod 最後 50 行 log"
|
||
|
||
describe_pod:
|
||
label: "詳細 Pod"
|
||
emoji: "📜"
|
||
risk: low
|
||
callback_format: info
|
||
category: kubernetes
|
||
mcp:
|
||
provider: k8s
|
||
tool: k8s_describe_pod
|
||
params:
|
||
namespace: "{labels.namespace}"
|
||
pod_name: "{labels.pod}"
|
||
reply_format: truncated
|
||
timeout_sec: 5
|
||
description: "kubectl describe pod 完整資訊"
|
||
|
||
open_signoz:
|
||
label: "查 SignOz"
|
||
emoji: "🔍"
|
||
risk: low
|
||
callback_format: info
|
||
category: business
|
||
mcp:
|
||
provider: internal
|
||
tool: build_signoz_url
|
||
params:
|
||
service: "{labels.service}"
|
||
reply_format: url
|
||
timeout_sec: 1
|
||
description: "返回 SignOz deeplink"
|
||
|
||
open_flywheel:
|
||
label: "飛輪面板"
|
||
emoji: "📊"
|
||
risk: low
|
||
callback_format: info
|
||
category: flywheel_health
|
||
mcp:
|
||
provider: internal
|
||
tool: build_flywheel_url
|
||
params: {}
|
||
reply_format: url
|
||
timeout_sec: 1
|
||
description: "返回飛輪儀表板 URL"
|
||
|
||
backup_check_host_disk:
|
||
label: "查主機磁碟"
|
||
emoji: "💾"
|
||
risk: low
|
||
callback_format: info
|
||
category: backup_failure
|
||
mcp:
|
||
provider: ssh
|
||
tool: ssh_get_disk_usage
|
||
params:
|
||
host: "{labels.instance}"
|
||
reply_format: code
|
||
timeout_sec: 8
|
||
description: "備份失敗時檢查主機磁碟容量與 Docker 目錄大小"
|
||
|
||
backup_check_jobs:
|
||
label: "查備份 Job"
|
||
emoji: "📦"
|
||
risk: low
|
||
callback_format: info
|
||
category: backup_failure
|
||
mcp:
|
||
provider: k8s
|
||
tool: kubectl_get
|
||
params:
|
||
namespace: "awoooi-prod"
|
||
resource: "jobs"
|
||
reply_format: truncated
|
||
timeout_sec: 8
|
||
description: "列出 awoooi-prod 內的備份相關 Job 狀態"
|
||
|
||
backup_check_velero:
|
||
label: "查 Velero"
|
||
emoji: "🧰"
|
||
risk: low
|
||
callback_format: info
|
||
category: backup_failure
|
||
mcp:
|
||
provider: k8s
|
||
tool: kubectl_get
|
||
params:
|
||
namespace: "velero"
|
||
resource: "backups.velero.io"
|
||
reply_format: truncated
|
||
timeout_sec: 8
|
||
description: "列出 Velero backup CR 狀態"
|
||
|
||
# ==========================================================================
|
||
# 寫類按鈕（有副作用，4-part nonce callback）
|
||
# ==========================================================================
|
||
|
||
k8s_restart:
|
||
label: "重啟"
|
||
emoji: "🔄"
|
||
risk: medium
|
||
callback_format: nonce
|
||
category: kubernetes
|
||
mcp:
|
||
provider: k8s
|
||
tool: kubectl_restart
|
||
params:
|
||
namespace: "{labels.namespace}"
|
||
deployment: "{labels.deployment}"
|
||
reply_format: text
|
||
timeout_sec: 30
|
||
description: "kubectl rollout restart deployment"
|
||
|
||
k8s_scale_up:
|
||
label: "擴容 +1"
|
||
emoji: "📈"
|
||
risk: medium
|
||
callback_format: nonce
|
||
category: kubernetes
|
||
mcp:
|
||
provider: k8s
|
||
tool: kubectl_scale
|
||
params:
|
||
namespace: "{labels.namespace}"
|
||
deployment: "{labels.deployment}"
|
||
replicas_delta: 1
|
||
reply_format: text
|
||
timeout_sec: 10
|
||
description: "副本數 +1（單調遞增）"
|
||
|
||
k8s_scale_down:
|
||
label: "縮容 -1"
|
||
emoji: "📉"
|
||
risk: medium
|
||
callback_format: nonce
|
||
category: kubernetes
|
||
mcp:
|
||
provider: k8s
|
||
tool: kubectl_scale
|
||
params:
|
||
namespace: "{labels.namespace}"
|
||
deployment: "{labels.deployment}"
|
||
replicas_delta: -1
|
||
min_replicas: 1 # 禁止 scale to 0
|
||
reply_format: text
|
||
timeout_sec: 10
|
||
description: "副本數 -1（禁止到 0）"
|
||
|
||
k8s_rollback:
|
||
label: "回滾"
|
||
emoji: "⏪"
|
||
risk: high
|
||
callback_format: nonce
|
||
category: kubernetes
|
||
mcp:
|
||
provider: k8s
|
||
tool: kubectl_rollout_undo # 需 Sprint 5.3 新增此 MCP tool
|
||
params:
|
||
namespace: "{labels.namespace}"
|
||
deployment: "{labels.deployment}"
|
||
reply_format: text
|
||
timeout_sec: 60
|
||
description: "kubectl rollout undo（回到上一版）"
|
||
|
||
host_restart_service:
|
||
label: "重啟服務"
|
||
emoji: "🔄"
|
||
risk: high
|
||
callback_format: nonce
|
||
category: host_resource
|
||
mcp:
|
||
provider: ssh
|
||
tool: ssh_systemctl_restart
|
||
params:
|
||
host: "{labels.instance}"
|
||
service: "{labels.service}"
|
||
reply_format: text
|
||
timeout_sec: 30
|
||
description: "systemctl restart 服務（主機層）"
|
||
|
||
host_clear_log:
|
||
label: "清 Log"
|
||
emoji: "🗑"
|
||
risk: low
|
||
callback_format: nonce
|
||
category: host_resource
|
||
mcp:
|
||
provider: ssh
|
||
tool: ssh_clear_docker_logs
|
||
params:
|
||
host: "{labels.instance}"
|
||
container: "{labels.container}"
|
||
reply_format: text
|
||
timeout_sec: 10
|
||
description: "清空容器 log file"
|
||
|
||
docker_restart:
|
||
label: "重啟容器"
|
||
emoji: "🔄"
|
||
risk: high
|
||
callback_format: nonce
|
||
category: devops_tool
|
||
mcp:
|
||
provider: ssh
|
||
tool: ssh_docker_restart
|
||
params:
|
||
host: "{labels.instance}"
|
||
container: "{labels.container}"
|
||
reply_format: text
|
||
timeout_sec: 30
|
||
description: "docker restart <container>"
|
||
|
||
minio_restart:
|
||
label: "重啟 MinIO"
|
||
emoji: "🔄"
|
||
risk: high
|
||
callback_format: nonce
|
||
category: storage
|
||
mcp:
|
||
provider: ssh
|
||
tool: ssh_docker_restart
|
||
params:
|
||
host: "192.168.0.188"
|
||
container: "minio"
|
||
reply_format: text
|
||
timeout_sec: 30
|
||
description: "重啟 MinIO Docker 容器"
|
||
|
||
reload_nginx:
|
||
label: "重載 Nginx"
|
||
emoji: "🔄"
|
||
risk: low
|
||
callback_format: nonce
|
||
category: network
|
||
mcp:
|
||
provider: ssh
|
||
tool: ssh_reload_nginx
|
||
params:
|
||
host: "{labels.instance}"
|
||
reply_format: text
|
||
timeout_sec: 10
|
||
description: "nginx -s reload（不停機）"
|
||
|
||
renew_cert:
|
||
label: "更新憑證"
|
||
emoji: "🔐"
|
||
risk: medium
|
||
callback_format: nonce
|
||
category: ssl_cert
|
||
mcp:
|
||
provider: ssh
|
||
tool: ssh_renew_ssl
|
||
params:
|
||
host: "{labels.instance}"
|
||
domain: "{labels.domain}"
|
||
reply_format: text
|
||
timeout_sec: 60
|
||
description: "certbot renew"
|
||
|
||
# ==========================================================================
|
||
# 資安按鈕（CRITICAL，Multi-Sig 必要）
|
||
# ==========================================================================
|
||
|
||
secops_isolate:
|
||
label: "申請隔離"
|
||
emoji: "🚫"
|
||
risk: critical
|
||
callback_format: nonce
|
||
category: secops
|
||
requires_multi_sig: true
|
||
mcp:
|
||
provider: internal
|
||
tool: record_authorization
|
||
params:
|
||
user_id: "{callback.user_id}"
|
||
source: "{labels.instance}"
|
||
action: "request_network_isolation"
|
||
reply_format: text
|
||
timeout_sec: 30
|
||
description: "記錄雙人授權隔離請求；實際 NetworkPolicy 變更需走 SecOps Runbook"
|
||
|
||
secops_block_ip:
|
||
label: "封鎖來源 IP"
|
||
emoji: "⛔"
|
||
risk: critical
|
||
callback_format: nonce
|
||
category: secops
|
||
requires_multi_sig: true
|
||
mcp:
|
||
provider: internal
|
||
tool: record_authorization
|
||
params:
|
||
user_id: "{callback.user_id}"
|
||
source: "{labels.instance}"
|
||
source_ip: "{labels.attacker_ip}"
|
||
action: "request_ip_block"
|
||
reply_format: text
|
||
timeout_sec: 30
|
||
description: "iptables DROP 來源 IP"
|
||
|
||
secops_evict:
|
||
label: "強制驅逐 Pod"
|
||
emoji: "🔄"
|
||
risk: critical
|
||
callback_format: nonce
|
||
category: secops
|
||
requires_multi_sig: true
|
||
mcp:
|
||
provider: k8s
|
||
tool: kubectl_delete
|
||
params:
|
||
namespace: "{labels.namespace}"
|
||
resource_type: pod
|
||
name: "{labels.pod}"
|
||
reply_format: text
|
||
timeout_sec: 30
|
||
description: "kubectl delete pod（會自動重建）"
|
||
|
||
secops_authorize:
|
||
label: "確認授權"
|
||
emoji: "✅"
|
||
risk: high
|
||
callback_format: nonce
|
||
category: secops
|
||
requires_multi_sig: false # 確認授權不需 multi-sig
|
||
mcp:
|
||
provider: internal
|
||
tool: record_authorization
|
||
params:
|
||
user_id: "{callback.user_id}"
|
||
source: "{labels.instance}"
|
||
reply_format: text
|
||
timeout_sec: 5
|
||
description: "記錄授權，後續同 source 不再告警（24h）"
|