SSL certificates

SSL certificates

This section describes the alerts for SSL certificates.

Warning

Monitoring of the functionality is available starting from the MCP 2019.2.3 update.


CertificateExpirationWarning

Available starting from the 2019.2.3 maintenance update

Severity

Warning

Summary

The {{ $labels.source }} certificate on the {{ $labels.host }} node expires in less than 60 days.

Raise condition

x509_cert_expiry / (24 * 60 * 60) < 60

Description

Raises when a certificate on a node expires in less than 60 days. The host and source labels in the raised alert contain the host name of the affected node and the path to the certificate.

Troubleshooting

Update the certificates.

Tuning

Not required

CertificateExpirationCritical

Available starting from the 2019.2.3 maintenance update

Severity

Critical

Summary

The {{ $labels.source }} certificate on the {{ $labels.host }} node expires in less than 30 days.

Raise condition

x509_cert_expiry / (24 * 60 * 60) < 30

Description

Raises when a certificate on a node expires in less than 30 days. The host and source labels in the raised alert contain the host name of the affected node and the path to the certificate.

Troubleshooting

Update the certificates.

Tuning

Not required