SSL certificates

This section describes the alerts for the OpenStack SSL certificates. By default, these alerts are disabled. To enable them, set openstack.externalFQDNs.enabled to true. For details, see Configuration options for SSL certificates.

• OpenstackSSLCertExpirationHigh

• OpenstackSSLCertExpirationMedium

• OpenstackSSLProbesFailing

• OpenstackSSLProbesTargetOutage

---

OpenstackSSLCertExpirationHigh

Severity	Critical
Summary	SSL certificate for an OpenStack service expires in 10 days.
Description	The SSL certificate for the OpenStack {{ $labels.namespace }}/{{ $labels.service_name }} service endpoints expires in less than 10 days.

OpenstackSSLCertExpirationMedium

Severity	Major
Summary	SSL certificate for an OpenStack service expires in 30 days.
Description	The SSL certificate for the OpenStack {{ $labels.namespace  }}/{{ $labels.service_name }} service endpoints expires in less than 30 days.

OpenstackSSLProbesFailing

Severity	Critical
Summary	SSL certificate probes for an OpenStack service are failing.
Description	The SSL certificate probes for the OpenStack {{ $labels.namespace }}/{{ $labels.service_name }} service endpoints are failing.

OpenstackSSLProbesTargetOutage

Severity	Critical
Summary	OpenStack {{ $labels.service_name } SSL ingress target outage.
Description	Prometheus fails to probe the OpenStack {{ $labels.service_name }} service SSL ingress target.