SSL certificates

Warning

The alerts in this section were replaced by the corresponding alerts in the Public API probes section. For details, see StackLight deprecation notes: Monitoring of OpenStack Ingress Controller.

This section describes the alerts for the OpenStack SSL certificates. By default, these alerts are disabled. To enable them, set openstack.externalFQDNs.enabled to true. For details, see Configuration options for SSL certificates.

OpenstackSSLCertExpirationHigh

Deprecated in favor of PublicApiCertExpirationHigh

Severity

Critical

Summary

SSL certificate for an OpenStack service expires on {{ $value | humanizeTimestamp }}

Description

The SSL certificate for the OpenStack {{ $labels.namespace }}/{{ $labels.service_name }} service endpoints expires on {{ $value | humanizeTimestamp }}, less than 10 days are left.

OpenstackSSLCertExpirationMedium

Deprecated in favor of PublicApiCertExpirationMedium

Severity

Major

Summary

SSL certificate for an OpenStack service expires on {{ $value | humanizeTimestamp }}

Description

The SSL certificate for the OpenStack {{ $labels.namespace }}/{{ $labels.service_name }} service endpoints expires on {{ $value | humanizeTimestamp }}, less than 30 days are left.

OpenstackSSLProbesFailing

Deprecated in favor of PublicApiProbeFailing

Severity

Critical

Summary

SSL certificate probes for an OpenStack service are failing.

Description

The SSL certificate probes for the OpenStack {{ $labels.namespace }}/{{ $labels.service_name }} service endpoints are failing.

OpenstackSSLProbesTargetOutage

Deprecated in favor of PublicApiTargetsOutage

Severity

Critical

Summary

OpenStack {{ $labels.service_name }} SSL ingress target outage.

Description

Prometheus fails to probe the OpenStack {{ $labels.service_name }} service SSL ingress target.