SSL certificates

This section describes the alerts for the OpenStack SSL certificates. By default, these alerts are disabled. To enable them, set openstack.externalFQDNs.enabled to true. For details, see Configuration options for SSL certificates.

• OpenstackSSLCertExpirationHigh

• OpenstackSSLCertExpirationMedium

• OpenstackSSLProbesFailing

• OpenstackSSLProbesTargetOutage

---

OpenstackSSLCertExpirationHigh

Severity	Critical
Summary	SSL certificate for an OpenStack service expires on {{ $value | humanizeTimestamp }}
Description	The SSL certificate for the OpenStack {{ $labels.namespace }}/{{ $labels.service_name }} service endpoints expires on {{ $value | humanizeTimestamp }}, less than 10 days are left.

OpenstackSSLCertExpirationMedium

Severity	Major
Summary	SSL certificate for an OpenStack service expires on {{ $value | humanizeTimestamp }}
Description	The SSL certificate for the OpenStack {{ $labels.namespace }}/{{ $labels.service_name }} service endpoints expires on {{ $value | humanizeTimestamp }}, less than 30 days are left.

OpenstackSSLProbesFailing

Severity	Critical
Summary	SSL certificate probes for an OpenStack service are failing.
Description	The SSL certificate probes for the OpenStack {{ $labels.namespace }}/{{ $labels.service_name }} service endpoints are failing.

OpenstackSSLProbesTargetOutage

Severity	Critical
Summary	OpenStack {{ $labels.service_name } SSL ingress target outage.
Description	Prometheus fails to probe the OpenStack {{ $labels.service_name }} service SSL ingress target.