Extend NRPE checks for reporting soon-to-expire certificates to Nagios
| Affects | Status | Importance | Assigned to | Milestone | |
|---|---|---|---|---|---|
| Ceph RADOS Gateway Charm |
New
|
Undecided
|
Unassigned | ||
| Charm Helpers |
In Progress
|
Undecided
|
Unassigned | ||
| OpenStack Ceilometer Charm |
New
|
Undecided
|
Unassigned | ||
| OpenStack Cinder Charm |
New
|
Undecided
|
Unassigned | ||
| OpenStack Dashboard Charm |
New
|
Undecided
|
Unassigned | ||
| OpenStack Glance Charm |
New
|
Undecided
|
Unassigned | ||
| OpenStack Heat Charm |
New
|
Undecided
|
Unassigned | ||
| OpenStack Keystone Charm |
New
|
Undecided
|
Unassigned | ||
| OpenStack Neutron API Charm |
In Progress
|
Wishlist
|
Anna Savchenko | ||
| OpenStack Nova Cloud Controller Charm |
New
|
Undecided
|
Unassigned | ||
| OpenStack Swift Proxy Charm |
New
|
Undecided
|
Unassigned | ||
| charm-ovn-central |
New
|
Undecided
|
Unassigned | ||
Bug Description
The idea came out of lp:1914708. There seems to be an easy way to extend the existing NRPE (Nagios remote plugin executor) checks of each charm to get alerts when certificates are about to expire.
Taking charm-neutron-api as an example, but this applies to all charms that report to Nagios and expose an HTTPS API. Thus the common logic should be placed in charm-helpers, [1] which is a library used by all charms.
The charm produces an NRPE config [2] that is used to report to the Nagios charm. One of the NRPE checks [3][4][5] makes use of `check_http`, [6] which could also be used to report on certificate expiration times.
[1] https:/
[2] https:/
[3] https:/
[4] https:/
[5] https:/
[6] https:/
| Changed in vault-charm: | |
| status: | New → In Progress |
| importance: | Undecided → Wishlist |
| summary: |
- Unit status should show when the certificates are about to expire + Extend NRPE checks for reporting soon-to-expire certificates to Nagios |
| description: | updated |
| no longer affects: | vault-charm |
| Changed in charm-helpers: | |
| status: | New → In Progress |
| Changed in charm-neutron-api: | |
| assignee: | nobody → Anna Savchenko (annsavchenko) |
| importance: | Undecided → Wishlist |
| status: | New → In Progress |
| James Troup (elmo) wrote | #1 |
So, err, we have the openstack-