2021-11-04 17:01:50 |
Aurelien Lourot |
bug |
|
|
added bug |
2021-11-04 17:02:00 |
Aurelien Lourot |
vault-charm: status |
New |
In Progress |
|
2021-11-04 17:02:03 |
Aurelien Lourot |
vault-charm: importance |
Undecided |
Wishlist |
|
2021-11-09 16:57:39 |
Aurelien Lourot |
bug task added |
|
charm-neutron-api |
|
2021-11-09 16:58:42 |
Aurelien Lourot |
bug task added |
|
charm-cinder |
|
2021-11-09 16:58:56 |
Aurelien Lourot |
bug task added |
|
charm-openstack-dashboard |
|
2021-11-09 16:59:13 |
Aurelien Lourot |
bug task added |
|
charm-glance |
|
2021-11-09 16:59:28 |
Aurelien Lourot |
bug task added |
|
charm-ceph-radosgw |
|
2021-11-09 16:59:41 |
Aurelien Lourot |
bug task added |
|
charm-ceilometer |
|
2021-11-09 16:59:54 |
Aurelien Lourot |
bug task added |
|
charm-nova-cloud-controller |
|
2021-11-09 17:00:06 |
Aurelien Lourot |
bug task added |
|
charm-heat |
|
2021-11-09 17:00:24 |
Aurelien Lourot |
bug task added |
|
charm-keystone |
|
2021-11-09 17:00:36 |
Aurelien Lourot |
bug task added |
|
charm-swift-proxy |
|
2021-11-09 17:00:53 |
Aurelien Lourot |
summary |
Unit status should show when the certificates are about to expire |
Extend NRPE checks for reporting soon-to-expire certificates to Nagios |
|
2021-11-09 17:03:41 |
Aurelien Lourot |
description |
As a first step towards lp:1914708 we'd like to have the update-status hook detect if the certificates are about to expire and report it in the unit status. |
The idea came out of lp:1914708. There seems to be an easy way to extend the existing NRPE (Nagios remote plugin executor) checks of each charm to get alerts when certificates are about to expire.
Taking charm-neutron-api as an example, but this applies to all charms that report to Nagios and expose an HTTPS API. Thus the common logic should be placed in charm-helpers, [1] which is a library used by all charms.
The charm produces an NRPE config [2] that is used to report to the Nagios charm. One of the NRPE checks [3][4][5] makes use of `check_http`, [6] which could also be used to report on certificate expiration times.
[1] https://github.com/juju/charm-helpers
[2] https://github.com/openstack/charm-neutron-api/blob/master/hooks/neutron_api_hooks.py#L714
[3] https://github.com/openstack/charm-neutron-api/blob/master/hooks/neutron_api_hooks.py#L713
[4] https://github.com/juju/charm-helpers/blob/master/charmhelpers/contrib/charmsupport/nrpe.py#L504
[5] https://github.com/juju/charm-helpers/blob/master/charmhelpers/contrib/openstack/files/check_haproxy.sh
[6] https://nagios-plugins.org/doc/man/check_http.html |
|
2021-11-09 17:03:57 |
Aurelien Lourot |
bug task deleted |
vault-charm |
|
|
2021-11-09 17:04:20 |
Aurelien Lourot |
bug task added |
|
charm-helpers |
|
2021-11-09 17:04:52 |
Aurelien Lourot |
charm-helpers: status |
New |
In Progress |
|
2021-11-09 17:06:28 |
Aurelien Lourot |
charm-neutron-api: importance |
Undecided |
Wishlist |
|
2021-11-09 17:06:28 |
Aurelien Lourot |
charm-neutron-api: status |
New |
In Progress |
|
2021-11-09 17:06:28 |
Aurelien Lourot |
charm-neutron-api: assignee |
|
Anna Savchenko (annsavchenko) |
|
2021-12-14 12:49:55 |
Facundo Ciccioli |
bug task added |
|
charm-ovn-central |
|