blob: 340904461b5fbbfb7a24559cc319bee45fbdd535 (
plain) (
blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
|
---
prometheus_server_rules_ssl__probe_extra: []
prometheus_server_rules_ssl__probe:
- alert: SslCertificateProbeFailed
expr: ssl_probe_success == 0
for: 0m
labels:
severity: critical
annotations:
summary: SSL certificate probe failed (instance {{ '{{' }} $labels.instance {{ '}}' }})
description: "Failed to fetch SSL certificate information {{ '{{' }} $labels.instance {{ '}}' }}\n VALUE = {{ '{{' }} $value {{ '}}' }}\n LABELS = {{ '{{' }} $labels {{ '}}' }}"
- alert: SslCertificateExpiresSoon
expr: ssl_cert_not_after - time() < 86400 * 28
for: 0m
labels:
severity: warning
annotations:
summary: SSL certificate expires soon (instance {{ '{{' }} $labels.instance {{ '}}' }})
description: "The certificate {{ '{{' }} $labels.cn {{ '}}' }} is expiring in less than 28 days\n VALUE = {{ '{{' }} $value {{ '}}' }}\n LABELS = BRACEOPEN $labels {{ '}}' }}"
- alert: SslCertificateExpiresVerySoon
expr: ssl_cert_not_after - time() < 86400 * 7
for: 0m
labels:
severity: critical
annotations:
summary: SSL certificate expires soon (instance {{ '{{' }} $labels.instance {{ '}}' }})
description: "The certificate {{ '{{' }} $labels.cn {{ '}}' }} is expiring in less than 7 days\n VALUE = {{ '{{' }} $value {{ '}}' }}\n LABELS = BRACEOPEN $labels {{ '}}' }}"
- alert: SslCertificateChainExpiresSoon
expr: ssl_verified_cert_not_after - time() < 86400 * 28
for: 0m
labels:
severity: warning
annotations:
summary: SSL chain certificate expires soon (instance {{ '{{' }} $labels.instance {{ '}}' }})
description: "The chain certificate {{ '{{' }} $labels.cn {{ '}}' }} is expiring in less than 28 days\n VALUE = {{ '{{' }} $value {{ '}}' }}\n LABELS = BRACEOPEN $labels {{ '}}' }}"
- alert: SslCertificateChainExpiresVerySoon
expr: ssl_verified_cert_not_after - time() < 86400 * 7
for: 0m
labels:
severity: critical
annotations:
summary: SSL chain certificate expires soon (instance {{ '{{' }} $labels.instance {{ '}}' }})
description: "The chain certificate {{ '{{' }} $labels.cn {{ '}}' }} is expiring in less than 7 days\n VALUE = {{ '{{' }} $value {{ '}}' }}\n LABELS = BRACEOPEN $labels {{ '}}' }}"
- alert: SslCertificateOscpStatusUnknown
expr: ssl_ocsp_response_status == 2
for: 0m
labels:
severity: warning
annotations:
summary: SSL certificate OSCP status unknown (instance {{ '{{' }} $labels.instance {{ '}}' }})
description: "Failed to get the OSCP status for {{ '{{' }} $labels.cn {{ '}}' }}\n VALUE = {{ '{{' }} $value {{ '}}' }}\n LABELS = {{ '{{' }} $labels {{ '}}' }}"
- alert: SslCertificateOscpStatusRevoked
expr: ssl_ocsp_response_status == 1
for: 0m
labels:
severity: critical
annotations:
summary: SSL certificate revoked (instance {{ '{{' }} $labels.instance {{ '}}' }})
description: "OCSP reports SSL certificate {{ '{{' }} $labels.cn {{ '}}' }} as revoked\n VALUE = {{ '{{' }} $value {{ '}}' }}\n LABELS = {{ '{{' }} $labels {{ '}}' }}"
- alert: SslCertificateFileExpiresSoon
expr: ssl_file_cert_not_after - time() < 86400 * 28
for: 0m
labels:
severity: warning
annotations:
summary: SSL certificate expires soon (instance {{ '{{' }} $labels.instance {{ '}}' }})
description: "The certificate in {{ '{{' }} $labels.file {{ '}}' }} is expiring in less than 28 days\n VALUE = {{ '{{' }} $value {{ '}}' }}\n LABELS = BRACEOPEN $labels {{ '}}' }}"
- alert: SslCertificateFileExpiresVerySoon
expr: ssl_file_cert_not_after - time() < 86400 * 7
for: 0m
labels:
severity: critical
annotations:
summary: SSL certificate expires soon (instance {{ '{{' }} $labels.instance {{ '}}' }})
description: "The certificate in {{ '{{' }} $labels.file {{ '}}' }} is expiring in less than 7 days\n VALUE = {{ '{{' }} $value {{ '}}' }}\n LABELS = BRACEOPEN $labels {{ '}}' }}"
- alert: SslCertificateKubernetesExpiresSoon
expr: ssl_kubernetes_cert_not_after - time() < 86400 * 28
for: 0m
labels:
severity: warning
annotations:
summary: SSL kubernetes certificate expires soon (instance {{ '{{' }} $labels.instance {{ '}}' }})
description: "The certificate in kubernetes secret {{ '{{' }} $labels.namespace {{ '}}' }}/{{ '{{' }} $labels.secret {{ '}}' }} is expiring in less than 28 days\n VALUE = {{ '{{' }} $value {{ '}}' }}\n LABELS = BRACEOPEN $labels {{ '}}' }}"
- alert: SslCertificateKubernetesExpiresVerySoon
expr: ssl_kubernetes_cert_not_after - time() < 86400 * 7
for: 0m
labels:
severity: critical
annotations:
summary: SSL kubernetes certificate expires soon (instance {{ '{{' }} $labels.instance {{ '}}' }})
description: "The certificate in kubernetes secret {{ '{{' }} $labels.namespace {{ '}}' }}/{{ '{{' }} $labels.secret {{ '}}' }} is expiring in less than 7 days\n VALUE = {{ '{{' }} $value {{ '}}' }}\n LABELS = BRACEOPEN $labels {{ '}}' }}"
- alert: SslCertificateKubeconfigExpiresSoon
expr: ssl_kubeconfig_cert_not_after - time() < 86400 * 28
for: 0m
labels:
severity: warning
annotations:
summary: SSL kubeconfig certificate expires soon (instance {{ '{{' }} $labels.instance {{ '}}' }})
description: "The certificate in kubeconfig {{ '{{' }} $labels.kubeconfig {{ '}}' }} is expiring in less than 28 days\n VALUE = {{ '{{' }} $value {{ '}}' }}\n LABELS = BRACEOPEN $labels {{ '}}' }}"
- alert: SslCertificateKubeconfigExpiresVerySoon
expr: ssl_kubeconfig_cert_not_after - time() < 86400 * 7
for: 0m
labels:
severity: critical
annotations:
summary: SSL kubeconfig certificate expires soon (instance {{ '{{' }} $labels.instance {{ '}}' }})
description: "The certificate in kubeconfig {{ '{{' }} $labels.kubeconfig {{ '}}' }} is expiring in less than 7 days\n VALUE = {{ '{{' }} $value {{ '}}' }}\n LABELS = BRACEOPEN $labels {{ '}}' }}"
|
