NetApp / harvest

Open-metrics endpoint for ONTAP and StorageGRID
https://netapp.github.io/harvest/latest
Apache License 2.0
146 stars 36 forks source link

Add dashboard for monitoring certificate expiration #2954

Closed timstiller closed 2 months ago

timstiller commented 2 months ago

Is your feature request related to a problem? Please describe. Most communication with ONTAP- and StorageGRID Clusters ist encrypted by using certificate based encryption (e.g. TLS). Certificates are always issued with a expiration date, after that the certificate is considered invalid. If certificate validation fails (e.g. after expiration) secure communication is no longer possible which may lead to data outages or cluster unreachability.

Describe the solution you'd like To proactively renew certificates before expiratoin i'd suggest to create a dashbord listing all installed certificates within a ONTAP-Cluster and StorageGRID System and highlight certificates which are going to expire in near future.

Describe alternatives you've considered As an alternative the admin can manually check for expiring certificates. as this is a manual process it is error-prone and unreliable

Additional context https://gyptazy.ch/howtos/howto-monitor-ssl-certificates-expiration-in-grafana/

cgrinds commented 1 month ago

@timstiller These changes are in the nightly build if you want to give them a try.

image
rahulguptajss commented 3 weeks ago

verified in 24.08