Alert for expiring VA TIC certificates

philherbert commented 4 years ago

User Story - Business Need

Set up Datadog alerting to monitor SSL certificates and trigger notifications before they expire.

[ ] Ticket is understood, and QA has been contacted (if the ticket has a QA label).

User Story(ies)

As a VANotify developer
I want to be alerted when certificates are about to expire
So that our systems don't experience downtime.

Additional Info and Resources

https://www.datadoghq.com/blog/monitor-tls-with-datadog/

Original ticket text -

VA Gateway between Internet / Network - Expose endpoints to the gateway so we can get alerts Commercial SSL Certificates that are valid for a year - May Can Amazon Certificate Manager handle? Where do the alerts go? Gateway Ops Team?

Acceptance Criteria

[ ] A monitor exists in Datadog for each environment (if applicable)
[ ] Alert is triggered 30 days out
[ ] Notification is sent to the automatic-alerts channel

QA Considerations

Potential Dependencies

QaysarA commented 4 years ago

Part of the prioritization discussion - Filip mentioned the certificate expires in 20 years

mjones-oddball commented 2 years ago

We need to check to see if we have any certs that are ~20 years. Not sure what this is.

npmartin-oddball commented 1 month ago

Once ticket has been updated by @mchlwellman , please remove "Changes Requested" labels and post in VA Notify team channel.

k-macmillan commented 2 weeks ago

@mchlwellman Please revise this to our new standard for tickets.

k-macmillan commented 1 week ago

@kbelikova-oddball @npmartin-oddball Needs refinement, please keep in this column though.

department-of-veterans-affairs / notification-api