diff --git a/README.md b/README.md index f8cdce9..5b4e166 100644 --- a/README.md +++ b/README.md @@ -64,6 +64,7 @@ Collection available here: **[https://awesome-prometheus-alerts.grep.to](https:/ - [ZFS](https://awesome-prometheus-alerts.grep.to/rules#zfs) - [OpenEBS](https://awesome-prometheus-alerts.grep.to/rules#openebs) - [Minio](https://awesome-prometheus-alerts.grep.to/rules#minio) +- [SSL/TLS](https://awesome-prometheus-alerts.grep.to/rules#ssl/tls) - [Juniper](https://awesome-prometheus-alerts.grep.to/rules#juniper) - [CoreDNS](https://awesome-prometheus-alerts.grep.to/rules#coredns) diff --git a/_data/rules.yml b/_data/rules.yml index 82a4dcb..9c9042b 100644 --- a/_data/rules.yml +++ b/_data/rules.yml @@ -1823,23 +1823,23 @@ groups: exporters: - name: ssl_exporter doc_url: https://github.com/ribbybibby/ssl_exporter - rules: - - name: SSL probe failed + rules: + - name: SSL certificate probe failed description: Failed to fetch SSL information {{ $labels.instance }} query: ssl_probe_success == 0 severity: critical - - name: OSCP status unknown + - name: SSL certificate OSCP status unknown description: Failed to get the OSCP status {{ $labels.instance }} query: ssl_ocsp_response_status == 2 severity: warning - - name: SSL revoked + - name: SSL certificate revoked description: SSL certificate revoked {{ $labels.instance }} query: ssl_ocsp_response_status == 1 severity: critical - - name: Certificate expiry (< 7days) - description: '{{ $labels.instance }} Certificate is expiring whithin the next 7 days: {{ $value | humanizeDuration }}' + - name: SSL certificate expiry (< 7 days) + description: '{{ $labels.instance }} Certificate is expiring in 7 days' query: ssl_verified_cert_not_after{chain_no="0"} - time() < 86400 * 7 - severity: critical + severity: warning - name: Juniper exporters: