add lower bound thresholds on BlackboxSslCertificateWillExpireSoon rules to avoid overlap

This commit is contained in:
Panos Rontogiannis 2023-01-05 13:06:56 +02:00
parent e10edaa8c4
commit 520eb6fc15

View file

@ -389,15 +389,15 @@ groups:
severity: critical
- name: Blackbox SSL certificate will expire soon
description: SSL certificate expires in 30 days
query: 'last_over_time(probe_ssl_earliest_cert_expiry[10m]) - time() < 86400 * 30'
query: '86400 * 3 <= last_over_time(probe_ssl_earliest_cert_expiry[10m]) - time() < 86400 * 30'
severity: warning
- name: Blackbox SSL certificate will expire soon
description: SSL certificate expires in 3 days
query: 'last_over_time(probe_ssl_earliest_cert_expiry[10m]) - time() < 86400 * 3'
query: '0 <= last_over_time(probe_ssl_earliest_cert_expiry[10m]) - time() < 86400 * 3'
severity: critical
- name: Blackbox SSL certificate expired
description: SSL certificate has expired already
query: 'last_over_time(probe_ssl_earliest_cert_expiry[10m]) - time() <= 0'
query: 'last_over_time(probe_ssl_earliest_cert_expiry[10m]) - time() < 0'
severity: critical
comments: |
For probe_ssl_earliest_cert_expiry to be exposed after expiration, you