Faidon Liambotis has submitted this change and it was merged.

Change subject: wikitech: add SSL cert expiry monitoring
......................................................................


wikitech: add SSL cert expiry monitoring

Adds a monitoring check for SSL cert expiry,
details on the check it uses on T114059#1714084

It will be like existing checks on lists, otrs and the
ldap servers, but for silver.

Bug:T114059
Change-Id: Ice0e01d517c7752ef78a01da8091c39ee6a2a11d
---
M manifests/role/nova.pp
1 file changed, 5 insertions(+), 0 deletions(-)

Approvals:
  Faidon Liambotis: Looks good to me, approved
  jenkins-bot: Verified



diff --git a/manifests/role/nova.pp b/manifests/role/nova.pp
index 547c77a..54f98d9 100644
--- a/manifests/role/nova.pp
+++ b/manifests/role/nova.pp
@@ -319,6 +319,11 @@
 
     sslcert::certificate { $certificate: }
 
+    monitoring::service { 'https':
+        description   => 'HTTPS',
+        check_command => "check_ssl_http!${certificate}",
+    }
+
     $ssl_settings = ssl_ciphersuite('apache-2.2', 'compat', '365')
 
     ferm::service { 'wikitech_http':

-- 
To view, visit https://gerrit.wikimedia.org/r/244610
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings

Gerrit-MessageType: merged
Gerrit-Change-Id: Ice0e01d517c7752ef78a01da8091c39ee6a2a11d
Gerrit-PatchSet: 3
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Dzahn <dz...@wikimedia.org>
Gerrit-Reviewer: Andrew Bogott <abog...@wikimedia.org>
Gerrit-Reviewer: BBlack <bbl...@wikimedia.org>
Gerrit-Reviewer: Dzahn <dz...@wikimedia.org>
Gerrit-Reviewer: Faidon Liambotis <fai...@wikimedia.org>
Gerrit-Reviewer: Yuvipanda <yuvipa...@wikimedia.org>
Gerrit-Reviewer: coren <mpellet...@wikimedia.org>
Gerrit-Reviewer: jenkins-bot <>

_______________________________________________
MediaWiki-commits mailing list
MediaWiki-commits@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits

Reply via email to