Faidon Liambotis has submitted this change and it was merged.
Change subject: wikitech: add SSL cert expiry monitoring
......................................................................
wikitech: add SSL cert expiry monitoring
Adds a monitoring check for SSL cert expiry,
details on the check it uses on T114059#1714084
It will be like existing checks on lists, otrs and the
ldap servers, but for silver.
Bug:T114059
Change-Id: Ice0e01d517c7752ef78a01da8091c39ee6a2a11d
---
M manifests/role/nova.pp
1 file changed, 5 insertions(+), 0 deletions(-)
Approvals:
Faidon Liambotis: Looks good to me, approved
jenkins-bot: Verified
diff --git a/manifests/role/nova.pp b/manifests/role/nova.pp
index 547c77a..54f98d9 100644
--- a/manifests/role/nova.pp
+++ b/manifests/role/nova.pp
@@ -319,6 +319,11 @@
sslcert::certificate { $certificate: }
+ monitoring::service { 'https':
+ description => 'HTTPS',
+ check_command => "check_ssl_http!${certificate}",
+ }
+
$ssl_settings = ssl_ciphersuite('apache-2.2', 'compat', '365')
ferm::service { 'wikitech_http':
--
To view, visit https://gerrit.wikimedia.org/r/244610
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings
Gerrit-MessageType: merged
Gerrit-Change-Id: Ice0e01d517c7752ef78a01da8091c39ee6a2a11d
Gerrit-PatchSet: 3
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Dzahn <[email protected]>
Gerrit-Reviewer: Andrew Bogott <[email protected]>
Gerrit-Reviewer: BBlack <[email protected]>
Gerrit-Reviewer: Dzahn <[email protected]>
Gerrit-Reviewer: Faidon Liambotis <[email protected]>
Gerrit-Reviewer: Yuvipanda <[email protected]>
Gerrit-Reviewer: coren <[email protected]>
Gerrit-Reviewer: jenkins-bot <>
_______________________________________________
MediaWiki-commits mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits
