Dzahn has uploaded a new change for review.
https://gerrit.wikimedia.org/r/247929
Change subject: ldap: add ssl cert expiry check
......................................................................
ldap: add ssl cert expiry check
Also check the (labs) LDAP servers for expiring
SSL certs. Use the existing check that is just like the
https check just on port 636.
Just one more thing to complete T114059.
Change-Id: I1b98e32d7b0266751ddd5df21c602b83f2a0e670
---
M modules/ldap/manifests/role/server.pp
1 file changed, 5 insertions(+), 0 deletions(-)
git pull ssh://gerrit.wikimedia.org:29418/operations/puppet
refs/changes/29/247929/1
diff --git a/modules/ldap/manifests/role/server.pp
b/modules/ldap/manifests/role/server.pp
index 279a643..8b7c49f 100644
--- a/modules/ldap/manifests/role/server.pp
+++ b/modules/ldap/manifests/role/server.pp
@@ -36,6 +36,11 @@
sslcert::certificate { $certificate: }
+ monitoring::service { "https-${certificate}":
+ description => 'LDAP-SSL',
+ check_command => "check_ssl_ldap!${certificate}",
+ }
+
# Add a pkcs12 file to be used for start_tls, ldaps, and opendj's admin
connector.
# Add it into the instance location, and ensure opendj can read it.
exec { "${certificate}_pkcs12":
--
To view, visit https://gerrit.wikimedia.org/r/247929
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings
Gerrit-MessageType: newchange
Gerrit-Change-Id: I1b98e32d7b0266751ddd5df21c602b83f2a0e670
Gerrit-PatchSet: 1
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Dzahn <[email protected]>
_______________________________________________
MediaWiki-commits mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits
