salt.beacons.cert_info

Beacon to monitor certificate expiration dates from files on the filesystem.

New in version 3000.

maintainer:

<devops@eitr.tech>

maturity:

new

depends:

OpenSSL

salt.beacons.cert_info.beacon(config)

Monitor the certificate files on the minion.

Specify a notification threshold in days and only emit a beacon if any certificates are expiring within that timeframe or if notify_days equals -1 (always report information). The default notification threshold is 45 days and can be overridden at the beacon level and at an individual certificate level.

beacons:
  cert_info:
    - files:
        - /etc/pki/tls/certs/mycert.pem
        - /etc/pki/tls/certs/yourcert.pem:
            notify_days: 15
        - /etc/pki/tls/certs/ourcert.pem
    - notify_days: 45
    - interval: 86400

salt.beacons.cert_info.validate(config)

Validate the beacon configuration