Beacon to monitor certificate expiration dates from files on the filesystem.
New in version 3000.
new
OpenSSL
Monitor the certificate files on the minion.
Specify a notification threshold in days and only emit a beacon if any certificates are expiring within that timeframe or if notify_days equals -1 (always report information). The default notification threshold is 45 days and can be overridden at the beacon level and at an individual certificate level.
beacons:
cert_info:
- files:
- /etc/pki/tls/certs/mycert.pem
- /etc/pki/tls/certs/yourcert.pem:
notify_days: 15
- /etc/pki/tls/certs/ourcert.pem
- notify_days: 45
- interval: 86400
Validate the beacon configuration