Monitor TLS Certificates With Prometheus And Grafana
Ғылым және технология
Unless you're using an automated method of obtaining TLS certificates for your IT devices, then you need to manage and monitor them
And the reason for that is because a certificate will have an expiry date, or at least it should if you're concerned about security
So you need to be proactive and replace certificates before they expire, otherwise a browser will either complain when a certificate expires and so will the users or worse still a browser will refuse to connect to a device
Now an interesting open source combination of monitoring tools that's available for free is Prometheus and Grafana
So in this video, we show how to configure Prometheus and Grafana to monitor TLS certificates, when you're using Docker
=============================
SUPPORT THE CHANNEL
Donate through Paypal:
paypal.me/DavidMcKone
Donate through Buy Me A Coffee:
buymeacoffee.com/dmckone
Become a monthly contributor on Patreon:
/ dmckone
Become a monthly contributor on KZread:
/ techtutorialsdavidmckone
==============================
=============================
MY RECORDING HARDWARE:
Blue Yeti USB Microphone
amzn.to/3IfL3qm
Blue Radius III Custom Shockmount for Yeti and Yeti Pro USB Microphones
amzn.to/3G3f89P
RØDE PSA1 Professional Studio Arm
amzn.to/3Z3lPBF
Aokeo Professional Microphone Pop Filter
amzn.to/3VuZl9H
Sony Alpha ZV-E10L Mirrorless Camera
amzn.to/3ITHCoU
Elgato Cam Link 4K Capture Card
amzn.to/43CzQaT
Neewer NP-FW50 Dummy Battery Charger Kit
amzn.to/3qp9Q4s
Elgato Key Light Air - Professional 1400 lumens Desk Light
amzn.to/3G81OB9
Neewer 2 Packs Tabletop LED Video Light Kit
amzn.to/3CcuN5O
Elgato Green Screen
amzn.to/3CoJBOL
=============================
==============================
MEDIA LINKS:
Website - www.techtutorials.tv/
Twitter - / dsmckone1
==============================
For more technical information, including commands used, check out our blog post
www.techtutorials.tv/sections...
Useful links:
github.com/prometheus/blackbo...
grafana.com/grafana/dashboard...
Chapters
00:00 Intro
00:44 Assumptions
01:00 Install Blackbox Exporter
02:57 Configure Blackbox Exporter
06:44 Configure Prometheus
11:42 Grafana Dashboard
monitor certificate expiration grafana,prometheus monitor certificate expiration,prometheus monitoring tls certificates,monitor tls certificates,monitor tls certifcate expiry with prometheus and grafana,monitor tls certificate expiry
Пікірлер: 8
Thanks Dave, much appreciated.
@TechTutorialsDavidMcKone
10 ай бұрын
Thanks for the feedback Good to know the video was useful
Thank you for an amazing, most awaited video to monitor the certificates. I have a question though, can we use blackbox to monitor certificates outside k8? Like certificates in my application deployed on Linux? How would you do that? Would appreciate it if you could make a video on node-exporter for certificate monitoring as I am not using k8. Thank you once again for the amazing video :)
@TechTutorialsDavidMcKone
7 ай бұрын
You can monitor certificates on any server as long as the exporter can reach them So typically it needs access to TCP port 443 for instance for web servers, but it doesn't need to be able to login to check the certificate If you want to monitor something, add it to the target list in the prometheus.yml file then reload Prometheus to update it I'm using Docker containers myself, but the configuration will be the same whichever platform you use All that's different is in the installation process
+1
Can you please share the docker compose file!??
@TechTutorialsDavidMcKone
9 ай бұрын
You can find more details on my blog post www.techtutorials.tv/sections/management-and-monitoring/monitor-tls-certificates-with-prometheus-and-grafana/
@mallikarjunkonemane6908
9 ай бұрын
@@TechTutorialsDavidMcKone Thanks David ♦️