https://github.com/faisaltheparttimecoder/tanzu-certificate-exporter

A Prometheus exporter that publishes cert expirations available from the opsman API from all foundatiion
https://github.com/faisaltheparttimecoder/tanzu-certificate-exporter

pivotal-ops-manager prometheus-exporter tanzu-application-service tanzu-operations-manager

Last synced: 11 months ago
JSON representation

A Prometheus exporter that publishes cert expirations available from the opsman API from all foundatiion

• Host: GitHub
• URL: https://github.com/faisaltheparttimecoder/tanzu-certificate-exporter
• Owner: faisaltheparttimecoder
• License: mit
• Created: 2020-05-02T15:27:15.000Z (about 6 years ago)
• Default Branch: master
• Last Pushed: 2020-12-29T12:51:08.000Z (over 5 years ago)
• Last Synced: 2025-06-08T17:08:36.466Z (12 months ago)
• Topics: pivotal-ops-manager, prometheus-exporter, tanzu-application-service, tanzu-operations-manager
• Language: Go
• Homepage:
• Size: 2.18 MB
• Stars: 3
• Watchers: 12
• Forks: 3
• Open Issues: 1
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

README

          
# Introduction

On this specific exporter we take a look at visualization of certificates with respect to cloud foundry. The exporter uses the [vmware tanzu operations manager API](https://docs.pivotal.io/platform/2-8/security/pcf-infrastructure/managing-certificates.html) to get the cert information.

**NOTE:** This exporter is highly inspired from [cert-exporter by joe-elliott](https://github.com/joe-elliott/cert-exporter).

# Installation / Usage

We have created a dedicated doc on how to setup and install the exporter, please check out the [set of instruction provided on the doc](Install.md) that include both Cloud Foundry and Kubernetes deployments.

# Dashboard

After running vmware-tanzu-cert-exporter in your cluster it's easy to build a [custom dashboard](resources/Grafana.json) to expose information about the certs in your cluster. Follow the [guide](./Install.md) on how to set it up.

##### Main Dashboard

![home](resources/Dash1.png)

##### Expanded Table

![table](resources/Dash2.png)

# Exported Metrics

vmware-tanzu-cert-exporter exports the following metrics

```

# HELP vmware_tanzu_cert_exporter_cert_expires_in_seconds Number of seconds til the cert expires.

# TYPE vmware_tanzu_cert_exporter_cert_expires_in_seconds gauge

vmware_tanzu_cert_exporter_cert_expires_in_seconds{configurable="false",env="env10",is_ca="false",issuer="",location="credhub",product_guid="cf-9c69d13d0df4b67292a9",property_reference="",valid_from="0001-01-01 00:00:00 +0000 UTC",valid_until="2021-04-29 10:38:04 +0000 UTC",variable_path="/p-bosh/cf-9c69d13d0df4b67292a9/diego-instance-identity-leaf-maestro"} 3.125483989441466e+07

# HELP vmware_tanzu_cert_exporter_error_total Cert Exporter Errors

# TYPE vmware_tanzu_cert_exporter_error_total counter

vmware_tanzu_cert_exporter_error_total 0

```

where

+ **vmware_tanzu_cert_exporter_error_total**

  The total number of unexpected errors encountered by vmware-tanzu-cert-exporter. A good metric to watch to feel comfortable certs are being exported properly.

+ **vmware_tanzu_cert_exporter_cert_expires_in_seconds**

  The number of seconds until a certificate stored in the PEM format is expired. The property reference, path and issuer label indicates the exported cert.

# Customizing / Developing

If you wish to customize the code, follow the instruction as per the [doc](LocalSetup.md)