Skip to content

Commit 042b295

Browse files
deepakt7340ashish1099
authored andcommitted
fix(blackbox_exporter) allow TLS inspection to expose expired certificate metrics
1 parent 274cc48 commit 042b295

File tree

1 file changed

+6
-0
lines changed
  • modules/enableit/common/manifests/monitor/exporter

1 file changed

+6
-0
lines changed

modules/enableit/common/manifests/monitor/exporter/blackbox.pp

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -59,6 +59,12 @@
5959
'http' => {
6060
'fail_if_not_ssl' => true,
6161
'preferred_ip_protocol' => 'ip4',
62+
# NOTE: this is needed to monitor if the cert is expired.
63+
# if tls verification is set to false, we will never be able to
64+
# scrape and ends up with 0 (domain down alert) but no cert expiry alert
65+
'tls_config' => {
66+
'insecure_skip_verify' => true,
67+
},
6268
},
6369
},
6470
}

0 commit comments

Comments
 (0)