Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Enhancement] Add Key expiration alerting and monitoring #2625

Closed
3 tasks
peterzhuamazon opened this issue Sep 15, 2022 · 1 comment
Closed
3 tasks

[Enhancement] Add Key expiration alerting and monitoring #2625

peterzhuamazon opened this issue Sep 15, 2022 · 1 comment
Assignees
Labels
technical-debt Additional rework required to improve the existing code

Comments

@peterzhuamazon
Copy link
Member

peterzhuamazon commented Sep 15, 2022

The key management of our releases needs to be monitored.

  1. The general key for all the signatures on artifacts
  2. The key specifically for the ruby artifacts like opensearch-ruby and logstash-oss-opensearch.

They will expire in about a year:

  1. Need to extend 20230512 [Renew Key] Upcoming expiration of our current sub public key (expire on 20230512)  #2136
  2. Need to extend / recreate 20220802

Acceptance criteria

  • Monitor the current status along with the expiration is added for all the keys used for signing the OpenSearch artifacts (including clients and standalone components)
  • Automated alerting mechanism is in place for all the keys used for signing the artifacts
  • Create dashboards to view the current status of all the keys
@peterzhuamazon peterzhuamazon added the enhancement New Enhancement label Sep 15, 2022
@rishabh6788 rishabh6788 self-assigned this Oct 10, 2022
@bbarani bbarani added technical-debt Additional rework required to improve the existing code and removed enhancement New Enhancement labels Feb 10, 2023
@rishabh6788
Copy link
Collaborator

rishabh6788 commented Feb 13, 2023

The signing key metrics are now getting published for our internal monitoring.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
technical-debt Additional rework required to improve the existing code
Projects
None yet
Development

No branches or pull requests

3 participants