Move SSLCertExpiresSoon and SSLCertExpiresVerySoon alerts to dedicated per-domain "blackbox-tls-expiry" job (!4064) · Merge requests · GitLab.com / Runbooks

Igor requested to merge ssl-expiry-alert-per-domain into master Nov 05, 2021

This patch is (hopefully) the last piece to reduce alert spam on cert expiry.

Previously we would alert on any blackbox probe having an upcoming cert expiry. Since there are many probes to the same domain, we'd get many alerts for the same domain.

We introduced a separate job which contains a distinct list of domains in https://gitlab.com/gitlab-com/gl-infra/chef-repo/-/merge_requests/858.

This MR restricts the alerting condition to only look at that list. Producing one alert per domain.

refs https://gitlab.com/gitlab-com/gl-infra/infrastructure/-/issues/14552

Move SSLCertExpiresSoon and SSLCertExpiresVerySoon alerts to dedicated per-domain "blackbox-tls-expiry" job

Merge request reports