ssl_exporter

ssl_exporter copied to clipboard

Add support for setting server_name as query parameter

2

Implements #74

johanfleury

With `dry-run` feature we will can to put `ssl_exporter` configuration and perform syntax test (exporter can run with this YAML) before restart with new configuration (useful for IaC's) For example,...

k0ste

Bumps [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) from 1.12.2 to 1.13.0. Release notes Sourced from github.com/prometheus/client_golang's releases. 1.13.0 / 2022-08-06 [CHANGE] Minimum required Go version is now 1.17 (we also test client_golang against the new...

dependabot[bot]

At the moment the exporter is a bit of an open proxy by default. It enables all the probers in their default configuration. People running it should be tightly controlling...

ribbybibby

When in k8s, container has `runAsNonRoot` policy and image has non-numeric user (nobody), then the deployment will fail as it cannot verify user is non-root. Fixed #102 Signed-off-by: Julio Damasceno

xjulio

Container has runAsNonRoot and image has non-numeric user (ssl), cannot verify user is non-root

1

When deploying in Kubernetes and setting `runAsNonRoot` in `securityContext`, the Kubernetes admission controller fails because cannot verify if the user is non-root. ## Environment: ``` Kuberntes: v1.22.0 ssl-exporter image: 2.4.1...

xjulio

OCSP server check?

3

Hi @ribbybibby, I can't quite decide if I need to write a new exporter or open a PR with ssl_exporter: We have internal OCSP servers for our internal CAs; we...

britcey

feature: OCSP prober

5

Add OCSP prober for checking OCSP responders. This will make an OCSP request to the target, using the supplied certificates (a certificate to be checked and the certificate that signed...

britcey

Add helm-chart (#14)

6

Hi. I've added simple helm chart. It makes available to deploy it to Kubernetes with Prometheus Operator compatibility (Config is being declared as Probes). I've checked it on Kubernetes 1.19

dromaniuk

Report revocation status for every certificate

2

This adds a new metric `ssl_revocation_status` for each certificate in every trusted chains. This metrics shows whether the certificate is marked as revoked on OCSP responders or (if available as...

johanfleury