how to detect duplicate nebula IPs

[theblop]

I recently had a problem that took me a while to debug: I mistakenly configured 2 nebula certs with the same IP and this (unsurprisingly) resulted in random connection problems to applications running on these servers.

Is there a way to detect if the same IP is configured on more than one node from inside the mesh? Maybe a nebula network summary view from the command line?

[rucciva]

Hi, not a direct solution, but what do you think of using terraform with custom provider for managing your entire cluster certificates? A terraform module is also available for quick setup. The module will throw error if duplicate IPs is detected in the input variable. Examples of input variables are here

[theblop]

The module will throw error if duplicate IPs is detected in the input variable. Examples of input variables are here

Thank you for pointing me towards this new terraform module! I already have a script to generate certs that checks for duplicate IPs but the terraform module will be much better than my script.

It doesn't really solve my problem though, in my case someone also recently cloned a VM that already contained a cert to test something... So ideally I'd like to check for duplicates with our monitoring/alerting tool.