vault-assessment-prometheus-exporter icon indicating copy to clipboard operation
vault-assessment-prometheus-exporter copied to clipboard

Monitoring AppRole Secret Expiration

Open eugenedavis-tomtom opened this issue 2 years ago • 1 comments

Monitoring the age and expiration of an AppRole secret id would help with managing AppRole authentication usage.

It has a relatively similar structure to the metadata for a KV2 secret, so it should be possible to subclass the ExpirationMetadata class - only the update_metrics method need be different, and realistically it could be done with an f-string for the path as the only difference per subclass.

eugenedavis-tomtom avatar Jun 15 '22 10:06 eugenedavis-tomtom

Metrics should also reflect approle vs secret

eugenedavis-tomtom avatar Jun 15 '22 10:06 eugenedavis-tomtom