Google Cloud Certificate Authority Service monitoring
Optimize your certificate expiration monitoring strategy with Site24x7. Monitor your Google Cloud Certificate Authority Service resources with Site24x7 to keep track of the certificates created and the operational status of Google Cloud Certificate Authority Service.
Table of contents
- Setup and configuration
- Polling frequency
- Supported metrics
- Threshold configuration
- IT Automation
- Configuration Rules
- Summary
- Configuration Details
- Reports
Setup and configuration
- Adding Google Cloud Certificate Authority Service while configuring a new Google Cloud monitor
If you have not configured a Google Cloud monitor yet, add one by following the steps below:- Log in to your Site24x7 account.
- Go to Cloud > GCP > Add GCP Monitor or Admin > Cloud Monitoring > Google Cloud Platform (GCP).
- Provide a unique display name for identification purposes.
- Upload a service account JSON file to authenticate Site24x7 for performing resource discovery.
- Select Certificate Authority Service from the Service/Resource Types drop-down.
- Select existing Notification Profiles, User Alert Groups, Tags, and IT Automation Templates, or add new ones. You can also integrate Site24x7's alarms with your preferred third-party service.
- Click Start GCP Monitoring.
- Adding Google Cloud Certificate Authority Service to an existing Google Cloud monitor
If you already have a Google Cloud monitor configured for the service account, you can add Google Cloud Certificate Authority Service by following the steps below:- Log in to your Site24x7 account.
- Go to Cloud > GCP, select your GCP monitor, then go to any of the dashboards on the left pane of the monitor.
- Click the hamburger icon and select Edit, which brings you to the Edit GCP Monitor page.
- On the Edit GCP Monitor page, select Certificate Authority Service from the Service/Resource Types drop-down and click Save.
- After successful configuration, go to Cloud > GCP > Certificate Authority Service. Now you can view the discovered Certificate Authority Service resources.
Polling frequency
Site24x7's Google Cloud Certificate Authority Service monitor collects minute-wise data every five minutes.
Supported metrics
Metric name | Description | Statistic | Unit |
---|---|---|---|
CA certificate expiration | The time taken for a certificate authority (CA) certificate to expire | Total | Days |
CA certificate chain expiration | The time taken for a CA certificate parent to expire | Total | Days |
CA certificate creation count | The total number of certificates issued by the CA with the status CA:TRUE | Total | Count |
Certificate creation count | The total number of certificates issued by the CA | Total | Count |
Certificate creation CA policy error count | The total number of certificate creation failures in the specified time | Total | Count |
Certificate creation request count | The total number of certificate creation requests received by the CA | Total | Count |
CA resource state | The operational status of the CA | Boolean | Enabled/Disabled |
CA revocation status | The status of the certificate's revocation by the CA | Boolean | Revoked/Not_revoked/Unknown |
Cloud Storage bucket issue | The status of the Cloud Storage bucket | Boolean | OK/Deleted/Permission_Denied |
Cloud KMS key issue | The status of Cloud Key Management Service | Boolean | OK/Destroyed/Permission_Denied |
Threshold configuration
- Global configuration
- In the Site24x7 web client, go to the Admin section on the left navigation pane.
- Select Configuration Profiles from the left pane and select Threshold and Availability from the drop-down.
- Click Add Threshold Profile in the top-right corner.
- For Monitor Type, select Certificate Authority Service.
- Now you can set the threshold values for all the metrics listed above.
- Monitor-level configuration
- In the Site24x7 web client, go to Cloud > GCP > Certificate Authority Service.
- Select a resource you would like to set a threshold for, then click the hamburger icon.
- Select Edit, which directs you to the Edit Certificate Authority Service Monitor page.
- You can set the threshold values for the metrics with the Threshold and Availability option.
- You can also configure IT Automation at the attribute level.
IT Automation
Site24x7 offers a set of exclusive IT Automation tools that automatically resolve performance degradation issues. These tools react to events proactively rather than waiting for manual intervention. The IT Automation tools automate repetitive tasks and automatically remediate threshold breaches. The alarm engine continually evaluates system events for which thresholds are set and executes the mapped automation when there is a breach
How to configure IT Automation for a monitor
Configuration Rules
Editing multiple monitors to associate different monitor groups or add a different tag can be a tedious process. With Site24x7's Configuration Rules, you can automate the configuration settings of your monitoring resources. Also, Site24x7 allows you to create custom rules to track configuration changes continuously and achieve the ideal configuration settings.
How to add Configuration Rules
Summary
The Summary tab gives you the performance data organized by time for the metrics listed above. To view the summary:
- Go to Cloud > GCP > Certificate Authority Service.
- Select a resource.
- Click the Summary tab.
Configuration Details
The Configuration Details tab provides details on the configurations of application instances. To get the configuration details:
- Go to Cloud > GCP > Certificate Authority Service.
- Select a resource.
- Click the Configuration Details tab.
Reports
Gain in-depth data about the various parameters of your monitored resources and accentuate your service performance using our insightful reports.
To view reports for a Google Cloud Certificate Authority Service resource:
- Go to the Reports section on the left navigation pane.
- Select Certificate Authority Service from the menu on the left.
- You can find the Availability Summary Report, Performance Report, and Inventory Report for one selected monitor. Or you can get the Summary Report, Availability Summary Report, Health Trend Report, and Performance Report for all the Google Cloud Certificate Authority Service monitors.
You can also get reports from the Summary tab of the Google Cloud Certificate Authority Service monitor:
- Click the Summary tab.
- Get the Availability Summary Report of the monitor by clicking Availability.
- You can also find the Performance Report of the monitor by clicking any chart title.
What's next for you?
- Start monitoring your Google Cloud resources in minutes
- Possible reasons why GCP resources are not added for monitoring in Site24x7
- What permissions should I have in my Google account to enable Site24x7's GCP monitoring?
- How to create a service account JSON file to authenticate Site24x7 for the discovery of GCP resources?
- How to create a service account in the GCP console?