Help Docs

Google Cloud Certificate Authority Service monitoring

Optimize your certificate expiration monitoring strategy with Site24x7. Monitor your Google Cloud Certificate Authority Service resources with Site24x7 to keep track of the certificates created and the operational status of Google Cloud Certificate Authority Service.

Table of contents

Setup and configuration

Make sure you have the permissions listed in this knowledge base document to enable monitoring for your Google Cloud resources.
  • Adding Google Cloud Certificate Authority Service while configuring a new Google Cloud monitor
    If you have not configured a Google Cloud monitor yet, add one by following the steps below:
    1. Log in to your Site24x7 account.
    2. Go to Cloud > GCP > Add GCP Monitor or Admin > Cloud Monitoring > Google Cloud Platform (GCP).
    3. Provide a unique display name for identification purposes.
    4. Upload a service account JSON file to authenticate Site24x7 for performing resource discovery.
    5. Select Certificate Authority Service from the Service/Resource Types drop-down.
    6. Select existing Notification Profiles, User Alert Groups, Tags, and IT Automation Templates, or add new ones. You can also integrate Site24x7's alarms with your preferred third-party service.
    7. Click Start GCP Monitoring.
  • Adding Google Cloud Certificate Authority Service to an existing Google Cloud monitor
    If you already have a Google Cloud monitor configured for the service account, you can add Google Cloud Certificate Authority Service by following the steps below:
    1. Log in to your Site24x7 account.
    2. Go to Cloud > GCP, select your GCP monitor, then go to any of the dashboards on the left pane of the monitor.
    3. Click the hamburger icon and select Edit, which brings you to the Edit GCP Monitor page.
    4. On the Edit GCP Monitor page, select Certificate Authority Service from the Service/Resource Types drop-down and click Save.
    5. After successful configuration, go to Cloud > GCP > Certificate Authority Service. Now you can view the discovered Certificate Authority Service resources.
Note

Discovery of new GCP resources happens based on the time intervals set during the creation of the Google Cloud monitor in the Discovery Interval field.

Polling frequency

Site24x7's Google Cloud Certificate Authority Service monitor collects minute-wise data every five minutes.

Supported metrics

Metric name Description Statistic Unit
CA certificate expiration The time taken for a certificate authority (CA) certificate to expire Total Days
CA certificate chain expiration The time taken for a CA certificate parent to expire Total Days
CA certificate creation count The total number of certificates issued by the CA with the status CA:TRUE Total Count
Certificate creation count The total number of certificates issued by the CA Total Count
Certificate creation CA policy error count The total number of certificate creation failures in the specified time Total Count
Certificate creation request count The total number of certificate creation requests received by the CA Total Count
CA resource state The operational status of the CA Boolean Enabled/Disabled
CA revocation status The status of the certificate's revocation by the CA Boolean Revoked/Not_revoked/Unknown
Cloud Storage bucket issue The status of the Cloud Storage bucket Boolean OK/Deleted/Permission_Denied
Cloud KMS key issue The status of Cloud Key Management Service Boolean OK/Destroyed/Permission_Denied

Threshold configuration

  • Global configuration
    1. In the Site24x7 web client, go to the Admin section on the left navigation pane.
    2. Select Configuration Profiles from the left pane and select Threshold and Availability from the drop-down.
    3. Click Add Threshold Profile in the top-right corner.
    4. For Monitor Type, select Certificate Authority Service.
    5. Now you can set the threshold values for all the metrics listed above.
  • Monitor-level configuration
    1. In the Site24x7 web client, go to Cloud > GCP > Certificate Authority Service.
    2. Select a resource you would like to set a threshold for, then click the hamburger icon.
    3. Select Edit, which directs you to the Edit Certificate Authority Service Monitor page.
    4. You can set the threshold values for the metrics with the Threshold and Availability option.
    5. You can also configure IT Automation at the attribute level.

IT Automation

Site24x7 offers a set of exclusive IT Automation tools that automatically resolve performance degradation issues. These tools react to events proactively rather than waiting for manual intervention. The IT Automation tools automate repetitive tasks and automatically remediate threshold breaches. The alarm engine continually evaluates system events for which thresholds are set and executes the mapped automation when there is a breach

How to configure IT Automation for a monitor

Configuration Rules

Editing multiple monitors to associate different monitor groups or add a different tag can be a tedious process. With Site24x7's Configuration Rules, you can automate the configuration settings of your monitoring resources. Also, Site24x7 allows you to create custom rules to track configuration changes continuously and achieve the ideal configuration settings.

How to add Configuration Rules

Summary

The Summary tab gives you the performance data organized by time for the metrics listed above. To view the summary:

  1. Go to Cloud > GCP > Certificate Authority Service.
  2. Select a resource.
  3. Click the Summary tab.

Configuration Details

The Configuration Details tab provides details on the configurations of application instances. To get the configuration details:

  1. Go to Cloud > GCP > Certificate Authority Service.
  2. Select a resource.
  3. Click the Configuration Details tab.

Reports

Gain in-depth data about the various parameters of your monitored resources and accentuate your service performance using our insightful reports.

To view reports for a Google Cloud Certificate Authority Service resource:

  1. Go to the Reports section on the left navigation pane.
  2. Select Certificate Authority Service from the menu on the left.
  3. You can find the Availability Summary Report, Performance Report, and Inventory Report for one selected monitor. Or you can get the Summary Report, Availability Summary Report, Health Trend Report, and Performance Report for all the Google Cloud Certificate Authority Service monitors.

You can also get reports from the Summary tab of the Google Cloud Certificate Authority Service monitor:

  1. Click the Summary tab.
  2. Get the Availability Summary Report of the monitor by clicking Availability.
  3. You can also find the Performance Report of the monitor by clicking any chart title.

Was this document helpful?

Shortlink has been copied!