123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396 |
- <!DOCTYPE html>
- <html>
- <head>
- <meta charset="UTF-8" />
- <title>OCP Certificate Expiry Report</title>
- <link rel="stylesheet" href="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css" />
- <link href="https://fonts.googleapis.com/css?family=Source+Sans+Pro:300,400,700" rel="stylesheet" />
- <style type="text/css">
- body {
- font-family: 'Source Sans Pro', sans-serif;
- margin-left: 50px;
- margin-right: 50px;
- margin-bottom: 20px;
- padding-top: 70px;
- }
- table {
- border-collapse: collapse;
- margin-bottom: 20px;
- }
- table, th, td {
- border: 1px solid black;
- }
- th, td {
- padding: 5px;
- }
- .cert-kind {
- margin-top: 5px;
- margin-bottom: 5px;
- }
- footer {
- font-size: small;
- text-align: center;
- }
- tr.odd {
- background-color: #f2f2f2;
- }
- </style>
- </head>
- <body>
- <nav class="navbar navbar-default navbar-fixed-top">
- <div class="container-fluid">
- <div class="navbar-header">
- <a class="navbar-brand" href="#">OCP Certificate Expiry Report</a>
- </div>
- <div class="collapse navbar-collapse">
- <p class="navbar-text navbar-right">
- <button>
- <a href="https://docs.openshift.com/container-platform/latest/install_config/redeploying_certificates.html"
- target="_blank"
- class="navbar-link">
- <i class="glyphicon glyphicon-book"></i> Redeploying Certificates
- </a>
- </button>
- <button>
- <a href="https://github.com/openshift/openshift-ansible/tree/master/roles/openshift_certificate_expiry"
- target="_blank"
- class="navbar-link">
- <i class="glyphicon glyphicon-book"></i> Expiry Role Documentation
- </a>
- </button>
- </p>
- </div>
- </div>
- </nav>
- <h1>m01.example.com</h1>
- <p>
- Checked 12 total certificates. Expired/Warning/OK: 0/10/2. Warning window: 1500 days
- </p>
- <ul>
- <li><b>Expirations checked at:</b> 2017-01-17 10:36:25.230920</li>
- <li><b>Warn after date:</b> 2021-02-25 10:36:25.230920</li>
- </ul>
- <table border="1" width="100%">
- <tr>
- <th colspan="7" style="text-align:center"><h2 class="cert-kind">ocp_certs</h2></th>
- </tr>
- <tr>
- <th> </th>
- <th style="width:33%">Certificate Common/Alt Name(s)</th>
- <td>Serial</th>
- <th>Health</th>
- <th>Days Remaining</th>
- <th>Expiration Date</th>
- <th>Path</th>
- </tr>
- <tr class="odd">
- <td style="text-align:center"><i class="glyphicon glyphicon-alert"></i></td>
- <td style="width:33%">CN:172.30.0.1, DNS:kubernetes, DNS:kubernetes.default, DNS:kubernetes.default.svc, DNS:kubernetes.default.svc.cluster.local, DNS:m01.example.com, DNS:openshift, DNS:openshift.default, DNS:openshift.default.svc, DNS:openshift.default.svc.cluster.local, DNS:172.30.0.1, DNS:192.168.124.148, IP Address:172.30.0.1, IP Address:192.168.124.148</td>
- <td><code>int(4)/hex(0x4)</code></td>
- <td>warning</td>
- <td>722</td>
- <td>2019-01-09 17:00:02</td>
- <td>/etc/origin/master/master.server.crt</td>
- </tr>
- <tr class="even">
- <td style="text-align:center"><i class="glyphicon glyphicon-alert"></i></td>
- <td style="width:33%">CN:192.168.124.148, DNS:m01.example.com, DNS:192.168.124.148, IP Address:192.168.124.148</td>
- <td><code>int(12)/hex(0xc)</code></td>
- <td>warning</td>
- <td>722</td>
- <td>2019-01-09 17:03:29</td>
- <td>/etc/origin/node/server.crt</td>
- </tr>
- <tr class="odd">
- <td style="text-align:center"><i class="glyphicon glyphicon-ok"></i></td>
- <td style="width:33%">CN:openshift-signer@1483981200</td>
- <td><code>int(1)/hex(0x1)</code></td>
- <td>ok</td>
- <td>1817</td>
- <td>2022-01-08 17:00:01</td>
- <td>/etc/origin/master/ca.crt</td>
- </tr>
- <tr class="even">
- <td style="text-align:center"><i class="glyphicon glyphicon-ok"></i></td>
- <td style="width:33%">CN:openshift-signer@1483981200</td>
- <td><code>int(1)/hex(0x1)</code></td>
- <td>ok</td>
- <td>1817</td>
- <td>2022-01-08 17:00:01</td>
- <td>/etc/origin/node/ca.crt</td>
- </tr>
- <tr>
- <th colspan="7" style="text-align:center"><h2 class="cert-kind">etcd</h2></th>
- </tr>
- <tr>
- <th> </th>
- <th style="width:33%">Certificate Common/Alt Name(s)</th>
- <td>Serial</th>
- <th>Health</th>
- <th>Days Remaining</th>
- <th>Expiration Date</th>
- <th>Path</th>
- </tr>
- <tr class="odd">
- <td style="text-align:center"><i class="glyphicon glyphicon-alert"></i></td>
- <td style="width:33%">CN:172.30.0.1, DNS:kubernetes, DNS:kubernetes.default, DNS:kubernetes.default.svc, DNS:kubernetes.default.svc.cluster.local, DNS:m01.example.com, DNS:openshift, DNS:openshift.default, DNS:openshift.default.svc, DNS:openshift.default.svc.cluster.local, DNS:172.30.0.1, DNS:192.168.124.148, IP Address:172.30.0.1, IP Address:192.168.124.148</td>
- <td><code>int(7)/hex(0x7)</code></td>
- <td>warning</td>
- <td>722</td>
- <td>2019-01-09 17:00:03</td>
- <td>/etc/origin/master/etcd.server.crt</td>
- </tr>
- <tr>
- <th colspan="7" style="text-align:center"><h2 class="cert-kind">kubeconfigs</h2></th>
- </tr>
- <tr>
- <th> </th>
- <th style="width:33%">Certificate Common/Alt Name(s)</th>
- <td>Serial</th>
- <th>Health</th>
- <th>Days Remaining</th>
- <th>Expiration Date</th>
- <th>Path</th>
- </tr>
- <tr class="odd">
- <td style="text-align:center"><i class="glyphicon glyphicon-alert"></i></td>
- <td style="width:33%">O:system:nodes, CN:system:node:m01.example.com</td>
- <td><code>int(11)/hex(0xb)</code></td>
- <td>warning</td>
- <td>722</td>
- <td>2019-01-09 17:03:28</td>
- <td>/etc/origin/node/system:node:m01.example.com.kubeconfig</td>
- </tr>
- <tr class="even">
- <td style="text-align:center"><i class="glyphicon glyphicon-alert"></i></td>
- <td style="width:33%">O:system:cluster-admins, CN:system:admin</td>
- <td><code>int(8)/hex(0x8)</code></td>
- <td>warning</td>
- <td>722</td>
- <td>2019-01-09 17:00:03</td>
- <td>/etc/origin/master/admin.kubeconfig</td>
- </tr>
- <tr class="odd">
- <td style="text-align:center"><i class="glyphicon glyphicon-alert"></i></td>
- <td style="width:33%">O:system:masters, CN:system:openshift-master</td>
- <td><code>int(3)/hex(0x3)</code></td>
- <td>warning</td>
- <td>722</td>
- <td>2019-01-09 17:00:02</td>
- <td>/etc/origin/master/openshift-master.kubeconfig</td>
- </tr>
- <tr class="even">
- <td style="text-align:center"><i class="glyphicon glyphicon-alert"></i></td>
- <td style="width:33%">O:system:routers, CN:system:openshift-router</td>
- <td><code>int(9)/hex(0x9)</code></td>
- <td>warning</td>
- <td>722</td>
- <td>2019-01-09 17:00:03</td>
- <td>/etc/origin/master/openshift-router.kubeconfig</td>
- </tr>
- <tr class="odd">
- <td style="text-align:center"><i class="glyphicon glyphicon-alert"></i></td>
- <td style="width:33%">O:system:registries, CN:system:openshift-registry</td>
- <td><code>int(10)/hex(0xa)</code></td>
- <td>warning</td>
- <td>722</td>
- <td>2019-01-09 17:00:03</td>
- <td>/etc/origin/master/openshift-registry.kubeconfig</td>
- </tr>
- <tr>
- <th colspan="7" style="text-align:center"><h2 class="cert-kind">router</h2></th>
- </tr>
- <tr>
- <th> </th>
- <th style="width:33%">Certificate Common/Alt Name(s)</th>
- <td>Serial</th>
- <th>Health</th>
- <th>Days Remaining</th>
- <th>Expiration Date</th>
- <th>Path</th>
- </tr>
- <tr class="odd">
- <td style="text-align:center"><i class="glyphicon glyphicon-alert"></i></td>
- <td style="width:33%">CN:router.default.svc, DNS:router.default.svc, DNS:router.default.svc.cluster.local</td>
- <td><code>int(5050662940948454653)/hex(0x46178f2f6b765cfd)</code></td>
- <td>warning</td>
- <td>722</td>
- <td>2019-01-09 17:05:46</td>
- <td>/api/v1/namespaces/default/secrets/router-certs</td>
- </tr>
- <tr>
- <th colspan="7" style="text-align:center"><h2 class="cert-kind">registry</h2></th>
- </tr>
- <tr>
- <th> </th>
- <th style="width:33%">Certificate Common/Alt Name(s)</th>
- <td>Serial</th>
- <th>Health</th>
- <th>Days Remaining</th>
- <th>Expiration Date</th>
- <th>Path</th>
- </tr>
- <tr class="odd">
- <td style="text-align:center"><i class="glyphicon glyphicon-alert"></i></td>
- <td style="width:33%">CN:172.30.242.251, DNS:docker-registry-default.router.default.svc.cluster.local, DNS:docker-registry.default.svc.cluster.local, DNS:172.30.242.251, IP Address:172.30.242.251</td>
- <td><code>int(13)/hex(0xd)</code></td>
- <td>warning</td>
- <td>722</td>
- <td>2019-01-09 17:05:54</td>
- <td>/api/v1/namespaces/default/secrets/registry-certificates</td>
- </tr>
- </table>
- <hr />
- <h1>n01.example.com</h1>
- <p>
- Checked 3 total certificates. Expired/Warning/OK: 0/2/1. Warning window: 1500 days
- </p>
- <ul>
- <li><b>Expirations checked at:</b> 2017-01-17 10:36:25.217103</li>
- <li><b>Warn after date:</b> 2021-02-25 10:36:25.217103</li>
- </ul>
- <table border="1" width="100%">
- <tr>
- <th colspan="7" style="text-align:center"><h2 class="cert-kind">ocp_certs</h2></th>
- </tr>
- <tr>
- <th> </th>
- <th style="width:33%">Certificate Common/Alt Name(s)</th>
- <td>Serial</th>
- <th>Health</th>
- <th>Days Remaining</th>
- <th>Expiration Date</th>
- <th>Path</th>
- </tr>
- <tr class="odd">
- <td style="text-align:center"><i class="glyphicon glyphicon-alert"></i></td>
- <td style="width:33%">CN:192.168.124.11, DNS:n01.example.com, DNS:192.168.124.11, IP Address:192.168.124.11</td>
- <td><code>int(12)/hex(0xc)</code></td>
- <td>warning</td>
- <td>722</td>
- <td>2019-01-09 17:03:29</td>
- <td>/etc/origin/node/server.crt</td>
- </tr>
- <tr class="even">
- <td style="text-align:center"><i class="glyphicon glyphicon-ok"></i></td>
- <td style="width:33%">CN:openshift-signer@1483981200</td>
- <td><code>int(1)/hex(0x1)</code></td>
- <td>ok</td>
- <td>1817</td>
- <td>2022-01-08 17:00:01</td>
- <td>/etc/origin/node/ca.crt</td>
- </tr>
- <tr>
- <th colspan="7" style="text-align:center"><h2 class="cert-kind">etcd</h2></th>
- </tr>
- <tr>
- <th> </th>
- <th style="width:33%">Certificate Common/Alt Name(s)</th>
- <td>Serial</th>
- <th>Health</th>
- <th>Days Remaining</th>
- <th>Expiration Date</th>
- <th>Path</th>
- </tr>
- <tr>
- <th colspan="7" style="text-align:center"><h2 class="cert-kind">kubeconfigs</h2></th>
- </tr>
- <tr>
- <th> </th>
- <th style="width:33%">Certificate Common/Alt Name(s)</th>
- <td>Serial</th>
- <th>Health</th>
- <th>Days Remaining</th>
- <th>Expiration Date</th>
- <th>Path</th>
- </tr>
- <tr class="odd">
- <td style="text-align:center"><i class="glyphicon glyphicon-alert"></i></td>
- <td style="width:33%">O:system:nodes, CN:system:node:n01.example.com</td>
- <td><code>int(11)/hex(0xb)</code></td>
- <td>warning</td>
- <td>722</td>
- <td>2019-01-09 17:03:28</td>
- <td>/etc/origin/node/system:node:n01.example.com.kubeconfig</td>
- </tr>
- <tr>
- <th colspan="7" style="text-align:center"><h2 class="cert-kind">router</h2></th>
- </tr>
- <tr>
- <th> </th>
- <th style="width:33%">Certificate Common/Alt Name(s)</th>
- <td>Serial</th>
- <th>Health</th>
- <th>Days Remaining</th>
- <th>Expiration Date</th>
- <th>Path</th>
- </tr>
- <tr>
- <th colspan="7" style="text-align:center"><h2 class="cert-kind">registry</h2></th>
- </tr>
- <tr>
- <th> </th>
- <th style="width:33%">Certificate Common/Alt Name(s)</th>
- <td>Serial</th>
- <th>Health</th>
- <th>Days Remaining</th>
- <th>Expiration Date</th>
- <th>Path</th>
- </tr>
- </table>
- <hr />
- <footer>
- <p>
- Expiration report generated by
- the <a href="https://github.com/openshift/openshift-ansible"
- target="_blank">openshift-ansible</a>
- <a href="https://github.com/openshift/openshift-ansible/tree/master/roles/openshift_certificate_expiry"
- target="_blank">certificate expiry</a> role.
- </p>
- <p>
- Status icons from bootstrap/glyphicon
- </p>
- </footer>
- </body>
- </html>
|