cert-expiry-report.html 14 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396
  1. <!DOCTYPE html>
  2. <html>
  3. <head>
  4. <meta charset="UTF-8" />
  5. <title>OCP Certificate Expiry Report</title>
  6. <link rel="stylesheet" href="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css" />
  7. <link href="https://fonts.googleapis.com/css?family=Source+Sans+Pro:300,400,700" rel="stylesheet" />
  8. <style type="text/css">
  9. body {
  10. font-family: 'Source Sans Pro', sans-serif;
  11. margin-left: 50px;
  12. margin-right: 50px;
  13. margin-bottom: 20px;
  14. padding-top: 70px;
  15. }
  16. table {
  17. border-collapse: collapse;
  18. margin-bottom: 20px;
  19. }
  20. table, th, td {
  21. border: 1px solid black;
  22. }
  23. th, td {
  24. padding: 5px;
  25. }
  26. .cert-kind {
  27. margin-top: 5px;
  28. margin-bottom: 5px;
  29. }
  30. footer {
  31. font-size: small;
  32. text-align: center;
  33. }
  34. tr.odd {
  35. background-color: #f2f2f2;
  36. }
  37. </style>
  38. </head>
  39. <body>
  40. <nav class="navbar navbar-default navbar-fixed-top">
  41. <div class="container-fluid">
  42. <div class="navbar-header">
  43. <a class="navbar-brand" href="#">OCP Certificate Expiry Report</a>
  44. </div>
  45. <div class="collapse navbar-collapse">
  46. <p class="navbar-text navbar-right">
  47. <button>
  48. <a href="https://docs.openshift.com/container-platform/latest/install_config/redeploying_certificates.html"
  49. target="_blank"
  50. class="navbar-link">
  51. <i class="glyphicon glyphicon-book"></i> Redeploying Certificates
  52. </a>
  53. </button>
  54. <button>
  55. <a href="https://github.com/openshift/openshift-ansible/tree/master/roles/openshift_certificate_expiry"
  56. target="_blank"
  57. class="navbar-link">
  58. <i class="glyphicon glyphicon-book"></i> Expiry Role Documentation
  59. </a>
  60. </button>
  61. </p>
  62. </div>
  63. </div>
  64. </nav>
  65. <h1>m01.example.com</h1>
  66. <p>
  67. Checked 12 total certificates. Expired/Warning/OK: 0/10/2. Warning window: 1500 days
  68. </p>
  69. <ul>
  70. <li><b>Expirations checked at:</b> 2017-01-17 10:36:25.230920</li>
  71. <li><b>Warn after date:</b> 2021-02-25 10:36:25.230920</li>
  72. </ul>
  73. <table border="1" width="100%">
  74. <tr>
  75. <th colspan="7" style="text-align:center"><h2 class="cert-kind">ocp_certs</h2></th>
  76. </tr>
  77. <tr>
  78. <th>&nbsp;</th>
  79. <th style="width:33%">Certificate Common/Alt Name(s)</th>
  80. <td>Serial</th>
  81. <th>Health</th>
  82. <th>Days Remaining</th>
  83. <th>Expiration Date</th>
  84. <th>Path</th>
  85. </tr>
  86. <tr class="odd">
  87. <td style="text-align:center"><i class="glyphicon glyphicon-alert"></i></td>
  88. <td style="width:33%">CN:172.30.0.1, DNS:kubernetes, DNS:kubernetes.default, DNS:kubernetes.default.svc, DNS:kubernetes.default.svc.cluster.local, DNS:m01.example.com, DNS:openshift, DNS:openshift.default, DNS:openshift.default.svc, DNS:openshift.default.svc.cluster.local, DNS:172.30.0.1, DNS:192.168.124.148, IP Address:172.30.0.1, IP Address:192.168.124.148</td>
  89. <td><code>int(4)/hex(0x4)</code></td>
  90. <td>warning</td>
  91. <td>722</td>
  92. <td>2019-01-09 17:00:02</td>
  93. <td>/etc/origin/master/master.server.crt</td>
  94. </tr>
  95. <tr class="even">
  96. <td style="text-align:center"><i class="glyphicon glyphicon-alert"></i></td>
  97. <td style="width:33%">CN:192.168.124.148, DNS:m01.example.com, DNS:192.168.124.148, IP Address:192.168.124.148</td>
  98. <td><code>int(12)/hex(0xc)</code></td>
  99. <td>warning</td>
  100. <td>722</td>
  101. <td>2019-01-09 17:03:29</td>
  102. <td>/etc/origin/node/server.crt</td>
  103. </tr>
  104. <tr class="odd">
  105. <td style="text-align:center"><i class="glyphicon glyphicon-ok"></i></td>
  106. <td style="width:33%">CN:openshift-signer@1483981200</td>
  107. <td><code>int(1)/hex(0x1)</code></td>
  108. <td>ok</td>
  109. <td>1817</td>
  110. <td>2022-01-08 17:00:01</td>
  111. <td>/etc/origin/master/ca.crt</td>
  112. </tr>
  113. <tr class="even">
  114. <td style="text-align:center"><i class="glyphicon glyphicon-ok"></i></td>
  115. <td style="width:33%">CN:openshift-signer@1483981200</td>
  116. <td><code>int(1)/hex(0x1)</code></td>
  117. <td>ok</td>
  118. <td>1817</td>
  119. <td>2022-01-08 17:00:01</td>
  120. <td>/etc/origin/node/ca.crt</td>
  121. </tr>
  122. <tr>
  123. <th colspan="7" style="text-align:center"><h2 class="cert-kind">etcd</h2></th>
  124. </tr>
  125. <tr>
  126. <th>&nbsp;</th>
  127. <th style="width:33%">Certificate Common/Alt Name(s)</th>
  128. <td>Serial</th>
  129. <th>Health</th>
  130. <th>Days Remaining</th>
  131. <th>Expiration Date</th>
  132. <th>Path</th>
  133. </tr>
  134. <tr class="odd">
  135. <td style="text-align:center"><i class="glyphicon glyphicon-alert"></i></td>
  136. <td style="width:33%">CN:172.30.0.1, DNS:kubernetes, DNS:kubernetes.default, DNS:kubernetes.default.svc, DNS:kubernetes.default.svc.cluster.local, DNS:m01.example.com, DNS:openshift, DNS:openshift.default, DNS:openshift.default.svc, DNS:openshift.default.svc.cluster.local, DNS:172.30.0.1, DNS:192.168.124.148, IP Address:172.30.0.1, IP Address:192.168.124.148</td>
  137. <td><code>int(7)/hex(0x7)</code></td>
  138. <td>warning</td>
  139. <td>722</td>
  140. <td>2019-01-09 17:00:03</td>
  141. <td>/etc/origin/master/etcd.server.crt</td>
  142. </tr>
  143. <tr>
  144. <th colspan="7" style="text-align:center"><h2 class="cert-kind">kubeconfigs</h2></th>
  145. </tr>
  146. <tr>
  147. <th>&nbsp;</th>
  148. <th style="width:33%">Certificate Common/Alt Name(s)</th>
  149. <td>Serial</th>
  150. <th>Health</th>
  151. <th>Days Remaining</th>
  152. <th>Expiration Date</th>
  153. <th>Path</th>
  154. </tr>
  155. <tr class="odd">
  156. <td style="text-align:center"><i class="glyphicon glyphicon-alert"></i></td>
  157. <td style="width:33%">O:system:nodes, CN:system:node:m01.example.com</td>
  158. <td><code>int(11)/hex(0xb)</code></td>
  159. <td>warning</td>
  160. <td>722</td>
  161. <td>2019-01-09 17:03:28</td>
  162. <td>/etc/origin/node/system:node:m01.example.com.kubeconfig</td>
  163. </tr>
  164. <tr class="even">
  165. <td style="text-align:center"><i class="glyphicon glyphicon-alert"></i></td>
  166. <td style="width:33%">O:system:cluster-admins, CN:system:admin</td>
  167. <td><code>int(8)/hex(0x8)</code></td>
  168. <td>warning</td>
  169. <td>722</td>
  170. <td>2019-01-09 17:00:03</td>
  171. <td>/etc/origin/master/admin.kubeconfig</td>
  172. </tr>
  173. <tr class="odd">
  174. <td style="text-align:center"><i class="glyphicon glyphicon-alert"></i></td>
  175. <td style="width:33%">O:system:masters, CN:system:openshift-master</td>
  176. <td><code>int(3)/hex(0x3)</code></td>
  177. <td>warning</td>
  178. <td>722</td>
  179. <td>2019-01-09 17:00:02</td>
  180. <td>/etc/origin/master/openshift-master.kubeconfig</td>
  181. </tr>
  182. <tr class="even">
  183. <td style="text-align:center"><i class="glyphicon glyphicon-alert"></i></td>
  184. <td style="width:33%">O:system:routers, CN:system:openshift-router</td>
  185. <td><code>int(9)/hex(0x9)</code></td>
  186. <td>warning</td>
  187. <td>722</td>
  188. <td>2019-01-09 17:00:03</td>
  189. <td>/etc/origin/master/openshift-router.kubeconfig</td>
  190. </tr>
  191. <tr class="odd">
  192. <td style="text-align:center"><i class="glyphicon glyphicon-alert"></i></td>
  193. <td style="width:33%">O:system:registries, CN:system:openshift-registry</td>
  194. <td><code>int(10)/hex(0xa)</code></td>
  195. <td>warning</td>
  196. <td>722</td>
  197. <td>2019-01-09 17:00:03</td>
  198. <td>/etc/origin/master/openshift-registry.kubeconfig</td>
  199. </tr>
  200. <tr>
  201. <th colspan="7" style="text-align:center"><h2 class="cert-kind">router</h2></th>
  202. </tr>
  203. <tr>
  204. <th>&nbsp;</th>
  205. <th style="width:33%">Certificate Common/Alt Name(s)</th>
  206. <td>Serial</th>
  207. <th>Health</th>
  208. <th>Days Remaining</th>
  209. <th>Expiration Date</th>
  210. <th>Path</th>
  211. </tr>
  212. <tr class="odd">
  213. <td style="text-align:center"><i class="glyphicon glyphicon-alert"></i></td>
  214. <td style="width:33%">CN:router.default.svc, DNS:router.default.svc, DNS:router.default.svc.cluster.local</td>
  215. <td><code>int(5050662940948454653)/hex(0x46178f2f6b765cfd)</code></td>
  216. <td>warning</td>
  217. <td>722</td>
  218. <td>2019-01-09 17:05:46</td>
  219. <td>/api/v1/namespaces/default/secrets/router-certs</td>
  220. </tr>
  221. <tr>
  222. <th colspan="7" style="text-align:center"><h2 class="cert-kind">registry</h2></th>
  223. </tr>
  224. <tr>
  225. <th>&nbsp;</th>
  226. <th style="width:33%">Certificate Common/Alt Name(s)</th>
  227. <td>Serial</th>
  228. <th>Health</th>
  229. <th>Days Remaining</th>
  230. <th>Expiration Date</th>
  231. <th>Path</th>
  232. </tr>
  233. <tr class="odd">
  234. <td style="text-align:center"><i class="glyphicon glyphicon-alert"></i></td>
  235. <td style="width:33%">CN:172.30.242.251, DNS:docker-registry-default.router.default.svc.cluster.local, DNS:docker-registry.default.svc.cluster.local, DNS:172.30.242.251, IP Address:172.30.242.251</td>
  236. <td><code>int(13)/hex(0xd)</code></td>
  237. <td>warning</td>
  238. <td>722</td>
  239. <td>2019-01-09 17:05:54</td>
  240. <td>/api/v1/namespaces/default/secrets/registry-certificates</td>
  241. </tr>
  242. </table>
  243. <hr />
  244. <h1>n01.example.com</h1>
  245. <p>
  246. Checked 3 total certificates. Expired/Warning/OK: 0/2/1. Warning window: 1500 days
  247. </p>
  248. <ul>
  249. <li><b>Expirations checked at:</b> 2017-01-17 10:36:25.217103</li>
  250. <li><b>Warn after date:</b> 2021-02-25 10:36:25.217103</li>
  251. </ul>
  252. <table border="1" width="100%">
  253. <tr>
  254. <th colspan="7" style="text-align:center"><h2 class="cert-kind">ocp_certs</h2></th>
  255. </tr>
  256. <tr>
  257. <th>&nbsp;</th>
  258. <th style="width:33%">Certificate Common/Alt Name(s)</th>
  259. <td>Serial</th>
  260. <th>Health</th>
  261. <th>Days Remaining</th>
  262. <th>Expiration Date</th>
  263. <th>Path</th>
  264. </tr>
  265. <tr class="odd">
  266. <td style="text-align:center"><i class="glyphicon glyphicon-alert"></i></td>
  267. <td style="width:33%">CN:192.168.124.11, DNS:n01.example.com, DNS:192.168.124.11, IP Address:192.168.124.11</td>
  268. <td><code>int(12)/hex(0xc)</code></td>
  269. <td>warning</td>
  270. <td>722</td>
  271. <td>2019-01-09 17:03:29</td>
  272. <td>/etc/origin/node/server.crt</td>
  273. </tr>
  274. <tr class="even">
  275. <td style="text-align:center"><i class="glyphicon glyphicon-ok"></i></td>
  276. <td style="width:33%">CN:openshift-signer@1483981200</td>
  277. <td><code>int(1)/hex(0x1)</code></td>
  278. <td>ok</td>
  279. <td>1817</td>
  280. <td>2022-01-08 17:00:01</td>
  281. <td>/etc/origin/node/ca.crt</td>
  282. </tr>
  283. <tr>
  284. <th colspan="7" style="text-align:center"><h2 class="cert-kind">etcd</h2></th>
  285. </tr>
  286. <tr>
  287. <th>&nbsp;</th>
  288. <th style="width:33%">Certificate Common/Alt Name(s)</th>
  289. <td>Serial</th>
  290. <th>Health</th>
  291. <th>Days Remaining</th>
  292. <th>Expiration Date</th>
  293. <th>Path</th>
  294. </tr>
  295. <tr>
  296. <th colspan="7" style="text-align:center"><h2 class="cert-kind">kubeconfigs</h2></th>
  297. </tr>
  298. <tr>
  299. <th>&nbsp;</th>
  300. <th style="width:33%">Certificate Common/Alt Name(s)</th>
  301. <td>Serial</th>
  302. <th>Health</th>
  303. <th>Days Remaining</th>
  304. <th>Expiration Date</th>
  305. <th>Path</th>
  306. </tr>
  307. <tr class="odd">
  308. <td style="text-align:center"><i class="glyphicon glyphicon-alert"></i></td>
  309. <td style="width:33%">O:system:nodes, CN:system:node:n01.example.com</td>
  310. <td><code>int(11)/hex(0xb)</code></td>
  311. <td>warning</td>
  312. <td>722</td>
  313. <td>2019-01-09 17:03:28</td>
  314. <td>/etc/origin/node/system:node:n01.example.com.kubeconfig</td>
  315. </tr>
  316. <tr>
  317. <th colspan="7" style="text-align:center"><h2 class="cert-kind">router</h2></th>
  318. </tr>
  319. <tr>
  320. <th>&nbsp;</th>
  321. <th style="width:33%">Certificate Common/Alt Name(s)</th>
  322. <td>Serial</th>
  323. <th>Health</th>
  324. <th>Days Remaining</th>
  325. <th>Expiration Date</th>
  326. <th>Path</th>
  327. </tr>
  328. <tr>
  329. <th colspan="7" style="text-align:center"><h2 class="cert-kind">registry</h2></th>
  330. </tr>
  331. <tr>
  332. <th>&nbsp;</th>
  333. <th style="width:33%">Certificate Common/Alt Name(s)</th>
  334. <td>Serial</th>
  335. <th>Health</th>
  336. <th>Days Remaining</th>
  337. <th>Expiration Date</th>
  338. <th>Path</th>
  339. </tr>
  340. </table>
  341. <hr />
  342. <footer>
  343. <p>
  344. Expiration report generated by
  345. the <a href="https://github.com/openshift/openshift-ansible"
  346. target="_blank">openshift-ansible</a>
  347. <a href="https://github.com/openshift/openshift-ansible/tree/master/roles/openshift_certificate_expiry"
  348. target="_blank">certificate expiry</a> role.
  349. </p>
  350. <p>
  351. Status icons from bootstrap/glyphicon
  352. </p>
  353. </footer>
  354. </body>
  355. </html>