Skip to content

cert-checker: fix logging & push metrics#8763

Merged
aarongable merged 36 commits into
mainfrom
cert-checker-logs
Jun 15, 2026
Merged

cert-checker: fix logging & push metrics#8763
aarongable merged 36 commits into
mainfrom
cert-checker-logs

Conversation

@lenaunderwood22

@lenaunderwood22 lenaunderwood22 commented May 26, 2026

Copy link
Copy Markdown
Contributor

Update cert-checker to log each bad cert individually, rather than all together in a single blob. This meshes better with our log processing infrastructure, and ensures the blob doesn't become so large that it gets truncated.

Also allow cert-checker to be configured with a prometheus push gateway URL, to which it will directly export statistics about the number of certs it checked. This allows us to get rid of the wrapper script which currently computes and pushes these metrics.

Fixes #8753

@lenaunderwood22 lenaunderwood22 requested a review from a team as a code owner May 26, 2026 21:25
@lenaunderwood22 lenaunderwood22 requested a review from ezekiel May 26, 2026 21:25
ezekiel
ezekiel previously approved these changes May 26, 2026
@ezekiel ezekiel requested review from a team and aarongable and removed request for a team May 26, 2026 21:56
@github-actions

Copy link
Copy Markdown
Contributor

@lenaunderwood22, this PR appears to contain configuration and/or SQL schema changes. Please ensure that a corresponding deployment ticket has been filed with the new values.

@ezekiel ezekiel requested review from a team and removed request for aarongable May 26, 2026 21:56
Comment thread cmd/cert-checker/main.go Outdated
Comment thread cmd/cert-checker/main.go Outdated
Comment thread cmd/cert-checker/main.go Outdated
Comment thread cmd/cert-checker/main.go Outdated
Comment thread cmd/cert-checker/main.go
Comment thread cmd/cert-checker/main.go
Comment thread cmd/cert-checker/main.go Outdated
Comment thread cmd/cert-checker/main.go Outdated
Comment thread cmd/cert-checker/main.go Outdated
Comment thread cmd/shell.go
Co-authored-by: Aaron Gable <aaron@letsencrypt.org>
aarongable
aarongable previously approved these changes May 28, 2026
@aarongable aarongable requested a review from ezekiel May 28, 2026 23:33
ezekiel
ezekiel previously approved these changes May 28, 2026
@lenaunderwood22 lenaunderwood22 dismissed stale reviews from ezekiel and aarongable via 15ce586 May 29, 2026 14:50
Comment thread cmd/cert-checker/main.go Outdated
aarongable
aarongable previously approved these changes Jun 5, 2026

@aarongable aarongable left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM with some nits / test improvements.

Comment thread cmd/cert-checker/main.go Outdated
Comment thread cmd/cert-checker/main.go Outdated
Comment thread cmd/cert-checker/main_test.go Outdated
Comment thread cmd/cert-checker/main_test.go Outdated
Comment thread cmd/cert-checker/main_test.go Outdated
Comment thread cmd/cert-checker/main_test.go Outdated
Co-authored-by: Aaron Gable <aaron@letsencrypt.org>
lenaunderwood22 and others added 9 commits June 9, 2026 08:46
Co-authored-by: Aaron Gable <aaron@letsencrypt.org>
Co-authored-by: Aaron Gable <aaron@letsencrypt.org>
Co-authored-by: Aaron Gable <aaron@letsencrypt.org>
Co-authored-by: Aaron Gable <aaron@letsencrypt.org>
aarongable
aarongable previously approved these changes Jun 10, 2026

@beautifulentropy beautifulentropy left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks for all of the hard work on this, I have just a couple more comments and then I'm good to approve!

Comment thread cmd/shell.go
Comment thread cmd/shell.go
Comment thread cmd/cert-checker/main.go Outdated
Co-authored-by: Samantha Frank <hello@entropy.cat>
lenaunderwood22 and others added 3 commits June 15, 2026 07:09
Co-authored-by: Samantha Frank <hello@entropy.cat>
Co-authored-by: Samantha Frank <hello@entropy.cat>
@aarongable aarongable merged commit a5ecaf9 into main Jun 15, 2026
33 of 35 checks passed
@aarongable aarongable deleted the cert-checker-logs branch June 15, 2026 17:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Improve cert-checker's log and metric output

5 participants