Skip to content

feat: implemented alerting for expiring certificates for application gateway#1846

Draft
nc-shahidazim wants to merge 1 commit intomainfrom
feat/DTOSS-12035-alert-cert-expiry-app-gateway
Draft

feat: implemented alerting for expiring certificates for application gateway#1846
nc-shahidazim wants to merge 1 commit intomainfrom
feat/DTOSS-12035-alert-cert-expiry-app-gateway

Conversation

@nc-shahidazim
Copy link
Contributor

Description

This PR enables SSL certificate‑expiry alerting for the Application Gateway by integrating the existing application-insights-availability-test Terraform module from the dtos-devops-templates repository. The module is now configured to run availability tests against the Application Gateway endpoint and surface SSL‑related failures through Application Insights.

Details

  • Introduced usage of the application-insights-availability-test module from dtos-devops-templates.
  • Configured the module with a health check endpoint to validate the Application Gateway certificate.
  • Enabled alerting based on SSL validation failures reported by the availability test.
  • All underlying functionality comes from PR #276 in the templates repository.

Context

The platform previously lacked automated monitoring for expiring TLS certificates on the Application Gateway. With the enhancements delivered in PR #276 of the templates repository, we can now consume this functionality directly through a standardised module. This PR activates and configures that feature for our environment.

Pre‑requisites Prior to Release

Before applying this change to any environment, ensure:

  1. Health Check Target URL

    • A valid health check endpoint must be deployed and reachable.
    • The availability test uses this URL to validate the Application Gateway certificate.
  2. Azure DevOps Pipeline Variable

    • The environment variable OCP_APIM_SUBSCRIPTION_KEY must be defined.
    • Required for authenticating requests to the health check endpoint.

Type of changes

  • Refactoring (non-breaking change)
  • New feature (non-breaking change which adds functionality)
  • Breaking change (fix or feature that would change existing functionality)
  • Bug fix (non-breaking change which fixes an issue)

Checklist

  • I am familiar with the contributing guidelines
  • I have followed the code style of the project
  • I have added tests to cover my changes
  • I have updated the documentation accordingly
  • This PR is a result of pair or mob programming

Sensitive Information Declaration

To ensure the utmost confidentiality and protect your and others privacy, we kindly ask you to NOT including PII (Personal Identifiable Information) / PID (Personal Identifiable Data) or any other sensitive data in this PR (Pull Request) and the codebase changes. We will remove any PR that do contain any sensitive information. We really appreciate your cooperation in this matter.

  • I confirm that neither PII/PID nor sensitive data are included in this PR and the codebase changes.

@nc-shahidazim nc-shahidazim changed the title feat: implemented alerting for expiring certificates for application gateway (wip) feat: implemented alerting for expiring certificates for application gateway Feb 20, 2026
@nc-shahidazim nc-shahidazim changed the title (wip) feat: implemented alerting for expiring certificates for application gateway feat: implemented alerting for expiring certificates for application gateway Feb 20, 2026
@nc-shahidazim nc-shahidazim marked this pull request as draft February 20, 2026 15:18
@github-actions
Copy link

Unit Test Results

✔️ Tests 975 / 975 - passed in 66.5s
📝 Coverage 47.07%
📏 4756 / 10412 lines covered 🌿 1167 / 2172 branches covered
🔍 click here for more details

@sonarqubecloud
Copy link

@rfk-nc rfk-nc added the Infra-only Infrastructure only changes label Feb 20, 2026
@stephhou stephhou added the Non-functional change A change that does not change any functions. Mainly config or database changes label Feb 23, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Infra-only Infrastructure only changes Non-functional change A change that does not change any functions. Mainly config or database changes

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants