SAML Certificate Expiry
As an Aiven Administrator
I want to have an automated way to know when a user's ssl certificates enter their expiration grace period (last 3 months)
so that I can update the values stored in, say, AWS SecretsManager
A simple method would be to provide an api that shows the expiration dates for each user (as per the data file available to the Console) so that I could poll once per month, say, and update any certificates in the grace period and use the current acknowledgement api to complete the task.
-
On customer's feedback Cert Rotation - product enhancement : Suggestions include adding visibility on certification validity and expiry information for users, sending notifications/alerts on Aiven console, enabling users to manage certificates themselves.
-
Johnnie Walker commented
Tommi, thanks for getting back. I feel such a fool; having tried to browse the api docs in Safari, which was a poor experience in terms of scrolling around, I switched to Chrome and was able to find exactly what you're describing.
-
There is a field in API responses (Get details for a single user & Get service information which lists all users) `access_cert_not_valid_after_time` that is offering this kind of information.
Is this what you're looking for?