Datadog Integration

Datadog Integration with TigerTrust

TigerTrust integrates with Datadog to provide comprehensive certificate observability. Monitor certificate health, track expiration timelines, and receive intelligent alerts alongside your existing Datadog monitoring.

Integration Setup

Configure the Datadog integration:

yaml
1# TigerTrust Datadog configuration
2integrations:
3  datadog:
4    enabled: true
5    api_key: ${DATADOG_API_KEY}
6    app_key: ${DATADOG_APP_KEY}
7    site: datadoghq.com  # or datadoghq.eu
8
9    metrics:
10      enabled: true
11      prefix: tigertrust
12      tags:
13        - "env:production"
14        - "service:certificate-management"
15
16    logs:
17      enabled: true
18      source: tigertrust
19      service: certificate-management
20
21    events:
22      enabled: true
23      priority: normal

Custom Metrics

TigerTrust sends the following metrics to Datadog:

text
1tigertrust.certificates.total{environment, issuer}
2tigertrust.certificates.expiring{days_remaining, environment}
3tigertrust.certificates.expired{environment}
4tigertrust.certificates.issued{issuer, key_type}
5tigertrust.certificates.renewed{issuer, auto_renewed}
6tigertrust.certificates.days_until_expiry{common_name, environment}
7tigertrust.policy.violations{policy_name, severity}
8tigertrust.discovery.certificates_found{source}

Pre-built Dashboards

Import TigerTrust dashboards:

json
1{
2  "title": "TigerTrust Certificate Overview",
3  "widgets": [
4    {
5      "definition": {
6        "title": "Certificates by Expiration",
7        "type": "query_value",
8        "requests": [
9          {
10            "q": "sum:tigertrust.certificates.expiring{days_remaining:30}",
11            "aggregator": "last"
12          }
13        ]
14      }
15    },
16    {
17      "definition": {
18        "title": "Certificate Expiration Timeline",
19        "type": "timeseries",
20        "requests": [
21          {
22            "q": "sum:tigertrust.certificates.days_until_expiry{*} by {common_name}"
23          }
24        ]
25      }
26    }
27  ]
28}

Alert Monitors

Set up intelligent certificate alerts:

yaml
1# Certificate Expiration Alert
2name: "Certificate Expiring Soon"
3type: metric alert
4query: |
5  max(last_5m):max:tigertrust.certificates.days_until_expiry{environment:production} by {common_name} < 30
6message: |
7  {{#is_warning}}
8  Certificate {{common_name.name}} expires in {{value}} days.
9  {{/is_warning}}
10
11  {{#is_alert}}
12  URGENT: Certificate {{common_name.name}} expires in {{value}} days!
13  {{/is_alert}}
14
15  @slack-cert-alerts @pagerduty-oncall
16options:
17  thresholds:
18    critical: 7
19    warning: 30

Log Integration

Forward certificate logs to Datadog:

json
1{
2  "timestamp": "2024-03-15T10:30:00Z",
3  "level": "info",
4  "source": "tigertrust",
5  "service": "certificate-management",
6  "message": "Certificate renewed successfully",
7  "attributes": {
8    "certificate_id": "cert-123",
9    "common_name": "api.example.com",
10    "issuer": "DigiCert",
11    "validity_days": 365,
12    "auto_renewed": true
13  }
14}

APM Correlation

Correlate certificate issues with application traces:

python
1from ddtrace import tracer
2
3@tracer.wrap()
4def handle_request(request):
5    # TigerTrust adds certificate context to traces
6    span = tracer.current_span()
7    span.set_tag('certificate.common_name', cert.common_name)
8    span.set_tag('certificate.days_until_expiry', cert.days_until_expiry)
9    span.set_tag('certificate.issuer', cert.issuer)
10
11    # Process request
12    return process(request)

Service Catalog

Register certificate services in Datadog Service Catalog:

yaml
1schema-version: v2
2dd-service: certificate-management
3team: platform-security
4contacts:
5  - type: slack
6    contact: "#certificate-alerts"
7integrations:
8  tigertrust:
9    dashboard-url: https://app.datadoghq.com/dashboard/abc-123

SLO Tracking

Define certificate SLOs:

yaml
1name: "Certificate Availability SLO"
2type: metric
3query: |
4  sum:tigertrust.certificates.valid{environment:production}.as_count() /
5  sum:tigertrust.certificates.total{environment:production}.as_count()
6target_threshold: 99.9
7warning_threshold: 99.95
8timeframe: 30d

Achieve complete certificate observability with TigerTrust and Datadog.