PagerDuty Integration

PagerDuty Integration with TigerTrust

TigerTrust integrates with PagerDuty for critical certificate incident management.

Events API Configuration

Configure TigerTrust to send events to PagerDuty:

integrations:
  pagerduty:
    routing_key: $PAGERDUTY_ROUTING_KEY

    severity_mapping:
      certificate_expired: critical
      certificate_expiring_7_days: error
      certificate_expiring_30_days: warning
      policy_violation: error
      renewal_failed: critical

    services:
      production: PXXXXXX
      staging: PYYYYYY

Incident Creation

TigerTrust sends Events API v2 formatted alerts:

{
  "routing_key": "your-routing-key",
  "event_action": "trigger",
  "dedup_key": "cert-api-example-com-expired",
  "payload": {
    "summary": "CRITICAL: Certificate Expired - api.example.com",
    "severity": "critical",
    "source": "TigerTrust",
    "component": "api.example.com",
    "group": "production",
    "class": "certificate_expired",
    "custom_details": {
      "certificate_name": "api.example.com",
      "issuer": "DigiCert",
      "expired_date": "2024-03-15",
      "environment": "production",
      "affected_services": ["API Gateway", "Mobile App"]
    }
  },
  "links": [
    {
      "href": "https://app.tigertrust.io/certificates/cert-123",
      "text": "View in TigerTrust"
    }
  ]
}

Service Directory

Organize certificate services in PagerDuty:

• Certificate Management (parent service)
  • Production Certificates
  • Staging Certificates
  • Internal PKI
  • Code Signing

Escalation Policies

Configure escalation for certificate incidents:

Level 1 (0 min): Certificate Team On-Call
Level 2 (15 min): Security Team Lead
Level 3 (30 min): VP of Engineering
Level 4 (60 min): CTO

Bi-directional Sync

TigerTrust responds to PagerDuty actions:

| PagerDuty Action | TigerTrust Response | |-----------------|---------------------| | Acknowledge | Mark alert acknowledged | | Resolve | Close alert, log resolution | | Snooze | Pause alerting temporarily | | Escalate | Increase alert priority |

Alert Grouping

Intelligent alert grouping:

grouping:
  type: intelligent
  fields:
    - environment
    - issuer
  time_window: 300

  # Group related certificate alerts
  correlation:
    - certificate_expired
    - renewal_failed
    - deployment_failed

Analytics Integration

Track certificate incident metrics:

• Mean Time to Acknowledge (MTTA)
• Mean Time to Resolve (MTTR)
• Incident frequency by certificate type
• On-call burden analysis

Runbook Automation

Trigger automated remediation:

automation:
  certificate_expired:
    actions:
      - trigger_renewal
      - notify_stakeholders
      - create_postmortem

  renewal_failed:
    actions:
      - retry_renewal
      - escalate_to_security

Ensure rapid response to certificate incidents with PagerDuty and TigerTrust.