PagerDuty Integration with TigerTrust
TigerTrust integrates with PagerDuty for critical certificate incident management.
Events API Configuration
Configure TigerTrust to send events to PagerDuty:
yaml1integrations: 2 pagerduty: 3 routing_key: $PAGERDUTY_ROUTING_KEY 4 5 severity_mapping: 6 certificate_expired: critical 7 certificate_expiring_7_days: error 8 certificate_expiring_30_days: warning 9 policy_violation: error 10 renewal_failed: critical 11 12 services: 13 production: PXXXXXX 14 staging: PYYYYYY
Incident Creation
TigerTrust sends Events API v2 formatted alerts:
json1{ 2 "routing_key": "your-routing-key", 3 "event_action": "trigger", 4 "dedup_key": "cert-api-example-com-expired", 5 "payload": { 6 "summary": "CRITICAL: Certificate Expired - api.example.com", 7 "severity": "critical", 8 "source": "TigerTrust", 9 "component": "api.example.com", 10 "group": "production", 11 "class": "certificate_expired", 12 "custom_details": { 13 "certificate_name": "api.example.com", 14 "issuer": "DigiCert", 15 "expired_date": "2024-03-15", 16 "environment": "production", 17 "affected_services": ["API Gateway", "Mobile App"] 18 } 19 }, 20 "links": [ 21 { 22 "href": "https://app.tigertrust.io/certificates/cert-123", 23 "text": "View in TigerTrust" 24 } 25 ] 26}
Service Directory
Organize certificate services in PagerDuty:
- Certificate Management (parent service)
- Production Certificates
- Staging Certificates
- Internal PKI
- Code Signing
Escalation Policies
Configure escalation for certificate incidents:
text1Level 1 (0 min): Certificate Team On-Call 2Level 2 (15 min): Security Team Lead 3Level 3 (30 min): VP of Engineering 4Level 4 (60 min): CTO
Bi-directional Sync
TigerTrust responds to PagerDuty actions:
| PagerDuty Action | TigerTrust Response |
|---|---|
| Acknowledge | Mark alert acknowledged |
| Resolve | Close alert, log resolution |
| Snooze | Pause alerting temporarily |
| Escalate | Increase alert priority |
Alert Grouping
Intelligent alert grouping:
yaml1grouping: 2 type: intelligent 3 fields: 4 - environment 5 - issuer 6 time_window: 300 7 8 # Group related certificate alerts 9 correlation: 10 - certificate_expired 11 - renewal_failed 12 - deployment_failed
Analytics Integration
Track certificate incident metrics:
- Mean Time to Acknowledge (MTTA)
- Mean Time to Resolve (MTTR)
- Incident frequency by certificate type
- On-call burden analysis
Runbook Automation
Trigger automated remediation:
yaml1automation: 2 certificate_expired: 3 actions: 4 - trigger_renewal 5 - notify_stakeholders 6 - create_postmortem 7 8 renewal_failed: 9 actions: 10 - retry_renewal 11 - escalate_to_security
Ensure rapid response to certificate incidents with PagerDuty and TigerTrust.