Vouch

Monitoring

We have a vouch dashboard located here for production.

Logs are output to the usual /var/log/vouch/vouch.log file and are rotated daily.

Maintenance

vouch is deployed via ansible and controlled by the usual systemctl process, e.g. systemctl status attestant-vouch.service.

Configuration of vouch is controlled by the config file at /home/vouch/.vouch.yml. The per environment values are injected in to the config file via ansible.

Alerts

Alert NameDescriptionAction
Vouch no attestations producedVouch is not producing attestations. Only triggers if Vouch has been up for the past minute.Verify that vouch is running correctly. If no obvious issues possibly flip to the failover instance.
Attestation failuresThere has been an increase in Attestation failures in the past minute.Verify that vouch is running correctly. If no obvious issues and the Repeated attestation failures alert doesn't trigger then it is possible this was a one off and we can take no action, but continue to monitor.
Repeated attestation failuresThere have been repeated Attestation failures in the last 2 minutes.Verify that vouch is running correctly. If no obvious issues possibly flip to the failover instance.
Attestation denialsThere has been an increase in Attestation denials in the past minute.Verify that vouch is running correctly. If no obvious issues and this alert continues to fire possibly flip to the failover instance.
Proposal failuresThere has been an increase in Proposal failures in the past 10 minutes.Verify that vouch is running correctly. If no obvious issues and this alert continues to fire possibly flip to the failover instance.