fm: add certificate diagnosis engine for expiring silo TLS certificates - #11238

Open

smklein wants to merge 9 commits into

mainfrom

fm-certificate-de

Commits on Sep 4, 2026

fm: add certificate diagnosis engine for expiring silo TLS certificates
smklein
committed
5007ba6
fm: name only the absolute expiration time in certificate fact comments
smklein
committed
e8c3674
fm: only observe certificates Nexus can actually serve
smklein
committed
590fba9
fm: fix wrapped warning string in the certificate loader
smklein
committed
4d7489d
fm: break best-certificate ties deterministically
smklein
committed
9e449d0
nexus: pick the best certificate by its converted not_after
smklein
committed
391d604
fm: make certificate fact payload columns NOT NULL
smklein
committed
2e1ca73
fm: use silo_list_all_batched in the certificate loader
smklein
committed
de88ede
fm: make the parsed certificate case's fact non-optional
smklein
committed
4a64593