Cluster Status
The Status page of the Zero Console displays notifications and alerts regarding the health of a cluster. If you see an alert in the Status page, it means something may be wrong with your cluster and you should take steps to resolve it.
We've addressed all the cluster status alerts below. Refer to the relevant alert to learn how to fix it.
Certificates are expired or invalid
This cluster status alert inspects a cluster's certificates to see if they expire within 10 days. It runs daily, and every time the cluster configuration is updated.
What causes this alert:
- If your cluster uses managed certificates provisioned by Pomerium, then this error is a bug. Please contact support.
- If you manually uploaded your own custom certificate, then you must upload a new certificate.
Steps to resolve: Upload a valid certificate, or allow Pomerium to automate certificate management for you by adding a Custom Domain.
Hostnames do not have matching certificates
This cluster status alert ensures that all the hostnames available in a cluster's configuration have matching certificates. It runs every time the cluster configuration is updated.
What causes this alert: Either the From URL in a route block is incorrect, or the certificate is missing.
Steps to resolve: Make sure all From URLs are correct, and that the hostnames have matching certificates.
For more information on certificates in Pomerium, see the following pages: