Monitor kubernetes, etcd certificates expired dates
docker build tag and push
make releasekubectl install (DaemonSet)
make installconfig
- job_name: 'ssl-exporter'
kubernetes_sd_configs:
- role: pod
relabel_configs:
- source_labels: [__meta_kubernetes_namespace]
regex: ops
action: keep
- source_labels: [__meta_kubernetes_pod_name]
regex: ssl-exporter-(.+)
action: keepalert rules
- name: ssl.rules
rules:
- alert: CertExpiredDaysLeft
expr: certs_expired_days_left < 30
labels:
severity: warning
annotations:
summary: "kubernetes certs_expired_days_left < 30 days"
description: "certs_expired_days_left is {{ $value }}"