cert-exporter

Exposes three metrics to Prometheus regarding certificates/tokens:

cert_exporter_not_after

Timestamp after which the cert is invalid (for certificate files mounted from the host filesystem). When a file contains multiple concatenated certificates, one series is emitted per certificate, distinguished by the serialnumber label.

cert_exporter_secret_not_after

Timestamp after which the cert is invalid (for certificates stored in Kubernetes secrets). When a secret key contains multiple concatenated certificates, one series is emitted per certificate, distinguished by the serialnumber label.

cert_exporter_token_not_after

Timestamp after which the Vault token is expired.

Deployment

• Managed by app-operator.
• Production releases are stored in the default-catalog.
• WIP releases are stored in the default-test-catalog.

Installing the Chart

To install the chart locally:

$ git clone https://github.com/giantswarm/cert-exporter.git
$ cd cert-exporter
$ helm install helm/cert-exporter

Provide a custom values.yaml:

$ helm install cert-exporter -f values.yaml

Release Process

• Ensure CHANGELOG.md is up to date.
• Create a new GitHub release with the version e.g. v0.1.0 and link the changelog entry.
• This will push a new git tag and trigger a new tarball to be pushed to the default-catalog.
• Update cluster-operator with the new version.