Kubernetes API Certificate Validation Module (shturval-cert-expiration)
About the service
| Parameter | Description |
|---|---|
| GUI name | Kubernetes API Certificate Validator |
| System name (identifier) | shturval-cert-expiration |
| Cluster Assignment | Monitoring the validity period of Kubernetes API certificates and other X.509 certificates; export of metrics for alerting. |
| Critical | No |
| Public repository | x509-certificate-exporter |
| Dependencies | shturval-monitoring-crds |
| Namespace | shturval-cert-expiration |
Purpose
shturval-cert-expiration - Kubernetes API certificate validation module. Collects certificate expiration metrics to alert you about expiration before a problem occurs.
Where to configure
Services and repositories → Installed services → shturval-cert-expiration → Manage.
Monitoring certificate expiration dates
The module controls the following certificates in the cluster:
- ETCD server and client;
- Kubernetes CA;
- kube-apiserver;
- kubelet;
- kubeconfig files used by components for authentication on the API server;
- PEM files.
Data on certificate validity periods is transmitted in the form of metrics to the monitoring component. Based on these metrics:
- in the Shturval platform GUI, you can view the validity periods of certificates in the cluster (cluster dashboard → Certificates tab);
- a dashboard for monitoring the status of certificates is available in Grafana (section Certificates Expiration).
For correct operation, shturval-monitoring-crds must be set in the cluster.
How to deploy this service - How to deploy a new service.