Promhub Logo Prom hub

Kubernetes client certificate expires next week
warning

Description A client certificate used to authenticate to the apiserver is expiring next week.
Query 
>>>
	
				
					
				
			
				
					{job="apiserver"} > 0 and 
				
			
				
					
					
						histogram_quantile
					
				
			
				
					(0.01, sum by (job, le) (
				
			
				
					
					
						rate
					
				
			
				
					(
				
			
				
					
				
			
				
					{job="apiserver"}[5m]))) < 7*24*60*60
Query Explanation

The rule first ensures that at least one client‑certificate metric is being reported (apiserver_client_certificate_expiration_seconds_count{job="apiserver"} > 0). It then computes the 1 % low‑percentile of the certificates' remaining lifetime over the past 5 minutes (histogram_quantile(0.01, …)) and fires if that value is under one week (< 7*24*60*60), indicating a certificate will expire within the next week.

Get Alert✕
Download
Copy to Clipboard