Check a pem encoded tls certificate inside a pod

enix / x509-certificate-exporter

A Prometheus exporter to monitor x509 certificates expiration in Kubernetes clusters or standalone

MIT License

632 stars 64 forks source link

Check a pem encoded tls certificate inside a pod #260

Closed jsammut1976 closed 5 months ago

jsammut1976 commented 6 months ago

Discussed in https://github.com/enix/x509-certificate-exporter/discussions/245

^{Originally posted by **jsammut1976** February 7, 2024} I am aware that this x509 exporter may be used to watch hostpath directories in a k8s cluster. Can this exporter be used to monitor a pem encoded certificate which resides in a pod's filesystem instead? (not in a directory in the hosting k8s node)?

paullaffitte commented 5 months ago

Hello,

This would require to run the exporter as a side-car of your pod and while this is technically possible, it is not a feature that we plan to officially support for now as part of the helm chart. In this regard I'm closing the issue, but feel free to ask questions if you need help about how to configure it as a side-car.