From 2d6f4a4b73d73b2bd658cbda21efcaffc2da9863 Mon Sep 17 00:00:00 2001 From: Leonardo Taccari Date: Wed, 11 Oct 2023 17:33:00 +0200 Subject: [PATCH] Ignore fake certificate for NGINXCertificateExpiry The fake certificate is only a fallback and it is okay-ish if it expires. Do not alert for its expiration. --- charts/ingress-nginx/values.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/charts/ingress-nginx/values.yaml b/charts/ingress-nginx/values.yaml index f1dd15900..99cdeaa41 100644 --- a/charts/ingress-nginx/values.yaml +++ b/charts/ingress-nginx/values.yaml @@ -732,7 +732,7 @@ controller: # description: bad ingress config - nginx config test failed # summary: uninstall the latest ingress changes to allow config reloads to resume # - alert: NGINXCertificateExpiry - # expr: (avg(nginx_ingress_controller_ssl_expire_time_seconds) by (host) - time()) < 604800 + # expr: (avg(nginx_ingress_controller_ssl_expire_time_seconds{host!="_"}) by (host) - time()) < 604800 # for: 1s # labels: # severity: critical