Ignore fake certificate for NGINXCertificateExpiry

The fake certificate is only a fallback and it is okay-ish if it
expires.

Do not alert for its expiration.
This commit is contained in:
Leonardo Taccari 2023-10-11 17:33:00 +02:00
parent e805d4955d
commit 2d6f4a4b73

View file

@ -732,7 +732,7 @@ controller:
# description: bad ingress config - nginx config test failed # description: bad ingress config - nginx config test failed
# summary: uninstall the latest ingress changes to allow config reloads to resume # summary: uninstall the latest ingress changes to allow config reloads to resume
# - alert: NGINXCertificateExpiry # - alert: NGINXCertificateExpiry
# expr: (avg(nginx_ingress_controller_ssl_expire_time_seconds) by (host) - time()) < 604800 # expr: (avg(nginx_ingress_controller_ssl_expire_time_seconds{host!="_"}) by (host) - time()) < 604800
# for: 1s # for: 1s
# labels: # labels:
# severity: critical # severity: critical