From 77bcd57e6de38e7905271b230df8ea483cbe1eae Mon Sep 17 00:00:00 2001 From: Leonardo Taccari Date: Wed, 11 Oct 2023 17:33:00 +0200 Subject: [PATCH] Ignore fake certificate for NGINXCertificateExpiry The fake certificate is only a fallback and it is okay-ish if it expires. Do not alert for its expiration. --- charts/ingress-nginx/values.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/charts/ingress-nginx/values.yaml b/charts/ingress-nginx/values.yaml index 227043b9c..00859ac64 100644 --- a/charts/ingress-nginx/values.yaml +++ b/charts/ingress-nginx/values.yaml @@ -722,7 +722,7 @@ controller: # description: bad ingress config - nginx config test failed # summary: uninstall the latest ingress changes to allow config reloads to resume # - alert: NGINXCertificateExpiry - # expr: (avg(nginx_ingress_controller_ssl_expire_time_seconds) by (host) - time()) < 604800 + # expr: (avg(nginx_ingress_controller_ssl_expire_time_seconds{host!="_"}) by (host) - time()) < 604800 # for: 1s # labels: # severity: critical