Ignore fake certificate for NGINXCertificateExpiry (#10505)

The fake certificate is only a fallback and it is okay-ish if it
expires.

Do not alert for its expiration.
This commit is contained in:
Leonardo Taccari 2023-11-02 21:11:03 +01:00 committed by GitHub
parent 7f45fabde5
commit dc659b252d
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23

View file

@ -732,7 +732,7 @@ controller:
# description: bad ingress config - nginx config test failed
# summary: uninstall the latest ingress changes to allow config reloads to resume
# - alert: NGINXCertificateExpiry
# expr: (avg(nginx_ingress_controller_ssl_expire_time_seconds) by (host) - time()) < 604800
# expr: (avg(nginx_ingress_controller_ssl_expire_time_seconds{host!="_"}) by (host) - time()) < 604800
# for: 1s
# labels:
# severity: critical