From dc659b252d41a709269a0db36c68ae4abe5e038e Mon Sep 17 00:00:00 2001 From: Leonardo Taccari Date: Thu, 2 Nov 2023 21:11:03 +0100 Subject: [PATCH] Ignore fake certificate for NGINXCertificateExpiry (#10505) The fake certificate is only a fallback and it is okay-ish if it expires. Do not alert for its expiration. --- charts/ingress-nginx/values.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/charts/ingress-nginx/values.yaml b/charts/ingress-nginx/values.yaml index f1dd15900..99cdeaa41 100644 --- a/charts/ingress-nginx/values.yaml +++ b/charts/ingress-nginx/values.yaml @@ -732,7 +732,7 @@ controller: # description: bad ingress config - nginx config test failed # summary: uninstall the latest ingress changes to allow config reloads to resume # - alert: NGINXCertificateExpiry - # expr: (avg(nginx_ingress_controller_ssl_expire_time_seconds) by (host) - time()) < 604800 + # expr: (avg(nginx_ingress_controller_ssl_expire_time_seconds{host!="_"}) by (host) - time()) < 604800 # for: 1s # labels: # severity: critical