【k8s系列】证书apiserver_client_certificate_expiration_seconds

普罗表达式

apiserver_client_certificate_expiration_seconds_count{job="apiserver"} > 0 and on(job) histogram_quantile(0.01, sum by (job, le) (rate(apiserver_client_certificate_expiration_seconds_bucket{job="apiserver"}[5m])))

相关官方解释

apiserver_client_certificate_expiration_second证书定义的位置：kubernetes/staging/src/k8s.io/apiserver/pkg/authentication/request/x509/x509.go at 244fbf94fd736e94071a77a8b7c91d81163249d4 · kubernetes/kubernetes (github.com)

apiserver_client_certificate_expiration_seconds表示的含义：src/k8s.io/apiserver: Increase cert expiration histogram resolution · kubernetes/kubernetes@f90bbc3 (github.com)