cert-exporter
Helm chart
Request a free trial
Contact our team to test out this Helm chart and related images for free. Please also indicate any other images you would like to evaluate.
Tag:
1
certManager:
2
# DaemonSet or Deployment
3
kind: Deployment
4
replicaCount: 1
5
# Adds a custom revisionHistoryLimit for either Deployment or DaemonSet
6
revisionHistoryLimit: 10
7
# Adds additional labels to pods
8
additionalPodLabels: {}
9
# label1: test
10
# label2: test
11
12
image:
13
repository: cgr.dev/scratch-images/test-tmp/cert-exporter
14
# The default tag is ".Chart.AppVersion", only set "tag" to override that
15
tag: 2.18.0-r12@sha256:20733f5aac5b759763f294b4f471e56b3776486a34d14c62239f217e33154c98
16
pullPolicy: IfNotPresent
17
command: ["./app"]
18
args:
19
- --secrets-annotation-selector=cert-manager.io/certificate-name
20
- --secrets-include-glob=*.crt
21
env: []
22
# - name: NODE_NAME
23
# valueFrom:
24
# fieldRef:
25
# fieldPath: spec.nodeName
26
imagePullSecrets: []
27
nameOverride: ""
28
fullnameOverride: ""
29
deploymentAnnotations: {}
30
# environment: prod
31
32
podAnnotations: {}
33
# environment: prod
34
# prometheus.io/scrape: true
35
# prometheus.io/port: 8080
36
# prometheus.io/path: /metrics
37
38
podSecurityContext: {}
39
# fsGroup: 2000
40
41
securityContext: {}
42
# capabilities:
43
# drop:
44
# - ALL
45
# readOnlyRootFilesystem: true
46
# runAsNonRoot: true
47
# runAsUser: 1000
48
49
resources: {}
50
# limits:
51
# cpu: 100m
52
# memory: 128Mi
53
# requests:
54
# cpu: 100m
55
# memory: 128Mi
56
57
nodeSelector: {}
58
tolerations: []
59
affinity: {}
60
volumes: []
61
# - name: kubelet
62
# hostPath:
63
# path: /var/lib/kubelet
64
# type: Directory
65
volumeMounts: []
66
# - mountPath: /var/lib/kubelet/pki
67
# mountPropagation: HostToContainer
68
# name: kubelet
69
# readOnly: true
70
71
containerPort: 8080
72
service:
73
type: ClusterIP
74
port: 8080
75
portName: http-metrics
76
# Annotations to add to the service
77
annotations: {}
78
# Requires prometheus-operator to be installed
79
serviceMonitor:
80
create: false
81
# cannot be empty
82
additionalLabels:
83
prometheus.io/load-rule: "true"
84
## Scrape interval. If not set, the Prometheus default scrape interval is used.
85
##
86
interval: 20s
87
## metric relabel configs to apply to samples before ingestion.
88
##
89
metricRelabelings: []
90
# - action: keep
91
# regex: 'kube_(daemonset|deployment|pod|namespace|node|statefulset).+'
92
# sourceLabels: [__name__]
93
94
# relabel configs to apply to samples before ingestion.
95
##
96
relabelings: []
97
# - sourceLabels: [__meta_kubernetes_pod_node_name]
98
# separator: ;
99
# regex: ^(.*)$
100
# targetLabel: nodename
101
# replacement: $1
102
# action: replace
103
rbac:
104
serviceAccount:
105
# Specifies whether a service account should be created
106
create: true
107
# Annotations to add to the service account
108
annotations: {}
109
# The name of the service account to use.
110
# If not set and create is true, a name is generated using the fullname template
111
name: cert-exporter
112
clusterRole:
113
# New role to grant to the service account
114
create: true
115
# Annotations to add to the service account
116
annotations: {}
117
# Rules for the Role
118
rules:
119
- apiGroups: [""]
120
resources: ["secrets"]
121
verbs: ["get", "list"]
122
- apiGroups: [""]
123
resources: ["namespaces"]
124
verbs: ["get", "list"]
125
clusterRoleBinding:
126
create: true
127
# Extra manifests to deploy as an array
128
extraManifests: []
129
# - |
130
# apiVersion: rbac.authorization.k8s.io/v1
131
# kind: Role
132
# metadata:
133
# name: cert-exporter
134
# rules:
135
# - apiGroups: [""]
136
# resources: ["configmaps", "secrets"]
137
# verbs: ["get", "list"]
138
# - |
139
# apiVersion: rbac.authorization.k8s.io/v1
140
# kind: RoleBinding
141
# metadata:
142
# name: cert-exporter
143
# roleRef:
144
# apiGroup: rbac.authorization.k8s.io
145
# kind: Role
146
# name: cert-exporter
147
# subjects:
148
# - kind: ServiceAccount
149
# name: cert-exporter
150
151
dashboards:
152
# Labels to add to all dashboard ConfigMaps
153
additionalLabels:
154
grafana_dashboard: "1"
155
certManagerDashboard:
156
create: true
157
namespace: monitoring
158
The trusted source for open source
Talk to an expertProduct
Customers
© 2026 Chainguard, Inc. All Rights Reserved.
Chainguard® and the Chainguard logo are registered trademarks of Chainguard, Inc. in the United States and/or other countries.
The other respective trademarks mentioned on this page are owned by the respective companies and use of them does not imply any affiliation or endorsement.
Chainguard® and the Chainguard logo are registered trademarks of Chainguard, Inc. in the United States and/or other countries.
The other respective trademarks mentioned on this page are owned by the respective companies and use of them does not imply any affiliation or endorsement.