cert-exporter-fips

A minimal, wolfi-based image for cert-exporter: an application that exports certificate expiration metrics from disk, Kubernetes, and AWS Secrets Manager to Prometheus.

Download this Image

The image is available on cgr.dev:

docker pull cgr.dev/chainguard/cert-exporter:latest

Usage

For full instructions on how to run cert-exporter, please refer to the upstream GitHub repositories documentation.

NOTE: cert-exporter is intended to run inside a Kubernetes cluster. If you attempt to run locally, it'll hang and doesn't print anything to the logs.

Helm

To deploy via helm, please refer to the upstream helm charts documentation for comprehensive instructions, which includes supported parameters.

Below is an example of how to use the helm chart, overriding the image with the chainguard image:

helm repo add cert-exporter https://joe-elliott.github.io/cert-exporter/

# The chart will error if this doesn't already exist, however it does not use this ns directly.
kubectl create namespace monitoring

helm install cert-exporter cert-exporter/cert-exporter  \
 --set image.repository=cgr.dev/chainguard/cert-exporter \
 --set image.tag=latest