Ignore fake certificate for NGINXCertificateExpiry (#10505)

The fake certificate is only a fallback and it is okay-ish if it expires. Do not alert for its expiration.
kubernetes · Nov 2, 2023 · dc659b2 · dc659b2
1 parent 7f45fab
commit dc659b2
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/charts/ingress-nginx/values.yaml b/charts/ingress-nginx/values.yaml
@@ -732,7 +732,7 @@ controller:
       #     description: bad ingress config - nginx config test failed
       #     summary: uninstall the latest ingress changes to allow config reloads to resume
       # - alert: NGINXCertificateExpiry
-      #   expr: (avg(nginx_ingress_controller_ssl_expire_time_seconds) by (host) - time()) < 604800
+      #   expr: (avg(nginx_ingress_controller_ssl_expire_time_seconds{host!="_"}) by (host) - time()) < 604800
       #   for: 1s
       #   labels:
       #     severity: critical