Show HN: X509-certificate-exporter – Prometheus exporter for TLS cert expiration

Category: observability

Tags: prometheus-exporter, tls-certificates, kubernetes-observability

Score: 7.8/10 (Innovation: 6, Technical: 8, Documentation: 9, Utility: 8)

A Prometheus exporter that watches Kubernetes TLS certificates across Secrets, ConfigMaps, kubeconfigs, and on-disk PKI, exposing expirations as metrics. Its v4 rewrite introduces a pluggable architecture, memory-safe Kubernetes watch, and supply-chain hardening with SLSA Level 3 and cosign-signed releases, making it a robust solution for preventing certificate-related outages.

Target audience: devops

Repository: https://github.com/enix/x509-certificate-exporter · Go · MIT · 917 stars

View on Hacker News