Cert-manager

Introduction

Maintenant que Prométheus est installé, nous pouvons activer les métriques Cert-manager

Fichier de config

cat << EOF > /tmp/cert-manager-metrics.yaml
# allow ti see cert-manager metrics in prometheus
apiVersion: monitoring.coreos.com/v1
kind: ServiceMonitor
metadata:
  name: cert-manager
  namespace: kube-prometheus

spec:
  namespaceSelector:
    matchNames:
      - cert-manager

  selector:
    matchLabels:
      app.kubernetes.io/name: cert-manager

  endpoints:
#    - port: tcp-prometheus-servicemonitor
    - port: http-metrics
      interval: 30s
      scrapeTimeout: 10s
EOF

Installation

kubectl apply -f /tmp/cert-manager-metrics.yaml

Résultat

servicemonitor.monitoring.coreos.com/cert-manager created

Patientez une ou deux minutes avant de faire la vérification

Vérification

curl -kg 'https://prometheus-k3s.gmolab.net/api/v1/query?query=certmanager_certificate_expiration_timestamp_seconds' | jq

Le résultat attendu doit ressembler à ceci

{
  "status": "success",
  "data": {
    "resultType": "vector",
    "result": [
      {
        "metric": {
          "__name__": "certmanager_certificate_expiration_timestamp_seconds",
          "container": "cert-manager-controller",
          "endpoint": "http-metrics",
          "exported_namespace": "kube-prometheus",
          "instance": "10.42.0.8:9402",
          "issuer_kind": "ClusterIssuer",
          "issuer_name": "ca-issuer",
          "job": "cert-manager",
...
        "job": "cert-manager",
          "name": "whoami-tls",
          "namespace": "cert-manager",
          "pod": "cert-manager-75b96c9588-7fjr8",
          "service": "cert-manager"
        },
        "value": [
          1789825510.341,
          "1797509465"
        ]
      }
    ]
  }
}

Nettoyage

cd
rm -rf /tmp/cert-manager-metrics.yaml

---

Version	Date	Change	Auteur
1.0	19.09.2026	Création	GMo