Kubernetes
You're viewing a free preview. Sign in free to read every script.
Why this exists cert manager (used earlier in this track) renews certificates automatically — when it is working. A cluster also collects TLS Secrets it did NOT create this way: one loaded by hand years ago during an…
TLS Certificate Expiry Checker Across Every Namespace
A cluster-wide scan of every kubernetes.io/tls Secret's real certificate expiry, read straight from the cert bytes with openssl rather than any label or annotation — proven against three genuinely differently-dated self-signed certs (healthy, 9 days from expiring, and already expired 5 days ago), correctly ignoring an unrelated Opaque Secret in the same namespace.
Sign in free to read this script, along with the rest of the library.
Sign in free