KubeClientCertificateExpiration¶

Meaning¶

A client certificate used to authenticate to the apiserver is expiring in less than 7 days (warning alert) or 24 hours (critical alert).

Client will not be able to interact with the cluster. In cluster services communicating with Kubernetes API may degrade or become unavailable.

Check when certificate was issued and when it expires. Check serviceAccounts and service account tokens.

Update client certificate.

For in-cluster clients recreate pods.