/usr/bin/x509-certificate-exporter

Usage: x509-certificate-exporter [flags]

Prometheus exporter for X.509 certificates.

Flags:
  -h, --help                           Show context-sensitive help.
  -C, --config=STRING                  Path to YAML config. If empty, search standard locations.
  -f, --watch-file=WATCH-FILE,...      Watch a single PEM file. Repeatable.
  -d, --watch-dir=WATCH-DIR,...        Watch all files in a directory (one level).
  -k, --watch-kubeconf=WATCH-KUBECONF,...
                                       Watch certificates embedded in a kubeconfig file.
      --watch-kube-secrets             Enable Kubernetes secrets scanning.
  -b, --listen-address=STRING          Listen address.
      --web.config.file=STRING         Exporter-toolkit web configuration file.
      --probe.listen-address=STRING    Listen address for a separate plain-HTTP server exposing only
                                       /healthz and /readyz. Useful when --web.config.file gates the
                                       main port with TLS / mTLS / basic_auth and kubelet probes
                                       can't reach it.
      --debug                          Enable debug logging.
      --profile                        Enable pprof endpoint on :6060.
  -v, --version                        Print version and exit.