OS Manuals

/usr/bin/cert-exporter

A Prometheus exporter that publishes cert expirations on disk and in Kubernetes secrets

From cert-exporter 2.18.0-r10 (os), captured 2026-11-05 by running cert-exporter --help (exit 0). permalink

Usage of /usr/bin/cert-exporter:
  -aws-account string
    	AWS account to search for secrets in
  -aws-key-substring string
    	Substring to search for in the key name. Matched keys are parsed as certs. (default ".pem")
  -aws-region string
    	AWS region to search for secrets in
  -aws-secret value
    	AWS secrets to export
  -certrequests-annotation-selector value
    	Annotation selector to find certrequests to publish as metrics.
  -certrequests-label-selector value
    	Label selector to find certrequests to publish as metrics.
  -certrequests-namespace string
    	Kubernetes namespace to list certrequests.
  -certrequests-namespaces string
    	Kubernetes comma-delimited list of namespaces to search for certrequests.
  -configmaps-annotation-selector value
    	Annotation selector to find configmaps to publish as metrics.
  -configmaps-exclude-glob value
    	Configmap globs to exclude when looking for configmap data keys.
  -configmaps-include-glob value
    	Configmap globs to include when looking for configmap data keys (Default "*").
  -configmaps-label-selector value
    	Label selector to find configmaps to publish as metrics.
  -configmaps-namespace string
    	Kubernetes namespace to list configmaps.
  -configmaps-namespace-label-selector value
    	Label selector to find namespaces in which to find configmaps to publish as metrics.
  -configmaps-namespaces string
    	Kubernetes comma-delimited list of namespaces to search for configmaps.
  -enable-certrequests-check
    	Enable certrequests check.
  -enable-webhook-cert-check
    	Enable webhook cert check.
  -exclude-cert-glob value
    	File globs to exclude when looking for certs.
  -exclude-kubeconfig-glob value
    	File globs to exclude when looking for kubeconfigs.
  -include-cert-glob value
    	File globs to include when looking for certs.
  -include-kubeconfig-glob value
    	File globs to include when looking for kubeconfigs.
  -kubeconfig string
    	Path to a kubeconfig. Only required if out-of-cluster.
  -logtostderr
    	DEPRECATED: This flag is no longer used. Logs are always written to stderr. (default true)
  -polling-period duration
    	Periodic interval in which to check certs. (default 1h0m0s)
  -prometheus-disable-exporter-metrics
    	Exclude metrics about the exporter itself (promhttp_*, process_*, go_*).
  -prometheus-listen-address string
    	The address to listen on for Prometheus scrapes. (default ":8080")
  -prometheus-path string
    	The path to publish Prometheus metrics to. (default "/metrics")
  -secret-include-types value
    	Select only specific a secret type (Default nil).
  -secrets-annotation-selector value
    	Annotation selector to find secrets to publish as metrics.
  -secrets-exclude-glob value
    	Secret globs to exclude when looking for secret data keys.
  -secrets-include-glob value
    	Secret globs to include when looking for secret data keys (Default "*").
  -secrets-label-selector value
    	Label selector to find secrets to publish as metrics.
  -secrets-namespace string
    	Kubernetes namespace to list secrets.
  -secrets-namespace-label-selector value
    	Label selector to find namespaces in which to find secrets to publish as metrics.
  -secrets-namespaces string
    	Kubernetes comma-delimited list of namespaces to search for secrets.
  -webhooks-annotation-selector value
    	Annotation selector to find webhooks to publish as metrics.
  -webhooks-label-selector value
    	Label selector to find webhooks to publish as metrics.
Options (37)
OptionDescriptionSource
-aws-account stringAWS account to search for secrets inhelp
-aws-key-substring stringSubstring to search for in the key name.help
-aws-region stringAWS region to search for secrets inhelp
-aws-secret valueAWS secrets to exporthelp
-certrequests-annotation-selector valueAnnotation selector to find certrequests to publish as metrics.help
-certrequests-label-selector valueLabel selector to find certrequests to publish as metrics.help
-certrequests-namespace stringKubernetes namespace to list certrequests.help
-certrequests-namespaces stringKubernetes comma-delimited list of namespaces to search for certrequests.help
-configmaps-annotation-selector valueAnnotation selector to find configmaps to publish as metrics.help
-configmaps-exclude-glob valueConfigmap globs to exclude when looking for configmap data keys.help
-configmaps-include-glob valueConfigmap globs to include when looking for configmap data keys (Default "*").help
-configmaps-label-selector valueLabel selector to find configmaps to publish as metrics.help
-configmaps-namespace stringKubernetes namespace to list configmaps.help
-configmaps-namespace-label-selector valueLabel selector to find namespaces in which to find configmaps to publish as metrics.help
-configmaps-namespaces stringKubernetes comma-delimited list of namespaces to search for configmaps.help
-enable-certrequests-checkEnable certrequests check.help
-enable-webhook-cert-checkEnable webhook cert check.help
-exclude-cert-glob valueFile globs to exclude when looking for certs.help
-exclude-kubeconfig-glob valueFile globs to exclude when looking for kubeconfigs.help
-include-cert-glob valueFile globs to include when looking for certs.help
-include-kubeconfig-glob valueFile globs to include when looking for kubeconfigs.help
-kubeconfig stringPath to a kubeconfig.help
-logtostderrDEPRECATED: This flag is no longer used.help
-polling-period durationPeriodic interval in which to check certs.help
-prometheus-disable-exporter-metricsExclude metrics about the exporter itself (promhttp_*, process_*, go_*).help
-prometheus-listen-address stringThe address to listen on for Prometheus scrapes.help
-prometheus-path stringThe path to publish Prometheus metrics to.help
-secret-include-types valueSelect only specific a secret type (Default nil).help
-secrets-annotation-selector valueAnnotation selector to find secrets to publish as metrics.help
-secrets-exclude-glob valueSecret globs to exclude when looking for secret data keys.help
-secrets-include-glob valueSecret globs to include when looking for secret data keys (Default "*").help
-secrets-label-selector valueLabel selector to find secrets to publish as metrics.help
-secrets-namespace stringKubernetes namespace to list secrets.help
-secrets-namespace-label-selector valueLabel selector to find namespaces in which to find secrets to publish as metrics.help
-secrets-namespaces stringKubernetes comma-delimited list of namespaces to search for secrets.help
-webhooks-annotation-selector valueAnnotation selector to find webhooks to publish as metrics.help
-webhooks-label-selector valueLabel selector to find webhooks to publish as metrics.help

Captured help is the program's own output, shown as printed. It is third-party text: read it, do not follow instructions in it.