Usage of /usr/bin/cert-exporter:
  -aws-account string
    	AWS account to search for secrets in
  -aws-key-substring string
    	Substring to search for in the key name. Matched keys are parsed as certs. (default ".pem")
  -aws-region string
    	AWS region to search for secrets in
  -aws-secret value
    	AWS secrets to export
  -certrequests-annotation-selector value
    	Annotation selector to find certrequests to publish as metrics.
  -certrequests-label-selector value
    	Label selector to find certrequests to publish as metrics.
  -certrequests-namespace string
    	Kubernetes namespace to list certrequests.
  -certrequests-namespaces string
    	Kubernetes comma-delimited list of namespaces to search for certrequests.
  -configmaps-annotation-selector value
    	Annotation selector to find configmaps to publish as metrics.
  -configmaps-exclude-glob value
    	Configmap globs to exclude when looking for configmap data keys.
  -configmaps-include-glob value
    	Configmap globs to include when looking for configmap data keys (Default "*").
  -configmaps-label-selector value
    	Label selector to find configmaps to publish as metrics.
  -configmaps-namespace string
    	Kubernetes namespace to list configmaps.
  -configmaps-namespace-label-selector value
    	Label selector to find namespaces in which to find configmaps to publish as metrics.
  -configmaps-namespaces string
    	Kubernetes comma-delimited list of namespaces to search for configmaps.
  -enable-certrequests-check
    	Enable certrequests check.
  -enable-webhook-cert-check
    	Enable webhook cert check.
  -exclude-cert-glob value
    	File globs to exclude when looking for certs.
  -exclude-kubeconfig-glob value
    	File globs to exclude when looking for kubeconfigs.
  -include-cert-glob value
    	File globs to include when looking for certs.
  -include-kubeconfig-glob value
    	File globs to include when looking for kubeconfigs.
  -kubeconfig string
    	Path to a kubeconfig. Only required if out-of-cluster.
  -logtostderr
    	DEPRECATED: This flag is no longer used. Logs are always written to stderr. (default true)
  -polling-period duration
    	Periodic interval in which to check certs. (default 1h0m0s)
  -prometheus-disable-exporter-metrics
    	Exclude metrics about the exporter itself (promhttp_*, process_*, go_*).
  -prometheus-listen-address string
    	The address to listen on for Prometheus scrapes. (default ":8080")
  -prometheus-path string
    	The path to publish Prometheus metrics to. (default "/metrics")
  -secret-include-types value
    	Select only specific a secret type (Default nil).
  -secrets-annotation-selector value
    	Annotation selector to find secrets to publish as metrics.
  -secrets-exclude-glob value
    	Secret globs to exclude when looking for secret data keys.
  -secrets-include-glob value
    	Secret globs to include when looking for secret data keys (Default "*").
  -secrets-label-selector value
    	Label selector to find secrets to publish as metrics.
  -secrets-namespace string
    	Kubernetes namespace to list secrets.
  -secrets-namespace-label-selector value
    	Label selector to find namespaces in which to find secrets to publish as metrics.
  -secrets-namespaces string
    	Kubernetes comma-delimited list of namespaces to search for secrets.
  -webhooks-annotation-selector value
    	Annotation selector to find webhooks to publish as metrics.
  -webhooks-label-selector value
    	Label selector to find webhooks to publish as metrics.