{"id":38077841,"url":"https://github.com/leoh0/kubectl-check-cert","last_synced_at":"2026-01-16T20:45:50.766Z","repository":{"id":64308050,"uuid":"166696329","full_name":"leoh0/kubectl-check-cert","owner":"leoh0","description":"kubectl-check-cert will help you find the kubernetes certificates that can be expired and check the remaining time.","archived":false,"fork":false,"pushed_at":"2019-01-29T16:48:23.000Z","size":4758,"stargazers_count":24,"open_issues_count":0,"forks_count":4,"subscribers_count":3,"default_branch":"master","last_synced_at":"2024-06-20T11:48:54.848Z","etag":null,"topics":["certification","expiration","kubectl","kubernetes","plugin"],"latest_commit_sha":null,"homepage":null,"language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/leoh0.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2019-01-20T18:43:53.000Z","updated_at":"2024-02-17T08:30:37.000Z","dependencies_parsed_at":"2023-01-15T11:15:17.217Z","dependency_job_id":null,"html_url":"https://github.com/leoh0/kubectl-check-cert","commit_stats":null,"previous_names":[],"tags_count":2,"template":false,"template_full_name":null,"purl":"pkg:github/leoh0/kubectl-check-cert","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/leoh0%2Fkubectl-check-cert","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/leoh0%2Fkubectl-check-cert/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/leoh0%2Fkubectl-check-cert/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/leoh0%2Fkubectl-check-cert/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/leoh0","download_url":"https://codeload.github.com/leoh0/kubectl-check-cert/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/leoh0%2Fkubectl-check-cert/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":28482304,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-01-16T11:59:17.896Z","status":"ssl_error","status_checked_at":"2026-01-16T11:55:55.838Z","response_time":107,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["certification","expiration","kubectl","kubernetes","plugin"],"created_at":"2026-01-16T20:45:50.033Z","updated_at":"2026-01-16T20:45:50.757Z","avatar_url":"https://github.com/leoh0.png","language":"Go","funding_links":[],"categories":[],"sub_categories":[],"readme":"# kubectl check-cert\n\n`kubectl-check-cert` will help you find the kubernetes certificates that can be expired and check the remaining time.\n\n## How to use\n\nafter k8s 1.12 version\n\n    $ kubectl check-cert\n\nor just use below (check name carefully `check_cert` not `check-cert`. See [Names with dashes and underscores](https://kubernetes.io/docs/tasks/extend-kubectl/kubectl-plugins/#names-with-dashes-and-underscores))\n\n    $ kubectl-check_cert\n\nand you can also check kubelet certification\n\n    $ kubectl-check_cert --also-check-kubelet\n\n## Example\n\n    $ kubectl-check_cert --also-check-kubelet\n    4 / 4 [============================================================] 100.00% 5s\n    +--------------------+----------+----------------------------+------+-------------------------------+------------------------------------------------------+----------------------+\n    |        TYPE        |   NODE   |            NAME            | DAYS |              DUE              |                         PATH                         |       WARNING        |\n    +--------------------+----------+----------------------------+------+-------------------------------+------------------------------------------------------+----------------------+\n    | apiserver          | minikube | etcd-certfile              |  354 | 2020-01-10 15:52:33 +0000 UTC | /var/lib/minikube/certs/apiserver-etcd-client.crt    |                      |\n    | apiserver          | minikube | kubelet-client-certificate |  354 | 2020-01-10 15:52:31 +0000 UTC | /var/lib/minikube/certs/apiserver-kubelet-client.crt |                      |\n    | apiserver          | minikube | proxy-client-cert-file     |  354 | 2020-01-10 15:52:31 +0000 UTC | /var/lib/minikube/certs/front-proxy-client.crt       |                      |\n    | apiserver          | minikube | tls-cert-file              |  362 | 2020-01-18 07:29:07 +0000 UTC | /var/lib/minikube/certs/apiserver.crt                |                      |\n    | controller-manager | minikube | client-cert                |  362 | 2020-01-18 07:29:10 +0000 UTC | /etc/kubernetes/controller-manager.conf              |                      |\n    | scheduler          | minikube | client-cert                |  362 | 2020-01-18 07:29:10 +0000 UTC | /etc/kubernetes/scheduler.conf                       |                      |\n    | kubelet            | minikube | client-cert                |  364 | 2020-01-18 07:29:09 +0000 UTC | /etc/kubernetes/kubelet.conf                         |                      |\n    | kubelet            | minikube | server-cert                |  356 | 2020-01-10 14:51:39 +0000 UTC | /var/lib/kubelet/pki/kubelet.crt                     | Can be ignored this. |\n    +--------------------+----------+----------------------------+------+-------------------------------+------------------------------------------------------+----------------------+\n\n## Install\n\nMacOS\n\n    curl -L https://github.com/leoh0/kubectl-check-cert/releases/download/v0.0.2/kubectl-check_cert_0.0.2_darwin_amd64.tar.gz | tar zxvf - \u003e kubectl-check_cert\n    chmod +x kubectl-check_cert\n    sudo mv ./kubectl-check_cert /usr/local/bin/kubectl-check_cert\n\nLinux\n\n    curl -L https://github.com/leoh0/kubectl-check-cert/releases/download/v0.0.2/kubectl-check_cert_0.0.2_linux_amd64.tar.gz | tar zxvf - \u003e kubectl-check_cert\n    chmod +x kubectl-check_cert\n    sudo mv ./kubectl-check_cert /usr/local/bin/kubectl-check_cert\n\n## Explain certification types\n\n### Apiserver\n\n|Type|Name|Explain|\n|---------|---|---|\n|apiserver|etcd-certfile|apiserver -\u003e etcd client certification|\n|apiserver|kubelet-client-certificate|apiserver -\u003e kubelet client certification|\n|apiserver|proxy-client-cert-file|front-proxy-client|\n|apiserver|tls-cert-file|client -\u003e apiserver server certification|\n\n### Controller manager\n\n|Type|Name|Explain|\n|---------|---|---|\n|controller-manager|client-cert|controller-manager -\u003e apiserver client certification|\n\n### Scheduler\n\n|Type|Name|Explain|\n|---------|---|---|\n|scheduler|client-cert| scheduler -\u003e apiserver client certification|\n\n### Kubelet\n\n|Type|Name|Explain|\n|---------|---|---|\n|kubelet|client-cert| kubelet -\u003e apiserver client certification|\n|kubelet|server-cert| apiserver -\u003e kubelet server certification|\n\n## develop\n\nmake normal build\n\n    $ make build\n\n\nmake static build\n\n    $ make static\n\nmake static linux/amd build\n\n    $ docker run --rm -it -v \"$GOPATH\":/go -v \"$PWD\":/app -w /app golang:1.11.5 sh -c 'make release'\n\n## Note\n\n* If you use `--also-check-kubelet` option, then it'll install daemon-set for gathering kubelet information.\n* You can safely ignore kubelet's server-cert unless you use the `--kubelet-certificate-authority` option in apiserver. This will appear as a message like `Can be ignored this.`\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fleoh0%2Fkubectl-check-cert","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fleoh0%2Fkubectl-check-cert","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fleoh0%2Fkubectl-check-cert/lists"}