![]() The `root_ca_cert_publisher_sync_duration_seconds` metric tracks the sync duration in the root CA cert publisher per code and namespace. In clusters with a high namespace turnover (like CI clusters), this may cause the kube-controller-manager to expose over 100k series to Prometheus, which may cause degradation of that service. Drop the `namespace` label to remove the metrics' cardinality, tracking this metric by namespace does not justify the impact of keeping it. |
||
---|---|---|
.. | ||
approver | ||
authority | ||
cleaner | ||
rootcacertpublisher | ||
signer | ||
certificate_controller_test.go | ||
certificate_controller_utils_test.go | ||
certificate_controller_utils.go | ||
certificate_controller.go | ||
OWNERS |