Add cert monitor manifest

[rikatz]

Cert-monitor will read the metrics from cert-manager prometheus exporter, transform it into days and push to stackdriver.

TODO:

• Turn the GCP Project ID configurable
• Improve the Prometheus and GKE exporter security to drop privileges

[ameukam]

/assign @spiffxp @thockin
/hold
If others people want to comment

[k8s-ci-robot]

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: rikatz
To complete the pull request process, please assign spiffxp after the PR has been reviewed.
You can assign the PR to them by writing /assign @spiffxp in a comment when ready.

The full list of commands accepted by this bot can be found here.

Needs approval from an approver in each of these files:

• cert-manager/OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[thockin]

I would love some comments (yay YAML, you beat JSON at something) to explain what's going on. Or a README-ish file?

[rikatz]

I'll make both :)

Put some comments on the YAML, at least about the prometheus and sdexporter configuration, and write on the README (I've already added a README on the another PR)

[rikatz]

@thockin added some limits, some comments, some security context :)

Tested in my cluster and worked fine, hopefully this is the first step to renew the certificates before anything blows.

Next step: I'll check a way to automate the dashboard and alerting (there's an issue assigned to me anyway) so we can somehow automate everything.

[spiffxp]

Checking in... do we still need this? I admit I have kinda lost track at where we are with using cert-manager vs. GKE managed certificates these days

[rikatz]

/close

As we discussed, per migration to Google managed certificates this is not necessary anymore :)

[k8s-ci-robot]

@rikatz: Closed this PR.

In response to this:

/close

As we discussed, per migration to Google managed certificates this is not necessary anymore :)

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.