Use this dashboard to track certificate readiness, expiry, controller activity, ACME operations, and resource usage across all Kubernetes namespaces.
Dashboard Preview
Dashboard JSON
Recommended. Uses the V2 dashboard schema and needs SigNoz v0.135.0 or newer.
Import it in SigNoz with Dashboards → + New dashboard → Import JSON. Import guide
Dashboard Variables
- namespace: Filter by Kubernetes namespace
- issuer_name: Filter by Issuer or ClusterIssuer name
- deployment_environment: Filter by deployment environment
What This Dashboard Monitors
- Certificate health: readiness status and not-ready counts across all namespaces
- Issuer status: ClusterIssuer and namespace Issuer readiness
- Controller performance: reconciliation call rate and error rate per controller
- ACME operations: outbound ACME request rate, error rate, and average latency by action (ACME issuers only)
- Webhook health: admission request rate by HTTP status code and average admission latency
- Work queue: depth and enqueue rate per controller queue
- Resource usage: CPU and RSS memory per component (controller, webhook, cainjector)
Metrics Included
Certificate Health
- Total Certificates: all certificates cert-manager is managing
- Ready Certificates: certificates in Ready state, actively serving TLS
- Not Ready Certificates: non-zero triggers a threshold alert
- Webhook Requests In-Flight: current admission requests in progress
- Certificate Ready Status per Cert: ready condition (1/0) per certificate, by name and namespace
- Not Ready Certificates by Namespace: not-ready count aggregated by namespace
Controller Performance
- Controller Sync Call Rate:
sync()invocations per second, by controller - Controller Sync Error Rate: failed
sync()operations per second, by controller
ACME Operations
These panels populate only when cert-manager uses an ACME issuer such as Let's Encrypt. Self-signed and CA issuers don't generate these metrics.
- ACME Request Rate by Action: outbound ACME requests per second, by action (
getNonce,createOrder,finalizeOrder, etc.) - ACME Error Rate (non-2xx) by Action: non-2xx ACME responses per second, by action
- ACME Average Request Duration by Action: mean ACME request latency, by action
Webhook Health
- Webhook Request Rate by Status Code: admission requests per second, grouped by HTTP response code
- Webhook Average Admission Latency: mean webhook processing time
Work Queue
- Work Queue Depth by Controller: current queue depth per controller
- Work Queue Add Rate by Controller: items enqueued per second, by controller
Resource Usage
- CPU Usage by Component: CPU utilization rate per component
- Memory Usage by Component: RSS memory in bytes per component
