KubeClientCertificateExpiration # Meaning # A client certificate used to authenticate to the apiserver is expiring in less than 7 days (warning alert) or 24 hours (critical alert). Impact # Client will not be able to interact with the cluster. In cluster services communicating with Kubernetes API may degrade or become unavailable. Diagnosis # Check when certificate was issued and when it expires. Check serviceAccounts and service account tokens.