#!/bin/bash
export KUBECONFIG=/root/.kube/config
/bin/kubectl get secrets -A -ojson|jq -r '.items[]|select(.type == "kubernetes.io/tls")' |jq .metadata.namespace,.metadata.name,.data[]|sed 's/"//g'|paste - - - -| while read -r namespace secretname crt_base64 _
do
  timestamp=$(echo "$crt_base64" | base64 -d | openssl x509 -noout -dates | grep After | awk -F= '{print $2}' | xargs -I{} date -d "{}" +"%s")
  current_timestamp=$(date +%s)
  time_difference_in_days=$(( (timestamp - current_timestamp) / 86400 ))
  echo "tls_expiry_time{namespace=\"$namespace\",secretname=\"$secretname\"} $time_difference_in_days"
done