metric for workload cert expiry

[garrettheel]

I'd like to be able to monitor workload cert expiry for ztunnel. I believe istio_agent_cert_expiry_seconds and envoy_server_days_until_first_cert_expiring would be similar metrics for sidecars. It could also be useful to see metrics related to failure to renew certs, but expiry would be the most useful.

Related for sidecar: istio/istio#37291

Any suggestions here, or appetite to contribute this as a new metric?

[Stevenjin8]

seems reasonable.

[Stevenjin8]

/assign

[jlojosnegros]

Hi @Stevenjin8!

I noticed you assigned yourself to this issue back on February 3rd — are you still planning to work on it?
No worries at all if life got in the way. If you're no longer actively pursuing it, I'd love to give it a shot.

Happy to wait if you're still on it though!