Apparently there's an alert that goes off if a cert expiring in less than 7 days is used to authenticate to k8s