It would be great to have out of the box monitoring of the expiration time of x509 certs used in kubernetes clusters.

Please include something like the upstream prometheus operator and configure it to leverage the x509-certificate-exporter https://github.com/enix/x509-certificate-exporter/tree/master/

and include the Grafana dashboard.