always initialize mtls_certificate_rotation_count counter when cert discovered

diff --git a/metrics/mtls/stats.go b/metrics/mtls/stats.go
index 6216ec98e17f31cc8058929945835ecca6811f2d..af87e3f1aa535b24ce6ffefd5468fbc44c37f547 100644 (file)
--- a/metrics/mtls/stats.go
+++ b/metrics/mtls/stats.go
@@ -44,7 +44,7 @@ func NewMtlsMetricsService(ctx context.Context) *mtlsMetrics {
                        "Time until an mTLS certificate expires",
                        "cert_name"),
                rotationsObserved: svc.DefineCounter(
-                       "mtls_certificate_rotations",
+                       "mtls_certificate_rotation_count",
                        "Number of times the rotation of a given certificate has been observed",
                        "cert_name"),
                certificatesOnHost: svc.DefineGauge(
@@ -74,6 +74,7 @@ func (m *mtlsMetrics) Tick() {
                        }
 
                        m.certs[baseDir] = certWatcher
+                       m.rotationsObserved.WithLabelValues(mbclient.KV{"cert_name": certWatcher.Name()}).Add(0)
                }
        }