diff --git a/hack/observability/kube-state-metrics/crd-config.yaml b/hack/observability/kube-state-metrics/crd-config.yaml
index 4fd23967964c..718af5a9bd9f 100644
--- a/hack/observability/kube-state-metrics/crd-config.yaml
+++ b/hack/observability/kube-state-metrics/crd-config.yaml
@@ -569,6 +569,15 @@ spec:
             address:
             - address
         type: Info
+    - name: status_certificatesexpirydate
+      help: Information about certificate expiration date of a control plane node.
+      each:
+        gauge:
+          nilIsZero: true
+          path:
+            - status
+            - certificatesExpiryDate
+        type: Gauge
     - name: status_noderef
       help: Information about the node reference of a machine.
       each:
diff --git a/hack/observability/kube-state-metrics/metrics/machine.yaml b/hack/observability/kube-state-metrics/metrics/machine.yaml
index f9334450a5ea..b49b1d3b7c7e 100644
--- a/hack/observability/kube-state-metrics/metrics/machine.yaml
+++ b/hack/observability/kube-state-metrics/metrics/machine.yaml
@@ -87,6 +87,15 @@
             address:
             - address
         type: Info
+    - name: status_certificatesexpirydate
+      help: Information about certificate expiration date of a control plane node.
+      each:
+        gauge:
+          nilIsZero: true
+          path:
+            - status
+            - certificatesExpiryDate
+        type: Gauge
     - name: status_noderef
       help: Information about the node reference of a machine.
       each: