easylinux/kube-prometheus
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Add cert expiration rules

Browse Source
This commit is contained in:
Antoine Legrand
2017-12-14 17:13:50 +01:00
parent 9928a7e9c7
commit bcb0ba9974
2 changed files with 28 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
assets/prometheus/rules/kubernetes.rules.yaml
View File

@@ -84,3 +84,17 @@ groups:
annotations: annotations:
description: No API servers are reachable or all have disappeared from service description: No API servers are reachable or all have disappeared from service
discovery discovery
- alert: K8sCertificateExpirationNotice
labels:
severity: warning
annotations:
description: Kubernetes API Certificate is expiring soon (less than 7 days)
expr: sum(apiserver_client_certificate_expiration_seconds_bucket{le="604800"}) > 0
- alert: K8sCertificateExpirationNotice
labels:
severity: critical
annotations:
description: Kubernetes API Certificate is expiring in less than 1 day
expr: sum(apiserver_client_certificate_expiration_seconds_bucket{le="86400"}) > 0

14
manifests/prometheus/prometheus-k8s-rules.yaml
View File

@@ -469,6 +469,20 @@ data:
annotations: annotations:
description: No API servers are reachable or all have disappeared from service description: No API servers are reachable or all have disappeared from service
discovery discovery
- alert: K8sCertificateExpirationNotice
labels:
severity: warning
annotations:
description: Kubernetes API Certificate is expiring soon (less than 7 days)
expr: sum(apiserver_client_certificate_expiration_seconds_bucket{le="604800"}) > 0
- alert: K8sCertificateExpirationNotice
labels:
severity: critical
annotations:
description: Kubernetes API Certificate is expiring in less than 1 day
expr: sum(apiserver_client_certificate_expiration_seconds_bucket{le="86400"}) > 0
node.rules.yaml: |+ node.rules.yaml: |+
groups: groups:
- name: node.rules - name: node.rules