(fleet/cert-manager) add CertManagerCertificateReadyStatus alert

lsst-it · Jun 20, 2024 · 19a3b58 · 19a3b58
1 parent 57dc4bd
commit 19a3b58
Show file tree

Hide file tree

Showing 2 changed files with 19 additions and 0 deletions.
diff --git a/fleet/lib/cert-manager-conf/base/kustomization.yaml b/fleet/lib/cert-manager-conf/base/kustomization.yaml
@@ -3,3 +3,4 @@ resources:
   - clusterissuer-letsencrypt-staging.yaml
   - clusterissuer-letsencrypt.yaml
   - externalsecret-route53.yaml
+  - prometheusrule-cert-manager.yaml
diff --git a/fleet/lib/cert-manager-conf/base/prometheusrule-cert-manager.yaml b/fleet/lib/cert-manager-conf/base/prometheusrule-cert-manager.yaml
@@ -0,0 +1,18 @@
+---
+apiVersion: monitoring.coreos.com/v1
+kind: PrometheusRule
+metadata:
+  labels:
+    lsst.io/rule: "true"
+  name: cert-manager
+spec:
+  groups:
+    - name: cert-manager
+      rules:
+        - alert: CertManagerCertificateReadyStatus
+          annotations:
+            description: 'Certificate {{ $labels.namespace }}/{{ $labels.name }} is not ready.'
+          expr: certmanager_certificate_ready_status{condition="False"} == 1
+          for: 10m
+          labels:
+            severity: critical