From e66f966f847c0094f32687ab1d0c161de571b502 Mon Sep 17 00:00:00 2001 From: Christian Bianchi Date: Wed, 10 Apr 2024 16:52:58 +0200 Subject: [PATCH] Add `IRSAACMCertificateExpiringInLessThan60Days` alert. (#1119) * Add `IRSAACMCertificateExpiringInLessThan60Days` alert. * Update helm/prometheus-rules/templates/alerting-rules/aws.management-cluster.rules.yml Co-authored-by: Quentin Bisson --------- Co-authored-by: Quentin Bisson --- CHANGELOG.md | 4 ++++ .../aws.management-cluster.rules.yml | 14 ++++++++++++++ 2 files changed, 18 insertions(+) diff --git a/CHANGELOG.md b/CHANGELOG.md index d302b7e36..b30a281cb 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -7,6 +7,10 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0 ## [Unreleased] +### Added + +- Add `IRSAACMCertificateExpiringInLessThan60Days` alert. + ## [3.9.0] - 2024-04-10 ### Added diff --git a/helm/prometheus-rules/templates/alerting-rules/aws.management-cluster.rules.yml b/helm/prometheus-rules/templates/alerting-rules/aws.management-cluster.rules.yml index 58c704ac5..fa11b5a50 100644 --- a/helm/prometheus-rules/templates/alerting-rules/aws.management-cluster.rules.yml +++ b/helm/prometheus-rules/templates/alerting-rules/aws.management-cluster.rules.yml @@ -175,4 +175,18 @@ spec: severity: page team: phoenix topic: aws + - alert: IRSAACMCertificateExpiringInLessThan60Days + annotations: + description: '{{`IRSA ACM certificate for Cluster {{ $labels.cluster_id }} ({{ $labels.certificate_name }}) will expire in less than 2 months.`}}' + opsrecipe: irsa-acm-certificate-expiring/ + expr: min(irsa_operator_acm_certificate_not_after) by (cluster_id, installation, pipeline, provider, certificate_name) - time() < 5184000 + for: 10m + labels: + area: kaas + cancel_if_cluster_status_creating: "true" + cancel_if_cluster_status_deleting: "true" + cancel_if_outside_working_hours: "true" + severity: page + team: phoenix + topic: aws {{- end }}