Add alert for DNSSEC validation failures

diff --git a/cookbooks/prometheus/templates/default/alert_rules.yml.erb b/cookbooks/prometheus/templates/default/alert_rules.yml.erb
index dfd885bb8055252fd72a99df4807eeba1f6c956c..6751fe74423f2b386e78dd82176cc0c400c19d2a 100644 (file)
--- a/cookbooks/prometheus/templates/default/alert_rules.yml.erb
+++ b/cookbooks/prometheus/templates/default/alert_rules.yml.erb
@@ -669,6 +669,13 @@ groups:
           alertgroup: "{{ $labels.instance }}"
         annotations:
           new_errors: "{{ $value }}"
           alertgroup: "{{ $labels.instance }}"
         annotations:
           new_errors: "{{ $value }}"

+  - name: resolved
+    rules:
+      - alert: dnssec validation failures
+        expr: rate(resolved_dnssec_verdicts_total{result="bogus"}[1m]) > 1
+        for: 5m
+        labels:
+          alertgroup: "{{ $labels.instance }}"

   - name: smart
     rules:
       - alert: smart failure
   - name: smart
     rules:
       - alert: smart failure