From: Tom Hughes <tom@compton.nu>
Date: Mon, 25 Nov 2024 15:09:41 +0000 (+0000)
Subject: Add alert for DNSSEC validation failures
X-Git-Url: https://git.openstreetmap.org./chef.git/commitdiff_plain/2125253e9be65eccfab5ae41d07e28f6c32623e9?ds=sidebyside;hp=0c4c2dfa07939b515d41f8128c0b937ec6823cd1

Add alert for DNSSEC validation failures
---

diff --git a/cookbooks/prometheus/templates/default/alert_rules.yml.erb b/cookbooks/prometheus/templates/default/alert_rules.yml.erb
index dfd885bb8..6751fe744 100644
--- a/cookbooks/prometheus/templates/default/alert_rules.yml.erb
+++ b/cookbooks/prometheus/templates/default/alert_rules.yml.erb
@@ -669,6 +669,13 @@ groups:
           alertgroup: "{{ $labels.instance }}"
         annotations:
           new_errors: "{{ $value }}"
+  - name: resolved
+    rules:
+      - alert: dnssec validation failures
+        expr: rate(resolved_dnssec_verdicts_total{result="bogus"}[1m]) > 1
+        for: 5m
+        labels:
+          alertgroup: "{{ $labels.instance }}"
   - name: smart
     rules:
       - alert: smart failure