From 2125253e9be65eccfab5ae41d07e28f6c32623e9 Mon Sep 17 00:00:00 2001
From: Tom Hughes <tom@compton.nu>
Date: Mon, 25 Nov 2024 15:09:41 +0000
Subject: [PATCH 1/1] Add alert for DNSSEC validation failures

---
 cookbooks/prometheus/templates/default/alert_rules.yml.erb | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/cookbooks/prometheus/templates/default/alert_rules.yml.erb b/cookbooks/prometheus/templates/default/alert_rules.yml.erb
index dfd885bb8..6751fe744 100644
--- a/cookbooks/prometheus/templates/default/alert_rules.yml.erb
+++ b/cookbooks/prometheus/templates/default/alert_rules.yml.erb
@@ -669,6 +669,13 @@ groups:
           alertgroup: "{{ $labels.instance }}"
         annotations:
           new_errors: "{{ $value }}"
+  - name: resolved
+    rules:
+      - alert: dnssec validation failures
+        expr: rate(resolved_dnssec_verdicts_total{result="bogus"}[1m]) > 1
+        for: 5m
+        labels:
+          alertgroup: "{{ $labels.instance }}"
   - name: smart
     rules:
       - alert: smart failure
-- 
2.39.5