Add alert for DNSSEC validation failures

openstreetmap · Nov 25, 2024 · b92603c · b92603c
1 parent 0c4c2df
commit b92603c
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/cookbooks/prometheus/templates/default/alert_rules.yml.erb b/cookbooks/prometheus/templates/default/alert_rules.yml.erb
@@ -669,6 +669,13 @@ groups:
           alertgroup: "{{ $labels.instance }}"
         annotations:
           new_errors: "{{ $value }}"
+  - resolved:
+    rules:
+      - alert: dnssec validation failures
+        expr: rate(resolved_dnssec_verdicts_total{result="bogus"}[1m]) > 1
+        for: 5m
+        labels:
+          alertgroup: "{{ $labels.instance }}"
   - name: smart
     rules:
       - alert: smart failure