Files
auricom-home-cluster/cluster/apps/monitoring/blackbox-exporter/helm-release.yaml
auricom bcd73d05d9 🔧 dns optim
2022-09-16 14:43:08 +02:00

106 lines
2.8 KiB
YAML

---
apiVersion: helm.toolkit.fluxcd.io/v2beta1
kind: HelmRelease
metadata:
name: blackbox-exporter
namespace: monitoring
spec:
interval: 5m
chart:
spec:
chart: prometheus-blackbox-exporter
version: 7.0.0
sourceRef:
kind: HelmRepository
name: prometheus-community-charts
namespace: flux-system
interval: 15m
install:
createNamespace: true
remediation:
retries: 5
upgrade:
remediation:
retries: 5
values:
fullnameOverride: blackbox-exporter
image:
repository: quay.io/prometheus/blackbox-exporter
podAnnotations:
configmap.reloader.stakater.com/reload: "blackbox-exporter"
config:
modules:
icmp:
prober: icmp
timeout: 30s
icmp:
preferred_ip_protocol: "ip4"
http_2xx:
prober: http
timeout: 30s
http:
valid_http_versions: ["HTTP/1.0", "HTTP/1.1", "HTTP/2.0"]
no_follow_redirects: false
preferred_ip_protocol: "ip4"
tcp_connect:
prober: tcp
timeout: 30s
serviceMonitor:
enabled: false
prometheusRule:
enabled: true
additionalLabels:
app: prometheus-operator
release: prometheus
rules:
- alert: BlackboxSslCertificateWillExpireSoon
expr: probe_ssl_earliest_cert_expiry - time() < 86400 * 3
for: 15m
labels:
severity: critical
annotations:
description: |-
The SSL certificate for {{"{{ $labels.target }}"}} will expire in less than 3 days
- alert: BlackboxSslCertificateExpired
expr: probe_ssl_earliest_cert_expiry - time() <= 0
for: 15m
labels:
severity: critical
annotations:
description: |-
The SSL certificate for {{"{{ $labels.target }}"}} has expired
- alert: BlackboxProbeFailed
expr: probe_success == 0
for: 15m
labels:
severity: critical
annotations:
description: |-
The host {{"{{ $labels.target }}"}} is currently unreachable
- alert: SlowResponseTime
annotations:
message: The response time for {{"{{ $labels.target }}"}} has been greater than 30 seconds for 5 minutes.
expr: probe_duration_seconds > 30
for: 15m
labels:
severity: warning
ingress:
enabled: true
className: nginx
annotations:
auth.home.arpa/enabled: "true"
hosts:
- host: "blackbox.${SECRET_CLUSTER_DOMAIN}"
paths:
- path: /
pathType: Prefix
tls:
- hosts:
- "blackbox.${SECRET_CLUSTER_DOMAIN}"