Files
sbbb/base/storage/seaweedfs-alertrules.yaml
Sienna Meridian Satterwhite e4987b4c58 feat(monitoring): comprehensive alerting overhaul, 66 rules across 14 PrometheusRules
The Longhorn memory leak went undetected for 14 days because alerting
was broken (email receiver, missing label selector, no node alerts).
This overhaul brings alerting to production grade.

Fixes:
- Alloy Loki URL pointed to deleted loki-gateway, now loki:3100
- seaweedfs-bucket-init crash on unsupported `mc versioning` command
- All PrometheusRules now have `release: kube-prometheus-stack` label
- Removed broken email receiver, Matrix-only alerting

New alert coverage:
- Node: memory, CPU, swap, filesystem, inodes, network, clock skew, OOM
- Kubernetes: deployment down, CronJob failed, pod crash-looping, PVC full
- Backups: Postgres barman stale/failed, WAL archiving, SeaweedFS mirror
- Observability: Prometheus WAL/storage/rules, Loki/Tempo/AlertManager down
- Services: Stalwart, Bulwark, Tuwunel, Sol, Valkey, OpenSearch (smart)
- SLOs: auth stack 99.9% burn rate, Matrix 99.5%, latency p95 < 2s
- Recording rules for Linkerd RED metrics and node aggregates
- Watchdog heartbeat → Matrix every 12h (dead pipeline detection)
- Inhibition: critical suppresses warning for same alert+namespace
- OpenSearchClusterYellow only fires with >1 data node (single-node aware)
2026-04-06 15:52:06 +01:00

68 lines
2.4 KiB
YAML

apiVersion: monitoring.coreos.com/v1
kind: PrometheusRule
metadata:
name: seaweedfs-alerts
namespace: storage
labels:
role: alert-rules
release: kube-prometheus-stack
spec:
groups:
- name: seaweedfs
rules:
- alert: SeaweedFSMasterDown
expr: up{job=~".*seaweedfs.*", app="seaweedfs-master"} == 0
for: 2m
labels:
severity: critical
annotations:
summary: "SeaweedFS master is down"
description: "SeaweedFS master {{ $labels.namespace }}/{{ $labels.pod }} is down."
- alert: SeaweedFSVolumeDown
expr: up{job=~".*seaweedfs.*", app="seaweedfs-volume"} == 0
for: 2m
labels:
severity: critical
annotations:
summary: "SeaweedFS volume server is down"
description: "SeaweedFS volume server {{ $labels.namespace }}/{{ $labels.pod }} is down."
- alert: SeaweedFSFilerDown
expr: up{job=~".*seaweedfs.*", app="seaweedfs-filer"} == 0
for: 2m
labels:
severity: critical
annotations:
summary: "SeaweedFS filer is down"
description: "SeaweedFS filer {{ $labels.namespace }}/{{ $labels.pod }} is down."
- alert: SeaweedFSDiskLow
expr: (seaweedfs_disk_free_bytes / (seaweedfs_disk_free_bytes + seaweedfs_disk_used_bytes)) < 0.15
for: 5m
labels:
severity: warning
annotations:
summary: "SeaweedFS disk space low"
description: "SeaweedFS disk on {{ $labels.instance }} has less than 15% free space."
- alert: SeaweedFSMirrorJobFailing
expr: |
kube_job_status_failed{namespace="storage", job_name=~"seaweedfs-s3-mirror.*"} > 0
for: 5m
labels:
severity: critical
annotations:
summary: "SeaweedFS S3 mirror job failed"
description: "Job {{ $labels.job_name }} failed. S3 backups to Scaleway are not running."
- alert: SeaweedFSMirrorStale
expr: |
time() - kube_cronjob_status_last_successful_time{namespace="storage", cronjob="seaweedfs-s3-mirror"} > 7200
for: 10m
labels:
severity: warning
annotations:
summary: "SeaweedFS S3 mirror hasn't succeeded in 2+ hours"
description: "CronJob seaweedfs-s3-mirror last succeeded {{ $value | humanizeDuration }} ago."