fix: improve prometheusrules (to show more labels and fix messages)

charts/authentik/ci/ct-values-metrics.yaml

@@ -0,0 +1,46 @@
+replicas: 1
+
+worker:
+  replicas: 1
+
+image:
+  repository: ghcr.io/goauthentik/server
+  tag: 2023.10.4
+  pullPolicy: IfNotPresent
+
+ingress:
+  enabled: true
+  hosts:
+    - host: authentik.domain.tld
+      paths:
+        - path: "/"
+          pathType: Prefix
+
+authentik:
+  log_level: debug
+  secret_key: 5up3r53cr37K3y
+  postgresql:
+    password: au7h3n71k
+  redis:
+    password: au7h3n71k
+
+postgresql:
+  enabled: false
+  postgresqlPassword: au7h3n71k
+  persistence:
+    enabled: false
+
+redis:
+  enabled: false
+  auth:
+    enabled: true
+    password: au7h3n71k
+
+blueprints:
+  - authentik-ci-blueprint
+
+prometheus:
+  serviceMonitor:
+    create: true
+  rules:
+    create: true

charts/authentik/templates/prometheusrule.yaml

@@ -127,30 +127,29 @@ spec:
         - alert: NoWorkersConnected
           labels:
             severity: critical
-          expr: max without (pid) (authentik_admin_workers) < 1
+          expr: max by (pod) (authentik_admin_workers{namespace="{{ $.Release.Namespace }}", service="{{ include "authentik.names.fullname" $ }}-metrics"}) < 1
           for: 10m
           annotations:
             {{`
             summary: No workers connected
-            message: authentik instance {{ $labels.instance }}'s worker are either not running or not connected.
+            message: authentik instance {{ $labels.pod }}'s worker are either not running or not connected.
             `}}
 
-
         - alert: PendingMigrations
           labels:
             severity: critical
-          expr: max without (pid) (django_migrations_unapplied_total) > 0
+          expr: max by (pod) (django_migrations_unapplied_total{namespace="{{ $.Release.Namespace }}", service="{{ include "authentik.names.fullname" $ }}-metrics"}) > 0
           for: 10m
           annotations:
             {{`
             summary: Pending database migrations
-            message: authentik instance {{ $labels.instance }} has pending database migrations
+            message: authentik instance {{ $labels.pod }} has pending database migrations
             `}}
 
         - alert: FailedSystemTasks
           labels:
             severity: critical
-          expr: sum(increase(authentik_system_tasks{status="error"}[2h])) by (task_name, task_uid) > 0
+          expr: sum(increase(authentik_system_tasks{status="error", namespace="{{ $.Release.Namespace }}", service="{{ include "authentik.names.fullname" $ }}-metrics"}[2h])) by (task_name, task_uid) > 0
           for: 2h
           annotations:
             {{`
@@ -161,7 +160,7 @@ spec:
         - alert: DisconnectedOutposts
           labels:
             severity: critical
-          expr: sum by (outpost) (max without (pid) (authentik_outposts_connected{uid!~"specific.*"}))  < 1
+          expr: max by (outpost) (authentik_outposts_connected{namespace="{{ $.Release.Namespace }}", service="{{ include "authentik.names.fullname" $ }}-metrics", uid!~"specific.*"}) < 1
           for: 30m
           annotations:
             {{`