Skip to content

feat(observability): add Kusto-only alert lanes#6017

Open
mmazur wants to merge 2 commits into
Azure:mainfrom
mmazur:kusto-only-alert-lanes
Open

feat(observability): add Kusto-only alert lanes#6017
mmazur wants to merge 2 commits into
Azure:mainfrom
mmazur:kusto-only-alert-lanes

Conversation

@mmazur

@mmazur mmazur commented Jul 10, 2026

Copy link
Copy Markdown
Collaborator

Why

Some alerts should be queryable in Kusto without paging a human. The existing Event Hub/Kusto action group was appended to normal IcM lanes, but there was no generic way to author alerts that route only to Kusto.

What

  • Add dedicated Kusto-only service and HCP alert generator configs:
    • observability/alerts-kusto-services.yaml
    • observability/alerts-kusto-hcps.yaml
  • Wire those lanes through monitoring with only the Event Hub action group.
  • Move the service-workspace Kubernetes alert copy from alerts-sl-svc-kube.yaml into the Kusto-only service lane.
  • Regenerate alert Bicep.

Validation

  • make -C observability alerts
  • az bicep build --file dev-infrastructure/templates/monitoring.bicep --stdout
  • az bicep lint --file dev-infrastructure/templates/monitoring.bicep
  • az bicep build --file dev-infrastructure/modules/metrics/kusto-service-rules.bicep --stdout
  • az bicep lint --file dev-infrastructure/modules/metrics/kusto-service-rules.bicep
  • az bicep build --file dev-infrastructure/modules/metrics/kusto-hcp-rules.bicep --stdout
  • az bicep lint --file dev-infrastructure/modules/metrics/kusto-hcp-rules.bicep

mmazur added 2 commits July 10, 2026 17:16
Add service and HCP alert generator lanes that route only to the Event Hub action group used for Kusto ingestion.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Copilot-Session: 31aff0de-9d6d-4870-9732-600ab6570a24
Route the service-workspace copy of the imported Kubernetes alerts through the Kusto-only service lane and remove the old SL svc-kube lane.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Copilot-Session: 31aff0de-9d6d-4870-9732-600ab6570a24
Copilot AI review requested due to automatic review settings July 10, 2026 15:18
@openshift-ci openshift-ci Bot requested review from geoberle and roivaz July 10, 2026 15:19

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR introduces “Kusto-only” alert lanes so alerts can be shipped to the Event Hub/Kusto pipeline without also routing through standard IcM paging lanes, and wires these lanes into the monitoring deployment and alert generation tooling.

Changes:

  • Adds Kusto-only alert generator configs for services and HCPs, producing dedicated generated Bicep outputs.
  • Updates monitoring deployment to include Kusto-only service + HCP alert rule modules using only the Event Hub action group.
  • Updates the prometheus-rules Makefile to generate the new lanes and remove the old sl-svc-kube lane.

Reviewed changes

Copilot reviewed 7 out of 8 changed files in this pull request and generated 2 comments.

Show a summary per file
File Description
tooling/prometheus-rules/Makefile Adds run-kusto-* generation targets and includes them in alerts and correlation-map inputs.
observability/alerts-kusto-services.yaml Defines the Kusto-only services lane and redirects output to the new generated Bicep file.
observability/alerts-kusto-hcps.yaml Defines the Kusto-only HCP lane (currently empty rule set) and its output Bicep path.
dev-infrastructure/templates/monitoring.bicep Wires in kustoServiceAlerts and kustoHcpAlerts modules using ehActionGroups only.
dev-infrastructure/modules/metrics/kusto-service-rules.bicep Points to the new generated “Kusto-only service” Prometheus rule groups.
dev-infrastructure/modules/metrics/kusto-hcp-rules.bicep New module to deploy generated “Kusto-only HCP” Prometheus rule groups.
dev-infrastructure/modules/metrics/rules/generatedKustoOnlyServicePrometheusAlertingRules.bicep Generated Prometheus rule groups for Kusto-only service alerts.
dev-infrastructure/modules/metrics/rules/generatedKustoOnlyHCPPrometheusAlertingRules.bicep Generated (currently empty) module; needs linter suppression for the unused severityCeiling param.

Comment on lines +7 to +8
@description('The minimum IcM severity level (highest priority) that alerts can fire at. Alerts more critical than this ceiling will be degraded to this value. 0 means no ceiling.')
param severityCeiling int = 0
Comment thread dev-infrastructure/templates/monitoring.bicep

@stevekuznetsov stevekuznetsov left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

/lgtm
/approve

@openshift-ci

openshift-ci Bot commented Jul 10, 2026

Copy link
Copy Markdown

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: mmazur, stevekuznetsov

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@openshift-merge-bot

Copy link
Copy Markdown
Contributor

/retest-required

Remaining retests: 0 against base HEAD 2776c19 and 2 for PR HEAD 0526c9d in total

@mmazur

mmazur commented Jul 11, 2026

Copy link
Copy Markdown
Collaborator Author

/retest

@openshift-ci

openshift-ci Bot commented Jul 11, 2026

Copy link
Copy Markdown

@mmazur: The following test failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name Commit Details Required Rerun command
ci/prow/e2e-parallel 0526c9d link true /test e2e-parallel

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

@openshift-merge-bot

Copy link
Copy Markdown
Contributor

/retest-required

Remaining retests: 0 against base HEAD 89b39fd and 1 for PR HEAD 0526c9d in total

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants