Add new resources for Istio

Author: Dlorite

resources/istio/ALERTS.md

@@ -1,19 +1,18 @@
 # Alerts
+## [Istio-Citadel] CSR without success
+Some of the Certificate Signing Request (CSR) were not correctly requested
 
-## No Output Records From Plugin
-No Output Records From Plugin.
+## [Istio-Pilot] Inbound listener rules conflicts
+There are some conflict with inbound listener rules
 
-## Percentage of instances low
-Percentage of instances low
+## [Istio-Pilot] Endpoint found in unready state
+Endpoint found in unready state
 
-## Recently reboot
-Recently reboot
+## [Istio] Unstable requests for sidecar injections
+Sidecar injections requests has no been successfully resolved
 
-## Limit of child proccess exceeded
-Limit of child proccess exceeded
+## [Istio-Envoy] High 4xx RequestError Rate
+High 4xx RequestError Rate
 
-## Reaching limit of queue process
-Reaching limit of queue process
-
-## Requests processed reached timeout limit
-Requests processed reached timeout limit
+## [Istio-Envoy] High Request Latency
+Envoy High Request Latency

resources/istio/alerts.yaml

@@ -9,45 +9,53 @@ configurations:
 - kind: Prometheus
   data: |-
     groups:
-      - name: Php-Fpm
+      - name: Istio
         rules:
-          - alert: '[Php-Fpm] Percentage of instances low'
+          - alert: '[Istio-Citadel] CSR without success'
             expr: |
-              sum (phpfpm_up==1) / sum (phpfpm_up) < 0.75
+              rate(citadel_server_csr_count - citadel_server_success_cert_issuance_count[5m]) > 0
             for: 5m
             labels:
-              severity: critical
+              severity: warning
             annotations:
-              description: Less than 75% of instances are down
-          - alert: '[Php-Fpm] Recently reboot'
+              description: Some of the Certificate Signing Request (CSR) were not correctly requested
+          - alert: '[Istio-Pilot] Inbound listener rules conflicts'
             expr: |
-              (count (phpfpm_start_since < 1800) or vector (0))/sum (phpfpm_up) > 0.4
+              pilot_conflict_inbound_listener > 0
             for: 5m
             labels:
-              severity: info
+              severity: warning
             annotations:
-              description: Instances have been recently reboot
-          - alert: '[Php-Fpm] Limit of child proccess exceeded'
+              description: There are some conflict with inbound listener rules
+          - alert: '[Istio-Pilot] Endpoint found in unready state'
             expr: |
-              sum (rate (phpfpm_max_children_reached[5m])) > 0
+              pilot_endpoint_not_ready > 0
             for: 5m
             labels:
-              severity: critical
+              severity: warning
             annotations:
-              description: Number of childs process have been exceeded
-          - alert: '[Php-Fpm] Reaching limit of queue process'
+              description: Endpoint found in unready state
+          - alert: '[Istio] Unstable requests for sidecar injections'
             expr: |
-              (phpfpm_listen_queue / phpfpm_listen_queue_length) > 0.8
+              sidecar_injection_requests_total - sidecar_injection_success_total > 0
             for: 5m
             labels:
               severity: warning
             annotations:
-              description: Buffer of queue requests reaching its limit
-          - alert: '[Php-Fpm] Too slow requests processing'
+              description: Sidecar injections requests has no been successfully resolved
+          - alert: '[Istio-Envoy] High 4xx RequestError Rate'
             expr: |
-              rate (phpfpm_slow_requests[5m]) / rate (phpfpm_process_requests[5m]) > 0.1
+              sum (rate(istio_requests_total{ response_code=~"4..", reporter="source"}[5m]))/ sum (rate(istio_requests_total{ reporter="source"}[5m]))> 0.05
             for: 5m
             labels:
-              severity: warning
+              severity: critical
+            annotations:
+              description: High 4xx RequestError Rate
+          - alert: '[Istio-Envoy] High Request Latency'
+            expr: |
+              histogram_quantile(0.95,sum(rate(envoy_cluster_upstream_cx_connect_ms_bucket[5m])) by (le)) > 100
+            for: 5m
+            labels:
+              severity: critical
             annotations:
-              description: Requests have taking too much time to be processed
+              description: Envoy High Request Latency

resources/istio/dashboards.v1.14.yaml

@@ -7,22 +7,22 @@ appVersion:
 configurations:
 - name: Istiod Service
   kind: Sysdig
-  image: istio/images/workload_sysdig.png
+  image: istio/images/servicev1.14.png
   description: |
     This dashboard offers information on:
-    * Metrics for each workload and also inbound workloads
-  file: include/dashboard-Sysdig-Workload-1.5.json
+    * 
+  file: include/servicev1.14.json
 - name: Istio Control Plane
   kind: Sysdig
-  image: istio/images/service_sysdig.png
+  image: istio/images/control_planev1.14.png
   description: |
     This dashboard offers information on:
-    * Metrics for the service and client workload
-  file: include/dashboard-Sysdig-Service-1.5.json
+    * 
+  file: include/control_planev1.14.json
 - name: Istio Envoy
   kind: Sysdig
-  image: istio/images/service_sysdig.png
+  image: istio/images/istio_envoyv1.14.png
   description: |
     This dashboard offers information on:
-    * Metrics for the service and client workload
-  file: include/dashboard-Sysdig-Service-1.5.json
+    * 
+  file: include/istio_envoyv1.14.json