Merge pull request #187 from sysdiglabs/staging

Staging

Author: daviddetorres

apps/harbor.yaml

@@ -7,6 +7,7 @@ keywords:
   - Available
 availableVersions: 
   - '1.1'
+  - '2.2'
 shortDescription: "Harbor is an open source container image registry that secures images with role-based access control"
 description: |
   Harbor is an open source container image registry that secures images with role-based access control, scans images for vulnerabilities, and signs images as trusted.

resources/harbor/ALERTS-v1.1.md

@@ -0,0 +1,6 @@
+# Alerts
+## HarborIsDown
+This alert trigger when the service is down
+
+##  ProjectQuotaIsRaisingTheLimit
+This alerts trigger when the usage of the storage of any project is getting close to the limit

resources/harbor/ALERTS-v2.2.md

@@ -0,0 +1,26 @@
+# Alerts
+## HarborCoreIsDown
+This alert trigger when Harbor Core Is Down
+
+## HarborDatabaseIsDown
+This alert trigger when Harbor Database Is Down
+
+## HarborRegistryIsDown
+This alert trigger when Harbor Registry Is Down
+
+## HarborRedisIsDown
+This alert trigger when Harbor Redis Is Down
+
+## HarborTrivyIsDown
+This alert trigger when Harbor Trivy Is Down
+
+## HarborJobServiceIsDown
+This alert trigger when Harbor JobService Is Down
+
+## Harborp99latencyishigherthan10seconds
+This alert trigger when Harbor p99 latency is higher than 10 seconds
+
+## HarborErrorRateisHigh
+This alert trigger when Harbor Error Rate is High
+##  ProjectQuotaIsRaisingTheLimit
+This alerts trigger when the usage of the storage of any project is getting close to the limit

resources/harbor/ALERTS.md

@@ -0,0 +1,2 @@
+# Installing the exporter
+Harbor is already instrumented so you don't have to add any extra exporter.

resources/harbor/INSTALL.md renamed to resources/harbor/INSTALL-v1.1.md

@@ -4,7 +4,7 @@ Harbor is an open-source container registry, originally developed by VMware and
 hosted container registries such as DockerHub, Quay, ECR, GCR or ACR; when you need a self-hosted registry, Harbor is a great choice.
 Harbor provides great features such as RBAC, replication and image scanning.
 
-#Prometheus and exporters
+# Prometheus and exporters
 
 Harbor doesn’t expose Prometheus metrics natively (although there is an issue for it: #4557). However, Max Cai wrote a Prometheus exporter
 that queries Harbor API and generates a bunch of useful metrics.

resources/harbor/INSTALL-v2.2.md

@@ -0,0 +1,17 @@
+# Harbor
+
+Harbor is an open-source container registry, originally developed by VMware and now under the CNCF umbrella. Although many of us typically use
+hosted container registries such as DockerHub, Quay, ECR, GCR or ACR; when you need a self-hosted registry, Harbor is a great choice.
+Harbor provides great features such as RBAC, replication and image scanning.
+
+# Prometheus and exporters
+
+Harbor is already instrumented so you don't have to add any extra exporter.
+
+```
+  helm install harbor harbor/harbor
+```
+
+
+# Attributions
+Configuration files and dashboards are maintained by [Sysdig team](https://sysdig.com/).

resources/harbor/README.md renamed to resources/harbor/README-v1.1.md

@@ -4,7 +4,7 @@ app: Harbor
 version: 1.0.0
 appVersion:
 - '1.1'
-descriptionFile: ALERTS.md
+descriptionFile: ALERTS-v1.1.md
 configurations:
 - kind: Prometheus
   data: |

resources/harbor/README-v2.2.md

@@ -0,0 +1,90 @@
+apiVersion: v1
+kind: Alert
+app: Harbor
+version: 1.0.0
+appVersion:
+- '2.2'
+descriptionFile: ALERTS-v2.2.md
+configurations:
+- kind: Prometheus
+  data: |
+    groups:
+    - name: Harbor
+      rules:
+      - alert: HarborCoreIsDown
+        expr: harbor_up{component="core"} == 0
+        for: 5m
+        labels:
+          severity: high
+        annotations:
+          summary: Harbor Core Is Down
+
+      - alert: HarborDatabaseIsDown
+        expr: harbor_up{component="database"} == 0
+        for: 5m
+        labels:
+          severity: high
+        annotations:
+          summary: Harbor Database Is Down
+
+      - alert: HarborRegistryIsDown
+        expr: harbor_up{component="registry"} == 0
+        for: 5m
+        labels:
+          severity: high
+        annotations:
+          summary: Harbor Registry Is Down
+
+      - alert: HarborRedisIsDown
+        expr: harbor_up{component="redis"} == 0
+        for: 5m
+        labels:
+          severity: high
+        annotations:
+          summary: Harbor Redis Is Down
+
+      - alert: HarborTrivyIsDown
+        expr: harbor_up{component="trivy"} == 0
+        for: 5m
+        labels:
+          severity: high
+        annotations:
+          summary: Harbor Trivy Is Down
+
+      - alert: HarborJobServiceIsDown
+        expr: harbor_up{component="jobservice"} == 0
+        for: 5m
+        labels:
+          severity: high
+        annotations:
+          summary: Harbor JobService Is Down
+
+      - alert: ProjectQuotaIsRaisingTheLimit
+        expr: ((harbor_project_quota_usage_byte > 0) /  harbor_quotas_size_bytes) > 0.95
+        for: 5m
+        labels:
+          severity: high
+        annotations:
+          summary: Project Quota Is Raising The Limit
+
+      - alert: Harborp99latencyishigherthan10seconds
+        expr: |
+          histogram_quantile(0.99, 
+            sum
+              (rate(registry_http_request_duration_seconds_bucket[30m])
+            )
+          ) > 10
+        for: 5m
+        labels:
+          severity: medium
+        annotations:
+          summary: Harbor p99 latency is higher than 10 seconds
+
+      - alert: HarborErrorRateisHigh
+        expr: |
+          sum(rate(registry_http_requests_total[5m]))/sum(rate(registry_http_requests_total[5m]))
+        for: 5m
+        labels:
+          severity: medium
+        annotations:
+          summary: Harbor Error Rate is High