Make 'for' configurable for falco exporter prometheus rules

charts/falco-exporter/CHANGELOG.md

@@ -3,6 +3,10 @@
 This file documents all notable changes to `falco-exporter` Helm Chart. The release
 numbering uses [semantic versioning](http://semver.org).
 
+## v0.12.0
+
+* make 'for' configurable for falco exporter prometheus rules
+
 ## v0.11.0
 
 * updated grafana dashboard

charts/falco-exporter/Chart.yaml

@@ -14,7 +14,7 @@ type: application
 
 # This is the chart version. This version number should be incremented each time you make changes
 # to the chart and its templates, including the app version.
-version: 0.11.0
+version: 0.12.0
 
 # This is the version number of the application being deployed. This version number should be
 # incremented each time you make changes to the application.

charts/falco-exporter/README.md

@@ -70,7 +70,7 @@ helm install falco-exporter \
 
 ## Configuration
 
-The following table lists the main configurable parameters of the falco-exporter chart v0.11.0 and their default values. Please, refer to [values.yaml](./values.yaml) for the full list of configurable parameters.
+The following table lists the main configurable parameters of the falco-exporter chart v0.12.0 and their default values. Please, refer to [values.yaml](./values.yaml) for the full list of configurable parameters.
 
 ## Values
 
@@ -116,18 +116,23 @@ The following table lists the main configurable parameters of the falco-exporter
 | priorityClassName | string | `""` | priorityClassName specifies the name of the PriorityClass for the pods. |
 | prometheusRules.alerts.additionalAlerts | object | `{}` |  |
 | prometheusRules.alerts.alert.enabled | bool | `true` |  |
+| prometheusRules.alerts.alert.for | string | `"5m"` |  |
 | prometheusRules.alerts.alert.rate_interval | string | `"5m"` |  |
 | prometheusRules.alerts.alert.threshold | int | `0` |  |
 | prometheusRules.alerts.critical.enabled | bool | `true` |  |
+| prometheusRules.alerts.critical.for | string | `"15m"` |  |
 | prometheusRules.alerts.critical.rate_interval | string | `"5m"` |  |
 | prometheusRules.alerts.critical.threshold | int | `0` |  |
 | prometheusRules.alerts.emergency.enabled | bool | `true` |  |
+| prometheusRules.alerts.emergency.for | string | `"1m"` |  |
 | prometheusRules.alerts.emergency.rate_interval | string | `"1m"` |  |
 | prometheusRules.alerts.emergency.threshold | int | `0` |  |
 | prometheusRules.alerts.error.enabled | bool | `true` |  |
+| prometheusRules.alerts.error.for | string | `"15m"` |  |
 | prometheusRules.alerts.error.rate_interval | string | `"5m"` |  |
 | prometheusRules.alerts.error.threshold | int | `0` |  |
 | prometheusRules.alerts.warning.enabled | bool | `true` |  |
+| prometheusRules.alerts.warning.for | string | `"15m"` |  |
 | prometheusRules.alerts.warning.rate_interval | string | `"5m"` |  |
 | prometheusRules.alerts.warning.threshold | int | `0` |  |
 | prometheusRules.enabled | bool | `false` | enabled specifies whether the prometheus rules should be deployed. |

charts/falco-exporter/templates/prometheusrule.yaml

@@ -31,7 +31,7 @@ spec:
         summary: Falco is experiencing high rate of warning events
         description: A high rate of warning events are being detected by Falco
       expr: rate(falco_events{priority="4"}[{{ .Values.prometheusRules.alerts.warning.rate_interval }}]) > {{ .Values.prometheusRules.alerts.warning.threshold }}
-      for: 15m
+      for: {{ .Values.prometheusRules.alerts.warning.for }}
       labels:
         severity: warning
     {{- end }}
@@ -41,7 +41,7 @@ spec:
         summary: Falco is experiencing high rate of error events
         description: A high rate of error events are being detected by Falco
       expr: rate(falco_events{priority="3"}[{{ .Values.prometheusRules.alerts.error.rate_interval }}]) > {{ .Values.prometheusRules.alerts.error.threshold }}
-      for: 15m
+      for: {{ .Values.prometheusRules.alerts.error.for }}
       labels:
         severity: warning
     {{- end }}
@@ -51,7 +51,7 @@ spec:
         summary: Falco is experiencing high rate of critical events
         description: A high rate of critical events are being detected by Falco
       expr: rate(falco_events{priority="2"}[{{ .Values.prometheusRules.alerts.critical.rate_interval }}]) > {{ .Values.prometheusRules.alerts.critical.threshold }}
-      for: 15m
+      {{ .Values.prometheusRules.alerts.critical.for }}
       labels:
         severity: critical
     {{- end }}
@@ -61,7 +61,7 @@ spec:
         summary: Falco is experiencing high rate of alert events
         description: A high rate of alert events are being detected by Falco
       expr: rate(falco_events{priority="1"}[{{ .Values.prometheusRules.alerts.alert.rate_interval }}]) > {{ .Values.prometheusRules.alerts.alert.threshold }}
-      for: 5m
+      for: {{ .Values.prometheusRules.alerts.alert.for }}
       labels:
         severity: critical
     {{- end }}
@@ -71,7 +71,7 @@ spec:
         summary: Falco is experiencing high rate of emergency events
         description: A high rate of emergency events are being detected by Falco
       expr: rate(falco_events{priority="0"}[{{ .Values.prometheusRules.alerts.emergency.rate_interval }}]) > {{ .Values.prometheusRules.alerts.emergency.threshold }}
-      for: 1m
+      for: {{ .Values.prometheusRules.alerts.emergency.for }}
       labels:
         severity: critical
     {{- end }}

charts/falco-exporter/values.yaml

@@ -198,20 +198,25 @@ prometheusRules:
       enabled: true
       rate_interval: "5m"
       threshold: 0
+      for: "15m"
     error:
       enabled: true
       rate_interval: "5m"
       threshold: 0
+      for: "15m"
     critical:
       enabled: true
       rate_interval: "5m"
       threshold: 0
+      for: "15m"
     alert:
       enabled: true
       rate_interval: "5m"
       threshold: 0
+      for: "5m"
     emergency:
       enabled: true
       rate_interval: "1m"
       threshold: 0
+      for: "1m"
     additionalAlerts: {}