2d08f52715
- Introduced README.md for Zastava Evidence Locker Plan detailing artifacts to sign and post-signing steps. - Added example JSON schemas for observer events and webhook admissions. - Updated implementor guidelines with checklist for CI linting, determinism, secrets management, and schema control. - Created alert rules for Vuln Explorer to monitor API latency and projection errors. - Developed analytics ingestion plan for Vuln Explorer, focusing on telemetry and PII guardrails. - Implemented Grafana dashboard configuration for Vuln Explorer metrics visualization. - Added expected projection SHA256 for vulnerability events. - Created k6 load testing script for Vuln Explorer API. - Added sample projection and replay event data for testing. - Implemented ReplayInputsLock for deterministic replay inputs management. - Developed tests for ReplayInputsLock to ensure stable hash computation. - Created SurfaceManifestDeterminismVerifier to validate manifest determinism and integrity. - Added unit tests for SurfaceManifestDeterminismVerifier to ensure correct functionality. - Implemented Angular tests for VulnerabilityHttpClient and VulnerabilityDetailComponent to verify API interactions and UI rendering.
38 lines
1.3 KiB
YAML
38 lines
1.3 KiB
YAML
# Alert rules for Vuln Explorer (DEVOPS-VULN-29-002/003)
|
|
apiVersion: 1
|
|
groups:
|
|
- name: vuln-explorer
|
|
rules:
|
|
- alert: vuln_api_latency_p95_gt_300ms
|
|
expr: histogram_quantile(0.95, rate(http_request_duration_seconds_bucket{service="vuln-explorer",path=~"/findings.*"}[5m])) > 0.3
|
|
for: 5m
|
|
labels:
|
|
severity: page
|
|
annotations:
|
|
summary: Vuln Explorer API p95 latency high
|
|
description: p95 latency for /findings exceeds 300ms for 5m.
|
|
- alert: vuln_projection_lag_gt_60s
|
|
expr: vuln_projection_lag_seconds > 60
|
|
for: 5m
|
|
labels:
|
|
severity: page
|
|
annotations:
|
|
summary: Vuln projection lag exceeds 60s
|
|
description: Ledger projector lag is above 60s.
|
|
- alert: vuln_projection_error_rate_gt_1pct
|
|
expr: rate(vuln_projection_errors_total[5m]) / rate(vuln_projection_runs_total[5m]) > 0.01
|
|
for: 5m
|
|
labels:
|
|
severity: page
|
|
annotations:
|
|
summary: Vuln projector error rate >1%
|
|
description: Projection errors exceed 1% over 5m.
|
|
- alert: vuln_query_budget_enforced_gt_50_per_min
|
|
expr: rate(vuln_query_budget_enforced_total[1m]) > 50
|
|
for: 5m
|
|
labels:
|
|
severity: warn
|
|
annotations:
|
|
summary: Query budget enforcement high
|
|
description: Budget enforcement is firing more than 50/min.
|