Newer documentation is now live.You are currently reading an older version.

Switch to latest✕

Keycloak

This section describes the alerts available for Keycloak services.

• KeycloakBlackboxEndpointProbeFailing

• KeycloakBlackboxServiceProbeFailing

• KeycloakHttpErrors4xxHighMajor

• KeycloakHttpErrors4xxHighWarning

• KeycloakHttpErrors5xxHighMajor

• KeycloakHttpErrors5xxHighWarning

• KeycloakLoginErrorsHighMajor

• KeycloakLoginErrorsHighWarning

• KeycloakSSLCertExpirationHigh

• KeycloakSSLCertExpirationMedium

• KeycloakTargetDown

Caution

During the management cluster upgrade, Keycloak may be unavailable for up to five minutes with the Keycloak alerts firing in StackLight. Consequently, web UIs such as MOSK management console, Prometheus, Alertmanager, Alerta, OpenSearch Dashboards, and Grafana for both management and MOSK clusters may be temporarily inaccessible. This behavior is expected, no action is required.

KeycloakBlackboxEndpointProbeFailing

Severity	Critical
Summary	Blackbox probe for Keycloak service endpoint is failing.
Description	Blackbox probe failed at least 3 times for the Keycloak {{ $labels.service_name }}/{{ $labels.pod }} endpoint in the last 20 minutes.

KeycloakBlackboxServiceProbeFailing

Severity	Critical
Summary	Blackbox probe for Keycloak service is failing.
Description	Blackbox probe failed at least 3 times for the Keycloak {{ $labels.service_name }} service in the last 20 minutes.

KeycloakHttpErrors4xxHighMajor

Severity	Major
Summary	Keycloak is returning client (4xx) errors for more than 8% of HTTP requests.
Description	Keycloak is returning client (4xx) errors for {{ printf "%.2f" $value }}% of HTTP requests.

KeycloakHttpErrors4xxHighWarning

Severity	Warning
Summary	Keycloak is returning client (4xx) errors for more than 5% of HTTP requests.
Description	Keycloak is returning client (4xx) errors for {{ printf "%.2f" $value }}% of HTTP requests.

KeycloakHttpErrors5xxHighMajor

Severity	Major
Summary	Keycloak is returning server (5xx) errors for more than 3% of HTTP requests.
Description	Keycloak is returning server (5xx) errors for {{ printf "%.2f" $value }}% of HTTP requests.

KeycloakHttpErrors5xxHighWarning

Severity	Warning
Summary	Keycloak is returning server (5xx) errors for HTTP requests.
Description	At least one HTTP request to Keycloak resulted in a server (5xx) error.

KeycloakLoginErrorsHighMajor

Severity	Major
Summary	Keycloak is returning login errors for more than 3% of requests.
Description	Keycloak is returning login errors for {{ printf "%.2f" $value }}% of requests.

KeycloakLoginErrorsHighWarning

Severity	Warning
Summary	Keycloak is returning login errors for more than 1% of requests.
Description	Keycloak is returning login errors for {{ printf "%.2f" $value }}% of requests.

KeycloakSSLCertExpirationHigh

Severity	Critical
Summary	SSL certificate for Keycloak service expires on {{ $value | humanizeTimestamp }}.
Description	The SSL certificate for the Keycloak iam-keycloak-http service endpoints expires on {{ $value | humanizeTimestamp }}, less than 10 days are left.

KeycloakSSLCertExpirationMedium

Severity	Major
Summary	SSL certificate for Keycloak service expires on {{ $value | humanizeTimestamp }}.
Description	The SSL certificate for the Keycloak iam-keycloak-http service endpoints expires on {{ $value | humanizeTimestamp }}, less than 30 days are left.

KeycloakTargetDown

Severity	Major
Summary	Prometheus Keycloak target is down.
Description	Prometheus fails to scrape metrics from the {{ $labels.pod }} pod on the {{ $labels.node }} node.