Keycloak

This section describes the alerts available for Keycloak services.

KeycloakBlackboxEndpointProbeFailing

Severity

Critical

Summary

Blackbox probe for Keycloak service endpoint is failing.

Description

Blackbox probe failed at least 3 times for the Keycloak {{ $labels.service_name }}/{{ $labels.pod }} endpoint in the last 20 minutes.

KeycloakBlackboxServiceProbeFailing

Severity

Critical

Summary

Blackbox probe for Keycloak service is failing.

Description

Blackbox probe failed at least 3 times for the Keycloak {{ $labels.service_name }} service in the last 20 minutes.

KeycloakHttpErrors4xxHighMajor

Severity

Major

Summary

Keycloak is returning client (4xx) errors for more than 8% of HTTP requests.

Description

Keycloak is returning client (4xx) errors for {{ printf "%.2f" $value }}% of HTTP requests.

KeycloakHttpErrors4xxHighWarning

Severity

Warning

Summary

Keycloak is returning client (4xx) errors for more than 5% of HTTP requests.

Description

Keycloak is returning client (4xx) errors for {{ printf "%.2f" $value }}% of HTTP requests.

KeycloakHttpErrors5xxHighMajor

Severity

Major

Summary

Keycloak is returning server (5xx) errors for more than 3% of HTTP requests.

Description

Keycloak is returning server (5xx) errors for {{ printf "%.2f" $value }}% of HTTP requests.

KeycloakHttpErrors5xxHighWarning

Severity

Warning

Summary

Keycloak is returning server (5xx) errors for HTTP requests.

Description

At least one HTTP request to Keycloak resulted in a server (5xx) error.

KeycloakLoginErrorsHighMajor

Severity

Major

Summary

Keycloak is returning login errors for more than 3% of requests.

Description

Keycloak is returning login errors for {{ printf "%.2f" $value }}% of requests.

KeycloakLoginErrorsHighWarning

Severity

Warning

Summary

Keycloak is returning login errors for more than 1% of requests.

Description

Keycloak is returning login errors for {{ printf "%.2f" $value }}% of requests.

KeycloakSSLCertExpirationHigh

Severity

Critical

Summary

SSL certificate for Keycloak service expires on {{ $value | humanizeTimestamp }}.

Description

The SSL certificate for the Keycloak iam-keycloak-http service endpoints expires on {{ $value | humanizeTimestamp }}, less than 10 days are left.

KeycloakSSLCertExpirationMedium

Severity

Major

Summary

SSL certificate for Keycloak service expires on {{ $value | humanizeTimestamp }}.

Description

The SSL certificate for the Keycloak iam-keycloak-http service endpoints expires on {{ $value | humanizeTimestamp }}, less than 30 days are left.

KeycloakTargetDown

Severity

Major

Summary

Prometheus Keycloak target is down.

Description

Prometheus fails to scrape metrics from the {{ $labels.pod }} pod on the {{ $labels.node }} node.