Prodsette oppgradering flywaydb (#98)

* fix: upgrade org.springdoc:springdoc-openapi-ui from 1.6.9 to 1.6.11 Snyk has created this PR to upgrade org.springdoc:springdoc-openapi-ui from 1.6.9 to 1.6.11. See this package in Maven Repository: https://mvnrepository.com/artifact/org.springdoc/springdoc-openapi-ui/ See this project in Snyk: https://app.snyk.io/org/obo/project/8d885d39-4a11-4bfc-8dbf-e9edb63a76aa?utm_source=github&utm_medium=referral&page=upgrade-pr * Migrer til Spring Boot 3 * fix: pom.xml to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JAVA-ORGSPRINGFRAMEWORK-3369852 * Migrer til Spring Boot 3 * Migrer til Spring Boot 3 * Migrer til Spring Boot 3 * Endre devurl mot poao-tilgang * fix: upgrade org.flywaydb:flyway-core from 9.16.0 to 9.16.1 (#80) Snyk has created this PR to upgrade org.flywaydb:flyway-core from 9.16.0 to 9.16.1. See this package in Maven Repository: https://mvnrepository.com/artifact/org.flywaydb/flyway-core/ See this project in Snyk: https://app.snyk.io/org/obo/project/8d885d39-4a11-4bfc-8dbf-e9edb63a76aa?utm_source=github&utm_medium=referral&page=upgrade-pr Co-authored-by: snyk-bot <[email protected]> * Gå mot onprem poao-tilgang (#83) * fix: upgrade org.flywaydb:flyway-core from 9.16.1 to 9.16.3 (#85) Snyk has created this PR to upgrade org.flywaydb:flyway-core from 9.16.1 to 9.16.3. See this package in Maven Repository: https://mvnrepository.com/artifact/org.flywaydb/flyway-core/ See this project in Snyk: https://app.snyk.io/org/obo/project/8d885d39-4a11-4bfc-8dbf-e9edb63a76aa?utm_source=github&utm_medium=referral&page=upgrade-pr * Tc 377 fjern trelloactions (#87) * TC-360 Oppgrader til actions v3 * TC-360 Ta bort actions/cache@v3 * TC-377 oppgrader til node.js 16 * TC-377 oppgrader til node.js 16 * fix: upgrade com.squareup.okhttp3:okhttp from 4.10.0 to 4.11.0 (#89) Snyk has created this PR to upgrade com.squareup.okhttp3:okhttp from 4.10.0 to 4.11.0. See this package in Maven Repository: https://mvnrepository.com/artifact/com.squareup.okhttp3/okhttp/ See this project in Snyk: https://app.snyk.io/org/obo/project/8d885d39-4a11-4bfc-8dbf-e9edb63a76aa?utm_source=github&utm_medium=referral&page=upgrade-pr Co-authored-by: snyk-bot <[email protected]> * fix: upgrade org.flywaydb:flyway-core from 9.16.3 to 9.17.0 (#90) Snyk has created this PR to upgrade org.flywaydb:flyway-core from 9.16.3 to 9.17.0. See this package in Maven Repository: https://mvnrepository.com/artifact/org.flywaydb/flyway-core/ See this project in Snyk: https://app.snyk.io/org/obo/project/8d885d39-4a11-4bfc-8dbf-e9edb63a76aa?utm_source=github&utm_medium=referral&page=upgrade-pr * Tc 377 oppgrader node js fra 12 til 16 (#88) * TC-360 Oppgrader til actions v3 * TC-360 Ta bort actions/cache@v3 * TC-377 oppgrader til node.js 16 * TC-377 oppgrader til node.js 16 * TC-377 oppgrader til node.js 16 * fix: upgrade org.flywaydb:flyway-core from 9.17.0 to 9.18.0 (#93) Snyk has created this PR to upgrade org.flywaydb:flyway-core from 9.17.0 to 9.18.0. See this package in Maven Repository: https://mvnrepository.com/artifact/org.flywaydb/flyway-core/ See this project in Snyk: https://app.snyk.io/org/obo/project/8d885d39-4a11-4bfc-8dbf-e9edb63a76aa?utm_source=github&utm_medium=referral&page=upgrade-pr Co-authored-by: snyk-bot <[email protected]> * fix: upgrade org.flywaydb:flyway-core from 9.18.0 to 9.19.1 (#95) Snyk has created this PR to upgrade org.flywaydb:flyway-core from 9.18.0 to 9.19.1. See this package in Maven Repository: https://mvnrepository.com/artifact/org.flywaydb/flyway-core/ See this project in Snyk: https://app.snyk.io/org/obo/project/8d885d39-4a11-4bfc-8dbf-e9edb63a76aa?utm_source=github&utm_medium=referral&page=upgrade-pr Co-authored-by: snyk-bot <[email protected]> * fix: upgrade org.flywaydb:flyway-core from 9.19.1 to 9.20.0 (#97) Snyk has created this PR to upgrade org.flywaydb:flyway-core from 9.19.1 to 9.20.0. See this package in Maven Repository: https://mvnrepository.com/artifact/org.flywaydb/flyway-core/ See this project in Snyk: https://app.snyk.io/org/obo/project/8d885d39-4a11-4bfc-8dbf-e9edb63a76aa?utm_source=github&utm_medium=referral&page=upgrade-pr Co-authored-by: snyk-bot <[email protected]> * Opprett mappe for nais-manifester og rename applikasjon-manifestene * Legg til alerts-config + workflow for deployment * fix: upgrade org.flywaydb:flyway-core from 9.20.0 to 9.20.1 (#99) Snyk has created this PR to upgrade org.flywaydb:flyway-core from 9.20.0 to 9.20.1. See this package in Maven Repository: https://mvnrepository.com/artifact/org.flywaydb/flyway-core/ See this project in Snyk: https://app.snyk.io/org/obo/project/8d885d39-4a11-4bfc-8dbf-e9edb63a76aa?utm_source=github&utm_medium=referral&page=upgrade-pr Co-authored-by: snyk-bot <[email protected]> * Update deploy-alerts-to-prod.yaml (#101) * Update deploy-alerts-to-prod.yaml * Update main.yml --------- Co-authored-by: snyk-bot <[email protected]> Co-authored-by: JulieHillRoa <[email protected]> Co-authored-by: Jan-Kåre Solbakken <[email protected]> Co-authored-by: Dragutin Vujovic <[email protected]> Co-authored-by: Christer Edvartsen <[email protected]> Co-authored-by: Mathias S. Müller <[email protected]> Co-authored-by: Sondre Larsen Ovrid <[email protected]> Co-authored-by: Sondre Ovrid <[email protected]>
navikt · Sep 18, 2023 · 28467b0 · 28467b0
1 parent e433b4c
commit 28467b0
Show file tree

Hide file tree

Showing 6 changed files with 78 additions and 3 deletions.
diff --git a/.github/workflows/deploy-alerts-to-prod.yaml b/.github/workflows/deploy-alerts-to-prod.yaml
@@ -0,0 +1,27 @@
+name: Deploy alerts for veilarbfilter to prod-fss
+
+on:
+  push:
+    branches:
+      - 'master'
+    paths:
+      - '.github/workflows/deploy-alerts-to-prod.yaml'
+      - '.nais/alerts/alerts-config-prod.yaml'
+  workflow_dispatch:
+permissions:
+  packages: write
+  contents: write
+jobs:
+  deploy-alerts:
+    name: Deploy alerts to prod-fss
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v3
+
+      - name: Deploy to prod-fss
+        uses: nais/deploy/actions/deploy@v1
+        env:
+          APIKEY: ${{ secrets.NAIS_DEPLOY_APIKEY_OBO }}
+          CLUSTER: prod-fss
+          RESOURCE: .nais/alerts/alerts-config-prod.yaml
diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
@@ -4,6 +4,9 @@ env:
   IMAGE_TAG: ${{ github.sha }}
   IMAGE: ghcr.io/${{ github.repository }}/veilarboppgave
   PRINT_PAYLOAD: true
+permissions:
+  packages: write
+  contents: write
 jobs:
   test:
     name: Run tests
@@ -61,7 +64,7 @@ jobs:
         env:
           APIKEY: ${{ secrets.NAIS_DEPLOY_APIKEY }}
           CLUSTER: dev-fss
-          RESOURCE: nais-dev.yaml
+          RESOURCE: .nais/application/application-config-dev.yaml
           VAR: version=${{ env.IMAGE_TAG }}
 
   deploy-prod:
@@ -77,7 +80,7 @@ jobs:
         env:
           APIKEY: ${{ secrets.NAIS_DEPLOY_APIKEY }}
           CLUSTER: prod-fss
-          RESOURCE: nais-prod.yaml
+          RESOURCE: .nais/application/application-config-prod.yaml
           VAR: version=${{ env.IMAGE_TAG }}
       - name: Create release
         uses: softprops/action-gh-release@v1

diff --git a/.nais/alerts/alerts-config-prod.yaml b/.nais/alerts/alerts-config-prod.yaml
@@ -0,0 +1,45 @@
+apiVersion: "monitoring.coreos.com/v1"
+kind: PrometheusRule
+metadata:
+  name: team-obo-alarmer-veilarboppgave
+  namespace: obo
+  labels:
+    team: obo
+spec:
+  groups:
+    - name: team-obo-alarmer-veilarboppgave
+      rules:
+        # Kubernetes-spesifikke alerts
+        - alert: Applikasjon er nede
+          expr: kube_deployment_status_replicas_available{deployment="veilarboppgave"} == 0
+          for: 1m
+          annotations:
+            summary: "App {{ $labels.deployment }} er nede i namespace {{ $labels.namespace }}!"
+            consequence: "Appen kan ikke nås av andre applikasjoner, noe som kan potensielt ha stor konsekvens for brukere (nedetid, mm.)."
+            action: "Diagnostiser applikasjonen ved hjelp av relevante kubectl-kommandoer (`kubectl get pod -l app={{ $labels.deployment }}`, `kubectl describe pod <pod>`, `kubectl get events --field-selector involvedObject.name=<pod>`)."
+          labels:
+            namespace: obo
+            severity: critical
+
+        # Spring Boot spesifikke alerts
+        - alert: Høy andel serverfeil (HTTP 5XX)
+          expr: (100 * (sum(rate(http_server_requests_seconds_count{app="veilarboppgave", outcome="SERVER_ERROR"}[5m])) / sum(rate(http_server_requests_seconds_count{app="veilarboppgave"}[5m])))) > 1
+          for: 5m
+          annotations:
+            summary: "Andelen HTTP 5XX feil i veilarboppgave har oversteget 1% de siste 5 minuttene."
+            consequence: "Potensielle konsekvenser for bruker kan være forhøyet andel opplevd feil, degradert ytelse, mm."
+            action: "Sjekk logger for å se hvilke feil som oppstår og start feilsøking."
+          labels:
+            namespace: obo
+            severity: critical
+
+        - alert: Høy andel klientfeil (HTTP 4XX)
+          expr: (100 * (sum(rate(http_server_requests_seconds_count{app="veilarboppgave", outcome="CLIENT_ERROR"}[5m])) / sum(rate(http_server_requests_seconds_count{app="veilarboppgave"}[5m])))) > 10
+          for: 5m
+          annotations:
+            summary: "Andelen HTTP 4XX feil i veilarboppgave har oversteget 10% de siste 5 minuttene."
+            consequence: "Potensielle konsekvenser for bruker kan være forhøyet andel opplevd feil, degradert ytelse, mm."
+            action: "Sjekk logger for å se hvilke feil som oppstår og start feilsøking."
+          labels:
+            namespace: obo
+            severity: warning
diff --git a/nais-dev.yaml → ...s/application/application-config-dev.yaml b/nais-dev.yaml → ...s/application/application-config-dev.yaml
diff --git a/nais-prod.yaml → .../application/application-config-prod.yaml b/nais-prod.yaml → .../application/application-config-prod.yaml
diff --git a/pom.xml b/pom.xml
@@ -91,7 +91,7 @@
         <dependency>
             <groupId>org.flywaydb</groupId>
             <artifactId>flyway-core</artifactId>
-            <version>9.19.1</version>
+            <version>9.20.1</version>
         </dependency>
         <dependency>
             <groupId>no.nav</groupId>