apiVersion: monitoring.coreos.com/v1
kind: PrometheusRule
metadata:
  name: authentik-outposts
  namespace: authentik
  labels:
    release: prometheus
spec:
  groups:
    - name: authentik-outposts
      rules:
        - alert: AuthentikManagedOutpostsUnavailable
          expr: |-
            sum(
              kube_deployment_status_replicas_available{
                namespace="authentik",
                deployment=~"ak-outpost-(ldap|radius|rac)"
              }
            ) != 3
            or
            absent(
              kube_deployment_status_replicas_available{
                namespace="authentik",
                deployment=~"ak-outpost-(ldap|radius|rac)"
              }
            )
          for: 10m
          labels:
            severity: critical
          annotations:
            summary: Authentik managed outposts are unavailable
            description: Expected one available LDAP, RADIUS, and RAC outpost replica.