test/policies/monitor/policy.rego


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39

package monitor

# Policy allows if a matching threshold is met
result contains output if {
    input.domain = data.node.monitor.domain
    some events  in data.node.monitor.metricsPerEventName
    events.eventName == input.eventName
    events.controlLoopSchemaType == input.controlLoopSchemaType
    events.policyScope == input.policyScope
    events.policyName == input.policyName
    events.policyVersion == input.policyVersion
    some value in events.thresholds
    input.controlname == value.closedLoopControlName
    input.version == value.version
    input.thresholdValue == value.thresholdValue
    output := {
        "severity" : "MAJOR",
        "closedLoopEventStatus" : "ABATED"
        }
}

# Policy allows if a matching threshold is met
result contains output if {
    input.domain = data.node.monitor.domain
    some events  in data.node.monitor.metricsPerEventName
    events.eventName == input.eventName
    events.controlLoopSchemaType == input.controlLoopSchemaType
    events.policyScope == input.policyScope
    events.policyName == input.policyName
    events.policyVersion == input.policyVersion
    some value in events.thresholds
    input.controlname == value.closedLoopControlName
    input.version == value.version
    input.thresholdValue > value.thresholdValue
    output := {
        "severity" : "CRITICAL",
        "closedLoopEventStatus" : "ONSET"
        }
}