Robusta

https://docs.robusta.dev/master
Admin
Robusta transforms Prometheus alerts into actionable insights with Kubernetes context and...
Tokens:250,530
Snippets:2,257
Trust Score:8
Update:3 days ago
Show doc for...
Tokens:
Raw
### Install Robusta with small cluster settings

Source: https://docs.robusta.dev/master/help.html

Use these flags during installation for test clusters like Kind or Colima.

```bash
helm install robusta robusta/robusta -f ./generated_values.yaml --set clusterName=<YOUR_CLUSTER_NAME> --set isSmallCluster=true \
    --set kube-prometheus-stack.prometheus.prometheusSpec.retentionSize=9GB \
    --set kube-prometheus-stack.prometheus.prometheusSpec.storageSpec.volumeClaimTemplate.spec.resources.requests.storage=10Gi \
    --set kube-prometheus-stack.prometheus.prometheusSpec.resources.requests.memory=512Mi
```

--------------------------------

### Example generated_values.yaml configuration

Source: https://docs.robusta.dev/master/setup-robusta/gitops/flux.html

Example configuration file for Robusta, including cluster identification and sink settings.

```yaml
clusterName: my_cluster_name # <- This is the line to be added
globalConfig:
  signing_key: xxxxxx
  account_id: xxxxxx
sinksConfig:
- robusta_sink:
    name: robusta_ui_sink
    token: xxxxxx
enablePrometheusStack: true
enablePlatformPlaybooks: true
runner:
  sendAdditionalTelemetry: true
```

--------------------------------

### on_kubernetes_any_resource_create simple example

Source: https://docs.robusta.dev/master/playbook-reference/triggers/kubernetes.html

A basic configuration for the on_kubernetes_any_resource_create trigger.

```yaml
customPlaybooks:
- triggers:
  - on_kubernetes_any_resource_create: {}
  actions:
  - create_finding: # 
      title: "resource $name in namespace $namespace was created"
      aggregation_key: "resource_created"
```

--------------------------------

### on_kubernetes_any_resource_all_changes simple example

Source: https://docs.robusta.dev/master/playbook-reference/triggers/kubernetes.html

A basic configuration for the on_kubernetes_any_resource_all_changes trigger.

```yaml
customPlaybooks:
- triggers:
  - on_kubernetes_any_resource_all_changes: {}
  actions:
  - create_finding: # 
      title: "resource $name in namespace $namespace was modified"
      aggregation_key: "resource_modified"
```

--------------------------------

### Copy and install custom playbooks in Dockerfile

Source: https://docs.robusta.dev/master/playbook-reference/defining-playbooks/external-playbook-repositories.html

Copy your custom playbooks into the image and install them into site-packages with all dependencies.

```dockerfile
COPY my_playbooks/ /etc/robusta/playbooks/my_playbooks
RUN python3 -m pip install --no-cache-dir /etc/robusta/playbooks/my_playbooks
```

--------------------------------

### Install Robusta with Helm

Source: https://docs.robusta.dev/master/setup-robusta/rbac-namespace-scoped-runner.html

Execute the Helm upgrade command to apply the configuration and install Robusta in the specified namespace.

```bash
helm upgrade --install robusta robusta/robusta \
  -f generated_values.yaml \
  -f scoped-values.yaml \
  -n robusta --create-namespace
```

--------------------------------

### http_post Configuration

Source: https://docs.robusta.dev/master/playbook-reference/actions/networking.html

Example configuration for the http_post action in values.yaml.

```yaml
customPlaybooks:
- actions:
  - http_post:
      url: string
  triggers:
  - on_pod_create: {}
```

--------------------------------

### http_get Configuration

Source: https://docs.robusta.dev/master/playbook-reference/actions/networking.html

Example configuration for the http_get action in values.yaml.

```yaml
customPlaybooks:
- actions:
  - http_get:
      url: string
  triggers:
  - on_pod_create: {}
```

--------------------------------

### on_kubernetes_any_resource_update simple example

Source: https://docs.robusta.dev/master/playbook-reference/triggers/kubernetes.html

A basic configuration for the on_kubernetes_any_resource_update trigger.

```yaml
customPlaybooks:
- triggers:
  - on_kubernetes_any_resource_update: {}
  actions:
  - create_finding: # 
      title: "resource $name in namespace $namespace was updated"
      aggregation_key: "resource_updated"
```

--------------------------------

### on_job_create Simple Example

Source: https://docs.robusta.dev/master/playbook-reference/triggers/kubernetes.html

A basic configuration to trigger an action when a Job is created.

```yaml
customPlaybooks:
- triggers:
  - on_job_create: {}
  actions:
  - create_finding: # 
      title: "Job $name in namespace $namespace was created"
      aggregation_key: "Job_created"
```

--------------------------------

### on_statefulset_create simple example

Source: https://docs.robusta.dev/master/playbook-reference/triggers/kubernetes.html

A basic trigger configuration for when a StatefulSet is created.

```yaml
customPlaybooks:
- triggers:
  - on_statefulset_create: {}
  actions:
  - create_finding: # 
      title: "StatefulSet $name in namespace $namespace was created"
      aggregation_key: "StatefulSet_created"
```

--------------------------------

### on_namespace_create simple example

Source: https://docs.robusta.dev/master/playbook-reference/triggers/kubernetes.html

A basic configuration to trigger a finding when a Namespace is created.

```yaml
customPlaybooks:
- triggers:
  - on_namespace_create: {}
  actions:
  - create_finding: # 
      title: "Namespace $name in namespace $namespace was created"
      aggregation_key: "Namespace_created"
```

--------------------------------

### Example metrics output

Source: https://docs.robusta.dev/master/setup-robusta/robusta-runner-metrics.html

This is a sample of the metrics data returned by the /metrics endpoint.

```text
# HELP discovery_errors_total Number of discovery process failures.
# TYPE discovery_errors_total counter
discovery_errors_total 0.0
# HELP discovery_errors_created Number of discovery process failures.
# TYPE discovery_errors_created gauge
discovery_errors_created 1.6925408357619166e+09
# HELP discovery_process_time Total discovery process time (seconds)
# TYPE discovery_process_time summary
discovery_process_time_count 258.0
discovery_process_time_sum 87.89608378204866
# HELP discovery_process_time_created Total discovery process time (seconds)
# TYPE discovery_process_time_created gauge
discovery_process_time_created 1.6925408357619708e+09
# HELP playbooks_errors_total Number of playbooks failures.
# TYPE playbooks_errors_total counter
# HELP playbooks_process_time Total playbooks process time (seconds)
# TYPE playbooks_process_time summary
playbooks_process_time_count{source=""} 2218.0
playbooks_process_time_sum{source=""} 215.01851963996887
playbooks_process_time_count{source="manual_action"} 22.0
playbooks_process_time_sum{source="manual_action"} 2.7707679271698
# HELP playbooks_process_time_created Total playbooks process time (seconds)
# TYPE playbooks_process_time_created gauge
playbooks_process_time_created{source=""} 1.692540846287054e+09
playbooks_process_time_created{source="manual_action"} 1.6926052244569693e+09
# HELP queue_event_total Number of queue events status
# TYPE queue_event_total counter
queue_event_total{queue_name="api_server_queue",status="queued"} 1554.0
queue_event_total{queue_name="api_server_queue",status="processed"} 1554.0
queue_event_total{queue_name="alerts_queue",status="queued"} 169.0
queue_event_total{queue_name="alerts_queue",status="processed"} 169.0
# HELP queue_event_created Number of queue events status
# TYPE queue_event_created gauge
queue_event_created{queue_name="api_server_queue",status="queued"} 1.6925408454740999e+09
queue_event_created{queue_name="api_server_queue",status="processed"} 1.6925408467937994e+09
queue_event_created{queue_name="alerts_queue",status="queued"} 1.6925409958650925e+09
queue_event_created{queue_name="alerts_queue",status="processed"} 1.6925409967573514e+09
# HELP queue_process_time queue process time (seconds)
# TYPE queue_process_time summary
queue_process_time_count{queue_name="api_server_queue"} 1554.0
queue_process_time_sum{queue_name="api_server_queue"} 628.65576171875
queue_process_time_count{queue_name="alerts_queue"} 169.0
queue_process_time_sum{queue_name="alerts_queue"} 10279.701471090317
# HELP queue_size Current size of the queue
# TYPE queue_size gauge
queue_size{queue_name="api_server_queue"} 0.0
queue_size{queue_name="alerts_queue"} 0.0
...
```

--------------------------------

### on_persistentvolume_create simple example

Source: https://docs.robusta.dev/master/playbook-reference/triggers/kubernetes.html

A basic configuration to trigger an action when a PersistentVolume is created.

```yaml
customPlaybooks:
- triggers:
  - on_persistentvolume_create: {}
  actions:
  - create_finding: # 
      title: "PersistentVolume $name in namespace $namespace was created"
      aggregation_key: "PersistentVolume_created"
```

--------------------------------

### on_clusterrolebinding_create Simple Example

Source: https://docs.robusta.dev/master/playbook-reference/triggers/kubernetes.html

A basic configuration to trigger an action when a ClusterRoleBinding is created.

```yaml
customPlaybooks:
- triggers:
  - on_clusterrolebinding_create: {}
  actions:
  - create_finding: # 
      title: "ClusterRoleBinding $name in namespace $namespace was created"
      aggregation_key: "ClusterRoleBinding_created"
```

--------------------------------

### on_serviceaccount_create simple example

Source: https://docs.robusta.dev/master/playbook-reference/triggers/kubernetes.html

A basic configuration to trigger an action when a ServiceAccount is created.

```yaml
customPlaybooks:
- triggers:
  - on_serviceaccount_create: {}
  actions:
  - create_finding: # 
      title: "ServiceAccount $name in namespace $namespace was created"
      aggregation_key: "ServiceAccount_created"
```

--------------------------------

### Implementing your first playbook: my_action.py

Source: https://docs.robusta.dev/master/playbook-reference/actions/develop-actions/writing-playbooks.html

Create a Python file named my_action.py with this content. It defines an action that receives a PodEvent, retrieves the pod, its logs, and processes, and sends enrichment blocks to Slack or other destinations.

```python
from robusta.api import *

@action
def my_action(event: PodEvent):
    # we have full access to the pod on which the alert fired
    pod = event.get_pod()
    pod_name = pod.metadata.name
    pod_logs = pod.get_logs()
    pod_processes = pod.exec("ps aux")

    # this is how you send data to slack or other destinations
    event.add_enrichment([
        MarkdownBlock("*Oh no!* An alert occurred on " + pod_name),
        FileBlock("crashing-pod.log", pod_logs)
    ])

```

--------------------------------

### Configure AlertManager for other Prometheus installations

Source: https://docs.robusta.dev/master/configuration/alertmanager-integration/alert-manager.html

Add this configuration to your AlertManager configuration file. This setup ensures Robusta receives alerts and knows when they are resolved.

```yaml
receivers:
  - name: 'robusta'
    webhook_configs:
      - url: 'http://<helm-release-name>-runner.<namespace>.svc.cluster.local/api/alerts'
        send_resolved: true # 

route: # 
  routes:
    - receiver: 'robusta'
      group_by: [ '...' ]
      group_wait: 1s
      group_interval: 1s
      matchers:
        - severity =~ ".*"
      repeat_interval: 4h
      continue: true # 
```

--------------------------------

### Retrieve Microsoft Teams Channel Link

Source: https://docs.robusta.dev/master/configuration/sinks/ms-teams-graph.html

Example of the URL structure obtained by clicking 'Get link to channel' in Microsoft Teams, which contains the necessary team and channel IDs.

```text
https://teams.microsoft.com/l/channel/19%3Aabc123%40thread.tacv2/Alerts?groupId=<TEAM_ID>&tenantId=<TENANT_ID>
```

--------------------------------

### Example deployment key format

Source: https://docs.robusta.dev/master/playbook-reference/defining-playbooks/external-playbook-repositories.html

The key parameter requires a base64 encoded deployment key with read access.

```text
-----BEGIN OPENSSH PRIVATE KEY-----
ewfrcfsfvC1rZXktdjEAAAAABG5vb.....
-----END OPENSSH PRIVATE KEY-----
```

--------------------------------

### Install Robusta on additional clusters

Source: https://docs.robusta.dev/master/setup-robusta/multi-cluster.html

Use this command to install Robusta on subsequent clusters while reusing the existing generated_values.yaml file. Ensure a unique clusterName is provided for each installation.

```bash
 helm install robusta robusta/robusta -f ./generated_values.yaml --set clusterName=<YOUR_CLUSTER_NAME>
```

--------------------------------

### Get RBAC Configuration Response

Source: https://docs.robusta.dev/master/configuration/exporting/rbac-api.html

The JSON response returned after a successful GET request.

```json
{
    "account_id": "YOUR_ACCOUNT_ID",
    "scopes": [
        {
            "name": "production-scope",
            "type": "namespace",
            "clusters": {
                "production-cluster": ["default", "app-namespace"]
            }
        }
    ],
    "groups": [
        {
            "name": "developers",
            "provider_group_id": "dev-team-id",
            "type": "namespace",
            "scopes": ["production-scope"],
            "permissions": ["APP_VIEW", "POD_LOGS", "METRICS_VIEW"]
        }
    ],
    "role_permission_groups": [
        {
            "name": "admin-group",
            "provider_group_id": "admin-team-id",
            "type": "ADMIN"
        }
    ]
}
```

--------------------------------

### Verify Prometheus Operator Installation

Source: https://docs.robusta.dev/master/setup-robusta/alertsui.html

Check if the Prometheus operator is installed by listing custom resource definitions.

```bash
kubectl get crd | grep prometheus
```

--------------------------------

### Create a namespace for the demo

Source: https://docs.robusta.dev/master/playbook-reference/logs-triggers/index.html

Commands to create a dedicated namespace and set the current context for the log-based alerting tutorial.

```bash
kubectl create namespace log-triggers
kubectl config set-context --current --namespace log-triggers
```

--------------------------------

### on_service_create Simple Example

Source: https://docs.robusta.dev/master/playbook-reference/triggers/kubernetes.html

A basic configuration to trigger an action when a Service is created.

```yaml
customPlaybooks:
- triggers:
  - on_service_create: {}
  actions:
  - create_finding: # 
      title: "Service $name in namespace $namespace was created"
      aggregation_key: "Service_created"
```

--------------------------------

### Get RBAC Configuration Request

Source: https://docs.robusta.dev/master/configuration/exporting/rbac-api.html

Retrieve the current RBAC configuration for your account using a GET request.

```bash
curl -X GET 'https://api.robusta.dev/api/rbac?account_id=YOUR_ACCOUNT_ID' \
  -H 'Authorization: Bearer YOUR_API_KEY'
```

--------------------------------

### on_replicaset_create Simple Example

Source: https://docs.robusta.dev/master/playbook-reference/triggers/kubernetes.html

Basic configuration to trigger an action when a ReplicaSet is created.

```yaml
customPlaybooks:
- triggers:
  - on_replicaset_create: {}
  actions:
  - create_finding: # 
      title: "ReplicaSet $name in namespace $namespace was created"
      aggregation_key: "ReplicaSet_created"
```

--------------------------------

### Original pod log example

Source: https://docs.robusta.dev/master/playbook-reference/builtin-alert-enrichment.html

An example of raw log data containing sensitive information before censoring.

```text
# Original pod log:
2022-07-28 08:24:45.283 INFO     user's uuid: '193836d9-9cce-4df9-a454-c2edcf2e80e5'
2022-07-28 08:35:00.762 INFO     Customer email: user@example.com
2022-07-28 08:35:01.090 INFO     Payment processed with card: 4111-1111-1111-1111
```

--------------------------------

### on_node_create Simple Example

Source: https://docs.robusta.dev/master/playbook-reference/triggers/kubernetes.html

A basic configuration to trigger an action when a Node is created.

```yaml
customPlaybooks:
- triggers:
  - on_node_create: {}
  actions:
  - create_finding: # 
      title: "Node $name in namespace $namespace was created"
      aggregation_key: "Node_created"
```

--------------------------------

### on_statefulset_create with filters

Source: https://docs.robusta.dev/master/playbook-reference/triggers/kubernetes.html

Example showing optional filters for name prefix, namespace prefix, and labels selector.

```yaml
customPlaybooks:
- triggers:
  - on_statefulset_create:
      name_prefix: "my-resource" # 
      namespace_prefix: "kube-system" # 
      labels_selector: "label1=value1" # 
  actions:
  - create_finding: # 
      title: "StatefulSet $name in namespace $namespace was created"
      aggregation_key: "StatefulSet_created"
```

--------------------------------

### Installation outbound endpoints for firewall allowlist

Source: https://docs.robusta.dev/master/setup-robusta/proxies.html

Endpoints required specifically during Helm installation, upgrades, or image pulling processes.

```text
# Install / upgrade (only needed during helm install/upgrade and image pulls)
robusta-charts.storage.googleapis.com   # Robusta Helm chart repository
*.docker.io                             # default registry for robustadev/* images
    registry-1.docker.io
    auth.docker.io
    production.cloudflare.docker.com
us-central1-docker.pkg.dev              # HolmesGPT MCP server images and bundled tooling
quay.io                                 # only with bundled kube-prometheus-stack subchart
ghcr.io                                 # only with bundled kube-prometheus-stack subchart
```

--------------------------------

### on_daemonset_create Simple Example

Source: https://docs.robusta.dev/master/playbook-reference/triggers/kubernetes.html

A basic configuration to trigger an action when a DaemonSet is created.

```yaml
customPlaybooks:
- triggers:
  - on_daemonset_create: {}
  actions:
  - create_finding: # 
      title: "DaemonSet $name in namespace $namespace was created"
      aggregation_key: "DaemonSet_created"
```

--------------------------------

### on_ingress_create simple example

Source: https://docs.robusta.dev/master/playbook-reference/triggers/kubernetes.html

A basic configuration to trigger an action when an Ingress is created.

```yaml
customPlaybooks:
- triggers:
  - on_ingress_create: {}
  actions:
  - create_finding: # 
      title: "Ingress $name in namespace $namespace was created"
      aggregation_key: "Ingress_created"
```

--------------------------------

### Install Robusta in a custom namespace

Source: https://docs.robusta.dev/master/setup-robusta/installation-faq.html

Use this command to install Robusta into a specific namespace, such as 'robusta', instead of the default namespace.

```bash
helm install robusta robusta/robusta -f ./generated_values.yaml -n robusta --create-namespace --set clusterName=<YOUR_CLUSTER_NAME>
```

--------------------------------

### Install or upgrade Robusta with custom values

Source: https://docs.robusta.dev/master/setup-robusta/read-only-service-account.html

Apply the read-only configuration by including the custom values file during the Helm installation or upgrade process.

```bash
helm upgrade --install robusta robusta/robusta \
  -f generated_values.yaml \
  -f read-only-values.yaml \
  -n robusta-system --create-namespace
```

--------------------------------

### Common Sink Configuration Options

Source: https://docs.robusta.dev/master/notification-routing/configuring-sinks.html

Example showing common configuration parameters available for sinks, including scope, activity, stop, grouping, and default settings.

```yaml
sinksConfig:
- slack_sink:                     # sink type
    name: my_sink_name            # name that uniquely identifies this sink in Robusta
    scope: {}                     # optional - filter notifications sent to this sink
    activity: {}                  # optional - enable/disable sink according to time of day/week
    stop: false                   # optional - stop notifications from continuing to subsequent sinks
    grouping: {}                  # optional - use grouping to reduce the number of notifications (i.e. group into slack threads)
    default: true                 # optional - disable this sink by default

    # sink-specific parameters - e.g. for Slack, some options are shown below
    # api_key: xoxb-112...
    # slack_channel: general-alerts
```

--------------------------------

### Set RBAC Configuration Request Body Example

Source: https://docs.robusta.dev/master/configuration/exporting/rbac-api.html

An example JSON body for the POST request to define scopes, groups, and role permission groups.

```json
{
    "account_id": "YOUR_ACCOUNT_ID",
    "scopes": [
        {
            "name": "production-scope",
            "type": "namespace",
            "clusters": {
                "production-cluster": ["default", "app-namespace"]
            }
        },
        {
            "name": "staging-scope",
            "type": "cluster",
            "clusters": {
                "staging-cluster": ["*"]
            }
        }
    ],
    "groups": [
        {
            "name": "developers",
            "provider_group_id": "dev-team-id",
            "type": "namespace",
            "scopes": ["production-scope"],
            "permissions": ["APP_VIEW", "POD_LOGS", "METRICS_VIEW"]
        },
        {
            "name": "devops",
            "provider_group_id": "devops-team-id",
            "type": "cluster",
            "scopes": ["staging-scope"],
            "permissions": ["NODE_VIEW", "CLUSTER_VIEW", "KRR_SCAN"]
        }
    ],
    "role_permission_groups": [
        {
            "name": "admin-group",
            "provider_group_id": "admin-team-id",
            "type": "ADMIN"
        }
    ]
}
```

--------------------------------

### on_deployment_create filters example

Source: https://docs.robusta.dev/master/playbook-reference/triggers/kubernetes.html

Fires when a Deployment is created, with optional filters: name_prefix, namespace_prefix, and labels_selector. Labels format is label1=value1,label2=value2; all must match.

```yaml
customPlaybooks:
- triggers:
  - on_deployment_create:
      name_prefix: "my-resource" # 
      namespace_prefix: "kube-system" # 
      labels_selector: "label1=value1" # 
  actions:
  - create_finding: # 
      title: "Deployment $name in namespace $namespace was created"
      aggregation_key: "Deployment_created"

```

--------------------------------

### node_cpu_enricher example configuration (Helm values.yaml)

Source: https://docs.robusta.dev/master/playbook-reference/actions/event-enrichment.html

Add this customPlaybooks block to your Robusta Helm values.yaml to enable the node_cpu_enricher action. The example sets prometheus_additional_labels, prometheus_auth, prometheus_url, and prometheus_url_query_string. Customize the trigger and parameters as needed.

```yaml
customPlaybooks:
- actions:
  - node_cpu_enricher:
      prometheus_additional_labels: 'cluster: ''cluster-2-test''env: ''prod'''
      prometheus_auth: Basic YWRtaW46cGFzc3dvcmQ=
      prometheus_url: http://prometheus-k8s.monitoring.svc.cluster.local:9090
      prometheus_url_query_string: demo-query=example-data
  triggers:
  - on_node_all_changes: {}

```

--------------------------------

### on_replicaset_create Filters Example

Source: https://docs.robusta.dev/master/playbook-reference/triggers/kubernetes.html

Configuration using optional filters for name prefix, namespace prefix, and labels selector.

```yaml
customPlaybooks:
- triggers:
  - on_replicaset_create:
      name_prefix: "my-resource" # 
      namespace_prefix: "kube-system" # 
      labels_selector: "label1=value1" # 
  actions:
  - create_finding: # 
      title: "ReplicaSet $name in namespace $namespace was created"
      aggregation_key: "ReplicaSet_created"
```

--------------------------------

### node_graph_enricher example configuration (Helm values.yaml)

Source: https://docs.robusta.dev/master/playbook-reference/actions/event-enrichment.html

Add this customPlaybooks block to your Robusta Helm values.yaml to enable the node_graph_enricher action. The example sets prometheus_additional_labels, prometheus_auth, prometheus_url, prometheus_url_query_string, and resource_type. Customize the trigger and parameters as needed.

```yaml
customPlaybooks:
- actions:
  - node_graph_enricher:
      prometheus_additional_labels: 'cluster: ''cluster-2-test''env: ''prod'''
      prometheus_auth: Basic YWRtaW46cGFzc3dvcmQ=
      prometheus_url: http://prometheus-k8s.monitoring.svc.cluster.local:9090
      prometheus_url_query_string: demo-query=example-data
      resource_type: Memory
  triggers:
  - on_node_all_changes: {}

```

--------------------------------

### on_deployment_all_changes filters example

Source: https://docs.robusta.dev/master/playbook-reference/triggers/kubernetes.html

Fires when a Deployment is created, updated, or deleted, with optional filters: name_prefix, namespace_prefix, and labels_selector. Labels format is label1=value1,label2=value2; all must match.

```yaml
customPlaybooks:
- triggers:
  - on_deployment_all_changes:
      name_prefix: "my-resource" # 
      namespace_prefix: "kube-system" # 
      labels_selector: "label1=value1" # 
  actions:
  - create_finding: # 
      title: "Deployment $name in namespace $namespace was all_changes"
      aggregation_key: "Deployment_all_changes"

```

--------------------------------

### Uninstall Robusta

Source: https://docs.robusta.dev/master/setup-robusta/upgrade.html

Remove the Robusta installation from your cluster.

```bash
helm uninstall robusta
```

--------------------------------

### Basic Robusta Configuration

Source: https://docs.robusta.dev/master/playbook-reference/actions/remediation.html

A minimal example of adding the kubectl_command action to the Robusta Helm values.yaml file.

```yaml
customPlaybooks:
- actions:
  - kubectl_command: {}
  triggers:
  - on_pod_create: {}
```

--------------------------------

### on_kubernetes_any_resource_delete simple example

Source: https://docs.robusta.dev/master/playbook-reference/triggers/kubernetes.html

A basic configuration for the on_kubernetes_any_resource_delete trigger.

```yaml
customPlaybooks:
- triggers:
  - on_kubernetes_any_resource_delete: {}
  actions:
  - create_finding: # 
      title: "resource $name in namespace $namespace was deleted"
      aggregation_key: "resource_deleted"
```

--------------------------------

### Disk Benchmark Action Configuration

Source: https://docs.robusta.dev/master/playbook-reference/actions/miscellaneous.html

Example configuration for the disk_benchmark action in Helm values.yaml.

```yaml
customPlaybooks:
- actions:
  - disk_benchmark:
      storage_class_name: string
  triggers:
  - on_pod_create: {}
```

--------------------------------

### on_container_oom_killed trigger configuration

Source: https://docs.robusta.dev/master/playbook-reference/triggers/kubernetes.html

Example playbook using oomkilled_container_graph_enricher.

```yaml
customPlaybooks:
- triggers:
  - on_container_oom_killed:
      rate_limit: 900
      exclude:
        - name: "oomkilled-container"
          namespace: "default"
  actions:
  - oomkilled_container_graph_enricher:
      resource_type: Memory
```

--------------------------------

### on_statefulset_all_changes with filters

Source: https://docs.robusta.dev/master/playbook-reference/triggers/kubernetes.html

Example showing optional filters for name prefix, namespace prefix, and labels selector for all changes.

```yaml
customPlaybooks:
- triggers:
  - on_statefulset_all_changes:
      name_prefix: "my-resource" # 
      namespace_prefix: "kube-system" # 
      labels_selector: "label1=value1" # 
  actions:
  - create_finding: # 
      title: "StatefulSet $name in namespace $namespace was all_changes"
      aggregation_key: "StatefulSet_all_changes"
```

--------------------------------

### incluster_ping Configuration

Source: https://docs.robusta.dev/master/playbook-reference/actions/networking.html

Example configuration for the incluster_ping action in values.yaml.

```yaml
customPlaybooks:
- actions:
  - incluster_ping:
      hostname: string
  triggers:
  - on_pod_create: {}
```

--------------------------------

### Common Queries: CPU and Memory

Source: https://docs.robusta.dev/master/configuration/exporting/prometheus-query-api.html

Example PromQL queries for container resource usage.

```json
{"promql_query": "sum(rate(container_cpu_usage_seconds_total[5m])) by (pod, namespace)"}
{"promql_query": "container_memory_usage_bytes{namespace=\"default\"}"}
```

--------------------------------

### http_put Configuration

Source: https://docs.robusta.dev/master/playbook-reference/actions/networking.html

Example configuration for the http_put action in values.yaml.

```yaml
customPlaybooks:
- actions:
  - http_put:
      url: string
  triggers:
  - on_pod_create: {}
```
Tokens:
Raw