groups:
- name: EKS-dp-starburst-Cilium-Alerts
  rules:
  - alert: dp-starburst-MapOps-Crossed-Threshold
    expr: topk(5, avg(rate(cilium_bpf_map_ops_total{k8s_app="cilium", map_name=~"snat_v4_external", operation=~"delete", cluster=~".*dp-starburst.*"}[5m])) by (kubernetes_pod_name, instance, map_name, operation, cluster)) <= 20
    for: 1m
    labels:
      severity: critical
      bu: infra
      team: devops
      service: eks-cilium
      env: prd
      priority: p0
    annotations:
      summary: "dp-starburst Cilium Map Ops has crossed 40 Ops per Second for Map Name - snat_v4_external, operation - delete, Pod - {{ $labels.kubernetes_pod_name }}, Instance - {{ $labels.instance }}, cluster - {{ $labels.cluster }} and the value is {{ $value }}"
      description: "dp-starburst Cilium Map Ops has crossed 40 Ops per Second for Map Name - snat_v4_external, operation - delete, Pod - {{ $labels.kubernetes_pod_name }}, Instance - {{ $labels.instance }}, cluster - {{ $labels.cluster }} and the value is {{ $value }}\n  Labels - {{ $labels }}"