feat: alert on agent pipe availability

workloads/apps/opencode-app.yaml

@@ -14,7 +14,7 @@ spec:
       targetRevision: 0.1.59
     - chart: agent-pipe-uploader
       repoURL: ghcr.io/makeitworkcloud/charts
-      targetRevision: 0.2.0
+      targetRevision: 0.2.1
     - repoURL: https://github.com/makeitworkcloud/kustomize-cluster.git
       path: workloads/opencode
       targetRevision: main

workloads/opencode/agent-pipe-uploader-alert.yaml

@@ -0,0 +1,20 @@
+---
+apiVersion: monitoring.coreos.com/v1
+kind: PrometheusRule
+metadata:
+  name: agent-pipe-uploader
+  namespace: opencode
+  annotations:
+    argocd.argoproj.io/sync-wave: "1"
+spec:
+  groups:
+    - name: agent-pipe-uploader
+      rules:
+        - alert: AgentPipeUploaderUnavailable
+          expr: kube_deployment_status_replicas_available{namespace="opencode",deployment="agent-pipe-uploader"} < 1
+          for: 10m
+          labels:
+            severity: warning
+          annotations:
+            summary: Agent Pipe uploader has no available replicas
+            description: Signed artifact transfers are unavailable until the agent-pipe-uploader Deployment is ready.

workloads/opencode/kustomization.yaml

@@ -5,6 +5,7 @@ resources:
   - namespace.yaml
   - persistent-volume-claim.yaml
   - artifacts-persistent-volume-claim.yaml
+  - agent-pipe-uploader-alert.yaml
   - service.yaml
   - tunnel-binding.yaml
   - session-metrics.yaml