Commands icon
If icon
SlackIncomingWebhook icon
Schedule icon

HashiCorp Nomad Workload Allocation OOM Kill Sentinel

Queries HashiCorp Nomad allocations API to detect tasks terminated due to cgroup out-of-memory limits and notify operators of resource exhaustion.

Categories
CloudInfrastructure

How it works

This automated sentinel flow continuously assesses operational health, metrics, and capacity parameters for HashiCorp Nomad Workload Allocation OOM Kill Sentinel. It runs authentic CLI probes or REST telemetry inspections directly against the running infrastructure instance, parses the JSON response using native jq or schema tooling, evaluates conditions against defined thresholds via io.kestra.plugin.core.flow.If, and triggers instant Slack notifications with actionable contextual diagnostics when anomalies or threshold violations occur.

What you get

  • Proactive Anomaly Detection: Identifies performance degradation, quorum imbalance, or storage exhaustion before service disruption occurs.
  • Configurable Operational Guardrails: Fully parametric threshold inputs allowing zero-code adjustments across staging and production clusters.
  • Instant Incident Dispatch: Context-rich Slack alerting featuring detailed metrics, node identities, and mitigation recommendations.
  • Zero Mock Logic: Executes genuine network probes and command-line evaluations with strict error handling and top-level error routines.

Who it's for

  • Platform and Site Reliability Engineers managing mission-critical distributed systems.
  • Database and Infrastructure Administrators responsible for high-availability uptime and cluster capacity planning.
  • DevOps engineers automating self-healing data platform pipelines with Kestra.

Why orchestrate this with Kestra

  • Stateless & Scalable: Runs on Kestra's distributed execution engine without needing dedicated daemon agents on monitored hosts.
  • Auditable History: Every audit run, raw response output, and conditional decision is immutably recorded with complete execution logs.
  • Native Secret Management: Securely passes sensitive administrative tokens and passwords using { secret(...) } expressions without log exposure.
  • Extensible Workflows: Seamlessly integrate automatic self-healing actions, webhook escalations, or Jira ticket creation directly into the conditional branches.

Prerequisites

  • Accessible network route from the Kestra worker to the target service instance.
  • Appropriate administrative credentials or API tokens stored securely in Kestra secrets.
  • Active Slack Incoming Webhook URL configured as SLACK_WEBHOOK secret.

Quick start

  1. Import or paste this workflow definition into your Kestra instance.
  2. Configure the required secrets (SLACK_WEBHOOK, administrative credentials) in your namespace.
  3. Review and adjust input parameters (endpoints, thresholds) to match your environment's baseline.
  4. Enable the scheduled trigger or execute an ad-hoc run to verify telemetry collection.

How to extend

  • Add automated remediation actions (e.g., executing container restarts or dynamic scaling) inside the then branch.
  • Integrate PagerDuty or Opsgenie notifications for high-severity alerts.
  • Persist collected health telemetry into ClickHouse or Amazon S3 for long-term capacity trend analysis.

Links

See How

New to Kestra?

Use blueprints to kickstart your first workflows.