Add alerts for Hashicorp Vault

Signed-off-by: Igor Churmeev <ichurmeev@makezbs.com>

_data/rules.yml

@@ -1984,6 +1984,30 @@ groups:
                 severity: critical
                 for: 5m
 
+      - name: Hashicorp Vault
+        exporters:
+          - name: Embedded exporter
+            doc_url: https://github.com/hashicorp/vault/blob/master/website/content/docs/configuration/telemetry.mdx#prometheus
+            rules:
+              - name: Vault down
+                description: Vault instance is down on {{ $labels.instance }}
+                query: 'up{job="vault"} == 0'
+                severity: critical
+              - name: Vault sealed
+                description: 'Vault instance is sealed on {{ $labels.instance }}'
+                query: 'vault_core_unsealed == 0'
+                severity: critical
+              - name: Vault too many pending tokens
+                description: 'Too many pending tokens {{ $labels.instance }}: {{ $value | printf "%.2f"}}%'
+                query: 'avg(vault_token_create_count - vault_token_store_count) > 0'
+                severity: warning
+                for: 5m
+              - name: Vault too many infinity tokens
+                description: 'Too many infinity tokens {{ $labels.instance }}: {{ $value | printf "%.2f"}}%'
+                query: 'vault_token_count_by_ttl{creation_ttl="+Inf"} > 3'
+                severity: warning
+                for: 5m
+
   - name: Other
     services:
       - name: Thanos