From 50dd7819324bf8d04e260788e7e2a459f9ef9c82 Mon Sep 17 00:00:00 2001
From: joeunlog <j.eunvit@gmail.com>
Date: Thu, 5 Jan 2023 14:07:33 +0900
Subject: [PATCH] 5.1.27 make expr result positive

---
 _data/rules.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/_data/rules.yml b/_data/rules.yml
index 32f8eb1..1e2dba6 100644
--- a/_data/rules.yml
+++ b/_data/rules.yml
@@ -1755,7 +1755,7 @@ groups:
                 for: 1m
               - name: Kubernetes CronJob too long
                 description: CronJob {{ $labels.namespace }}/{{ $labels.cronjob }} is taking more than 1h to complete.
-                query: 'time() - kube_cronjob_next_schedule_time > 3600'
+                query: 'kube_cronjob_next_schedule_time - time() > 3600'
                 severity: warning
                 comments: |
                   Threshold should be customized for each cronjob name.