sample
turbot/flowpipe-samples/remediate-pagerduty-alert
PipelinesTriggers
0
Variables
GitHub

Remediate PagerDuty Alert

Take remediation actions based on the incident event type.

If run with flowpipe server, this mod will receive a PagerDuty v3 webhook event when an incident is triggered, annotated, and acknowledged.

Installation

Download and install Flowpipe (https://flowpipe.io/downloads). Or use Brew:

brew tap turbot/tap
brew install flowpipe

Clone:

git clone https://github.com/turbot/flowpipe-samples.git
cd incident_response/remediate_pagerduty_alert

Install mod dependencies:

flowpipe mod install

Connections

By default, the following environment variables will be used for authentication:

  • PAGERDUTY_TOKEN

You can also create connection resources in configuration files:

vi ~/.flowpipe/config/pagerduty.fpc
connection "pagerduty" "default" {
api_key = "u+_szhL..."
}

For more information on connections in Flowpipe, please see Managing Connections.

Usage

Run the pipeline to take action for PagerDuty incident acknowledged:

flowpipe pipeline run pagerduty_incident_acknowledged --arg incident_id=PT4KHLK

To run whenever an incident is triggered, annotated, and acknowledged, start the Flowpipe server:

flowpipe server

Once started, Flowpipe will run the pipeline automatically whenever a webhook event is received.

Configuration

To run the pipeline automatically whenever a webhook event is received, you can create a PagerDuty webhook subscription.

To configure the webhook subscription in PagerDuty:

  1. Get the trigger details:
    flowpipe trigger show http.pagerduty_webhook_incident_events
  2. Copy the Url, e.g., /hook/remediate_pagerduty_alert.trigger.http.pagerduty_webhook_incident_events/92ffeda03426754f2c79dfaa
  3. Use a tool like ngrok with a custom domain to expose your localhost server to the internet:
    ngrok http 7103 --domain=yellow-neutral-lab.ngrok-free.app
  4. Form the full webhook URL with the public endpoint from ngrok and the trigger URL using the format https://{ngrok_domain}.ngrok-free.app/api/v0/{hook_url}, e.g., https://yellow-neutral-lab.ngrok-free.app/api/v0/hook/remediate_pagerduty_alert.trigger.http.pagerduty_webhook_incident_events/92ffeda03426754f2c79dfaa
  5. Create the webhook subscription in PagerDuty with the following configurations:
    • Webhook URL: <URL from above>
    • Scope Type: Account
    • Description: Flowpipe webhook trigger
    • Event Subscription:
      • incident.acknowledged
      • incident.triggered
      • incident.annotated