Set containment alert recovery action group to 'No longer contained' (#87182)

Author: Aaron Caldwell

x-pack/plugins/stack_alerts/server/alert_types/geo_containment/alert_type.ts

@@ -160,6 +160,12 @@ export function getAlertType(logger: Logger): GeoContainmentAlertType {
     id: GEO_CONTAINMENT_ID,
     name: alertTypeName,
     actionGroups: [{ id: ActionGroupId, name: actionGroupName }],
+    recoveryActionGroup: {
+      id: 'notGeoContained',
+      name: i18n.translate('xpack.stackAlerts.geoContainment.notGeoContained', {
+        defaultMessage: 'No longer contained',
+      }),
+    },
     defaultActionGroupId: ActionGroupId,
     executor: getGeoContainmentExecutor(logger),
     producer: STACK_ALERTS_FEATURE_ID,

x-pack/plugins/stack_alerts/server/alert_types/geo_containment/tests/alert_type.test.ts

@@ -18,6 +18,10 @@ describe('alertType', () => {
     expect(alertType.actionGroups).toEqual([
       { id: 'Tracked entity contained', name: 'Tracking containment met' },
     ]);
+    expect(alertType.recoveryActionGroup).toEqual({
+      id: 'notGeoContained',
+      name: 'No longer contained',
+    });
 
     expect(alertType.actionVariables).toMatchSnapshot();
   });