HTTP Check

The HTTP Check integration requires CXDOT Collector 1.4.0 or greater. Use the HTTP Check integration with the Chronosphere XDOT Collector to collect availability, response time, and certificate expiry metrics from the HTTP endpoints your services depend on. The HTTP Check integration supports HTTP and HTTPS URLs.

​

Supported telemetry types

The HTTP Check integration supports these telemetry types:

​

Prerequisites

The HTTP Check integration has the following prerequisites:

• Make each URL you want to monitor reachable from the Collector.

​

Configure

To configure the HTTP Check integration, follow these steps:

1. For URLs served by pods or Services in your Kubernetes cluster, add autodiscovery annotations that provide the URL to monitor. For more information, see autodiscovery.
2. Optional: Configure static targets to monitor URLs that autodiscovery doesn’t cover, such as an API outside your Kubernetes cluster. For example, add the following to the values.yaml for your Helm chart:
   config:
     integrations:
       http_check:
         endpoints:
           - endpoint: https://api.example.com/healthz
             proxy_url: http://proxy.example.com:8080
           - endpoint: http://status.example.com/ready
             method: HEAD
   
   When you configure static targets, this integration instance collects from exactly those targets instead of discovered targets.
3. Optional: Trust a private certificate authority for static HTTPS targets. The cluster Collector monitors static targets, so mount the authority’s certificate with the chart’s clusterCollector.extraVolumes and clusterCollector.extraVolumeMounts values, then set tls.ca_file to the mounted path. For more information, see architecture. For example, add the following to the values.yaml for your Helm chart:
   config:
     integrations:
       http_check:
         endpoints:
           - endpoint: https://api.internal.example.com/healthz
         tls:
           ca_file: /etc/ssl/certs/internal-ca.pem
   
   The tls settings apply to every static target.
4. Optional: Configure a second integration instance to collect from both discovered and static targets. For example, add the following to the values.yaml for your Helm chart:
   config:
     integrations:
       http_check: {}
       http_check/external:
         endpoints:
           - endpoint: https://api.example.com/healthz
   
   The http_check/external key defines a named instance for the static targets. The bare http_check key continues to use autodiscovery. Keep it, because after you configure any instance of the integration, only the instances you list run.

​

Validate

To validate the HTTP Check integration, follow these steps:

1. In the Live Telemetry Analyzer, filter for cxdot.integration.name=http_check. Confirm that the HTTP Check metric names appear.
2. In Metrics Explorer, run the following query:
   {"cxdot.integration.target.health", "cxdot.integration.name"="http_check"}
   
   Confirm that the query returns one time series for each URL you configured, with the URL in the cxdot.integration.target attribute, and that each reachable URL reports 1.

For more information about diagnosing a failing integration, see Troubleshooting.

​

Configuration reference

Configure one HTTP Check integration instance with the following settings. In Helm values, place these settings under config.integrations.http_check. In a Collector configuration file, place them under cxdot.integrations.http_check.

​

Optional settings

• enabled Type: boolean. Optional. Default: true. Whether to enable this HTTP Check integration instance. If true, the Collector monitors the configured URLs. If false, it doesn’t run this integration instance.
• endpoints Type: array of object. Optional. URLs to monitor. The Collector requests each entry on its own schedule and reports it as a separate target. A nonempty list disables automatic discovery for this integration instance, and the Collector requests only the listed URLs. If this list is empty and no annotated pods or Services exist, the integration requests no URLs.
• endpoints[].endpoint Type: string. Required. URL to request, including the http or https scheme. For example, https://api.example.com/healthz. An HTTPS URL also reports the number of seconds until its server certificate expires.
• endpoints[].method Type: string. Optional. Default: GET. HTTP method for the request.
• endpoints[].headers Type: object. Optional. Additional request headers as name-value pairs. Set the Host header to request a virtual host by its network address.
• endpoints[].proxy_url Type: string. Optional. Proxy URL for this endpoint, for example http://proxy.example.com:8080. When unset, the Collector uses the HTTP_PROXY, HTTPS_PROXY, and NO_PROXY environment variables.
• collection_interval Type: duration. Optional. Default: 15s. How often the Collector requests each URL. Every collection performs an HTTP request against the target.
• timeout Type: duration. Optional. Default: 10s. Maximum time the Collector waits for each HTTP request to complete.
• tls Type: object. Optional. TLS settings for all statically configured HTTPS endpoints. Certificate verification is enabled unless insecure_skip_verify is true. Targets found from annotations use the annotation’s TLS settings.
• tls.ca_file Type: string. Optional. Path to the CA cert. For a client this verifies the server certificate. For a server this verifies client certificates. If empty uses system root CA. (optional)
• tls.ca_pem Type: string. Optional. In memory PEM encoded cert. (optional)
• tls.cert_file Type: string. Optional. Path to the TLS cert to use for TLS required connections. (optional)
• tls.cert_pem Type: string. Optional. In memory PEM encoded TLS cert to use for TLS required connections. (optional)
• tls.cipher_suites Type: array of string. Optional. CipherSuites is a list of TLS cipher suites that the TLS transport can use. If left blank, a safe default list is used. See https://go.dev/src/crypto/tls/cipher_suites.go for a list of supported cipher suites.
• tls.curve_preferences Type: array of string. Optional. contains the elliptic curves that will be used in an ECDHE handshake, in preference order Defaults to empty list and “crypto/tls” defaults are used, internally.
• tls.include_system_ca_certs_pool Type: boolean. Optional. If true, load system CA certificates pool in addition to the certificates configured in this struct.
• tls.insecure Type: boolean. Optional. In gRPC and HTTP when set to true, this is used to disable the client transport security. See https://godoc.org/google.golang.org/grpc#WithInsecure for gRPC. Please refer to https://godoc.org/crypto/tls#Config for more information. (optional, default false)
• tls.insecure_skip_verify Type: boolean. Optional. InsecureSkipVerify will enable TLS but not verify the certificate.
• tls.key_file Type: string. Optional. Path to the TLS key to use for TLS required connections. (optional)
• tls.key_pem Type: string. Optional. In memory PEM encoded TLS key to use for TLS required connections. (optional)
• tls.max_version Type: string. Optional. MaxVersion sets the maximum TLS version that is acceptable. If not set, refer to crypto/tls for defaults. (optional)
• tls.min_version Type: string. Optional. MinVersion sets the minimum TLS version that is acceptable. If not set, TLS 1.2 will be used. (optional)
• tls.reload_interval Type: duration. Optional. ReloadInterval specifies the duration after which the certificate will be reloaded If not set, it will never be reloaded (optional)
• tls.server_name_override Type: string. Optional. ServerName requested by client for virtual hosting. This sets the ServerName in the TLSConfig. Please refer to https://godoc.org/crypto/tls#Config for more information. (optional)
• tls.tpm Type: object. Optional. Trusted platform module configuration
• tls.tpm.auth Type: string. Optional. Authorization value for the trusted platform module key.
• tls.tpm.enabled Type: boolean. Optional. Whether to use a trusted platform module for the TLS private key. If true, the Collector loads the key from the configured device or socket. If false, the Collector uses the configured key file or in-memory key.
• tls.tpm.owner_auth Type: string. Optional. Owner authorization value for the trusted platform module.
• tls.tpm.path Type: string. Optional. The path to the TPM device or Unix domain socket. For instance /dev/tpm0 or /dev/tpmrm0.