Uptime Monitoring with Blackbox Exporter

Overview

UDS Core includes Blackbox Exporter for HTTP/HTTPS probing of endpoints to monitor uptime and availability. Uptime checks can be configured through the UDS Package CR, and Prometheus Probes resources are automatically created based on your configuration.

Uptime Monitoring

To enable uptime monitoring for an exposed service, configure the uptime.checks section within your Package CR’s expose entries.

Note

Uptime checks for Authservice-protected applications will probe the external interface but not the application itself - the probe will receive a successful response from the Authservice redirect rather than reaching the actual application. Support for probing through Authservice is planned for a future release.

Basic Example

apiVersion: uds.dev/v1alpha1
kind: Package
metadata:
  name: my-app
  namespace: my-app
spec:
  network:
    expose:
      # monitors: https://myapp.uds.dev/
      - service: my-app
        host: myapp
        gateway: tenant
        port: 8080
        uptime:
          checks:
            paths:
              - /

This creates a Prometheus Probe that monitors https://myapp.uds.dev/ using the default http_2xx module, which issues HTTP GET requests at a regular interval and checks for a successful (2xx) response.

Custom Paths

Monitor specific health endpoints:

spec:
  network:
    expose:
      # monitors: https://myapp.uds.dev/health and https://myapp.uds.dev/ready
      - service: my-app
        host: myapp
        gateway: tenant
        port: 8080
        uptime:
          checks:
            paths:
              - /health
              - /ready

Multiple Endpoints

Monitor multiple services in a single package:

spec:
  network:
    expose:
      # monitors: https://app.uds.dev/healthz, https://api.uds.dev/health, https://api.uds.dev/ready, https://app.admin.uds.dev/
      - service: frontend
        host: app
        gateway: tenant
        port: 3000
        uptime:
          checks:
            paths:
              - /healthz
      - service: api
        host: api
        gateway: tenant
        port: 8080
        uptime:
          checks:
            paths:
              - /health
              - /ready
      - service: admin
        host: app
        gateway: admin
        port: 8080
        uptime:
          checks:
            paths:
              - /

Multiple Expose Entries for Same FQDN

Uptime monitoring is opt-in by defining uptime.checks.paths. If you have multiple expose entries for the same FQDN, only one can have uptime checks configured:

spec:
  network:
    expose:
      - service: my-app
        host: myapp
        gateway: tenant
        port: 8080
        uptime:
          checks:
            paths:
              - /
      - service: my-app
        host: myapp
        gateway: tenant
        port: 8443
        description: secondary-port
        # no uptime configuration (not monitored)

Metrics

The Blackbox Exporter provides some of the following key metrics (not exhaustive) that can be used for alerting and dashboarding:

Metric	Description
probe_success	Whether the probe succeeded (1) or failed (0)
probe_duration_seconds	Total probe duration
probe_http_status_code	HTTP response status code
probe_ssl_earliest_cert_expiry	SSL certificate expiration timestamp

Example Queries

# Check all probes and their success status
probe_success

# Check if a specific endpoint is up
probe_success{instance="https://myapp.uds.dev/health"}

Grafana Dashboard

UDS Core includes an uptime monitoring dashboard that displays:

• Uptime status timeline for all monitored endpoints
• Percentage uptime over the selected time period
• TLS certificate expiration dates

Access it via Grafana under UDS / Monitoring / Uptime.