This the multi-page printable view of this section. Click here to print.

Return to the regular view of this page.

Kubernetes API server

Metrics, Dashboards, Alerts and more for Kubernetes API server Integration in Sysdig Monitor.
    Kubernetes API server

    This integration is disabled by default. Please contact Sysdig Support to enable it in your account.

    This integration is out-of-the-box, so it doesn’t require any exporter.

    This integration has 41 metrics.

    List of Alerts

    AlertDescriptionFormat
    [Kubernetes API Server] Deprecated APIsAPI-Server Deprecated APIsPrometheus
    [Kubernetes API Server] Certificate ExpiryAPI-Server Certificate ExpiryPrometheus
    [Kubernetes API Server] Admission Controller High LatencyAPI-Server Admission Controller High LatencyPrometheus
    [Kubernetes API Server] Webhook Admission Controller High LatencyAPI-Server Webhook Admission Controller High LatencyPrometheus
    [Kubernetes API Server] High 4xx RequestError RateAPIS-Server High 4xx Request Error RatePrometheus
    [Kubernetes API Server] High 5xx RequestError RateAPIS-Server High 5xx Request Error RatePrometheus
    [Kubernetes API Server] High Request LatencyAPIS-Server High Request LatencyPrometheus

    List of Dashboards

    Kubernetes API Server

    The dashboard provides information on the Kubernetes API Server. Kubernetes API Server

    List of Metrics

    Metric name
    apiserver_admission_controller_admission_duration_seconds_count
    apiserver_admission_controller_admission_duration_seconds_sum
    apiserver_admission_webhook_admission_duration_seconds_count
    apiserver_admission_webhook_admission_duration_seconds_sum
    apiserver_client_certificate_expiration_seconds_bucket
    apiserver_client_certificate_expiration_seconds_count
    apiserver_request_duration_seconds_count
    apiserver_request_duration_seconds_sum
    apiserver_request_total
    apiserver_requested_deprecated_apis
    apiserver_response_sizes_count
    apiserver_response_sizes_sum
    go_build_info
    go_gc_duration_seconds
    go_gc_duration_seconds_count
    go_gc_duration_seconds_sum
    go_goroutines
    go_memstats_buck_hash_sys_bytes
    go_memstats_gc_sys_bytes
    go_memstats_heap_alloc_bytes
    go_memstats_heap_idle_bytes
    go_memstats_heap_inuse_bytes
    go_memstats_heap_released_bytes
    go_memstats_heap_sys_bytes
    go_memstats_lookups_total
    go_memstats_mallocs_total
    go_memstats_mcache_inuse_bytes
    go_memstats_mcache_sys_bytes
    go_memstats_mspan_inuse_bytes
    go_memstats_mspan_sys_bytes
    go_memstats_next_gc_bytes
    go_memstats_stack_inuse_bytes
    go_memstats_stack_sys_bytes
    go_memstats_sys_bytes
    go_threads
    process_cpu_seconds_total
    process_max_fds
    process_open_fds
    process_resident_memory_bytes
    workqueue_adds_total
    workqueue_depth

    Preparing the Integration

    No preparations are required for this integration.

    Installing

    The installation of an exporter is not required for this integration.

    Agent Configuration

    This is the default agent job for this integration:

    - job_name: kubernetes-apiservers-default
      bearer_token_file: /var/run/secrets/kubernetes.io/serviceaccount/token
      scheme: https
      tls_config:
        ca_file: /var/run/secrets/kubernetes.io/serviceaccount/ca.crt
        insecure_skip_verify: true
      kubernetes_sd_configs:
      - role: pod
      relabel_configs:
      - action: keep
        source_labels: [__meta_kubernetes_pod_host_ip]
        regex: __HOSTIPS__
      - action: keep
        regex: kube-system;kube-apiserver
        source_labels:
        - __meta_kubernetes_namespace
        - __meta_kubernetes_pod_container_name
      - source_labels:
        - __address__
        action: replace
        target_label: __address__
        regex: (.+)(:\d.+)
        replacement: $1:443
      - action: replace
        source_labels: [__meta_kubernetes_pod_uid]
        target_label: sysdig_k8s_pod_uid
      - action: replace
        source_labels: [__meta_kubernetes_pod_container_name]
        target_label: sysdig_k8s_pod_container_name
      metric_relabel_configs:
      - action: replace
        source_labels: 
        - __name__
        - resource
        target_label: k8sresource
        regex: (apiserver_requested_deprecated_apis);(.+)
        replacement: $2
      - action: labeldrop
        regex: "^(resource|resourcescope|subresource)$"
      - source_labels: [__name__]
        regex: (apiserver_admission_controller_admission_duration_seconds_count|apiserver_admission_controller_admission_duration_seconds_sum|apiserver_admission_webhook_admission_duration_seconds_count|apiserver_admission_webhook_admission_duration_seconds_sum|apiserver_client_certificate_expiration_seconds_bucket|apiserver_client_certificate_expiration_seconds_count|apiserver_request_duration_seconds_count|apiserver_request_duration_seconds_sum|apiserver_request_total|apiserver_requested_deprecated_apis|apiserver_response_sizes_count|apiserver_response_sizes_sum|go_build_info|go_gc_duration_seconds|go_gc_duration_seconds_count|go_gc_duration_seconds_sum|go_goroutines|go_memstats_buck_hash_sys_bytes|go_memstats_gc_sys_bytes|go_memstats_heap_alloc_bytes|go_memstats_heap_idle_bytes|go_memstats_heap_inuse_bytes|go_memstats_heap_released_bytes|go_memstats_heap_sys_bytes|go_memstats_lookups_total|go_memstats_mallocs_total|go_memstats_mcache_inuse_bytes|go_memstats_mcache_sys_bytes|go_memstats_mspan_inuse_bytes|go_memstats_mspan_sys_bytes|go_memstats_next_gc_bytes|go_memstats_stack_inuse_bytes|go_memstats_stack_sys_bytes|go_memstats_sys_bytes|go_threads|process_cpu_seconds_total|process_max_fds|process_open_fds|process_resident_memory_bytes|workqueue_adds_total|workqueue_depth)
        action: keep