Enterprise Edition

Enterprise Edition

KubeLB Metrics Reference

This document describes all Prometheus metrics exposed by KubeLB components.

Note: This documentation is auto-generated. Do not edit this file manually.

Table of Contents


Manager Metrics

Metrics exposed by the KubeLB Manager component (kubelb-manager).

MetricTypeDescriptionLabels
kubelb_manager_envoy_duplicate_listeners_dropped_totalCounterTotal number of listeners dropped from the Envoy snapshot due to duplicate bind addressessnapshot_name
kubelb_manager_envoy_proxiesGaugeCurrent number of Envoy proxy deploymentsnamespace, topology
kubelb_manager_envoycp_clustersGaugeCurrent number of clusters in the Envoy snapshotsnapshot_name
kubelb_manager_envoycp_endpointsGaugeCurrent number of endpoints in the Envoy snapshotsnapshot_name
kubelb_manager_envoycp_listenersGaugeCurrent number of listeners in the Envoy snapshotsnapshot_name
kubelb_manager_envoycp_reconcile_duration_secondsHistogramDuration of Envoy control plane reconciliations in seconds-
kubelb_manager_envoycp_reconcile_totalCounterTotal number of Envoy control plane reconciliation attemptsresult
kubelb_manager_envoycp_snapshot_updates_totalCounterTotal number of Envoy snapshot updatessnapshot_name
kubelb_manager_insight_infoGaugeOne series per open or acknowledged insight, identifying the affected objectcheck_id, severity, tenant, namespace, resource_kind, resource_name
kubelb_manager_insightsGaugeCurrent number of open or acknowledged insightstenant, severity, category, check_id
kubelb_manager_insights_checks_failed_totalCounterTotal number of insight checks that failed to evaluatecheck_id
kubelb_manager_insights_checks_skipped_totalCounterTotal number of insight checks skipped, by reasoncheck_id, reason
kubelb_manager_insights_sweep_duration_secondsHistogramDuration of a full insights sweep in seconds-
kubelb_manager_loadbalancer_reconcile_duration_secondsHistogramDuration of LoadBalancer reconciliations in secondsnamespace
kubelb_manager_loadbalancer_reconcile_totalCounterTotal number of LoadBalancer reconciliation attemptsnamespace, result
kubelb_manager_loadbalancersGaugeCurrent number of LoadBalancer resourcesnamespace, tenant, topology
kubelb_manager_mtls_certificate_reissue_totalCounterTotal number of mTLS certificate reissues by kind (root, intermediate, management-client, tenant-server)tenant, kind
kubelb_manager_mtls_certificate_rotation_failures_totalCounterTotal number of mTLS certificate rotation reconcile failures by kindtenant, kind
kubelb_manager_mtls_tenantsGaugeCurrent number of tenants with mTLS PKI provisioned-
kubelb_manager_port_allocator_allocated_portsGaugeCurrent number of allocated ports in the port allocator-
kubelb_manager_port_allocator_collisions_healed_totalCounterTotal number of duplicate port assignments detected and cleared by the port allocator on load-
kubelb_manager_port_allocator_endpointsGaugeCurrent number of endpoints tracked by the port allocator-
kubelb_manager_posture_scoreGaugeInsights posture score between 0 and 1, by tenant and categorytenant, category
kubelb_manager_route_reconcile_duration_secondsHistogramDuration of Route reconciliations in secondsnamespace
kubelb_manager_route_reconcile_totalCounterTotal number of Route reconciliation attemptsnamespace, route_type, result
kubelb_manager_routesGaugeCurrent number of Route resourcesnamespace, tenant, route_type
kubelb_manager_sync_secret_reconcile_duration_secondsHistogramDuration of SyncSecret reconciliations in secondsnamespace
kubelb_manager_sync_secret_reconcile_totalCounterTotal number of SyncSecret reconciliation attemptsnamespace, result
kubelb_manager_tenant_reconcile_duration_secondsHistogramDuration of Tenant reconciliations in seconds-
kubelb_manager_tenant_reconcile_totalCounterTotal number of Tenant reconciliation attemptsresult
kubelb_manager_tenantsGaugeCurrent number of Tenant resources-
kubelb_manager_waf_filter_failuresGaugeCurrent number of routes where the WAF filter could not be applied, by failure modenamespace, failure_mode
kubelb_manager_waf_policiesGaugeCurrent number of WAFPolicy resources by validity statusstatus
kubelb_manager_waf_policy_reconcile_duration_secondsHistogramDuration of WAFPolicy reconciliations in seconds-
kubelb_manager_waf_policy_reconcile_totalCounterTotal number of WAFPolicy reconciliation attemptsresult
kubelb_manager_waf_routes_blockedGaugeNumber of routes blocked due to WAF fail-closed modenamespace
kubelb_manager_waf_routes_protectedGaugeNumber of routes with WAF protection successfully appliednamespace

CCM Metrics

Metrics exposed by the KubeLB Cloud Controller Manager component (kubelb-ccm).

MetricTypeDescriptionLabels
kubelb_ccm_backendtrafficpolicy_reconcile_duration_secondsHistogramDuration of BackendTrafficPolicy reconciliations in secondsnamespace
kubelb_ccm_backendtrafficpolicy_reconcile_totalCounterTotal number of BackendTrafficPolicy reconciliation attemptsnamespace, result
kubelb_ccm_clienttrafficpolicy_reconcile_duration_secondsHistogramDuration of ClientTrafficPolicy reconciliations in secondsnamespace
kubelb_ccm_clienttrafficpolicy_reconcile_totalCounterTotal number of ClientTrafficPolicy reconciliation attemptsnamespace, result
kubelb_ccm_gateway_reconcile_duration_secondsHistogramDuration of Gateway reconciliations in secondsnamespace
kubelb_ccm_gateway_reconcile_totalCounterTotal number of Gateway reconciliation attemptsnamespace, result
kubelb_ccm_grpcroute_reconcile_duration_secondsHistogramDuration of GRPCRoute reconciliations in secondsnamespace
kubelb_ccm_grpcroute_reconcile_totalCounterTotal number of GRPCRoute reconciliation attemptsnamespace, result
kubelb_ccm_httproute_reconcile_duration_secondsHistogramDuration of HTTPRoute reconciliations in secondsnamespace
kubelb_ccm_httproute_reconcile_totalCounterTotal number of HTTPRoute reconciliation attemptsnamespace, result
kubelb_ccm_ingress_reconcile_duration_secondsHistogramDuration of Ingress reconciliations in secondsnamespace
kubelb_ccm_ingress_reconcile_totalCounterTotal number of Ingress reconciliation attemptsnamespace, result
kubelb_ccm_kubelb_cluster_connectedGaugeWhether the CCM is connected to the KubeLB cluster (1=connected, 0=disconnected)-
kubelb_ccm_kubelb_cluster_latency_secondsHistogramLatency of operations to the KubeLB cluster in secondsoperation
kubelb_ccm_kubelb_cluster_operations_totalCounterTotal number of operations performed on the KubeLB clusteroperation, result
kubelb_ccm_managed_backendtrafficpoliciesGaugeCurrent number of BackendTrafficPolicies managed by CCMnamespace
kubelb_ccm_managed_clienttrafficpoliciesGaugeCurrent number of ClientTrafficPolicies managed by CCMnamespace
kubelb_ccm_managed_gatewaysGaugeCurrent number of Gateways managed by CCMnamespace
kubelb_ccm_managed_grpcroutesGaugeCurrent number of GRPCRoutes managed by CCMnamespace
kubelb_ccm_managed_httproutesGaugeCurrent number of HTTPRoutes managed by CCMnamespace
kubelb_ccm_managed_ingressesGaugeCurrent number of Ingresses managed by CCMnamespace
kubelb_ccm_managed_servicesGaugeCurrent number of LoadBalancer services managed by CCMnamespace
kubelb_ccm_managed_tcproutesGaugeCurrent number of TCPRoutes managed by CCMnamespace
kubelb_ccm_managed_tenantwafpoliciesGaugeCurrent number of TenantWAFPolicies managed by CCMnamespace
kubelb_ccm_managed_tlsroutesGaugeCurrent number of TLSRoutes managed by CCMnamespace
kubelb_ccm_managed_udproutesGaugeCurrent number of UDPRoutes managed by CCMnamespace
kubelb_ccm_node_reconcile_duration_secondsHistogramDuration of Node reconciliations in seconds-
kubelb_ccm_node_reconcile_totalCounterTotal number of Node reconciliation attemptsresult
kubelb_ccm_nodesGaugeCurrent number of nodes in the cluster-
kubelb_ccm_service_reconcile_duration_secondsHistogramDuration of Service reconciliations in secondsnamespace
kubelb_ccm_service_reconcile_totalCounterTotal number of Service reconciliation attemptsnamespace, result
kubelb_ccm_sync_secret_reconcile_duration_secondsHistogramDuration of SyncSecret reconciliations in secondsnamespace
kubelb_ccm_sync_secret_reconcile_totalCounterTotal number of SyncSecret reconciliation attemptsnamespace, result
kubelb_ccm_tcproute_reconcile_duration_secondsHistogramDuration of TCPRoute reconciliations in secondsnamespace
kubelb_ccm_tcproute_reconcile_totalCounterTotal number of TCPRoute reconciliation attemptsnamespace, result
kubelb_ccm_tenant_proxy_config_reloads_totalCounterTotal number of tenant proxy ConfigMap reconcile updates-
kubelb_ccm_tenant_proxy_daemonset_readyGaugeWhether the tenant proxy DaemonSet has all desired pods ready (1=ready, 0=not ready)-
kubelb_ccm_tenant_proxy_server_cert_verification_failures_totalCounterTotal number of tenant proxy server certificate verification failures during SyncSecret installation-
kubelb_ccm_tenant_proxy_xds_backend_countGaugeNumber of tenant proxy backends rendered by the last successful xDS writer run-
kubelb_ccm_tenant_proxy_xds_config_size_bytesGaugeSize in bytes of tenant proxy dynamic xDS files written by the xDS writerfile
kubelb_ccm_tenant_proxy_xds_last_write_timestamp_secondsGaugeUnix timestamp of the last successful tenant proxy xDS writer run-
kubelb_ccm_tenant_proxy_xds_writes_totalCounterTotal number of tenant proxy xDS writer attemptsresult
kubelb_ccm_tenantwafpolicy_reconcile_duration_secondsHistogramDuration of TenantWAFPolicy reconciliations in secondsnamespace
kubelb_ccm_tenantwafpolicy_reconcile_totalCounterTotal number of TenantWAFPolicy reconciliation attemptsnamespace, result
kubelb_ccm_tlsroute_reconcile_duration_secondsHistogramDuration of TLSRoute reconciliations in secondsnamespace
kubelb_ccm_tlsroute_reconcile_totalCounterTotal number of TLSRoute reconciliation attemptsnamespace, result
kubelb_ccm_udproute_reconcile_duration_secondsHistogramDuration of UDPRoute reconciliations in secondsnamespace
kubelb_ccm_udproute_reconcile_totalCounterTotal number of UDPRoute reconciliation attemptsnamespace, result

EnvoyCP Metrics

Metrics exposed by the KubeLB Envoy Control Plane component.

MetricTypeDescriptionLabels
kubelb_envoy_control_plane_cache_clears_totalCounterTotal number of cache clearssnapshot_name
kubelb_envoy_control_plane_cache_hits_totalCounterTotal number of cache hits for snapshot lookupssnapshot_name
kubelb_envoy_control_plane_cache_misses_totalCounterTotal number of cache misses for snapshot lookupssnapshot_name
kubelb_envoy_control_plane_clustersGaugeCurrent number of clusters in the Envoy snapshotsnapshot_name
kubelb_envoy_control_plane_endpointsGaugeCurrent number of endpoints in the Envoy snapshotsnapshot_name
kubelb_envoy_control_plane_envoy_proxiesGaugeCurrent number of Envoy proxy deploymentsnamespace, topology
kubelb_envoy_control_plane_envoy_proxy_create_totalCounterTotal number of Envoy proxy deployments creatednamespace
kubelb_envoy_control_plane_envoy_proxy_delete_totalCounterTotal number of Envoy proxy deployments deletednamespace
kubelb_envoy_control_plane_grpc_connectionsGaugeCurrent number of active gRPC connections to the xDS server-
kubelb_envoy_control_plane_grpc_requests_totalCounterTotal number of gRPC xDS requeststype_url
kubelb_envoy_control_plane_grpc_responses_totalCounterTotal number of gRPC xDS responsestype_url
kubelb_envoy_control_plane_listenersGaugeCurrent number of listeners in the Envoy snapshotsnapshot_name
kubelb_envoy_control_plane_routesGaugeCurrent number of routes in the Envoy snapshotsnapshot_name
kubelb_envoy_control_plane_secretsGaugeCurrent number of secrets in the Envoy snapshotsnapshot_name
kubelb_envoy_control_plane_snapshot_generation_duration_secondsHistogramDuration of Envoy snapshot generation in secondssnapshot_name
kubelb_envoy_control_plane_snapshot_updates_totalCounterTotal number of Envoy snapshot updatessnapshot_name
kubelb_envoy_control_plane_snapshotsGaugeCurrent number of active Envoy snapshots-
kubelb_envoy_control_plane_xds_nacks_totalCounterTotal number of xDS config rejections (NACKs) received from Envoytype_url

Label Reference

Common labels used across KubeLB metrics:

LabelDescription
namespaceKubernetes namespace of the resource
tenantKubeLB tenant identifier
resultReconciliation result: success, error, or skipped
route_typeType of route: ingress, gateway, httproute, grpcroute, tcproute, tlsroute, udproute
topologyEnvoy proxy topology: shared, dedicated, global
operationOperation type for KubeLB cluster operations
snapshot_nameEnvoy xDS snapshot identifier
type_urlEnvoy xDS resource type URL