Health Check
Adds an HTTP health endpoint to the Bindplane collector that external systems can probe to check whether the agent is running. It is a collector-level capability, not part of the telemetry pipeline, so it neither receives nor processes telemetry. The endpoint is commonly wired to Kubernetes liveness and readiness probes, load-balancer health checks, or any external monitor that needs a simple up/down signal. The collector serves the configured path (default /) on the configured address and port (default 0.0.0.0:13133), returning a healthy or unhealthy response.
Configuration
Basic Configuration

Endpoint
Listen Address
String
Yes
0.0.0.0
Hostname or IP address where the agent publishes the health check status. 0.0.0.0 listens on all interfaces.
Listen Port
Integer
Yes
13133
HTTP port on which to publish the health check status.
Path
String
Yes
/
The path the health check server serves. Probes request this path on the listen address and port.
Advanced — Response Bodies
Healthy Response Body
String
No
(empty)
A static body that overrides the default response returned when the agent is healthy.
Unhealthy Response Body
String
No
(empty)
A static body that overrides the default response returned when the agent is unhealthy.
Advanced — TLS
Enable TLS
Boolean
No
false
Whether to serve the health endpoint over TLS.
Certificate File
String
No
(empty)
A TLS certificate used for authentication. Applies when Enable TLS is on.
Private Key File
String
No
(empty)
A TLS private key used for authentication. Applies when Enable TLS is on.
Mutual TLS
Boolean
No
false
Whether to require mutual TLS authentication. Applies when Enable TLS is on.
Mutual TLS Certificate Authority File
String
No
(empty)
Certificate authority used to validate client TLS certificates. Applies when Enable TLS and Mutual TLS are both on.
Examples
TLS-protected health endpoint on a custom path
This example exercises the advanced parameters by serving the health endpoint over TLS on a dedicated path. It sets Enable TLS with a Certificate File and Private Key File, and serves the check at /healthz so a load balancer probing https://<host>:13133/healthz gets an authenticated response.
Configuration Tips
In Kubernetes, point liveness and readiness probes at the configured Path and Listen Port, and keep Listen Address at
0.0.0.0so the probe reaches the container.Use Healthy Response Body and Unhealthy Response Body when a load balancer or monitor expects a specific marker string rather than the default response.
Enable Mutual TLS only when the probing client can present a client certificate; otherwise probes will fail TLS handshake.
Troubleshooting
Probes report the collector as down
Symptoms: a liveness/readiness probe or load-balancer health check fails even though the collector is running.
Solutions:
Confirm the probe targets the configured Path, Listen Port, and scheme (
httpvshttpswhen TLS is enabled).Verify Listen Address is reachable from the prober.
0.0.0.0listens on all interfaces; a specific address may not be routable from outside the host or pod.
TLS handshake errors
Symptoms: probes fail with TLS or certificate errors after enabling TLS.
Solutions:
Check that Certificate File and Private Key File paths exist and are readable by the collector.
When Mutual TLS is on, ensure the client presents a certificate signed by the configured Mutual TLS Certificate Authority File.
Standalone Extension
Related Resources
Last updated
Was this helpful?