Anonymous api endpoint for a load balancer healthcheck?

[d-averkiev]

Hello.
I'm currently running goiardi as docker containers in AWS ECS. Btw, it working well as multiple instances behind the balancer (postgres and s3 storage enabled), so it works as a cluster now.
When I'm setting use_auth=true every anonymous http request returns HTTP 401. Which is not good because of AWS load balancer using http requests to evaluate container health.
Do goiardi supports any endpoint which returns HTTP 200 for anonymous requests when authentication is enabled.
Thank you.

[ctdk]

That's wonderful to hear about it working well with multiple instances. Are you using the postgres search as well, or the in-memory one? (If the former, remember about vacuuming periodically.)

There are a few endpoints that don't require authentication, although I see that an actual /alive type endpoint would be valuable for this. For the moment, try /principals/admin (or /principals/<any user or client> - there's a bit of overhead because it requires a lookup of the user, but the others either are POST only or have much more overhead. I'll add an actual basic alive type endpoint, though. Thanks for bringing that to my attention.

[d-averkiev]

With the /principals/... endpoint load balancer's healthcheck works well. No more "auth errors" in the log. Thank you a lot.

[ctdk]

Wonderful. I'll close this out for now, then, and add a less intensive health check later on. Thanks again.