Currently when using the api_key server setting, the healthcheck endpoint / is also getting secured, which leads to k8s being unable to start pods, since it gets 403 Unauthorized when performing healthcheck and shuts down the pod as not ready after some time.
To mitigate this issue the / API path should not perform authorization checks.
Also current ck8s convention states that liveness and readiness probes should be exposed on unsecured /livez and /readyz endpoints respectively.
Please remove authorization from / and add /livez and /readyz endpoints.
This also should be supported in the official Qdrant helm chart.
Currently when using the
api_keyserver setting, the healthcheck endpoint/is also getting secured, which leads to k8s being unable to start pods, since it gets403 Unauthorizedwhen performing healthcheck and shuts down the pod as not ready after some time.To mitigate this issue the
/API path should not perform authorization checks.Also current ck8s convention states that liveness and readiness probes should be exposed on unsecured
/livezand/readyzendpoints respectively.Please remove authorization from
/and add/livezand/readyzendpoints.This also should be supported in the official Qdrant helm chart.