Skip to content

Commit c54736f

Browse files
committed
Whitelist /system/probes/start like /system/probes/health
Mirrors Granite/dispatcher-k8s-base#644: the runtime dispatcher_vhost.conf now also bypasses Basic Auth / dispatcher filters on /system/probes/start (K8s startup probe), the same way it already does for /system/probes/health. This keeps the illustrative copy shipped in the dispatcher.cloud archetype variant in sync. (dispatcher.ams has no /system/probes/* blocks, so it's unaffected.) JIRA: https://jira.corp.adobe.com/browse/SKYOPS-152446
1 parent 0ff73b1 commit c54736f

1 file changed

Lines changed: 20 additions & 4 deletions

File tree

src/main/archetype/dispatcher.cloud/src/conf.d/dispatcher_vhost.conf

Lines changed: 20 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -116,15 +116,23 @@ Alias "/system/probes/start" probes/startup-status.json
116116
ProxyPass http://${AEM_HOST}:${AEM_PORT}/system/probes/health
117117
RewriteEngine Off
118118
Require all granted
119-
Satisfy any
119+
Satisfy any
120120
</Location>
121121

122122
# Allow ingressroute checks through on /system/probes/health (regardless of dispatcher filters)
123123
<Location "/system/probes/health">
124124
ProxyPass http://${AEM_HOST}:${AEM_PORT}/system/probes/health
125125
RewriteEngine Off
126126
Require all granted
127-
Satisfy any
127+
Satisfy any
128+
</Location>
129+
130+
# Allow ingressroute checks through on /system/probes/start (regardless of dispatcher filters)
131+
<Location "/system/probes/start">
132+
ProxyPass http://${AEM_HOST}:${AEM_PORT}/system/probes/start
133+
RewriteEngine Off
134+
Require all granted
135+
Satisfy any
128136
</Location>
129137
</IfFile>
130138
# managed redirect maps configured
@@ -136,15 +144,23 @@ Alias "/system/probes/start" probes/startup-status.json
136144
ProxyPass http://${AEM_HOST}:${AEM_PORT}/system/probes/health
137145
RewriteEngine Off
138146
Require all granted
139-
Satisfy any
147+
Satisfy any
140148
</Location>
141149

142150
# Allow ingressroute checks through on /system/probes/health (regardless of dispatcher filters)
143151
<Location "/system/probes/health">
144152
ProxyPass http://${AEM_HOST}:${AEM_PORT}/system/probes/health
145153
RewriteEngine Off
146154
Require all granted
147-
Satisfy any
155+
Satisfy any
156+
</Location>
157+
158+
# Allow ingressroute checks through on /system/probes/start (regardless of dispatcher filters)
159+
<Location "/system/probes/start">
160+
ProxyPass http://${AEM_HOST}:${AEM_PORT}/system/probes/start
161+
RewriteEngine Off
162+
Require all granted
163+
Satisfy any
148164
</Location>
149165
</IfFile>
150166
# else forcing "403 Forbidden" for Health probes

0 commit comments

Comments
 (0)