dev: leave /healthz outside the basic-auth boundary #113

Merged
admin_emi merged 1 commit from fix/dev-healthz-unauthed into dev 2026-07-26 08:28:19 +00:00

1 commit

Author SHA1 Message Date
Emi Griffith
492f64a581 dev: leave /healthz outside the basic-auth boundary
All checks were successful
PR build (required check) / changes (pull_request) Successful in 8s
secrets-guard / encrypted (pull_request) Successful in 7s
PR build (required check) / build-backend (pull_request) Has been skipped
shell-lint / shellcheck (pull_request) Successful in 9s
PR build (required check) / build-frontend (pull_request) Has been skipped
PR build (required check) / validate-observability (pull_request) Has been skipped
PR build (required check) / gate (pull_request) Successful in 1s
Centralis polls ${appUrl}/healthz to report each environment in fleet_status.
Behind basic auth that poll returns 401 and dev reads as permanently down --
a monitoring blind spot created in the name of security.

/healthz returns liveness and nothing else: no data, no version, no config.
2026-07-26 01:25:07 -07:00