1

I've created an HTTP Load Balancer (in Google Cloud Platform) but the health check returns a status of unhealthy. My conclusion is that the health check points to a resource that is protected by basic auth and thus the service returns 401 instead of 200. So my questions are:

  1. Is it possible to somehow add basic auth credentials to the health check request?
  2. Is there a workaround?
Johan
  • 37,479
  • 32
  • 149
  • 237

2 Answers2

3

Health checks in Google Cloud cannot be provided basic auth credentials to my knowledge. You are correct, in that they expect the status code to be 200 so any endpoint requiring basic auth would fail the health check.

The solution we came up with to resolve this was to have 2 endpoints. One endpoint returns useful status information that we can pull up and look into (which we want behind authorization). We then created a ping endpoint, that uses the same checks as before, only it doesn't display any status information. Just a simple pass/fail message. We leave this endpoint exposed and point the health checks there.

kyleferg
  • 53
  • 6
  • Yep, we've done that using a different hostname. Although you can't add 'basic auth' to a Health Check, you can add a 'hostname' header. So we add an additional config on our backend, answering to a different hostname, which gives us the health info needed. – Andor Nov 28 '18 at 09:45
-3

HTTP Healthcheck does not use basic auth credentials. This looks like some other issue. 1. Can you ssh into your instance successfully? 2. Does the app can actually answer path you provided as part of health check config ?

See more details in https://cloud.google.com/compute/docs/load-balancing/health-checks

amb
  • 130
  • 3