Google Cloud Load Balancer (GCLB), requires an HTTP health check endpoint to be available in the container (https://cloud.google.com/kubernetes-engine/docs/concepts/ingress#health_checks).
We currently have a workaround for Elasticsearch by enabling anonymous access with the monitoring_user role.
It might be better to create a custom restricted role in roles.yml to be used by the anonymous user for health checking purposes.
sebgl
commented
4 years ago
Google Cloud Load Balancer (GCLB), requires an HTTP health check endpoint to be available in the container (https://cloud.google.com/kubernetes-engine/docs/concepts/ingress#health_checks). We currently have a workaround for Elasticsearch by enabling anonymous access with the
monitoring_userrole. It might be better to create a custom restricted role inroles.ymlto be used by the anonymous user for health checking purposes.Related to #2489