allegro/turnilo

problem with readiness endpoint with secured druid

wmeler opened this issue · 3 comments

wmeler commented

Readiness endpoint seams not to use registered request decorator and fails to access druid cluster.
We get connection error: 401 - error:"Unauthorized request."

adrianmroz-allegro commented

@mkuthan we have /loadstatus open in our Druid so we don't add authorisation to readiness endpoint. Is our approach universal?

mkuthan commented

Sorry for the late reply. We use the following Druid cluster settings:

druid.auth.allowUnauthenticatedHttpOptions=true
druid.auth.unsecuredPaths=["/status", "/druid/broker/v1/loadstatus", "/druid/historical/v1/loadstatus"]

@wmeler - Could you apply similar approach? It seems to be more general, e.g we also have load balancer for the Druid cluster services - with the unsecured paths for the status endpoints the configuration is much easier.

wmeler commented

thanks, we will try to follow that way