nebula-orchestrator/manager

Set /api/status to work without basic Auth

naorlivne opened this issue · 2 comments

there is no real reason to secure it & disabling it will allow it to be dynamically checked for things such as AWS ELB in a much simpler fashion

I've yet to find a simple way to have all the other functions\paths use basic_auth aside from that one path... The way I see it is basic_auth should be on by default and disabled where needed & currently Flask seems to be built at disabled by default and turned on where needed which is an less attractive an option then enabled everywhere...

Put some extra thought into it and decided that having the API page require the same auth as the rest of the API is a good idea as that way health checks will also fail on any auth issues.