Create liveliness endpoint

.envrc

@@ -3,5 +3,6 @@ if has nix
 then
   unset GOPATH # Required for editors to discover the go-tools in the flake.
   use flake
+  layout python python3
   layout ruby
 fi

.sonarcloud.properties

@@ -0,0 +1,4 @@
+sonar.sources = src/
+sonar.exclusions = **/*test.go
+sonar.test.exclusions = **/*test.go # This line is needed as well!
+

Gemfile.lock

@@ -73,4 +73,4 @@ DEPENDENCIES
   standard
 
 BUNDLED WITH
-   2.1.4
+   2.4.10

Makefile

@@ -4,10 +4,9 @@ MAKEFLAGS = -s
 go_modules:= $(shell  find . -maxdepth 3 -name "*.mod" -exec dirname {} \; | sed 's|\./src/||' | sort)
 all_modules:= $(go_modules) db scheduler
 .SHELLFLAGS := -eu -o pipefail -c ${SHELLFLAGS}
-MVN_OPTS="-Dmaven.test.skip=true"
+MVN_OPTS="-Dmaven.test.skip=true -Dmaven.plugin.validation=VERBOSE"
 OS:=$(shell . /etc/lsb-release &>/dev/null && echo $${DISTRIB_ID} ||  uname  )
 db_type:=postgres
-DB_HOST:=localhost
 DBURL := $(shell case "${db_type}" in\
 			 (postgres) printf "postgres://postgres:postgres@${DB_HOST}/autoscaler?sslmode=disable"; ;; \
  			 (mysql) printf "root@tcp(${DB_HOST})/autoscaler?tls=false"; ;; esac)
@@ -25,6 +24,7 @@ DEST?=build
 export BUILDIN_MODE?=false
 export DEBUG?=false
 export ACCEPTANCE_TESTS_FILE?=${DEST}/app-autoscaler-acceptance-tests-v${VERSION}.tgz
+export DB_HOST:=localhost
 
 $(shell mkdir -p target)
 $(shell mkdir -p build)
@@ -123,11 +123,14 @@ test: test-autoscaler test-scheduler test-changelog test-changeloglockcleaner te
 test-autoscaler: check-db_type init init-db test-certs
 	@echo " - using DBURL=${DBURL} OPTS=${OPTS}"
 	@make -C src/autoscaler test DBURL="${DBURL}" OPTS="${OPTS}"
-test-autoscaler-suite: check-db_type init init-db test-certs
+
+# ⚠ The target dependencies "autoscaler" and "scheduler" are needed by the integration tests.
+# TODO: Introduce make-target for the .war-file and the needed autoscaler-files instead?
+test-autoscaler-suite: check-db_type init init-db test-certs autoscaler scheduler
 	@echo " - using DBURL=${DBURL} TEST=${TEST} OPTS=${OPTS}"
 	@make -C src/autoscaler testsuite TEST=${TEST} DBURL="${DBURL}" OPTS="${OPTS}"
+
 test-scheduler: check-db_type init init-db test-certs
-	@export DB_HOST=${DB_HOST}; \
 	cd src && mvn test --no-transfer-progress -Dspring.profiles.include=${db_type} && cd ..
 test-changelog: init
 	@make -C src/changelog test

README.md

@@ -350,17 +350,18 @@ cf delete-service-broker autoscaler
 
 ## Monitoring the service
 
-The app-autoscaler provides a number of health endpoints that are available externally that can be used to check the state of each component. Each health endpoint is protected with basic auth (apart from the api server), the usernames are listed in the table below, but the passwords are available in credhub.
-
-Component | Health URL | Username | Password Key |
---------- | -----------| ---------| -------------|
-eventgenerator|https://autoscaler-eventgenerator.((system_domain))/health|eventgenerator|/autoscaler_eventgenerator_health_password|
-metricsforwarder|https://autoscaler-metricsforwarder.((system_domain))/health|metricsforwarder|/autoscaler_metricsforwarder_health_password|
-metricsgateway|https://autoscaler-metricsgateway.((system_domain))/health|metricsgateway|/autoscaler_metricsgateway_health_password|
-metricsserver|https://autoscaler-metricsserver.((system_domain))/health|metricsserver|/autoscaler_metricsserver_health_password|
-scalingengine|https://autoscaler-scalingengine.((system_domain))/health|scalingengine|/autoscaler_scalingengine_health_password|
-operator|https://autoscaler-operator.((system_domain))/health|operator|/autoscaler_operator_health_password|
-scheduler|https://autoscaler-scheduler.((system_domain))/health|scheduler|/autoscaler_scheduler_health_password|
+The app-autoscaler provides a number of health endpoints that are available externally that can be used to check the state of each component. Each health endpoint is protected with basic auth, the usernames are listed in the table below, but the passwords are available in credhub.
+
+Component | Health URL                                                               | Username         | Password Key                                 |
+--------- |--------------------------------------------------------------------------|------------------|----------------------------------------------|
+apiserver | https://autoscaler-apiserver.((system_domain))/health/liveness           | apiserver        | /autoscaler_api_server_health_password   |
+eventgenerator| https://autoscaler-eventgenerator.((system_domain))/health/liveness      | eventgenerator   | /autoscaler_eventgenerator_health_password   |
+metricsforwarder| https://autoscaler-metricsforwarder.((system_domain))/health/liveness    | metricsforwarder | /autoscaler_metricsforwarder_health_password |
+metricsgateway| https://autoscaler-metricsgateway.((system_domain))/health/liveness      | metricsgateway   | /autoscaler_metricsgateway_health_password   |
+metricsserver| https://autoscaler-metricsserver.((system_domain))/health/liveness       | metricsserver    | /autoscaler_metricsserver_health_password    |
+scalingengine| https://autoscaler-scalingengine.((system_domain))/health/liveness       | scalingengine    | /autoscaler_scalingengine_health_password    |
+operator| https://autoscaler-operator.((system_domain))/health/liveness            | operator         | /autoscaler_operator_health_password         |
+scheduler| https://autoscaler-scheduler.((system_domain))/health/liveness           | scheduler        | /autoscaler_scheduler_health_password        |
 
 These endpoints can be disabled by using the ops file `example/operations/disable-basicauth-on-health-endpoints.yml`
 

ci/autoscaler/scripts/run-acceptance-tests.sh

@@ -37,32 +37,31 @@ fi
 pushd "${autoscaler_dir}/src/acceptance" >/dev/null
 cat > acceptance_config.json <<EOF
 {
-  "api": "api.${system_domain}",
   "admin_user": "admin",
   "admin_password": "${cf_admin_password}",
+  "aggregate_interval": 120,
+  "api": "api.${system_domain}",
   "apps_domain": "${system_domain}",
-  "skip_ssl_validation": ${skip_ssl_validation},
-  "use_http": false,
-  "service_name": "${deployment_name}",
-  "service_broker": "${deployment_name}",
-	"use_existing_organization": ${use_existing_organization},
+  "autoscaler_api": "${deployment_name}.${system_domain}",
+	"default_timeout": 60,
   "existing_organization": "${existing_organization}",
-  "use_existing_space": ${use_existing_space},
   "existing_space": "${existing_space}",
-  "service_plan": "autoscaler-free-plan",
-  "aggregate_interval": 120,
-	"default_timeout": 60,
+  "health_endpoints_basic_auth_enabled": true,
   "name_prefix": "${name_prefix}",
-
-  "autoscaler_api": "${deployment_name}.${system_domain}",
-  "service_offering_enabled": ${service_offering_enabled},
-
   "performance": {
     "app_count": ${performance_app_count},
     "app_percentage_to_scale": ${performance_app_percentage_to_scale},
     "setup_workers": ${performance_setup_workers},
     "update_existing_org_quota": ${performance_update_existing_org_quota}
-  }
+  },
+  "service_broker": "${deployment_name}",
+  "service_name": "${deployment_name}",
+  "service_offering_enabled": ${service_offering_enabled},
+  "service_plan": "autoscaler-free-plan",
+  "skip_ssl_validation": ${skip_ssl_validation},
+	"use_existing_organization": ${use_existing_organization},
+  "use_existing_space": ${use_existing_space},
+  "use_http": false
 }
 EOF
 

docs/autocaler-scheduler-apisv1.drawio

@@ -0,0 +1 @@
+<mxfile host="Electron" modified="2023-05-22T14:53:18.681Z" agent="5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) draw.io/18.0.1 Chrome/100.0.4896.143 Electron/18.2.0 Safari/537.36" etag="t85FlPIPGBBftR37arXV" version="18.0.1" type="device"><diagram id="t1d-M7BKujPft_ienzus" name="Page-1">7Vxbl6K4Fv4t8+BaMw/W4iIqj3XR7tOnerpn7J4z/XRWhKiZRsIE8DK/fnYgIJBoWSpYttZDCbmzv+ydfYOW+ThfvWMomH2kLvZahuauWuZTyzB0TTPgh5es0xJD64mSKSOuaLUpGJF/cNZVlMbExWGpYUSpF5GgXOhQ38dOVCpDjNFludmEeuVZAzTFUsHIQZ5c+j/iRrO0tG9pm/L3mExn2cwdTdTMUdZYFIQz5NJlocgctMxHRmmUXs1Xj9jj1MvokvYbbqnNF8awH+3TYW3/0/7jr+DbB7vb6T/bf4brX39r6wKNMFpnT4xdIIC4pSya0Sn1kTfYlD4wGvsu5sNqcLdp80xpAIU6FP6Fo2gt0ERxRKFoFs09UQsrZus/Rf/k5hu/ubOy26dVsfJpnd2tSMS76Xewr9LbQke42/TjN8VunzEjcxxhJspk6gmChjRmDt5BMlvsQsSmONpF2rQdJ2dhAoHNO0xhNWwNDRj2UEQW5f2GxLad5u02yMKFAPc1QKfjLpAXi5neY+TBFjW0EWYLoIvR9eBxHsb8asqv+lpfl3ZHGfvljER4FKCEYEsQAWWctxIZ5ovwaidZRK2V8ZMQIGZP3C833KhnLDYrcGJXq4mShkTJj4j4u+movTk66h0DuOa8lLQkSmbEm1B40CK9un/HNKtoh4lcuYcGej9YJfTJ6jOaj5wZdmMvgQPNOTn9cRgkDRKcCFBazAVLT6dLe0pIAYGjMhxhxOh3/Eg9yqWJT30uFCfE8ypFyCNTH24dgI0LngcOF4Gz5V5UzInrJhJVhX95h5xgC5iaVdoCbRl/ONhk/O268O9K+L8bfPlx6a9bFVHWlwHoKvjPrIv+veumf8eUj5JG6a+b51C+Dtd8+qfWaETXz5Qk4l7g1LErOGkVAFLVS/SqYJAv43BY+opjaTgT2tIwYHyCGY7DPThlfw5gGE41NE6G4sAG/OmS57UeWtYTHwuQTE++VzHhCRgn54BMcNl76mBGXZxj74TIg73n4/B6AVJJNl1rEiC9c2VnS6+MgN1TaNfNHi6ydv00eB58GfzAIPQrNo51dhSMN+Vf6b3kYOGGUIZxC6iS/B2lM+hCyX/RXWKcWrk4jntk2ySzF12y2G6aTtCceOvUOM1NT9HgA44eGCI+nEvaR+rTan3LgLVqc6gJU0ZR2LXZIgKGlYvY3gPG9JVdxsj5Pk22XNtJoeeLZ9Pxz4ZlpWsqXvyyZZbhArAYoiAIOeV7D3D1fyBxD2YahsIaDws2d7qe8hoT9QorShOa722f/5iHum6opFnuKC+Ks05t4kx2ZF2ZOOtdpjiTTf2MY8O174w2/Hk1zFX2heWa8NlMGl02Oz9/vSKNWS3emlWZZbPyqiAw9DMDYMoAPFMgz4yGMPV9GpA60BVzDow8NMbeQ65fFY6iYfJ3yBF1uDlkWrKM6zUJr21sVaqPDvg8xiwh1UUFdc60P/JcDFmb7CriP7Vpk7Z9Fm1SJBFkmQF7ZRBkGmiuju6XsMDREwuB870OhdS+UIVUO68lcbk4vq20Els2LAbzMXY5SlLkvZoY8YXOHcTF/iOQExGfR+u1nydwqsPvKGDEn/4i7ZKmEye6VSWps6elUFvahK5w7X7yuT/owx8f4f9nRp0k+qGx2PeBiKkvqkJ8yr1B0ZLCf5dMJjg9PbUAuOpCzMAiUxr1qlLdSuhYV0XA6lKVvwzotxUbOcan+eK/3c502iNP58znksimIO5WSnZ6uZmXhUr6DTKUkpayWtpQRteJKdmzGs3pUtLSlGj5WhXf6FxXTtdRm8CQNkFXl9nJNBVb4BRpXcotcHmh36Mg0DuSRLOb86MoEbAkajeWV1TRS/ci5LH5Qt0qALqmV0i7JWVIGsuo5B7JI6Wa/CmSj5TQqeKOw8vQx04hzqoxL01TOClqcssr8ZDtmwvIojhOnlmSXtFt0jWvhKF/DolWU9zxZRFZ9hcoCaJ4C2W7btuAd2DXIm9JFLckinMdKLpRFWZmo2kUauP9R0qjOIk407N3O9+0PNNlr8vFp1GcmL36qtTjRjW27JXWC4rin9j+VIu4Zt2Tsh/oykDoG+eGQPbDXHcyxXEA96uSzlYEgupKp1ADfBY3z0aLuLNto6xJdLT+C6pEcld9F3/fQE4euc+j9d+yYbdG7k+po1yEzaXIXAfWXpCQAEu6UDHmawmT6Kpy/zxzPqtPWXld1E7Bs+JLH2KSVq5IFCHdwS9bOVy7AyFullg8i7Id6qDMmtDJJMS1uAuzxN7LS6N4PaPrb47Rm0q9UE8uJwzLjF6NXFZDZ8VTX/PImCGxsuuRCr0XpILx5mWA7GZ7ezk4RylfXVsyMxXatdLMzJNlTp81oElkv2Xh1KqDd6VAX09TbINGrSxD5RJ6wVm8b07zEw4YBu7czseSC/hmuSkS+KoZEgoXla3YM1Zte0a2zF/cM9WogpnGEjrit9dLQwqaFEBpoyDwcDtchxGep42rMZO0rh0TdTClWjrCU8rl3Nf/qNv/TscUNMbk+tNqPcV+ev11HPtRrB5zSBjiBw7igZ19FvHEKHFf1eM99haYb2Go+xXHWN0rhPHaIRiokwI9C7yaJSeJihQnXuNTNkdeoW6BGEHwC/yCopjxjxjubOegYFuTpdiVvLIj+ELzQEXHrM3DXPx0kXpSFsw4cdKkqrSMy4O2YO37ZIxJVKghwLS+mEfLHjSpiRgMNYHRs3mEB5nzUPKNxcIkS8rc8rLyseBJxt8JDMfHTEVRW3Bhqd1B4bR0pS52KANNjfrtaEac78mHQJLuxCcRyahTbVtAcme7wnJK7SYeRVGVOC4JAw+ts+YeSfSDn8icn+/I3xprrGa3SUUDo9XXWrapaPvARZ+LJygGgZIQCCUSKXP0adh3xeHPv5DJFwRGQAS6c2I0AMb8qWe42CUs5UFuiTtypeYmuG6C6ya4LklwvTrT4cbPN36+8fOb5edmFZG2os3XEOcaROwXdQuH+hMyjdMH4G2428NJ1ZO0fVE3WZJoRuMoASEkDvyiGFr5nHP4AHevNIJfcFNVX/E7geVpVr1WliKbtavn9mnZb1Wb9an67G7V4+u79/zj6Rt/QIFSZeNeTbdD0sALRLF2mOOHOmIz67/6NcktCd1Sani/8g6YNNDBn6WE281n4NPmm6/pm4N/AQ==</diagram></mxfile>

example/operation/disable-basicauth-on-health-endpoints.yml

@@ -27,9 +27,6 @@
 - type: remove
   path: /instance_groups/name=asactors/jobs/name=scalingengine/properties/autoscaler/scalingengine/health/password
 
-- type: remove
-  path: /instance_groups/name=asactors/jobs/name=scheduler/properties/autoscaler/scheduler/health/basicAuthEnabled
-
 - type: remove
   path: /instance_groups/name=asactors/jobs/name=scheduler/properties/autoscaler/scheduler/health/username
 

jobs/golangapiserver/spec

@@ -77,7 +77,35 @@ properties:
   autoscaler.apiserver.public_api.server.server_key:
     description: "PEM-encoded server key"
   autoscaler.apiserver.health.port:
-    default: 1080
+    default: 6206
+  autoscaler.apiserver.health.username:
+    default: ""
+    description: |
+      Username used for basic access authentication to connect to the protected health-endpoints.
+      Alternative of setting username_hash.
+  autoscaler.apiserver.health.username_hash:
+    default: ""
+    description: |
+      Hash-Value of the username used for basic access authentication to connect to the protected health-endpoints.
+      Alternative of setting the username.
+  autoscaler.apiserver.health.password:
+    default: ""
+    description: |
+      Password used for basic access authentication to connect to the protected health-endpoints.
+      Prefer usage of password_hash instead.
+  autoscaler.apiserver.health.password_hash:
+    default: ""
+    description: |
+      Hash-Value of the password used for basic access authentication to connect to the protected health-endpoints.
+      More secure alternative of setting the password. Set to `""` if you don't want to use it.
+  autoscaler.apiserver.health.unprotected_endpoints:
+    description: |
+      List of all health-endpoints, that run _without_ basic access authentication.
+      Valid endpoints are /debug/pprof, /health, /health/liveness, /health/prometheus, /health/readiness
+    default: [] # protect everything
+  autoscaler.apiserver.health.readiness_enabled:
+    default: false
+    description: "Set to true if you want to enable the endpoint on /health/readiness"
   autoscaler.apiserver.use_buildin_mode:
     default: true
     description: ""

jobs/golangapiserver/templates/apiserver.yml.erb

@@ -96,6 +96,12 @@ use_buildin_mode: <%= p("autoscaler.apiserver.use_buildin_mode") %>
 
 health:
   port: <%= p("autoscaler.apiserver.health.port") %>
+  username: <%= p("autoscaler.apiserver.health.username") %>
+  username_hash: <%= p("autoscaler.apiserver.health.username_hash") %>
+  password: <%= p("autoscaler.apiserver.health.password") %>
+  password_hash: <%= p("autoscaler.apiserver.health.password_hash") %>
+  unprotected_endpoints: <%= p("autoscaler.apiserver.health.unprotected_endpoints") %>
+  readiness_enabled: <%= p("autoscaler.apiserver.health.readiness_enabled") %>
 
 db:
   policy_db:

jobs/metricsforwarder/spec

@@ -133,7 +133,6 @@ properties:
   autoscaler.metricsforwarder.policy_poller_interval:
     description: "The time interval to refresh cached policies from policy database"
     default: 60s
-
   autoscaler.metricsforwarder.health.port:
     description: "The listening port of health endpoint"
     default: 6403
@@ -143,6 +142,14 @@ properties:
   autoscaler.metricsforwarder.health.password:
     description: "the password of health endpoint"
     default: ''
+  autoscaler.metricsforwarder.health.unprotected_endpoints:
+    description: |
+      List of all health-endpoints, that run _without_ basic access authentication.
+      Valid endpoints are /debug/pprof, /health, /health/liveness, /health/prometheus, /health/readiness
+    default: [] # protect everything
+  autoscaler.metricsforwarder.health.readiness_enabled:
+    default: false
+    description: "Set to true if you want to enable the endpoint on /health/readiness"
   autoscaler.metricsforwarder.rate_limit.valid_duration:
     description: "The rate limit evaluation duration"
     default: 1s

jobs/metricsforwarder/templates/metricsforwarder.yml.erb

@@ -32,18 +32,16 @@
   end
   db_url
 end
-
-###########################################
-#           Template Main                 #
-###########################################
   job_name = 'metricsforwarder'
   policy_db_url = build_db_url('policy_db', job_name)
   if p("autoscaler.storedprocedure_db.address") != ''
     storedprocedure_db_url = build_db_url('storedprocedure_db', job_name)
   end
 
 %>
-
+###########################################
+#           Template Main                 #
+###########################################
 server:
   port: <%= p("autoscaler.metricsforwarder.server.port") %>
 logging:
@@ -74,7 +72,8 @@ health:
   port:  <%= p("autoscaler.metricsforwarder.health.port") %>
   username: <%= p("autoscaler.metricsforwarder.health.username") %>
   password: <%= p("autoscaler.metricsforwarder.health.password") %>
-
+  unprotected_endpoints: <%= p("autoscaler.metricsforwarder.health.unprotected_endpoints") %>
+  readiness_enabled: <%= p("autoscaler.metricsforwarder.health.readiness_enabled") %>
 rate_limit:
   valid_duration: <%= p("autoscaler.metricsforwarder.rate_limit.valid_duration") %>
   max_amount: <%= p("autoscaler.metricsforwarder.rate_limit.max_amount") %>

jobs/metricsgateway/spec

@@ -117,3 +117,12 @@ properties:
   autoscaler.metricsgateway.health.password:
     description: "the password of health endpoint"
     default: ''
+  autoscaler.metricsgateway.health.unprotected_endpoints:
+    description: |
+      List of all health-endpoints, that run _without_ basic access authentication.
+      Valid endpoints are /debug/pprof, /health, /health/liveness, /health/prometheus, /health/readiness
+    default: [] # protect everything
+  autoscaler.metricsgateway.health.readiness_enabled:
+    default: false
+    description: "Set to true if you want to enable the endpoint on /health/readiness"
+

jobs/metricsgateway/templates/metricsgateway.yml.erb

@@ -32,20 +32,16 @@
   end
   db_url
 end
-
-###########################################
-#           Template Main                 #
-###########################################
   job_name = 'metricsgateway'
   policy_db_url = build_db_url('policy_db', job_name)
 
   metricsserver_sorted_instances=link("metricsserver").instances.sort_by {|i|i.address}
   metricsserver_addrs=metricsserver_sorted_instances.map{|i| "'wss://#{i.address}:#{link("metricsserver").p('autoscaler.metricsserver.collector.port')}'"}
   metricsserver_nodeAddrs="[" + metricsserver_addrs.join(",") +"]"  
-
 %>
-
-
+###########################################
+#           Template Main                 #
+###########################################
 logging:
   level: <%= p("autoscaler.metricsgateway.logging.level") %>
 envelop_chan_size: <%= p("autoscaler.metricsgateway.envelop_chan_size") %>
@@ -80,3 +76,6 @@ health:
   port: <%= p("autoscaler.metricsgateway.health.port") %>
   username: <%= p("autoscaler.metricsgateway.health.username") %>
   password: <%= p("autoscaler.metricsgateway.health.password") %>
+  unprotected_endpoints: <%= p("autoscaler.metricsgateway.health.unprotected_endpoints") %>
+  readiness_enabled: <%= p("autoscaler.metricsgateway.health.readiness_enabled") %>
+

jobs/metricsserver/spec

@@ -156,6 +156,14 @@ properties:
   autoscaler.metricsserver.health.password:
     description: "the password of health endpoint"
     default: ''
+  autoscaler.metricsserver.health.unprotected_endpoints:
+    description: |
+      List of all health-endpoints, that run _without_ basic access authentication.
+      Valid endpoints are /debug/pprof, /health, /health/liveness, /health/prometheus, /health/readiness
+    default: [] # protect everything
+  autoscaler.metricsserver.health.readiness_enabled:
+    default: false
+    description: "Set to true if you want to enable the endpoint on /health/readiness"
   autoscaler.changeloglock_timeout_seconds:
     default: 180
     description: "Liquibase changelog lock timeout duration in seconds"

jobs/metricsserver/templates/metricsserver.yml.erb

@@ -32,21 +32,18 @@
   end
   db_url
 end
-
-###########################################
-#           Template Main                 #
-###########################################
   job_name = 'metricsserver'
   instance_metrics_db_url = build_db_url('instancemetrics_db', job_name)
   policy_db_url = build_db_url('policy_db', job_name)
 
   sorted_instances=link("metricsserver").instances.sort_by {|i|i.address}
   nodeIndex=sorted_instances.index(sorted_instances.find{|i|i.id == spec.id})
   addrs=sorted_instances.map{|i| "'#{i.address}'"}
-  nodeAddrs="[" + addrs.join(",") +"]"  
-
+  nodeAddrs="[" + addrs.join(",") +"]"
 %>
-
+###########################################
+#           Template Main                 #
+###########################################
 logging:
   level: <%= p("autoscaler.metricsserver.logging.level") %>
 http_client_timeout: <%= p("autoscaler.metricsserver.http_client_timeout") %>
@@ -89,6 +86,9 @@ health:
   port: <%= p("autoscaler.metricsserver.health.port") %>
   username: <%= p("autoscaler.metricsserver.health.username") %>
   password: <%= p("autoscaler.metricsserver.health.password") %>
+  unprotected_endpoints: <%= p("autoscaler.metricsserver.health.unprotected_endpoints") %>
+  readiness_enabled: <%= p("autoscaler.metricsserver.health.readiness_enabled") %>
+