aff2b6e4eb
As mentioned in https://gitlab.com/gitlab-org/gitlab-ee/issues/9035#note_129093444, Rails 5 switched ActionDispatch::Request so that it no longer inherits Rack::Request directly. A middleware that uses Rack::Request to read the environment may see stale request parameters if another middleware modifies the environment via ActionDispatch::Request. To be safe, we should be using ActionDispatch::Request everywhere.
43 lines
1.3 KiB
Ruby
43 lines
1.3 KiB
Ruby
# frozen_string_literal: true
|
|
|
|
# This middleware provides a health check that does not hit the database. Its purpose
|
|
# is to notify the prober that the application server is handling requests, but a 200
|
|
# response does not signify that the database or other services are ready.
|
|
#
|
|
# See https://thisdata.com/blog/making-a-rails-health-check-that-doesnt-hit-the-database/ for
|
|
# more details.
|
|
|
|
module Gitlab
|
|
module Middleware
|
|
class BasicHealthCheck
|
|
# This can't be frozen because Rails::Rack::Logger wraps the body
|
|
# rubocop:disable Style/MutableConstant
|
|
OK_RESPONSE = [200, { 'Content-Type' => 'text/plain' }, ["GitLab OK"]]
|
|
EMPTY_RESPONSE = [404, { 'Content-Type' => 'text/plain' }, [""]]
|
|
# rubocop:enable Style/MutableConstant
|
|
HEALTH_PATH = '/-/health'
|
|
|
|
def initialize(app)
|
|
@app = app
|
|
end
|
|
|
|
def call(env)
|
|
return @app.call(env) unless env['PATH_INFO'] == HEALTH_PATH
|
|
|
|
request = ActionDispatch::Request.new(env)
|
|
|
|
return OK_RESPONSE if client_ip_whitelisted?(request)
|
|
|
|
EMPTY_RESPONSE
|
|
end
|
|
|
|
def client_ip_whitelisted?(request)
|
|
ip_whitelist.any? { |e| e.include?(request.ip) }
|
|
end
|
|
|
|
def ip_whitelist
|
|
@ip_whitelist ||= Settings.monitoring.ip_whitelist.map(&IPAddr.method(:new))
|
|
end
|
|
end
|
|
end
|
|
end
|