Utilise Route53 HTTPS health checks

HTTP health checks continue to succeed when no keycloak pods exist as a TLS EOF exception is encountered, not a 5xx response code.
keycloak · Aug 30, 2023 · 147a65a · 147a65a
1 parent 1b94694
commit 147a65a
Showing 1 changed file with 4 additions and 3 deletions.
diff --git a/provision/aws/route53/route53_create.sh b/provision/aws/route53/route53_create.sh
@@ -15,12 +15,13 @@ function createHealthCheck() {
   --output text \
   --health-check-config '
   {
-    "Type": "HTTP",
+    "Type": "HTTPS",
     "ResourcePath": "/health/live",
     "FullyQualifiedDomainName": "'$1'",
-    "Port": 80,
+    "Port": 443,
     "RequestInterval": 30,
-    "FailureThreshold": 1
+    "FailureThreshold": 1,
+    "EnableSNI": true
   }
   '
 }