I am currently working inside a K8S cluster and I have the following end point exposed.

http://172.16.46.16:8080/websocket/metrics

Now the application that I have is Sprint Boot related. In order to hit this URL, it is currently sensitive meaning that it requires a user/name password.

As per documentation , I can turn off the sensitive feature on metrics so that I don't need username/pass to authorize myself. Since I do not want to hard code this in my configuration, I am passing the required parameter at runtime.

My K8S controller file is ::

# cat websocket-replication-controller.yaml 
apiVersion: v1
kind: ReplicationController
metadata:
  name: websocket-backend-controller
spec:
  replicas: 2
  selector:
    name: websocket-backend
  template:
    metadata:
      labels:
        name: websocket-backend
      annotations:
        prometheus.io/scrape: 'true'
        prometheus.io/path: /websocket/metrics
        prometheus.io/port: '8080'
    spec:
      containers:
      - name: websocket-backend
        image: armdocker.rnd.ericsson.se/proj_csdp/websocket_backend:3.0.6
        imagePullPolicy: IfNotPresent
        ports:
          - containerPort: 8080
        livenessProbe:
          httpGet:
            port: 8080
            path: /websocket/health
          initialDelaySeconds: 300
          timeoutSeconds: 30
        volumeMounts:
          - name: nfs
            mountPath: "/vault"
        command:
          - java
          - -Duser.timezone=UTC
          - -jar
          - -Dspring.profiles.active=clustered
          - websocket.jar
          - --endpoints.metrics.sensitive=false
      volumes:
        - name: nfs
          nfs:
            server: kube-nfs
            path: "/kubenfs/vault"
            readOnly: true

The final command looks like :

java -Duser.timezone=UTC -jar -Dspring.profiles.active=clustered websocket.jar --endpoints.metrics.sensitive=false

Starting the application this way does not seem to be over riding the metric sensitive behavior. I still get server returned HTTP status 401 Unauthorized

I was able to access my pod and look for any ERROR but I do not see any.

Is there something I am missing here ?