b9dfb86260
Security hardening release addressing CodeQL and Dependabot alerts: - Fix stack trace exposure in error responses - Add SSRF protection with DNS resolution checking - Implement proper URL hostname validation (replaces substring matching) - Add centralized path sanitization to prevent path traversal - Fix ReDoS vulnerability in email validation regex - Improve HTML sanitization in validation utilities - Fix capability wildcard matching in auth utilities - Update glob dependency to address CVE - Add CodeQL suppression comments for verified false positives 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
58 lines
1.4 KiB
Python
58 lines
1.4 KiB
Python
"""
|
|
Health check endpoints for Resource Cluster
|
|
"""
|
|
|
|
from fastapi import APIRouter, HTTPException
|
|
from typing import Dict, Any
|
|
import logging
|
|
|
|
from app.core.backends import get_backend
|
|
|
|
router = APIRouter()
|
|
logger = logging.getLogger(__name__)
|
|
|
|
|
|
@router.get("/")
|
|
async def health_check() -> Dict[str, Any]:
|
|
"""Basic health check"""
|
|
return {
|
|
"status": "healthy",
|
|
"service": "resource-cluster"
|
|
}
|
|
|
|
|
|
@router.get("/ready")
|
|
async def readiness_check() -> Dict[str, Any]:
|
|
"""Readiness check for Kubernetes"""
|
|
try:
|
|
# Check if critical backends are initialized
|
|
groq_backend = get_backend("groq_proxy")
|
|
|
|
return {
|
|
"status": "ready",
|
|
"backends": {
|
|
"groq_proxy": groq_backend is not None
|
|
}
|
|
}
|
|
except Exception as e:
|
|
logger.error(f"Readiness check failed: {e}")
|
|
raise HTTPException(status_code=503, detail="Service not ready")
|
|
|
|
|
|
@router.get("/backends")
|
|
async def backend_health() -> Dict[str, Any]:
|
|
"""Check health of all resource backends"""
|
|
health_status = {}
|
|
|
|
try:
|
|
# Check Groq backend
|
|
groq_backend = get_backend("groq_proxy")
|
|
groq_health = await groq_backend.check_health()
|
|
health_status["groq"] = groq_health
|
|
except Exception as e:
|
|
health_status["groq"] = {"error": str(e)}
|
|
|
|
return {
|
|
"status": "operational",
|
|
"backends": health_status
|
|
} |