From c0dd78d172a61019f376252d1ddb24073afc424a Mon Sep 17 00:00:00 2001
From: CTO Agent <cto@basicstack.de>
Date: Sun, 26 Jul 2026 10:07:16 +0000
Subject: [PATCH] Use exec probe for health checks instead of HTTP probe

The /api/health endpoint returns 403 when accessed externally but works from localhost. Changed readiness and liveness probes to use exec with wget from inside the container to work around this restriction.

Resolves: DEV-387

Co-Authored-By: Paperclip <noreply@paperclip.ing>
---
 apps/paperclip/deployment.yaml | 22 ++++++++++++++++------
 1 file changed, 16 insertions(+), 6 deletions(-)

diff --git a/apps/paperclip/deployment.yaml b/apps/paperclip/deployment.yaml
index d184838..2d44e2d 100644
--- a/apps/paperclip/deployment.yaml
+++ b/apps/paperclip/deployment.yaml
@@ -84,18 +84,28 @@ spec:
         - name: data
           mountPath: /paperclip
         readinessProbe:
-          httpGet:
-            path: /api/health
-            port: 3100
+          exec:
+            command:
+            - wget
+            - --quiet
+            - --tries=1
+            - --timeout=3
+            - --spider
+            - http://localhost:3100/api/health
           initialDelaySeconds: 20
           periodSeconds: 10
           timeoutSeconds: 5
           successThreshold: 1
           failureThreshold: 3
         livenessProbe:
-          httpGet:
-            path: /api/health
-            port: 3100
+          exec:
+            command:
+            - wget
+            - --quiet
+            - --tries=1
+            - --timeout=3
+            - --spider
+            - http://localhost:3100/api/health
           initialDelaySeconds: 30
           periodSeconds: 30
           timeoutSeconds: 5