<p>I am using Prometheus version 2.28, I enabled basic Authentication on Prometheus server and seems that after enabling that, <code>/-/healthy</code> and <code>/-/ready</code> endpoints are also secured. I am using these endpoints in Kubernates for liveness and rediness probe. I have option to pass in Authorization header as a part of yaml as follows. But, is their any other way we can securely pass the username and password as its only base64 encoded. Or is it possible to disable security on Prometheus health endpoints.</p>
<pre><code>livenessProbe:
      httpGet:
        path: /-/healthy
        port: 9090
        httpHeaders:
        - name: Authorization
          value: Basic dXNlcjpwYXNz
</code></pre>

<p>Unfortunately <strong>no</strong>. What you have is probably the only solution that works, as of today.</p>
<p>Back in 2015 there was a GitHub issue (<a href="https://github.com/kubernetes/kubernetes/issues/16910" rel="nofollow noreferrer">#16910</a>) to implement authentication support for HTTP liveness probes, but it was ultimately scrapped.</p>
