Allow Gitaly healthcheck to be called without authentication
Currently, there is not a way to check Gitaly health without authentication. GitLab CNG solves this problem by using their own healthcheck script that calls ss
. The problem here is that SELinux doesn't like ss
, see https://gitlab.com/gitlab-com/account-management/western-north-america/google-cloud-gdch/-/issues/23.
gRPC has its own builtin healthcheck rpc, but currently requires authentication to call. We should remove authentication so that anything can call the healthcheck RPC.