added healthcheck middleware

dojo/middleware.py

@@ -6,6 +6,7 @@
 from threading import local
 from django.db import models
 from django.urls import reverse
+from django.http import HttpResponse
 
 
 logger = logging.getLogger(__name__)
@@ -164,3 +165,25 @@ def __init__(self, get_response):
     def __call__(self, request):
         request.META.update(settings.ADDITIONAL_HEADERS)
         return self.get_response(request)
+
+
+class HealthCheckMiddleware:
+    """
+    Middleware that will allow for a healthcheck to return UP without the caller being in the
+    DJANGO ALLOWED_HOSTS list. Needed for AWS ALB healthchecks and improves general k8 healthchecks
+    """
+
+    def __init__(self, get_response):
+
+        self.get_response = get_response
+
+    def __call__(self, request):
+        response = self.get_response(request)
+        if request.META['PATH_INFO'] == '/health':
+            response.status_code = 200
+            response.data = {'health': 'UP.'}
+            # you need to change private attribute `_is_render`
+            # to call render second time
+            response._is_rendered = False
+            response.render()
+        return response

dojo/settings/settings.dist.py

@@ -923,6 +923,7 @@ def generate_url(scheme, double_slashes, user, password, host, port, path, param
     'django.middleware.common.CommonMiddleware',
     'dojo.middleware.APITrailingSlashMiddleware',
     'dojo.middleware.DojoSytemSettingsMiddleware',
+    'dojo.middleware.HealthCheckMiddleware',
     'django.contrib.sessions.middleware.SessionMiddleware',
     'django.middleware.csrf.CsrfViewMiddleware',
     'django.middleware.security.SecurityMiddleware',

helm/defectdojo/values.yaml

@@ -201,6 +201,8 @@ django:
       # Depending on the size and complexity of your scans, you might want to increase the default ingress timeouts if you see repeated 504 Gateway Timeouts
       # nginx.ingress.kubernetes.io/proxy-read-timeout: "1800"
       # nginx.ingress.kubernetes.io/proxy-send-timeout: "1800"
+      # specific for AWS deployments Defectdojo has the /health endpoint for ALB healthchecks
+      # alb.ingress.kubernetes.io/healthcheck-path: /health
   nginx:
     tls:
       enabled: false