We currently require the kbn-version header for all non-GET requests, which allows users to load applications, but we should also exclude HEAD requests as it serves a very similar purpose to GET and should be safe to execute from any caller.
The reason this is specifically desired is so systems can make HEAD requests to /app/kibana and get a 200 or 503 depending on server status.
We currently require the kbn-version header for all non-GET requests, which allows users to load applications, but we should also exclude HEAD requests as it serves a very similar purpose to GET and should be safe to execute from any caller.
The reason this is specifically desired is so systems can make HEAD requests to
/app/kibanaand get a 200 or 503 depending on server status.