From 620eb3719971b45860a945ea17ac6794cad54a06 Mon Sep 17 00:00:00 2001
From: Jonathon Herbert <jonathon.herbert@guardian.co.uk>
Date: Wed, 10 Apr 2024 08:56:46 +0100
Subject: [PATCH] Don't cache the checker healthcheck endpoint

---
 cdk/lib/index.ts | 10 +++++++---
 1 file changed, 7 insertions(+), 3 deletions(-)

diff --git a/cdk/lib/index.ts b/cdk/lib/index.ts
index 595bf5b04..f60dbd943 100644
--- a/cdk/lib/index.ts
+++ b/cdk/lib/index.ts
@@ -214,14 +214,16 @@ EOF
       parameters.CheckerCertificate.valueAsString
     );
 
+    const checkerOrigin = new LoadBalancerV2Origin(checkerApp.loadBalancer, {
+      protocolPolicy: OriginProtocolPolicy.HTTPS_ONLY,
+    });
+
     const checkerCloudFrontDistro = new Distribution(
       this,
       "typerighter-cloudfront",
       {
         defaultBehavior: {
-          origin: new LoadBalancerV2Origin(checkerApp.loadBalancer, {
-            protocolPolicy: OriginProtocolPolicy.HTTPS_ONLY,
-          }),
+          origin: checkerOrigin,
           allowedMethods: AllowedMethods.ALLOW_ALL,
           cachePolicy: new CachePolicy(
             this,
@@ -248,6 +250,8 @@ EOF
       }
     );
 
+    checkerCloudFrontDistro.addBehavior("/healthcheck", checkerOrigin, { cachePolicy: CachePolicy.CACHING_DISABLED });
+
     const checkerDnsRecord = new GuDnsRecordSet(this, "checker-dns-records", {
       name: checkerDomain,
       recordType: RecordType.CNAME,