I’m currently working with a client that doesn’t have a health endpoint or any kind of monitoring on their new API . They say monitoring isn’t needed because it will never go down.

Naturally it went down on day two. They still haven’t added any “unnecessary” monitoring, insisting that it will never go down.

“There was an emergency and power was temporarily cut to the card reader terminals, and now none of them work. We need to get to the server room to reboot the access control server, but it’s behind a card-only door.”
“How much do we want to get in?”
“Very much.”
“Stand back.”

And that’s how I ended up busting down the server room’s door.