Ok…it was something on my side.
In order to bypass auth all you need to do is.
"use_extended_paths": true,
"extended_paths": {
"ignored": [{
"path": "/actuator/health"
}],
"white_list": [],
"black_list": []
}`
Hope this helps someone.