[DDING-001] actuator endpoint permitAll() 설정

COW-dev · Oct 11, 2024 · b75cea7 · b75cea7
1 parent 4754f4f
commit b75cea7
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 2 deletions.
diff --git a/src/main/java/ddingdong/ddingdongBE/common/config/SecurityConfig.java b/src/main/java/ddingdong/ddingdongBE/common/config/SecurityConfig.java
@@ -39,7 +39,7 @@ public SecurityFilterChain filterChain(HttpSecurity http, JwtAuthService authSer
                 .permitAll()
                 .requestMatchers(API_PREFIX + "/admin/**").hasRole("ADMIN")
                 .requestMatchers(API_PREFIX + "/club/**").hasRole("CLUB")
-                .requestMatchers(actuatorPath + "/**").hasRole("ADMIN")
+                .requestMatchers(actuatorPath + "/**").permitAll()
                 .requestMatchers(GET,
                     API_PREFIX + "/clubs/**",
                     API_PREFIX + "/notices/**",

diff --git a/src/main/resources/application-prod.yml b/src/main/resources/application-prod.yml
@@ -47,9 +47,10 @@ server:
 
 management:
   endpoints:
+    enabled-by-default: false
     web:
       exposure:
-        include: info, health, prometheus
+        include: info, health
       base-path: ${ACTUATOR_BASE_PATH}
     jmx:
       exposure: