refactor: SpringSecurity의 Actuator path 변경

[move-hoon]

🔗 관련 이슈

• related [BOOK-88/chore] 배포 환경을 위한 Dockerfile 구현 #19

📘 작업 유형

• ✨ Feature (기능 추가)
• 🐞 Bugfix (버그 수정)
• 🔧 Refactor (코드 리팩토링)
• ⚙️ Chore (환경 설정)
• 📝 Docs (문서 작성 및 수정)
• ✅ Test (기능 테스트)
• 🎨 style (코드 스타일 수정)

📙 작업 내역

• SpringSecurity의 Actuator path를 변경하였습니다.
• 추후 아래 블로그를 참조해 actuator path를 변경할 계획입니다.
• https://techblog.woowahan.com/9232/

🧪 테스트 내역

• 브라우저/기기에서 동작 확인
• 엣지 케이스 테스트 완료
• 기존 기능 영향 없음

🎨 스크린샷 또는 시연 영상 (선택)

기능	미리보기	기능	미리보기
기능 설명		기능 설명

✅ PR 체크리스트

• 커밋 메시지가 명확합니다
• PR 제목이 컨벤션에 맞습니다
• 관련 이슈 번호를 작성했습니다
• 기능이 정상적으로 작동합니다
• 불필요한 코드를 제거했습니다

💬 추가 설명 or 리뷰 포인트 (선택)

• ..

Summary by CodeRabbit

• Chores

  • Docker 이미지 빌드 및 배포 시 지원 아키텍처를 linux/amd64로 제한하였습니다.
  • Dockerfile 및 Dockerfile-dev에서 buildSrc/ 디렉토리 복사로 의존성 캐싱 최적화를 개선하였습니다.

• New Features

  • /actuator/** 경로의 엔드포인트에 대한 접근이 모두 허용되어, 더 많은 상태 확인 및 모니터링 엔드포인트가 공개적으로 접근 가능해졌습니다.

[coderabbitai]

Caution

Review failed

The pull request is closed.

📝 Walkthrough

"""

Walkthrough

Docker 빌드 및 배포 관련 GitHub Actions 워크플로우에서 multi-arch(amd64, arm64) 이미지 빌드를 amd64 단일 아키텍처로 제한하도록 수정되었습니다. 또한 Dockerfile과 Dockerfile-dev에서 의존성 캐싱 최적화 단계에 buildSrc/ 디렉토리 복사 단계가 추가되었습니다. 게이트웨이 보안 설정에서는 health 엔드포인트 대신 /actuator/** 전체를 공개하도록 변경되었습니다.

Changes

파일/경로 그룹	변경 요약
.github/workflows/dev-ci-cd.yml, .github/workflows/prod-ci-cd.yml	Docker build 플랫폼을 linux/amd64로 제한 (multi-arch 제거)
Dockerfile, Dockerfile-dev	의존성 캐싱 최적화 단계에서 buildSrc/ 디렉토리 추가 복사
gateway/src/main/kotlin/org/yapp/gateway/config/SecurityConfig.kt	/api/v1/health → /actuator/**로 공개 엔드포인트 확장

Sequence Diagram(s)

sequenceDiagram
    participant User
    participant Gateway
    participant Actuator

    User->>Gateway: /actuator/health 등 actuator 엔드포인트 요청
    Gateway-->>User: 인증 없이 응답(permitAll)
    User->>Gateway: 기타 보호된 엔드포인트 요청
    Gateway->>User: 인증/인가 처리

Loading

Suggested labels

⚙️ chore

Suggested reviewers

• minwoo1999
  """

---

📜 Recent review details

Configuration used: .coderabbit.yaml
Review profile: ASSERTIVE
Plan: Pro

📥 Commits

Reviewing files that changed from the base of the PR and between f45dda8 and 4b5b593.

📒 Files selected for processing (5)

• .github/workflows/dev-ci-cd.yml (1 hunks)
• .github/workflows/prod-ci-cd.yml (1 hunks)
• Dockerfile (1 hunks)
• Dockerfile-dev (1 hunks)
• gateway/src/main/kotlin/org/yapp/gateway/config/SecurityConfig.kt (1 hunks)

✨ Finishing Touches

• 📝 Generate Docstrings

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

🪧 Tips

Chat

There are 3 ways to chat with CodeRabbit:

• Review comments: Directly reply to a review comment made by CodeRabbit. Example:
  • I pushed a fix in commit <commit_id>, please review it.
  • Explain this complex logic.
  • Open a follow-up GitHub issue for this discussion.
• Files and specific lines of code (under the "Files changed" tab): Tag @coderabbitai in a new review comment at the desired location with your query. Examples:
  • @coderabbitai explain this code block.
  • @coderabbitai modularize this function.
• PR comments: Tag @coderabbitai in a new PR comment to ask questions about the PR branch. For the best results, please provide a very specific query, as very limited context is provided in this mode. Examples:
  • @coderabbitai gather interesting stats about this repository and render them as a table. Additionally, render a pie chart showing the language distribution in the codebase.
  • @coderabbitai read src/utils.ts and explain its main purpose.
  • @coderabbitai read the files in the src/scheduler package and generate a class diagram using mermaid and a README in the markdown format.
  • @coderabbitai help me debug CodeRabbit configuration file.

Support

Need help? Create a ticket on our support page for assistance with any issues or questions.

Note: Be mindful of the bot's finite context window. It's strongly recommended to break down tasks such as reading entire modules into smaller chunks. For a focused discussion, use review comments to chat about specific files and their changes, instead of using the PR comments.

CodeRabbit Commands (Invoked using PR comments)

• @coderabbitai pause to pause the reviews on a PR.
• @coderabbitai resume to resume the paused reviews.
• @coderabbitai review to trigger an incremental review. This is useful when automatic reviews are disabled for the repository.
• @coderabbitai full review to do a full review from scratch and review all the files again.
• @coderabbitai summary to regenerate the summary of the PR.
• @coderabbitai generate docstrings to generate docstrings for this PR.
• @coderabbitai generate sequence diagram to generate a sequence diagram of the changes in this PR.
• @coderabbitai resolve resolve all the CodeRabbit review comments.
• @coderabbitai configuration to show the current CodeRabbit configuration for the repository.
• @coderabbitai help to get help.

Other keywords and placeholders

• Add @coderabbitai ignore anywhere in the PR description to prevent this PR from being reviewed.
• Add @coderabbitai summary to generate the high-level summary at a specific location in the PR description.
• Add @coderabbitai anywhere in the PR title to generate the title automatically.

Documentation and Community

• Visit our Documentation for detailed information on how to use CodeRabbit.
• Join our Discord Community to get help, request features, and share feedback.
• Follow us on X/Twitter for updates and announcements.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud