Skip to content

[FIX] : health 엔드포인트 노출하여 접근 오류 수정#265

Merged
jsoonworld merged 1 commit intodevelopfrom
fix/#264
Jul 1, 2025
Merged

[FIX] : health 엔드포인트 노출하여 접근 오류 수정#265
jsoonworld merged 1 commit intodevelopfrom
fix/#264

Conversation

@jsoonworld
Copy link
Copy Markdown
Member

📄 Work Description

  • 서버 헬스 체크를 위한 /actuator/health 엔드포인트가 웹에 노출되지 않아 접근이 불가능했던 문제를 해결했습니다. application.yml 파일의 management.endpoints.web.exposure.include 설정에 health를 추가하여 엔드포인트를 정상적으로 활성화했습니다.

💬 To Reviewers

  • 이전 모니터링 환경 구축 PR([FEAT] 모니터링 환경 구축 및 과부화 테스트 #262)에서 health 엔드포인트를 노출하는 설정이 누락되어 헬스 체크가 실패하는 문제가 있었습니다. 해당 설정을 추가하여 문제를 해결하는 간단한 수정입니다. 확인 부탁드립니다!

@jsoonworld jsoonworld self-assigned this Jul 1, 2025
@jsoonworld jsoonworld added 🔨 fix 버그, 오류 수정 🦊장순🦊 labels Jul 1, 2025
@jsoonworld jsoonworld changed the title fix(actuator): health 엔드포인트 노출하여 접근 오류 수정 [FIX] : health 엔드포인트 노출하여 접근 오류 수정 Jul 1, 2025
Copy link
Copy Markdown

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull Request Overview

This PR exposes the /actuator/health endpoint and enables detailed health information by updating the application YAML configuration.

  • Added health to the list of exposed web endpoints under management.endpoints.web.exposure.include.
  • Enabled full health details via management.endpoint.health.show-details: always.
Comments suppressed due to low confidence (1)

src/main/resources/application.yml:61

  • [nitpick] Consider using a YAML list for multiple items in management.endpoints.web.exposure.include (e.g., include: [prometheus, health] or using dash notation) for improved readability and to avoid parsing ambiguity.
        include: prometheus,health

prometheus:
enabled: true
health:
show-details: always
Copy link

Copilot AI Jul 1, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Enabling show-details: always exposes sensitive health information to all clients. Consider restricting this in production or adding access controls to prevent unintended information disclosure.

Copilot uses AI. Check for mistakes.
Copy link
Copy Markdown
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

현재는 staging 단계까지 적용할 계획을 가지고 있어서 현재 상태를 유지해도 될 것 같다는 판단이 들었습니다! staging 단계에서는 상세한 정보를 볼 수 있는 게 좋다고 판단되었기 때문입니다. 다만, 운영 환경 배포하는 시점에는 피드백 대로 when_authorized or never을 적용하여 관리하겠습니다!

@jsoonworld jsoonworld merged commit 09158ab into develop Jul 1, 2025
1 check passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants