[Improve] Unauthorized access to Spring Boot Actuator #4171 (#4173)

apache · Jan 17, 2025 · 9168dab · 9168dab
1 parent 2050645
commit 9168dab
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 6 deletions.
diff --git a/streampark-console/streampark-console-service/pom.xml b/streampark-console/streampark-console-service/pom.xml
@@ -178,11 +178,6 @@
             <artifactId>spring-boot-starter-undertow</artifactId>
         </dependency>
 
-        <dependency>
-            <groupId>org.springframework.boot</groupId>
-            <artifactId>spring-boot-starter-actuator</artifactId>
-        </dependency>
-
         <dependency>
             <groupId>org.springframework.boot</groupId>
             <artifactId>spring-boot-starter-validation</artifactId>

diff --git a/...ole-service/src/main/java/org/apache/streampark/console/base/config/SpringProperties.java b/...ole-service/src/main/java/org/apache/streampark/console/base/config/SpringProperties.java
@@ -189,7 +189,8 @@ private static Properties getSpringConfig() {
     config.put("springdoc.api-docs.enabled", "true");
 
     // metrics
-    config.put("management.health.ldap.enabled", "false");
+    config.put("management.endpoints.enabled-by-default", "false");
+
     return config;
   }