Skip to content

Add more fine-grained authorization handling for management API

Daniel Gerhardt requested to merge actuator-monitoring-auth into master
  • Everyone can access /health (w/o details) and /info.
  • Role MONITORING can access:
    • /health/** (w/ component details)
    • /metrics[/**]
    • /prometheus
    • /stats
  • Role ADMIN can access everything.
Edited by Daniel Gerhardt

Merge request reports