Polish "Clarify actuator security documentation"

See gh-30065
pull/30085/head
Andy Wilkinson 3 years ago
parent 5b7c21e780
commit c872539dea

@ -316,8 +316,8 @@ TIP: If you want to implement your own strategy for when endpoints are exposed,
[[actuator.endpoints.security]] [[actuator.endpoints.security]]
=== Security === Security
For security purposes, only the `/health` endpoint is exposed over HTTP by default. If you want to expose more endpoints, For security purposes, only the `/health` endpoint is exposed over HTTP by default.
you can use the configprop:management.endpoints.web.exposure.include[] property to expose the actuator's endpoint. You can use the configprop:management.endpoints.web.exposure.include[] property to configure the endpoints that are exposed.
NOTE: Before setting the `management.endpoints.web.exposure.include`, ensure that the exposed actuators do not contain sensitive information, are secured by placing them behind a firewall, or are secured by something like Spring Security. NOTE: Before setting the `management.endpoints.web.exposure.include`, ensure that the exposed actuators do not contain sensitive information, are secured by placing them behind a firewall, or are secured by something like Spring Security.

Loading…
Cancel
Save