fix(security): allow anonymous access to actuator health endpoints to…

… allow LBs/proxies/k8s to verify status
Roche · Mar 5, 2022 · 35963aa · 35963aa
1 parent 1e6f3ff
commit 35963aa
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/...tion/src/main/kotlin/com/roche/ambassador/security/configuration/SecurityConfiguration.kt b/...tion/src/main/kotlin/com/roche/ambassador/security/configuration/SecurityConfiguration.kt
@@ -71,6 +71,7 @@ internal class SecurityConfiguration {
             .httpBasic().disable()
             .formLogin().disable()
             .authorizeExchange()
+            .pathMatchers("/actuator/health/**").permitAll()
             .anyExchange().authenticated().and()
             .oauth2Login()
             .authenticationSuccessHandler(buildSuccessHandler(sessionProperties))