Spring Boot 4 Actuator in production: endpoints, security, custom health indicators

Companion repository for the ankurm.com article. Every transcript in docs/output/
was produced by running this project; scripts/run-all.sh regenerates all of them.

Verified against Spring Boot 4.1.1 / Framework 7.0.9 / Security 7.1.1 /
Micrometer 1.17.1 / kafka-clients 4.2.1 on Temurin JDK 25.0.4.1+1.

docs/output/02-endpoint-catalogue.txt

@@ -0,0 +1,80 @@
+### Every web-exposed endpoint, read from the running application
+### profiles: exposeall,open      management.endpoints.web.exposure.include: "*"
+
+$ curl -s http://localhost:8080/actuator/diag
+{
+    "activeProfiles": [
+        "exposeall",
+        "open"
+    ],
+    "serverPort": "8080",
+    "managementPort": "(same as server.port)",
+    "managementBasePath": "/actuator",
+    "exposureInclude": "*",
+    "exposureExclude": "(none)",
+    "healthShowDetails": "always",
+    "exposedWebEndpointCount": 14,
+    "exposedWebEndpoints": {
+        "beans": [
+            "GET beans"
+        ],
+        "conditions": [
+            "GET conditions"
+        ],
+        "configprops": [
+            "GET configprops",
+            "GET configprops/{prefix}"
+        ],
+        "diag": [
+            "GET diag"
+        ],
+        "env": [
+            "GET env",
+            "GET env/{toMatch}"
+        ],
+        "health": [
+            "GET health",
+            "GET health/{*path}"
+        ],
+        "info": [
+            "GET info"
+        ],
+        "loggers": [
+            "GET loggers",
+            "GET loggers/{name}",
+            "POST loggers/{name}"
+        ],
+        "mappings": [
+            "GET mappings"
+        ],
+        "metrics": [
+            "GET metrics",
+            "GET metrics/{requiredMetricName}"
+        ],
+        "prometheus": [
+            "GET prometheus"
+        ],
+        "sbom": [
+            "GET sbom",
+            "GET sbom/{id}"
+        ],
+        "scheduledtasks": [
+            "GET scheduledtasks"
+        ],
+        "threaddump": [
+            "GET threaddump",
+            "GET threaddump"
+        ]
+    },
+    "healthContributors": [
+        "db  (DataSourceHealthIndicator)",
+        "diskSpace  (DiskSpaceHealthIndicator)",
+        "externalApi  (ExternalApiHealthIndicator)",
+        "kafka  (KafkaHealthIndicator)",
+        "livenessState  (LivenessStateHealthIndicator)",
+        "ordersDatabase  (OrdersDatabaseHealthIndicator)",
+        "ping  (PingHealthIndicator)",
+        "readinessState  (ReadinessStateHealthIndicator)",
+        "ssl  (SslHealthIndicator)"
+    ]
+}