Adds spring-boot-startup-time/, the companion project for BLOG-618: a runnable Spring Boot 4.1.1 application on JDK 25 that installs BufferingApplicationStartup and FlightRecorderApplicationStartup behind a system property, and a /diag/startup endpoint that computes step self time -- the number /actuator/startup does not give you and the one that names the actual culprits. Captured under docs/output/: the step tree sorted both ways, the same startup as JFR events, a +5000-class experiment putting 0.11 ms per scanned class on the classpath scan tax, the silent truncation a 2048-step buffer performs, and JDK 25 AOT cache timings (6.93 s to 4.82 s). Post body and metadata live in post/. Moves the existing Actuator project into actuator-in-production/ so the repository holds one directory per article; the root README is now an index.
107 lines
3.0 KiB
Plaintext
107 lines
3.0 KiB
Plaintext
### profile: secured (SecuredActuatorConfig + application-secured.yaml)
|
|
### exposure is "*" - the security chain, not the exposure list, is what protects it
|
|
|
|
ANONYMOUS
|
|
GET /actuator/health 503
|
|
GET /actuator/info 200
|
|
GET /actuator/env 401
|
|
GET /actuator/beans 401
|
|
GET /actuator/threaddump 401
|
|
GET /actuator (the links index) 401
|
|
|
|
AUTHENTICATED as ops (ROLE_ACTUATOR)
|
|
GET /actuator/health 503
|
|
GET /actuator/env 200
|
|
GET /actuator/beans 200
|
|
GET /actuator/threaddump 200
|
|
|
|
WRONG PASSWORD
|
|
GET /actuator/env 401
|
|
|
|
--- health body, anonymous (show-details: when-authorized) ---
|
|
{
|
|
"groups": [
|
|
"liveness",
|
|
"readiness"
|
|
],
|
|
"status": "DOWN"
|
|
}
|
|
|
|
--- health body, authenticated as ROLE_ACTUATOR ---
|
|
{
|
|
"components": {
|
|
"db": {
|
|
"details": {
|
|
"database": "H2",
|
|
"validationQuery": "isValid()"
|
|
},
|
|
"status": "UP"
|
|
},
|
|
"diskSpace": {
|
|
"details": {
|
|
"total": 10213466112,
|
|
"free": 3877920768,
|
|
"threshold": 10485760,
|
|
"path": "/tmp/work/spring-boot-demo/.",
|
|
"exists": true
|
|
},
|
|
"status": "UP"
|
|
},
|
|
"externalApi": {
|
|
"details": {
|
|
"url": "http://localhost:8080/stub/upstream/ping",
|
|
"response": "pong",
|
|
"latencyMs": 4,
|
|
"timeoutMs": 750
|
|
},
|
|
"status": "UP"
|
|
},
|
|
"kafka": {
|
|
"details": {
|
|
"bootstrap": "localhost:9092",
|
|
"tuned": true,
|
|
"error": "TimeoutException: Timed out waiting for a node assignment. Call: listNodes",
|
|
"probeMs": 1500,
|
|
"budgetMs": 1500
|
|
},
|
|
"status": "DOWN"
|
|
},
|
|
"livenessState": {
|
|
"status": "UP"
|
|
},
|
|
"ordersDatabase": {
|
|
"details": {
|
|
"orders": 3,
|
|
"queryMs": 0,
|
|
"slowThresholdMs": 250
|
|
},
|
|
"status": "UP"
|
|
},
|
|
"ping": {
|
|
"status": "UP"
|
|
},
|
|
"readinessState": {
|
|
"status": "UP"
|
|
},
|
|
"ssl": {
|
|
"details": {
|
|
"expiringChains": [],
|
|
"invalidChains": [],
|
|
"validChains": []
|
|
},
|
|
"status": "UP"
|
|
}
|
|
},
|
|
"groups": [
|
|
"liveness",
|
|
"readiness"
|
|
],
|
|
"status": "DOWN"
|
|
}
|
|
|
|
Same endpoint, same status code, different body. An anonymous prober learns that the
|
|
service is unhealthy but not WHICH dependency is unhealthy.
|
|
|
|
--- the business endpoint is untouched by the actuator chain ---
|
|
GET /orders/count (anonymous) 200
|