June 27, 2024 - Restricting access to Spring Boot actuator endpoints

Change Header


Change Type: API Change
Product area: Application enablement & solutions
Component: Microservice SDK
Deployed at: eu.latest.cumulocity.com, apj.cumulocity.com, jp.cumulocity.com, cumulocity.com, us.cumulocity.com, emea.cumulocity.com

Technical details

Build artifact: cumulocity (1020.111.0)
Internal ID: MTM-58316

Change Description


Improving the security for the Microservice SDK we have decided to restrict the initial configuration of the Spring Boot actuator endpoints (POST access to the /loggers endpoint) to the administrator roles only.