spring-boot-admin

为spring-boot-starter-actuator添加权限验证，解决产品安全扫描时暴露信息过多问题。

使用手册

客户端 - springboot项目

1. 修改项目pom.xml

• 添加maven依赖

    <dependency>
        <groupId>com.github.frog-warm</groupId>
        <artifactId>admin-client-spring-boot-starter</artifactId>
        <version>1.0.0.RELEASE</version>
    </dependency>

• 添加git-commit插件，界面引入git版本信息（可选）

<plugin>
    <groupId>pl.project13.maven</groupId>
    <artifactId>git-commit-id-plugin</artifactId>
    <executions>
        <execution>
            <goals>
                <goal>revision</goal>
            </goals>
        </execution>
    </executions>
    <configuration>
        <verbose>true</verbose>
        <dateFormat>yyyy-MM-dd HH:mm:ss</dateFormat>
        <generateGitPropertiesFile>true</generateGitPropertiesFile>
        <generateGitPropertiesFilename>${project.build.outputDirectory}/git.properties</generateGitPropertiesFilename>
    </configuration>
</plugin>

2. 添加客户端配置

spring.application.name=项目名称
spring.boot.admin.client.instance.metadata.secret=33e1d3c240f083f0c5e5b3b41f20f7443f9b6df
# server端启用钉钉通知时 @用户手机号
spring.boot.admin.client.instance.metadata.atMobiles=189****2020
spring.boot.admin.client.instance.prefer-ip=true
#server端地址
spring.boot.admin.client.url=http://localhost:40000
#server端账户
spring.boot.admin.client.username=admin
#server端秘钥
spring.boot.admin.client.password=admin
management.endpoints.web.exposure.include=*
management.endpoint.health.show-details=ALWAYS
management.info.git.mode=full

or

spring:
  application:
    name: 项目名称
  boot:
    admin:
      client:
        instance:
          metadata:
            secret: 33e1d3c240f083f0c5e5b3b41f20f7443f9b6df
            atMobiles: 189****2020 #server端启用钉钉通知时 @用户手机号
          prefer-ip: true
        url: http://localhost:40000 #server端地址
        username: admin #server端账户
        password: admin #server端秘钥
management:
  endpoints:
    web:
      exposure:
        include: '*'
  endpoint:
    health:
      show-details: ALWAYS
  info:
    git:
      mode: full

版本发布记录

1.0.0.RELEASE

• 客户端添加spring-boot-starter-actuator的权限验证
• 管理端添加钉钉通知