Exposure of actuators apparently overriden by Web client properties

[PascalLugon]

Hello,

I have an issue with the exposure of actuators running CIB seven 2.1.0: only 2 are exposed (health and info), instead of the ones I want to activate.

I've found that the application.yaml located in the cibseven-webclient-web-2.1.0-classes.jar is potentially the source of the issue. When trying to adjust a property, the following error is raised:

However, more than one of those properties has been configured at the same time:
	management.endpoint.health.access
	management.endpoint.health.access (originating from 'class path resource [application.yml] - 23:36')
	management.endpoint.health.enabled (originating from 'class path resource [application.yaml] from cibseven-webclient-web-2.1.0-classes.jar - 147:16') 

Looking into the application.yaml file from cibseven-webclient-web-2.1.0-classes.jar, I can see the following properties:

# Activate "/actuator/info" and "/actuator/health" endpoints
management:
  endpoints:
    enabled-by-default: false # Disable all endpoints by default
    web:
      exposure:
        include: health,info # Include only health and info endpoints
  endpoint:
    info:
      enabled: true # Enable the info endpoint
    health:
      enabled: true # Enable the health endpoint
      probes:
        enabled: true # Enable health probes (if applicable)
  info:
    build:
      enabled: true # Enable build information
    git:
      enabled: true # Enable git information
      mode: full # Use full mode for git information
    java:
      enabled: true # Enable Java information (ensure your setup supports this)

Also in the startup trace I can see:

2025-11-14T11:35:18.242+01:00 TRACE 14328 --- [IoTWorkflowWS] [           main] o.s.b.context.config.ConfigDataLoaders   : Loading class path resource [application.yml] using loader org.springframework.boot.context.config.StandardConfigDataLoader
2025-11-14T11:35:18.242+01:00 TRACE 14328 --- [IoTWorkflowWS] [           main] o.s.b.context.config.ConfigDataImporter  : Loaded resource class path resource [application.yml] from location optional:classpath:/;optional:classpath:/config/
2025-11-14T11:35:18.242+01:00 TRACE 14328 --- [IoTWorkflowWS] [           main] o.s.b.context.config.ConfigDataImporter  : Considering resource class path resource [application.yaml] from location optional:classpath:/;optional:classpath:/config/
2025-11-14T11:35:18.242+01:00 TRACE 14328 --- [IoTWorkflowWS] [           main] o.s.b.context.config.ConfigDataLoaders   : Loading class path resource [application.yaml] using loader org.springframework.boot.context.config.StandardConfigDataLoader
2025-11-14T11:35:18.242+01:00 TRACE 14328 --- [IoTWorkflowWS] [           main] o.s.b.context.config.ConfigDataImporter  : Loaded resource class path resource [application.yaml] from location optional:classpath:/;optional:classpath:/config/
2025-11-14T11:35:18.244+01:00 TRACE 14328 --- [IoTWorkflowWS] [           main] .b.c.c.ConfigDataEnvironmentContributors : Imported 2 resources [class path resource [application.yml], class path resource [application.yaml]]

The application.yaml is apparently loaded after my application.yml

Does somebody knows a way to fix this issue?

BR
Pascal

[PascalLugon]

Found a kind workaround to override the CIB seven actuator exposure settings:

# Specific endpoint access control to override the CIB seven Web client properties
management.endpoint.camunda.access: read_only
management.endpoint.configprops.access: read_only
management.endpoint.data.access: read_only
management.endpoint.env.access: read_only
management.endpoint.monitoring.access: read_only
management.endpoint.services.access: read_only