Skip to content

add spring-boot version and possibly other library versions in actuator info endpoint #31856

New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

Closed
BigMichi1 opened this issue Jul 25, 2022 · 1 comment
Labels
status: duplicate A duplicate of another issue

Comments

@BigMichi1
Copy link
Contributor

BigMichi1 commented Jul 25, 2022

currently, the actuator/info endpoint returns detailed information about the Java Runtime Environment, like vendor and version and also some basic information for the OS.
it would be nice if also more information about the currently used dependencies would be added as an additional info contributor.

would I'm looking for is a list of dependencies used by the application with their current version similar to this:

{
  "libraries": {
    ...

    "org.springframework.amqp:spring-rabbit" : "2.4.6",
    "org.springframework.boot:spring-boot" : "2.7.2",
    "org.springframework.boot:spring-boot-actuator" : "2.7.2"

    ...
  }
}

a more advanced version might be including a grouping of artefacts/dependencies that is configurable via properties, e.g.

{
  "libraries": {
    ...
    "org.springframework" : {
      "org.springframework.amqp:spring-rabbit" : "2.4.6",
      "org.springframework.boot:spring-boot" : "2.7.2",
      "org.springframework.boot:spring-boot-actuator" : "2.7.2"
    },
    "org.apache" : {
      ...
    },
    "*" : {
      ...
    }
    ...
  }
}

the reason behind that request is if there are running dozens of services in an environment, sometimes it is hard to figure out which service runs which version (especially if there are services deployed that are not so often changed). by adding this information to the actuator/info endpoint, it will become automatically visible in tools like codecentric's Spring Boot Admin or can be retrieved via direct requests on the endpoint to perform additional things, like creating an overview/excel sheet with all applications and their dependency versions

as this might expose some security-related information this information should be an opt-in

@spring-projects-issues spring-projects-issues added the status: waiting-for-triage An issue we've not yet triaged label Jul 25, 2022
@wilkinsona
Copy link
Member

Thanks for the suggestion. This is a duplicate of #22924.

@wilkinsona wilkinsona closed this as not planned Won't fix, can't repro, duplicate, stale Jul 25, 2022
@wilkinsona wilkinsona added status: duplicate A duplicate of another issue and removed status: waiting-for-triage An issue we've not yet triaged labels Jul 25, 2022
# for free to join this conversation on GitHub. Already have an account? # to comment
Labels
status: duplicate A duplicate of another issue
Projects
None yet
Development

No branches or pull requests

3 participants