From 8ddda8eb4ea3ff9a2a329a15a728379cb9640429 Mon Sep 17 00:00:00 2001
From: Antony Leons <antony@leons.dev>
Date: Fri, 20 Mar 2026 17:21:23 +0000
Subject: [PATCH] CME-909: Disable loggers endpoint and add test for management
 endpoints exposure

---
 src/main/resources/application.yaml           |  2 ++
 .../ManagementEndpointsConfigurationTest.java | 28 +++++++++++++++++++
 2 files changed, 30 insertions(+)
 create mode 100644 src/test/java/uk/gov/hmcts/reform/ccd/documentam/configuration/ManagementEndpointsConfigurationTest.java

diff --git a/src/main/resources/application.yaml b/src/main/resources/application.yaml
index e406cc850..fd28b1a6b 100644
--- a/src/main/resources/application.yaml
+++ b/src/main/resources/application.yaml
@@ -15,6 +15,8 @@ management:
       show-details: "always"
       cache:
         time-to-live: 10s
+    loggers:
+      enabled: false
   endpoints:
     web:
       base-path: /
diff --git a/src/test/java/uk/gov/hmcts/reform/ccd/documentam/configuration/ManagementEndpointsConfigurationTest.java b/src/test/java/uk/gov/hmcts/reform/ccd/documentam/configuration/ManagementEndpointsConfigurationTest.java
new file mode 100644
index 000000000..9fbe87df6
--- /dev/null
+++ b/src/test/java/uk/gov/hmcts/reform/ccd/documentam/configuration/ManagementEndpointsConfigurationTest.java
@@ -0,0 +1,28 @@
+package uk.gov.hmcts.reform.ccd.documentam.configuration;
+
+import org.junit.jupiter.api.Test;
+import org.springframework.beans.factory.config.YamlPropertiesFactoryBean;
+import org.springframework.core.io.ClassPathResource;
+
+import java.util.List;
+
+import static org.assertj.core.api.Assertions.assertThat;
+
+class ManagementEndpointsConfigurationTest {
+
+    @Test
+    void shouldDisableLoggersEndpointAndLimitExposedActuators() {
+        YamlPropertiesFactoryBean yamlPropertiesFactoryBean = new YamlPropertiesFactoryBean();
+        yamlPropertiesFactoryBean.setResources(new ClassPathResource("application.yaml"));
+
+        var properties = yamlPropertiesFactoryBean.getObject();
+
+        assertThat(properties)
+            .isNotNull();
+        assertThat(properties.getProperty("management.endpoint.loggers.enabled"))
+            .isEqualTo("false");
+        assertThat(List.of(properties.getProperty("management.endpoints.web.exposure.include").split(",\\s*")))
+            .containsExactly("health", "info", "prometheus")
+            .doesNotContain("loggers");
+    }
+}
\ No newline at end of file