RequestMatcher for all Actuator paths #actuator

change-actuator-basepath.yaml

management:
  endpoints:
    enabled-by-default: true
    web:
      exposure:
        # Enable all
        include: "*"
      # Change from default /actuator to /mamamia
      base-path: "/mamamia"

DisableSecurityForAllActuatorEndpoints.java

import org.springframework.boot.actuate.autoconfigure.security.servlet.EndpointRequest;

httpSecurity
    .authorizeHttpRequests(auth -> {
        auth.requestMatchers(EndpointRequest.toAnyEndpoint()).permitAll();
        auth.anyRequest().fullyAuthenticated();
    });