From bb98b857a3abea030044bc63ae86ac695f6eea97 Mon Sep 17 00:00:00 2001
From: dkfals8835-rgb <dkfals8835@gmail.com>
Date: Mon, 6 Jul 2026 14:55:02 +0900
Subject: [PATCH] =?UTF-8?q?fix=20:=20sucurity=20observation=20=EB=81=84?=
 =?UTF-8?q?=EA=B8=B0?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 src/main/resources/application-prod.yml | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/src/main/resources/application-prod.yml b/src/main/resources/application-prod.yml
index 0cfcf77..0d87ee0 100644
--- a/src/main/resources/application-prod.yml
+++ b/src/main/resources/application-prod.yml
@@ -65,6 +65,14 @@ app:
 
 # Actuator/Micrometer -> Prometheus 노출 (ServiceMonitor가 scrape)
 management:
+  # === Spring Security observation 계측 비활성화 (2026-07-06, CPU 병목) ===
+  # 50k 부하 CPU 프로파일에서 http-nio 스레드 220+개가 ObservationFilterChainDecorator에 몰림.
+  # Security 필터 체인이 매 요청·매 필터마다 Observation을 생성/기록 → 2코어 풀포화의 주범.
+  # enter는 순수 Redis(경량)인데 이 계측 오버헤드가 CPU를 다 태워 p95 60s 유발.
+  # spring.security observation만 off (다른 http.server.requests 메트릭은 유지).
+  observations:
+    enable:
+      spring.security: false
   endpoints:
     web:
       exposure: