This is an automated email from the ASF dual-hosted git repository.
zqr10159 pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/hertzbeat.git
The following commit(s) were added to refs/heads/master by this push:
new fc3a858f81 [fix] sync sureness.yml in release artifacts with the
packaged rules (#4367)
fc3a858f81 is described below
commit fc3a858f81a9caf350d34482d6c4b1751cdd890a
Author: Duansg <[email protected]>
AuthorDate: Mon Sep 7 17:48:07 2026 +0800
[fix] sync sureness.yml in release artifacts with the packaged rules (#4367)
---
script/docker-compose/hertzbeat-mysql-iotdb/conf/sureness.yml | 10 ++++++++++
.../docker-compose/hertzbeat-mysql-tdengine/conf/sureness.yml | 10 ++++++++++
.../hertzbeat-mysql-victoria-metrics/conf/sureness.yml | 10 ++++++++++
.../hertzbeat-postgresql-greptimedb/conf/sureness.yml | 7 +++++++
.../hertzbeat-postgresql-victoria-metrics/conf/sureness.yml | 10 ++++++++++
script/sureness.yml | 7 +++++++
6 files changed, 54 insertions(+)
diff --git a/script/docker-compose/hertzbeat-mysql-iotdb/conf/sureness.yml
b/script/docker-compose/hertzbeat-mysql-iotdb/conf/sureness.yml
index bc25d799ad..2749420cbe 100644
--- a/script/docker-compose/hertzbeat-mysql-iotdb/conf/sureness.yml
+++ b/script/docker-compose/hertzbeat-mysql-iotdb/conf/sureness.yml
@@ -66,6 +66,10 @@ resourceRole:
- /api/collector/**===post===[admin,user]
- /api/collector/**===put===[admin,user]
- /api/collector/**===delete===[admin]
+ - /api/plugin/**===get===[admin]
+ - /api/plugin/**===post===[admin]
+ - /api/plugin/**===put===[admin]
+ - /api/plugin/**===delete===[admin]
# the secret config holds the jwt signing key and the aes key protecting
stored
# credentials, so it stays admin only and is additionally refused by the
controller
- /api/config/secret===get===[admin]
@@ -117,6 +121,9 @@ resourceRole:
- /api/logs/ingest/**===post===[admin,user]
- /api/observability/logs===delete===[admin]
- /api/observability/**===get===[admin,user,guest]
+ - /api/account/token===get===[admin]
+ - /api/account/token/**===post===[admin]
+ - /api/account/token/**===delete===[admin]
# The OpenAPI document is a map of every route, parameter and model, so it is
# scoped like any other administrative resource instead of being anonymous
- /v3/api-docs/**===get===[admin]
@@ -151,6 +158,9 @@ excludedResource:
- /passport/**===get
- /status/**===get
- /log/**===get
+ - /observability/**===get
+ - /metrics/**===get
+ - /trace/**===get
- /**/*.html===get
- /**/*.js===get
- /**/*.css===get
diff --git a/script/docker-compose/hertzbeat-mysql-tdengine/conf/sureness.yml
b/script/docker-compose/hertzbeat-mysql-tdengine/conf/sureness.yml
index bc25d799ad..2749420cbe 100644
--- a/script/docker-compose/hertzbeat-mysql-tdengine/conf/sureness.yml
+++ b/script/docker-compose/hertzbeat-mysql-tdengine/conf/sureness.yml
@@ -66,6 +66,10 @@ resourceRole:
- /api/collector/**===post===[admin,user]
- /api/collector/**===put===[admin,user]
- /api/collector/**===delete===[admin]
+ - /api/plugin/**===get===[admin]
+ - /api/plugin/**===post===[admin]
+ - /api/plugin/**===put===[admin]
+ - /api/plugin/**===delete===[admin]
# the secret config holds the jwt signing key and the aes key protecting
stored
# credentials, so it stays admin only and is additionally refused by the
controller
- /api/config/secret===get===[admin]
@@ -117,6 +121,9 @@ resourceRole:
- /api/logs/ingest/**===post===[admin,user]
- /api/observability/logs===delete===[admin]
- /api/observability/**===get===[admin,user,guest]
+ - /api/account/token===get===[admin]
+ - /api/account/token/**===post===[admin]
+ - /api/account/token/**===delete===[admin]
# The OpenAPI document is a map of every route, parameter and model, so it is
# scoped like any other administrative resource instead of being anonymous
- /v3/api-docs/**===get===[admin]
@@ -151,6 +158,9 @@ excludedResource:
- /passport/**===get
- /status/**===get
- /log/**===get
+ - /observability/**===get
+ - /metrics/**===get
+ - /trace/**===get
- /**/*.html===get
- /**/*.js===get
- /**/*.css===get
diff --git
a/script/docker-compose/hertzbeat-mysql-victoria-metrics/conf/sureness.yml
b/script/docker-compose/hertzbeat-mysql-victoria-metrics/conf/sureness.yml
index bc25d799ad..2749420cbe 100644
--- a/script/docker-compose/hertzbeat-mysql-victoria-metrics/conf/sureness.yml
+++ b/script/docker-compose/hertzbeat-mysql-victoria-metrics/conf/sureness.yml
@@ -66,6 +66,10 @@ resourceRole:
- /api/collector/**===post===[admin,user]
- /api/collector/**===put===[admin,user]
- /api/collector/**===delete===[admin]
+ - /api/plugin/**===get===[admin]
+ - /api/plugin/**===post===[admin]
+ - /api/plugin/**===put===[admin]
+ - /api/plugin/**===delete===[admin]
# the secret config holds the jwt signing key and the aes key protecting
stored
# credentials, so it stays admin only and is additionally refused by the
controller
- /api/config/secret===get===[admin]
@@ -117,6 +121,9 @@ resourceRole:
- /api/logs/ingest/**===post===[admin,user]
- /api/observability/logs===delete===[admin]
- /api/observability/**===get===[admin,user,guest]
+ - /api/account/token===get===[admin]
+ - /api/account/token/**===post===[admin]
+ - /api/account/token/**===delete===[admin]
# The OpenAPI document is a map of every route, parameter and model, so it is
# scoped like any other administrative resource instead of being anonymous
- /v3/api-docs/**===get===[admin]
@@ -151,6 +158,9 @@ excludedResource:
- /passport/**===get
- /status/**===get
- /log/**===get
+ - /observability/**===get
+ - /metrics/**===get
+ - /trace/**===get
- /**/*.html===get
- /**/*.js===get
- /**/*.css===get
diff --git
a/script/docker-compose/hertzbeat-postgresql-greptimedb/conf/sureness.yml
b/script/docker-compose/hertzbeat-postgresql-greptimedb/conf/sureness.yml
index 74a4ce4358..2749420cbe 100644
--- a/script/docker-compose/hertzbeat-postgresql-greptimedb/conf/sureness.yml
+++ b/script/docker-compose/hertzbeat-postgresql-greptimedb/conf/sureness.yml
@@ -66,6 +66,10 @@ resourceRole:
- /api/collector/**===post===[admin,user]
- /api/collector/**===put===[admin,user]
- /api/collector/**===delete===[admin]
+ - /api/plugin/**===get===[admin]
+ - /api/plugin/**===post===[admin]
+ - /api/plugin/**===put===[admin]
+ - /api/plugin/**===delete===[admin]
# the secret config holds the jwt signing key and the aes key protecting
stored
# credentials, so it stays admin only and is additionally refused by the
controller
- /api/config/secret===get===[admin]
@@ -117,6 +121,9 @@ resourceRole:
- /api/logs/ingest/**===post===[admin,user]
- /api/observability/logs===delete===[admin]
- /api/observability/**===get===[admin,user,guest]
+ - /api/account/token===get===[admin]
+ - /api/account/token/**===post===[admin]
+ - /api/account/token/**===delete===[admin]
# The OpenAPI document is a map of every route, parameter and model, so it is
# scoped like any other administrative resource instead of being anonymous
- /v3/api-docs/**===get===[admin]
diff --git
a/script/docker-compose/hertzbeat-postgresql-victoria-metrics/conf/sureness.yml
b/script/docker-compose/hertzbeat-postgresql-victoria-metrics/conf/sureness.yml
index bc25d799ad..2749420cbe 100644
---
a/script/docker-compose/hertzbeat-postgresql-victoria-metrics/conf/sureness.yml
+++
b/script/docker-compose/hertzbeat-postgresql-victoria-metrics/conf/sureness.yml
@@ -66,6 +66,10 @@ resourceRole:
- /api/collector/**===post===[admin,user]
- /api/collector/**===put===[admin,user]
- /api/collector/**===delete===[admin]
+ - /api/plugin/**===get===[admin]
+ - /api/plugin/**===post===[admin]
+ - /api/plugin/**===put===[admin]
+ - /api/plugin/**===delete===[admin]
# the secret config holds the jwt signing key and the aes key protecting
stored
# credentials, so it stays admin only and is additionally refused by the
controller
- /api/config/secret===get===[admin]
@@ -117,6 +121,9 @@ resourceRole:
- /api/logs/ingest/**===post===[admin,user]
- /api/observability/logs===delete===[admin]
- /api/observability/**===get===[admin,user,guest]
+ - /api/account/token===get===[admin]
+ - /api/account/token/**===post===[admin]
+ - /api/account/token/**===delete===[admin]
# The OpenAPI document is a map of every route, parameter and model, so it is
# scoped like any other administrative resource instead of being anonymous
- /v3/api-docs/**===get===[admin]
@@ -151,6 +158,9 @@ excludedResource:
- /passport/**===get
- /status/**===get
- /log/**===get
+ - /observability/**===get
+ - /metrics/**===get
+ - /trace/**===get
- /**/*.html===get
- /**/*.js===get
- /**/*.css===get
diff --git a/script/sureness.yml b/script/sureness.yml
index 74a4ce4358..2749420cbe 100644
--- a/script/sureness.yml
+++ b/script/sureness.yml
@@ -66,6 +66,10 @@ resourceRole:
- /api/collector/**===post===[admin,user]
- /api/collector/**===put===[admin,user]
- /api/collector/**===delete===[admin]
+ - /api/plugin/**===get===[admin]
+ - /api/plugin/**===post===[admin]
+ - /api/plugin/**===put===[admin]
+ - /api/plugin/**===delete===[admin]
# the secret config holds the jwt signing key and the aes key protecting
stored
# credentials, so it stays admin only and is additionally refused by the
controller
- /api/config/secret===get===[admin]
@@ -117,6 +121,9 @@ resourceRole:
- /api/logs/ingest/**===post===[admin,user]
- /api/observability/logs===delete===[admin]
- /api/observability/**===get===[admin,user,guest]
+ - /api/account/token===get===[admin]
+ - /api/account/token/**===post===[admin]
+ - /api/account/token/**===delete===[admin]
# The OpenAPI document is a map of every route, parameter and model, so it is
# scoped like any other administrative resource instead of being anonymous
- /v3/api-docs/**===get===[admin]
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
