wyl/hertzbeat
1
0
Fork 0
mirror of https://github.com/dromara/hertzbeat.git synced 2026-09-17 09:40:58 +00:00
Code Issues Projects Releases Wiki Activity

[fix] restrict the actuator endpoints to admin (#4277)

Browse Source 
Co-authored-by: Claude Opus 5 (1M context) <noreply@anthropic.com>
This commit is contained in:
Duansg
2026-08-09 21:07:48 +08:00
committed by GitHub
co-authored by Claude Opus 5
parent 1a7b45ec26
commit 4566f62de3
8 changed files with 100 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
script/docker-compose/hertzbeat-mysql-iotdb/conf/sureness.yml
+2
View File
@@ -92,6 +92,8 @@ resourceRole:
- /api/ai/**===delete===[admin]
- /api/logs/sse/**===get===[admin,user,guest]
- /api/logs/ingest/**===post===[admin,user]
# spring boot actuator exposes jvm, http and datasource internals for scraping
- /actuator/**===get===[admin]
# config the resource restful api that need bypass auth protection
# rule: api===method
script/docker-compose/hertzbeat-mysql-tdengine/conf/sureness.yml
+2
View File
@@ -92,6 +92,8 @@ resourceRole:
- /api/ai/**===delete===[admin]
- /api/logs/sse/**===get===[admin,user,guest]
- /api/logs/ingest/**===post===[admin,user]
# spring boot actuator exposes jvm, http and datasource internals for scraping
- /actuator/**===get===[admin]
# config the resource restful api that need bypass auth protection
# rule: api===method
script/docker-compose/hertzbeat-mysql-victoria-metrics/conf/sureness.yml
+2
View File
@@ -92,6 +92,8 @@ resourceRole:
- /api/ai/**===delete===[admin]
- /api/logs/sse/**===get===[admin,user,guest]
- /api/logs/ingest/**===post===[admin,user]
# spring boot actuator exposes jvm, http and datasource internals for scraping
- /actuator/**===get===[admin]
# config the resource restful api that need bypass auth protection
# rule: api===method
script/docker-compose/hertzbeat-postgresql-greptimedb/conf/sureness.yml
+2
View File
@@ -96,6 +96,8 @@ resourceRole:
- /api/ingestion/otlp/**===get===[admin,user,guest]
- /api/logs/**===get===[admin,user,guest]
- /api/traces/**===get===[admin,user,guest]
# spring boot actuator exposes jvm, http and datasource internals for scraping
- /actuator/**===get===[admin]
# config the resource restful api that need bypass auth protection
# rule: api===method
script/docker-compose/hertzbeat-postgresql-victoria-metrics/conf/sureness.yml
+2
View File
@@ -92,6 +92,8 @@ resourceRole:
- /api/ai/**===delete===[admin]
- /api/logs/sse/**===get===[admin,user,guest]
- /api/logs/ingest/**===post===[admin,user]
# spring boot actuator exposes jvm, http and datasource internals for scraping
- /actuator/**===get===[admin]
# config the resource restful api that need bypass auth protection
# rule: api===method