[fix] sync sureness.yml in release artifacts with the packaged rules (#4367)

This commit is contained in:
Duansg
2026-09-07 17:48:07 +08:00
committed by GitHub
parent 664a25334c
commit fc3a858f81
6 changed files with 54 additions and 0 deletions
@@ -66,6 +66,10 @@ resourceRole:
- /api/collector/**===post===[admin,user]
- /api/collector/**===put===[admin,user]
- /api/collector/**===delete===[admin]
- /api/plugin/**===get===[admin]
- /api/plugin/**===post===[admin]
- /api/plugin/**===put===[admin]
- /api/plugin/**===delete===[admin]
# the secret config holds the jwt signing key and the aes key protecting stored
# credentials, so it stays admin only and is additionally refused by the controller
- /api/config/secret===get===[admin]
@@ -117,6 +121,9 @@ resourceRole:
- /api/logs/ingest/**===post===[admin,user]
- /api/observability/logs===delete===[admin]
- /api/observability/**===get===[admin,user,guest]
- /api/account/token===get===[admin]
- /api/account/token/**===post===[admin]
- /api/account/token/**===delete===[admin]
# The OpenAPI document is a map of every route, parameter and model, so it is
# scoped like any other administrative resource instead of being anonymous
- /v3/api-docs/**===get===[admin]
@@ -151,6 +158,9 @@ excludedResource:
- /passport/**===get
- /status/**===get
- /log/**===get
- /observability/**===get
- /metrics/**===get
- /trace/**===get
- /**/*.html===get
- /**/*.js===get
- /**/*.css===get
@@ -66,6 +66,10 @@ resourceRole:
- /api/collector/**===post===[admin,user]
- /api/collector/**===put===[admin,user]
- /api/collector/**===delete===[admin]
- /api/plugin/**===get===[admin]
- /api/plugin/**===post===[admin]
- /api/plugin/**===put===[admin]
- /api/plugin/**===delete===[admin]
# the secret config holds the jwt signing key and the aes key protecting stored
# credentials, so it stays admin only and is additionally refused by the controller
- /api/config/secret===get===[admin]
@@ -117,6 +121,9 @@ resourceRole:
- /api/logs/ingest/**===post===[admin,user]
- /api/observability/logs===delete===[admin]
- /api/observability/**===get===[admin,user,guest]
- /api/account/token===get===[admin]
- /api/account/token/**===post===[admin]
- /api/account/token/**===delete===[admin]
# The OpenAPI document is a map of every route, parameter and model, so it is
# scoped like any other administrative resource instead of being anonymous
- /v3/api-docs/**===get===[admin]
@@ -151,6 +158,9 @@ excludedResource:
- /passport/**===get
- /status/**===get
- /log/**===get
- /observability/**===get
- /metrics/**===get
- /trace/**===get
- /**/*.html===get
- /**/*.js===get
- /**/*.css===get
@@ -66,6 +66,10 @@ resourceRole:
- /api/collector/**===post===[admin,user]
- /api/collector/**===put===[admin,user]
- /api/collector/**===delete===[admin]
- /api/plugin/**===get===[admin]
- /api/plugin/**===post===[admin]
- /api/plugin/**===put===[admin]
- /api/plugin/**===delete===[admin]
# the secret config holds the jwt signing key and the aes key protecting stored
# credentials, so it stays admin only and is additionally refused by the controller
- /api/config/secret===get===[admin]
@@ -117,6 +121,9 @@ resourceRole:
- /api/logs/ingest/**===post===[admin,user]
- /api/observability/logs===delete===[admin]
- /api/observability/**===get===[admin,user,guest]
- /api/account/token===get===[admin]
- /api/account/token/**===post===[admin]
- /api/account/token/**===delete===[admin]
# The OpenAPI document is a map of every route, parameter and model, so it is
# scoped like any other administrative resource instead of being anonymous
- /v3/api-docs/**===get===[admin]
@@ -151,6 +158,9 @@ excludedResource:
- /passport/**===get
- /status/**===get
- /log/**===get
- /observability/**===get
- /metrics/**===get
- /trace/**===get
- /**/*.html===get
- /**/*.js===get
- /**/*.css===get
@@ -66,6 +66,10 @@ resourceRole:
- /api/collector/**===post===[admin,user]
- /api/collector/**===put===[admin,user]
- /api/collector/**===delete===[admin]
- /api/plugin/**===get===[admin]
- /api/plugin/**===post===[admin]
- /api/plugin/**===put===[admin]
- /api/plugin/**===delete===[admin]
# the secret config holds the jwt signing key and the aes key protecting stored
# credentials, so it stays admin only and is additionally refused by the controller
- /api/config/secret===get===[admin]
@@ -117,6 +121,9 @@ resourceRole:
- /api/logs/ingest/**===post===[admin,user]
- /api/observability/logs===delete===[admin]
- /api/observability/**===get===[admin,user,guest]
- /api/account/token===get===[admin]
- /api/account/token/**===post===[admin]
- /api/account/token/**===delete===[admin]
# The OpenAPI document is a map of every route, parameter and model, so it is
# scoped like any other administrative resource instead of being anonymous
- /v3/api-docs/**===get===[admin]
@@ -66,6 +66,10 @@ resourceRole:
- /api/collector/**===post===[admin,user]
- /api/collector/**===put===[admin,user]
- /api/collector/**===delete===[admin]
- /api/plugin/**===get===[admin]
- /api/plugin/**===post===[admin]
- /api/plugin/**===put===[admin]
- /api/plugin/**===delete===[admin]
# the secret config holds the jwt signing key and the aes key protecting stored
# credentials, so it stays admin only and is additionally refused by the controller
- /api/config/secret===get===[admin]
@@ -117,6 +121,9 @@ resourceRole:
- /api/logs/ingest/**===post===[admin,user]
- /api/observability/logs===delete===[admin]
- /api/observability/**===get===[admin,user,guest]
- /api/account/token===get===[admin]
- /api/account/token/**===post===[admin]
- /api/account/token/**===delete===[admin]
# The OpenAPI document is a map of every route, parameter and model, so it is
# scoped like any other administrative resource instead of being anonymous
- /v3/api-docs/**===get===[admin]
@@ -151,6 +158,9 @@ excludedResource:
- /passport/**===get
- /status/**===get
- /log/**===get
- /observability/**===get
- /metrics/**===get
- /trace/**===get
- /**/*.html===get
- /**/*.js===get
- /**/*.css===get
+7
View File
@@ -66,6 +66,10 @@ resourceRole:
- /api/collector/**===post===[admin,user]
- /api/collector/**===put===[admin,user]
- /api/collector/**===delete===[admin]
- /api/plugin/**===get===[admin]
- /api/plugin/**===post===[admin]
- /api/plugin/**===put===[admin]
- /api/plugin/**===delete===[admin]
# the secret config holds the jwt signing key and the aes key protecting stored
# credentials, so it stays admin only and is additionally refused by the controller
- /api/config/secret===get===[admin]
@@ -117,6 +121,9 @@ resourceRole:
- /api/logs/ingest/**===post===[admin,user]
- /api/observability/logs===delete===[admin]
- /api/observability/**===get===[admin,user,guest]
- /api/account/token===get===[admin]
- /api/account/token/**===post===[admin]
- /api/account/token/**===delete===[admin]
# The OpenAPI document is a map of every route, parameter and model, so it is
# scoped like any other administrative resource instead of being anonymous
- /v3/api-docs/**===get===[admin]