diff --git a/script/docker-compose/hertzbeat-mysql-iotdb/conf/sureness.yml b/script/docker-compose/hertzbeat-mysql-iotdb/conf/sureness.yml index bc25d799ad..2749420cbe 100644 --- a/script/docker-compose/hertzbeat-mysql-iotdb/conf/sureness.yml +++ b/script/docker-compose/hertzbeat-mysql-iotdb/conf/sureness.yml @@ -66,6 +66,10 @@ resourceRole: - /api/collector/**===post===[admin,user] - /api/collector/**===put===[admin,user] - /api/collector/**===delete===[admin] + - /api/plugin/**===get===[admin] + - /api/plugin/**===post===[admin] + - /api/plugin/**===put===[admin] + - /api/plugin/**===delete===[admin] # the secret config holds the jwt signing key and the aes key protecting stored # credentials, so it stays admin only and is additionally refused by the controller - /api/config/secret===get===[admin] @@ -117,6 +121,9 @@ resourceRole: - /api/logs/ingest/**===post===[admin,user] - /api/observability/logs===delete===[admin] - /api/observability/**===get===[admin,user,guest] + - /api/account/token===get===[admin] + - /api/account/token/**===post===[admin] + - /api/account/token/**===delete===[admin] # The OpenAPI document is a map of every route, parameter and model, so it is # scoped like any other administrative resource instead of being anonymous - /v3/api-docs/**===get===[admin] @@ -151,6 +158,9 @@ excludedResource: - /passport/**===get - /status/**===get - /log/**===get + - /observability/**===get + - /metrics/**===get + - /trace/**===get - /**/*.html===get - /**/*.js===get - /**/*.css===get diff --git a/script/docker-compose/hertzbeat-mysql-tdengine/conf/sureness.yml b/script/docker-compose/hertzbeat-mysql-tdengine/conf/sureness.yml index bc25d799ad..2749420cbe 100644 --- a/script/docker-compose/hertzbeat-mysql-tdengine/conf/sureness.yml +++ b/script/docker-compose/hertzbeat-mysql-tdengine/conf/sureness.yml @@ -66,6 +66,10 @@ resourceRole: - /api/collector/**===post===[admin,user] - /api/collector/**===put===[admin,user] - /api/collector/**===delete===[admin] + - /api/plugin/**===get===[admin] + - /api/plugin/**===post===[admin] + - /api/plugin/**===put===[admin] + - /api/plugin/**===delete===[admin] # the secret config holds the jwt signing key and the aes key protecting stored # credentials, so it stays admin only and is additionally refused by the controller - /api/config/secret===get===[admin] @@ -117,6 +121,9 @@ resourceRole: - /api/logs/ingest/**===post===[admin,user] - /api/observability/logs===delete===[admin] - /api/observability/**===get===[admin,user,guest] + - /api/account/token===get===[admin] + - /api/account/token/**===post===[admin] + - /api/account/token/**===delete===[admin] # The OpenAPI document is a map of every route, parameter and model, so it is # scoped like any other administrative resource instead of being anonymous - /v3/api-docs/**===get===[admin] @@ -151,6 +158,9 @@ excludedResource: - /passport/**===get - /status/**===get - /log/**===get + - /observability/**===get + - /metrics/**===get + - /trace/**===get - /**/*.html===get - /**/*.js===get - /**/*.css===get diff --git a/script/docker-compose/hertzbeat-mysql-victoria-metrics/conf/sureness.yml b/script/docker-compose/hertzbeat-mysql-victoria-metrics/conf/sureness.yml index bc25d799ad..2749420cbe 100644 --- a/script/docker-compose/hertzbeat-mysql-victoria-metrics/conf/sureness.yml +++ b/script/docker-compose/hertzbeat-mysql-victoria-metrics/conf/sureness.yml @@ -66,6 +66,10 @@ resourceRole: - /api/collector/**===post===[admin,user] - /api/collector/**===put===[admin,user] - /api/collector/**===delete===[admin] + - /api/plugin/**===get===[admin] + - /api/plugin/**===post===[admin] + - /api/plugin/**===put===[admin] + - /api/plugin/**===delete===[admin] # the secret config holds the jwt signing key and the aes key protecting stored # credentials, so it stays admin only and is additionally refused by the controller - /api/config/secret===get===[admin] @@ -117,6 +121,9 @@ resourceRole: - /api/logs/ingest/**===post===[admin,user] - /api/observability/logs===delete===[admin] - /api/observability/**===get===[admin,user,guest] + - /api/account/token===get===[admin] + - /api/account/token/**===post===[admin] + - /api/account/token/**===delete===[admin] # The OpenAPI document is a map of every route, parameter and model, so it is # scoped like any other administrative resource instead of being anonymous - /v3/api-docs/**===get===[admin] @@ -151,6 +158,9 @@ excludedResource: - /passport/**===get - /status/**===get - /log/**===get + - /observability/**===get + - /metrics/**===get + - /trace/**===get - /**/*.html===get - /**/*.js===get - /**/*.css===get diff --git a/script/docker-compose/hertzbeat-postgresql-greptimedb/conf/sureness.yml b/script/docker-compose/hertzbeat-postgresql-greptimedb/conf/sureness.yml index 74a4ce4358..2749420cbe 100644 --- a/script/docker-compose/hertzbeat-postgresql-greptimedb/conf/sureness.yml +++ b/script/docker-compose/hertzbeat-postgresql-greptimedb/conf/sureness.yml @@ -66,6 +66,10 @@ resourceRole: - /api/collector/**===post===[admin,user] - /api/collector/**===put===[admin,user] - /api/collector/**===delete===[admin] + - /api/plugin/**===get===[admin] + - /api/plugin/**===post===[admin] + - /api/plugin/**===put===[admin] + - /api/plugin/**===delete===[admin] # the secret config holds the jwt signing key and the aes key protecting stored # credentials, so it stays admin only and is additionally refused by the controller - /api/config/secret===get===[admin] @@ -117,6 +121,9 @@ resourceRole: - /api/logs/ingest/**===post===[admin,user] - /api/observability/logs===delete===[admin] - /api/observability/**===get===[admin,user,guest] + - /api/account/token===get===[admin] + - /api/account/token/**===post===[admin] + - /api/account/token/**===delete===[admin] # The OpenAPI document is a map of every route, parameter and model, so it is # scoped like any other administrative resource instead of being anonymous - /v3/api-docs/**===get===[admin] diff --git a/script/docker-compose/hertzbeat-postgresql-victoria-metrics/conf/sureness.yml b/script/docker-compose/hertzbeat-postgresql-victoria-metrics/conf/sureness.yml index bc25d799ad..2749420cbe 100644 --- a/script/docker-compose/hertzbeat-postgresql-victoria-metrics/conf/sureness.yml +++ b/script/docker-compose/hertzbeat-postgresql-victoria-metrics/conf/sureness.yml @@ -66,6 +66,10 @@ resourceRole: - /api/collector/**===post===[admin,user] - /api/collector/**===put===[admin,user] - /api/collector/**===delete===[admin] + - /api/plugin/**===get===[admin] + - /api/plugin/**===post===[admin] + - /api/plugin/**===put===[admin] + - /api/plugin/**===delete===[admin] # the secret config holds the jwt signing key and the aes key protecting stored # credentials, so it stays admin only and is additionally refused by the controller - /api/config/secret===get===[admin] @@ -117,6 +121,9 @@ resourceRole: - /api/logs/ingest/**===post===[admin,user] - /api/observability/logs===delete===[admin] - /api/observability/**===get===[admin,user,guest] + - /api/account/token===get===[admin] + - /api/account/token/**===post===[admin] + - /api/account/token/**===delete===[admin] # The OpenAPI document is a map of every route, parameter and model, so it is # scoped like any other administrative resource instead of being anonymous - /v3/api-docs/**===get===[admin] @@ -151,6 +158,9 @@ excludedResource: - /passport/**===get - /status/**===get - /log/**===get + - /observability/**===get + - /metrics/**===get + - /trace/**===get - /**/*.html===get - /**/*.js===get - /**/*.css===get diff --git a/script/sureness.yml b/script/sureness.yml index 74a4ce4358..2749420cbe 100644 --- a/script/sureness.yml +++ b/script/sureness.yml @@ -66,6 +66,10 @@ resourceRole: - /api/collector/**===post===[admin,user] - /api/collector/**===put===[admin,user] - /api/collector/**===delete===[admin] + - /api/plugin/**===get===[admin] + - /api/plugin/**===post===[admin] + - /api/plugin/**===put===[admin] + - /api/plugin/**===delete===[admin] # the secret config holds the jwt signing key and the aes key protecting stored # credentials, so it stays admin only and is additionally refused by the controller - /api/config/secret===get===[admin] @@ -117,6 +121,9 @@ resourceRole: - /api/logs/ingest/**===post===[admin,user] - /api/observability/logs===delete===[admin] - /api/observability/**===get===[admin,user,guest] + - /api/account/token===get===[admin] + - /api/account/token/**===post===[admin] + - /api/account/token/**===delete===[admin] # The OpenAPI document is a map of every route, parameter and model, so it is # scoped like any other administrative resource instead of being anonymous - /v3/api-docs/**===get===[admin]