This is an automated email from the ASF dual-hosted git repository.
gongchao pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/hertzbeat.git
The following commit(s) were added to refs/heads/master by this push:
new c10ebf0b6 [doc] add security model doc and update contributors (#2846)
c10ebf0b6 is described below
commit c10ebf0b601e18864c282b6cb4fb384c5c7ef596
Author: tomsun28 <[email protected]>
AuthorDate: Wed Dec 4 13:58:16 2024 +0800
[doc] add security model doc and update contributors (#2846)
Signed-off-by: tomsun28 <[email protected]>
Co-authored-by: Calvin <[email protected]>
---
.all-contributorsrc | 27 +++++++++++++++++
README.md | 5 +++-
README_CN.md | 5 +++-
home/docs/download.md | 1 +
home/docs/help/security_model.md | 35 ++++++++++++++++++++++
home/docs/introduce.md | 6 ++--
.../en/docusaurus-plugin-content-docs/current.json | 4 +--
.../current/download.md | 1 +
.../current/help/security_model.md | 35 ++++++++++++++++++++++
.../current/introduce.md | 6 ++--
.../version-v1.5.x/introduce.md | 4 +--
home/sidebars.json | 17 ++---------
home/src/pages/team/index.jsx | 12 ++++++++
home/versioned_docs/version-v1.5.x/introduce.md | 4 +--
14 files changed, 133 insertions(+), 29 deletions(-)
diff --git a/.all-contributorsrc b/.all-contributorsrc
index e92af30d5..530103e47 100644
--- a/.all-contributorsrc
+++ b/.all-contributorsrc
@@ -2108,6 +2108,33 @@
"contributions": [
"code"
]
+ },
+ {
+ "login": "starryCoder",
+ "name": "starryCoder",
+ "avatar_url": "https://avatars.githubusercontent.com/u/46510059?v=4",
+ "profile": "https://github.com/starryCoder",
+ "contributions": [
+ "code"
+ ]
+ },
+ {
+ "login": "hasimmollah",
+ "name": "hasimmollah",
+ "avatar_url": "https://avatars.githubusercontent.com/u/32538599?v=4",
+ "profile": "https://github.com/hasimmollah",
+ "contributions": [
+ "code"
+ ]
+ },
+ {
+ "login": "ayu-v0",
+ "name": "Ayu",
+ "avatar_url": "https://avatars.githubusercontent.com/u/127600988?v=4",
+ "profile": "https://github.com/ayu-v0",
+ "contributions": [
+ "code"
+ ]
}
],
"contributorsPerLine": 7,
diff --git a/README.md b/README.md
index 46313676b..01e8099c9 100644
--- a/README.md
+++ b/README.md
@@ -77,7 +77,7 @@
[ClickHouse](https://raw.githubusercontent.com/apache/hertzbeat/master/hertzbeat-manager/src/main/resources/define/app-clickhouse.yml),
[IoTDB](https://raw.githubusercontent.com/apache/hertzbeat/master/hertzbeat-manager/src/main/resources/define/app-iotdb.yml),
[Redis
Cluster](https://raw.githubusercontent.com/apache/hertzbeat/master/hertzbeat-manager/src/main/resources/define/app-redis_cluster.yml),
[Redis
Sentinel](https://raw.githubusercontent.com/apache/hertzbeat/master/hertzbeat-manager/src/main/resources/define/app-redis_sentinel.yml)
[Doris
BE](https://github.com/apache/hertzbeat/blob/master/hertzbeat-manager/src/main/resources/define/app-doris_be.yml),
[Doris
FE](https://github.com/apache/hertzbeat/blob/master/hertzbeat-manager/src/main/resources/define/app-doris_fe.yml),
-
[Memcached](https://github.com/apache/hertzbeat/blob/master/hertzbeat-manager/src/main/resources/define/app-memcached.yml),
[NebulaGraph](https://github.com/apache/hertzbeat/blob/master/hertzbeat-manager/src/main/resources/define/app-nebulaGraph.yml)
+
[Memcached](https://github.com/apache/hertzbeat/blob/master/hertzbeat-manager/src/main/resources/define/app-memcached.yml),
[NebulaGraph](https://github.com/apache/hertzbeat/blob/master/hertzbeat-manager/src/main/resources/define/app-nebula_graph.yml)
-
[Linux](https://raw.githubusercontent.com/apache/hertzbeat/master/hertzbeat-manager/src/main/resources/define/app-linux.yml),
[Ubuntu](https://raw.githubusercontent.com/apache/hertzbeat/master/hertzbeat-manager/src/main/resources/define/app-ubuntu.yml),
[CentOS](https://raw.githubusercontent.com/apache/hertzbeat/master/hertzbeat-manager/src/main/resources/define/app-centos.yml),
[Windows](https://raw.githubusercontent.com/apache/hertzbeat/master/hertzbeat-manager/src/main/resources/define/app-windows.yml),
[EulerOS](https://raw.githubusercontent.com/apache/hertzbeat/master/hertzbeat-manager/src/main/resources/define/app-euleros.yml),
[Fedora
CoreOS](https://raw.githubusercontent.com/apache/hertzbeat/master/hertzbeat-manager/src/main/resources/define/app-coreos.yml),
@@ -480,6 +480,9 @@ Thanks to these wonderful people, welcome to join us:
</tr>
<tr>
<td align="center" valign="top" width="14.28%"><a
href="https://github.com/All-The-Best-for"><img
src="https://avatars.githubusercontent.com/u/76414672?v=4?s=100" width="100px;"
alt="wbs99"/><br /><sub><b>wbs99</b></sub></a><br /><a
href="https://github.com/apache/hertzbeat/commits?author=All-The-Best-for"
title="Code">💻</a></td>
+ <td align="center" valign="top" width="14.28%"><a
href="https://github.com/starryCoder"><img
src="https://avatars.githubusercontent.com/u/46510059?v=4?s=100" width="100px;"
alt="starryCoder"/><br /><sub><b>starryCoder</b></sub></a><br /><a
href="https://github.com/apache/hertzbeat/commits?author=starryCoder"
title="Code">💻</a></td>
+ <td align="center" valign="top" width="14.28%"><a
href="https://github.com/hasimmollah"><img
src="https://avatars.githubusercontent.com/u/32538599?v=4?s=100" width="100px;"
alt="hasimmollah"/><br /><sub><b>hasimmollah</b></sub></a><br /><a
href="https://github.com/apache/hertzbeat/commits?author=hasimmollah"
title="Code">💻</a></td>
+ <td align="center" valign="top" width="14.28%"><a
href="https://github.com/ayu-v0"><img
src="https://avatars.githubusercontent.com/u/127600988?v=4?s=100"
width="100px;" alt="Ayu"/><br /><sub><b>Ayu</b></sub></a><br /><a
href="https://github.com/apache/hertzbeat/commits?author=ayu-v0"
title="Code">💻</a></td>
</tr>
</tbody>
</table>
diff --git a/README_CN.md b/README_CN.md
index 5b6f5d6b9..057b9aa89 100644
--- a/README_CN.md
+++ b/README_CN.md
@@ -78,7 +78,7 @@
[ClickHouse](https://raw.githubusercontent.com/apache/hertzbeat/master/hertzbeat-manager/src/main/resources/define/app-clickhouse.yml),
[IoTDB](https://raw.githubusercontent.com/apache/hertzbeat/master/hertzbeat-manager/src/main/resources/define/app-iotdb.yml),
[Redis
Cluster](https://raw.githubusercontent.com/apache/hertzbeat/master/hertzbeat-manager/src/main/resources/define/app-redis_cluster.yml),
[Redis
Sentinel](https://raw.githubusercontent.com/apache/hertzbeat/master/hertzbeat-manager/src/main/resources/define/app-redis_sentinel.yml)
[Doris
BE](https://github.com/apache/hertzbeat/blob/master/hertzbeat-manager/src/main/resources/define/app-doris_be.yml),
[Doris
FE](https://github.com/apache/hertzbeat/blob/master/hertzbeat-manager/src/main/resources/define/app-doris_fe.yml),
-
[Memcached](https://github.com/apache/hertzbeat/blob/master/hertzbeat-manager/src/main/resources/define/app-memcached.yml),
[NebulaGraph](https://github.com/apache/hertzbeat/blob/master/hertzbeat-manager/src/main/resources/define/app-nebulaGraph.yml)
+
[Memcached](https://github.com/apache/hertzbeat/blob/master/hertzbeat-manager/src/main/resources/define/app-memcached.yml),
[NebulaGraph](https://github.com/apache/hertzbeat/blob/master/hertzbeat-manager/src/main/resources/define/app-nebula_graph.yml)
-
[Linux](https://raw.githubusercontent.com/apache/hertzbeat/master/hertzbeat-manager/src/main/resources/define/app-linux.yml),
[Ubuntu](https://raw.githubusercontent.com/apache/hertzbeat/master/hertzbeat-manager/src/main/resources/define/app-ubuntu.yml),
[CentOS](https://raw.githubusercontent.com/apache/hertzbeat/master/hertzbeat-manager/src/main/resources/define/app-centos.yml),
[Windows](https://raw.githubusercontent.com/apache/hertzbeat/master/hertzbeat-manager/src/main/resources/define/app-windows.yml),
[EulerOS](https://raw.githubusercontent.com/apache/hertzbeat/master/hertzbeat-manager/src/main/resources/define/app-euleros.yml),
[Fedora
CoreOS](https://raw.githubusercontent.com/apache/hertzbeat/master/hertzbeat-manager/src/main/resources/define/app-coreos.yml),
@@ -479,6 +479,9 @@ Thanks these wonderful people, welcome to join us:
</tr>
<tr>
<td align="center" valign="top" width="14.28%"><a
href="https://github.com/All-The-Best-for"><img
src="https://avatars.githubusercontent.com/u/76414672?v=4?s=100" width="100px;"
alt="wbs99"/><br /><sub><b>wbs99</b></sub></a><br /><a
href="https://github.com/apache/hertzbeat/commits?author=All-The-Best-for"
title="Code">💻</a></td>
+ <td align="center" valign="top" width="14.28%"><a
href="https://github.com/starryCoder"><img
src="https://avatars.githubusercontent.com/u/46510059?v=4?s=100" width="100px;"
alt="starryCoder"/><br /><sub><b>starryCoder</b></sub></a><br /><a
href="https://github.com/apache/hertzbeat/commits?author=starryCoder"
title="Code">💻</a></td>
+ <td align="center" valign="top" width="14.28%"><a
href="https://github.com/hasimmollah"><img
src="https://avatars.githubusercontent.com/u/32538599?v=4?s=100" width="100px;"
alt="hasimmollah"/><br /><sub><b>hasimmollah</b></sub></a><br /><a
href="https://github.com/apache/hertzbeat/commits?author=hasimmollah"
title="Code">💻</a></td>
+ <td align="center" valign="top" width="14.28%"><a
href="https://github.com/ayu-v0"><img
src="https://avatars.githubusercontent.com/u/127600988?v=4?s=100"
width="100px;" alt="Ayu"/><br /><sub><b>Ayu</b></sub></a><br /><a
href="https://github.com/apache/hertzbeat/commits?author=ayu-v0"
title="Code">💻</a></td>
</tr>
</tbody>
</table>
diff --git a/home/docs/download.md b/home/docs/download.md
index 737bb6dbf..e880ffd15 100644
--- a/home/docs/download.md
+++ b/home/docs/download.md
@@ -23,6 +23,7 @@ Previous releases of HertzBeat may be affected by security
issues, please use th
| Version | Date | Download
[...]
|---------|------------|------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
[...]
| v1.6.1 | 2024.10.29 |
[apache-hertzbeat-1.6.1-incubating-bin.tar.gz](https://dist.apache.org/repos/dist/release/incubator/hertzbeat/1.6.1/apache-hertzbeat-1.6.1-incubating-bin.tar.gz)
(HertzBeat) (
[signature](https://downloads.apache.org/incubator/hertzbeat/1.6.1/apache-hertzbeat-1.6.1-incubating-bin.tar.gz.asc)
,
[sha512](https://downloads.apache.org/incubator/hertzbeat/1.6.1/apache-hertzbeat-1.6.1-incubating-bin.tar.gz.sha512)
) <br/> [apache-hertzbeat-collector-1.6.1-incubating-bi [...]
+| v1.6.0 | 2024.06.10 |
[apache-hertzbeat-1.6.0-incubating-bin.tar.gz](https://downloads.apache.org/incubator/hertzbeat/1.6.0/apache-hertzbeat-1.6.0-incubating-bin.tar.gz)
(HertzBeat) (
[signature](https://downloads.apache.org/incubator/hertzbeat/1.6.0/apache-hertzbeat-1.6.0-incubating-bin.tar.gz.asc)
,
[sha512](https://downloads.apache.org/incubator/hertzbeat/1.6.0/apache-hertzbeat-1.6.0-incubating-bin.tar.gz.sha512)
) <br/> [apache-hertzbeat-collector-1.6.0-incubating-bin.tar.gz](http [...]
## Release Docker Image
diff --git a/home/docs/help/security_model.md b/home/docs/help/security_model.md
new file mode 100644
index 000000000..5e0826a86
--- /dev/null
+++ b/home/docs/help/security_model.md
@@ -0,0 +1,35 @@
+---
+id: security_model
+title: Security Model
+sidebar_label: Security Model
+---
+
+:::tip
+Apache HertzBeat is a highly extensible system that provides users with a lot
of custom capabilities. Users can enhance the platform by customizing
monitoring templates, custom monitoring, custom plugins, etc. In this case,
security is very important.
+This document will introduce the security model of Apache HertzBeat.
+The security model here mainly involves the security boundaries that users
need to pay attention to in the extension process, and how to ensure that user
customization will not cause security risks to the system.
+:::
+
+## User Permission Security
+
+Apache HertzBeat uses [Sureness](https://github.com/dromara/sureness) to
support system user security.
+
+Use the `sureness.yml` provided by Sureness to configure user accounts, roles,
API resources, etc. It is strongly recommended that the initial user modify the
account password. For details, refer to [Account Permission
Management](../start/account-modify)
+
+## Monitoring Template Security
+
+Apache HertzBeat provides monitoring template functions, and users can define
monitoring rules by configuring custom scripts in the monitoring template.
+
+The script types include `SQL` `SHELL` `JMX` `URL` `API`, etc. When users
customize scripts, they need to ensure the security of the custom scripts
themselves to avoid malicious code in the scripts.
+
+## Custom Plugin Security
+
+Apache HertzBeat supports users to upload custom code plugins to run in the
life cycle of multiple systems, and users need to ensure the security of the
custom plugin code themselves.
+
+## Custom Collector Security
+
+Apache HertzBeat supports users to customize collectors to personalize the
collection of monitoring indicators, and users need to ensure the security of
the custom collectors themselves.
+
+## Security Constraints in Other Customizations
+
+Apache HertzBeat provides a variety of system extension methods and custom
capabilities. Users need to pay attention to the security of customizations
during use. Of course, all extension capabilities need to be within the scope
of authenticated users.
diff --git a/home/docs/introduce.md b/home/docs/introduce.md
index 897f2f02a..45bc579ee 100644
--- a/home/docs/introduce.md
+++ b/home/docs/introduce.md
@@ -69,7 +69,7 @@ Do you believe that users can just write a monitoring
template on the UI page, c
[ClickHouse](https://raw.githubusercontent.com/apache/hertzbeat/master/hertzbeat-manager/src/main/resources/define/app-clickhouse.yml),
[IoTDB](https://raw.githubusercontent.com/apache/hertzbeat/master/hertzbeat-manager/src/main/resources/define/app-iotdb.yml),
[Redis
Cluster](https://raw.githubusercontent.com/apache/hertzbeat/master/hertzbeat-manager/src/main/resources/define/app-redis_cluster.yml),
[Redis
Sentinel](https://raw.githubusercontent.com/apache/hertzbeat/master/hertzbeat-manager/src/main/resources/define/app-redis_sentinel.yml)
[Doris
BE](https://github.com/apache/hertzbeat/blob/master/hertzbeat-manager/src/main/resources/define/app-doris_be.yml),
[Doris
FE](https://github.com/apache/hertzbeat/blob/master/hertzbeat-manager/src/main/resources/define/app-doris_fe.yml),
-
[Memcached](https://github.com/apache/hertzbeat/blob/master/hertzbeat-manager/src/main/resources/define/app-memcached.yml),
[NebulaGraph](https://github.com/apache/hertzbeat/blob/master/hertzbeat-manager/src/main/resources/define/app-nebulaGraph.yml)
+
[Memcached](https://github.com/apache/hertzbeat/blob/master/hertzbeat-manager/src/main/resources/define/app-memcached.yml),
[NebulaGraph](https://github.com/apache/hertzbeat/blob/master/hertzbeat-manager/src/main/resources/define/app-nebula_graph.yml)
*
[Linux](https://raw.githubusercontent.com/apache/hertzbeat/master/hertzbeat-manager/src/main/resources/define/app-linux.yml),
[Ubuntu](https://raw.githubusercontent.com/apache/hertzbeat/master/hertzbeat-manager/src/main/resources/define/app-ubuntu.yml),
[CentOS](https://raw.githubusercontent.com/apache/hertzbeat/master/hertzbeat-manager/src/main/resources/define/app-centos.yml),
[Windows](https://raw.githubusercontent.com/apache/hertzbeat/master/hertzbeat-manager/src/main/resources/define/app-windows.yml),
[EulerOS](https://raw.githubusercontent.com/apache/hertzbeat/master/hertzbeat-manager/src/main/resources/define/app-euleros.yml),
[Fedora
CoreOS](https://raw.githubusercontent.com/apache/hertzbeat/master/hertzbeat-manager/src/main/resources/define/app-coreos.yml),
@@ -144,7 +144,7 @@ In an isolated network where multiple networks are not
connected, we need to dep
* An open source collaboration product using the `Apache2` protocol,
maintained by a free and open source community.
* No monitoring number `License`, monitoring type and other pseudo-open source
restrictions .
* Built on `Java+SpringBoot+TypeScript+Angular` mainstream technology stack ,
convenient secondary development .
-* Open source is not the same as free, dev based on HertzBeat must retain
copyright, etc.
+* Dev based on HertzBeat need retain copyright.
**HertzBeat has been included in the [CNCF Observability And Analysis -
Monitoring
Landscape](https://landscape.cncf.io/card-mode?category=monitoring&grouping=category)**
@@ -200,7 +200,7 @@ Built-in support for monitoring types include:
[ClickHouse](https://raw.githubusercontent.com/apache/hertzbeat/master/hertzbeat-manager/src/main/resources/define/app-clickhouse.yml),
[IoTDB](https://raw.githubusercontent.com/apache/hertzbeat/master/hertzbeat-manager/src/main/resources/define/app-iotdb.yml),
[Redis
Cluster](https://raw.githubusercontent.com/apache/hertzbeat/master/hertzbeat-manager/src/main/resources/define/app-redis_cluster.yml),
[Redis
Sentinel](https://raw.githubusercontent.com/apache/hertzbeat/master/hertzbeat-manager/src/main/resources/define/app-redis_sentinel.yml)
[Doris
BE](https://github.com/apache/hertzbeat/blob/master/hertzbeat-manager/src/main/resources/define/app-doris_be.yml),
[Doris
FE](https://github.com/apache/hertzbeat/blob/master/hertzbeat-manager/src/main/resources/define/app-doris_fe.yml),
-
[Memcached](https://github.com/apache/hertzbeat/blob/master/hertzbeat-manager/src/main/resources/define/app-memcached.yml),
[NebulaGraph](https://github.com/apache/hertzbeat/blob/master/hertzbeat-manager/src/main/resources/define/app-nebulaGraph.yml)
+
[Memcached](https://github.com/apache/hertzbeat/blob/master/hertzbeat-manager/src/main/resources/define/app-memcached.yml),
[NebulaGraph](https://github.com/apache/hertzbeat/blob/master/hertzbeat-manager/src/main/resources/define/app-nebula_graph.yml)
*
[Linux](https://raw.githubusercontent.com/apache/hertzbeat/master/hertzbeat-manager/src/main/resources/define/app-linux.yml),
[Ubuntu](https://raw.githubusercontent.com/apache/hertzbeat/master/hertzbeat-manager/src/main/resources/define/app-ubuntu.yml),
[CentOS](https://raw.githubusercontent.com/apache/hertzbeat/master/hertzbeat-manager/src/main/resources/define/app-centos.yml),
[Windows](https://raw.githubusercontent.com/apache/hertzbeat/master/hertzbeat-manager/src/main/resources/define/app-windows.yml),
[EulerOS](https://raw.githubusercontent.com/apache/hertzbeat/master/hertzbeat-manager/src/main/resources/define/app-euleros.yml),
[Fedora
CoreOS](https://raw.githubusercontent.com/apache/hertzbeat/master/hertzbeat-manager/src/main/resources/define/app-coreos.yml),
diff --git a/home/i18n/en/docusaurus-plugin-content-docs/current.json
b/home/i18n/en/docusaurus-plugin-content-docs/current.json
index c111a0d4a..3ac558485 100644
--- a/home/i18n/en/docusaurus-plugin-content-docs/current.json
+++ b/home/i18n/en/docusaurus-plugin-content-docs/current.json
@@ -27,8 +27,8 @@
"message": "TELNET Protocol",
"description": "The label for category telnet in sidebar docs"
},
- "sidebar.docs.category.help": {
- "message": "Guides",
+ "sidebar.docs.category.guides": {
+ "message": "Use Guides",
"description": "The label for category guides in sidebar docs"
},
"sidebar.docs.category.service": {
diff --git a/home/i18n/zh-cn/docusaurus-plugin-content-docs/current/download.md
b/home/i18n/zh-cn/docusaurus-plugin-content-docs/current/download.md
index 1fc7ed6e8..c5eaa5207 100644
--- a/home/i18n/zh-cn/docusaurus-plugin-content-docs/current/download.md
+++ b/home/i18n/zh-cn/docusaurus-plugin-content-docs/current/download.md
@@ -23,6 +23,7 @@ sidebar_label: Download
| 版本 | 日期 | 下载
[...]
|--------|------------|-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
[...]
| v1.6.1 | 2024.10.29 |
[apache-hertzbeat-1.6.1-incubating-bin.tar.gz](https://downloads.apache.org/incubator/hertzbeat/1.6.1/apache-hertzbeat-1.6.1-incubating-bin.tar.gz)
(HertzBeat 主程序) (
[signature](https://downloads.apache.org/incubator/hertzbeat/1.6.1/apache-hertzbeat-1.6.1-incubating-bin.tar.gz.asc)
,
[sha512](https://downloads.apache.org/incubator/hertzbeat/1.6.1/apache-hertzbeat-1.6.1-incubating-bin.tar.gz.sha512)
) <br/> [apache-hertzbeat-collector-1.6.1-incubating-bin.tar.gz](h [...]
+| v1.6.0 | 2024.06.10 |
[apache-hertzbeat-1.6.0-incubating-bin.tar.gz](https://downloads.apache.org/incubator/hertzbeat/1.6.0/apache-hertzbeat-1.6.0-incubating-bin.tar.gz)
(HertzBeat 主程序) (
[signature](https://downloads.apache.org/incubator/hertzbeat/1.6.0/apache-hertzbeat-1.6.0-incubating-bin.tar.gz.asc)
,
[sha512](https://downloads.apache.org/incubator/hertzbeat/1.6.0/apache-hertzbeat-1.6.0-incubating-bin.tar.gz.sha512)
) <br/> [apache-hertzbeat-collector-1.6.0-incubating-bin.tar.gz](h [...]
## Docker 镜像版本
diff --git
a/home/i18n/zh-cn/docusaurus-plugin-content-docs/current/help/security_model.md
b/home/i18n/zh-cn/docusaurus-plugin-content-docs/current/help/security_model.md
new file mode 100644
index 000000000..f5b029b62
--- /dev/null
+++
b/home/i18n/zh-cn/docusaurus-plugin-content-docs/current/help/security_model.md
@@ -0,0 +1,35 @@
+---
+id: security_model
+title: 安全模型
+sidebar_label: 安全模型
+---
+
+:::tip
+Apache HertzBeat
是一个高可扩展的系统,其提供用户大量的自定义能力,用户可以通过自定义监控模版,自定义监控器,自定义插件等来对平台增强。在这种情况下,安全性是非常重要的。
+本文档将介绍 Apache HertzBeat 的安全模型。
+这里的安全模型主要涉及用户在扩展过程中需要注意的安全边界,以及如何保证用户的自定义不会对系统造成安全隐患。
+:::
+
+## 用户权限安全
+
+Apache HertzBeat 使用 [Sureness](https://github.com/dromara/sureness) 来支撑系统用户安全。
+
+使用 Sureness 提供的 `sureness.yml` 来配置用户账户,角色,API资源等,强烈建议初始用户修改账户密码,具体参考
[账户权限管理](../start/account-modify)
+
+## 监控模版安全
+
+Apache HertzBeat 提供了监控模版功能,用户可以通过配置监控模版里面的自定义脚本来定义监控规则。
+
+脚本类型包含 `SQL` `SHELL` `JMX` `URL` `API` 等,当用户自定义脚本时需要自行保证自定义脚本的安全性,避免脚本中包含恶意代码等。
+
+## 自定义插件安全
+
+Apache HertzBeat 支持用户上传自定义代码插件在多个系统的生命周期下运行,用户需要自行保证自定义插件代码的安全性。
+
+## 自定义采集器安全
+
+Apache HertzBeat 支持用户自定义采集器来个性化采集监控指标等,用户需要自行保证自定义采集器的安全性。
+
+## 其它自定义下的安全约束
+
+Apache HertzBeat 提供多种系统扩展方式和自定义能力,用户在使用过程中需注意自定义的安全性。当然所有扩展能力都是需在认证用户范围。
diff --git
a/home/i18n/zh-cn/docusaurus-plugin-content-docs/current/introduce.md
b/home/i18n/zh-cn/docusaurus-plugin-content-docs/current/introduce.md
index 877a0e95f..3d0db6ff5 100644
--- a/home/i18n/zh-cn/docusaurus-plugin-content-docs/current/introduce.md
+++ b/home/i18n/zh-cn/docusaurus-plugin-content-docs/current/introduce.md
@@ -68,7 +68,7 @@ HertzBeat 使用这些已有的标准协议或规范,将他们抽象规范可
[ClickHouse](https://raw.githubusercontent.com/apache/hertzbeat/master/hertzbeat-manager/src/main/resources/define/app-clickhouse.yml),
[IoTDB](https://raw.githubusercontent.com/apache/hertzbeat/master/hertzbeat-manager/src/main/resources/define/app-iotdb.yml),
[Redis
Cluster](https://raw.githubusercontent.com/apache/hertzbeat/master/hertzbeat-manager/src/main/resources/define/app-redis_cluster.yml),
[Redis
Sentinel](https://raw.githubusercontent.com/apache/hertzbeat/master/hertzbeat-manager/src/main/resources/define/app-redis_sentinel.yml)
[Doris
BE](https://github.com/apache/hertzbeat/blob/master/hertzbeat-manager/src/main/resources/define/app-doris_be.yml),
[Doris
FE](https://github.com/apache/hertzbeat/blob/master/hertzbeat-manager/src/main/resources/define/app-doris_fe.yml),
-
[Memcached](https://github.com/apache/hertzbeat/blob/master/hertzbeat-manager/src/main/resources/define/app-memcached.yml),
[NebulaGraph](https://github.com/apache/hertzbeat/blob/master/hertzbeat-manager/src/main/resources/define/app-nebulaGraph.yml)
+
[Memcached](https://github.com/apache/hertzbeat/blob/master/hertzbeat-manager/src/main/resources/define/app-memcached.yml),
[NebulaGraph](https://github.com/apache/hertzbeat/blob/master/hertzbeat-manager/src/main/resources/define/app-nebula_graph.yml)
-
[Linux](https://raw.githubusercontent.com/apache/hertzbeat/master/hertzbeat-manager/src/main/resources/define/app-linux.yml),
[Ubuntu](https://raw.githubusercontent.com/apache/hertzbeat/master/hertzbeat-manager/src/main/resources/define/app-ubuntu.yml),
[CentOS](https://raw.githubusercontent.com/apache/hertzbeat/master/hertzbeat-manager/src/main/resources/define/app-centos.yml),
[Windows](https://raw.githubusercontent.com/apache/hertzbeat/master/hertzbeat-manager/src/main/resources/define/app-windows.yml),
[EulerOS](https://raw.githubusercontent.com/apache/hertzbeat/master/hertzbeat-manager/src/main/resources/define/app-euleros.yml),
[Fedora
CoreOS](https://raw.githubusercontent.com/apache/hertzbeat/master/hertzbeat-manager/src/main/resources/define/app-coreos.yml),
@@ -144,7 +144,7 @@ HertzBeat 使用这些已有的标准协议或规范,将他们抽象规范可
- Apache 基金会孵化器下开源项目,Gitee GVP,使用`Apache2`协议,由自由开放的开源社区主导维护的开源协作产品。
- 无监控数量`License`,监控类型等伪开源限制。
- 基于`Java+SpringBoot+TypeScript+Angular`主流技术栈构建,方便的二次开发。
-- 开源不等同于免费,基于HertzBeat二次开发需保留版权等。
+- 基于 HertzBeat 二次开发需保留版权。
**HertzBeat 已被
[CNCF云原生全景图](https://landscape.cncf.io/card-mode?category=monitoring&grouping=category)
收录**
@@ -199,7 +199,7 @@ Docker 环境下运行一条命令即可:`docker run -d -p 1157:1157 -p 1158:1
[ClickHouse](https://raw.githubusercontent.com/apache/hertzbeat/master/hertzbeat-manager/src/main/resources/define/app-clickhouse.yml),
[IoTDB](https://raw.githubusercontent.com/apache/hertzbeat/master/hertzbeat-manager/src/main/resources/define/app-iotdb.yml),
[Redis
Cluster](https://raw.githubusercontent.com/apache/hertzbeat/master/hertzbeat-manager/src/main/resources/define/app-redis_cluster.yml),
[Redis
Sentinel](https://raw.githubusercontent.com/apache/hertzbeat/master/hertzbeat-manager/src/main/resources/define/app-redis_sentinel.yml)
[Doris
BE](https://github.com/apache/hertzbeat/blob/master/hertzbeat-manager/src/main/resources/define/app-doris_be.yml),
[Doris
FE](https://github.com/apache/hertzbeat/blob/master/hertzbeat-manager/src/main/resources/define/app-doris_fe.yml),
-
[Memcached](https://github.com/apache/hertzbeat/blob/master/hertzbeat-manager/src/main/resources/define/app-memcached.yml),
[NebulaGraph](https://github.com/apache/hertzbeat/blob/master/hertzbeat-manager/src/main/resources/define/app-nebulaGraph.yml)
+
[Memcached](https://github.com/apache/hertzbeat/blob/master/hertzbeat-manager/src/main/resources/define/app-memcached.yml),
[NebulaGraph](https://github.com/apache/hertzbeat/blob/master/hertzbeat-manager/src/main/resources/define/app-nebula_graph.yml)
-
[Linux](https://raw.githubusercontent.com/apache/hertzbeat/master/hertzbeat-manager/src/main/resources/define/app-linux.yml),
[Ubuntu](https://raw.githubusercontent.com/apache/hertzbeat/master/hertzbeat-manager/src/main/resources/define/app-ubuntu.yml),
[CentOS](https://raw.githubusercontent.com/apache/hertzbeat/master/hertzbeat-manager/src/main/resources/define/app-centos.yml),
[Windows](https://raw.githubusercontent.com/apache/hertzbeat/master/hertzbeat-manager/src/main/resources/define/app-windows.yml),
[EulerOS](https://raw.githubusercontent.com/apache/hertzbeat/master/hertzbeat-manager/src/main/resources/define/app-euleros.yml),
[Fedora
CoreOS](https://raw.githubusercontent.com/apache/hertzbeat/master/hertzbeat-manager/src/main/resources/define/app-coreos.yml),
diff --git
a/home/i18n/zh-cn/docusaurus-plugin-content-docs/version-v1.5.x/introduce.md
b/home/i18n/zh-cn/docusaurus-plugin-content-docs/version-v1.5.x/introduce.md
index b26fa4850..c43724842 100644
--- a/home/i18n/zh-cn/docusaurus-plugin-content-docs/version-v1.5.x/introduce.md
+++ b/home/i18n/zh-cn/docusaurus-plugin-content-docs/version-v1.5.x/introduce.md
@@ -68,7 +68,7 @@ HertzBeat 使用这些已有的标准协议或规范,将他们抽象规范可
[ClickHouse](https://raw.githubusercontent.com/apache/hertzbeat/master/hertzbeat-manager/src/main/resources/define/app-clickhouse.yml),
[IoTDB](https://raw.githubusercontent.com/apache/hertzbeat/master/hertzbeat-manager/src/main/resources/define/app-iotdb.yml),
[Redis
Cluster](https://raw.githubusercontent.com/apache/hertzbeat/master/hertzbeat-manager/src/main/resources/define/app-redis_cluster.yml),
[Redis
Sentinel](https://raw.githubusercontent.com/apache/hertzbeat/master/hertzbeat-manager/src/main/resources/define/app-redis_sentinel.yml)
[Doris
BE](https://github.com/apache/hertzbeat/blob/master/hertzbeat-manager/src/main/resources/define/app-doris_be.yml),
[Doris
FE](https://github.com/apache/hertzbeat/blob/master/hertzbeat-manager/src/main/resources/define/app-doris_fe.yml),
-
[Memcached](https://github.com/apache/hertzbeat/blob/master/hertzbeat-manager/src/main/resources/define/app-memcached.yml),
[NebulaGraph](https://github.com/apache/hertzbeat/blob/master/hertzbeat-manager/src/main/resources/define/app-nebulaGraph.yml)
+
[Memcached](https://github.com/apache/hertzbeat/blob/master/hertzbeat-manager/src/main/resources/define/app-memcached.yml),
[NebulaGraph](https://github.com/apache/hertzbeat/blob/master/hertzbeat-manager/src/main/resources/define/app-nebula_graph.yml)
-
[Linux](https://raw.githubusercontent.com/apache/hertzbeat/master/hertzbeat-manager/src/main/resources/define/app-linux.yml),
[Ubuntu](https://raw.githubusercontent.com/apache/hertzbeat/master/hertzbeat-manager/src/main/resources/define/app-ubuntu.yml),
[CentOS](https://raw.githubusercontent.com/apache/hertzbeat/master/hertzbeat-manager/src/main/resources/define/app-centos.yml),
[Windows](https://raw.githubusercontent.com/apache/hertzbeat/master/hertzbeat-manager/src/main/resources/define/app-windows.yml),
[EulerOS](https://raw.githubusercontent.com/apache/hertzbeat/master/hertzbeat-manager/src/main/resources/define/app-euleros.yml),
[Fedora
CoreOS](https://raw.githubusercontent.com/apache/hertzbeat/master/hertzbeat-manager/src/main/resources/define/app-coreos.yml),
@@ -199,7 +199,7 @@ Docker 环境下运行一条命令即可:`docker run -d -p 1157:1157 -p 1158:1
[ClickHouse](https://raw.githubusercontent.com/apache/hertzbeat/master/hertzbeat-manager/src/main/resources/define/app-clickhouse.yml),
[IoTDB](https://raw.githubusercontent.com/apache/hertzbeat/master/hertzbeat-manager/src/main/resources/define/app-iotdb.yml),
[Redis
Cluster](https://raw.githubusercontent.com/apache/hertzbeat/master/hertzbeat-manager/src/main/resources/define/app-redis_cluster.yml),
[Redis
Sentinel](https://raw.githubusercontent.com/apache/hertzbeat/master/hertzbeat-manager/src/main/resources/define/app-redis_sentinel.yml)
[Doris
BE](https://github.com/apache/hertzbeat/blob/master/hertzbeat-manager/src/main/resources/define/app-doris_be.yml),
[Doris
FE](https://github.com/apache/hertzbeat/blob/master/hertzbeat-manager/src/main/resources/define/app-doris_fe.yml),
-
[Memcached](https://github.com/apache/hertzbeat/blob/master/hertzbeat-manager/src/main/resources/define/app-memcached.yml),
[NebulaGraph](https://github.com/apache/hertzbeat/blob/master/hertzbeat-manager/src/main/resources/define/app-nebulaGraph.yml)
+
[Memcached](https://github.com/apache/hertzbeat/blob/master/hertzbeat-manager/src/main/resources/define/app-memcached.yml),
[NebulaGraph](https://github.com/apache/hertzbeat/blob/master/hertzbeat-manager/src/main/resources/define/app-nebula_graph.yml)
-
[Linux](https://raw.githubusercontent.com/apache/hertzbeat/master/hertzbeat-manager/src/main/resources/define/app-linux.yml),
[Ubuntu](https://raw.githubusercontent.com/apache/hertzbeat/master/hertzbeat-manager/src/main/resources/define/app-ubuntu.yml),
[CentOS](https://raw.githubusercontent.com/apache/hertzbeat/master/hertzbeat-manager/src/main/resources/define/app-centos.yml),
[Windows](https://raw.githubusercontent.com/apache/hertzbeat/master/hertzbeat-manager/src/main/resources/define/app-windows.yml),
[EulerOS](https://raw.githubusercontent.com/apache/hertzbeat/master/hertzbeat-manager/src/main/resources/define/app-euleros.yml),
[Fedora
CoreOS](https://raw.githubusercontent.com/apache/hertzbeat/master/hertzbeat-manager/src/main/resources/define/app-coreos.yml),
diff --git a/home/sidebars.json b/home/sidebars.json
index 23ea39c66..5e701f655 100755
--- a/home/sidebars.json
+++ b/home/sidebars.json
@@ -71,11 +71,12 @@
"label": "guides",
"items": [
"help/guide",
- "help/prometheus",
+ "help/security_model",
{
"type": "category",
"label": "service",
"items": [
+ "help/prometheus",
"help/website",
"help/api",
"help/ping",
@@ -155,13 +156,6 @@
"help/windows_script"
]
},
- {
- "type": "category",
- "label": "server",
- "items": [
- "help/ipmi"
- ]
- },
{
"type": "category",
"label": "mid",
@@ -384,13 +378,6 @@
}
]
},
- {
- "type": "category",
- "label": "Template Marketplace",
- "items": [
- "help/template_marketplace"
- ]
- },
{
"type": "category",
"label": "Others",
diff --git a/home/src/pages/team/index.jsx b/home/src/pages/team/index.jsx
index bc071f9e4..7ad1b2081 100644
--- a/home/src/pages/team/index.jsx
+++ b/home/src/pages/team/index.jsx
@@ -1167,6 +1167,18 @@ export default function () {
src="https://avatars.githubusercontent.com/u/76414672?v=4?s=100" width="100px;"
alt="wbs99"/><br/><sub><b>wbs99</b></sub></a><br/><a
href="https://github.com/apache/hertzbeat/commits?author=All-The-Best-for"
title="Code">💻</a></td>
+ <td align="center" valign="top" width="14.28%"><a
href="https://github.com/starryCoder"><img
+
src="https://avatars.githubusercontent.com/u/46510059?v=4?s=100" width="100px;"
+
alt="starryCoder"/><br/><sub><b>starryCoder</b></sub></a><br/><a
+
href="https://github.com/apache/hertzbeat/commits?author=starryCoder"
title="Code">💻</a></td>
+ <td align="center" valign="top" width="14.28%"><a
href="https://github.com/hasimmollah"><img
+
src="https://avatars.githubusercontent.com/u/32538599?v=4?s=100" width="100px;"
+
alt="hasimmollah"/><br/><sub><b>hasimmollah</b></sub></a><br/><a
+
href="https://github.com/apache/hertzbeat/commits?author=hasimmollah"
title="Code">💻</a></td>
+ <td align="center" valign="top" width="14.28%"><a
href="https://github.com/ayu-v0"><img
+
src="https://avatars.githubusercontent.com/u/127600988?v=4?s=100" width="100px;"
+ alt="Ayu"/><br/><sub><b>Ayu</b></sub></a><br/><a
+
href="https://github.com/apache/hertzbeat/commits?author=ayu-v0"
title="Code">💻</a></td>
</tr>
</tbody>
</table>
diff --git a/home/versioned_docs/version-v1.5.x/introduce.md
b/home/versioned_docs/version-v1.5.x/introduce.md
index 41baac33a..6ae1f37b4 100644
--- a/home/versioned_docs/version-v1.5.x/introduce.md
+++ b/home/versioned_docs/version-v1.5.x/introduce.md
@@ -69,7 +69,7 @@ Do you believe that users can just write a monitoring
template on the UI page, c
[ClickHouse](https://raw.githubusercontent.com/apache/hertzbeat/master/hertzbeat-manager/src/main/resources/define/app-clickhouse.yml),
[IoTDB](https://raw.githubusercontent.com/apache/hertzbeat/master/hertzbeat-manager/src/main/resources/define/app-iotdb.yml),
[Redis
Cluster](https://raw.githubusercontent.com/apache/hertzbeat/master/hertzbeat-manager/src/main/resources/define/app-redis_cluster.yml),
[Redis
Sentinel](https://raw.githubusercontent.com/apache/hertzbeat/master/hertzbeat-manager/src/main/resources/define/app-redis_sentinel.yml)
[Doris
BE](https://github.com/apache/hertzbeat/blob/master/hertzbeat-manager/src/main/resources/define/app-doris_be.yml),
[Doris
FE](https://github.com/apache/hertzbeat/blob/master/hertzbeat-manager/src/main/resources/define/app-doris_fe.yml),
-
[Memcached](https://github.com/apache/hertzbeat/blob/master/hertzbeat-manager/src/main/resources/define/app-memcached.yml),
[NebulaGraph](https://github.com/apache/hertzbeat/blob/master/hertzbeat-manager/src/main/resources/define/app-nebulaGraph.yml)
+
[Memcached](https://github.com/apache/hertzbeat/blob/master/hertzbeat-manager/src/main/resources/define/app-memcached.yml),
[NebulaGraph](https://github.com/apache/hertzbeat/blob/master/hertzbeat-manager/src/main/resources/define/app-nebula_graph.yml)
*
[Linux](https://raw.githubusercontent.com/apache/hertzbeat/master/hertzbeat-manager/src/main/resources/define/app-linux.yml),
[Ubuntu](https://raw.githubusercontent.com/apache/hertzbeat/master/hertzbeat-manager/src/main/resources/define/app-ubuntu.yml),
[CentOS](https://raw.githubusercontent.com/apache/hertzbeat/master/hertzbeat-manager/src/main/resources/define/app-centos.yml),
[Windows](https://raw.githubusercontent.com/apache/hertzbeat/master/hertzbeat-manager/src/main/resources/define/app-windows.yml),
[EulerOS](https://raw.githubusercontent.com/apache/hertzbeat/master/hertzbeat-manager/src/main/resources/define/app-euleros.yml),
[Fedora
CoreOS](https://raw.githubusercontent.com/apache/hertzbeat/master/hertzbeat-manager/src/main/resources/define/app-coreos.yml),
@@ -200,7 +200,7 @@ Built-in support for monitoring types include:
[ClickHouse](https://raw.githubusercontent.com/apache/hertzbeat/master/hertzbeat-manager/src/main/resources/define/app-clickhouse.yml),
[IoTDB](https://raw.githubusercontent.com/apache/hertzbeat/master/hertzbeat-manager/src/main/resources/define/app-iotdb.yml),
[Redis
Cluster](https://raw.githubusercontent.com/apache/hertzbeat/master/hertzbeat-manager/src/main/resources/define/app-redis_cluster.yml),
[Redis
Sentinel](https://raw.githubusercontent.com/apache/hertzbeat/master/hertzbeat-manager/src/main/resources/define/app-redis_sentinel.yml)
[Doris
BE](https://github.com/apache/hertzbeat/blob/master/hertzbeat-manager/src/main/resources/define/app-doris_be.yml),
[Doris
FE](https://github.com/apache/hertzbeat/blob/master/hertzbeat-manager/src/main/resources/define/app-doris_fe.yml),
-
[Memcached](https://github.com/apache/hertzbeat/blob/master/hertzbeat-manager/src/main/resources/define/app-memcached.yml),
[NebulaGraph](https://github.com/apache/hertzbeat/blob/master/hertzbeat-manager/src/main/resources/define/app-nebulaGraph.yml)
+
[Memcached](https://github.com/apache/hertzbeat/blob/master/hertzbeat-manager/src/main/resources/define/app-memcached.yml),
[NebulaGraph](https://github.com/apache/hertzbeat/blob/master/hertzbeat-manager/src/main/resources/define/app-nebula_graph.yml)
*
[Linux](https://raw.githubusercontent.com/apache/hertzbeat/master/hertzbeat-manager/src/main/resources/define/app-linux.yml),
[Ubuntu](https://raw.githubusercontent.com/apache/hertzbeat/master/hertzbeat-manager/src/main/resources/define/app-ubuntu.yml),
[CentOS](https://raw.githubusercontent.com/apache/hertzbeat/master/hertzbeat-manager/src/main/resources/define/app-centos.yml),
[Windows](https://raw.githubusercontent.com/apache/hertzbeat/master/hertzbeat-manager/src/main/resources/define/app-windows.yml),
[EulerOS](https://raw.githubusercontent.com/apache/hertzbeat/master/hertzbeat-manager/src/main/resources/define/app-euleros.yml),
[Fedora
CoreOS](https://raw.githubusercontent.com/apache/hertzbeat/master/hertzbeat-manager/src/main/resources/define/app-coreos.yml),
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]