zqr10159 opened a new pull request, #4295:
URL: https://github.com/apache/hertzbeat/pull/4295

   ## What changed?
   
   - bind the quick-start HertzBeat manager and collector ports to 127.0.0.1 by 
default;
   - allow an explicit HERTZBEAT_BIND_ADDRESS override for deployments that 
have replaced the bundled credentials and applied network access controls.
   
   This is a dependent follow-up to #4258. That PR scopes the Postgres and 
GreptimeDB listeners; this PR applies the same safe default to the remaining 
published HertzBeat listeners.
   
   ## Validation
   
   - the unchanged baseline listener contract failed for ports 1157 and 1158;
   - the updated YAML listener contract passed;
   - docker compose config --quiet passed;
   - rendered Compose output resolves both default bindings to 127.0.0.1;
   - an explicit documentation-address override resolves both bindings to that 
address;
   - git diff --check passed.
   
   AI assistance: used for draft implementation and validation iteration.
   Human validation: parsed the YAML and rendered the Compose model for both 
default and explicit override cases.
   Risk notes: remote quick-start access now requires an explicit bind-address 
choice. Bundled credentials still need replacement before any remote exposure.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to