This is an automated email from the ASF dual-hosted git repository.
Duansg pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/hertzbeat.git
The following commit(s) were added to refs/heads/master by this push:
new 16d420a245 [fix] restrict /api/ai SOP endpoints to admin role (#4261)
16d420a245 is described below
commit 16d420a2456bdfd6e54339bf4401bed6060842f7
Author: Duansg <[email protected]>
AuthorDate: Mon Aug 3 11:10:43 2026 +0800
[fix] restrict /api/ai SOP endpoints to admin role (#4261)
Co-authored-by: shown <[email protected]>
---
hertzbeat-e2e/hertzbeat-log-e2e/src/test/resources/sureness.yml | 4 ++++
hertzbeat-manager/src/test/resources/sureness.yml | 4 ++++
hertzbeat-startup/src/main/resources/sureness.yml | 4 ++++
script/docker-compose/hertzbeat-mysql-iotdb/conf/sureness.yml | 4 ++++
script/docker-compose/hertzbeat-mysql-tdengine/conf/sureness.yml | 4 ++++
.../docker-compose/hertzbeat-mysql-victoria-metrics/conf/sureness.yml | 4 ++++
.../docker-compose/hertzbeat-postgresql-greptimedb/conf/sureness.yml | 4 ++++
.../hertzbeat-postgresql-victoria-metrics/conf/sureness.yml | 4 ++++
script/sureness.yml | 4 ++++
9 files changed, 36 insertions(+)
diff --git a/hertzbeat-e2e/hertzbeat-log-e2e/src/test/resources/sureness.yml
b/hertzbeat-e2e/hertzbeat-log-e2e/src/test/resources/sureness.yml
index e7784d87ca..862160a289 100644
--- a/hertzbeat-e2e/hertzbeat-log-e2e/src/test/resources/sureness.yml
+++ b/hertzbeat-e2e/hertzbeat-log-e2e/src/test/resources/sureness.yml
@@ -70,6 +70,10 @@ resourceRole:
- /api/sse/**===post===[admin,user]
- /api/chat/**===get===[admin,user]
- /api/chat/**===post===[admin,user]
+ - /api/ai/**===get===[admin]
+ - /api/ai/**===post===[admin]
+ - /api/ai/**===put===[admin]
+ - /api/ai/**===delete===[admin]
- /api/logs/sse/**===get===[admin,user,guest]
- /api/logs/ingest/**===post===[admin,user]
- /api/otlp/**===post===[admin,user]
diff --git a/hertzbeat-manager/src/test/resources/sureness.yml
b/hertzbeat-manager/src/test/resources/sureness.yml
index e7784d87ca..862160a289 100644
--- a/hertzbeat-manager/src/test/resources/sureness.yml
+++ b/hertzbeat-manager/src/test/resources/sureness.yml
@@ -70,6 +70,10 @@ resourceRole:
- /api/sse/**===post===[admin,user]
- /api/chat/**===get===[admin,user]
- /api/chat/**===post===[admin,user]
+ - /api/ai/**===get===[admin]
+ - /api/ai/**===post===[admin]
+ - /api/ai/**===put===[admin]
+ - /api/ai/**===delete===[admin]
- /api/logs/sse/**===get===[admin,user,guest]
- /api/logs/ingest/**===post===[admin,user]
- /api/otlp/**===post===[admin,user]
diff --git a/hertzbeat-startup/src/main/resources/sureness.yml
b/hertzbeat-startup/src/main/resources/sureness.yml
index 0e8a8c975e..c51f6318e2 100644
--- a/hertzbeat-startup/src/main/resources/sureness.yml
+++ b/hertzbeat-startup/src/main/resources/sureness.yml
@@ -70,6 +70,10 @@ resourceRole:
- /api/mcp/**===post===[admin]
- /api/chat/**===get===[admin,user]
- /api/chat/**===post===[admin]
+ - /api/ai/**===get===[admin]
+ - /api/ai/**===post===[admin]
+ - /api/ai/**===put===[admin]
+ - /api/ai/**===delete===[admin]
- /api/logs/sse/**===get===[admin,user,guest]
- /api/logs/ingest/**===post===[admin,user]
- /api/otlp/**===post===[admin,user]
diff --git a/script/docker-compose/hertzbeat-mysql-iotdb/conf/sureness.yml
b/script/docker-compose/hertzbeat-mysql-iotdb/conf/sureness.yml
index ce2da6568e..def13ade17 100644
--- a/script/docker-compose/hertzbeat-mysql-iotdb/conf/sureness.yml
+++ b/script/docker-compose/hertzbeat-mysql-iotdb/conf/sureness.yml
@@ -70,6 +70,10 @@ resourceRole:
- /api/mcp/**===post===[admin]
- /api/chat/**===get===[admin,user]
- /api/chat/**===post===[admin]
+ - /api/ai/**===get===[admin]
+ - /api/ai/**===post===[admin]
+ - /api/ai/**===put===[admin]
+ - /api/ai/**===delete===[admin]
- /api/logs/sse/**===get===[admin,user,guest]
- /api/logs/ingest/**===post===[admin,user]
diff --git a/script/docker-compose/hertzbeat-mysql-tdengine/conf/sureness.yml
b/script/docker-compose/hertzbeat-mysql-tdengine/conf/sureness.yml
index ce2da6568e..def13ade17 100644
--- a/script/docker-compose/hertzbeat-mysql-tdengine/conf/sureness.yml
+++ b/script/docker-compose/hertzbeat-mysql-tdengine/conf/sureness.yml
@@ -70,6 +70,10 @@ resourceRole:
- /api/mcp/**===post===[admin]
- /api/chat/**===get===[admin,user]
- /api/chat/**===post===[admin]
+ - /api/ai/**===get===[admin]
+ - /api/ai/**===post===[admin]
+ - /api/ai/**===put===[admin]
+ - /api/ai/**===delete===[admin]
- /api/logs/sse/**===get===[admin,user,guest]
- /api/logs/ingest/**===post===[admin,user]
diff --git
a/script/docker-compose/hertzbeat-mysql-victoria-metrics/conf/sureness.yml
b/script/docker-compose/hertzbeat-mysql-victoria-metrics/conf/sureness.yml
index ce2da6568e..def13ade17 100644
--- a/script/docker-compose/hertzbeat-mysql-victoria-metrics/conf/sureness.yml
+++ b/script/docker-compose/hertzbeat-mysql-victoria-metrics/conf/sureness.yml
@@ -70,6 +70,10 @@ resourceRole:
- /api/mcp/**===post===[admin]
- /api/chat/**===get===[admin,user]
- /api/chat/**===post===[admin]
+ - /api/ai/**===get===[admin]
+ - /api/ai/**===post===[admin]
+ - /api/ai/**===put===[admin]
+ - /api/ai/**===delete===[admin]
- /api/logs/sse/**===get===[admin,user,guest]
- /api/logs/ingest/**===post===[admin,user]
diff --git
a/script/docker-compose/hertzbeat-postgresql-greptimedb/conf/sureness.yml
b/script/docker-compose/hertzbeat-postgresql-greptimedb/conf/sureness.yml
index 9b8736ba75..d86ef543ce 100644
--- a/script/docker-compose/hertzbeat-postgresql-greptimedb/conf/sureness.yml
+++ b/script/docker-compose/hertzbeat-postgresql-greptimedb/conf/sureness.yml
@@ -70,6 +70,10 @@ resourceRole:
- /api/mcp/**===post===[admin]
- /api/chat/**===get===[admin,user]
- /api/chat/**===post===[admin]
+ - /api/ai/**===get===[admin]
+ - /api/ai/**===post===[admin]
+ - /api/ai/**===put===[admin]
+ - /api/ai/**===delete===[admin]
- /api/logs/sse/**===get===[admin,user,guest]
- /api/logs/ingest/**===post===[admin,user]
- /api/otlp/**===post===[admin,user]
diff --git
a/script/docker-compose/hertzbeat-postgresql-victoria-metrics/conf/sureness.yml
b/script/docker-compose/hertzbeat-postgresql-victoria-metrics/conf/sureness.yml
index ce2da6568e..def13ade17 100644
---
a/script/docker-compose/hertzbeat-postgresql-victoria-metrics/conf/sureness.yml
+++
b/script/docker-compose/hertzbeat-postgresql-victoria-metrics/conf/sureness.yml
@@ -70,6 +70,10 @@ resourceRole:
- /api/mcp/**===post===[admin]
- /api/chat/**===get===[admin,user]
- /api/chat/**===post===[admin]
+ - /api/ai/**===get===[admin]
+ - /api/ai/**===post===[admin]
+ - /api/ai/**===put===[admin]
+ - /api/ai/**===delete===[admin]
- /api/logs/sse/**===get===[admin,user,guest]
- /api/logs/ingest/**===post===[admin,user]
diff --git a/script/sureness.yml b/script/sureness.yml
index 5c38c9a8e3..a356931407 100644
--- a/script/sureness.yml
+++ b/script/sureness.yml
@@ -70,6 +70,10 @@ resourceRole:
- /api/mcp/**===post===[admin]
- /api/chat/**===get===[admin,user]
- /api/chat/**===post===[admin]
+ - /api/ai/**===get===[admin]
+ - /api/ai/**===post===[admin]
+ - /api/ai/**===put===[admin]
+ - /api/ai/**===delete===[admin]
- /api/logs/sse/**===get===[admin,user,guest]
- /api/logs/ingest/**===post===[admin,user]
- /api/otlp/**===post===[admin,user]
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
