fix: preserve Prometheus rule group access

This commit is contained in:
hectorzhao
2026-08-14 18:02:42 +08:00
parent 0cd09441da
commit 2216d00d51
2 changed files with 3 additions and 1 deletions
@@ -53,7 +53,8 @@ BEGIN {
' "$SCRIPT_DIR/cmpp-alerts.yml" > /etc/prometheus/cmpp-alerts.yml
chown root:root /etc/prometheus/cmpp-alerts.yml
chmod 0644 /etc/prometheus/cmpp-alerts.yml
install -d -o cmpp-api -g prometheus -m 0750 /var/lib/cmpp-platform/monitoring
# SGID ensures API原子rename生成的新规则继续继承prometheus组,否则reload会因不可读返回500。
install -d -o cmpp-api -g prometheus -m 2750 /var/lib/cmpp-platform/monitoring
if [[ ! -f /var/lib/cmpp-platform/monitoring/cmpp-managed-alerts.yml ]]; then
install -o cmpp-api -g prometheus -m 0640 "$SCRIPT_DIR/cmpp-managed-alerts.yml" /var/lib/cmpp-platform/monitoring/cmpp-managed-alerts.yml
fi