fix: preserve Prometheus rule group access
This commit is contained in:
@@ -53,7 +53,8 @@ BEGIN {
|
||||
' "$SCRIPT_DIR/cmpp-alerts.yml" > /etc/prometheus/cmpp-alerts.yml
|
||||
chown root:root /etc/prometheus/cmpp-alerts.yml
|
||||
chmod 0644 /etc/prometheus/cmpp-alerts.yml
|
||||
install -d -o cmpp-api -g prometheus -m 0750 /var/lib/cmpp-platform/monitoring
|
||||
# SGID ensures API原子rename生成的新规则继续继承prometheus组,否则reload会因不可读返回500。
|
||||
install -d -o cmpp-api -g prometheus -m 2750 /var/lib/cmpp-platform/monitoring
|
||||
if [[ ! -f /var/lib/cmpp-platform/monitoring/cmpp-managed-alerts.yml ]]; then
|
||||
install -o cmpp-api -g prometheus -m 0640 "$SCRIPT_DIR/cmpp-managed-alerts.yml" /var/lib/cmpp-platform/monitoring/cmpp-managed-alerts.yml
|
||||
fi
|
||||
|
||||
Reference in New Issue
Block a user