-
Notifications
You must be signed in to change notification settings - Fork 13k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Nacos permissions that this set here besides nacos account and other access is 403 / nacos/v1 / ns/operator/metrics #2866
Comments
com.alibaba.nacos.naming.controllers.OperatorController#metrics |
『/nacos/v1/ns/operator/metrics 403』这个问题确实存在,原因是AuthFilter.doFilter()方法中的『String resource = secured.resource()』,在获取到OperatorController.metrics()的secured注解配置的resource="naming/metrics"后,没有考虑命名空间和分组,因为Permission中resource由namespaceId:groupName:serviceName的格式组成,导致最终在NacosRoleServiceImpl.hasPermission()方法中用正则匹配时不通过! 具体详情可以看下另外一位网友的帖子:https://www.jianshu.com/p/560ba0d67c50 |
@xiaoxiangzhenyu 首先感谢回答,是这样的。这个issue正在努力推进中 |
首先感谢阿里大佬们的辛苦,此问题预计解决时间,这边方便告知下不。 |
此问题在1.3.1版本中还没得到修复,请问各位阿里大佬方便告知一下此问题的修复计划吗? |
用户授权相关的,是需要等1.4.0版本吗? |
nacos 权限这这块 ,这里设置除了nacos账号,其他访问都是403 /nacos/v1/ns/operator/metrics
导致/actuator/health 里的nacosDiscovery状态为DOWN 这个请求整体"status": "DOWN",
我们的监控监控无法正常。
Nacos permissions that this set here besides nacos account and other access is 403 / nacos/v1 / ns/operator/metrics
... '> cause the nacosDiscovery status in/in /health to be DOWN. This request overall "status": "DOWN",
Our surveillance is not working.
The text was updated successfully, but these errors were encountered: