전체 문서

Getting Started

CICDoo란 시작하기: 온보딩 마법사 대시보드와 인프라 맵

Concepts

프로덕션, 스테이징, 개발 스테이지 도메인, 서브도메인, SSL Odoo 버전과 에디션 (Community와 Enterprise) 워크스페이스와 팀 협업

Servers

서버 추가하기 서버 도메인과 DNS 로드 밸런서 사용하기 점프 서버를 통해 연결하기 서버 작업: 배포, 로그, 차트 Deleting a server

Projects & Git

프로젝트 만들기 GitHub 연결하기 Project GitHub settings and webhook GitLab 연결하기 브랜치와 인스턴스 프로젝트에 태그 달기와 필터링 앱 노드를 이용한 고가용성 Project environments, extensions and deletion

Instances & Console

인스턴스 만들기 인스턴스 재시작, 중지, 삭제 스테이지 간 브랜치 병합 웹 IDE와 원격 접속 SSH access to instances 인스턴스 설정 설명 배포와 작업 큐

Agent Tasks

에이전트 작업이란 에이전트 작업 설정하기 작업 실행과 결과 검토 에이전트 시간과 추가 구매 Agent insights and task filters

Monitoring & Backups

인스턴스 모니터링 백업과 복원 S3 storage, uploads and bulk backup actions 경고 알림 (이메일과 SMS)

Workspaces & Permissions

워크스페이스 멤버 초대하기 멤버 권한과 리소스 접근 멤버가 리소스를 보거나 사용할 수 없습니다 Audit log and server activity

Account & Security

2단계 인증 (2FA) 프로필과 연동 설정 비밀번호와 계정 복구 Instance security score and checks The Security page: every instance and member at a glance

Billing & Plans

요금제와 가격 업그레이드와 구독 관리 프로젝트 구독이 미납된 경우 채널 파트너 프로그램 Onboarding a client as a partner

Support & Tickets

지원 티켓 열기 CICDoo 팀에 도움 요청하기

Troubleshooting

문제 해결: 서버를 연결할 수 없습니다 문제 해결: 배포가 실패했습니다 문제 해결: 저장소를 옮긴 뒤 git push가 403으로 실패합니다 문제 해결: 인스턴스가 중단되거나 느립니다 문제 해결: 도메인 또는 SSL 문제

계정 및 보안

The Security page: every instance and member at a glance

How to use the workspace Security page to compare every instance's security grade, run scans, and review your team's 2FA, SSH keys, API tokens and sign-in history, plus security ratings on cluster pages.

What the Security page shows

The Security page brings the security of the whole workspace onto one page: the grade of every Odoo instance, and how well the people who manage them are protected. It has four parts:

  • Instances: every instance you can see, with its score and grade, worst first.
  • People and access: two-factor authentication, SSH keys and API tokens of the people in the workspace.
  • Sign-ins, last 30 days: who signed in to CICDoo, how, and from where.
  • Connect As, last 30 days: who opened Odoo sessions through Connect As, and how often.

For what each instance check means, see Instance security score and checks.

Who can see it

  • The workspace owner and admins always see it.
  • Other members need View the audit log. Without it, Security does not appear in the menu. See Member permissions and resource access.
  • The Instances list only shows instances on which the member also holds Instance settings.

Open the Security page

  1. Click Security in the left menu.
  2. In Instances, each row shows the project, its stage, the branch, the grade and how many checks fail at each severity. Instances with the lowest score come first.
  3. Click a row to open that instance's Security tab with every check and its fix.
  4. If there are many instances, use the page controls at the bottom.

A row may also show:

  • Database not scanned yet: the instance has not been scanned, so its database checks are unknown and the grade may be too high.
  • Scan queued: a scan was requested and is waiting for the server to pick it up, usually within a minute or two.
  • Scanning: the scan is running.

Run a scan now

Scans run daily and after every restart and upgrade. To scan on demand:

  1. To scan one instance, click the round arrow button at the end of its row (Run security scan).
  2. To scan every instance on the page, click Scan all at the top of the Instances card.
  3. The rows show Scan queued, then Scanning. Reload the page after a few minutes to see the new results.

A scan only reads the database. It does not restart the instance or change anything.

People and access

This card has its own grade and three checks:

  • Members without two-factor authentication (high): people with access to the workspace who sign in to CICDoo with a password alone. Each person turns it on under Settings, Security in their own account. See Two-factor authentication (2FA).
  • SSH keys without an expiry date (low): keys that never expire. Re-add long-lived keys with an expiry date under Settings, Security.
  • API tokens (low): tokens that never expire, or that have not been used for 90 days. Revoke unused ones under Settings, Security.

Below the checks, a table lists every member, whether two-factor authentication is On or Off, and when they last signed in.

Sign-in history

Sign-ins, last 30 days lists every sign-in to CICDoo by people in the workspace:

  • When it happened and which Member it was.
  • Result: green for a successful sign-in, with the method (Password, Google, GitHub or Email link), and red for a failed one (Wrong password or Wrong 2FA code).
  • IP address, partly masked. New IP marks a successful sign-in from an address that person had not used in the previous 30 days.

The card header shows how many sign-ins failed in the period. A burst of failures for one person, or a New IP nobody expected, is worth a question to that member.

Security on a cluster page

On a high-availability cluster's page, the Nodes card shows a security grade for each node and a rating for the whole cluster. The cluster's rating is the grade of its weakest node, because every node is a way in. Click it to open that node's Security tab. Not fully scanned means some node has not been scanned yet, so the rating may be too high. Click Scan cluster to scan every node at once. See High availability with app nodes.

Related: Instance security score and checks, Audit log and server activity, Two-factor authentication (2FA), Member permissions and resource access.

If you get stuck, open a support ticket from the Tickets page or the chat widget.

이전 Instance security score and checks 다음 에이전트 작업이란

여전히 해결되지 않나요? 앱에서 티켓을 열거나 엔지니어와 상담하세요.