com 10.99.1.61 k8s-node02.cof-lee.com 10.99.1.62 规划Pod网络： 10.244.0.0/16 规划Service网络： 10.7.0.0/16 # pod网络和service网络都要求为16位的地址块，且不能与环境中其他网络地址 段冲突 # hostnamectl set-hostname k8s-master1.cof-lee.com ] } # mkdir -p /etc/systemd/system/docker.service.d # docker info ★docker会修改防火墙规则，导致pod网络不通 # vi /usr/lib/systemd/system/docker.service #在[Service]下的ExecStart=/usr/bin/dockerd -H fd:// 这行下面再添加一行： address=10.99.1.51 \ # api server地址 --pod-network-cidr=10.244.0.0/16 \ # pod容器网段 --service-cidr=10.7.0.0/16 \ # service网段，即cluster ip网段 --ignore-preflight-errors=Swap \ #忽略swap未关闭而导致的检查错误 --image-repository="cof-

sidecar container will include: 1. A logging agent to push logs to a platform centralized logging service. 2. Container policy enforcement. This includes ensuring container hardening from DCAR containers notifications when there is anomalous behavior. 4. Vulnerability Management 5. A service mesh proxy to connect to the service mesh 6. Zero Trust down to the container level. Zero trust requires strict Program-specific Log Storage and Retrieval Service 2. Service Mesh 3. Program-specific artifact repository 4. Runtime Behavior Analysis Artificial Intelligence (AI) service 5. DCAR for the hardened containers

Respond to the rapidly changing competitive landscape 2. Provide stable, reliable, and secure service to the customer b. THE BUSINESS VALUE OF DEVOPS i. Code and change deployments (thirty times more iii. Production deployments (sixty times higher change success rate) iv. Mean time to restore service (168 times faster) 4. An Introduction to The DevOps Handbook xxi 5. PART I—THE THREE WAYS 1 a desired iv. Operations – the team responsible for maintaing the production environment and ensuring service levels are met v. Infosec – team responsible for securing systems and data vi. Release Managers

Operation Framework study found the best-performing organization were better at diagnosing & fixing service incidents. 1. “Culture of Causality” 2. Used disciplined approach to solving problems using telemetry Collection at business logic, application, & environments layer a. Events, logs, & metrics b. Common service to centralize, rotate, and delete 2. Event router responsible for storing our events and metrics production changes iii. Tools – StatsD, JMX, codahale, New Relic, Prometheus, etc. f. CREATE SELF-SERVICE ACCESS TO TELEMETRY AND INFORMATION RADIATORS i. Spread the information – anyone who wants or needs

Velocity all about? What did I learn? Service Workers: The Practical Bits by Patrick Meenan (Google) @patmeenan http://www.slideshare.net/patrickmeenan/service-workers-for-performance  They are effectively

#先结束刚刚运行的进程 # cat > /etc/systemd/system/redis.service <Service] Type=forking ExecStart=/usr/local/bin/redis-server /root/redis-6

/var/lib/pgsql/13/* /data_pg/ #将原数据目录下所有内容移动到新 数据目录下 # vi /usr/lib/systemd/system/postgresql-13.service #pg-13版本，修改systemd服 务文件，指定数据目录 #修改这行：Environment=PGDATA=/var/lib/pgsql/13/data/ 改为新的路径，如 下： /var/lib/pgsql/* /data_pg/ #将原数据目录下所有内容移动到新数 据目录下 # vi /usr/lib/systemd/system/postgresql.service #pg-10版本，修改systemd服务 文件，指定数据目录 #修改这行：Environment=PGDATA=/var/lib/pgsql/data/ 改为新的路径，如下： E

– continually ensure all environments are synchronized and consistent e. ENABLE AUTOMATED SELF-SERVICE DEPLOYMENTS i. As a result of compliance, oversight, and control needs separate Operations groups deployment ii. Shows readiness of production environments at a glance iii. Provides push-button, self-service for any suitable version into production iv. Record automatically for auditing who and what commands

and the rest of the business has been to “keep your people under control, provide good customer service, deliver what you say you will deliver, and you will be rewarded with a seat at the table.” This Leadership in the Age of Agility. Before joining AWS he was the CIO of US Citizenship and Immigration Service (part of the Department of Homeland Security), CIO of Intrax, and CEO of Auctiva. He has an MBA

#停止 # gitlab-ctl restart #重启 ★放通防火墙 # firewall-cmd --add-service=h�p # firewall-cmd --add-service=h�ps # firewall-cmd --run�me-to-permanent ★查看h�p配置： gitlab-ce自带有nginx软件，查看默认生成的配置：