DEPLOYMENT PIPELINE i. CD pipelines represent a new attack surface. If not properly secured, credentials could be compromised or malicious code & changes injected. 1. Harden CI/CD servers and ensure they calls from certain types of test code) 4. Ensure every CI process is in an isolated container 5. Make the version control credentials of the CI system read-only 3. Ch. 23 – Protecting the Deployment

due to integrating late in the lifecycle. Downward spiral of pain b. HP LaserJet Firmware –i. Before CI: 2 releases per year. 5% of effort supporting new features, 20% on detailed planning, 25% on porting branches, 10% integrating, 15% manual testing. ii. Implemented Trunk-based development & CI iii. After CI: 40% effort on new features, 40% decrease in development costs, 140% increase in programs under dependency improvements often provide high-payoffs d. ADOPT TRUNK-BASED DEVELOPMENT PRACTICES i. CI and Trunk-based development (TBD) are countermeasures to large batch size ii. TBD enables: 1. Frequent

open and be prepared to accommodate a range of scenarios as the future unfolds.  Jez Humble and his co-authors suggest that instead of using detailed planning to manage risk, we instead use experiments describing, making them almost inevitable.  Respect for skill: Your new IT workforce will respect co-workers who have impressive technical skills, and will have little respect for people who don’t. Skill

#查看全局设置 ★本地设置 针 对 单 一 项 目 的 设 置 ， 使 用 --local 参 数 ， 本 地 设 置 信 息 保 存 在 项 目 目 录/.git/config文件里 # cd 项目目录 # git init #初始化仓库，将在当前路径下生成.git子目录，子目录里有 此git仓库的相关信息 # git config --local 0以前的默认配置项是matching） matching 推送本地和远程都存在的同名分支 ★仓库操作 # mkdir ~/testgit #创建项目目录 # cd ~/testgit # git init #初始化仓库，将在当前路径下生成.git子目录，子目录里 有此git仓库的相关信息，初始化后要设置当前工作的用户名等相关信息，否则 h�ps://gitlab.cof-lee.com/cof/pro-1.git #克隆远程仓库到本地，默认 克隆的是远程的默认分支，本例中远程仓库默认分支为main（克隆后会自动在 当前目录下生成项目目录） # cd pro-1/ #进入克隆后的项目目录 # git remote -v #直接克隆的话，默认将远程仓库映射到本地，别

本小节讲解k8s v1.24及之后版本的安装；首先按照第0章的步骤完成准备工作。 ①安装并配置containerd ★安装containerd.io软件 可以使用阿里的源或docker官方的软件源 # cd /etc/yum.repos.d/ # wget h�ps://mirrors.aliyun.com/docker-ce/linux/centos/docker-ce.repo #aliyun的源 ： h�ps://docs.�gera.io/calico/latest/ge�ng- started/kubernetes/quickstart # mkdir ~/calico # cd ~/calico # wget h�ps://raw.githubusercontent.com/projectcalico/calico/v3.26.1/manifests/�gera- default-token-bk95n Events: #以下是某容器默认挂载的一个存储卷，里面一般有3个文件 ①创建用户账号 # cd /etc/kubernetes/pki # openssl genrsa -out kube-user01.key 2048 #创建用户的私钥 # openssl req -new

monitoring 1. Create telemetry in application & environments (to include production, pre-production, and CD pipeline) iii. Ian Malpass, Etsy – “If Engineering at Etsy has a religion, it’s the Church of Graphs identify opportunity costs. d. INTEGRATE A/B TESTING INTO OUR RELEASE i. A/B testing requires fast CD to support ii. Use feature toggles to control experiments, cohort creation, etc. iii. Use telemetry

Requirements Definition Packages (RDPs) to capture a subset of the IS ICD scope and/or Capability Drop (CD) documents for smaller items such as applications o Replace comprehensive Preliminary Design Reviews

com/redis/redis/archive/7.0.12.tar.gz # yum install gcc tcl make # tar -xvf redis-6.2.13.tar.gz # cd redis-6.2.13 # make # make install #默认安装路径 /usr/local/bin/ ★也可指定安装目录，如下操作：

gdbm-devel xz-devel libpcap-devel db4-devel # tar -xvf Python-3.x.x.tgz #解压源码包 # cd Python-3.x.x #进入解压目录 # ./configure prefix=/usr/local/python3.x.x 这样就成了，在源程序目录下生成一个名为dist的子目录，里面有生成 的安装包 压缩包内容： ★pyinstaller打包为.exe程序 # pip3 install pyinstaller cmd> cd 项目名称\venv\Scripts> > pyinstaller.exe ..\..\test.py -F --hidden-import ..\..\cofable.py -i