configuration files 7. Run automated smoke tests 8. Running test procedures 9. Scripting & automating DB migrations iii. Focus on areas to reduce lead times and handoffs iv. New requirements for the deployment environment, test, c. Swing traffic to new environment, Rollback by swinging traffic back 2. Database changes a. Create two DB – put one in read only mode, backup & restore to new environment, swing

pg_catalg 的 schema 下 的 pg_hba_file_rules表里： INSERT INTO "pg_hba_file_rules" ("line_number", "type", "database", "user_name", "address", "netmask", "auth_method", "options", "error") VALUES (94, 'host', '{all}' #创建一个名为cof的 用户，并设置密码 postgres=# grant all on database db_test to cof; #给cof授权，有操作db_test 库的所有权限 postgres=# postgres=# revoke all on database db_test from cof; #撤销用户权限 postgres=# #提示符#前的postgres表示当前数据库名 postgres=# select datname from pg_database; #列出所有数据库（标准的sql 语句） datname ----------- postgres template1 template0 db_test postgres=#

③创建Secret secret资源是区分命名空间的 ★命令行方式创建secret 创建账号密码验证secret # kubectl create secret generic database-auth --from-literal=username=root --from- literal=password=passwd123 创建存储于某文件的认证secret # kubectl kubernetes.io/tls 2 7s database-auth Opaque 2 10m myssh-key-secret Opaque 2 3m43s # kubectl get secret database-auth -oyaml #secret的文本信息均以base64编码 "2023-12-05T21:19:48Z" name: database-auth namespace: default resourceVersion: "1167" uid: 38790a7e-30ee-4b75-8132-18bca66ca512 type: Opaque ★基于清单文件创建secret # cat > database-auth2.yaml <

0 码力 | 126 页 | 4.33 MB | 1 年前

3

DEG and 3rd Party Application Installations  Route Adds – requires heightened security access  Database Data Script Execution  Load Balancer Node Disablement  OS and Security Patching  Requesting