Please enable JavaScript.
Coggle requires JavaScript to display documents.
DevOps Checklist - Coggle Diagram
DevOps Checklist
安全
None-root
User app in Dockerfile
UID 10001
GID 10001
Disable HostPath mount
user DNS record for /etc/hosts
set ENV TZ=America/Los_Angeles for timezone
Non-privileges Pod
Drop all linux capabilities
ReadOnlyRootFilesystem
Only allow to write in /tmp
Network Policy
what you need to connect/access
what will connect/access you
APIG and config service will be allowed by default
监控
Metrics exporter
Prometheus Pushgateway if for job type services
alerts
Grafana Dashboard
日志
Log output to stdout with JSON format
local log file write disable
how to check logs
error logs alerts
稳定性
Health Check: Liveness and Readiness
Resource
Request and Limits
Namespace Resourcequota
优雅中止： SIGTERM
Pre-Deploy
CI
SAST：Pass Sonarqube Scan
Add Sonar into git and badges
Report
Quality gateway
Docker Image Scan：Trivy Scan no Critical and High Vulnerability
SAC：Dependency-track no critical supply chain issue
how to intergrate Tekton
Dockerfile Best practise
Use our base image
Naming Rules
Lables
Owner
可用性
HPA
Post-Deploy
Use Gateway in K8S