or
or
By clicking below, you agree to our terms of service.
New to HackMD? Sign up
Syntax | Example | Reference | |
---|---|---|---|
# Header | Header | 基本排版 | |
- Unordered List |
|
||
1. Ordered List |
|
||
- [ ] Todo List |
|
||
> Blockquote | Blockquote |
||
**Bold font** | Bold font | ||
*Italics font* | Italics font | ||
~~Strikethrough~~ | |||
19^th^ | 19th | ||
H~2~O | H2O | ||
++Inserted text++ | Inserted text | ||
==Marked text== | Marked text | ||
[link text](https:// "title") | Link | ||
 | Image | ||
`Code` | Code |
在筆記中貼入程式碼 | |
```javascript var i = 0; ``` |
|
||
:smile: | ![]() |
Emoji list | |
{%youtube youtube_id %} | Externals | ||
$L^aT_eX$ | LaTeX | ||
:::info This is a alert area. ::: |
This is a alert area. |
On a scale of 0-10, how likely is it that you would recommend HackMD to your friends, family or business associates?
Please give us some advice and help us improve HackMD.
Do you want to remove this version name and description?
Syncing
xxxxxxxxxx
clean infrastructure - 李明穎(克里斯多福)
Welcome to DevOps Days 2019 Collaborative Notes
- The image file may be corrupted
- The server hosting the image is unavailable
- The image path is incorrect
- The image format is not supported
Learn More →Getting started from here: https://hackmd.io/@DevOpsDay/2019
Click top left to expand Agenda on the mobile.
Resource
我的Infra職涯小故事(ㄧ)
有backend frontend RDS Route 53 Jenkins
per project two aws accounts(prod & non-prod)
Practices(一)
Security
我的Infra職涯小故事(二)
– Jenkins 內會放大量的key & secret
Practices(二)
AWS IAM Assume Role
https://docs.aws.amazon.com/zh_tw/IAM/latest/UserGuide/tutorial_cross-account-with-roles.html
AWS
GCP
如何在local有效存放 aws key secret & switch role
AWS
優點
CI/CD
我的Infra職涯小故事(三)
Practices (三)
使用動態 Jenkins Slaves
AWS: spot instance or GCP: preemptible vm (可以不用把 Jenkins master 開得太大, 減低 cost)
用k8s dynamic slaves,跑在jenkins master所在的k8s cluster內,提高其資源使用率
Practices (四)
將你的CI/CD 跟 application 分離
為了跟Jenkins 做 hook, 會把 endpoint 曝露出去. 分離可以增加隔離性. 降低對 application資源的可能影響.
jenkins可能有更高的權限,是個有風險的存在
Practices (五)
自動化你整個 CI/CD
Jenkins jobs use JobDSL plugin, 可以對 job 做 version control, 不用再對 Jenkins 做備份了.
Jenkins master use K8S helm + Jcasc
Practices (六)
讓 CI/CD 主要 task 在 container 內跑
local or Jenkins上都能跑
增加 local debug 的可能性
tags:
DevOpsDays Taipei 2019