Separate Development in Directories, Not Branches Trunk-Based Development Policies and Security Summary 25 Chapter 5–Repository and Directory Structures Best Practices DRY Chapter 8–Other Considerations Multicluster Management Non-Declarative Infrastructure Security Base Image Selection Everything as Code Conclusion 45 About the Author The Path community. —Natale Vinto Senior Principal Developer Advocate, Red Hat Author, Modernizing Enterprise Java and GitOps Cookbook (O’Reilly Media) July 2022 Introduction The Path to GitOps | 8 Chapter

assert, Section 4d of CC-BY-SA to the fullest extent permitted by applicable law. Red Hat, Red Hat Enterprise Linux, the Shadowman logo, the Red Hat logo, JBoss, OpenShift, Fedora, the Infinity logo, and RHCE International Corp. or its subsidiaries in the United States and/or other countries. MySQL ® is a registered trademark of MySQL AB in the United States, the European Union and other countries. Node.js ® is Red Hat OpenShift Container Platform 中，以及 Red Hat OpenShift Container Platform 的好处，以及 Red Hat Enterprise 支持、质量保证并专注于企业安全性。 注意 注意 因为 Red Hat OpenShift GitOps 的发行节奏与 OpenShift Container Platform 不同，所以

developers to be more effective, by making the good thing the easy thing – in areas such as testing, security and observability this is increasingly important. Good DX allows for shift left.” — James Governor cloud to edge Scale infrastructure to meet demands Enable built-in compliance Enforce zero-trust security Let’s look at each of these reasons in detail. 1 2 3 4 weave.works THE GITOPS GUIDE TO BUILDING to meet demands THE GITOPS GUIDE TO BUILDING & MANAGING INTERNAL PLATFORMS 7 weave.works ▼ Security comes first for any organization, particularly an organization like the Department of Defense (DoD)

assert, Section 4d of CC-BY-SA to the fullest extent permitted by applicable law. Red Hat, Red Hat Enterprise Linux, the Shadowman logo, the Red Hat logo, JBoss, OpenShift, Fedora, the Infinity logo, and RHCE International Corp. or its subsidiaries in the United States and/or other countries. MySQL ® is a registered trademark of MySQL AB in the United States, the European Union and other countries. Node.js ® is

assert, Section 4d of CC-BY-SA to the fullest extent permitted by applicable law. Red Hat, Red Hat Enterprise Linux, the Shadowman logo, the Red Hat logo, JBoss, OpenShift, Fedora, the Infinity logo, and RHCE International Corp. or its subsidiaries in the United States and/or other countries. MySQL ® is a registered trademark of MySQL AB in the United States, the European Union and other countries. Node.js ® is

monitoring, and managing Kubernetes, teams can increase their overall output 2-3 times and easily meet security and compliance regulations. Deploy Operate & Manage Monitor GIT P.6 Enhance and extend driven by pull requests and fully reproducible through Git. Embed security Leverage Git’s correctness and strong cryptography and security guarantees to track and manage changes across the entire cluster Kubernetes Platform (WKP) works with Amazon Elastic Kubernetes Service (Amazon EKS). WKP includes enterprise-grade features that extend the richness of GitOps using a model-based system to configure and

applications rapidly 2 Continuous Integration(CI) & Continuous Delivery (CD) 3 Build Test Security Checks Release Deploy Stage Deploy Prod Continuous Integration Continuous Delivery A key DevOps Visibility and Audit Review changes beforehand, detect configuration drifts, and take action Enhanced Security Familiar tools and Git workflows from application development teams Standard Workflow Multi-cluster Detect drift Take action CD Continuous Integration & Continuous Delivery 10 Build Test Security Checks Release Deploy Stage Deploy Prod OpenShift Build Automate building container images

most larger and enterprise organizations use multiple clusters for different business and team needs. Managing these clusters and keeping configuration and organizational security and other policies has Infrastructure as code as one of its characteristics. STRONGER SECURITY GUARANTEES Git’s firm correctness and security guarantees — backed by the strong cryptography used to track and manage authorship and origin — are key to a correct and secure definition of the cluster’s desired state. If a security breach does occur, the immutable and auditable source of truth can be used to recreate a new

standardized and fully reproducible infrastructure configurations. Enhanced security GitOps approach helps organizations enforce security best practices and track all the infrastructure changes and corresponding DevOps Blog GitHub vs GitLab vs Bitbucket: What’s The Difference & How To Choose How To Use Elastic Enterprise Search with GitHub Kubernetes Guide, a tutorial series Automation In DevOps: Why & How To Automate

Monolithic Sprint Cloud Coding VScode EFK Prometheus Serverless Tencent Serverless System Resource Mysql Ceph Docker KVM 业务运维 平台运维 系统运维 Serverless 介绍 什么是 Serverless、Serverless 提供的运维能力 Serverless 业务运维能力 注册公有云 账号 2 days 资源 Resource 购买CVM 域名备案 申请SSL证书 购买域名 1 week 配置 Config 监控系统 安装Nginx 安装MySQL 日志服务 告警系统 安装NodeJS 2 weeks 测试联调 后端开发 系统运维 前端开发 4 weeks 开发 Coding 上线 Online More Than 最终上线后，我需要维护… 运维复杂 Complex Ops 测试复杂 Complex Test 扩展复杂 Complex Scaling 稳定安全 Reliability, Security 只关注核心业务 核心业务逻辑 Core Business Code 数据库读写，文件存储 DB & Storage THANKS ServerlessCloudNative 用户Q群：537539545