pg_catalg 的 schema 下 的 pg_hba_file_rules表里： INSERT INTO "pg_hba_file_rules" ("line_number", "type", "database", "user_name", "address", "netmask", "auth_method", "options", "error") VALUES (94, 'host', '{all}' #创建一个名为cof的 用户，并设置密码 postgres=# grant all on database db_test to cof; #给cof授权，有操作db_test 库的所有权限 postgres=# postgres=# revoke all on database db_test from cof; #撤销用户权限 postgres=# #提示符#前的postgres表示当前数据库名 postgres=# select datname from pg_database; #列出所有数据库（标准的sql 语句） datname ----------- postgres template1 template0 db_test postgres=#

③创建Secret secret资源是区分命名空间的 ★命令行方式创建secret 创建账号密码验证secret # kubectl create secret generic database-auth --from-literal=username=root --from- literal=password=passwd123 创建存储于某文件的认证secret # kubectl kubernetes.io/tls 2 7s database-auth Opaque 2 10m myssh-key-secret Opaque 2 3m43s # kubectl get secret database-auth -oyaml #secret的文本信息均以base64编码 "2023-12-05T21:19:48Z" name: database-auth namespace: default resourceVersion: "1167" uid: 38790a7e-30ee-4b75-8132-18bca66ca512 type: Opaque ★基于清单文件创建secret # cat > database-auth2.yaml <

0 码力 | 126 页 | 4.33 MB | 1 年前

3

DEG and 3rd Party Application Installations  Route Adds – requires heightened security access  Database Data Script Execution  Load Balancer Node Disablement  OS and Security Patching  Requesting

environment, test, c. Swing traffic to new environment, Rollback by swinging traffic back 2. Database changes a. Create two DB – put one in read only mode, backup & restore to new environment, swing