--trusted-host xxx.com ②写入配置文件 在当前用户家目录下创建.pip目录，其下创建pip.conf文件 （windows为家目录下的pip目录下创建pip.ini文件） # mkdir ~/.pip # vi ~/.pip/pip.conf [global] index-url=h�ps://xxx.com/simple trusted-host=xxx.com com proxy=h�p://x.x.x.x:3128 [install] trusted-host=xxx.com ★国内的pip源地址： h�p://mirrors.aliyun.com/pypi/simple h�ps://pypi.tuna.tsinghua.edu.cn/simple ★python2.7安装pip命令 # curl h�ps://bootstrap.pypa #测试，在浏览器打开以下地址（10.99.1.248为web server的ip） h�p://10.99.1.248:7788/simple/ ★客户端使用此pipy源 # pip3 install paramiko -i h�p://10.99.1.248:7788/simple/ --trusted-host 10.99.1.248 #上图可见成功了 ★python创建虚拟环境

10及以上，服务器规格2核cpu，2G内存及以上，可以装在虚拟机 里，也可以装在实体机上 ②规划主机名及ip k8s的服务器使用固定ip地址，配置主机名，要求能解析相应的主机名（master 结点）到对应的ip地址，可以使用内网集群的dns服务器或写入/etc/hosts文件 里。如： 主机名 ip地址 k8s-master1.cof-lee.com 10.99.1.51 k8s-master2 /etc/sysctl.conf <ip6tables = 1 net.bridge.bridge-nf-call-iptables = 1 net.bridge.bridge-nf-call-arptables = 1 net.ipv4.ip_forward = 1 EOF #前3行表示bridge设备在二层转发时也去调用iptables配置的三层规则（包含 conf <ip_vs ip_vs_sh ip_vs_rr ip_vs_wrr nf_conntrack_ipv4 EOF # modprobe ip_vs # modprobe ip_vs_sh # modprobe ip_vs_rr # modprobe ip_vs_wrr # modprobe nf_conntrack_ipv4 #一般默认只用ip_vs_rr # lsmod

_pg/data/ # systemctl daemon-reload # systemctl restart postgresql ★第3章、设置监听ip及端口号 pg默认监听127.0.0.1的ip及5432/tcp端口 ★PG-13版本 # vi /var/lib/pgsql/13/data/postgresql.conf #pg-13版本 # vi /var/lib/pgsql/13/data/pg_hba.conf #pg-13版本，添加以下一行表示允 许所有客户端ip远程连接 #若修改了存储路径，则在新的路径下/data_pg/data/pg_hba.conf host all all 0.0.0.0/0 password # systemctl vi /var/lib/pgsql/data/pg_hba.conf #pg-10版本，添加以下一行表示允许 所有客户端ip远程连接 #若修改了存储路径，则在新的路径下/data_pg/data/pg_hba.conf host all all 0.0.0.0/0 password # systemctl

verify. Key aspects of zero trust at the container level include mutual Transport Layer Security authentication (mTLS), an encrypted communication tunnel between containers, strong identities per Pod using service 5. DCAR for the hardened containers 6. Common Vulnerabilities and Exposures (CVE)Service / host-based security to provide CVEs for the security sidecar container CSIAC Webinars - DoD Enterprise

★客户端使用ssh密钥登录gitlab 编辑ssh的客户端配置文件，使用ssh登录gitlab.cof-lee.com主机时，指定用户名 及ssh私钥 # vi ~/.ssh/config Host gitlab.cof-lee.com Iden�tyFile ~/cof-sshkey User cof Iden�tyAgent none # ssh git@gitlab (6/6), done. ★配置webhook自动化触发功能 首先配置允许向本地网络（私有网段地址）发送webhook通知，如果不配置则 会报错： 管理员用户登录，点击设置： 勾选“Allow requests to the local network from webhooks and integra�ons” 点击“保存” 然后普通用户就可在自己的项目里配置“WebHook”功能了

Examples of potentially significant events (Gartner’s GTP Security & Risk Management group) 1. Authentication/authorization decisions 2. System and data access 3. System and application changes, especially

metrics observed, investigative paths taken, results, and other resolutions considered 2. Don’t allow fear of punishment or retribution creep in due to words or behaviors – find a facilitator to start or replacement iii. Create “buoys, not boundaries”; navigate the channel, mark the channel, and allow people to explore past it. 1. The marked channel provides safe, supported passage 2. You can go

learning.  we would gauge progress by seeing operational results . Agile and Lean approaches allow teams to quickly put product in the hands of users. This not only delivers value immediately, but might begin the project with a hypothesis of what will best accomplish the objectives, but then allow requirements to change. Based on what we learned, we would re-validate these hypotheses. Oversight

Better Way to Plan: Nevertheless, planning is important. In my role, I need to decide whether to allow an initiative to begin, which of course depends on whether I am satisfied with its plan. I might