/var/lib/pgsql/13/* /data_pg/ #将原数据目录下所有内容移动到新 数据目录下 # vi /usr/lib/systemd/system/postgresql-13.service #pg-13版本，修改systemd服 务文件，指定数据目录 #修改这行：Environment=PGDATA=/var/lib/pgsql/13/data/ 改为新的路径，如 下： /var/lib/pgsql/* /data_pg/ #将原数据目录下所有内容移动到新数 据目录下 # vi /usr/lib/systemd/system/postgresql.service #pg-10版本，修改systemd服务 文件，指定数据目录 #修改这行：Environment=PGDATA=/var/lib/pgsql/data/ 改为新的路径，如下： E ---------------- PostgreSQL 13.13 on x86_64-pc-linux-gnu, compiled by gcc (GCC) 8.5.0 20210514 (Red Hat 8.5.0-18)... postgres=# select usename from pg_user; #查看系统用户 usename ---------- postgres

Operation Framework study found the best-performing organization were better at diagnosing & fixing service incidents. 1. “Culture of Causality” 2. Used disciplined approach to solving problems using telemetry make tracking anything easy…We enable engineers to track what they need to track, at the drop of a hat, without requiring time-sucking configuration changes or complicated processes.” iv. 2015 State of Collection at business logic, application, & environments layer a. Events, logs, & metrics b. Common service to centralize, rotate, and delete 2. Event router responsible for storing our events and metrics

and the rest of the business has been to “keep your people under control, provide good customer service, deliver what you say you will deliver, and you will be rewarded with a seat at the table.” This Seat at the Table: IT Leadership in the Age of Agility. Before joining AWS he was the CIO of US Citizenship and Immigration Service (part of the Department of Homeland Security), CIO of Intrax, and CEO Computer Science from Yale, and an MA in Philosophy from Yale. Mark and Mike first met at the 2019 AWS Public Sector Summit in Washington, DC. They’ve been best friends ever since. Follow Us Follow our

Seat at the Table: IT Leadership in the Age of Agility. Before joining AWS he was the CIO of US Citizenship and Immigration Service (part of the Department of Homeland Security), CIO of Intrax, and CEO Computer Science from Yale, and an MA in Philosophy from Yale. Mark and Mike first met at the 2019 AWS Public Sector Summit in Washington, DC. They’ve been best friends ever since.

Seat at the Table: IT Leadership in the Age of Agility. Before joining AWS he was the CIO of US Citizenship and Immigration Service (part of the Department of Homeland Security), CIO of Intrax, and CEO Computer Science from Yale, and an MA in Philosophy from Yale. Mark and Mike first met at the 2019 AWS Public Sector Summit in Washington, DC. They’ve been best friends ever since. Fork Me on GitHub

throughout the organization.” They are self-healing ii. Netflix – April 21, 2011; entire Amazon AWS US-EAST availability zone went down; Netflix was unaffected. Since 2008 they were building and testing appropriate settings and use the tests to scan environments for vulnerabilities iii. 18F Cloud.gov (uses AWS GovCloud – 1. Created platform addressing bulk of compliance concerns driven by ATO requirements auditing, controls, and risk mitigations. ii. Bill Shinn, principle security solutions architect for AWS – auditors traditional training of sampling with screenshot evidence doesn’t really work in cloud

color contains blue. FOREGROUND_GREEN = 0x02 # text color contains green. FOREGROUND_RED = 0x04 # text color contains red. FOREGROUND_INTENSITY = 0x08 # text color is intensified. BACKGROUND_BLUE = 0x10 contains blue. BACKGROUND_GREEN = 0x20 # background color contains green. BACKGROUND_RED = 0x40 # background color contains red. BACKGROUND_INTENSITY = 0x80 # background color is intensified. std_out_handle FOREGROUND_RED | FOREGROUND_GREEN | FOREGROUND_BLUE) # reset ctypes.windll.kernel32.SetConsoleTextAttribute(std_out_ha ndle, FOREGROUND_RED | FOREGROUND_INTENSITY) # red print("red") ctypes.windll

com 10.99.1.61 k8s-node02.cof-lee.com 10.99.1.62 规划Pod网络： 10.244.0.0/16 规划Service网络： 10.7.0.0/16 # pod网络和service网络都要求为16位的地址块，且不能与环境中其他网络地址 段冲突 # hostnamectl set-hostname k8s-master1.cof-lee.com ] } # mkdir -p /etc/systemd/system/docker.service.d # docker info ★docker会修改防火墙规则，导致pod网络不通 # vi /usr/lib/systemd/system/docker.service #在[Service]下的ExecStart=/usr/bin/dockerd -H fd:// 这行下面再添加一行： address=10.99.1.51 \ # api server地址 --pod-network-cidr=10.244.0.0/16 \ # pod容器网段 --service-cidr=10.7.0.0/16 \ # service网段，即cluster ip网段 --ignore-preflight-errors=Swap \ #忽略swap未关闭而导致的检查错误 --image-repository="cof-

sidecar container will include: 1. A logging agent to push logs to a platform centralized logging service. 2. Container policy enforcement. This includes ensuring container hardening from DCAR containers notifications when there is anomalous behavior. 4. Vulnerability Management 5. A service mesh proxy to connect to the service mesh 6. Zero Trust down to the container level. Zero trust requires strict Program-specific Log Storage and Retrieval Service 2. Service Mesh 3. Program-specific artifact repository 4. Runtime Behavior Analysis Artificial Intelligence (AI) service 5. DCAR for the hardened containers

Respond to the rapidly changing competitive landscape 2. Provide stable, reliable, and secure service to the customer b. THE BUSINESS VALUE OF DEVOPS i. Code and change deployments (thirty times more iii. Production deployments (sixty times higher change success rate) iv. Mean time to restore service (168 times faster) 4. An Introduction to The DevOps Handbook xxi 5. PART I—THE THREE WAYS 1 a desired iv. Operations – the team responsible for maintaing the production environment and ensuring service levels are met v. Infosec – team responsible for securing systems and data vi. Release Managers