enables: correlated and centralized logs, container security, east/west traffic management, a zero-trust model, a whitelist, Role-Based Access Control (RBAC), continuous monitoring, signature-based the service mesh 6. Zero Trust down to the container level. Zero trust requires strict controls, never trust anything by default and always verify. Key aspects of zero trust at the container level

only about one-third were successful at improving the key metric!” iii. A/B testing helps reduce zero or negative value add features to the baseline that also increase maintenance costs and identify to testing failure – seems valid since better testing practices could have mitigated iii. In low-trust, command & control cultures, change control often results in worse outcomes d. POTENTIAL DANGERS

Third Way: The Principles of Continual Learning and Experimentation 37 i. culture of fear and low trust 1. workers who make mistakes are punished 2. those who make suggestions or point out problems are suppressing, even punishing, learning and improvement, perpetuating quality and safety problems ii. high-trust culture 1. we are all lifelong learners who must take risks in our daily work 2. we learn from our outcomes as a shared goal, regardless of where they reside in the organization. ii. Requires high-trust cultures, transparent prioritization, and sufficient slack in the systemiii. Toyota Kata, “…one cannot

Training by David Genn (IG) @david_genn  Separate deployment from release  Automate everything  Trust your tests  Conversations are way better than project proposals  Start small, be brave quickly

书库里 # cat ca.com.crt >> /etc/pki/tls/certs/ca-bundle.crt #将ca证书添加到centos系统证书信任列表中，链接到： /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem ②安装k8s二进制组件 #使用aliyun的源（如果用的是RHEL8系列的系统，也是用的el7的仓库源，因为 k8s组

Reboot of 2014 – 10% of Amazon EC2 servers had to reboot for Xen emergency security patch. At Netflix, zero downtime, no one actively working incidents. They were at a Hollywood party celebrating an acquisition