{"id":194295,"date":"2020-06-27T08:24:19","date_gmt":"2020-06-27T00:24:19","guid":{"rendered":"https:\/\/lrxjmw.cn\/?p=194295"},"modified":"2020-06-22T09:25:34","modified_gmt":"2020-06-22T01:25:34","slug":"crd-automation","status":"publish","type":"post","link":"https:\/\/lrxjmw.cn\/crd-automation.html","title":{"rendered":"CRD\u5b9e\u73b0\u81ea\u52a8\u5316\u5bb9\u5668\u5b89\u5168\u65b9\u6cd5"},"content":{"rendered":"<table>\n<tbody>\n<tr>\n<td style=\"padding: 5px 12px; width: 25px; font-size: 22px; text-align: center; background: #E8E8E8; line-height: 30px; color: #999;\">\u5bfc\u8bfb<\/td>\n<td style=\"padding: 10px 10px 12px; line-height: 20px;\"><strong>\u957f\u4e45\u4ee5\u6765\uff0c\u5b89\u5168\u4e00\u76f4\u662f\u56f0\u6270\u7740\u8bb8\u591aDevOps\u56e2\u961f(\u5305\u62ec\u6211\u81ea\u5df1\u4f9b\u804c\u7684\u52a0\u62ff\u5927\u4fdd\u9669\u548c\u91d1\u878d\u670d\u52a1\u5408\u4f5c\u793e)\u7684\u75c7\u7ed3\u6240\u5728\u3002\u5c3d\u7ba1\u5728\u5404\u79cd\u5de5\u5177\u7684\u5e2e\u52a9\u4e0b\uff0c\u6211\u4eec\u7684CI\/CD\u7ba1\u9053\u7684\u7edd\u5927\u90e8\u5206\u90fd\u5df2\u7ecf\u5b9e\u73b0\u4e86\u81ea\u52a8\u5316\uff0c\u800c\u4e14\u57fa\u4e8e\u5bb9\u5668\u7684\u81ea\u52a8\u5316\u5e94\u7528\u90e8\u7f72\u4e5f\u662f\u6211\u4eec\u7684\u5e38\u6001\uff0c\u4f46\u662f\u5728\u5b89\u5168\u65b9\u9762\u7684\u81ea\u52a8\u5316\u7a0b\u5ea6\u4ecd\u7136\u6bd4\u8f83\u843d\u540e\u3002\u4e0e\u5927\u591a\u6570DevOps\u56e2\u961f\u4e00\u6837\uff0c\u6211\u4eec\u5b9e\u65bd\u4e86\u81ea\u52a8\u5316\u7684\u6f0f\u6d1e\u626b\u63cf\uff0c\u4f46\u662f\u5728\u624b\u52a8\u6784\u5efa\u5b89\u5168\u7b56\u7565\uff0c\u4ee5\u4fdd\u62a4\u751f\u4ea7\u73af\u5883\u4e2d\u7684\u5e94\u7528\u7a0b\u5e8f\u3001\u53ca\u5176\u5de5\u4f5c\u8d1f\u8f7d\u65b9\u9762\u4ecd\u5b58\u5728\u7740\u4e00\u5b9a\u7684\u95ee\u9898\u3002<\/strong><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>\u53ef\u559c\u7684\u662f\uff0c\u5982\u4ecaKubernetes\u7684\u81ea\u5b9a\u4e49\u8d44\u6e90\u7c7b\u578b(custom resource definitions\uff0cCRDs)\uff0c\u5374\u80fd\u591f\u4f7f\u6211\u4eec\u7684\u56e2\u961f\u901a\u8fc7\u81ea\u5df1\u7684\u7ba1\u9053\uff0c\u5c3d\u65e9\u5730\u5c06\u5e94\u7528\u7a0b\u5e8f\u7684\u5b89\u5168\u7b56\u7565\u58f0\u660e\u878d\u5165\u4ee3\u7801\uff0c\u5e76\u5c06\u6b64\u7c7b\u5b89\u5168\u7b56\u7565\u81ea\u52a8\u5316\u5730\u90e8\u7f72\u5230\u751f\u4ea7\u73af\u5883\u4e2d\u3002<\/p>\n<p>\u76ee\u524d\uff0c\u6211\u4eec\u901a\u8fc7CRD\u5f15\u5165\u4e86\u5404\u79cd\u5168\u5c40\u5b89\u5168\u7b56\u7565\u3002\u8fd9\u4e9b\u7b56\u7565\u9884\u5b9a\u4e49\u4e86\u5e94\u7528\u7a0b\u5e8f\u7684\u5141\u8bb8\u884c\u4e3a\uff0c\u5e76\u5728\u591a\u4e2aKubernetes\u96c6\u7fa4\u4e4b\u95f4\u5b9e\u65bd\u4e86\u4e0d\u540c\u7684\u9632\u62a4\u63aa\u65bd\u3002\u901a\u8fc7\u4f7f\u7528CRD\u6765\u81ea\u52a8\u5316\u4e14\u96c6\u4e2d\u5316\u5730\u7ba1\u7406\u5b89\u5168\u7b56\u7565\u5373\u4ee3\u7801(security policy as code)\uff0c\u6211\u4eec\u65e2\u53ef\u4ee5\u52a0\u5f3a\u4e0e\u7b80\u5316\u7b56\u7565\u7684\u6267\u884c\uff0c\u53c8\u80fd\u591f\u4ee5\u9ad8\u6548\u3001\u5bb9\u9519\u4e14\u5b89\u5168\u7684\u65b9\u5f0f\u90e8\u7f72\u548c\u66f4\u65b0\u5404\u79cd\u5e94\u7528\u7a0b\u5e8f\u3002<\/p>\n<p>\u4e0b\u9762\uff0c\u6211\u4eec\u5c06\u5206\u4eab\u672c\u4f01\u4e1a\u662f\u5982\u4f55\u5b9e\u73b0\u5e94\u7528\u5b89\u5168\u7b56\u7565\u7684\u81ea\u52a8\u5316\uff1a<\/p>\n<div   id="j6sjwn9j3u"    style=\"font-size: 14pt; color: white; background-color: black; border-left: red 10px solid; padding-left: 14px; margin-bottom: 20px; margin-top: 20px;\"><strong>CRD\u7684\u4f18\u52bf<\/strong><\/div>\n<p>\u4e3a\u4e86\u5229\u7528\u5bb9\u5668\u5de5\u5177\u6240\u63d0\u4f9b\u7684\u5404\u9879\u4f18\u52bf\uff0c\u6211\u4eec\u7684\u56e2\u961f\u4f7f\u7528\u4e86NeuVector CRD\uff0c\u5e76\u5728NeuVector\u5bb9\u5668\u5b89\u5168\u5e73\u53f0\u5185\u5b9a\u4e49\u4e86\u5404\u79cd\u5b89\u5168\u7b56\u7565\u3002<\/p>\n<li>\u9996\u5148\u901a\u8fc7CRD\uff0c\u6211\u4eec\u8ba9\u8fd9\u4e9b\u7b56\u7565\u80fd\u591f\u6355\u83b7\u5e94\u7528\u7a0b\u5e8f\u6700\u521d\u7684\u6b63\u5e38\u4e0e\u5408\u6cd5\u884c\u4e3a\uff0c\u5e76\u4ee5\u6b64\u5efa\u7acb\u4e00\u4e2a\u5b8c\u6574\u7684\u914d\u7f6e\u6863\u6848(profile)\u3002<\/li>\n<li>\u63a5\u7740\uff0cCRD\u5c06\u8fd9\u4e9b\u884c\u4e3a\u5217\u5165\u767d\u540d\u5355\uff0c\u5176\u4e2d\u5305\u62ec\uff1a\u4e0e\u5e94\u7528\u7a0b\u5e8f\u7684\u6807\u51c6\u64cd\u4f5c\u76f8\u4e00\u81f4\u7684\u6240\u6709\u7f51\u7edc\u89c4\u5219\u3001\u6d41\u7a0b\u3001\u534f\u8bae\u3001\u4ee5\u53ca\u6587\u4ef6\u6d3b\u52a8\u3002<\/li>\n<li>\u6700\u540e\uff0c\u5728\u5e94\u7528\u7a0b\u5e8f\u7684\u5bb9\u5668\u73af\u5883\u5185\uff0cCRD\u901a\u8fc7\u53ea\u5141\u8bb8\u90a3\u4e9b\u83b7\u6279\u7684\u7f51\u7edc\u8fde\u63a5(\u4f7f\u7528ISO\u7b2c7\u5c42\u7684\u5e94\u7528\u534f\u8bae\uff0c\u8fdb\u884c\u8bc6\u522b\u4e0e\u68c0\u67e5)\u6765\u63d0\u4f9b\u5b89\u5168\u6027\uff0c\u5e76\u62d2\u7edd\u4efb\u4f55\u5f02\u5e38\u7684\u5916\u90e8\u8fde\u63a5\u3002<\/li>\n<p>\u636e\u6b64\uff0c\u6211\u4eec\u7684\u7b56\u7565\u4fbf\u80fd\u591f\u9632\u6b62\u653b\u51fb\u8005\u8bd5\u56fe\u5229\u7528\u5185\u90e8\u6216\u5916\u90e8\u7684\u901a\u4fe1\u8fde\u63a5\uff0c\u8fdb\u5165\u5e94\u7528\u7a0b\u5e8f\u6240\u5728\u7684\u751f\u4ea7\u73af\u5883\u3002<\/p>\n<p>CRD\u65e2\u5141\u8bb8\u6211\u4eec\u57fa\u4e8e\u5168\u5c40\u6216\u6bcf\u4e00\u4e2a\u670d\u52a1\uff0c\u6765\u5b9a\u4e49\u4e0d\u540c\u7684\u89c4\u5219;\u53c8\u901a\u8fc7\u652f\u6301RBAC\uff0c\u4f7f\u6211\u4eec\u80fd\u591f\u5229\u7528\u672c\u5730\u7684Kubernetes\u670d\u52a1\u5e10\u6237\u4e0e\u89d2\u8272\uff0c\u6765\u5b9e\u65bd\u5404\u9879\u5b89\u5168\u7b56\u7565\u3002\u540c\u65f6\uff0c\u5b83\u7684\u7248\u672c\u63a7\u5236\u529f\u80fd\u4e5f\u6709\u52a9\u4e8e\u6211\u4eec\u8ddf\u8e2a\u6bcf\u4e00\u4e2a\u5e94\u7528\u7a0b\u5e8f\u4fee\u8ba2\u7248\u7684\u7b56\u7565\u3002\u53e6\u5916\uff0c\u8bf8\u5982Open Policy Agent\u4e4b\u7c7b\u7684\u5b89\u5168\u7b56\u7565\u7ba1\u7406\u5de5\u5177\uff0c\u4e5f\u80fd\u591f\u6309\u9700\u652f\u6301\u5404\u7c7b\u96c6\u6210\u3002<\/p>\n<div   id="j6sjwn9j3u"    style=\"font-size: 14pt; color: white; background-color: black; border-left: red 10px solid; padding-left: 14px; margin-bottom: 20px; margin-top: 20px;\"><strong>\u521b\u5efaNeuVector CRD<\/strong><\/div>\n<p>NeuVector CRD\u5141\u8bb8\u60a8\u4f7f\u7528Kubernetes\u7684\u672c\u5730YAML\u6587\u4ef6\u6765\u521b\u5efa\u5404\u9879\u5b89\u5168\u89c4\u5219\u3002<\/p>\n<p>\u9996\u5148\uff0c\u60a8\u9700\u8981\u521b\u5efa\u4e00\u4e2aNeuVector CRD\u3002\u5982\u4e0b\u56fe\u6240\u793a\uff0c\u6211\u4eec\u4f7f\u7528YAML\u4ee3\u7801\u521b\u5efa\u4e86\u4e00\u4e2aCRD\u3002\u540c\u65f6\uff0c\u6211\u4eec\u4e3aNvSecurityRule\u5b9a\u4e49\u4e86\u4e00\u4e2anamespaced\u57df\uff0c\u5e76\u5c06NvClusterSecurityRule\u7684\u57df\u8303\u56f4\u5b9a\u4e49\u4e3a\u80fd\u591f\u8de8\u96c6\u7fa4\u8fdb\u884c\u64cd\u4f5c<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/lrxjmw.cn\/wp-content\/uploads\/2020\/06\/1-16.jpg\" alt=\"\" width=\"651\" height=\"738\" class=\"alignnone size-full wp-image-194296\" srcset=\"https:\/\/lrxjmw.cn\/wp-content\/uploads\/2020\/06\/1-16.jpg 651w, https:\/\/lrxjmw.cn\/wp-content\/uploads\/2020\/06\/1-16-265x300.jpg 265w\" sizes=\"auto, (max-width: 651px) 100vw, 651px\" \/><\/p>\n<p><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/lrxjmw.cn\/wp-content\/uploads\/2020\/06\/2-8.jpg\" alt=\"\" width=\"600\" height=\"614\" class=\"alignnone size-full wp-image-194297\" srcset=\"https:\/\/lrxjmw.cn\/wp-content\/uploads\/2020\/06\/2-8.jpg 600w, https:\/\/lrxjmw.cn\/wp-content\/uploads\/2020\/06\/2-8-293x300.jpg 293w\" sizes=\"auto, (max-width: 600px) 100vw, 600px\" \/><\/p>\n<p>\u6211\u4eec\u901a\u8fc7\u8fd0\u884c\u5982\u4e0b\u547d\u4ee4\u6765\u521b\u5efaCRD\uff1a<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/lrxjmw.cn\/wp-content\/uploads\/2020\/06\/3-5.jpg\" alt=\"\" width=\"600\" height=\"119\" class=\"alignnone size-full wp-image-194298\" srcset=\"https:\/\/lrxjmw.cn\/wp-content\/uploads\/2020\/06\/3-5.jpg 600w, https:\/\/lrxjmw.cn\/wp-content\/uploads\/2020\/06\/3-5-300x60.jpg 300w\" sizes=\"auto, (max-width: 600px) 100vw, 600px\" \/><\/p>\n<li>\u6709\u4e86NeuVector CRD\u4e4b\u540e\uff0c\u6240\u6709\u7531NvSecurityRule\u7c7b\u578b\u8c03\u7528\u7684\u81ea\u5b9a\u4e49\u8d44\u6e90\uff0c\u73b0\u5728\u90fd\u53ef\u4ee5\u4ea4\u7531CRD\u6765\u5904\u7406\u3002\u56e0\u6b64\uff0c\u60a8\u53ef\u4ee5\u7ee7\u7eed\u521b\u5efa\u5404\u79cd\u81ea\u5b9a\u4e49\u7684\u8d44\u6e90\uff0c\u6765\u5b9a\u4e49\u66f4\u591a\u7684\u5b89\u5168\u7b56\u7565\u3002\u4e0d\u8fc7\u5728\u6b64\u4e4b\u524d\uff0c\u8bf7\u53c2\u8003NeuVector\u7684\u76f8\u5173\u6587\u6863\uff0c\u4ee5\u6dfb\u52a0\u6240\u6709\u5fc5\u9700\u7684clusterroles\u548cclusterrolebindings\u3002<\/li>\n<p>\u53e6\u5916\uff0cCRD\u53ef\u4ee5\u5728Kubernetes\u5185\u90e8\u90e8\u7f72\u539f\u751f\u7684\u3001\u542f\u7528\u4e86RBAC\u7684NeuVector\u5b89\u5168\u89c4\u5219\u3002\u90a3\u4e9b\u7531CRD\u4e3a\u7279\u5b9a\u7684\u540d\u79f0\u7a7a\u95f4\u6240\u58f0\u660e\u7684\u5b89\u5168\u7b56\u7565\uff0c\u53ea\u80fd\u7531\u5177\u5907\u90e8\u7f72\u5230\u5de5\u4f5c\u533a\u6743\u9650\u7684\u670d\u52a1\u5e10\u6237\u6765\u6267\u884c\u3002\u540c\u6837\u5730\uff0c\u670d\u52a1\u5e10\u6237\u5fc5\u987b\u5177\u6709\u9002\u5f53\u7684\u7fa4\u96c6\u7ba1\u7406\u5458\u6743\u9650\uff0c\u624d\u80fd\u591f\u8de8\u540d\u79f0\u7a7a\u95f4\u90e8\u7f72\u90a3\u4e9b\u7fa4\u96c6\u8303\u56f4\u7684CRD\u5b9a\u4e49\u3002<\/p>\n<p>\u4ee5\u4e0b\u662fdemo-security-v1.yaml\u6587\u4ef6\u7684\u4ee3\u7801\u7247\u6bb5\u3002\u5b83\u4f7f\u7528HTTP\u534f\u8bae\uff0c\u6765\u9650\u5236demo\u540d\u79f0\u7a7a\u95f4\u4e2d\u7684nginx-pod\u5bb9\u5668\uff0c\u53bb\u8fde\u63a5\u540c\u4e00\u540d\u79f0\u7a7a\u95f4\u4e2d\u7684node-pod\u5bb9\u5668\u3002<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/lrxjmw.cn\/wp-content\/uploads\/2020\/06\/4-4.jpg\" alt=\"\" width=\"600\" height=\"940\" class=\"alignnone size-full wp-image-194299\" srcset=\"https:\/\/lrxjmw.cn\/wp-content\/uploads\/2020\/06\/4-4.jpg 600w, https:\/\/lrxjmw.cn\/wp-content\/uploads\/2020\/06\/4-4-191x300.jpg 191w\" sizes=\"auto, (max-width: 600px) 100vw, 600px\" \/><\/p>\n<p>\u9664\u4e86\u4e0a\u8ff0\u4ee3\u7801\u6bb5\uff0cyaml\u6587\u4ef6\u8fd8\u5e94\u8be5\u7ee7\u7eed\u6307\u5b9ademo\u540d\u79f0\u7a7a\u95f4\u4e2d\u5404\u4e2a\u5bb9\u5668\u6240\u5141\u8bb8\u7684\u6240\u6709\u7f51\u7edc\u8fde\u63a5\uff0c\u4f7f\u7528Redis\u534f\u8bae\u7684\u7f51\u7edc\u8fde\u63a5\uff0c\u4ee5\u53ca\u6bcf\u4e2a\u5bb9\u5668\u5141\u8bb8\u7684\u8fdb\u7a0b\u4e0e\u6587\u4ef6\u6d3b\u52a8\u3002\u5728\u90e8\u7f72\u5e94\u7528\u7a0b\u5e8f\u4e4b\u524d\uff0c\u60a8\u53ef\u4ee5\u901a\u8fc7\u5c06\u5b83\u4eec\u90e8\u7f72\u5230NeuVector\u4e2d\uff0c\u4ee5\u63d0\u524d\u51c6\u5907\u597d\u5b89\u5168\u89c4\u5219\u3002\u6b64\u4e3e\u53ef\u8ba9\u5e94\u7528\u7a0b\u5e8f\u5728\u5f00\u59cb\u8fd0\u884c\u4e4b\u65f6\uff0c\u5c31\u5df2\u7ecf\u6fc0\u6d3b\u4e86\u76f8\u5e94\u7684\u5b89\u5168\u5c5e\u6027\u3002<\/p>\n<p>\u8bf7\u53c2\u7167\u5982\u4e0b\u547d\u4ee4\u90e8\u7f72\u60a8\u7684\u5b89\u5168\u7b56\u7565\uff1a<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/lrxjmw.cn\/wp-content\/uploads\/2020\/06\/6-2.jpg\" alt=\"\" width=\"600\" height=\"173\" class=\"alignnone size-full wp-image-194300\" srcset=\"https:\/\/lrxjmw.cn\/wp-content\/uploads\/2020\/06\/6-2.jpg 600w, https:\/\/lrxjmw.cn\/wp-content\/uploads\/2020\/06\/6-2-300x87.jpg 300w\" sizes=\"auto, (max-width: 600px) 100vw, 600px\" \/><\/p>\n<li>NeuVector\u4f1a\u5728\u65b0\u521b\u5efa\u7684\u81ea\u5b9a\u4e49\u8d44\u6e90\u4e2d\u89e3\u6790\u5b89\u5168\u7b56\u7565\uff0c\u5e76\u7ee7\u7eed\u5bf9NeuVector Controller\u8fdb\u884cREST API\u7684\u8c03\u7528\u3002\u8be5Controller\u4f1a\u6309\u9700\u5728NeuVector\u4e2d\u901a\u8fc7\u521b\u5efa\u89c4\u5219\u548c\u914d\u7f6e\uff0c\u4ee5\u5b9e\u65bd\u5404\u9879\u7b56\u7565\u3002<\/li>\n<p>\u53e6\u5916\uff0cCRD\u53ef\u4ee5\u5728Kubernetes\u5185\u90e8\u90e8\u7f72\u539f\u751f\u7684\u3001\u542f\u7528\u4e86RBAC\u7684NeuVector\u5b89\u5168\u89c4\u5219\u3002\u90a3\u4e9b\u7531CRD\u4e3a\u7279\u5b9a\u7684\u540d\u79f0\u7a7a\u95f4\u6240\u58f0\u660e\u7684\u5b89\u5168\u7b56\u7565\uff0c\u53ea\u80fd\u7531\u5177\u5907\u90e8\u7f72\u5230\u5de5\u4f5c\u533a\u6743\u9650\u7684\u670d\u52a1\u5e10\u6237\u6765\u6267\u884c\u3002\u540c\u6837\u5730\uff0c\u670d\u52a1\u5e10\u6237\u5fc5\u987b\u5177\u6709\u9002\u5f53\u7684\u7fa4\u96c6\u7ba1\u7406\u5458\u6743\u9650\uff0c\u624d\u80fd\u591f\u8de8\u540d\u79f0\u7a7a\u95f4\u90e8\u7f72\u90a3\u4e9b\u7fa4\u96c6\u8303\u56f4\u7684CRD\u5b9a\u4e49\u3002<\/p>\n<p>\u4ee5\u4e0b\u662fdemo-security-v1.yaml\u6587\u4ef6\u7684\u4ee3\u7801\u7247\u6bb5\u3002\u5b83\u4f7f\u7528HTTP\u534f\u8bae\uff0c\u6765\u9650\u5236demo\u540d\u79f0\u7a7a\u95f4\u4e2d\u7684nginx-pod\u5bb9\u5668\uff0c\u53bb\u8fde\u63a5\u540c\u4e00\u540d\u79f0\u7a7a\u95f4\u4e2d\u7684node-pod\u5bb9\u5668\u3002<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/lrxjmw.cn\/wp-content\/uploads\/2020\/06\/7-2.jpg\" alt=\"\" width=\"600\" height=\"940\" class=\"alignnone size-full wp-image-194301\" srcset=\"https:\/\/lrxjmw.cn\/wp-content\/uploads\/2020\/06\/7-2.jpg 600w, https:\/\/lrxjmw.cn\/wp-content\/uploads\/2020\/06\/7-2-191x300.jpg 191w\" sizes=\"auto, (max-width: 600px) 100vw, 600px\" \/><\/p>\n<p>\u9664\u4e86\u4e0a\u8ff0\u4ee3\u7801\u6bb5\uff0cyaml\u6587\u4ef6\u8fd8\u5e94\u8be5\u7ee7\u7eed\u6307\u5b9ademo\u540d\u79f0\u7a7a\u95f4\u4e2d\u5404\u4e2a\u5bb9\u5668\u6240\u5141\u8bb8\u7684\u6240\u6709\u7f51\u7edc\u8fde\u63a5\uff0c\u4f7f\u7528Redis\u534f\u8bae\u7684\u7f51\u7edc\u8fde\u63a5\uff0c\u4ee5\u53ca\u6bcf\u4e2a\u5bb9\u5668\u5141\u8bb8\u7684\u8fdb\u7a0b\u4e0e\u6587\u4ef6\u6d3b\u52a8\u3002\u5728\u90e8\u7f72\u5e94\u7528\u7a0b\u5e8f\u4e4b\u524d\uff0c\u60a8\u53ef\u4ee5\u901a\u8fc7\u5c06\u5b83\u4eec\u90e8\u7f72\u5230NeuVector\u4e2d\uff0c\u4ee5\u63d0\u524d\u51c6\u5907\u597d\u5b89\u5168\u89c4\u5219\u3002\u6b64\u4e3e\u53ef\u8ba9\u5e94\u7528\u7a0b\u5e8f\u5728\u5f00\u59cb\u8fd0\u884c\u4e4b\u65f6\uff0c\u5c31\u5df2\u7ecf\u6fc0\u6d3b\u4e86\u76f8\u5e94\u7684\u5b89\u5168\u5c5e\u6027\u3002<\/p>\n<p>\u8bf7\u53c2\u7167\u5982\u4e0b\u547d\u4ee4\u90e8\u7f72\u60a8\u7684\u5b89\u5168\u7b56\u7565\uff1a<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/lrxjmw.cn\/wp-content\/uploads\/2020\/06\/8.jpg\" alt=\"\" width=\"600\" height=\"173\" class=\"alignnone size-full wp-image-194302\" srcset=\"https:\/\/lrxjmw.cn\/wp-content\/uploads\/2020\/06\/8.jpg 600w, https:\/\/lrxjmw.cn\/wp-content\/uploads\/2020\/06\/8-300x87.jpg 300w\" sizes=\"auto, (max-width: 600px) 100vw, 600px\" \/><\/p>\n<li>NeuVector\u4f1a\u5728\u65b0\u521b\u5efa\u7684\u81ea\u5b9a\u4e49\u8d44\u6e90\u4e2d\u89e3\u6790\u5b89\u5168\u7b56\u7565\uff0c\u5e76\u7ee7\u7eed\u5bf9NeuVector Controller\u8fdb\u884cREST API\u7684\u8c03\u7528\u3002\u8be5Controller\u4f1a\u6309\u9700\u5728NeuVector\u4e2d\u901a\u8fc7\u521b\u5efa\u89c4\u5219\u548c\u914d\u7f6e\uff0c\u4ee5\u5b9e\u65bd\u5404\u9879\u7b56\u7565\u3002<\/li>\n<div   id="j6sjwn9j3u"    style=\"font-size: 14pt; color: white; background-color: black; border-left: red 10px solid; padding-left: 14px; margin-bottom: 20px; margin-top: 20px;\"><strong>\u5b89\u5168\u7b56\u7565\u5373\u4ee3\u7801\u7684\u7528\u4f8b<\/strong><\/div>\n<p>\u6211\u4e2a\u4eba\u8ba4\u4e3a\uff1aCRD\u548c\u5b89\u5168\u7b56\u7565\u5373\u4ee3\u7801\u7684\u5b9a\u4e49\u80fd\u529b\uff0c\u5e94\u8be5\u80fd\u591f\u4e3aDevOps\u3001DevSecOps\u3001\u4ee5\u53ca\u5f00\u53d1\u56e2\u961f\u5e26\u6765\u66f4\u597d\u7684\u5b89\u5168\u6027\u3002\u6211\u4eec\u53ef\u4ee5\u4ece\u5982\u4e0b\u56db\u4e2a\u65b9\u9762\u7740\u624b\u8fdb\u884c\u5b9e\u8df5\uff1a<\/p>\n<div   id="j6sjwn9j3u"    style=\"font-size: 14pt; color: white; background-color: black; border-left: red 10px solid; padding-left: 14px; margin-bottom: 20px; margin-top: 20px;\"><strong>\u5c06\u5f00\u53d1\u548c\u6d4b\u8bd5\u6e05\u5355\u5c3d\u65e9\u5bfc\u5165\u5e94\u7528\u7684\u751f\u547d\u5468\u671f\u4e2d<\/strong><\/div>\n<p>\u901a\u8fc7\u4e3a\u5e94\u7528\u7a0b\u5e8f\u521b\u5efa\u90e8\u7f72\u4e0e\u5b89\u5168\u6e05\u5355\uff0c\u5f00\u53d1\u4eba\u5458\u80fd\u591f\u5728\u5f00\u53d1\u7684\u521d\u671f\u5c3d\u65e9\u7684\u5229\u7528CRD\u6765\u4fdd\u969c\u5b89\u5168\u6027\u3002\u5728\u5b8c\u6210\u955c\u50cf\u7684\u6784\u5efa\u3001\u81ea\u52a8\u5316\u6f0f\u6d1e\u626b\u63cf\u3001\u4ee5\u53caDevOps\u7684\u5ba1\u67e5\u4e4b\u540e\uff0cDevOps\u4eba\u5458\u53ef\u4ee5\u901a\u8fc7\u6d4b\u8bd5\u8fd9\u4e24\u4efd\u6e05\u5355\uff0c\u6765\u4e3a\u5f00\u53d1\u4eba\u5458\u63d0\u4f9b\u6709\u6548\u7684\u5b89\u5168\u6027\u53cd\u9988\u3002<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/lrxjmw.cn\/wp-content\/uploads\/2020\/06\/9.jpg\" alt=\"\" width=\"600\" height=\"197\" class=\"alignnone size-full wp-image-194303\" srcset=\"https:\/\/lrxjmw.cn\/wp-content\/uploads\/2020\/06\/9.jpg 600w, https:\/\/lrxjmw.cn\/wp-content\/uploads\/2020\/06\/9-300x99.jpg 300w\" sizes=\"auto, (max-width: 600px) 100vw, 600px\" \/><\/p>\n<p>\u56e0\u6b64\uff0c\u4ece\u6700\u521d\u5230\u88ab\u90e8\u7f72\u5230\u751f\u4ea7\u73af\u5883\u4e2d\uff0c\u6709\u6548\u7684\u5b89\u5168\u7b56\u7565\u59cb\u7ec8\u4f34\u968f\u7740\u65b0\u7684\u5e94\u7528\u7a0b\u5e8f\u3002<\/p>\n<div   id="j6sjwn9j3u"    style=\"font-size: 14pt; color: white; background-color: black; border-left: red 10px solid; padding-left: 14px; margin-bottom: 20px; margin-top: 20px;\"><strong>\u4f7f\u7528\u884c\u4e3a\u5b66\u4e60\u6765\u521b\u5efa\u5b89\u5168\u7b56\u7565\u3002<\/strong><\/div>\n<p>DevOps\u56e2\u961f\u53ef\u4ee5\u5728\u6d4b\u8bd5\u73af\u5883\u4e2d\u4f7f\u7528NeuVector\u7684\u884c\u4e3a\u5b66\u4e60\u529f\u80fd\uff0c\u6765\u5b9a\u4e49\u5b89\u5168\u7b56\u7565\uff0c\u5e76\u521b\u5efa\u9488\u5bf9NeuVector CRD\u7684YAML\u683c\u5f0f\u6587\u4ef6\u3002\u901a\u8fc7\u5982\u4e0b\u7684\u5de5\u4f5c\u6d41(\u4ece\u56fe\u7684\u53f3\u4e0b\u89d2\u5f00\u59cb)\uff0cDevOps\u548cQA\u56e2\u961f\u5c31\u80fd\u591f\u5c06\u5e94\u7528\u7a0b\u5e8f\u987a\u5229\u5730\u90e8\u7f72\u5230\u6d4b\u8bd5\u4e0eQA\u73af\u5883\u4e4b\u4e2d\u3002\u4e5f\u5c31\u662f\u8bf4\uff0c\u5e94\u7528\u7a0b\u5e8f\u5728\u6b64\u5c06\u5b8c\u6210\u5168\u90e8\u4e0e\u884c\u4e3a\u76f8\u5173\u7684\u914d\u7f6e\u6587\u4ef6\uff0c\u5176\u4e2d\u5305\u62ec\uff1a\u4ea7\u751f\u9002\u5f53\u7684\u7f51\u7edc\u3001\u6d41\u7a0b\u3001\u4ee5\u53ca\u6587\u4ef6\u8bbf\u95ee\u7684\u5b89\u5168\u6027\u89c4\u5219\u7b49\u3002<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/lrxjmw.cn\/wp-content\/uploads\/2020\/06\/11-2.jpg\" alt=\"\" width=\"600\" height=\"386\" class=\"alignnone size-full wp-image-194304\" srcset=\"https:\/\/lrxjmw.cn\/wp-content\/uploads\/2020\/06\/11-2.jpg 600w, https:\/\/lrxjmw.cn\/wp-content\/uploads\/2020\/06\/11-2-300x193.jpg 300w\" sizes=\"auto, (max-width: 600px) 100vw, 600px\" \/><\/p>\n<p>\u5728\u90e8\u7f72\u5230\u751f\u4ea7\u73af\u5883\u4e4b\u524d\uff0c\u5f00\u53d1\u4eba\u5458\u53ef\u4ee5\u5c06\u65b0\u521b\u5efa\u7684\u89c4\u5219\u5bfc\u51fa\u4e3aYAML\u683c\u5f0f\uff0c\u4ee5\u4fbf\u8fdb\u884c\u68c0\u67e5\u3001\u7f16\u8f91\u3001\u4ee5\u53ca\u5f00\u5c55DevOps\u7684\u76f8\u5173\u6d4b\u8bd5\u3002<\/p>\n<div   id="j6sjwn9j3u"    style=\"font-size: 14pt; color: white; background-color: black; border-left: red 10px solid; padding-left: 14px; margin-bottom: 20px; margin-top: 20px;\"><strong>\u5b9a\u4e49\u5168\u5c40\u7684\u5b89\u5168\u7b56\u7565<\/strong><\/div>\n<p>\u503c\u5f97\u6ce8\u610f\u7684\u662f\uff1a\u901a\u8fc7\u542f\u7528\u5168\u5c40\u5b89\u5168\u7b56\u7565\u7684\u5b9a\u4e49\u65b9\u5f0f\uff0cNeuVector CRD\u65e2\u53ef\u4ee5\u4e3a\u90a3\u4e9b\u672a\u8fde\u63a5\u5230\u4efb\u4f55\u7279\u5b9a\u5e94\u7528\u7684\u8d1f\u8f7d\uff0c\u53c8\u53ef\u4ee5\u4e0d\u9488\u5bf9\u96c6\u7fa4\u4e2d\u7684\u67d0\u4e2a\u7279\u5b9a\u8d1f\u8f7d\u4e88\u4ee5\u5206\u7ec4\u3002\u4f8b\u5982\uff1a\u5b89\u5168\u3001\u5408\u89c4\u6216\u8fd0\u8425\u56e2\u961f\u53ef\u80fd\u9700\u8981\u5b9a\u4e49\u7f51\u7edc\u51fa\u3001\u5165\u53e3\u7684\u5168\u5c40\u5b89\u5168\u89c4\u5219\uff0c\u4ee5\u963b\u6b62\u67d0\u4e9b\u8fdb\u7a0b\u6a2a\u8de8\u5404\u4e2a\u5bb9\u5668\uff0c\u6216\u662f\u5141\u8bb8\u67d0\u4e9b\u8fdb\u7a0b\u5bf9\u4e8e\u6574\u4e2a\u96c6\u7fa4\u4e2d\u7684\u76d1\u63a7\u4e0e\u8bca\u65ad\u3002<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/lrxjmw.cn\/wp-content\/uploads\/2020\/06\/12-1.jpg\" alt=\"\" width=\"600\" height=\"413\" class=\"alignnone size-full wp-image-194305\" srcset=\"https:\/\/lrxjmw.cn\/wp-content\/uploads\/2020\/06\/12-1.jpg 600w, https:\/\/lrxjmw.cn\/wp-content\/uploads\/2020\/06\/12-1-300x207.jpg 300w\" sizes=\"auto, (max-width: 600px) 100vw, 600px\" \/><\/p>\n<p>\u56e0\u6b64\uff0c\u901a\u8fc7\u7ed3\u5408\u4f7f\u7528\u5168\u5c40\u7b56\u7565\uff0c\u548c\u90a3\u4e9b\u7279\u5b9a\u4e8e\u67d0\u4e2a\u5e94\u7528\u7684\u7b56\u7565\uff0c\u6574\u4e2a\u56e2\u961f\u5c31\u53ef\u4ee5\u5236\u5b9a\u51fa\u672c\u7ec4\u7ec7\u771f\u6b63\u6240\u9700\u7684\u7cbe\u786e\u89c4\u5219\u3002\u5982\u4e0b\u56fe\u6240\u793a\uff0c\u6211\u4eec\u7528\u5982\u4e0b\u89c4\u5219\u6765\u62d2\u7edd\u6765\u81ea\u5bb9\u5668\u7684SSH\u8fde\u63a5\u3002<\/p>\n<div   id="j6sjwn9j3u"    style=\"font-size: 14pt; color: white; background-color: black; border-left: red 10px solid; padding-left: 14px; margin-bottom: 20px; margin-top: 20px;\"><strong>\u5c06\u7b56\u7565\u4ece\u7814\u53d1\u9636\u6bb5\u8fc1\u79fb\u5230\u751f\u4ea7\u73af\u5883\u3002<\/strong><\/div>\n<p>\u901a\u8fc7\u4f7f\u7528NeuVector CRD\uff0c\u60a8\u53ef\u4ee5\u5c06\u5168\u90e8\u6216\u662f\u67d0\u4e9b\u9009\u5b9a\u7684\u5b89\u5168\u7b56\u7565\uff0c\u4ece\u7814\u53d1\u9636\u6bb5\u81ea\u52a8\u5316\u8fc1\u79fb\u5230\u751f\u4ea7\u73af\u5883\u4e2d\u3002\u5728NeuVector\u63a7\u5236\u53f0\u4e2d\uff0c\u60a8\u53ef\u4ee5\u901a\u8fc7\u914d\u7f6e\u201cNew Services Mode\u201d\uff0c\u6765\u53d1\u73b0\u3001\u76d1\u89c6\u6216\u4fdd\u62a4\u5404\u79cd\u8bbe\u7f6e\u3002\u901a\u8fc7\u9009\u62e9\u201cMonitor\u201d\u6216\u201cProtect\u201d\uff0c\u60a8\u53ef\u4ee5\u786e\u4fdd\u6240\u6709\u65b0\u90e8\u7f72\u7684\u3001\u6216\u66f4\u65b0\u7684\u670d\u52a1\uff0c\u5728\u6fc0\u6d3b\u4e4b\u524d\uff0c\u90fd\u5fc5\u987b\u5305\u542b\u5fc5\u9700\u7684\u5b89\u5168\u89c4\u5219\u3002<\/p>\n<p>\u7efc\u4e0a\u6240\u8ff0\uff0c\u901a\u8fc7\u5229\u7528Kubernetes CRD\u3001\u4ee5\u53ca\u5b89\u5168\u7b56\u7565\u5373\u4ee3\u7801\uff0c\u5f00\u53d1\u56e2\u961f\u548cDevOps\u56e2\u961f\u80fd\u591f\u786e\u4fdd\u4ece\u5f00\u53d1\u4f0a\u59cb\u5230\u751f\u4ea7\u90e8\u7f72\uff0c\u90fd\u80fd\u591f\u5f97\u5230\u5b89\u5168\u81ea\u52a8\u5316\u7684\u201c\u52a0\u6301\u201d\uff0c\u8fdb\u800c\u4e3a\u5e94\u7528\u7a0b\u5e8f\u63d0\u4f9b\u66f4\u597d\u7684\u4fdd\u62a4\u3002<\/p>\n","protected":false},"excerpt":{"rendered":"<p>\u53ef\u559c\u7684\u662f\uff0c\u5982\u4ecaKubernetes\u7684\u81ea\u5b9a\u4e49\u8d44\u6e90\u7c7b\u578b(custom resource definitions\uff0cC [&hellip;]<\/p>\n","protected":false},"author":1920,"featured_media":176776,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[55],"tags":[],"class_list":["post-194295","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-thread"],"acf":[],"_links":{"self":[{"href":"https:\/\/lrxjmw.cn\/wp-json\/wp\/v2\/posts\/194295","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/lrxjmw.cn\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/lrxjmw.cn\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/lrxjmw.cn\/wp-json\/wp\/v2\/users\/1920"}],"replies":[{"embeddable":true,"href":"https:\/\/lrxjmw.cn\/wp-json\/wp\/v2\/comments?post=194295"}],"version-history":[{"count":3,"href":"https:\/\/lrxjmw.cn\/wp-json\/wp\/v2\/posts\/194295\/revisions"}],"predecessor-version":[{"id":194431,"href":"https:\/\/lrxjmw.cn\/wp-json\/wp\/v2\/posts\/194295\/revisions\/194431"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/lrxjmw.cn\/wp-json\/wp\/v2\/media\/176776"}],"wp:attachment":[{"href":"https:\/\/lrxjmw.cn\/wp-json\/wp\/v2\/media?parent=194295"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/lrxjmw.cn\/wp-json\/wp\/v2\/categories?post=194295"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/lrxjmw.cn\/wp-json\/wp\/v2\/tags?post=194295"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}