基础设施与运维
ansible-playbook-ci-cd
更新于 2026-07-19
Ansible · 持续交付规则
CI/CD rules for Ansible: fail-fast stages, digest pinning and one promoted artifact.
- 技术栈
- Ansible
- 主题
- 持续交付
- 条目
- 9 条
- 版本
- v0.2.0
✓ 应当这么做
- ✓ Fail fast: format, lint, typecheck, test, build — in that order
- ✓ Pin actions and base images by digest for anything touching credentials
- ✓ Keep one artifact promoted through environments instead of rebuilds
✕ 常见反模式
- ✕ Secrets echoed into logs
- ✕ Pipelines only running on the default branch
- ✕ Deploy steps with no rollback button
◎ 交付前验证
- ◎ `plan` shows only the intended changes
- ◎ Policy checks (tags, encryption, public exposure) pass
- ◎ Rollback path for stateful resources documented
同分类条目
38 篇基础设施与运维
Docker 工程规则
Production Dockerfile rules: minimal multi-stage images and non-root runtime
基础设施与运维
Docker Compose 工程规则
Compose rules: explicit healthchecks, pinned images and network segmentation
基础设施与运维
Kubernetes 工程规则
Kubernetes rules: resource limits, readiness probes and rolling-update safety
基础设施与运维
Helm 工程规则
Helm rules: values schema validation and template-time guard rails
基础设施与运维
Terraform 工程规则
Terraform rules: locked remote state, reviewed plans and no console drift
基础设施与运维
Ansible 工程规则
Ansible rules: idempotent tasks, changed_when discipline and vaulted secrets