基础设施与运维 cost-control 更新于 2026-10-03

Cloud Cost Control 工程规则

Cost rules: tagging every resource and reviewing idle capacity monthly

✓ 应当这么做

✓ Bootstrap a host with a single idempotent script or image, not interactive steps
✓ Expose the smallest possible port surface and pin TLS configuration
✓ Keep runtime configuration in versioned files under the operator account

38 篇

Production Dockerfile rules: minimal multi-stage images and non-root runtime

Compose rules: explicit healthchecks, pinned images and network segmentation

Kubernetes rules: resource limits, readiness probes and rolling-update safety

Helm rules: values schema validation and template-time guard rails

Terraform rules: locked remote state, reviewed plans and no console drift

Ansible rules: idempotent tasks, changed_when discipline and vaulted secrets