基础设施与运维
object-storage
更新于 2026-08-10
Object Storage 工程规则
Object storage rules: private-by-default buckets and presigned URL lifetimes
- 技术栈
- Object Storage
- 主题
- 工程基线
- 条目
- 9 条
- 版本
- v0.2.0
✓ 应当这么做
- ✓ Bootstrap a host with a single idempotent script or image, not interactive steps
- ✓ Expose the smallest possible port surface and pin TLS configuration
- ✓ Keep runtime configuration in versioned files under the operator account
✕ 常见反模式
- ✕ Password logins on public SSH endpoints
- ✕ Ad-hoc firewall openings that are never reverted
- ✕ Configuration edited in place without a backup copy
◎ 交付前验证
- ◎ Rebuild the host from the bootstrap path at least once
- ◎ Port scan matches the intended surface
- ◎ Backups restored successfully into a scratch environment
同分类条目
38 篇基础设施与运维
Docker 工程规则
Production Dockerfile rules: minimal multi-stage images and non-root runtime
基础设施与运维
Docker Compose 工程规则
Compose rules: explicit healthchecks, pinned images and network segmentation
基础设施与运维
Kubernetes 工程规则
Kubernetes rules: resource limits, readiness probes and rolling-update safety
基础设施与运维
Helm 工程规则
Helm rules: values schema validation and template-time guard rails
基础设施与运维
Terraform 工程规则
Terraform rules: locked remote state, reviewed plans and no console drift
基础设施与运维
Ansible 工程规则
Ansible rules: idempotent tasks, changed_when discipline and vaulted secrets