基础设施与运维 terraform-module-security 更新于 2026-10-08

Terraform · 安全规则

Security rules for Terraform: boundary validation, server-side authorisation and zero secret leakage.

✓ 应当这么做

✓ Validate and normalise every input at the boundary it enters the system
✓ Authorise on the server against the authenticated principal, never on client claims
✓ Keep secrets out of repositories, logs and error messages

38 篇

Production Dockerfile rules: minimal multi-stage images and non-root runtime

Compose rules: explicit healthchecks, pinned images and network segmentation

Kubernetes rules: resource limits, readiness probes and rolling-update safety

Helm rules: values schema validation and template-time guard rails

Terraform rules: locked remote state, reviewed plans and no console drift

Ansible rules: idempotent tasks, changed_when discipline and vaulted secrets