基础设施与运维
tls-automation-migration
更新于 2026-07-20
TLS Automation · 迁移规则
Migration rules for TLS Automation: expand/contract phases, idempotent steps and rehearsed rollback.
- 技术栈
- TLS Automation
- 主题
- 迁移
- 条目
- 9 条
- 版本
- v0.2.0
✓ 应当这么做
- ✓ Split every breaking change into expand, migrate and contract phases
- ✓ Make the migration idempotent so a re-run is a no-op
- ✓ Rehearse on a production-shaped copy and record the rollback path
✕ 常见反模式
- ✕ Irreversible destructive steps in the same release as code removal
- ✕ Big-bang cutovers with no parallel running period
- ✕ Migrations that depend on manual console steps
◎ 交付前验证
- ◎ Certificate chain and expiry verified from an external vantage point
- ◎ Cache headers inspected on HTML and on hashed assets
- ◎ Proxy configuration validated before reload, with rollback ready
同分类条目
38 篇基础设施与运维
Docker 工程规则
Production Dockerfile rules: minimal multi-stage images and non-root runtime
基础设施与运维
Docker Compose 工程规则
Compose rules: explicit healthchecks, pinned images and network segmentation
基础设施与运维
Kubernetes 工程规则
Kubernetes rules: resource limits, readiness probes and rolling-update safety
基础设施与运维
Helm 工程规则
Helm rules: values schema validation and template-time guard rails
基础设施与运维
Terraform 工程规则
Terraform rules: locked remote state, reviewed plans and no console drift
基础设施与运维
Ansible 工程规则
Ansible rules: idempotent tasks, changed_when discipline and vaulted secrets