Mena ka whakaaro koe i to docker-compose.yml he piripiri hanganga noa iho, whakaarohia anō. He maha ngā wā ka noho ēnei kōnae hei rokiroki koretake mō ngā mea ngaro, ngā tohu kua whakapūmautia, ngā tohu API, me ngā taurangi taiao e uru ana ki te mana whakahaere putanga. Kia tukuna ki GitHub, ki tētahi atu putunga rānei, ka taea e aua mea ngaro te noho tonu i roto commit hītori.
He maha ngā wā ka atawhaihia e ngā kaiwhakawhanake docker-compose.yml hei kōnae kore-tairongo, me te kore e aro ki te āhua o tana mahi hei whakaeke vector. Mā te turuturu iti i konei ka taea te uru atu ki ngā ratonga tūmataiti, ngā API ā-roto, te hanganga katoa rānei. Koinei ngā momo mea ngaro a ngā kaiwhakaeke e whaia ana e ngā kaiwhakaeke.
Ngā Huarahi Noa mō te Puta Mai o ngā Mea Ngaro ki te Docker-Compose Docker-Compose.yml
Anei ētahi hapa o ia rā e mahia ana e ngā kaiwhakawhanake:
1. Ngā tohu whakapūmau tika
services: db: image: postgres environment: POSTGRES_USER: admin POSTGRES_PASSWORD: supersecret123Ko te kupuhipa i roto i tēnei docker-compose.yml kua uru inaianei ki tō hītori git. Ko te mea kino rawa atu, tera pea ka whakamahia i roto i te whakaputanga. Koinei tētahi o ngā momo tino tika o ngā mea ngaro docker-compose te rongo.
2. Tārua-whakapiri mai i ngā whirihoranga tiritahi, i te StackOverflow rānei
Ka tere te horapa o ngā mahi kino. Mā te tārua i ngā tauira kore haumaru, me te whakamahi i aua tauira i tōna āhua tonu, ka puta ake ngā mea ngaro i roto i ngā taiao katoa, mai i te whakawhanake ki te whakatairanga.
3. Whakauru Tuhinga .env ngā kōnae tika me te kore e tiakina
kōnae_env: – .env
Tuhinga .env He maha ngā wā kei roto i ngā kōnae ngā kī API, ngā tohu tuakiri rānei, ā, ka wareware ngā kaiwhakawhanake ki te tāpiri atu ki .giignoreMā tēnei ka kitea ngā mea ngaro mēnā he tūmatanui, he tiritiri rānei te repo. Ka noho ā-korekore ēnei hei mea ngaro a Docker Compose ina tohua.
Te Pānga Tuturu o ngā Mea Ngaro a Docker-Compose i roto i CI/CD
In CI/CD pipelines, ngā mea ngaro kua takahia mai i te docker-compose.yml kēne:
- Whakaoho i ngā hanganga kore mana
- He iti noa te urunga ki ngā ratonga whakaari, ki ngā ratonga whakaputa rānei
- Whakauruhia te waehere kino ki roto i ngā whakatinanatanga
- Whakatuwheratia ngā tatau o muri mā te nekehanga taha
Ka matawaihia e ngā kaiwhakaeke te marea Ngā putunga GitHub titiro no docker-compose.yml ngā kōnae e whakamahi ana i ngā taputapu GitHub, i ngā taputapu aunoa rānei. Kia kitea rā anō ngā mea ngaro, ka taea e rātou te whakaari i a rātou anō hei kaiwhakahaere CI, te whakamahi kino i ngā whiwhinga kapua, te kino rānei, te whakatakoto i te ransomware ki roto i ngā mekameka tuku. Ko ēnei mea ngaro a Docker Compose e tohu ana i tētahi mea nui, ā, he maha ngā wā te ngoikore i warewarehia.
Te Kimi me te Whakahaere Haumaru i ngā Mea Ngaro
Whakamahia ngā taputapu matawai:
- TruffleHog, Gitleaks, ranei Xygeni ka taea te kite i ngā mea ngaro i roto i tō repo, tae atu ki ngā mea tawhito commits.
- Whakahaerehia ngā matawai i roto i tō CI pipeline hei aukati i ngā PR kei roto ngā mea ngaro.
Whakakapia ngā mea ngaro tika ki ngā taurangi taiao:
ratonga:
taupānga:
whakaahua: myapp
taiao:
DB_PASSWORD: ${DB_PASSWORD}
Whakamahia he kaiwhakahaere mea ngaro hei werohanga Kupuhipa_DB i te wā whakahaere, me te pupuri i tēnei kia kore e taea e koe docker-compose.ymlMā tēnei huarahi ka āwhina i te whakaiti i ngā mōrearea o ngā mea ngaro a Docker Compose.
Whakauruhia ngā kaiwhakahaere ngaro:
Mā ngā taputapu pēnei i a Vault, AWS Secrets Manager, Doppler rānei ka taea te whakahaere haumaru i ngā mea ngaro, ā, ka whakaratohia hoki ngā kaupapa here hurihanga.
Ngā Mahi Pai mō ngā Kaiwhakawhanake i roto i te DevSecOps hei Ārai i te Whakakitenga o ngā Mea Ngaro a Docker-Compose
- Kaua rawa e whakapūmau i ngā mea ngaro in docker-compose.yml.
- Tāpiri Tuhinga .env Tuhinga o mua .giignore, i ngā wā katoa.
- whakamahi ngā taputapu matawai ngaro i roto i tō kaiwhakawhanake ā-rohe me CI/CD pipeline.
- Arotakehia ngā kōnae tito hei wāhanga o tō rārangi arowhai PR haumarutanga.
- Hurihanga ngaro aunoa, inā koa mō ngā tohu me ngā tohu ratonga.
- Arotakehia ngā tauira tito a te hunga tuatoru i mua i te tārua i aua mea ki roto i tō pūtake waehere.
- Whakamahia ngā raraunga tairongo katoa o ēnei kōnae hei mea ngaro a Docker Compose, ā, whakahaerea kia rite ki tēnā.
koutou Docker-Compose.yml Koinei Pea Tō Wāhi Matapo Haumarutanga Nui Rawa
koutou docker-compose.yml ehara i te whirihoranga noa iho; he wāhanga o te mata whakaeke o tō tono. Me whakaaro ki tēnei mea he waehere. He tūponotanga tūturu ngā mea ngaro e huna ana i roto i ēnei kōnae, inā koa ka tukuna ki te mana whakahaere putanga, ka whakauruhia ki roto. CI/CD.
Mā ngā taputapu pēnei i a Xygeni ka āwhina i te kimi me te whakahaere i ngā mea ngaro o Docker Compose puta noa i ngā turanga waehere me pipelines, e whakaiti ana i te mōrearea o ngā whakaekenga mekameka tuku. Whakauruhia ki roto i tō rerenga mahi kia kitea ai, kia mana ai hoki ō mahi docker-compose.yml kei te whakaatu pea.
