Group items tagged

Continuous Integration (or CI) is a practice where you continously test an application to detect errors as soon as possible.

Docker is a container technology, many CI tools execute jobs (the tasks of a pipeline) in container to have an isolated environment.

Docker in Docker (« DinD » in short) means executing Docker in a Docker container.

Networking is a central part of Kubernetes, but it can be challenging to understand exactly how it is expected to work

Highly-coupled container-to-container communications

Pod-to-Pod communications

Calico is a networking and network policy provider. Calico supports a flexible set of networking options so you can choose the most efficient option for your situation, including non-overlay and overlay networks, with or without BGP. Calico uses the same engine to enforce network policy for hosts, pods, and (if using Istio & Envoy) applications at the service mesh layer.

Cilium is a networking, observability, and security solution with an eBPF-based data plane. Cilium provides a simple flat Layer 3 network with the ability to span multiple clusters in either a native routing or overlay/encapsulation mode, and can enforce network policies on L3-L7 using an identity-based security model that is decoupled from network addressing. Cilium can act as a replacement for kube-proxy; it also offers additional, opt-in observability and security features.

CoreDNS is a flexible, extensible DNS server which can be installed as the in-cluster DNS for pods.

Databases are extremely feature rich and are really freakin fast when used properly

create succinct helpers for accessing subsets of data that are relevant in specific situations

Relations are chainable

Cake views are just presentation-flavored fragments that fit inside an application’s layout. For most applications they’re HTML mixed with PHP, but they may end up as XML, CSV, or even binary data.

Layouts are presentation code that is wrapped around a view, and can be defined and switched between

if the HTTP method of the request was POST, try to save the data using the Post model.

in AngularJS, we have a separate model layer that we can manage in any way we want, completely independently from the view.

keep your concerns separate

do DOM manipulation and augment your view with directives

CMD would be running an application upon creation of a container which is already installed using RUN (e.g. RUN apt-get install …) inside the image

ENTRYPOINT argument sets the concrete default application that is used every time a container is created using the image.

ENV command is used to set the environment variables (one or more).

Microservices are a useful architecture, but even their advocates say that using them incurs a significant MicroservicePremium, which means they are only useful with more complex systems.

you should build a new application as a monolith initially, even if you think it's likely that it will benefit from a microservices architecture later on.

Any refactoring of functionality between services is much harder than it is in a monolith.

容器是一个 Linux 进程，Linux 认为它只是一个运行中的进程。该进程只知道它被告知的东西。

和典型虚拟机的静态方式不同。所有这些资源的共享都由容器管理器来管理。

容器是一个 Linux 进程，Linux 认为它只是一个运行中的进程。该进程只知道它被告知的东西。

the model - which is the layer of the system responsible for representing business data and logic.

Active Record facilitates the creation and use of business objects whose data requires persistent storage to a database

Rails will pluralize your class names to find the respective database table.

A workflow is a set of rules for defining a collection of jobs and their run order.

Schedule workflows for jobs that should only run periodically.

run multiple jobs in parallel

ProxySQL doesn’t natively support any high availability solution

The mesh provides service discovery, load balancing, encryption, authentication and authorization, support for the circuit breaker pattern, and other capabilities.

The service mesh is usually implemented by providing a proxy instance, called a sidecar, for each service instance

the term service is often used for both the instance definitions and the instances themselves.

to allow an instance in your VPC to initiate outbound connections to the internet but prevent unsolicited inbound connections from the internet, you can use a network address translation (NAT) device for IPv4 traffic

A NAT device has an Elastic IP address and is connected to the internet through an internet gateway.

By default, each instance that you launch into a nondefault subnet has a private IPv4 address, but no public IPv4 address, unless you specifically assign one at launch, or you modify the subnet's public IP address attribute.

Now we understand what these <none>:<none> images stand for. They stand for intermediate images and can be seen using docker images -a

They don’t result into a disk space problem but it is definitely a screen real estate problem

dangling images

automatically discover any services on the Docker host and let Træfik reconfigure itself automatically when containers get created (or shut down) so HTTP traffic can be routed accordingly.

use Træfik as a layer-7 load balancer with SSL termination for a set of micro-services used to run a web application.

provides a framework to concatenate and minify or compress JavaScript and CSS assets

adds the ability to write these assets in other languages and pre-processors such as CoffeeScript, Sass and ERB

invalidate the cache by altering this fingerprint