Auto-sync: 2026-04-20 07:08
This commit is contained in:
27
wiki/concepts/Immutable-Infrastructure.md
Normal file
27
wiki/concepts/Immutable-Infrastructure.md
Normal file
@@ -0,0 +1,27 @@
|
||||
---
|
||||
title: "Immutable Infrastructure"
|
||||
type: concept
|
||||
tags: [devops, security, infrastructure]
|
||||
sources: [what-is-devsecops-best-practices-benefits-and-tools]
|
||||
last_updated: 2026-04-20
|
||||
---
|
||||
|
||||
## Definition
|
||||
不可变基础设施(Immutable Infrastructure)是一种基础设施管理范式,组件在部署后不会发生变化。如果需要更新或修复,会创建新版本并替换旧版本,而不是修改现有组件。
|
||||
|
||||
## Core Principles
|
||||
- **不可变性**:部署后不修改现有组件
|
||||
- **幂等性**:每次部署产生相同结果
|
||||
- **版本化**:每个版本都可追溯和回滚
|
||||
- **自动化替换**:通过自动化工具完成组件替换
|
||||
|
||||
## Benefits
|
||||
- 降低配置漂移风险
|
||||
- 提高环境一致性
|
||||
- 简化回滚操作
|
||||
- 增强安全性和可预测性
|
||||
|
||||
## Connections
|
||||
- [[DevSecOps]] ← enables ← [[Immutable Infrastructure]]
|
||||
- [[IaC]] ← implements ← [[Immutable Infrastructure]]
|
||||
- [[容器化]] ← uses ← [[Immutable Infrastructure]]
|
||||
Reference in New Issue
Block a user