ref: https://www.cncf.io/blog/2021/09/03/kubescape-the-first-open-source-tool-for-running-nsa-and-cisa-kubernetes-hardening-tests/
本篇文章是一個專案介紹文,該專案是個名為 Kubescape 的安全性掃描專案,該專案主要是用來檢驗目標 Kubernetes 是否能夠通過 NSA/CISA 等安全性檢查。
National Security Agency(NSA) 以及 Cybersecurity and Infrastructure Security Agency (CISA) 最近有發佈一個高達 52 頁的安全性指南,
該指南探討如何設立與強化 Kubernetes 叢集的安全性。
https://media.defense.gov/2021/Aug/03/2002820425/-1/-1/1/CTR_KUBERNETES%20HARDENING%20GUIDANCE.PDF
而 Kubescape 專案是一個基於 OPA(OpenPolicyAgent) 引擎的安全性檢查專案,該專案會從 Kubernetes API 取得各類型 Kubernetes 專案的資訊並且針對這些資訊去進行檢查。
檢查是基於上述 NSA/CISA 發布的安全性報告,該檢查的類別包含
1. Non-root containers
2. Immutable container filesystem
3. Building secure container images
4. Privileged containers
5. hostPID, hostIPC privileges
6. hostNetwork access
7. allowedHostPaths field
8. Protecting pod service account tokens
9. Pods in kube-system and kube-public
10. Resource policies
11. Control plane hardening
12. Encrypted secrets
13. Anonymous Requests
有興趣的可以試試看這個專案
同時也有138部Youtube影片,追蹤數超過75萬的網紅志祺七七 X 圖文不符,也在其Youtube影片中提到,本集廣告與「百態自由日曆」合作播出 《百態自由》2022 生命插畫日曆, 台灣第一本多元身體與生命樣態主題的日曆。 用一整年的日子、365個獨特的靈魂 讓你看見所有人──包括自己的獨一無二 嘖嘖溫暖上線‧支持募資 ▹ https://bit.ly/3kevJ0A 本集節目內容由志祺七七頻道製作...
「public service」的推薦目錄:
public service 在 BorntoDev Facebook 的最佳解答
อยากจะพัฒนา Application ให้รองรับความยืดหยุ่นตาม Workload ของงาน และยังรองรับการใช้ทรัพยากรร่วมกันอีกด้วย ต้องทำอย่างไรดี ? 🤔
.
ในวันนี้แอดมินจะพาทุกคนมาทำความรู้จักกับ การพัฒนา Application ด้วยรูปแบบ Cloud Native จะเป็นอย่างไรนั้น ไปดูกันนน !!
.
อ้างอิงจาก Cloud Native Computing Foundation (CNCF) ได้เขียนไว้ว่า Cloud Native นั้นจะมีแนวคิดและเทคโนโลยี ที่จะช่วยให้เราสามารถสร้างและรันระบบโดยที่ Scale ได้ง่ายขึ้นและอีกทั้งรองรับ Environment ต่าง ๆ ได้ง่ายขึ้น ไม่ว่าจะเป็น Public, Private, Hybrid Cloud หรืออาจจะเป็น On-premise ก็ได้
.
ซึ่งแนวคิดนี้ทำให้
🔸 ระบบเป็นอิสระจากกัน (Loosely Coupled)
🔸 จัดการได้ง่าย (Manageble)
🔸 ดูการทำงานได้ (Observable)
🔸 Recovery จากความผิดพลาดต่าง ๆ ได้ (Resilient)
.
✨ Cloud Native คือ รูปแบบของการพัฒนา Application ให้รองรับการประมวลผลแบบ Cloud Computing เพื่อให้ Application นั้นมีความยืดหยุ่นตาม Workload ของงาน และยังรองรับการใช้ทรัพยากรร่วมกันอีกด้วย
.
คุณสมบัติหลักที่จำเป็นต้องมีของ Cloud Native มีอยู่ 3 อย่างด้วยกัน คือ
.
1. Application ต้องถูกออกแบบด้วยแนวคิดของ Microservice - เป็นแนวคิดในการแยกระบบงาน ออกมาเป็น Service ย่อย ๆ ลงมา ที่เป็นอิสระต่อกันให้ได้มากที่สุด แล้วค่อยแบ่งหน้าที่ให้แต่ละฝ่ายดูแลในแต่ละส่วน ทำให้สามารถพัฒนา Application แบบ Parallel เพื่อเพิ่มความเร็วในการพัฒนานั่นเอง
.
2. Application ต้องทำงานภายใต้เทคโนโลยี Container - เป็นการจำลองสภาพแวดล้อมการทำงานของ Application ที่ใช้ทรัพยากรน้อยกว่าการทำงานบน Virtual Machine เสียอีก มีการรองรับการใช้งานร่วมกับ Services อื่น ๆ อีกมากมาย
.
3. Application ต้องถูกพัฒนาด้วยแนวคิดแบบ DevOps - เป็นแนวคิดที่ครอบคลุมส่วนการทำงานหลัก ๆ ด้วยกัน เช่น การทำงานเป็นทีม (Culture), เครื่องมือที่ใช้ทำงาน (Technology), กระบวนการทำงาน (Process)
.
ซึ่งระบบของ Cloud Native นั้นจำเป็นต้องมีคุณสมบัติเหล่านี้ และประโยชน์ของ Cloud Native นั้นมี่อยู่หลายอย่างด้วยกันเช่น
.
🔹 ตัว Application นั้นใช้ทรัพยากรน้อยลงกว่าเดิม (เนื่องจากใช้ตัว Container)
🔹 ทำให้การพัฒนา Application นั้นทำได้รวดเร็วขึ้น
🔹 ลดความเสี่ยงที่จะทำให้ระบบล่มจากสาเหตุที่คาดเดาไม่ได้ (Resiliency)
🔹 รองรับความยืดหยุ่นในการจัดการ Workload (On Demand Workload)
.
borntoDev - 🦖 สร้างการเรียนรู้ที่ดีสำหรับสายไอทีในทุกวัน
#cloudnative #BorntoDev
public service 在 Bà Dì Nulo Facebook 的最佳解答
Kính gửi các nhà tuyển dụng, quý doanh nghiệp, founders startup,
Mời mn chiêm ngưỡng các profile ứng viên tiềm năng thơm bơ đến từ mọi ngành trong đợt hỗ trợ tuyển dụng đợt 1:
pc view only
file 1 https://tinyurl.com/NULOTalentpoolSs1
file 2 sơ cua nếu file 1 đông quá :))) https://tinyurl.com/bckupNULOTalentpoolSs1
100% có khả năng dùng tiếng Anh từ level Good đến proficient (chủ yếu Nhà Hàng Ks, du lịch có nhiều kỹ năng trái ngành tốt), ứng viên đến từ các ngành IT, Industrial, Language, External relation, Economics, Marketing có bề dày và thành tích học thuật tốt dù còn trẻ măng.
Sao giỏi thế :(
.
note cho các cháu tham gia đợt 1 và các đợt sau:
Thật ra dì vẫn khuyến khích các cá nhân tự thân lăn lộn để tìm việc nhưng tình hình có vẻ khum khả quan lắm với các sv ngành du lịch, nhà hàng ks nên với chút sức nhỏ và đặc thủ công việc hằng ngày là 1 headhunter thì dì có thể giúp các cháu đang bơ vơ có bến đậu sớm nhất. (vì nền du lịch chắc 2024 mới tỉnh dậy ☹)
Vậy dì có tuyển dụng các profile gửi về cho công việc cá nhân khum? -> Hiện dì toàn tìm các vị trí B-C level thui nên sẽ kkhum hốt được các CV gửi về :))) có chăng là thấy hay thì nhắn nhủ đồng nghiệp vào xem, vị trí nào hợp thì bốc gọi sơ vấn thử ^^
.
Những lưu ý của dì:
1. Dì cho các profile ra public biển lớn lên nhiều nền tảng mxh –> sẽ có nhiều anh chị headhunter – các bạn làm tư vấn tuyển dụng của bên thứ 3 liên hệ các cháu để gợi ý/ mời ứng tuyển các job họ thấy phù hợp nha
-> Hãy rep đầy đủ và nhiệt tình và lịch sự nhất có thể. Giữ liên lạc và add linkedin họ vì đây là những đôi cánh giúp profile của các cháu bay cao bay xa hơn đến những vị trí lạ, vị trí mới mở tuyển 1-2 ngày.
Như ngôi nhà của ông Carl trong phim Up bay được nhờ kết nối với vạn bóng bay
.
2. Sẽ có những job có tên “Confidential” từ headhuner – không biết được công ty nào tuyển, công ty ở đâu. Đây là những đơn đặt hàng có yêu cầu đặc biệt vì để tránh các đối thủ cạnh tranh biết được hành tung. (thường là những công ty về fintech, tech mới vào VN, hoặc định đặt văn phòng tại VN. Họ có nhiều vòng tuyển, thường yêu cầu rất cao về khả năng ngoại ngữ (nên sẽ yêu cầu làm 1 bài test TOEIC). trả lương theo USD, có chế độ phúc lợi rất tươi để thu hút nhân tài – ngay cả những vị trí thông dụng nhất như Customer service, Sales,...)
-> Đừng vội kết luận là lừa đảo. Tự tin ứng tuyển thôi, kèo ngon nha. để ý bạn headhunter dùng đuôi email công ty là tin tưởng được. Ai dùng gmail thì có thể họ là freelance headhunter, nhớ yêu cầu xem mạng xã hội của họ. Còn bọn dùng gmail + đầu email vớ vẩn thì thôi rep email từ chối ngay.
3. Nếu có nhiều job hay trong hộp mail nhưng bản thân chưa phù hợp
-> đừng ngại giới thiệu đến bạn bè trên FB, người thân. Việc này có thể giúp các cháu be friend, hoặc be closer hơn với các headhunter, recruiter. Khi mặt mũi, profile cá nhân được nhớ rồi thì khả năng có thêm các recomendation phù hợp cao hơn.
.
4. Mọi quy trình tuyển dụng của cá nhân hay doanh nghiệp đều không mất phí. Hễ có phí phỏng vấn là xàm le.
5. Tình hình mới thì nên hỏi thêm về phần phúc lợi hỗ trợ nv work from home ngoài các pl cơ bản. Hỏi rõ về các chính sách hỗ trợ OT (làm việc overtime)
My linkedin https://tinyurl.com/yf6rx4dh
Đợt 2 dì nhắm sẽ diễn ra tầm đầu tháng sau trong Cộng đồng chữa bệnh thất nghiệp nhớ trả lời hết câu hỏi để auto vào nhó
public service 在 志祺七七 X 圖文不符 Youtube 的最讚貼文
本集廣告與「百態自由日曆」合作播出
《百態自由》2022 生命插畫日曆,
台灣第一本多元身體與生命樣態主題的日曆。
用一整年的日子、365個獨特的靈魂
讓你看見所有人──包括自己的獨一無二
嘖嘖溫暖上線‧支持募資 ▹ https://bit.ly/3kevJ0A
本集節目內容由志祺七七頻道製作,不代表「百態自由日曆」立場。
✔︎ 成為七七會員(幫助我們繼續日更,並享有會員專屬福利):http://bit.ly/shasha77_member
✔︎ 體驗志祺七七文章版:https://blog.simpleinfo.cc/shasha77
✔︎ 購買黃臭泥周邊商品: https://reurl.cc/Ezkbma 💛
✔︎ 訂閱志祺七七頻道: http://bit.ly/shasha77_subscribe
✔︎ 追蹤志祺IG :https://www.instagram.com/shasha77.daily
✔︎ 來看志祺七七粉專 :http://bit.ly/shasha77_fb
✔︎ 如果不便加入會員,也可從這裡贊助我們:https://bit.ly/support-shasha77
(請記得在贊助頁面留下您的email,以便我們寄送發票。若遇到金流問題,麻煩請聯繫:service@simpleinfo.cc)
#百態自由 #生命插畫日曆
各節重點:
00:00 開頭
01:03【七七x百態自由日曆】廣告段落
02:09 冰島的週休三日是這樣開始的!
03:10 冰島週休三日悖論
03:58 縮短工時,還能提升生產力?
04:46 工時縮短的成效如何?
05:41 週休三日還是有缺點?
06:19 週休三日行不行?
07:28 日本為什麼要推週休三日
08:21 日本週休三日背後看不見的壞處
09:03 日本政府怎麼想?
09:58 我們的觀點
11:23 問題
11:44 結尾
【 製作團隊 】
|企劃:Elanor、羊羊
|腳本:Elanor
|編輯:土龍
|剪輯後製:絲繡
|剪輯助理:珊珊、歆雅
|演出:志祺
——
【 本集參考資料 】
→THE ENVIRONMENTAL BENEFITS OF A SHORTER WORKING WEEK:https://bit.ly/3zt9XuA
→Going Public Iceland’s Journey to A Shorter Working Week:https://bit.ly/3CG1K8y
→冰島試行一周四天工作制,研究指「大獲成功」:https://bbc.in/2ZpIHRq
→冰島「四天工作周」職效研究大獲成功,這是否工作與生活之間的理想平衡?:https://bit.ly/2W2QiUz
→西班牙推動「週休三日」實驗 一週工時32小時、薪資不變:https://bit.ly/3CE3kI0
→好多國家紛紛推行週休三日:https://bit.ly/3EL1hn6
→週休三日行不行? 專家:可先調整彈性工時提高效率:https://bit.ly/3nXzycS
→[問卦] 驚!台灣未來或有週休三日?:https://bit.ly/3u5q00L
→WHY THE 4-DAY WORKWEEK IS A TERRIBLE IDEA:https://bit.ly/3EGX4Rx
→彈性工作制的魔咒:https://bbc.in/3lN3ZA1
→彈性工時反而更累?遠端工作不是換系統就好,觀念不到位恐危及身心健康!:https://bit.ly/39rpRv3
→法國向「永遠在線」的職場文化宣戰:https://bbc.in/3u65Ymt
→「斜槓」還是「窮忙」?你要知道的零工經濟真相:https://bit.ly/3lSWDL8
→「加班邪教」為何有如此眾多信徒:https://bbc.in/3AEAFlm
→從加班到零工經濟 無間歇工作的代價:https://bbc.in/3AzxoUz
→拒絕被工作影響生活!日本微軟推出週休三日計畫,生產力提高40%:https://bit.ly/3hYlg8g
\每週7天,每天7點,每次7分鐘,和我們一起了解更多有趣的生活議題吧!/
🥁七七仔們如果想寄東西關懷七七團隊與志祺,傳送門如下:
106台北市大安區羅斯福路二段111號8樓
🟢如有引用本頻道影片與相關品牌識別素材,請遵循此規範:http://bit.ly/shasha77_authorization
🟡如有業務需求,請洽:hi77@simpleinfo.cc
🔴如果影片內容有誤,歡迎來信勘誤:hey77@simpleinfo.cc
![post-title](https://i.ytimg.com/vi/xg1iflI6OBw/hqdefault.jpg)
public service 在 山水畫家的藝術Taiwan Artist World Youtube 的最佳解答
#桃園#青埔#書法公園
大園區橫山書法公園暨書法藝術館,位於青埔地區「5-8號陂塘公園」的東北角,大成路二段與大仁路交接處,館區面積約27701平方公尺,為地下1層、地上2層建築物,總樓地板面積2991平方公尺,為台灣第一座由官方經營,以書法藝術為主題的美術館,亦以向民眾收費參觀方式維持營運。
書法藝術館由建築師潘天壹設計,以公園為「硯台」、陂塘為「墨池」的意象發想,將建築外觀以書法篆刻之山型硯石為主體來組構。
基地由左至右以5個方盒子組成,包括展覽空間、館藏空間、教育推廣空間、商業空間、戶外展演場、行政空間及服務性空間等。
初步規劃除定期展出臺灣及國際書法篆刻名家作品外,亦兼具研究調查台灣書法歷史及向大眾推廣之功能,以呈現臺灣豐沛的書畫藝術創作能量。另為深化在地特色,部份展區規劃為大園尖山遺址展示區。
其他空間規劃為文創空間,預計以OT方式委外經營,讓民眾在欣賞文化藝術展覽及館區獨特的陂塘自然美景之餘,能將藝術帶入生活之中,體驗書藝生活美學。 完工後將結合青塘園旁的桃園市立美術館形成藝文廊帶,成為桃園地區休閒新景點和藝文新地標。
書法藝術館為2017年9月開工,預計2019年9月竣工,但由於諸多問題尚待解決,經桃園文化局追加預算改善後,力拼2021年秋季開館。
Dayuan Hengshan Calligraphy Park and Calligraphy Art Museum is located at the northeast corner of "No. 5-8 Pitang Park" in Qingpu District, at the junction of Section 2 of Dacheng Road and Daren Road. The area of the museum area is about 27,701 square meters, and it is 1 underground level. , A two-story building on the ground with a total floor area of 2991 square meters. It is Taiwan’s first officially operated art museum with the theme of calligraphy. It also maintains operations by charging the public for visits.
The Calligraphy Art Museum was designed by the architect Pan Tianyi. The park is the "inkstone" and the Pitang is the "inkstone".
The base consists of 5 square boxes from left to right, including exhibition space, collection space, education promotion space, commercial space, outdoor exhibition space, administrative space and service space.
In addition to regularly exhibiting works by famous Taiwanese and international calligraphy and seal carving masters, the preliminary plan also has the function of researching and investigating the history of Taiwan's calligraphy and promoting it to the public, so as to show Taiwan's abundant calligraphy and calligraphy artistic creation energy. In order to deepen the local characteristics, part of the exhibition area is planned as the Dayuan Jianshan Site Exhibition Area.
The other space is planned as a cultural and creative space, which is expected to be outsourced in OT mode, so that the public can bring art into life and experience the aesthetics of calligraphy and life while enjoying cultural and art exhibitions and the unique natural beauty of Pitang in the museum area.
After completion, it will be combined with the Taoyuan Municipal Art Museum next to Qingtang Garden to form an art gallery belt, which will become a new leisure attraction and a new art and cultural landmark in the Taoyuan area.
The calligraphy art museum started in September 2017 and is expected to be completed in September 2019. However, due to many issues that have yet to be resolved, the Taoyuan Cultural Bureau will strive to open the museum in the fall of 2021 after the additional budget has been improved.
►►►歡迎訂閱梁震明頻道:https://bit.ly/33R0bmf
►►►梁震明臉書粉絲頁:https://www.facebook.com/inkliang/
►►►梁震明痞客邦:http://tom20030208.pixnet.net/blog
►►►梁震明IG:https://www.instagram.com/liang_chenming_art/
【梁震明簡歷】
國立台北藝術大學美術創作研究所畢業。
曾任國立台南藝術大學藝術史系及東海大學美術學系講師。
個展12次,國內外聯展30餘次。
作品曾在香港蘇富比、羅芙奧及沐春堂拍賣成交。
著作「墨色的真相」與「台灣寺廟龍柱造型之研究」獲國立編譯館出版刊行。
現為羲之堂代理之專職水墨畫家。
「山水畫家的藝術」頻道推薦播放清單:
梁震明水墨作品賞析:https://youtube.com/playlist?list=PL5EQF72_a8UD9nXm38PQcabEIbffxyp-h
梁震明水墨創作介紹:https://youtube.com/playlist?list=PL5EQF72_a8UATfktfF0G6o3zCLipJvc-n
水墨藝術材料介紹:https://youtube.com/playlist?list=PL5EQF72_a8UDs1alttOymTOkXl3IhRW04
紓壓療癒輕音樂空拍影片:https://youtube.com/playlist?list=PL5EQF72_a8UCrrHknKxWuwRy8UIh6EnUQ
台灣海景空拍影片分享:https://youtube.com/playlist?list=PL5EQF72_a8UD471Ieo4YaalS5yvbDAIyu
4K畫質空拍影片分享:https://youtube.com/playlist?list=PL5EQF72_a8UD72YQD4vgRR9NaI-brI-4Q
桃園青埔特區記錄:https://youtube.com/playlist?list=PL5EQF72_a8UBSI3tWDXsgQUuzgKzRSGxY
新北景點空拍:https://youtube.com/playlist?list=PL5EQF72_a8UAfbQybqr__G4cLGrtVugsl
桃園景點空拍:https://youtube.com/playlist?list=PL5EQF72_a8UBweKa4jfWGZW39J9ASipD7
新竹景點空拍:https://youtube.com/playlist?list=PL5EQF72_a8UAk7e3AvAuU6IWQsbvn49e6
宜蘭景點空拍:https://youtube.com/playlist?list=PL5EQF72_a8UCnNCun9gC5UM3In0ztXDG_
#DJI #dronefootage #dronevideo #dronephotography #dronestagram #drones #fpv #djiglobal #photography #pro #aerialphotography #dronepilot #travel #nature #dronefly #fpvfreestyle #quadcopter #dronevideo
![post-title](https://i.ytimg.com/vi/8NP36GL4Y5s/hqdefault.jpg)
public service 在 天下雜誌video Youtube 的最讚貼文
公共服務×設計系列聚場 Public Service Design
以設計優化一小步,為生活改變跨出一大步!
發展創新永續的公共服務內容,提供更好的體驗價值。
文化部從設計思考出發,委託台灣設計研究院,串聯公私部門各路好手共同合作,
以優化服務品質並提升文化體驗,牽起人們與地方的關係,一起讓人們更好、讓地方更好。
8/18(三)、8/20(五) 專家團隊邀你一起 #改變現場!
帶你瞭解如何用設計驅動公共服務創新👉👉👉 https://bit.ly/3xrdhoR
--- 更多創新設計皆在未來城市:
https://futurecity.cw.com.tw/article/2159
#文化部 #台灣設計研究院 #TDRI
#未來城市 #整合傳播企劃 #FutureCity
#公共服務 #公共美學 #服務設計 #文化公共服務
►按小鈴鐺通知 搶先看,精采獨家全面掌握!
=================================
更多精采內容請見:
◎天下雜誌:http://www.cw.com.tw
◎天下雜誌video:http://www.cw.com.tw/video
◎天下雜誌video FB粉絲專頁:https://ppt.cc/flhPQx
◎天下雜誌IG http://bit.ly/2R6jfL6
◎天下雜誌網路書店:https://www.cwbook.com.tw/
![post-title](https://i.ytimg.com/vi/nn9nhGlPRVk/hqdefault.jpg)
public service 在 Public service - Wikipedia 的相關結果
Public services include services provided by a government to people living within its jurisdiction, either directly through public sector agencies or by ... ... <看更多>
public service 在 Partnership for Public Service 的相關結果
The Partnership for Public Service is a nonprofit, nonpartisan organization that strives for a more effective government for the American people. ... <看更多>
public service 在 public service中文(繁體)翻譯:劍橋詞典 的相關結果
public service 翻譯:(由政府提供的)公共服務(如醫院、學校、員警等), 政府部門的工作, (為滿足需要而非盈利而提供的)公共服務。了解更多。 ... <看更多>