{"id":35076,"date":"2025-05-28T09:32:23","date_gmt":"2025-05-28T02:32:23","guid":{"rendered":"http:\/\/jupitek.maudemo.vip\/index.php\/2025\/05\/28\/cap-nhat-nen-tang-ung-dung-danh-muc-co-the-tuy-chinh-quan-ly-bi-mat-dua-tren-git-va-quan-ly-tu-dong-cac-du-an-k8s\/"},"modified":"2025-05-28T09:32:23","modified_gmt":"2025-05-28T02:32:23","slug":"cap-nhat-nen-tang-ung-dung-danh-muc-co-the-tuy-chinh-quan-ly-bi-mat-dua-tren-git-va-quan-ly-tu-dong-cac-du-an-k8s","status":"publish","type":"post","link":"https:\/\/jupitek.maudemo.vip\/index.php\/2025\/05\/28\/cap-nhat-nen-tang-ung-dung-danh-muc-co-the-tuy-chinh-quan-ly-bi-mat-dua-tren-git-va-quan-ly-tu-dong-cac-du-an-k8s\/","title":{"rendered":"C\u1eadp nh\u1eadt n\u1ec1n t\u1ea3ng \u1ee9ng d\u1ee5ng: Danh m\u1ee5c c\u00f3 th\u1ec3 t\u00f9y ch\u1ec9nh, Qu\u1ea3n l\u00fd b\u00ed m\u1eadt d\u1ef1a tr\u00ean Git v\u00e0 Qu\u1ea3n l\u00fd t\u1ef1 \u0111\u1ed9ng c\u00e1c d\u1ef1 \u00e1n K8s<\/strong>"},"content":{"rendered":"

Trong KubeCon \u1edf Salt Lake City 2024, Akamai \u0111\u00e3 c\u00f4ng b\u1ed1 r\u1eb1ng Akamai App Platform c\u00f3 s\u1eb5n trong b\u1ea3n Beta c\u00f4ng khai. K\u1ec3 t\u1eeb \u0111\u00f3, h\u1ecd t\u1eadp trung v\u00e0o vi\u1ec7c gi\u1ea3m chi ph\u00ed v\u1eadn h\u00e0nh cho c\u00e1c nh\u00f3m n\u1ec1n t\u1ea3ng trong khi v\u1eabn ti\u1ebfp t\u1ee5c th\u1ef1c hi\u1ec7n l\u1eddi h\u1ee9a c\u1ee7a m\u00ecnh: cho ph\u00e9p c\u00e1c nh\u00e0 ph\u00e1t tri\u1ec3n c\u00f3 m\u1ed9t m\u00f4i tr\u01b0\u1eddng c\u00f3 c\u1ea5u tr\u00fac nh\u01b0ng v\u1eabn linh ho\u1ea1t \u0111\u1ec3 x\u00e2y d\u1ef1ng, tri\u1ec3n khai v\u00e0 qu\u1ea3n l\u00fd hi\u1ec7u qu\u1ea3 c\u00e1c \u1ee9ng d\u1ee5ng \u0111\u01b0\u1ee3c ch\u1ee9a trong container. Ng\u01b0\u1eddi d\u00f9ng Beta c\u00f3 th\u1ec3 \u0111\u00e3 nh\u1eadn th\u1ea5y s\u1ef1 s\u1eb5n c\u00f3 th\u01b0\u1eddng xuy\u00ean c\u1ee7a c\u00e1c phi\u00ean b\u1ea3n m\u1edbi – hi\u1ec7n \u0111\u01b0\u1ee3c c\u00f4ng b\u1ed1 tr\u1ef1c ti\u1ebfp trong Giao di\u1ec7n ng\u01b0\u1eddi d\u00f9ng web c\u1ee7a App Platform. <\/span><\/p>\n

Trong blog n\u00e0y, Jupitek s\u1ebd c\u00f9ng b\u1ea1n kh\u00e1m ph\u00e1 s\u01a1 l\u01b0\u1ee3c v\u1ec1 c\u00e1c t\u00ednh n\u0103ng v\u00e0 c\u1ea3i ti\u1ebfn m\u1edbi c\u1ee7a App Platform, \u0111\u1ed3ng th\u1eddi xem x\u00e9t m\u1ed9t s\u1ed1 thay \u0111\u1ed5i l\u1edbn s\u1eafp t\u1edbi.<\/span><\/p>\n

Danh m\u1ee5c t\u1ef1 ph\u1ee5c v\u1ee5 c\u00f3 th\u1ec3 t\u00f9y ch\u1ec9nh<\/b><\/h3>\n

Akamai App Platform cung c\u1ea5p m\u1ed9t danh m\u1ee5c cung c\u1ea5p c\u00e1c m\u1eabu \u0111\u01b0\u1eddng d\u1eabn v\u00e0ng ( <\/span>bi\u1ec3u \u0111\u1ed3 Helm<\/span><\/a> ) cho c\u00e1c nh\u00f3m ph\u00e1t tri\u1ec3n. C\u00e1c m\u1eabu n\u00e0y gi\u00fap tri\u1ec3n khai \u1ee9ng d\u1ee5ng d\u1ec5 d\u00e0ng v\u00e0 t\u1ea1o ra c\u00e1c d\u1ecbch v\u1ee5 h\u1ed7 tr\u1ee3 nh\u01b0 c\u01a1 s\u1edf d\u1eef li\u1ec7u, kho l\u01b0u tr\u1eef kh\u00f3a-gi\u00e1 tr\u1ecb v\u00e0 h\u00e0ng \u0111\u1ee3i tin nh\u1eafn. Ng\u01b0\u1eddi qu\u1ea3n tr\u1ecb n\u1ec1n t\u1ea3ng c\u00f3 th\u1ec3 qu\u1ea3n l\u00fd danh m\u1ee5c v\u00e0 s\u1eed d\u1ee5ng m\u00f4 h\u00ecnh RBAC \u0111\u1ec3 quy\u1ebft \u0111\u1ecbnh m\u1eabu n\u00e0o c\u00f3 s\u1eb5n cho nh\u00f3m c\u1ee7a h\u1ecd. Akamai App Platform c\u0169ng cung c\u1ea5p t\u00f9y ch\u1ecdn th\u00eam b\u1ea5t k\u1ef3 bi\u1ec3u \u0111\u1ed3 Helm c\u00f4ng khai n\u00e0o v\u00e0o Danh m\u1ee5c b\u1eb1ng c\u00e1ch ch\u1ec9 c\u1ea7n \u0111i\u1ec1n URL v\u00e0o Chart.yaml. \u0110i\u1ec1u n\u00e0y c\u0169ng cho ph\u00e9p ng\u01b0\u1eddi qu\u1ea3n tr\u1ecb n\u1ec1n t\u1ea3ng th\u00eam c\u00e1c kh\u1ea3 n\u0103ng n\u1ec1n t\u1ea3ng b\u1ed5 sung b\u00ean c\u1ea1nh c\u00e1c kh\u1ea3 n\u0103ng \u0111\u00e3 t\u00edch h\u1ee3p \u0111\u1ec3 t\u1ea1o n\u00ean n\u1ec1n t\u1ea3ng l\u00fd t\u01b0\u1edfng c\u1ee7a h\u1ecd. <\/span><\/p>\n

B\u1eb1ng c\u00e1ch cung c\u1ea5p t\u00f9y ch\u1ecdn th\u00eam bi\u1ec3u \u0111\u1ed3 Helm c\u00f4ng khai v\u00e0o Danh m\u1ee5c, Akamai trao quy\u1ec1n cho c\u00e1c nh\u00f3m n\u1ec1n t\u1ea3ng m\u1edf r\u1ed9ng nhanh ch\u00f3ng c\u00e1c kh\u1ea3 n\u0103ng c\u1ee7a n\u1ec1n t\u1ea3ng m\u00e0 kh\u00f4ng c\u1ea7n ph\u00e1t tri\u1ec3n t\u00f9y ch\u1ec9nh, \u0111i\u1ec1u n\u00e0y c\u00f3 th\u1ec3 r\u00fat ng\u1eafn \u0111\u00e1ng k\u1ec3 th\u1eddi gian \u0111\u01b0a d\u1ecbch v\u1ee5 m\u1edbi ra th\u1ecb tr\u01b0\u1eddng.<\/span><\/p>\n

Kh\u00f4ng gian l\u00e0m vi\u1ec7c nh\u00f3m chuy\u00ean d\u1ee5ng cho t\u00edch h\u1ee3p li\u00ean t\u1ee5c <\/b><\/h3>\n

M\u1eb7c d\u00f9 App Platform t\u1eadp trung nhi\u1ec1u h\u01a1n v\u00e0o Giao h\u00e0ng li\u00ean t\u1ee5c (CD), nh\u01b0ng n\u00f3 \u0111i k\u00e8m v\u1edbi m\u1ed9t s\u1ed1 t\u00ednh n\u0103ng T\u00edch h\u1ee3p li\u00ean t\u1ee5c (CI). C\u00e1c nh\u00e0 ph\u00e1t tri\u1ec3n c\u00f3 th\u1ec3 \u0111\u0103ng k\u00fd kho l\u01b0u tr\u1eef m\u00e3 c\u1ee7a h\u1ecd v\u00e0 t\u1ea1o h\u00ecnh \u1ea3nh container b\u1eb1ng c\u00e1c \u0111\u01b0\u1eddng \u1ed1ng <\/span>Tekton<\/span><\/a> \u0111\u01b0\u1ee3c c\u1ea5u h\u00ecnh s\u1eb5n v\u1edbi c\u00e1c t\u00e1c v\u1ee5 Kaniko v\u00e0 Buildpack t\u00edch h\u1ee3p. App Platform c\u0169ng \u0111i k\u00e8m v\u1edbi d\u1ecbch v\u1ee5 Git t\u1ef1 l\u01b0u tr\u1eef. M\u1ed7i nh\u00f3m \u0111\u01b0\u1ee3c t\u1ef1 \u0111\u1ed9ng \u0111\u01b0a v\u00e0o d\u1ecbch v\u1ee5 Git. M\u1ed9t t\u00ednh n\u0103ng m\u1edbi ph\u00e1t h\u00e0nh t\u1ea1o ra m\u1ed9t kh\u00f4ng gian bi\u1ec7t l\u1eadp trong d\u1ecbch v\u1ee5 Git v\u00e0 cho ph\u00e9p c\u00e1c th\u00e0nh vi\u00ean trong nh\u00f3m t\u1ea1o kho l\u01b0u tr\u1eef. T\u00ednh n\u0103ng n\u00e0y cung c\u1ea5p cho c\u00e1c nh\u00f3m \u0111\u00e3 \u0111\u01b0a v\u00e0o m\u1ed9t con \u0111\u01b0\u1eddng tr\u1ea3i nh\u1ef1a \u0111\u1ec3 b\u1eaft \u0111\u1ea7u x\u00e2y d\u1ef1ng v\u00e0 tri\u1ec3n khai c\u00e1c \u1ee9ng d\u1ee5ng \u0111\u01b0\u1ee3c ch\u1ee9a trong container ch\u1ec9 trong v\u00e0i ph\u00fat.<\/span><\/p>\n

N\u1ec1n t\u1ea3ng \u1ee9ng d\u1ee5ng Akamai c\u00f4 l\u1eadp m\u00f4i tr\u01b0\u1eddng nh\u00f3m b\u1eb1ng c\u00e1c ch\u1ee9c n\u0103ng CI t\u00edch h\u1ee3p, lo\u1ea1i b\u1ecf nhu c\u1ea7u \u0111\u1ea7u t\u01b0 v\u00e0o c\u00f4ng c\u1ee5 ri\u00eang bi\u1ec7t, cho ph\u00e9p c\u00e1c t\u1ed5 ch\u1ee9c h\u1ee3p nh\u1ea5t chi ph\u00ed c\u01a1 s\u1edf h\u1ea1 t\u1ea7ng \u0111\u1ed3ng th\u1eddi t\u0103ng t\u1ed1c n\u0103ng su\u1ea5t c\u1ee7a nh\u00e0 ph\u00e1t tri\u1ec3n.<\/span><\/p>\n

Qu\u1ea3n l\u00fd v\u00f2ng \u0111\u1eddi<\/b><\/h3>\n

C\u00f3 l\u1ebd m\u1ed9t trong nh\u1eefng ho\u1ea1t \u0111\u1ed9ng b\u1ecb \u0111\u00e1nh gi\u00e1 th\u1ea5p nh\u1ea5t trong K\u1ef9 thu\u1eadt n\u1ec1n t\u1ea3ng l\u00e0 x\u1eed l\u00fd nh\u1eefng thay \u0111\u1ed5i li\u00ean t\u1ee5c v\u00e0 qu\u1ea3n l\u00fd v\u00f2ng \u0111\u1eddi c\u1ee7a c\u00e1c d\u1ef1 \u00e1n Kubernetes ngu\u1ed3n m\u1edf th\u01b0\u1ee3ng ngu\u1ed3n \u0111\u00e3 s\u1eed d\u1ee5ng. Akamai App Platform t\u00edch h\u1ee3p kho\u1ea3ng 30 d\u1ef1 \u00e1n Kubernetes ngu\u1ed3n m\u1edf th\u01b0\u1ee3ng ngu\u1ed3n. Trong khi th\u1ef1c hi\u1ec7n th\u1ee7 c\u00f4ng \u0111\u00f2i h\u1ecfi ph\u1ea3i \u0111\u1ea7u t\u01b0 r\u1ea5t nhi\u1ec1u th\u1eddi gian ch\u1ec9 \u0111\u1ec3 ki\u1ec3m tra m\u1ecdi th\u1ee9 v\u00e0 c\u1eadp nh\u1eadt m\u1ecdi th\u1ee9. S\u1eed d\u1ee5ng App Platform gi\u00fap c\u00e1c nh\u00f3m n\u1ec1n t\u1ea3ng kh\u00f4ng ph\u1ea3i t\u1ef1 m\u00ecnh th\u1ef1c hi\u1ec7n vi\u1ec7c n\u00e0y \u0111\u1ec3 h\u1ecd c\u00f3 th\u1ec3 t\u1eadp trung v\u00e0o vi\u1ec7c h\u1ed7 tr\u1ee3 c\u00e1c nh\u00f3m ph\u00e1t tri\u1ec3n c\u1ee7a m\u00ecnh. K\u1ec3 t\u1eeb khi ra m\u1eaft b\u1ea3n Beta c\u1ee7a App Platform, Akamai \u0111\u00e3 n\u00e2ng c\u1ea5p g\u1ea7n m\u1ed9t n\u1eeda s\u1ed1 d\u1ef1 \u00e1n Kubernetes t\u00edch h\u1ee3p. B\u1ea3n c\u1eadp nh\u1eadt m\u1edbi nh\u1ea5t l\u00e0 b\u1ea3n c\u1eadp nh\u1eadt nh\u1eb1m gi\u1ea3m thi\u1ec3u <\/span>c\u00e1c l\u1ed7 h\u1ed5ng th\u1ef1c thi m\u00e3 t\u1eeb xa kh\u00f4ng \u0111\u01b0\u1ee3c x\u00e1c th\u1ef1c nghi\u00eam tr\u1ecdng 9.8<\/span><\/i> trong Ingress NGINX. B\u1ea3n s\u1eeda l\u1ed7i n\u00e0y \u0111\u01b0\u1ee3c ph\u00e1t h\u00e0nh ch\u1ec9 2 ng\u00e0y sau khi CVE 2025-1974 \u0111\u01b0\u1ee3c c\u00f4ng b\u1ed1.<\/span><\/p>\n

B\u1eb1ng c\u00e1ch qu\u1ea3n l\u00fd c\u00e1c chu k\u1ef3 c\u1eadp nh\u1eadt ph\u1ee9c t\u1ea1p c\u1ee7a h\u01a1n 30 d\u1ef1 \u00e1n Kubernetes t\u00edch h\u1ee3p, Akamai gi\u1ea3i ph\u00f3ng ngu\u1ed3n l\u1ef1c k\u1ef9 thu\u1eadt c\u1ee7a b\u1ea1n kh\u1ecfi c\u00e1c t\u00e1c v\u1ee5 b\u1ea3o tr\u00ec, cho ph\u00e9p h\u1ecd t\u1eadp trung v\u00e0o \u0111\u1ed5i m\u1edbi trong khi v\u1eabn duy tr\u00ec th\u1ebf tr\u1eadn b\u1ea3o m\u1eadt c\u1ea5p doanh nghi\u1ec7p.<\/span><\/p>\n

Qu\u1ea3n l\u00fd b\u00ed m\u1eadt d\u1ef1a tr\u00ean GitOps<\/b><\/h3>\n

Trong b\u1ea3n ph\u00e1t h\u00e0nh g\u1ea7n \u0111\u00e2y, quy tr\u00ecnh l\u00e0m vi\u1ec7c GitOps cho c\u00e1c b\u00ed m\u1eadt \u0111\u00e3 \u0111\u01b0\u1ee3c c\u1ea3i thi\u1ec7n \u0111\u00e1ng k\u1ec3, cho ph\u00e9p t\u1ea1o ra c\u00e1c b\u00ed m\u1eadt th\u1ef1c t\u1ebf kh\u00f4ng gi\u1edbi h\u1ea1n. App Platform cho ph\u00e9p ng\u01b0\u1eddi d\u00f9ng t\u1ea1o c\u00e1c b\u00ed m\u1eadt tr\u1ef1c ti\u1ebfp trong c\u1ed5ng th\u00f4ng tin web v\u00e0 s\u1eed d\u1ee5ng c\u00e1c b\u00ed m\u1eadt n\u00e0y trong quy tr\u00ecnh l\u00e0m vi\u1ec7c c\u1ee7a h\u1ecd. C\u00e1c b\u00ed m\u1eadt \u0111\u01b0\u1ee3c m\u00e3 h\u00f3a b\u1eb1ng Sealed Secrets v\u00e0 \u0111\u01b0\u1ee3c l\u01b0u tr\u1eef trong kho l\u01b0u tr\u1eef c\u1ea5u h\u00ecnh Git, hi\u1ec7n \u0111\u01b0\u1ee3c tri\u1ec3n khai tr\u1ef1c ti\u1ebfp b\u1eb1ng Argo CD. <\/span><\/p>\n

Quy tr\u00ecnh l\u00e0m vi\u1ec7c b\u00ed m\u1eadt n\u00e2ng cao c\u1ee7a App Platform c\u1ee7a Akamai k\u1ebft h\u1ee3p c\u00e1c bi\u1ec7n ph\u00e1p b\u1ea3o m\u1eadt t\u1ed1t nh\u1ea5t v\u1edbi hi\u1ec7u qu\u1ea3 ho\u1ea1t \u0111\u1ed9ng, gi\u1ea3m nguy c\u01a1 tr\u00f4i c\u1ea5u h\u00ecnh \u0111\u1ed3ng th\u1eddi cho ph\u00e9p c\u00e1c nh\u00f3m qu\u1ea3n l\u00fd th\u00f4ng tin nh\u1ea1y c\u1ea3m th\u00f4ng qua c\u00e1c quy tr\u00ecnh GitOps quen thu\u1ed9c.<\/span><\/p>\n

H\u01b0\u1edbng d\u1eabn th\u1ef1c t\u1ebf cho c\u00e1c tr\u01b0\u1eddng h\u1ee3p s\u1eed d\u1ee5ng kh\u00e1c nhau<\/b><\/h3>\n

App Platform cho ph\u00e9p b\u1ea1n t\u00f9y ch\u1ec9nh n\u1ec1n t\u1ea3ng c\u1ee7a m\u00ecnh b\u1eb1ng c\u00e1c d\u1ef1 \u00e1n Kubernetes th\u01b0\u1ee3ng ngu\u1ed3n m\u00e3 ngu\u1ed3n m\u1edf t\u00edch h\u1ee3p (nh\u01b0 <\/span>Harbor<\/span><\/a> , <\/span>Prometheus<\/span><\/a> , <\/span>Knative<\/span><\/a> v\u00e0 nhi\u1ec1u d\u1ef1 \u00e1n kh\u00e1c). K\u1ebft h\u1ee3p v\u1edbi t\u00f9y ch\u1ecdn cho ph\u00e9p qu\u1ea3n tr\u1ecb vi\u00ean n\u1ec1n t\u1ea3ng th\u00eam c\u00e1c m\u1eabu bi\u1ec3u \u0111\u1ed3 Helm b\u1ed5 sung v\u00e0o Catalog, c\u00e1c b\u1ea3n c\u1eadp nh\u1eadt m\u1edbi n\u00e0y cho ph\u00e9p b\u1ea1n h\u1ed7 tr\u1ee3 h\u1ea7u nh\u01b0 m\u1ecdi tr\u01b0\u1eddng h\u1ee3p s\u1eed d\u1ee5ng. <\/span><\/p>\n

\u0110\u1ec3 h\u1ed7 tr\u1ee3 b\u1ea1n s\u1eed d\u1ee5ng App Platform, Akamai \u0111\u00e3 t\u1ea1o ra m\u1ed9t s\u1ed1 h\u01b0\u1edbng d\u1eabn th\u1ef1c t\u1ebf:<\/span><\/p>\n