Quick overview of deployment architecture
SaaS public cloud
Out of the box, Aozhe managed operation and maintenance is suitable for fast POC and small and medium-sized.
Privatization K8s
Helm Chart deployment supports multi-node and elastic scaling, and is the first choice for large groups.
hybrid cloud
Core data is local and edge nodes are in the cloud to meet data outbound and disaster recovery requirements.
Operation and maintenance checklist
- Environment isolation: development/test/pre-release/production four sets of namespaces and databases
- Monitoring: Prometheus + Grafana, focusing on API delays, queue accumulation, and JVM/container resources
- backup: daily database backup + object storage versioning, quarterly recovery drills
- Security:RBAC least privileges, operational auditing, WAF/HTTPS, key rotation
- upgrade: grayscale release + rollback plan, full pre-release will be released before the big version
- Xinchuang: Kirin/Tongxin OS, Dameng/Renmin University Jincang database adaptation verification
Key points of permission model
Organization → Role → Data Scope → Field-level permissions; application release requires approval flow; sensitive operations require two-factor confirmation.
→ Developer extension permission hook