Upgrade to Pro — share decks privately, control downloads, hide ads and more …

GKE で始める Private Cluster

E24ebbedcae292dc8e4b56186e082220?s=47 iganari
March 26, 2020

GKE で始める Private Cluster

2020.01.30 Kubernetes Meetup Tokyo #29 Cluster Upgrade 編
https://k8sjp.connpass.com/event/170099/
にて、LT をした資料です

E24ebbedcae292dc8e4b56186e082220?s=128

iganari

March 26, 2020
Tweet

Transcript

  1. (,&Ͱ࢝ΊΔ 1SJWBUF$MVTUFS ,VCFSOFUFT.FFUVQ5PLZP$MVTUFS6QHSBEFฤ IUUQTLTKQDPOOQBTTDPNFWFOU

  2. ΞδΣϯμͱ஫ҙ఺ ࿩͢͜ͱ Ø1SJWBUF$MVTUFS ݶఆެ։Ϋϥελ ʹ͍ͭͯ ࿩͞ͳ͍͜ͱ Ø(PPHMF$MPVE1MBUGPSN ($1 ͷઆ໌ Ø,VCFSOFUFT͓Αͼ

    (PPHMF,VCFSOFUFT&OHJOF (,& ͷઆ໌ -5಺༰ʹ͍ͭͯ Øաڈͷ -5ͷϒϥογϡΞοϓฤʹͳΓ·͢ 2
  3. 4FMG JOUSPEVDUJPO )FMMP

  4. ࣗݾ঺հ QFSTPO OBNF5PSV*HBSBTIJ UXJUUFS!JHBOBSJ@ HJUIVC!JHBOBSJ QPTJUJPO DPNQBOZ$MPVE"DF*OD SPMF43& TLJMMT<5FSSBGPSN "OTJCMF

    ,VCFSOFUFT> CMPPEEPOBUJPO DPVOU EFTDSJQUJPO*DBOEPOBUFCMPPEBMJUUMF 4
  5. ஫ҙࣄ߲ ͜ͷൃද͸ݸਓͷҙݟͰ͋Γɺ ॴଐ͢ΔձࣾٴͼஂମΛ ୅ද͢ΔൃݴͰ͸͍͟͝·ͤΜ 5

  6. 4FDVSJUZ JO PQFSBUJOH(,& (,&ͷηΩϡϦςΟͲ͏ͯ͠·͔͢

  7. (,&ͷηΩϡϦςΟͲ͏ͯ͠·͔͢ (,&ͷΠϯϑϥετϥΫνϟͷηΩϡϦςΟ Ø ,VCFSOFUFTͷόʔδϣϯΛ࠷৽ͷঢ়ଶʹอͭ Ø ࠷৽ͷηΩϡϦςΟύονΛద༻͢ΔͨΊඞਢ Ø Ϛελʔϊʔυ͸ࣗಈతʹΞοϓσʔτ͕ߦΘΕ͍ͯΔ Ø ϊʔυͷΞοϓσʔτ΋ࣗಈઃఆ͕Մೳ

    7
  8. (,&ͷηΩϡϦςΟͲ͏ͯ͠·͔͢ ωοτϫʔΫͷηΩϡϦςΟ Ø /PEFʹ͸ɺ*OUFSOBM*1ͱ &YUFSOBM*1͕͋Δ Ø ֎෦ͷΠϯλʔωοτͱϧʔςΟϯάՄೳͳܦ࿏͕͋Δɻͱ͍͏͜ͱ Ø 'JSFXBMMSVMFTͷઃఆͳͲͰ઀ଓ͕ग़དྷͯ͠·͏ Ͳ͔͜ΒͰΫϥελʔ಺ʹΞΫηεग़དྷͯ͠·͏

    Ø 4%,ͷ PBVUIೝূͱ ,VCFDPOGJH ϑΝΠϧͷߋ৽ Ø HDMPVE BVUIMPHJOHDMPVE DPOUBJOFSDMVTUFSTHFUDSFEFOUJBMT Ø (PPHMF"DDPVU 4JOHMF4JHO0OͰՄೳ͔΋͠Εͳ͍͚Ͳ(PPHMF$MPVE4%,ͷ PBVUIೝূΛͯ͠Δ͔Β͍͍͡ΌΜͱ͍͏ؾ࣋ͪ͸ແ͘͸ͳ͍ 8
  9. (,&ͷηΩϡϦςΟͲ͏ͯ͠·͔͢ ωοτϫʔΫͷηΩϡϦςΟ Ø /PEFʹ͸ɺ*OUFSOBM*1ͱ &YUFSOBM*1͕͋Δ Ø ֎෦ͷΠϯλʔωοτͱϧʔςΟϯάՄೳͳܦ࿏͕͋Δɻͱ͍͏͜ͱ Ø 'JSFXBMMSVMFTͷઃఆͳͲͰ઀ଓ͕ग़དྷͯ͠·͏ Ͳ͔͜ΒͰΫϥελʔ಺ʹΞΫηεग़དྷͯ͠·͏

    Ø 4%,ͷ PBVUIೝূͱ ,VCFDPOGJH ϑΝΠϧͷߋ৽ Ø HDMPVE BVUIMPHJOHDMPVE DPOUBJOFSDMVTUFSTHFUDSFEFOUJBMT Ø (PPHMF"DDPVU 4JOHMF4JHO0OͰՄೳ͔΋͠Εͳ͍͚Ͳ(PPHMF$MPVE4%,ͷ PBVUIೝূΛͯ͠Δ͔Β͍͍͡ΌΜͱ͍͏ؾ࣋ͪ͸ແ͘͸ͳ͍ 9 1SJWBUF$MVTUFS ݶఆެ։Ϋϥελ
  10. 8IBU JT 1SJWBUFDMVTUFS ݶఆެ։Ϋϥελͱ͸

  11. ݶఆެ։Ϋϥελͷಛ௃ Ø (,&ͷΫϥελͷछྨͷҰͭ Ø /PEF͸ 3'$ ͷ಺෦ *1ΞυϨε͔࣋ͨ͠ͳ͍ Ø .BTUFS

    $POUSPM1MBOF ͱ /PEFTؒͷ௨৴͸ 71$/FUXPSL1FFSJOH ʹͯߦΘΕΔ Ø ύϒϦοΫ͔Βͷ (,&Ϋϥελ΁ͷΞΫηεΛ੍ޚ͢Δ͜ͱ͕ग़དྷΔ SFGIUUQTDMPVEHPPHMFDPNLVCFSOFUFTFOHJOFEPDTDPODFQUTQSJWBUFDMVTUFSDPODFQU 11
  12. (,&Ϋϥελʹ֎෦͔ΒΞΫηε͢Δʹ͸ ύϒϦοΫΤϯυϙΠϯτ΁ͷΞΫηεΛ༗ޮԽ Ø Ϛελʔͷ֎෦ *1ΞυϨε Ø LVCFDUM ͳͲ͸ɺ௨ৗ ͜ͷΤϯυϙΠϯτʹͯ௨৴Λߦ͍ͬͯΔ ϚελʔঝೝࡁΈωοτϫʔΫΛదٓઃఆ

    Ø )5514Λ࢖ͬͯɺϚελʔ΁ͷ௨৴ΛڐՄ͢Δ࢓૊Έ Ø ಛఆͷ $*%3ൣғΛϗϫΠτϦετొ࿥ ֎෦ *1ΞυϨε΋Մೳ SFGIUUQTDMPVEHPPHMFDPNLVCFSOFUFTFOHJOFEPDTDPODFQUTQSJWBUFDMVTUFSDPODFQUPWFSWJFX 12
  13. ϊʔυ͔Β֎෦ʹΞΫηε͢Δʹ͸ $MPVE/"5Λઃఆ͢Δ Ø IUUQTDMPVEHPPHMFDPNOBUEPDTPWFSWJFX/"5XJUI(,& /"5HBUFXBZΛઃఆ͢Δ Ø IUUQTDMPVEHPPHMFDPNWQDEPDTTQFDJBMDPOGJHVSBUJPOTNVMUJQMF OBUHBUFXBZT SFGIUUQTDMPVEHPPHMFDPNLVCFSOFUFTFOHJOFEPDTIPXUPQSJWBUF DMVTUFSTHSBOUJOH@QSJWBUF@OPEFT@PVUCPVOE@JOUFSOFU@BDDFTT

    13
  14. ΞϓϦΛ֎෦ʹެ։͢Δʹ͸ -PBE#BMBODFS -# ͷ 4FSWJDFΛ࡞੒͢Δ͜ͱͰɺ֎෦ʹର͠ ͯ -#ܦ༝ͰαʔϏεΛެ։͢Δ͜ͱ͕Մೳ Ø IUUQTDMPVEHPPHMFDPNLVCFSOFUFT FOHJOFEPDTDPODFQUTTFSWJDFUZQFT@PG@TFSWJDFT

    /PEF1PSU ͷ 4FSWJDFΛ࡞੒͔ͯ͠Β *OHSFTTΛ࡞੒͢Δ͜ͱ Ͱɺ(,&ʹͯͦͷ৘ใΛݩʹ )551 4 MPBECBMBODFSΛઃఆ ͢Δ͜ͱͰΞϓϦΛެ։͢Δ͜ͱ͕Մೳ Ø IUUQTDMPVEHPPHMFDPNLVCFSOFUFT FOHJOFEPDTDPODFQUTJOHSFTT 14
  15. ༷ʑͳ੍໿ͱ੍ݶ ੍໿ SFTUSJDUJPOT Ø طʹ͋ΔඇݶఆΫϥελΛݶఆެ։Ϋϥελ΁ม׵͢Δ͜ͱ͸ग़དྷͳ͍ Ø ϚελʔঝೝࡁΈωοτϫʔΫʹ্ݶ஋͕͋Δ ੍ݶ MJNJUBUJPOT Ø

    ݶఆެ։Ϋϥελ͸Ϋϥελຖʹ 71$ωοτϫʔΫ ϐΞϦϯά͕ඞཁ Ø 71$ωοτϫʔΫࣗମ͸࠷େ ݸͷଞͷ71$ωοτϫʔΫͱϐΞ ϦϯάՄೳ ˞ͦͷଞʹ΋੍໿ͱ੍ݶ͕͋ΔͷͰɺԼهΛࢀরͯ͠Լ͍͞ SFGIUUQTDMPVEHPPHMFDPNLVCFSOFUFTFOHJOFEPDTIPXUPQSJWBUFDMVTUFSTSFR@SFT@MJN 15
  16. ηΩϡϦςΟҎ֎ͷϝϦοτ ίετʹؔͯ͠ ೥ ݄ΑΓɺ7.ʹׂΓ౰ͯͯͨ 4UBUJD*1BEESFTT΍ &QIFNFSBM *1BEESFTTFT΋༗ྉԽ ˞ظݶ෇͖Ͱ໔আ Ø 4UBOEBSE7.*OTUBODFTͷ৔߹

    Ø ࣌ؒ 㲈݄ Ø 1SFFNQUJCMF7.*OTUBODFTͷ৔߹ Ø ࣌ؒ 㲈݄ 16
  17. ༨ஊ ࣅͨػߏͷ DMVTUFS͕ "[VSFʹ΋͋Γ·͢ 1SJWBUF"[VSF,VCFSOFUFT4FSWJDFDMVTUFS Ø IUUQTEPDTNJDSPTPGUDPNFOVTB[VSFBLTQSJWBUFDMVTUFST -5Λ͖ͯͨ͠ࢿྉ͕͋Γ·͢ͷͰซͤͯಡΜͰ௖͚Δͱخ͍͠Ͱ͢  Ø

    1SJWBUF"[VSF,VCFSOFUFT4FSWJDFDMVTUFSΛ৮ͬͯΈΑ͏̇ Ø IUUQTTQFBLFSEFDLDPNJHBOBSJQSJWBUFB[VSFLVCFSOFUFT TFSWJDFDMVTUFSXPIPOHUVUFNJZPV 17
  18. ·ͱΊ ݶఆެ։Ϋϥελ͕ͲͷΑ͏ͳ΋ͷ͔ Ø ಺෦ *1ΞυϨε͔࣋ͨ͠ͳ͍ /PEF͔Βߏ੒͞ΕΔ (,&Ϋϥελ Ø ֎෦ͷΠϯλʔωοτ͔Β؀ڥΛωοτϫʔΫͷϨΠϠʔͰִ཭͢Δ͜ ͱ͕ग़དྷΔͨΊɺωοτϫʔΫͷ৴པੑΛߴΊΔ͜ͱ͕ग़དྷΔ

    ͲͷΑ͏ʹ࢖͍͚ͬͯ͹͍͍͔ Ø ΞϓϦΛެ։͍ͨ͠৔߹͸௨ৗͱมΘΒͳ͍ Ø ΦϖϨʔγϣϯʹͯ஫ҙ͕ඞཁ 18
  19. &OKPZ(,&