VaultとConsulによる恒久的な安全なインターナル通信（LT）/ Secure internal communicaton by Hashicorp Vault

5PNPIJTB0EB(.01FQBCP *OD +VOF 7BVMUͱ$POTVMʹΑΔ߃ٱతͰ ҆શͳΠϯλʔφϧ௨৴ʢ-5ʣ 'VLVPLBHP

'VLVPLBHP (.0ϖύϘϓϦϯγύϧΤϯδχΞ খా஌ԝ!MJOZPXT ٕज़෦ٕज़ج൫νʔϜ IUUQTUPNPIJTBPEBDPN

'VLVPLBHP એ఻ 8&# %#13&44WPM )BTIJ$PSQ7BVMUͷ هࣄΛدߘ͠·ͨ͠ ͜Ε

'VLVPLBHP )BTIJDPSQ7BVMUͱ͸ ▸ ྨ͍كͳൿີ৘ใ؅ཧιϑτ΢ΣΞ ▸ ྫ͑͹ɺ%#ύεϫʔυ΍"84ͷτʔΫϯ΍҉߸Խ༻ݤͳͲ ▸ ࢖͍͜ͳ͢͜ͱͰγεςϜͷηΩϡϦςΟΛ͍͍ײ͡ʹ͢Δ͜ ͱ͕Ͱ͖Δ

'VLVPLBHP ͨ͘͞Μػೳ͕͋Δ ▸ ೝূɿBQQSPMF BXT B[VSF HPPHMFDMPVE LT HJUIVC MEBQ
SBEJVT UMTDFSU UPLFO VTFSOBNFQX ▸ ൿີɿBE BXT DPOTVM DVCCZIPMF EC HPPHMFDMPVE LW JEFOUJUZ OPNBE TLJ SBCCJUNR TTI UPUQ USBOTJU ▸ ؂ࠪɿpMF TZTMPH TPDLFU

Ͳ͏࢖͑͹͍͍ͷʁ 'VLVPLBHP

'VLVPLBHP جຊతʹ͸ηΩϡϦςΟʹؔΘΔ΋ͷΛकΔ ▸ γεςϜ͕ԿΛѻ͍ͬͯΔ͔Ͱ࢖͏ػೳ͕มΘͬͯ͘Δ ▸ ͔͠͠ɺ୯ҰαʔόͰͳ͍ݶΓϩʔϧؒͷΠϯλʔφϧ௨৴͸ ඞͣ͋Δ ▸ -#1SPYZ8FC΍+PC"1*%#Έ͍ͨͳ

'VLVPLBHP ϓϥΠϕʔτ*1ͳͷͰ͜͏͍͏΍ͭͰ͢Ͷ ▸ Ϋϥε" ▸ Ϋϥε# ▸ Ϋϥε$ ͜͏͍͏*1Ͱ௨৴͢Δͱ͖ʹ҆શͰ͋Δͱݴ͑·͔͢ʁ

௨৴ͷηΩϡϦςΟͪΌΜͱ΍ͬͯΔʁ 'VLVPLBHP

'VLVPLBHP ͓٬༷ͷճ౴ ▸ ϓϥΠϕʔτωοτϫʔΫͳͷͰ໰୊ͳ͍ ▸ 4FMGTJHOFEূ໌ॻ͚ͩͲ5-4Ͱ௨৴ͯ͠Δ͔Β໰୊ͳ͍ ▸ େࣄͳ৘ใͳ͍͔Βେৎ෉ ▸ ࣗલͷೝূہཱͯͯظݶ೥Ͱઃఆͯ͠΍ͬͯΔΑ
▸ -FU`T&ODSZQU·ͨ͸ূ໌ॻങͬͯӡ༻ͯ͠ΔΑ

'VLVPLBHP ͓٬༷ͷճ౴ ▸ ϓϥΠϕʔτωοτϫʔΫͳͷͰ໰୊ͳ͍ ▸ 4FMGTJHOFEূ໌ॻ͚ͩͲ5-4Ͱ௨৴ͯ͠Δ͔Β໰୊ͳ͍ ▸ େࣄͳ৘ใͳ͍͔Βେৎ෉ ▸ ࣗલͷೝূہཱͯͯظݶ೥Ͱઃఆͯ͠΍ͬͯΔΑ
▸ -FU`T&ODSZQU·ͨ͸ূ໌ॻങͬͯӡ༻ͯ͠ΔΑ $

'VLVPLBHP ·͋ؤுͬͯΔ͓٬༷ͷ໰୊఺ ▸ ֎෦ͷূ໌ॻΛ࢖͏ͷ͸ɺఆظతʹূ໌ॻͷߋ৽ ͕͋ΔͷͰӡ༻͕໘౗ ▸ ࣗલͰೝূہΛ͢Δͷ͸ɺखӡ༻ʹͳΓ͕ͪ׌ͭ ӡ༻͕େมͳͷͰ༗ޮظݶΛ௕͘ઃఆ͕ͪ͠Ͱྑ ͘ͳ͍

΋ͬͱखܰͰ҆શʹͳΓ͍ͨ 'VLVPLBHP

'VLVPLBHP

'VLVPLBHP 7BVMUͱ$POTVMɺͦͯ͠$POTVM5FNQMBUFΛ࢖͑͹ɺಈతʹߋ৽͞ΕΔ1,*؀ڥ͕Ͱ͖Δ

'VLVPLBHP 7BVMUͷಈత1,*؀ڥͷ5JQT ▸ ॳظߏங࣌ʹ7BVMU΁ͷ௨৴͸Ͳ͏͢Δ7FSJGZGBMTFͰ࡞Δ ▸ 5FSSBGPSN౳ͷ0SDIFTUSBUPSͰ"1*͔Β·ͣ$"ͷެ։ݤΛऔಘ ͢Δ ▸ $POTVM5FNQMBUFΛ࢖͏ͷͰϑΝΠϧͷݖݶʹ஫ҙ ▸
7BVMUͷূ໌ॻ͸SFMPBEͰ࠶ಡΈࠐΈͰ͖Δ

'VLVPLBHP ·ͱΊ ▸ 7BVMU͸ߴػೳ͕ͩ1,*͔Βಋೖ͍ͯ͘͠ͱΑ͍ ▸ 7BVMU͸)BTIJDPSQπʔϧΛ૊Έ߹ΘͤΔͱΑΓศརʹͳΔ

PT&YJU 'VLVPLBHP

VaultとConsulによる恒久的な安全なインターナル通信（LT）/ Secure inte...

VaultとConsulによる恒久的な安全なインターナル通信（LT）/ Secure internal communicaton by Hashicorp Vault

linyows

More Decks by linyows

Other Decks in Technology

Featured

Transcript