Upgrade to Pro
— share decks privately, control downloads, hide ads and more …
Speaker Deck
Speaker Deck
PRO
Sign in
Sign up
for free
GitHub Actions の self-hosted runner と Amazon EKS を使った Docker のビルドパイプライン / secure-docker-build-pipeline
Manabu Sakai
July 28, 2020
Technology
0
1.3k
GitHub Actions の self-hosted runner と Amazon EKS を使った Docker のビルドパイプライン / secure-docker-build-pipeline
Kubernetes Meetup Tokyo #32 の登壇資料です。
https://k8sjp.connpass.com/event/181328/
Manabu Sakai
July 28, 2020
Tweet
Share
More Decks by Manabu Sakai
See All by Manabu Sakai
manabusakai
0
4k
manabusakai
8
13k
manabusakai
24
7.5k
manabusakai
9
2.9k
manabusakai
3
5.6k
manabusakai
4
7.3k
manabusakai
7
11k
manabusakai
2
6k
manabusakai
11
12k
Other Decks in Technology
See All in Technology
htomine
0
170
yashi8484
0
130
lambda
0
230
nnstt1
2
120
ahana
0
460
kazeburo
2
130
sat
6
6k
lain21
14
5.3k
kawaguti
2
240
ayatokura
1
180
recruitengineers
0
250
you
0
150
Featured
See All Featured
myddelton
109
11k
addyosmani
312
21k
jasonvnalue
81
8.1k
afnizarnur
176
14k
schacon
147
6.7k
bryan
32
3.5k
tanoku
86
8.6k
jcasabona
8
590
swwweet
206
6.9k
reverentgeek
27
2.1k
jmmastey
10
700
aarron
258
36k
Transcript
GitHub Actions の self-hosted runner と Amazon EKS を使った Docker
のビルドパイプライン ,VCFSOFUFT.FFUVQ5PLZP ࡔҪֶ!NBOBCVTBLBJ
w GSFFFגࣜձࣾ43&νʔϜॴଐ w ͔ΒϓϨΠϯάϚωʔδϟʔ w ෳۀͰελʔτΞοϓͷٕज़ΞυόΠβʔ w 5XJUUFS w !NBOBCVTBLBJ
w #MPH w NBOBCVTBLBJEFW ࡔҪֶ .BOBCV4BLBJ
%PDLFSΠϝʔδͷηΩϡϦςΟ 01 Section
PRODUCTS
5 GSFFFͷϓϩμΫτl͓ۚzlਓzʹ·ͭΘΔใ͕ଟ͍ɻ w ձܭGSFFFݸਓࣄۀ๏ਓͷࡒใ w ਃࠂGSFFF๏ਓͷܾࢉใ w ਓࣄ࿑GSFFFैۀһͷݸਓใڅ༩ใ w ϚΠφϯόʔཧGSFFFैۀһͷϚΠφϯόʔใ
GSFFFͷϓϩμΫτ͕ѻ͏ใ
ຊ൪ڥʹσϓϩΠ͞Ε͍ͯΔ %PDLFSΠϝʔδ҆શͳͷ͔ʁ SPPUϢʔβʔͰ࣮ߦ ͞Ε͍ͯΔʜ ϕʔεΠϝʔδΛߋ৽ ͨ͠ͷ͍ͭʁ ϥϯλΠϜͷόʔδϣ ϯΞοϓͯ͠Δʁ ͲΜͳϛυϧΣΞ͕ ؚ·Ε͚ͯͨͬʁ
$01: "%%͍ͯ͠Δ ϑΝΠϧ҆શʁ
7 ԾϚγϯڥͷӡ༻43&$4*35͕୲͍ͯͨͨ͠Ίɺ੬ऑੑରԠͳͲ ਝʹߦΘΕ͍ͯͨɻ %PDLFSGJMFΛΞϓϦέʔγϣϯ։ൃऀ͕ॻ͘Α͏ʹͳͬͨ͜ͱͰɺ͜Ε·Ͱͷ Α͏ͳରԠ͕͘͠ͳ͖ͬͯͨɻ ηΩϡϦςΟΛ୲อ͢Δͷ͕͘͠ͳͬͨ
8 ΞϓϦέʔγϣϯ։ൃऀͷεΩϧҙࣝʹόϥ͖͕ͭ͋Γɺ ৗʹηΩϡϦςΟͷ͜ͱΛҙࣝͯ͠Β͏ͷݱ࣮తͰͳ͍ɻ ͦͷͨΊʹॏྔͳͷ͕lࣗಈԽzͱlলྗԽzɻ ηΩϡϦςΟΛҙࣝͤ͞ͳ͍Έͮ͘Γ
ηΩϡΞͳ%PDLFSΠϝʔδΛҡ࣋͢Δ $*ύΠϓϥΠϯ 02 Section
10 w Φʔϓϯιʔεͷίϯςφ੬ऑੑεΩϟφʔ w SFGझຯͰ࡞ͬͨιϑτΣΞ͕ւ֎اۀʹങΘΕΔ·Ͱͷ w 04ͷύοέʔδͱ3VCZͳͲͷϥϯλΠϜͷύοέʔδΛΧόʔ w Φϓγϣϯ͕๛Ͱߴʹಈ࡞͢Δ w
γϯάϧόΠφϦͰ࣮ߦͰ͖Δ w $ trivy image alpine:3.9 5SJWZ
11 5SJWZͷεΩϟϯ݁Ռ
ϫʔΫϑϩʔͷఆٛʹ USJWZίϚϯυΛॻ͚ղܾʁ
13 ϚΠΫϩαʔϏεԽʹΑͬͯ૿͑ଓ͚ΔϦϙδτϦΛूதཧͰ͖ͳ͍ɻ w ઃఆ࿙Ε w ίϐϖͰྔ࢈͞ΕΔࣅ௨ͬͨίʔυ w FH4MBDL௨ w ϝϯςφϯε͞Εͣʹෛ࠴Խ͢ΔύΠϓϥΠϯ
εέʔϧ͢ΔΈΛ࡞Βͳ͍ͱɺ͋ͬͱ͍͏ؒʹෛ࠴Խ͢Δ ͨॻ͖͢ΔϦεΫ
14 w (JU)VC"DUJPOTಠࣗͷ"DUJPOΛ࡞Δ͜ͱ͕Ͱ͖Δ w ެࣜͷςϯϓϨʔτ͕ϕʔεʹɺಠࣗͷॲཧΛ࣮ w SFGIUUQTHJUIVCDPNBDUJPOTUZQFTDSJQUBDUJPO w ػೳՃ͢Δͱ͖NBTUFSʹϚʔδ͢Δ͚ͩͰ࿙Εͳ͘өͰ͖Δ w
ϫʔΫϑϩʔ͔Βͭͷ"DUJPOΛݺͿ͚ͩ "DUJPOԽͰंྠͷ࠶ൃ໌Λ͙
15 ಠࣗʹ࡞ͬͨ"DUJPOͰɺ71$ͷTFMGIPTUFESVOOFSͰ࣮ߦ͞ΕΔɻ w JNBHF@BTTFNCMZ@MJOF͕୲͍ͬͯΔػೳ w EPDLFSCVJME w ੬ऑੑεΩϟϯ w MPHHJOH
UP4 w $4*35ͷ௨ w EPDLFSQVTI w $*ͷϝτϦΫεऩू w Ϗϧυ࣌ؒɺ෮چ࣌ؒɺϏϧυͷࣦഊཧ༝ JNBHF@BTTFNCMZ@MJOF
16 $*͕҆ఆ͍ͯ͠Δ͜ͱॏཁͳࢦඪͳͷͰɺ࠷ॳ͔ΒϝτϦΫεΛऔΔઃܭʹ ͨ͠ɻ w 4ͷ+40/σʔλΛ"UIFOB 3FEBTI ͔Βࢀর w JNBHF@BTTFNCMZ@MJOFͷॲཧΛฏۉҎʹऴΘΒ͍ͤͨ w
͜ͷσʔλΛݩʹߴԽʹऔΓΉ༧ఆ w ϨΠϠʔΩϟογϡͷ׆༻ w ඇޮͳ%PDLFSGJMFͷݕग़ ଌఆͰ͖ͳ͍ͷվળͰ͖ͳ͍
·ͱΊ 03 Section
18 w εέʔϧ͢ΔΈʹ͢ΔͨΊʹಠࣗͷ"DUJPOΛ࡞͍ͬͯΔ w "DUJPOΛ׆༻͢Δ͜ͱͰɺύΠϓϥΠϯͷෛ࠴ԽΛ͙ w ηΩϡϦςΟͷΛదʹ͚Δ w ୯ʹ੬ऑੑεΩϟϯ͢Δ͚ͩͰͳ͘ɺϝτϦΫεΛ׆༻ͯ҆͠ఆԽΛࢦ͢ ·ͱΊ
@manabusakai