Upgrade to Pro
— share decks privately, control downloads, hide ads and more …
Speaker Deck
Speaker Deck
PRO
Sign in
Sign up
for free
GitHub Actions の self-hosted runner と Amazon EKS を使った Docker のビルドパイプライン / secure-docker-build-pipeline
Manabu Sakai
July 28, 2020
Technology
0
1.3k
GitHub Actions の self-hosted runner と Amazon EKS を使った Docker のビルドパイプライン / secure-docker-build-pipeline
Kubernetes Meetup Tokyo #32 の登壇資料です。
https://k8sjp.connpass.com/event/181328/
Manabu Sakai
July 28, 2020
Tweet
Share
More Decks by Manabu Sakai
See All by Manabu Sakai
manabusakai
0
3.1k
manabusakai
8
12k
manabusakai
24
7.4k
manabusakai
9
2.8k
manabusakai
3
5.5k
manabusakai
4
6.7k
manabusakai
7
11k
manabusakai
2
5.4k
manabusakai
11
11k
Other Decks in Technology
See All in Technology
nihonbuson
2
1.9k
stakaya
14
8.2k
ocise
0
170
sugimomoto
1
350
oracle4engineer
0
2.7k
hgsgtk
2
170
shirayanagiryuji
0
2.2k
_kensh
1
190
recruitengineers
0
120
kanaugust
PRO
0
240
kanaugust
PRO
0
110
siroemk
0
190
Featured
See All Featured
searls
204
35k
sachag
446
36k
dougneiner
119
7.8k
destraynor
223
47k
samlambert
237
9.9k
smashingmag
229
18k
keithpitt
401
20k
tmm1
61
8.5k
roundedbygravity
241
21k
marcelosomers
220
15k
kneath
294
39k
cherdarchuk
71
260k
Transcript
GitHub Actions の self-hosted runner と Amazon EKS を使った Docker
のビルドパイプライン ,VCFSOFUFT.FFUVQ5PLZP ࡔҪֶ!NBOBCVTBLBJ
w GSFFFגࣜձࣾ43&νʔϜॴଐ w ͔ΒϓϨΠϯάϚωʔδϟʔ w ෳۀͰελʔτΞοϓͷٕज़ΞυόΠβʔ w 5XJUUFS w !NBOBCVTBLBJ
w #MPH w NBOBCVTBLBJEFW ࡔҪֶ .BOBCV4BLBJ
%PDLFSΠϝʔδͷηΩϡϦςΟ 01 Section
PRODUCTS
5 GSFFFͷϓϩμΫτl͓ۚzlਓzʹ·ͭΘΔใ͕ଟ͍ɻ w ձܭGSFFFݸਓࣄۀ๏ਓͷࡒใ w ਃࠂGSFFF๏ਓͷܾࢉใ w ਓࣄ࿑GSFFFैۀһͷݸਓใڅ༩ใ w ϚΠφϯόʔཧGSFFFैۀһͷϚΠφϯόʔใ
GSFFFͷϓϩμΫτ͕ѻ͏ใ
ຊ൪ڥʹσϓϩΠ͞Ε͍ͯΔ %PDLFSΠϝʔδ҆શͳͷ͔ʁ SPPUϢʔβʔͰ࣮ߦ ͞Ε͍ͯΔʜ ϕʔεΠϝʔδΛߋ৽ ͨ͠ͷ͍ͭʁ ϥϯλΠϜͷόʔδϣ ϯΞοϓͯ͠Δʁ ͲΜͳϛυϧΣΞ͕ ؚ·Ε͚ͯͨͬʁ
$01: "%%͍ͯ͠Δ ϑΝΠϧ҆શʁ
7 ԾϚγϯڥͷӡ༻43&$4*35͕୲͍ͯͨͨ͠Ίɺ੬ऑੑରԠͳͲ ਝʹߦΘΕ͍ͯͨɻ %PDLFSGJMFΛΞϓϦέʔγϣϯ։ൃऀ͕ॻ͘Α͏ʹͳͬͨ͜ͱͰɺ͜Ε·Ͱͷ Α͏ͳରԠ͕͘͠ͳ͖ͬͯͨɻ ηΩϡϦςΟΛ୲อ͢Δͷ͕͘͠ͳͬͨ
8 ΞϓϦέʔγϣϯ։ൃऀͷεΩϧҙࣝʹόϥ͖͕ͭ͋Γɺ ৗʹηΩϡϦςΟͷ͜ͱΛҙࣝͯ͠Β͏ͷݱ࣮తͰͳ͍ɻ ͦͷͨΊʹॏྔͳͷ͕lࣗಈԽzͱlলྗԽzɻ ηΩϡϦςΟΛҙࣝͤ͞ͳ͍Έͮ͘Γ
ηΩϡΞͳ%PDLFSΠϝʔδΛҡ࣋͢Δ $*ύΠϓϥΠϯ 02 Section
10 w Φʔϓϯιʔεͷίϯςφ੬ऑੑεΩϟφʔ w SFGझຯͰ࡞ͬͨιϑτΣΞ͕ւ֎اۀʹങΘΕΔ·Ͱͷ w 04ͷύοέʔδͱ3VCZͳͲͷϥϯλΠϜͷύοέʔδΛΧόʔ w Φϓγϣϯ͕๛Ͱߴʹಈ࡞͢Δ w
γϯάϧόΠφϦͰ࣮ߦͰ͖Δ w $ trivy image alpine:3.9 5SJWZ
11 5SJWZͷεΩϟϯ݁Ռ
ϫʔΫϑϩʔͷఆٛʹ USJWZίϚϯυΛॻ͚ղܾʁ
13 ϚΠΫϩαʔϏεԽʹΑͬͯ૿͑ଓ͚ΔϦϙδτϦΛूதཧͰ͖ͳ͍ɻ w ઃఆ࿙Ε w ίϐϖͰྔ࢈͞ΕΔࣅ௨ͬͨίʔυ w FH4MBDL௨ w ϝϯςφϯε͞Εͣʹෛ࠴Խ͢ΔύΠϓϥΠϯ
εέʔϧ͢ΔΈΛ࡞Βͳ͍ͱɺ͋ͬͱ͍͏ؒʹෛ࠴Խ͢Δ ͨॻ͖͢ΔϦεΫ
14 w (JU)VC"DUJPOTಠࣗͷ"DUJPOΛ࡞Δ͜ͱ͕Ͱ͖Δ w ެࣜͷςϯϓϨʔτ͕ϕʔεʹɺಠࣗͷॲཧΛ࣮ w SFGIUUQTHJUIVCDPNBDUJPOTUZQFTDSJQUBDUJPO w ػೳՃ͢Δͱ͖NBTUFSʹϚʔδ͢Δ͚ͩͰ࿙Εͳ͘өͰ͖Δ w
ϫʔΫϑϩʔ͔Βͭͷ"DUJPOΛݺͿ͚ͩ "DUJPOԽͰंྠͷ࠶ൃ໌Λ͙
15 ಠࣗʹ࡞ͬͨ"DUJPOͰɺ71$ͷTFMGIPTUFESVOOFSͰ࣮ߦ͞ΕΔɻ w JNBHF@BTTFNCMZ@MJOF͕୲͍ͬͯΔػೳ w EPDLFSCVJME w ੬ऑੑεΩϟϯ w MPHHJOH
UP4 w $4*35ͷ௨ w EPDLFSQVTI w $*ͷϝτϦΫεऩू w Ϗϧυ࣌ؒɺ෮چ࣌ؒɺϏϧυͷࣦഊཧ༝ JNBHF@BTTFNCMZ@MJOF
16 $*͕҆ఆ͍ͯ͠Δ͜ͱॏཁͳࢦඪͳͷͰɺ࠷ॳ͔ΒϝτϦΫεΛऔΔઃܭʹ ͨ͠ɻ w 4ͷ+40/σʔλΛ"UIFOB 3FEBTI ͔Βࢀর w JNBHF@BTTFNCMZ@MJOFͷॲཧΛฏۉҎʹऴΘΒ͍ͤͨ w
͜ͷσʔλΛݩʹߴԽʹऔΓΉ༧ఆ w ϨΠϠʔΩϟογϡͷ׆༻ w ඇޮͳ%PDLFSGJMFͷݕग़ ଌఆͰ͖ͳ͍ͷվળͰ͖ͳ͍
·ͱΊ 03 Section
18 w εέʔϧ͢ΔΈʹ͢ΔͨΊʹಠࣗͷ"DUJPOΛ࡞͍ͬͯΔ w "DUJPOΛ׆༻͢Δ͜ͱͰɺύΠϓϥΠϯͷෛ࠴ԽΛ͙ w ηΩϡϦςΟͷΛదʹ͚Δ w ୯ʹ੬ऑੑεΩϟϯ͢Δ͚ͩͰͳ͘ɺϝτϦΫεΛ׆༻ͯ҆͠ఆԽΛࢦ͢ ·ͱΊ
@manabusakai