Upgrade to Pro — share decks privately, control downloads, hide ads and more …

container-immutable

mochizuki875
December 07, 2021

 container-immutable

2021/12/07 Kubernetes Novice Tokyo #15
コンテナとimmutableとわたし。あとセキュリティ。

セッション動画
https://k8s-novice-jp.connpass.com/event/229951/

mochizuki875

December 07, 2021
Tweet

More Decks by mochizuki875

Other Decks in Technology

Transcript

  1. ίϯςφ͸JNNVUBCMF͔ʁ W $POUBJOFS W JNBHF %FWFMPQFS W JNBHF W $POUBJOFS

    %FQMPZ ίϯςφͷҰൠతͳϥΠϑαΠΫϧΛ౿·͑ɺઌͷྫͱಉ༷ͷέʔεΛߟ͑ͯΈ·͢ɻ
  2. ίϯςφ͸JNNVUBCMF͔ʁ W $POUBJOFS W JNBHF %FWFMPQFS W JNBHF W $POUBJOFS

    ৽͍͠ίϯςφʹ੾Γସ͑ ίϯςφͷҰൠతͳϥΠϑαΠΫϧΛ౿·͑ɺઌͷྫͱಉ༷ͷέʔεΛߟ͑ͯΈ·͢ɻ
  3. ίϯςφ͸JNNVUBCMF͔ʁ W JNBHF %FWFMPQFS W JNBHF W $POUBJOFS )FMMP8FC1BHF 5IJT1BHFJTW

    ίϯςφͷҰൠతͳϥΠϑαΠΫϧΛ౿·͑ɺઌͷྫͱಉ༷ͷέʔεΛߟ͑ͯΈ·͢ɻ
  4. ίϯςφ͸JNNVUBCMF͔ʁ ͦ΋ͦ΋ͳΜͰJNNVUBCMFΛ࣮ݱ͍͔ͨ͠ʁʁ ɹˠมߋͷੵΈॏͶʹΑΔτϥϒϧΛආ͚ΔͨΊ ɹɹFYʣߋ৽ͷࣦഊɺυΩϡϝϯτͱ࣮؀ڥͷࠩҟɺ؀ڥࠩҟͷൃੜ CBTF CBTF EJ ff @ W

    W มߋ ʢEJ ff @ʣ ˞͜͜Ͱ͸NVUBCMFɺJNNVUBCMFͷҰൠతͳϝϦοτ΍σϝϦοτʹ͸ਂ͘৮Ε·ͤΜ͕ɺ্هͷ؍఺͔ΒJNNVUBCMFͷߟ͑ํ͕ਪ঑͞Ε͍ͯΔҹ৅Ͱ͢ɻ
  5. ίϯςφ͸JNNVUBCMF͔ʁ ͦ΋ͦ΋ͳΜͰJNNVUBCMFΛ࣮ݱ͍͔ͨ͠ʁʁ ɹˠมߋͷੵΈॏͶʹΑΔτϥϒϧΛආ͚ΔͨΊ ɹɹFYʣߋ৽ͷࣦഊɺυΩϡϝϯτͱ࣮؀ڥͷࠩҟɺ؀ڥࠩҟͷൃੜ CBTF CBTF EJ ff @ CBTF

    EJ ff @ EJ ff @ W W W มߋ ʢEJ ff @ʣ มߋ ʢEJ ff @ʣ ˞͜͜Ͱ͸NVUBCMFɺJNNVUBCMFͷҰൠతͳϝϦοτ΍σϝϦοτʹ͸ਂ͘৮Ε·ͤΜ͕ɺ্هͷ؍఺͔ΒJNNVUBCMFͷߟ͑ํ͕ਪ঑͞Ε͍ͯΔҹ৅Ͱ͢ɻ
  6. ίϯςφ͸JNNVUBCMF͔ʁ ͦ΋ͦ΋ͳΜͰJNNVUBCMFΛ࣮ݱ͍͔ͨ͠ʁʁ ɹˠมߋͷੵΈॏͶʹΑΔτϥϒϧΛආ͚ΔͨΊ ɹɹFYʣߋ৽ͷࣦഊɺυΩϡϝϯτͱ࣮؀ڥͷࠩҟɺ؀ڥࠩҟͷൃੜ CBTF CBTF EJ ff @ CBTF

    EJ ff @ EJ ff @ W W W มߋ ʢEJ ff @ʣ มߋ ʢEJ ff @ʣ มߋ ʢEJ ff @ʣ ͜Ε·Ͱͷมߋࠩ෼ͷੵΈॏͶ ʹΑΓมߋΛ൓өͰ͖ͳ͍ ˞͜͜Ͱ͸NVUBCMFɺJNNVUBCMFͷҰൠతͳϝϦοτ΍σϝϦοτʹ͸ਂ͘৮Ε·ͤΜ͕ɺ্هͷ؍఺͔ΒJNNVUBCMFͷߟ͑ํ͕ਪ঑͞Ε͍ͯΔҹ৅Ͱ͢ɻ
  7. JNNVUBCMFͱηΩϡϦςΟ ϦεΫᶄɿίϯςφϗετ্ʹѱҙͷ͋ΔϑΝΠϧΛ഑ஔՄೳ $POUBJOFS)PTUʢ8PSLFS/PEFʣ 8FC "UUBDLFS DNE ίϯςφ಺Ͱ࡞੒͞ΕͨϑΝΠϧͷ࣮ମ͸ɺϗετ্ͷಛఆσΟϨΫτϦʹଘࡏ͢Δ͜ͱʹͳΓ·͢ɻ ͜Ε͸ίϯςφͷSPPUGT͕ϗετ্ͷ0WFSMBZ'4͔ΒϚ΢ϯτ͞Ε͍ͯΔͨΊͰ͢ɻ DNE 0WFSMBZGT

    6QQFSEJS -PXFSEJS -BZFS -PXFSEJS -BZFS XPSL DNE ࣮ମ͸ϗετ্ͷ 0WFSMBZGTʹଘࡏ NPVOUUPWFSMBZ PWFSMBZPOUZQFPWFSMBZ SX SFMBUJNF MPXFSEJSWBSMJCDPOUBJOFSEJPDPOUBJOFSETOBQTIPUUFSWPWFSMBZGTTOBQTIPUTGTWBSMJCDPOUBJOFSE JPDPOUBJOFSETOBQTIPUUFSWPWFSMBZGTTOBQTIPUTGTWBSMJCDPOUBJOFSEJPDPOUBJOFSETOBQTIPUUFSWPWFSMBZGTTOBQTIPUTGTWBSMJCDPOUBJOFSE JPDPOUBJOFSETOBQTIPUUFSWPWFSMBZGTTOBQTIPUTGTWBSMJCDPOUBJOFSEJPDPOUBJOFSETOBQTIPUUFSWPWFSMBZGTTOBQTIPUTGTWBSMJCDPOUBJOFSE JPDPOUBJOFSETOBQTIPUUFSWPWFSMBZGTTOBQTIPUTGTWBSMJCDPOUBJOFSEJPDPOUBJOFSETOBQTIPUUFSWPWFSMBZGTTOBQTIPUTGTWBSMJCDPOUBJOFSE JPDPOUBJOFSETOBQTIPUUFSWPWFSMBZGTTOBQTIPUTGTWBSMJCDPOUBJOFSEJPDPOUBJOFSETOBQTIPUUFSWPWFSMBZGTTOBQTIPUTGT VQQFSEJSWBSMJCDPOUBJOFSE JPDPOUBJOFSETOBQTIPUUFSWPWFSMBZGTTOBQTIPUTGT XPSLEJSWBSMJCDPOUBJOFSEJPDPOUBJOFSETOBQTIPUUFSWPWFSMBZGTTOBQTIPUTXPSL YJOPP ff ѱҙͷ͋ΔϑΝΠϧ͕ ϗετʹ഑ஔ͞Εͨ ίϯςφʢ߈ܸऀ୺຤͔Β৵ೖʣ MTWBSMJCDPOUBJOFSEJPDPOUBJOFSETOBQTIPUUFSWPWFSMBZGTTOBQTIPUTGT DNEFUDSPPUSVOWBS ίϯςφϗετ
  8. ίϯςφͷSPPUGTΛ3FBE0OMZʹ͢Δ ,VCFSOFUFTͰ͸ίϯςφͷىಈઃఆʹͯίϯςφͷSPPUGTΛ3FBE0OMZʹઃఆ͢Δ͜ͱ͕ՄೳͰ͢ɻ ͜͏͢Δ͜ͱͰɺίϯςφ಺ͰͷSPPUGTʹର͢Δॻ͖ࠐΈΛ൐͏ૢ࡞͕ېࢭ͞Εɺ ηΩϡϦςΟϨϕϧΛߴΊΔ͜ͱʹܨ͕Γ·͢ɻ BQJ7FSTJPOW LJOE1PE NFUBEBUB MBCFMT SVOVCVOUVSFBEPOMZ OBNFVCVOUVSFBEPOMZ

    TQFD DPOUBJOFST JNBHFVCVOUV OBNFVCVOUVSFBEPOMZ DPNNBOE<CJOTI D XIJMFEPTMFFQEPOF> TFDVSJUZ$POUFYU SFBE0OMZ3PPU'JMFTZTUFNUSVF VCVOUVJNNVUBCMFZNM SPPU!VCVOUVSFBEPOMZBQUHFUJOTUBMMZHJU ɾɾɾ 8/PUVTJOHMPDLJOHGPSSFBEPOMZMPDL fi MFWBSMJCEQLHMPDLGSPOUFOE 8/PUVTJOHMPDLJOHGPSSFBEPOMZMPDL fi MFWBSMJCEQLHMPDL &6OBCMFUPMPDBUFQBDLBHFHJU SPPU!VCVOUVSFBEPOMZDBU&0'DNE ɾɾɾ CBTIDBOOPUDSFBUFUFNQ fi MFGPSIFSFEPDVNFOU3FBEPOMZ fi MFTZTUFN $POUBJOFS)PTUʢ8PSLFS/PEFʣ VCVOUVSFBEPOMZ DNE SPPUGT  QSPDFTT CJO SPPU MPDBMBQBDIFMPHT VTS ɾ ɾ ɾ NPVOU SPPUGT  PWFSMBZGT 3FBE0OMZ ίϯςφͷSPPUGTΛ30ʹઃఆ 8SJUF
  9. ίϯςφͷSPPUGTΛ3FBE0OMZʹ͢Δ ͔͠͠ͳ͕ΒίϯςφͷڍಈʹΑͬͯ͸ɺSPPUGT΁ͷॻ͖ࠐΈ͕ېࢭ͞Ε͍ͯΔͱਖ਼ৗʹίϯςφ͕ىಈͰ͖ͳ͍ ৔߹΋͋Γ·͢ɻIUUQEͷΑ͏ʹίϯςφϓϩηε͕SPPUGT഑ԼͷಛఆσΟϨΫτϦʹϑΝΠϧΛग़ྗ͢Δಈ࡞Λ͢Δ৔߹͸ɺ SPPUGT͕3FBE0OMZͩͱίϯςφΛىಈ͢Δ͜ͱ͕Ͱ͖·ͤΜɻ BQJ7FSTJPOW LJOE1PE NFUBEBUB MBCFMT SVOIUUQESFBEPOMZ OBNFIUUQESFBEPOMZ

    TQFD DPOUBJOFST JNBHFIUUQE OBNFIUUQESFBEPOMZ TFDVSJUZ$POUFYU SFBE0OMZ3PPU'JMFTZTUFNUSVF IUUQESFBEPOMZZNM ›››LVCFDUMHFUQPIUUQESFBEPOMZ /".&3&"%:45"5643&45"354"(& IUUQESFBEPOMZ&SSPS TBHP T ›››LVCFDUMMPHTIUUQESFBEPOMZ ")IUUQE$PVMEOPUSFMJBCMZEFUFSNJOFUIFTFSWFSTGVMMZRVBMJ fi FEEPNBJOOBNF VTJOH4FUUIF4FSWFS/BNFEJSFDUJWFHMPCBMMZUPTVQQSFTTUIJTNFTTBHF ")IUUQE$PVMEOPUSFMJBCMZEFUFSNJOFUIFTFSWFSTGVMMZRVBMJ fi FEEPNBJOOBNF VTJOH4FUUIF4FSWFS/BNFEJSFDUJWFHMPCBMMZUPTVQQSFTTUIJTNFTTBHF <4BU/PW><DPSFFSSPS><QJEUJE>  3FBEPOMZ fi MFTZTUFN")DPVMEOPUDSFBUFVTSMPDBMBQBDIFMPHTIUUQEQJEJV5ODG <4BU/PW><DPSFFSSPS><QJEUJE>")IUUQEDPVMEOPUMPHQJEUP fi MFVTSMPDBMBQBDIFMPHTIUUQEQJE $POUBJOFS)PTUʢ8PSLFS/PEFʣ IUUQESFBEPOMZ DNE SPPUGT  QSPDFTT CJO SPPU MPDBMBQBDIFMPHT VTS ɾ ɾ ɾ NPVOU 3FBE0OMZ 3FBE0OMZ ίϯςφͷSPPUGTΛ30ʹઃఆ SPPUGT  PWFSMBZGT 8SJUF 8SJUF
  10. ίϯςφͷSPPUGTΛ3FBE0OMZʹ͢Δ ରࡦͱͯ͠ɺSPPUGT͸3FBE0OMZͱͭͭ͠ίϯςφϓϩηε͕ॻ͖ࠐΈΛߦ͏ඞཁ͕͋ΔσΟϨΫτϦͷΈ 3FBE8JUFͰ7PMVNF.PVOUΛߦ͏ͱ͍͏ํ๏͕ߟ͑ΒΕ·͢ɻ ҎԼͰ͸ίϯςφىಈ࣌ʹର৅σΟϨΫτϦʹରͯ͠FNQUZ%JSʢҰ࣌తͳϘϦϡʔϜʣΛ࡞੒Ϛ΢ϯτ͍ͯ͠·͢ɻ BQJ7FSTJPOW LJOE1PE NFUBEBUB MBCFMT SVOIUUQESFBEPOMZ OBNFIUUQESFBEPOMZ

    TQFD DPOUBJOFST JNBHFIUUQE OBNFIUUQESFBEPOMZ TFDVSJUZ$POUFYU SFBE0OMZ3PPU'JMFTZTUFNUSVF WPMVNF.PVOUT OBNFMPHWPMVNF NPVOU1BUIVTSMPDBMBQBDIFMPHT WPMVNFT OBNFMPHWPMVNF FNQUZ%JS\^ ›››LVCFDUMHFUQPIUUQESFBEPOMZ /".&3&"%:45"5643&45"354"(& IUUQESFBEPOMZ3VOOJOHNT $POUBJOFS)PTUʢ8PSLFS/PEFʣ IUUQESFBEPOMZ DNE SPPUGT  QSPDFTT CJO SPPU MPDBMBQBDIFMPHT VTS ɾ ɾ ɾ NPVOU MPHWPMVNF NPVOU 3FBE0OMZ 3FBE8SJUFͰ 7PMVNF.PVOU IUUQESFBEPOMZZNM ίϯςφͷSPPUGTΛ30ʹઃఆ ॻ͖ࠐΈ͕ඞཁ͕ྖҬΛ FNQUZ%JSʹϚ΢ϯτ SPPUGT  PWFSMBZGT 8SJUF
  11. ,VCFSOFUFT׬શΨΠυୈ൛ IUUQTCPPLJNQSFTTDPKQCPPLT $FSUJ fi FE,VCFSOFUFT4FDVSJUZ4QFDJBMJTU $,4  IUUQTLPEFLMPVEDPNDPVSTFTDFSUJ fi FELVCFSOFUFTTFDVSJUZTQFDJBMJTUDLT

    $POUBJOFS4FDVSJUZ#PPL IUUQTDPOUBJOFSTFDVSJUZEFWTFDVSJUZCSFBLPVUUPIPTUIUNM %PDLFS,VCFSOFUFT։ൃɾӡ༻ͷͨΊͷηΩϡϦςΟ࣮ફΨΠυ IUUQTCPPLNZOBWJKQFDQSPEVDUTEFUBJMJE ίϯςφٕज़ೖ໳Ծ૝Խͱͷҧ͍Λ஌Γɺཁૉٕज़Λ৮ֶͬͯ΅͏ IUUQTFIDBSFFSDPNFOHJOFFSIVCFOUSZ ࢀߟ