KubernetesのSecret管理~Vaultへの超入門~/Vault on Kubernetes

2023/04/17 Kubernetes Novice Tokyo #24
KubernetesのSecret管理~Vaultへの超入門~

セッション動画
https://k8s-novice-jp.connpass.com/event/278196/
https://www.youtube.com/watch?v=yDwB42kn9gw&t=2352s

Transcript

1. 
   !NPDIJ[VLJ
   ,VCFSOFUFTͷ4FDSFU؅ཧ
   d7BVMU΁ͷ௒ೖ໳d
   ,VCFSOFUFT/PWJDF5PLZP
   

   View Slide

2. ,FJUB.PDIJ[VLJ
   XIPBNJ
   !NPDIJ[VLJ
   🌕8BOUUPCFB1SPGFTTJPOBM*5&OHJOFFS
   ❤,VCFSOFUFT
   🚨"GPY OPUBSBDDPPOEPH
   

   View Slide

3. ͸͡Ίʹ
   ۙ೥ɺγʔΫϨοτ৘ใͷ؅ཧ͕ͱͯ΋ॏཁʹͳ͍ͬͯΔதͰɺ
   ͲͷΑ͏ʹ؅ཧ͢Δͷ͕ྑ͍ͷ͔೰Ή͜ͱ͕ଟ͍͔ͱࢥ͍·͢ɻ
   ద੾ͳ؅ཧΛ͠ͳ͚Ε͹ɺγʔΫϨοτ৘ใ͸༷ʑͳՕॴʹ෼ࢄͯ͠ஔ͔Εͯ͠·͍ɺ
   ख͕෇͚ΒΕͳ͍ঢ়ଶʹͳͬͯ͠·͍·͢ɻ
   ͦ͜Ͱࠓճ͸ɺγʔΫϨοτ৘ใΛҰݩతʹ؅ཧͰ͖ɺ
   ,VCFSOFUFTͷϦιʔεͱ༰қʹ࿈ܞͤ͞Δ͜ͱ͕Ͱ͖Δ)BTIJDPSQ7BVMUͱ͍͏
   πʔϧΛ঺հ͍͖ͤͯͨͩ͞·͢ɻ
   ຊ-5Ͱ͸ɺ7BVMUͷΠϯετʔϧ͔Βɺ༷ʑͳγʔΫϨοτ৘ใͷऔಘํ๏ʹؔͯ͠ͷ
   ͓࿩Λͤͯ͞௖͖·͢ɻ
   

   View Slide

4. ͸͡Ίʹ
   ۙ೥ɺγʔΫϨοτ৘ใͷ؅ཧ͕ͱͯ΋ॏཁʹͳ͍ͬͯΔதͰɺ
   ͲͷΑ͏ʹ؅ཧ͢Δͷ͕ྑ͍ͷ͔೰Ή͜ͱ͕ଟ͍͔ͱࢥ͍·͢ɻ
   ద੾ͳ؅ཧΛ͠ͳ͚Ε͹ɺγʔΫϨοτ৘ใ͸༷ʑͳՕॴʹ෼ࢄͯ͠ஔ͔Εͯ͠·͍ɺ
   ख͕෇͚ΒΕͳ͍ঢ়ଶʹͳͬͯ͠·͍·͢ɻ
   ͦ͜Ͱࠓճ͸ɺγʔΫϨοτ৘ใΛҰݩతʹ؅ཧͰ͖ɺ
   ,VCFSOFUFTͷϦιʔεͱ༻ҙʹ࿈ܞͤ͞Δ͜ͱ͕Ͱ͖Δ)BTIJDPSQ7BVMUͱ͍͏
   πʔϧΛ঺հ͍͖ͤͯͨͩ͞·͢ɻ
   ຊ-5Ͱ͸ɺ7BVMUͷΠϯετʔϧ͔Βɺ༷ʑͳγʔΫϨοτ৘ใͷऔಘํ๏ʹؔͯ͠ͷ
   ͓࿩Λͤͯ͞௖͖·͢ɻ
   ཁ͸7BVMUͰ,VCFSOFUFTͷ4FDSFU؅ཧ
   ΍ͬͯΈͨͥͱ͍͏͓࿩Ͱ͢
   
   

   View Slide

5. ͸͡Ίʹ
   ɾܝࡌ಺༰͸ݸਓͷݟղͰ͋Γɺॴଐ͢Δاۀ΍૊৫ͷཱ৔ɺઓུɺҙݟΛ୅ද͢Δ΋ͷͰ͸͋Γ·ͤΜ
   ɾهࡌ͞Ε͍ͯΔձ໊ࣾɺ঎඼໊ɺ·ͨ͸αʔϏε໊͸ɺ֤ࣾͷ঎ඪొ࿥·ͨ͸঎ඪͰ͢
   

   View Slide

6. "HFOEB
   4FDSFU؅ཧ
   7BVMU
   7BVMUͷΠϯετʔϧ
   7BVMU΁ͷػີ৘ใ֨ೲ
   7BVMUΛ༻͍ͨ,VCFSOFUFTͷ4FDSFU؅ཧ
   &YUFSOBM4FDSFU0QFSBUPSΛ༻͍Δύλʔϯ
   7BVMU"HFOUΛ༻͍Δύλʔϯ
   4FDSFUT4UPSF$4*%SJWFSΛ༻͍Δύλʔϯ
   ·ͱΊ
   
   

   View Slide

7. "HFOEB
   4FDSFU؅ཧ
   7BVMU
   7BVMUͷΠϯετʔϧ
   7BVMU΁ͷػີ৘ใ֨ೲ
   7BVMUΛ༻͍ͨ,VCFSOFUFTͷ4FDSFU؅ཧ
   &YUFSOBM4FDSFU0QFSBUPSΛ༻͍Δύλʔϯ
   7BVMU"HFOUΛ༻͍Δύλʔϯ
   4FDSFUT4UPSF$4*%SJWFSΛ༻͍Δύλʔϯ
   ·ͱΊ
   
   

   View Slide

8. 4FDSFU؅ཧ
   ,VCFSOFUFTͰػີ৘ใΛѻ͏γʔϯʹ͓͍ͯɺ
   ,VCFSOFUFTͰ͸4FDSFUϦιʔεΛ༻͍ͯ1PEʹػີ৘ใΛ౉͢͜ͱ͕Ͱ͖·͢ɻ
   BQJ7FSTJPOW
   LJOE1PE
   
   TQFD
   
   FOW4FDSFUͷ஋Λ؀ڥม਺ʹઃఆ
   OBNF64&3/"/&؀ڥม਺໊
   WBMVF'SPN
   TFDSFU,FZ3FG
   OBNFOPWJDFBQQTFDSFU4FDSFU໊
   LFZVTFSOBNF
   OBNF1"44803%؀ڥม਺໊
   WBMVF'SPN
   TFDSFU,FZ3FG
   OBNFOPWJDFBQQTFDSFU4FDSFU໊
   LFZQBTTXPSE
   WPMVNF.PVOUT4FDSFUΛ7PMVNFͱͯ͠.PVOU
   OBNFDPO
   fi
   H
   NPVOU1BUINOUDPO
   fi
   H
   SFBE0OMZUSVF
   WPMVNFT
   OBNFDPO
   fi
   H
   TFDSFU
   TFDSFU/BNFOPWJDFBQQTFDSFU
   OPWJDFBQQZBNM
   OPWJDFBQQTFDSFU
   OPWJDFBQQ
   

   View Slide

9. 4FDSFU؅ཧ
   BQJ7FSTJPOW
   LJOE4FDSFU
   NFUBEBUB
   OBNFOPWJDFBQQTFDSFU
   OBNFTQBDFOPWJDFBQQ
   UZQF0QBRVF
   EBUB
   QBTTXPSE6&'56E16L2Y.K./2
   VTFSOBNF77/'6K&Z.[2
   Ұൠతʹ4FDSFUϦιʔε͸ҎԼͷΑ͏ͳϚχϑΣετϑΝΠϧ͔Β࡞੒ՄೳͰ͢ɻ
   ͔͠͠ͳ͕Β͜ΕͩͱϑΝΠϧͦͷ΋ͷʹ୭Ͱ΋σίʔυՄೳͳػີ৘ใΛهࡌ͢Δ͜ͱʹͳΓɺ
   ϚχϑΣετϑΝΠϧͷ؅ཧํ๏͕՝୊ͱͳΓ·͢ɻ
   OPWJDFBQQTFDSFUZBNM
   FDIPE9/MDK&Z.[2cCBTFE
   VTFS
   FDIPD('[DEWDN2Y.K./2cCBTFE
   QBTTXPSE
   ͜ͷ஋͑͞஌͍ͬͯΕ͹୭Ͱ΋σίʔυՄೳ
   OPWJDFBQQTFDSFU
   OPWJDFBQQ
   TFDSFUZBNM
   ίϨΛͲ͏؅ཧ͢Δ͔
   64&3/".&VTFS
   1"44803%QBTTXPSE
   #BTFͰΤϯίʔυ͍ͯ͠Δ͚ͩ
   

   View Slide

10. 4FDSFU؅ཧ
    ͜Εʹର͠ύοͱࢥ͍ͭ͘ϚχϑΣετϑΝΠϧͷ؅ཧํ๏͸ྫ͑͹
    ҎԼͷΑ͏ͳ΋ͷ͕ڍ͛ΒΕ·͢ɻ
    ϚχϑΣετϑΝΠϧࣗମͷ؅ཧΛؾΛ෇͚Δ
    ɹɾಛఆͷਓ͚͕ͩ4FDSFUϚχϑΣετϑΝΠϧΛ؅ཧ͢Δ
    ɹɾ1SJWBUFͳ(JU)VCϦϙδτϦͰϚχϑΣετϑΝΠϧΛ؅ཧ͢Δ
    ϚχϑΣετϑΝΠϧʹؚ·ΕΔػີ৘ใΛผ్ൿີ伴ͰΤϯίʔυ͢Δ
    ɹɾ1PE಺ͷൿີ伴Ͱσίʔυ
    ɹɾ4FDSFU࡞੒࣌ʹσίʔυ FYTFBMFETFDSFU
    
    ਓతϛεͷϦεΫɺػີ৘ใͷѻ͍ਏ͞ɺػີ৘ใࣗମϑΝΠϧͰѻ͍ͨ͘ͳ͍FUD
    

    View Slide

11. 4FDSFU؅ཧ
    ΑΓηΩϡΞʹػີ৘ใΛѻ͏खஈͱͯ͠ɺػີ৘ใͦͷ΋ͷΛϚχϑΣετϑΝΠϧͰ͸ͳ͘
    ,.4 ,FZ.BOBHFNFOU4ZTUFN
    Ͱ؅ཧ͢Δͱ͍͏खஈ͕ߟ͑ΒΕ·͢ɻ
    ࠓճ͸,.4ͱͯ͠7BVMUΛ࢖༻͠ɺ,VCFSOFUFT্Ͱػີ৘ใΛѻ͏ྫΛ͝঺հ͠·͢ɻ
    OPWJDFBQQ
    ,.4
    ,FZ.BOBHFNFOU4ZTUFN
    
    64&3/".&VTFS
    1"44803%QBTTXPSE
    ػີ৘ใઐ༻ͷ৔ॴͰ؅ཧ
    

    View Slide

12. "HFOEB
    4FDSFU؅ཧ
    7BVMU
    7BVMUͷΠϯετʔϧ
    7BVMU΁ͷػີ৘ใ֨ೲ
    7BVMUΛ༻͍ͨ,VCFSOFUFTͷ4FDSFU؅ཧ
    &YUFSOBM4FDSFU0QFSBUPSΛ༻͍Δύλʔϯ
    7BVMU"HFOUΛ༻͍Δύλʔϯ
    4FDSFUT4UPSF$4*%SJWFSΛ༻͍Δύλʔϯ
    ·ͱΊ
    
    

    View Slide

13. 7BVMU
    8IBUJT7BVMU IUUQTEFWFMPQFSIBTIJDPSQDPNWBVMU
    
    4FDVSF TUPSF BOEUJHIUMZDPOUSPMBDDFTTUPUPLFOT QBTTXPSET DFSUJ
    fi
    DBUFT FODSZQUJPOLFZTGPSQSPUFDUJOHTFDSFUT
    BOEPUIFSTFOTJUJWFEBUBVTJOHB6* $-* PS)551"1*
    <ҙ༁>
    ྑ͍ײ͡ʹػີ৘ใΛ؅ཧͯ͠ѻ͑Δ
    

    View Slide

14. 7BVMU
    !KBDPQFO͞Μͷࢿྉ
    7BVMUʹ֨ೲͨ͠γʔΫϨοτΛ,VCFSOFUFT͔Β׆༻͢Δํ๏
    IUUQTTQFBLFSEFDLDPNKBDPQFOWBVMUOJHFOBTJUBTJLVSFUVUPXPLVCFSOFUFTLBSBIVPZPOHTVSVGBOHGB
    LTͱ7BVMUΛ૊Έ߹ΘͤͯγʔΫϨοτΛ΋ͬͱηΩϡΞʹ
    IUUQTTQFBLFSEFDLDPNKBDPQFOLTUPWBVMUXP[VNJIFXBTFUFTJLVSFUVUPXPNPUVUPTFLJZVBOJ
    ࢀߟ
    

    View Slide

15. "HFOEB
    4FDSFU؅ཧ
    7BVMU
    7BVMUͷΠϯετʔϧ
    7BVMU΁ͷػີ৘ใ֨ೲ
    7BVMUΛ༻͍ͨ,VCFSOFUFTͷ4FDSFU؅ཧ
    &YUFSOBM4FDSFU0QFSBUPSΛ༻͍Δύλʔϯ
    7BVMU"HFOUΛ༻͍Δύλʔϯ
    4FDSFUT4UPSF$4*%SJWFSΛ༻͍Δύλʔϯ
    ·ͱΊ
    
    

    View Slide

16. 7BVMUͷΠϯετʔϧ
    ,VCFSOFUFT΁ͷ7BVMUͷΠϯετʔϧ͸)FMNΛ༻͍Δ͜ͱͰ؆୯ʹߦ͑·͢ɻ
    IFMNSFQPBEEIBTIJDPSQIUUQTIFMNSFMFBTFTIBTIJDPSQDPN
    IFMNSFQPVQEBUF
    IFMNJOTUBMMWBVMUIBTIJDPSQWBVMUOBNFTQBDFWBVMUDSFBUFOBNFTQBDFGWBMVFTZBNM
    Install vault
    https://developer.hashicorp.com/vault/tutorials/kubernetes/kubernetes-raft-deployment-guide#install-vault
    

    View Slide

17. 7BVMUͷΠϯετʔϧ
    ࠓճ͸ݕূ޲͚ʹҎԼͷΑ͏ͳઃఆΛ༻͍·ͨ͠ɻ
    %FW4FSWFS EFWFOBCMFEUSVF
    ͱ͍͏ݕূ༻ͷ01΋༻ҙ͞Ε͍ͯΔͨΊ
    ͦͪΒΛ༻͍ͯ΋ྑ͍͔΋͠Ε·ͤΜɻ˞ະݕূ
    TFSWFS
    JOHSFTTJOHSFTTઃఆ
    FOBCMFEUSVF
    JOHSFTT$MBTT/BNFOHJOY
    IPTUT
    IPTUWBVMUFYBNQMFDPN
    QBUIT<>
    EBUB4UPSBHF
    FOBCMFEGBMTF17$࡞੒ͷແޮԽ ݕূ༻
    
    VJ8FC6*Λ༗ޮԽ
    FOBCMFEUSVF
    DTJTFDSFUTTUPSFDTJESJWFSQSPWJEFSWBVMUΛΠϯετʔϧ
    FOBCMFEUSVF
    WBMVFTZBNM
    Con
    fi
    gure Vault Helm Chart
    https://developer.hashicorp.com/vault/tutorials/kubernetes/kubernetes-raft-deployment-guide#con
    fi
    gure-vault-helm-chart
    "Dev" Server Mode
    https://developer.hashicorp.com/vault/docs/concepts/dev-server
    

    View Slide

18. 7BVMUͷΠϯετʔϧ
    Πϯετʔϧ׬ྃޙ͸7BVMU͸4FBMFEͱݺ͹ΕΔঢ়ଶ࣌ͳ͓ͬͯΓɺ
    جຊతʹ7BVMUͷػೳΛར༻ग़དྷͳ͍ 7BVMUʹอଘ͞Ε͍ͯΔσʔλʹΞΫηεͰ͖ͳ͍
    ঢ়ଶʹ
    ͳ͍ͬͯ·͢ɻ
    LVCFDUMOWBVMUHFUQP
    /".&3&"%:45"5643&45"354"(&
    WBVMU3VOOJOHT
    WBVMUBHFOUJOKFDUPSECCDGI[3VOOJOHT
    WBVMUDTJQSPWJEFSI[[3VOOJOHT
    WBVMUDTJQSPWJEFSTTMO3VOOJOHT
    WBVMUDTJQSPWJEFSWKI3VOOJOHT
    Seal/Unseal
    https://developer.hashicorp.com/vault/docs/concepts/seal
    

    View Slide

19. 7BVMUͷΠϯετʔϧ
    7BVMU1PEʹFYFD͠ॳظԽίϚϯυΛ࣮ߦ͢Δ͜ͱͰҎԼͷΑ͏ʹ6OTFBM,FZͱ3PPU5PLFO
    ͕෷͍ग़͞Ε·͢ɻ
    ˞ࠓճ͸σϞ༻ʹ֤஋Λެ։͍ͯ͠·͕͢ɺ࣮ࡍ͸͜ΕΒͷ஋͸ػີ৘ใʹ֘౰͢ΔͨΊެ։͠ͳ͍Α͏ʹ͍ͯͩ͘͠͞ɻ
    LVCFDUMFYFDTUEJOUSVFUUZUSVFWBVMUOWBVMUWBVMUPQFSBUPSJOJU
    6OTFBM,FZH%(8+46T*04NR(#"VUW/8"W5,8L[0JBX(
    6OTFBM,FZ)250SVCINCBQ$:L,QJXYKVY*13HV:4P0Y3706
    6OTFBM,FZ;KM6$U9"LW"'V16UKY89I[B[#H1L0GRS/R&-H["
    6OTFBM,FZL2HDE3RPE&DIDP"LY&3IZ1FRK#D1N5U+G$39
    6OTFBM,FZ1UHM($K:P[/B87IIJ;#$41E#Z;0U3PZ/B%08R$
    *OJUJBM3PPU5PLFOIWT54BY3[/NG(0.01)CPH27P
    7BVMUJOJUJBMJ[FEXJUILFZTIBSFTBOEBLFZUISFTIPMEPG1MFBTFTFDVSFMZ
    EJTUSJCVUFUIFLFZTIBSFTQSJOUFEBCPWF8IFOUIF7BVMUJTSFTFBMFE
    SFTUBSUFE PSTUPQQFE ZPVNVTUTVQQMZBUMFBTUPGUIFTFLFZTUPVOTFBMJU
    CFGPSFJUDBOTUBSUTFSWJDJOHSFRVFTUT
    7BVMUEPFTOPUTUPSFUIFHFOFSBUFESPPULFZ8JUIPVUBUMFBTULFZTUP
    SFDPOTUSVDUUIFSPPULFZ 7BVMUXJMMSFNBJOQFSNBOFOUMZTFBMFE
    *UJTQPTTJCMFUPHFOFSBUFOFXVOTFBMLFZT QSPWJEFEZPVIBWFBRVPSVNPG
    FYJTUJOHVOTFBMLFZTTIBSFT4FFWBVMUPQFSBUPSSFLFZGPSNPSFJOGPSNBUJPO
    6OTFBM,FZ
    3PPU5PLFO
    

    View Slide

20. 7BVMUͷΠϯετʔϧ
    ॳظԽ࣌ʹൃߦ͞Εͨ6OTFBM,FZΛ༻͍Δ͜ͱͰɺ7BVMUΛ6OTFBMFEঢ়ଶʹͯ͠
    7BVMUΛ࢖༻Ͱ͖ΔΑ͏ʹ͠·͢ɻ
    ˞ҎԼͰ͸8FC6*ͷྫΛ͍ࣔͯ͠·͕͢ɺ$-*Ͱ΋ಉ༷ͷૢ࡞͕ՄೳͰ͢
    4FBMFEঢ়ଶ
    ͜͜ʹ6OTFBM,FZΛೖྗ
    ˞σϑΥϧτճ
    

    View Slide

21. 7BVMUͷΠϯετʔϧ
    6OTFBM͕׬ྃ͢Δͱ4UBUVT͕6OTFBMFEʹมΘΓɺॳظԽ࣌ʹ෷͍ग़͞Εͨ3PPU5PLFOΛ༻͍ͯ
    ϩάΠϯͰ͖ΔΑ͏ʹͳΓ·͢ɻ
    ˞3PPU5PLFO͸ॴҦ#VJME*Oͷ"ENJOJTUSBUPSݖݶʹ֘౰͢ΔͨΊɺॳظηοτΞοϓ͕ऴΘͬͨΒແޮԽ͢Δ͜ͱ͕ਪ঑͞Ε·͢ɻ
    6OTFBMFEঢ়ଶ
    3PPU5PLFOͰϩάΠϯ
    Root Tokens
    https://developer.hashicorp.com/vault/docs/concepts/tokens#root-tokens
    

    View Slide

22. 7BVMUͷΠϯετʔϧ
    ࢀߟ
    7BVMU͕σʔλʹΞΫηε͢ΔͨΊʹ͸SPPULFZΛσίʔυͰ͖Δඞཁ͕͋Δɻ
    SPPULFZ͸6OTFBM,FZͰσίʔυͰ͖ΔͨΊɺ6OTFBM,FZΛ7BVMUʹ౉ͯ͠σʔλʹΞΫηεͰ͖Δ
    Α͏ʹ͢Δ࡞ۀ͕6OTFBMʹ֘౰͢Δɻ
    ·ͨɺ6OTFBM,FZ͸4IBNJST4FDSFU4IBSJOHͱ͍͏࢓૊ΈΛ༻͍ͯ෼ࢄ؅ཧ͞ΕΔɻ
    Seal/Unseal
    https://developer.hashicorp.com/vault/docs/concepts/seal
    7BVMUͷσʔλΛ
    σίʔυ͢ΔͨΊͷ伴
    ˠSPPULFZͰΤϯίʔυ͞Ε͍ͯΔ
    &ODSZQUJPO,FZΛ
    σίʔυ͢ΔͨΊͷ伴
    ˠ6OTFBM,FZͰΤϯίʔυ͞Ε͍ͯΔ
    SPPULFZΛσίʔυ͢ΔͨΊͷ伴
    

    View Slide

23. "HFOEB
    4FDSFU؅ཧ
    7BVMU
    7BVMUͷΠϯετʔϧ
    7BVMU΁ͷػີ৘ใ֨ೲ
    7BVMUΛ༻͍ͨ,VCFSOFUFTͷ4FDSFU؅ཧ
    &YUFSOBM4FDSFU0QFSBUPSΛ༻͍Δύλʔϯ
    7BVMU"HFOUΛ༻͍Δύλʔϯ
    4FDSFUT4UPSF$4*%SJWFSΛ༻͍Δύλʔϯ
    ·ͱΊ
    
    

    View Slide

24. 7BVMU΁ͷػີ৘ใ֨ೲ
    ͜͜Ͱ͸ྫͱͯ͠ɺ,FZ7BMVFܗࣜͰ7BVMUʹػີ৘ใΛ֨ೲͯ͠Έ·͢ɻ
    ,7λΠϓͰOPWJDFͱ͍͏
    ໊લͷ4FDSFUT&OHJOΛ࡞੒
    

    View Slide

25. 7BVMU΁ͷػີ৘ใ֨ೲ
    ͜͜Ͱ͸ྫͱͯ͠ɺ,FZ7BMVFܗࣜͰ7BVMUʹػີ৘ใΛ֨ೲͯ͠Έ·͢ɻ
    ػີ৘ใΛ֨ೲ
    

    View Slide

26. "HFOEB
    4FDSFU؅ཧ
    7BVMU
    7BVMUͷΠϯετʔϧ
    7BVMU΁ͷػີ৘ใ֨ೲ
    7BVMUΛ༻͍ͨ,VCFSOFUFTͷ4FDSFU؅ཧ
    &YUFSOBM4FDSFU0QFSBUPSΛ༻͍Δύλʔϯ
    7BVMU"HFOUΛ༻͍Δύλʔϯ
    4FDSFUT4UPSF$4*%SJWFSΛ༻͍Δύλʔϯ
    ·ͱΊ
    
    

    View Slide

27. 7BVMUΛ༻͍ͨ,VCFSOFUFTͷ4FDSFU؅ཧ
    7BVMUͰ؅ཧ͞Ε͍ͯΔػີ৘ใʹ,VCFSNFUFT͔ΒΞΫηε͢ΔͨΊʹɺ
    ԿΒ͔ͷํ๏Ͱ7BVMUଆͰೝূೝՄΛߦ͏ඞཁ͕͋Γ·͢ɻ
    ɹೝূ7BVMUͰ͸,VCFSOFUFTͷ4FSWJDF"DDPVOUΛ༻͍ͯೝূΛߦ͏ํ๏͕ఏڙ͞Ε͍ͯΔ
    ɹೝՄ7BVMUͷ3PMFɺ1PMJDZͱ͍͏࢓૊ΈΛ༻͍ͯػີ৘ใ΁ͷΞΫηεΛ੍ޚ͢Δ
    Kubernetes Auth Method
    https://developer.hashicorp.com/vault/docs/auth/kubernetes
    ,VCFSOFUFT
    4FSWJDF"DDPVOU
    7BVMU
    3PMF 1PMJDZ
    4FDSFUT
    4FSWJDF"DDPVOUΛ࢖ͬͯ
    7BVMU্ͷػີ৘ใΛऔಘ
    64&3/".&VTFS
    1"44803%QBTTXPSE
    4FSWJDF"DDPVOUΛ࢖ͬͯ
    ͱඥ෇͚ͨ3PMFΛ༻͍ͯ
    ػີ৘ใʹΞΫηε
    ػີ৘ใ΁ͷΞΫηεݖΛઃఆ
    ˞7BVMU͸4FSWJDF"DDPVOUΛ࢖ͬͨϦΫΤετΛड͚ͨΒɺ
    ɹ,VCFSOFUFT"1*ʹϦΫΤετΛߦ͍
    ɹ5PLFOͷݕূΛߦ͏
    

    View Slide

28. 7BVMUΛ༻͍ͨ,VCFSOFUFTͷ4FDSFU؅ཧ
    ,VCFSOFUFT্Ͱ4FSWJDF"DDPVOUΛ࡞੒͠·͢ɻ
    ࠓճ͸OPWJDFBQQͱ͍͏/BNFTQBDF͔Β7BVMUʹΞΫηε͢ΔͨΊͦͷ഑Լʹ4FSWJDF"DDPVOUΛ
    ࡞੒͍ͯ͠·͢ɻ
    ͳ͓ɺ4FSWJDF"DDPVOUʹରͯ͠,VCFSOFUFT্Ͱͷ3PMFͷόΠϯυ͸ෆཁͰ͢ɻ
    LVCFDUMDSFBUFTBOPWJDFWBVMUTBOOPWJDFBQQ
    TFSWJDFBDDPVOUOPWJDFWBVMUTBDSFBUFE
    

    View Slide

29. 7BVMUΛ༻͍ͨ,VCFSOFUFTͷ4FDSFU؅ཧ
    7BVMU্Ͱ4FSWJDF"DDPVOUΛ༻͍ͨೝূΛߦ͏ͨΊͷ
    ,VCFSOFUFT"VUIFOUJDBUJPO.FUIPEΛ࡞੒͠·͢ɻ
    LVCFSOFUFTͱ͍͏
    "VUIFOUJDBUJPO.FUIPEΛ࡞੒
    

    View Slide

30. 7BVMUΛ༻͍ͨ,VCFSOFUFTͷ4FDSFU؅ཧ
    ,VCFSOFUFT"1*4FSWFSΛࢦఆ
    "VUIFOUJDBUJPO.FUIPEΛ࡞੒͢Δʹ͋ͨͬͯ7BVMU͕4FSWJDF"DDPVOU5PLFOͷݕূΛߦ͏ͨΊʹɺ
    ,VCFSOFUFT"1*4FSWFSͷΤϯυϙΠϯτ৘ใΛઃఆ͠·͢ɻ
    

    View Slide

31. 7BVMUΛ༻͍ͨ,VCFSOFUFTͷ4FDSFU؅ཧ
    7BVMU্Ͱ1PMJDZΛ࡞੒͠·͢ɻ
    ͜ͷ1PMJDZΛ3PMFʹׂΓ౰ͯΔ͜ͱͰɺ1PMJDZׂ͕Γ౰ͯΒΕͨ3PMFΛ࢖ͬͯॴఆͷػີ৘ใʹ
    ΞΫηεͰ͖ΔΑ͏ʹͳΓ·͢ɻ
    OPWJDFBQQQPMJDZͱ͍͏໊લͷ
    1PMJDZΛ࡞੒
    OPWJDFEBUBBQQDPO
    fi
    H΁ͷ
    ಡΈऔΓݖݶΛఆٛ
    

    View Slide

32. 7BVMUΛ༻͍ͨ,VCFSOFUFTͷ4FDSFU؅ཧ
    7BVMU্Ͱ4FSWJDF"DDPVOUͱඥ෇͚ͨ3PMFΛ࡞੒͠ɺ1PMJDZΛׂΓ౰ͯ·͢ɻ
    OPWJDFBQQͱ͍͏໊લͷ3PMFΛ࡞੒
    ͜ͷ3PMFͱඥ෇͚Δ4FSWJDF"DDPVOUΛઃఆ
    OPWJDFBQQOPWJDFBQQTB
    
    ͜ͷ3PMFʹׂΓ౰ͯΔ1PMJDZΛઃఆ
    OPWJDFBQQQPMJDZ
    
    

    View Slide

33. 7BVMUΛ༻͍ͨ,VCFSOFUFTͷ4FDSFU؅ཧ
    ͔͜͜Β͸7BVMUʹ֨ೲͨ͠ػີ৘ใΛ,VCFSOFUFT͔Βར༻͢Δํ๏ʹ͍ͭͯ͝঺հ͠·͢ɻ
    Ҿ༻
    7BVMUʹ֨ೲͨ͠γʔΫϨοτΛ,VCFSOFUFT͔Β׆༻͢Δํ๏ !KBDPQFO
    
    IUUQTTQFBLFSEFDLDPNKBDPQFOWBVMUOJHFOBTJUBTJLVSFUVUPXPLVCFSOFUFTLBSBIVPZPOHTVSVGBOHGB TMJEF
    

    View Slide

34. "HFOEB
    4FDSFU؅ཧ
    7BVMU
    7BVMUͷΠϯετʔϧ
    7BVMU΁ͷػີ৘ใ֨ೲ
    7BVMUΛ༻͍ͨ,VCFSOFUFTͷ4FDSFU؅ཧ
    &YUFSOBM4FDSFU0QFSBUPSΛ༻͍Δύλʔϯ
    7BVMU"HFOUΛ༻͍Δύλʔϯ
    4FDSFUT4UPSF$4*%SJWFSΛ༻͍Δύλʔϯ
    ·ͱΊ
    
    

    View Slide

35. &YUFSOBM4FDSFU0QFSBUPSΛ༻͍Δύλʔϯ
    Ҿ༻
    7BVMUʹ֨ೲͨ͠γʔΫϨοτΛ,VCFSOFUFT͔Β׆༻͢Δํ๏ !KBDPQFO
    
    IUUQTTQFBLFSEFDLDPNKBDPQFOWBVMUOJHFOBTJUBTJLVSFUVUPXPLVCFSOFUFTLBSBIVPZPOHTVSVGBOHGB TMJEF
    &YUFSOBM4FDSFU0QFSBUPS)BTIJ$PSQ7BVMU
    IUUQTFYUFSOBMTFDSFUTJPWQSPWJEFSIBTIJDPSQWBVMU
    

    View Slide

36. &YUFSOBM4FDSFU0QFSBUPSΛ༻͍Δύλʔϯ
    &YUFSOBM4FDSFU0QFSBUPS
    *OUSPEVDUJPO IUUQTFYUFSOBMTFDSFUTJPW
    
    &YUFSOBM4FDSFUT0QFSBUPSJTB,VCFSOFUFTPQFSBUPSUIBUJOUFHSBUFTFYUFSOBMTFDSFUNBOBHFNFOUTZTUFNT
    MJLF"844FDSFUT.BOBHFS )BTIJ$PSQ7BVMU (PPHMF4FDSFUT.BOBHFS "[VSF,FZ7BVMU *#.$MPVE4FDSFUT
    .BOBHFS BOENBOZNPSF5IFPQFSBUPSSFBETJOGPSNBUJPOGSPNFYUFSOBM"1*TBOEBVUPNBUJDBMMZJOKFDUTUIF
    WBMVFTJOUPB,VCFSOFUFT4FDSFU
    <ҙ༁>
    ྑ͍ײ͡ʹ֎෦͔Βػີ৘ใΛऔಘͯ͠,VCFSOFUFTͷ4FDSFUΛ࡞Δ
    ҼΈʹ&YUFSOBM4FDSFU0QFSBUPS͸7BVMUҎ֎ʹ༷ʑͳ,.4ΛόοΫΤϯυͱͯ͠࢖༻Ͱ͖Δɻ
    IUUQTFYUFSOBMTFDSFUTJPWJOUSPEVDUJPOTUBCJMJUZTVQQPSU
    FYUFSOBMTFDSFUTJP
    IUUQTFYUFSOBMTFDSFUTJP
    

    View Slide

37. &YUFSOBM4FDSFU0QFSBUPSΛ༻͍Δύλʔϯ
    ,VCFSOFUFT 7BVMU
    4FDSFUT
    64&3/".&VTFS
    1"44803%QBTTXPSE
    &YUFSOBM
    4FDSFU
    0QFSBUPS
    "11
    FYUFSOBMTFDSFUZBNM
    ػີ৘ใΛؚ·ͳ͍ ,FZͷΈ
    
    64&3/".&
    1"44803%
    4FDSFU4UPSF
    &YUFSOBM4FDSFU
    64&3/".&VTFS
    1"44803%QBTTXPSE
    ᶃ&YUFSOBM4FDSFUΛ࡞੒
    ᶄ7BVMU΁ͷΞΫηε৘ใΛऔಘ
    ᶅ7BVMU͔Βػີ৘ใΛऔಘ
    ᶆऔಘͨ͠ػີ৘ใ͔Β4FDSFUΛ࡞੒
    &YUFSOBM4FDSFU0QFSBUPSΛར༻͢Δ͜ͱͰɺػີ৘ใΛؚ·ͳ͍&YUFSOBM4FDSFUΛհͯ͠
    7BVMU্ͷػີ৘ใ͔Β4FDSFUΛ࡞੒͢Δ͜ͱ͕Ͱ͖·͢ɻ
    

    View Slide

38. &YUFSOBM4FDSFU0QFSBUPSΛ༻͍Δύλʔϯ
    ,VCFSOFUFTʹ)FMNΛ༻͍ͯ&YUFSOBM4FDSFU0QFSBUPSΛΠϯετʔϧ͠·͢ɻ
    ·ͨɺ&YUFSOBM4FDSFU0QFSBUPS͕7BVMUʹΞΫηε͢ΔͨΊͷ৘ใΛؚΉ4FDSFU4UPSFΛ
    ࡞੒͠·͢ɻ
    IFMNSFQPBEEFYUFSOBMTFDSFUTIUUQTDIBSUTFYUFSOBMTFDSFUTJP
    IFMNSFQPVQEBUF
    IFMNJOTUBMMFYUFSOBMTFDSFUTa
    FYUFSOBMTFDSFUTFYUFSOBMTFDSFUTa
    OFYUFSOBMTFDSFUTa
    DSFBUFOBNFTQBDF
    ˈLVCFDUMBQQMZGTFDSFUTUPSFWBVMULTZBNM
    

    View Slide

39. &YUFSOBM4FDSFU0QFSBUPSΛ༻͍Δύλʔϯ
    4FDSFU4UPSFͰ͸ҎԼͷΑ͏ʹ7BVMUͷΤϯυϙΠϯτ΍ػີ৘ใͷ֨ೲઌɺ
    ೝূʹ༻͍Δ4FSWJDF"DDPVOU΍3PMFΛఆ͍ٛͯ͠·͢ɻ
    BQJ7FSTJPOFYUFSOBMTFDSFUTJPWCFUB
    LJOE4FDSFU4UPSF
    NFUBEBUB
    OBNFWBVMUCBDLFOE
    OBNFTQBDFOPWJDFBQQ
    TQFD
    QSPWJEFS
    WBVMU
    TFSWFSIUUQWBVMUWBVMU7BVMUͷΤϯυϙΠϯτ
    QBUIOPWJDF7BVMU্ͷػີ৘ใ֨ೲઌ 4FDSFUT&OHJOFT໊
    
    WFSTJPOW
    BVUI
    LVCFSOFUFT
    NPVOU1BUILVCFSOFUFT7BVMU্ͷ"VUIFOUJDBUJPO.FUIPE໊
    SPMFOPWJDFBQQ7BVMU্Ͱͷ3PMF 7BVMU্Ͱࢀর͢Δ1BUI΁ͷΞΫηεݖΛ෇༩͓ͯ͘͠
    
    TFSWJDF"DDPVOU3FG
    OBNFOPWJDFWBVMUTBWBVMUͷೝূʹ༻͍Δ4FSWJDF"DDPVOU
    TFDSFUTUPSFWBVMULTZBNM
    

    View Slide

40. &YUFSOBM4FDSFU0QFSBUPSΛ༻͍Δύλʔϯ
    7BVMU͔Βػີ৘ใΛऔಘͯ͠4FDSFUΛ࡞੒͢ΔͨΊͷ&YUFSOBM4FDSFUΛ࡞੒ͯ͠Έ·͢ɻ
    BQJ7FSTJPOFYUFSOBMTFDSFUTJPWCFUB
    LJOE&YUFSOBM4FDSFU
    NFUBEBUB
    OBNFFYUFSOBMTFDSFUOPWJDFBQQ
    OBNFTQBDFOPWJDFBQQ
    TQFD
    SFGSFTI*OUFSWBMT
    TFDSFU4UPSF3FG
    OBNFWBVMUCBDLFOE࢖༻͢Δ4FDSFU4UPSF໊
    LJOE4FDSFU4UPSF
    UBSHFU
    OBNFOPWJDFBQQTFDSFUGSPNFYUFSOBMTFDSFU࡞੒͢ΔTFDSFU໊
    EBUB
    TFDSFU,FZVTFSOBNFTFDSFU಺ͰͷEBUB໊
    SFNPUF3FG
    LFZBQQDPO
    fi
    HWBVMU্Ͱͷύε
    QSPQFSUZ64&3/".&WBVMU্ͰͷLFZ
    TFDSFU,FZQBTTXPSETFDSFU಺ͰͷEBUB໊
    SFNPUF3FG
    LFZBQQDPO
    fi
    HWBVMU্Ͱͷύε
    QSPQFSUZ1"44803%WBVMU্ͰͷLFZ
    FYUFSOBMTFDSFUOPWJDFBQQZBNM
    ͜ͷ෦෼Ͱऔಘ͢Δػີ৘ใͷ,FZΛࢦఆ
    

    View Slide

41. &YUFSOBM4FDSFU0QFSBUPSΛ༻͍Δύλʔϯ
    ҎԼͷΑ͏ʹɺػີ৘ใΛؚ·ͳ͍&YUFSOBM4FDSFUΛ࡞੒͢Δ͜ͱͰ
    ػີ৘ใΛؚΉ4FDSFU͕ࣗಈ࡞੒͞ΕΔ͜ͱ͕෼͔Γ·͢ɻ
    ·ͨɺ7BVMUଆͰػີ৘ใͷߋ৽Λߦͳͬͨ৔߹Ͱ΋ͦͷ஋͕4FDSFUʹࣗಈ൓ө͞Ε·͢ɻ
    LVCFDUMBQQMZGFYUFSOBMTFDSFUOPWJDFBQQZBNM
    FYUFSOBMTFDSFUFYUFSOBMTFDSFUTJPFYUFSOBMTFDSFUOPWJDFBQQDSFBUFE
    LVCFDUMOOPWJDFBQQHFUTFDSFU
    /".&5:1&%"5""(&
    OPWJDFBQQTFDSFUGSPNFYUFSOBMTFDSFU0QBRVFT
    LVCFDUMOOPWJDFBQQHFUTFDSFUOPWJDFBQQTFDSFUGSPNFYUFSOBMTFDSFUPKTPOQBUI\EBUB^
    \QBTTXPSED('[DEWDN2Y.K./2 VTFSOBNFE9/MDK&Z.[2^
    FDIPE9/MDK&Z.[2cCBTFE
    VTFS
    FDIPD('[DEWDN2Y.K./2cCBTFE
    QBTTXPSE
    &YUFSOBM4FDSFUΛ࡞੒
    ػີ৘ใΛؚΉ4FDSFU͕ࣗಈ࡞੒͞Εͨ
    

    View Slide

42. "HFOEB
    4FDSFU؅ཧ
    7BVMU
    7BVMUͷΠϯετʔϧ
    7BVMU΁ͷػີ৘ใ֨ೲ
    7BVMUΛ༻͍ͨ,VCFSOFUFTͷ4FDSFU؅ཧ
    &YUFSOBM4FDSFU0QFSBUPSΛ༻͍Δύλʔϯ
    7BVMU"HFOUΛ༻͍Δύλʔϯ
    4FDSFUT4UPSF$4*%SJWFSΛ༻͍Δύλʔϯ
    ·ͱΊ
    
    

    View Slide

43. 7BVMU"HFOUΛ༻͍Δύλʔϯ
    Ҿ༻
    7BVMUʹ֨ೲͨ͠γʔΫϨοτΛ,VCFSOFUFT͔Β׆༻͢Δํ๏ !KBDPQFO
    
    IUUQTTQFBLFSEFDLDPNKBDPQFOWBVMUOJHFOBTJUBTJLVSFUVUPXPLVCFSOFUFTLBSBIVPZPOHTVSVGBOHGB TMJEF
    *OKFDUJOH4FDSFUTJOUP,VCFSOFUFT1PETWJB7BVMU"HFOU$POUBJOFST
    IUUQTEFWFMPQFSIBTIJDPSQDPNWBVMUUVUPSJBMTLVCFSOFUFTLVCFSOFUFTTJEFDBS
    

    View Slide

44. 7BVMU"HFOUΛ༻͍Δύλʔϯ
    7BVMU"HFOU*OKFDUPSͱݺ͹ΕΔػೳʹΑΓɺ1PE࡞੒࣌ʹ7BVMU"HFOU͕*OJU$POUBJOFS͓Αͼ
    4JEFDBS$POUBJOFSͱͯ͠ૠೖ͞Εɺػີ৘ใ͕ϑΝΠϧͱͯ͠ڞ༗ϘϦϡʔϜʹ࡞੒͞Ε·͢ɻ
    ,VCFSOFUFT 7BVMU
    4FDSFUT
    64&3/".&VTFS
    1"44803%QBTTXPSE
    "11 ᶄ7BVMU͔Βػີ৘ใΛऔಘ
    *OJU
    64&3/".&VTFS
    1"44803%QBTTXPSE
    FNQUZ%JS .FNPSZ
    
    WBVMUBHFOUJOKFDUPS
    ᶃ1PEىಈ࣌ʹ*OJU$POUBJOFSͱ
    ɹ4JEFDBS$POUBJOFSΛૠೖ .VUBUJPO8FCIPPL
    
    ᶅڞ༗ϘϦϡʔϜʹػີ৘ใΛϑΝΠϧͱͯ֨͠ೲ
    4JEFDBS
    

    View Slide

45. 7BVMU"HFOUΛ༻͍Δύλʔϯ
    7BVMU্ͷػີ৘ใΛར༻͢Δ1PEΛ࡞੒͠·͢ɻ
    7BVMU"HFOUΛ༻͍ΔύλʔϯͰ͸NFUBEBUBBOOPUBUJPOT಺Ͱػີ৘ใऔಘʹؔ͢Δ
    ༷ʑͳ৘ใΛઃఆ͠·͢ɻ
    BQJ7FSTJPOW
    LJOE1PE
    NFUBEBUB
    OBNFOPWJDFBQQ
    OBNFTQBDFOPWJDFBQQ
    MBCFMT
    SVOOPWJDFBQQ
    BOOPUBUJPOT
    JOKFDUPSʹΑΔWBVMUBHFOUͷૠೖΛ༗ޮԽ
    WBVMUIBTIJDPSQDPNBHFOUJOKFDUUSVF
    
    JOJUDPOUBJOFSͷΈ TJEFDBS͸JOKFDU͠ͳ͍
    
    WBVMUIBTIJDPSQDPNBHFOUQSFQPQVMBUFPOMZUSVF
    ࢖༻͢ΔWBVMU্ͷSPMFΛࢦఆ
    WBVMUIBTIJDPSQDPNSPMFOPWJDFBQQ
    WBVMUTFDSFUT഑ԼʹBQQDPO
    fi
    HUYUͱ͍͏ϑΝΠϧ͕࡞੒͞ΕΔ
    WBVMUͷOPWJDFEBUBBQQDPO
    fi
    Hʹ͋Δ,7Λ࢖͏
    WBVMUIBTIJDPSQDPNBHFOUJOKFDUTFDSFUBQQDPO
    fi
    HUYUOPWJDFEBUBBQQDPO
    fi
    H
    OPWJDFBQQZBNM
    ࡞੒͢ΔϑΝΠϧͷϑΥʔϚοτΛࢦఆ
    WBVMUIBTIJDPSQDPNBHFOUJOKFDUUFNQMBUFBQQDPO
    fi
    HUYUc
    \\XJUITFDSFUOPWJDFEBUBBQQDPO
    fi
    H^^
    VTFSOBNF\\%BUBEBUB64&3/".&^^
    QBTTXPSE\\%BUBEBUB1"44803%^^
    \\FOE^^
    TQFD
    DPOUBJOFST
    JNBHFVCVOUV
    OBNFOPWJDFBQQ
    DPNNBOE<CJOTI D XIJMFEPTMFFQEPOF>
    TFSWJDF"DDPVOU/BNFOPWJDFWBVMUTBWBVMUͷೝূʹ࢖͏ͨΊͷ4FSWJDF"DDPVOU
    Annotations
    https://developer.hashicorp.com/vault/docs/platform/k8s/injector/annotations
    ͜ͷ෦෼Ͱऔಘ͢Δػີ৘ใͷ,FZΛࢦఆ
    

    View Slide

46. 7BVMU"HFOUΛ༻͍Δύλʔϯ
    ҎԼͷΑ͏ʹ࡞੒ͨ͠1PE಺ʹ7BVMU͔Βऔಘͨ͠ػີ৘ใΛؚΉϑΝΠϧ͕࡞੒͞Ε͍ͯΔ͜ͱ͕
    ෼͔Γ·͢ɻ
    ·ͨɺ7BVMUଆͰػີ৘ใͷߋ৽Λߦͳͬͨ৔߹Ͱ΋ͦͷ஋͕ࣗಈ൓ө͞Ε·͢ɻ
    ˞4JEFDBSΛ༗ޮԽ͍ͯ͠Δ৔߹ͷΈ
    LVCFDUMBQQMZGOPWJDFBQQZBNM
    QPEOPWJDFBQQDSFBUFE
    LVCFDUMOOPWJDFBQQFYFDJUOPWJDFBQQDOPWJDFBQQCJOCBTI
    SPPU!OPWJDFBQQDBUWBVMUTFDSFUTBQQDPO
    fi
    HUYU
    VTFSOBNFVTFS
    QBTTXPSEQBTTXPSE
    ͳ͓7BVMU"HFOUΛ༻͍ΔύλʔϯͰ͸ػີ৘ใ͕ϑΝΠϧͱͯ͠௚઀ग़ྗ͞ΕΔͨΊɺ
    ,VCFSOFUFT্ʹ4FDSFU͸࡞੒͞Ε·ͤΜɻ
    ػີ৘ใΛ؀ڥม਺ʹઃఆ͍ͨ͠౳ͷ৔߹͸޻෉͕ඞཁʹͳΓ·͢ɻ
    &OWJSPONFOU7BSJBCMF&YBNQMF
    IUUQTEFWFMPQFSIBTIJDPSQDPNWBVMUEPDTQMBUGPSNLTJOKFDUPSFYBNQMFTFOWJSPONFOUWBSJBCMFFYBNQMF
    1PEΛ࡞੒
    1PEʹػີ৘ใ͕౉͞Εͨ
    

    View Slide

47. "HFOEB
    4FDSFU؅ཧ
    7BVMU
    7BVMUͷΠϯετʔϧ
    7BVMU΁ͷػີ৘ใ֨ೲ
    7BVMUΛ༻͍ͨ,VCFSOFUFTͷ4FDSFU؅ཧ
    &YUFSOBM4FDSFU0QFSBUPSΛ༻͍Δύλʔϯ
    7BVMU"HFOUΛ༻͍Δύλʔϯ
    4FDSFUT4UPSF$4*%SJWFSΛ༻͍Δύλʔϯ
    ·ͱΊ
    
    

    View Slide

48. 4FDSFUT4UPSF$4*%SJWFSΛ༻͍Δύλʔϯ
    Ҿ༻
    7BVMUʹ֨ೲͨ͠γʔΫϨοτΛ,VCFSOFUFT͔Β׆༻͢Δํ๏ !KBDPQFO
    
    IUUQTTQFBLFSEFDLDPNKBDPQFOWBVMUOJHFOBTJUBTJLVSFUVUPXPLVCFSOFUFTLBSBIVPZPOHTVSVGBOHGB TMJEF
    .PVOU7BVMU4FDSFUTUISPVHI$POUBJOFS4UPSBHF*OUFSGBDF $4*
    7PMVNF
    IUUQTEFWFMPQFSIBTIJDPSQDPNWBVMUUVUPSJBMTLVCFSOFUFTLVCFSOFUFTTFDSFUTUPSFESJWFS
    

    View Slide

49. 4FDSFUT4UPSF$4*%SJWFSΛ༻͍Δύλʔϯ
    4FDSFU4UPSF$4*%SJWFS͕7BVMU$4*1SPWJEFSͱ࿈ܞͯ͠7BVMU͔Βػີ৘ใΛऔಘ͠ɺ
    ϘϦϡʔϜͱͯ͠1PEʹϚ΢ϯτ͠·͢ɻ
    ,VCFSOFUFT 7BVMU
    4FDSFUT
    64&3/".&VTFS
    1"44803%QBTTXPSE
    "11
    ᶃ7BVMU΁ͷΞΫηε৘ใͱ
    ɹػີ৘ใͷ,FZΛఆٛ
    7BVMU
    $4*1SPWJEFS
    4FDSFU1SPWJEFS$MBTT
    4FDSFU4UPSF
    $4*%SJWFS
    64&3/".&VTFS
    1"44803%QBTTXPSE
    4FDSFU7PMVNF UNQGT
    
    ᶄ1SPWJEFSΛհͯ͠7BVMU͔Βػີ৘ใΛऔಘ
    ᶅػີ৘ใΛ7PMVNFͱͯ͠Ϛ΢ϯτ
    64&3/".&
    1"44803%
    

    View Slide

50. 4FDSFUT4UPSF$4*%SJWFSΛ༻͍Δύλʔϯ
    ,VCFSOFUFTʹ)FMNΛ༻͍ͯ4FDSFU4UPSF$4*%SJWFSΛΠϯετʔϧ͠·͢ɻ
    ͳ͓ɺ7BVMU$4*1SPWJEFSʹ͍ͭͯ͸7BVMUΠϯετʔϧ࣌ʹ߹ΘͤͯΠϯετʔϧ͍ͯ͠ΔͨΊɺ
    վΊͯΠϯετʔϧ͸ෆཁͰ͢ɻ
    IFMNSFQPBEETFDSFUTTUPSFDTJESJWFSIUUQTLVCFSOFUFTTJHTHJUIVCJPTFDSFUTTUPSFDTJESJWFSDIBSUT
    IFMNSFQPVQEBUF
    IFMNJOTUBMMDTJTFDSFUTTUPSFDTJESJWFSTFDSFUTTUPSFDTJESJWFSa
    TFUTZOD4FDSFUFOBCMFEUSVFDSFBUFOBNFTQBDFOTFDSFUTTUPSFDTJESJWFS
    

    View Slide

51. 4FDSFUT4UPSF$4*%SJWFSΛ༻͍Δύλʔϯ
    4FDSFU1SPWJEFS$MBTTͱ1PEΛ࡞੒͠·͢ɻ
    BQJ7FSTJPOTFDSFUTTUPSFDTJYLTJPW
    LJOE4FDSFU1SPWJEFS$MBTT
    NFUBEBUB
    OBNFOPWJDFBQQTQD
    OBNFTQBDFOPWJDFBQQ
    TQFD
    QSPWJEFSWBVMU
    QBSBNFUFST
    WBVMU"EESFTTIUUQWBVMUWBVMUWBVMUͷΤϯυϙΠϯτΛࢦఆ
    SPMF/BNFOPWJDFBQQ࢖༻͢ΔWBVMU্ͷSPMFΛࢦఆ
    PCKFDUTc
    PCKFDU/BNFVTFSOBNFGSPNDTJϚ΢ϯτ࣌ͷϑΝΠϧ໊
    TFDSFU1BUIOPWJDFEBUBBQQDPO
    fi
    HWBVMU্ͷTFDSFU֨ೲઌ
    TFDSFU,FZ64&3/".&WBVMU্ͷLFZ
    PCKFDU/BNFQBTTXPSEGSPNDTJϚ΢ϯτ࣌ͷϑΝΠϧ໊
    TFDSFU1BUIOPWJDFEBUBBQQDPO
    fi
    HWBVMU্ͷTFDSFU֨ೲઌ
    TFDSFU,FZ1"44803%WBVMU্ͷLFZ
    BQJ7FSTJPOW
    LJOE1PE
    NFUBEBUB
    MBCFMT
    SVOOPWJDFBQQ
    OBNFOPWJDFBQQ
    OBNFTQBDFOPWJDFBQQ
    TQFD
    DPOUBJOFST
    JNBHFVCVOUV
    OBNFOPWJDFBQQ
    DPNNBOE<CJOTI D XIJMFEPTMFFQEPOF>
    WPMVNF.PVOUT
    OBNFOPWJDFBQQTFDSFUT
    NPVOU1BUINOUTFDSFUTTUPSF
    SFBE0OMZUSVF
    WPMVNFT
    OBNFOPWJDFBQQTFDSFUT
    DTJ
    ESJWFSTFDSFUTTUPSFDTJLTJPDTJESJWFSͱͯ͠TFDSFUTTUPSFDTJESJWFSΛࢦఆ
    SFBE0OMZUSVF
    WPMVNF"UUSJCVUFT
    TFDSFU1SPWJEFS$MBTTOPWJDFBQQTQD4FDSFU1SPWJEFS$MBTTΛࢦఆ
    TFSWJDF"DDPVOU/BNFOPWJDFWBVMUTBWBVMUͷೝূʹ࢖͏ͨΊͷ4FSWJDF"DDPVOU
    OPWJDFBQQZBNM
    OPWJDFBQQTQDZBNM
    

    View Slide

52. 4FDSFUT4UPSF$4*%SJWFSΛ༻͍Δύλʔϯ
    ҎԼͷΑ͏ʹ࡞੒ͨ͠1PEʹϚ΢ϯτͨ͠7PMVNF഑Լʹɺ
    7BVMU͔Βऔಘͨ͠ػີ৘ใΛؚΉϑΝΠϧ͕࡞੒͞Ε͍ͯΔ͜ͱ͕෼͔Γ·͢ɻ
    ͜ͷέʔεͰ͸7BVMUଆͰػີ৘ใͷߋ৽Λߦͳͬͨ৔߹ͦͷ஋͸ࣗಈ൓ө͞Ε·ͤΜɻ
    LVCFDUMBQQMZGOPWJDFBQQTQDZBNM
    TFDSFUQSPWJEFSDMBTTTFDSFUTTUPSFDTJYLTJPOPWJDFBQQTQDDSFBUFE
    LVCFDUMBQQMZGOPWJDFBQQZBNM
    QPEOPWJDFBQQDSFBUFE
    LVCFDUMOOPWJDFBQQFYFDJUOPWJDFBQQCJOCBTI
    SPPU!OPWJDFBQQMTNOUTFDSFUTTUPSF
    QBTTXPSEGSPNDTJVTFSOBNFGSPNDTJ
    SPPU!OPWJDFBQQDBUNOUTFDSFUTTUPSFVTFSOBNFGSPNDTJ
    VTFS
    SPPU!OPWJDFBQQDBUNOUTFDSFUTTUPSFQBTTXPSEGSPNDTJ
    QBTTXPSE
    4FDSFU1SPWJEFS$MBTTΛ࡞੒
    1PEʹػີ৘ใ͕౉͞Εͨ
    1PEΛ࡞੒
    ˞ݱࡏͰ͸ࣗಈ൓ө͸4FDSFUT4UPSF$4*%SJWFSͱͯ͠BMQIBͷҐஔ෇͚ͰσϑΥϧτແޮɻ
    ɹ༗ޮԽͯ͠΋7BVMUͰ࢖͑Δͷ͔͸ෆ໌ɻ
    ɹ"VUPSPUBUJPOPGNPVOUFEDPOUFOUTBOETZODFE,VCFSOFUFT4FDSFUT
    

    ɹIUUQTTFDSFUTTUPSFDTJESJWFSTJHTLTJPUPQJDTTFDSFUBVUPSPUBUJPOIUNM
    

    View Slide

53. 4FDSFUT4UPSF$4*%SJWFSΛ༻͍Δύλʔϯ
    ·ͨҎԼͷΑ͏ͳܗͰ4FDSFU1SPWJEFS$MBTTΛఆٛ͢Δ͜ͱͰ,VCFSOFUFT্ʹ
    4FDSFUΛ࡞੒͢Δ͜ͱ΋ՄೳͰ͢ɻ
    BQJ7FSTJPOTFDSFUTTUPSFDTJYLTJPW
    LJOE4FDSFU1SPWJEFS$MBTT
    NFUBEBUB
    OBNFOPWJDFBQQTQD
    OBNFTQBDFOPWJDFBQQ
    TQFD
    QSPWJEFSWBVMU
    QBSBNFUFST
    WBVMU"EESFTTIUUQWBVMUWBVMUWBVMUͷΤϯυϙΠϯτΛࢦఆ
    SPMF/BNFOPWJDFBQQ࢖༻͢ΔWBVMU্ͷSPMFΛࢦఆ
    PCKFDUTc
    PCKFDU/BNFVTFSOBNFGSPNDTJϚ΢ϯτ࣌ͷϑΝΠϧ໊
    TFDSFU1BUIOPWJDFEBUBBQQDPO
    fi
    HWBVMU্ͷTFDSFU֨ೲઌ
    TFDSFU,FZ64&3WBVMU্ͷLFZ
    PCKFDU/BNFQBTTXPSEGSPNDTJϚ΢ϯτ࣌ͷϑΝΠϧ໊
    TFDSFU1BUIOPWJDFEBUBBQQDPO
    fi
    HWBVMU্ͷTFDSFU֨ೲઌ
    TFDSFU,FZ1"44803%WBVMU্ͷLFZ
    TFDSFU0CKFDUTTFDSFUΛ࡞Δ
    TFDSFU/BNFOPWJDFBQQTFDSFUGSPNDTJ࡞੒͢Δ4FDSFU໊
    UZQF0QBRVF
    EBUB
    PCKFDU/BNFVTFSOBNFGSPNDTJ
    LFZVTFSOBNF
    PCKFDU/BNFQBTTXPSEGSPNDTJ
    LFZQBTTXPSE
    ͜ͷఆٛʹΑΓ4FDSFU͕࡞੒͞ΕΔ
    OPWJDFBQQTQDZBNM
    4ZODBT,VCFSOFUFT4FDSFU
    IUUQTTFDSFUTTUPSFDTJESJWFSTJHTLTJPUPQJDTTZODBTLVCFSOFUFTTFDSFUIUNM
    

    View Slide

54. 4FDSFUT4UPSF$4*%SJWFSΛ༻͍Δύλʔϯ
    ·ͨҎԼͷΑ͏ͳܗͰ4FDSFU1SPWJEFS$MBTTΛఆٛ͢Δ͜ͱͰ,VCFSOFUFT্ʹ
    4FDSFUΛ࡞੒͢Δ͜ͱ΋ՄೳͰ͢ɻ
    LVCFDUMOOPWJDFBQQHFUTFDSFU
    /".&5:1&%"5""(&
    OPWJDFBQQTFDSFUGSPNFYUFSOBMTFDSFU0QBRVFI
    LVCFDUMOOPWJDFBQQHFUTFDSFUOPWJDFBQQTFDSFUGSPNFYUFSOBMTFDSFUPKTPOQBUI\EBUB^
    \QBTTXPSED('[DEWDN2Y.K./2 VTFSOBNFE9/MDK&Z.[2^
    FDIPE9/MDK&Z.[2cCBTFE
    VTFS
    FDIPD('[DEWDN2Y.K./2cCBTFE
    QBTTXPSE
    4FDSFU͕࡞੒͞Εͨ
    

    View Slide

55. "HFOEB
    4FDSFU؅ཧ
    7BVMU
    7BVMUͷΠϯετʔϧ
    7BVMU΁ͷػີ৘ใ֨ೲ
    7BVMUΛ༻͍ͨ,VCFSOFUFTͷ4FDSFU؅ཧ
    &YUFSOBM4FDSFU0QFSBUPSΛ༻͍Δύλʔϯ
    7BVMU"HFOUΛ༻͍Δύλʔϯ
    4FDSFUT4UPSF$4*%SJWFSΛ༻͍Δύλʔϯ
    ·ͱΊ
    
    

    View Slide

56. ·ͱΊ
    7BVMUΛ༻͍ͨ,VCFSOFUFTͷ4FDSFU؅ཧʹ͍ͭͯ͝঺հ͠·ͨ͠
    ɹ&YUFSOBM4FDSFU0QFSBUPS
    ɹ7BVMU"HFOU *OJU4JEFDBS$POUBJOFS
    
    ɹ4FDSFUT4UPSF$4*%SJWFS
    ެࣜϒϩάͰ֤ख๏ͷൺֱ΋ߦΘΕ͍ͯΔͷͰࢀߟʹͯ͠Έ͍ͯͩ͘͞
    ɹ,VCFSOFUFT7BVMUJOUFHSBUJPOWJB4JEFDBS"HFOU*OKFDUPSWT7BVMU4FDSFUT0QFSBUPSWT$4*QSPWJEFS
    IUUQTXXXIBTIJDPSQDPNCMPHLVCFSOFUFTWBVMUJOUFHSBUJPOWJBTJEFDBSBHFOUJOKFDUPSWTDTJQSPWJEFS
    

    View Slide

57. 5IBOL:PV
    

    View Slide