Upgrade to Pro — share decks privately, control downloads, hide ads and more …

KubernetesのSecret管理~Vaultへの超入門~/Vault on Kubernetes

KubernetesのSecret管理~Vaultへの超入門~/Vault on Kubernetes

2023/04/17 Kubernetes Novice Tokyo #24
KubernetesのSecret管理~Vaultへの超入門~

セッション動画
https://k8s-novice-jp.connpass.com/event/278196/
https://www.youtube.com/watch?v=yDwB42kn9gw&t=2352s

mochizuki875

April 17, 2023
Tweet

More Decks by mochizuki875

Other Decks in Technology

Transcript


  1. !NPDIJ[VLJ
    ,VCFSOFUFTͷ4FDSFU؅ཧ
    d7BVMU΁ͷ௒ೖ໳d
    ,VCFSOFUFT/PWJDF5PLZP

    View full-size slide

  2. ,FJUB.PDIJ[VLJ
    XIPBNJ
    !NPDIJ[VLJ
    🌕8BOUUPCFB1SPGFTTJPOBM*5&OHJOFFS
    ❤,VCFSOFUFT
    🚨"GPY OPUBSBDDPPOEPH

    View full-size slide

  3. ͸͡Ίʹ
    ۙ೥ɺγʔΫϨοτ৘ใͷ؅ཧ͕ͱͯ΋ॏཁʹͳ͍ͬͯΔதͰɺ
    ͲͷΑ͏ʹ؅ཧ͢Δͷ͕ྑ͍ͷ͔೰Ή͜ͱ͕ଟ͍͔ͱࢥ͍·͢ɻ
    ద੾ͳ؅ཧΛ͠ͳ͚Ε͹ɺγʔΫϨοτ৘ใ͸༷ʑͳՕॴʹ෼ࢄͯ͠ஔ͔Εͯ͠·͍ɺ
    ख͕෇͚ΒΕͳ͍ঢ়ଶʹͳͬͯ͠·͍·͢ɻ
    ͦ͜Ͱࠓճ͸ɺγʔΫϨοτ৘ใΛҰݩతʹ؅ཧͰ͖ɺ
    ,VCFSOFUFTͷϦιʔεͱ༰қʹ࿈ܞͤ͞Δ͜ͱ͕Ͱ͖Δ)BTIJDPSQ7BVMUͱ͍͏
    πʔϧΛ঺հ͍͖ͤͯͨͩ͞·͢ɻ
    ຊ-5Ͱ͸ɺ7BVMUͷΠϯετʔϧ͔Βɺ༷ʑͳγʔΫϨοτ৘ใͷऔಘํ๏ʹؔͯ͠ͷ
    ͓࿩Λͤͯ͞௖͖·͢ɻ

    View full-size slide

  4. ͸͡Ίʹ
    ۙ೥ɺγʔΫϨοτ৘ใͷ؅ཧ͕ͱͯ΋ॏཁʹͳ͍ͬͯΔதͰɺ
    ͲͷΑ͏ʹ؅ཧ͢Δͷ͕ྑ͍ͷ͔೰Ή͜ͱ͕ଟ͍͔ͱࢥ͍·͢ɻ
    ద੾ͳ؅ཧΛ͠ͳ͚Ε͹ɺγʔΫϨοτ৘ใ͸༷ʑͳՕॴʹ෼ࢄͯ͠ஔ͔Εͯ͠·͍ɺ
    ख͕෇͚ΒΕͳ͍ঢ়ଶʹͳͬͯ͠·͍·͢ɻ
    ͦ͜Ͱࠓճ͸ɺγʔΫϨοτ৘ใΛҰݩతʹ؅ཧͰ͖ɺ
    ,VCFSOFUFTͷϦιʔεͱ༻ҙʹ࿈ܞͤ͞Δ͜ͱ͕Ͱ͖Δ)BTIJDPSQ7BVMUͱ͍͏
    πʔϧΛ঺հ͍͖ͤͯͨͩ͞·͢ɻ
    ຊ-5Ͱ͸ɺ7BVMUͷΠϯετʔϧ͔Βɺ༷ʑͳγʔΫϨοτ৘ใͷऔಘํ๏ʹؔͯ͠ͷ
    ͓࿩Λͤͯ͞௖͖·͢ɻ
    ཁ͸7BVMUͰ,VCFSOFUFTͷ4FDSFU؅ཧ
    ΍ͬͯΈͨͥͱ͍͏͓࿩Ͱ͢

    View full-size slide

  5. ͸͡Ίʹ
    ɾܝࡌ಺༰͸ݸਓͷݟղͰ͋Γɺॴଐ͢Δاۀ΍૊৫ͷཱ৔ɺઓུɺҙݟΛ୅ද͢Δ΋ͷͰ͸͋Γ·ͤΜ
    ɾهࡌ͞Ε͍ͯΔձ໊ࣾɺ঎඼໊ɺ·ͨ͸αʔϏε໊͸ɺ֤ࣾͷ঎ඪొ࿥·ͨ͸঎ඪͰ͢

    View full-size slide

  6. "HFOEB
    4FDSFU؅ཧ
    7BVMU
    7BVMUͷΠϯετʔϧ
    7BVMU΁ͷػີ৘ใ֨ೲ
    7BVMUΛ༻͍ͨ,VCFSOFUFTͷ4FDSFU؅ཧ
    &YUFSOBM4FDSFU0QFSBUPSΛ༻͍Δύλʔϯ
    7BVMU"HFOUΛ༻͍Δύλʔϯ
    4FDSFUT4UPSF$4*%SJWFSΛ༻͍Δύλʔϯ
    ·ͱΊ

    View full-size slide

  7. "HFOEB
    4FDSFU؅ཧ
    7BVMU
    7BVMUͷΠϯετʔϧ
    7BVMU΁ͷػີ৘ใ֨ೲ
    7BVMUΛ༻͍ͨ,VCFSOFUFTͷ4FDSFU؅ཧ
    &YUFSOBM4FDSFU0QFSBUPSΛ༻͍Δύλʔϯ
    7BVMU"HFOUΛ༻͍Δύλʔϯ
    4FDSFUT4UPSF$4*%SJWFSΛ༻͍Δύλʔϯ
    ·ͱΊ

    View full-size slide

  8. 4FDSFU؅ཧ
    ,VCFSOFUFTͰػີ৘ใΛѻ͏γʔϯʹ͓͍ͯɺ
    ,VCFSOFUFTͰ͸4FDSFUϦιʔεΛ༻͍ͯ1PEʹػີ৘ใΛ౉͢͜ͱ͕Ͱ͖·͢ɻ
    BQJ7FSTJPOW
    LJOE1PE

    TQFD

    FOW4FDSFUͷ஋Λ؀ڥม਺ʹઃఆ
    OBNF64&3/"/&؀ڥม਺໊
    WBMVF'SPN
    TFDSFU,FZ3FG
    OBNFOPWJDFBQQTFDSFU4FDSFU໊
    LFZVTFSOBNF
    OBNF1"44803%؀ڥม਺໊
    WBMVF'SPN
    TFDSFU,FZ3FG
    OBNFOPWJDFBQQTFDSFU4FDSFU໊
    LFZQBTTXPSE
    WPMVNF.PVOUT4FDSFUΛ7PMVNFͱͯ͠.PVOU
    OBNFDPO
    fi
    H
    NPVOU1BUINOUDPO
    fi
    H
    SFBE0OMZUSVF
    WPMVNFT
    OBNFDPO
    fi
    H
    TFDSFU
    TFDSFU/BNFOPWJDFBQQTFDSFU
    OPWJDFBQQZBNM
    OPWJDFBQQTFDSFU
    OPWJDFBQQ

    View full-size slide

  9. 4FDSFU؅ཧ
    BQJ7FSTJPOW
    LJOE4FDSFU
    NFUBEBUB
    OBNFOPWJDFBQQTFDSFU
    OBNFTQBDFOPWJDFBQQ
    UZQF0QBRVF
    EBUB
    QBTTXPSE6&'56E16L2Y.K./2
    VTFSOBNF77/'6K&Z.[2
    Ұൠతʹ4FDSFUϦιʔε͸ҎԼͷΑ͏ͳϚχϑΣετϑΝΠϧ͔Β࡞੒ՄೳͰ͢ɻ
    ͔͠͠ͳ͕Β͜ΕͩͱϑΝΠϧͦͷ΋ͷʹ୭Ͱ΋σίʔυՄೳͳػີ৘ใΛهࡌ͢Δ͜ͱʹͳΓɺ
    ϚχϑΣετϑΝΠϧͷ؅ཧํ๏͕՝୊ͱͳΓ·͢ɻ
    OPWJDFBQQTFDSFUZBNM
    FDIPE9/MDK&Z.[2cCBTFE
    VTFS
    FDIPD('[DEWDN2Y.K./2cCBTFE
    QBTTXPSE
    ͜ͷ஋͑͞஌͍ͬͯΕ͹୭Ͱ΋σίʔυՄೳ
    OPWJDFBQQTFDSFU
    OPWJDFBQQ
    TFDSFUZBNM
    ίϨΛͲ͏؅ཧ͢Δ͔
    64&3/".&VTFS
    1"44803%QBTTXPSE
    #BTFͰΤϯίʔυ͍ͯ͠Δ͚ͩ

    View full-size slide

  10. 4FDSFU؅ཧ
    ͜Εʹର͠ύοͱࢥ͍ͭ͘ϚχϑΣετϑΝΠϧͷ؅ཧํ๏͸ྫ͑͹
    ҎԼͷΑ͏ͳ΋ͷ͕ڍ͛ΒΕ·͢ɻ
    ϚχϑΣετϑΝΠϧࣗମͷ؅ཧΛؾΛ෇͚Δ
    ɹɾಛఆͷਓ͚͕ͩ4FDSFUϚχϑΣετϑΝΠϧΛ؅ཧ͢Δ
    ɹɾ1SJWBUFͳ(JU)VCϦϙδτϦͰϚχϑΣετϑΝΠϧΛ؅ཧ͢Δ
    ϚχϑΣετϑΝΠϧʹؚ·ΕΔػີ৘ใΛผ్ൿີ伴ͰΤϯίʔυ͢Δ
    ɹɾ1PE಺ͷൿີ伴Ͱσίʔυ
    ɹɾ4FDSFU࡞੒࣌ʹσίʔυ FYTFBMFETFDSFU

    ਓతϛεͷϦεΫɺػີ৘ใͷѻ͍ਏ͞ɺػີ৘ใࣗମϑΝΠϧͰѻ͍ͨ͘ͳ͍FUD

    View full-size slide

  11. 4FDSFU؅ཧ
    ΑΓηΩϡΞʹػີ৘ใΛѻ͏खஈͱͯ͠ɺػີ৘ใͦͷ΋ͷΛϚχϑΣετϑΝΠϧͰ͸ͳ͘
    ,.4 ,FZ.BOBHFNFOU4ZTUFN
    Ͱ؅ཧ͢Δͱ͍͏खஈ͕ߟ͑ΒΕ·͢ɻ
    ࠓճ͸,.4ͱͯ͠7BVMUΛ࢖༻͠ɺ,VCFSOFUFT্Ͱػີ৘ใΛѻ͏ྫΛ͝঺հ͠·͢ɻ
    OPWJDFBQQ
    ,.4
    ,FZ.BOBHFNFOU4ZTUFN

    64&3/".&VTFS
    1"44803%QBTTXPSE
    ػີ৘ใઐ༻ͷ৔ॴͰ؅ཧ

    View full-size slide

  12. "HFOEB
    4FDSFU؅ཧ
    7BVMU
    7BVMUͷΠϯετʔϧ
    7BVMU΁ͷػີ৘ใ֨ೲ
    7BVMUΛ༻͍ͨ,VCFSOFUFTͷ4FDSFU؅ཧ
    &YUFSOBM4FDSFU0QFSBUPSΛ༻͍Δύλʔϯ
    7BVMU"HFOUΛ༻͍Δύλʔϯ
    4FDSFUT4UPSF$4*%SJWFSΛ༻͍Δύλʔϯ
    ·ͱΊ

    View full-size slide

  13. 7BVMU
    8IBUJT7BVMU IUUQTEFWFMPQFSIBTIJDPSQDPNWBVMU

    4FDVSF TUPSF BOEUJHIUMZDPOUSPMBDDFTTUPUPLFOT QBTTXPSET DFSUJ
    fi
    DBUFT FODSZQUJPOLFZTGPSQSPUFDUJOHTFDSFUT
    BOEPUIFSTFOTJUJWFEBUBVTJOHB6* $-* PS)551"1*
    <ҙ༁>
    ྑ͍ײ͡ʹػີ৘ใΛ؅ཧͯ͠ѻ͑Δ

    View full-size slide

  14. 7BVMU
    !KBDPQFO͞Μͷࢿྉ
    7BVMUʹ֨ೲͨ͠γʔΫϨοτΛ,VCFSOFUFT͔Β׆༻͢Δํ๏
    IUUQTTQFBLFSEFDLDPNKBDPQFOWBVMUOJHFOBTJUBTJLVSFUVUPXPLVCFSOFUFTLBSBIVPZPOHTVSVGBOHGB
    LTͱ7BVMUΛ૊Έ߹ΘͤͯγʔΫϨοτΛ΋ͬͱηΩϡΞʹ
    IUUQTTQFBLFSEFDLDPNKBDPQFOLTUPWBVMUXP[VNJIFXBTFUFTJLVSFUVUPXPNPUVUPTFLJZVBOJ
    ࢀߟ

    View full-size slide

  15. "HFOEB
    4FDSFU؅ཧ
    7BVMU
    7BVMUͷΠϯετʔϧ
    7BVMU΁ͷػີ৘ใ֨ೲ
    7BVMUΛ༻͍ͨ,VCFSOFUFTͷ4FDSFU؅ཧ
    &YUFSOBM4FDSFU0QFSBUPSΛ༻͍Δύλʔϯ
    7BVMU"HFOUΛ༻͍Δύλʔϯ
    4FDSFUT4UPSF$4*%SJWFSΛ༻͍Δύλʔϯ
    ·ͱΊ

    View full-size slide

  16. 7BVMUͷΠϯετʔϧ
    ,VCFSOFUFT΁ͷ7BVMUͷΠϯετʔϧ͸)FMNΛ༻͍Δ͜ͱͰ؆୯ʹߦ͑·͢ɻ
    IFMNSFQPBEEIBTIJDPSQIUUQTIFMNSFMFBTFTIBTIJDPSQDPN
    IFMNSFQPVQEBUF
    IFMNJOTUBMMWBVMUIBTIJDPSQWBVMUOBNFTQBDFWBVMUDSFBUFOBNFTQBDFGWBMVFTZBNM
    Install vault
    https://developer.hashicorp.com/vault/tutorials/kubernetes/kubernetes-raft-deployment-guide#install-vault

    View full-size slide

  17. 7BVMUͷΠϯετʔϧ
    ࠓճ͸ݕূ޲͚ʹҎԼͷΑ͏ͳઃఆΛ༻͍·ͨ͠ɻ
    %FW4FSWFS EFWFOBCMFEUSVF
    ͱ͍͏ݕূ༻ͷ01΋༻ҙ͞Ε͍ͯΔͨΊ
    ͦͪΒΛ༻͍ͯ΋ྑ͍͔΋͠Ε·ͤΜɻ˞ະݕূ
    TFSWFS
    JOHSFTTJOHSFTTઃఆ
    FOBCMFEUSVF
    JOHSFTT$MBTT/BNFOHJOY
    IPTUT
    IPTUWBVMUFYBNQMFDPN
    QBUIT<>
    EBUB4UPSBHF
    FOBCMFEGBMTF17$࡞੒ͷແޮԽ ݕূ༻

    VJ8FC6*Λ༗ޮԽ
    FOBCMFEUSVF
    DTJTFDSFUTTUPSFDTJESJWFSQSPWJEFSWBVMUΛΠϯετʔϧ
    FOBCMFEUSVF
    WBMVFTZBNM
    Con
    fi
    gure Vault Helm Chart
    https://developer.hashicorp.com/vault/tutorials/kubernetes/kubernetes-raft-deployment-guide#con
    fi
    gure-vault-helm-chart
    "Dev" Server Mode
    https://developer.hashicorp.com/vault/docs/concepts/dev-server

    View full-size slide

  18. 7BVMUͷΠϯετʔϧ
    Πϯετʔϧ׬ྃޙ͸7BVMU͸4FBMFEͱݺ͹ΕΔঢ়ଶ࣌ͳ͓ͬͯΓɺ
    جຊతʹ7BVMUͷػೳΛར༻ग़དྷͳ͍ 7BVMUʹอଘ͞Ε͍ͯΔσʔλʹΞΫηεͰ͖ͳ͍
    ঢ়ଶʹ
    ͳ͍ͬͯ·͢ɻ
    LVCFDUMOWBVMUHFUQP
    /".&3&"%:45"5643&45"354"(&
    WBVMU3VOOJOHT
    WBVMUBHFOUJOKFDUPSECCDGI[3VOOJOHT
    WBVMUDTJQSPWJEFSI[[3VOOJOHT
    WBVMUDTJQSPWJEFSTTMO3VOOJOHT
    WBVMUDTJQSPWJEFSWKI3VOOJOHT
    Seal/Unseal
    https://developer.hashicorp.com/vault/docs/concepts/seal

    View full-size slide

  19. 7BVMUͷΠϯετʔϧ
    7BVMU1PEʹFYFD͠ॳظԽίϚϯυΛ࣮ߦ͢Δ͜ͱͰҎԼͷΑ͏ʹ6OTFBM,FZͱ3PPU5PLFO
    ͕෷͍ग़͞Ε·͢ɻ
    ˞ࠓճ͸σϞ༻ʹ֤஋Λެ։͍ͯ͠·͕͢ɺ࣮ࡍ͸͜ΕΒͷ஋͸ػີ৘ใʹ֘౰͢ΔͨΊެ։͠ͳ͍Α͏ʹ͍ͯͩ͘͠͞ɻ
    LVCFDUMFYFDTUEJOUSVFUUZUSVFWBVMUOWBVMUWBVMUPQFSBUPSJOJU
    6OTFBM,FZH%(8+46T*04NR(#"VUW/8"W5,8L[0JBX(
    6OTFBM,FZ)250SVCINCBQ$:L,QJXYKVY*13HV:4P0Y3706
    6OTFBM,FZ;KM6$U9"LW"'V16UKY89I[B[#H1L0GRS/R&-H["
    6OTFBM,FZL2HDE3RPE&DIDP"LY&3IZ1FRK#D1N5U+G$39
    6OTFBM,FZ1UHM($K:P[/B87IIJ;#$41E#Z;0U3PZ/B%08R$
    *OJUJBM3PPU5PLFOIWT54BY3[/NG(0.01)CPH27P
    7BVMUJOJUJBMJ[FEXJUILFZTIBSFTBOEBLFZUISFTIPMEPG1MFBTFTFDVSFMZ
    EJTUSJCVUFUIFLFZTIBSFTQSJOUFEBCPWF8IFOUIF7BVMUJTSFTFBMFE
    SFTUBSUFE PSTUPQQFE ZPVNVTUTVQQMZBUMFBTUPGUIFTFLFZTUPVOTFBMJU
    CFGPSFJUDBOTUBSUTFSWJDJOHSFRVFTUT
    7BVMUEPFTOPUTUPSFUIFHFOFSBUFESPPULFZ8JUIPVUBUMFBTULFZTUP
    SFDPOTUSVDUUIFSPPULFZ 7BVMUXJMMSFNBJOQFSNBOFOUMZTFBMFE
    *UJTQPTTJCMFUPHFOFSBUFOFXVOTFBMLFZT QSPWJEFEZPVIBWFBRVPSVNPG
    FYJTUJOHVOTFBMLFZTTIBSFT4FFWBVMUPQFSBUPSSFLFZGPSNPSFJOGPSNBUJPO
    6OTFBM,FZ
    3PPU5PLFO

    View full-size slide

  20. 7BVMUͷΠϯετʔϧ
    ॳظԽ࣌ʹൃߦ͞Εͨ6OTFBM,FZΛ༻͍Δ͜ͱͰɺ7BVMUΛ6OTFBMFEঢ়ଶʹͯ͠
    7BVMUΛ࢖༻Ͱ͖ΔΑ͏ʹ͠·͢ɻ
    ˞ҎԼͰ͸8FC6*ͷྫΛ͍ࣔͯ͠·͕͢ɺ$-*Ͱ΋ಉ༷ͷૢ࡞͕ՄೳͰ͢
    4FBMFEঢ়ଶ
    ͜͜ʹ6OTFBM,FZΛೖྗ
    ˞σϑΥϧτճ

    View full-size slide

  21. 7BVMUͷΠϯετʔϧ
    6OTFBM͕׬ྃ͢Δͱ4UBUVT͕6OTFBMFEʹมΘΓɺॳظԽ࣌ʹ෷͍ग़͞Εͨ3PPU5PLFOΛ༻͍ͯ
    ϩάΠϯͰ͖ΔΑ͏ʹͳΓ·͢ɻ
    ˞3PPU5PLFO͸ॴҦ#VJME*Oͷ"ENJOJTUSBUPSݖݶʹ֘౰͢ΔͨΊɺॳظηοτΞοϓ͕ऴΘͬͨΒແޮԽ͢Δ͜ͱ͕ਪ঑͞Ε·͢ɻ
    6OTFBMFEঢ়ଶ
    3PPU5PLFOͰϩάΠϯ
    Root Tokens
    https://developer.hashicorp.com/vault/docs/concepts/tokens#root-tokens

    View full-size slide

  22. 7BVMUͷΠϯετʔϧ
    ࢀߟ
    7BVMU͕σʔλʹΞΫηε͢ΔͨΊʹ͸SPPULFZΛσίʔυͰ͖Δඞཁ͕͋Δɻ
    SPPULFZ͸6OTFBM,FZͰσίʔυͰ͖ΔͨΊɺ6OTFBM,FZΛ7BVMUʹ౉ͯ͠σʔλʹΞΫηεͰ͖Δ
    Α͏ʹ͢Δ࡞ۀ͕6OTFBMʹ֘౰͢Δɻ
    ·ͨɺ6OTFBM,FZ͸4IBNJST4FDSFU4IBSJOHͱ͍͏࢓૊ΈΛ༻͍ͯ෼ࢄ؅ཧ͞ΕΔɻ
    Seal/Unseal
    https://developer.hashicorp.com/vault/docs/concepts/seal
    7BVMUͷσʔλΛ
    σίʔυ͢ΔͨΊͷ伴
    ˠSPPULFZͰΤϯίʔυ͞Ε͍ͯΔ
    &ODSZQUJPO,FZΛ
    σίʔυ͢ΔͨΊͷ伴
    ˠ6OTFBM,FZͰΤϯίʔυ͞Ε͍ͯΔ
    SPPULFZΛσίʔυ͢ΔͨΊͷ伴

    View full-size slide

  23. "HFOEB
    4FDSFU؅ཧ
    7BVMU
    7BVMUͷΠϯετʔϧ
    7BVMU΁ͷػີ৘ใ֨ೲ
    7BVMUΛ༻͍ͨ,VCFSOFUFTͷ4FDSFU؅ཧ
    &YUFSOBM4FDSFU0QFSBUPSΛ༻͍Δύλʔϯ
    7BVMU"HFOUΛ༻͍Δύλʔϯ
    4FDSFUT4UPSF$4*%SJWFSΛ༻͍Δύλʔϯ
    ·ͱΊ

    View full-size slide

  24. 7BVMU΁ͷػີ৘ใ֨ೲ
    ͜͜Ͱ͸ྫͱͯ͠ɺ,FZ7BMVFܗࣜͰ7BVMUʹػີ৘ใΛ֨ೲͯ͠Έ·͢ɻ
    ,7λΠϓͰOPWJDFͱ͍͏
    ໊લͷ4FDSFUT&OHJOΛ࡞੒

    View full-size slide

  25. 7BVMU΁ͷػີ৘ใ֨ೲ
    ͜͜Ͱ͸ྫͱͯ͠ɺ,FZ7BMVFܗࣜͰ7BVMUʹػີ৘ใΛ֨ೲͯ͠Έ·͢ɻ
    ػີ৘ใΛ֨ೲ

    View full-size slide

  26. "HFOEB
    4FDSFU؅ཧ
    7BVMU
    7BVMUͷΠϯετʔϧ
    7BVMU΁ͷػີ৘ใ֨ೲ
    7BVMUΛ༻͍ͨ,VCFSOFUFTͷ4FDSFU؅ཧ
    &YUFSOBM4FDSFU0QFSBUPSΛ༻͍Δύλʔϯ
    7BVMU"HFOUΛ༻͍Δύλʔϯ
    4FDSFUT4UPSF$4*%SJWFSΛ༻͍Δύλʔϯ
    ·ͱΊ

    View full-size slide

  27. 7BVMUΛ༻͍ͨ,VCFSOFUFTͷ4FDSFU؅ཧ
    7BVMUͰ؅ཧ͞Ε͍ͯΔػີ৘ใʹ,VCFSNFUFT͔ΒΞΫηε͢ΔͨΊʹɺ
    ԿΒ͔ͷํ๏Ͱ7BVMUଆͰೝূೝՄΛߦ͏ඞཁ͕͋Γ·͢ɻ
    ɹೝূ7BVMUͰ͸,VCFSOFUFTͷ4FSWJDF"DDPVOUΛ༻͍ͯೝূΛߦ͏ํ๏͕ఏڙ͞Ε͍ͯΔ
    ɹೝՄ7BVMUͷ3PMFɺ1PMJDZͱ͍͏࢓૊ΈΛ༻͍ͯػີ৘ใ΁ͷΞΫηεΛ੍ޚ͢Δ
    Kubernetes Auth Method
    https://developer.hashicorp.com/vault/docs/auth/kubernetes
    ,VCFSOFUFT
    4FSWJDF"DDPVOU
    7BVMU
    3PMF 1PMJDZ
    4FDSFUT
    4FSWJDF"DDPVOUΛ࢖ͬͯ
    7BVMU্ͷػີ৘ใΛऔಘ
    64&3/".&VTFS
    1"44803%QBTTXPSE
    4FSWJDF"DDPVOUΛ࢖ͬͯ
    ͱඥ෇͚ͨ3PMFΛ༻͍ͯ
    ػີ৘ใʹΞΫηε
    ػີ৘ใ΁ͷΞΫηεݖΛઃఆ
    ˞7BVMU͸4FSWJDF"DDPVOUΛ࢖ͬͨϦΫΤετΛड͚ͨΒɺ
    ɹ,VCFSOFUFT"1*ʹϦΫΤετΛߦ͍
    ɹ5PLFOͷݕূΛߦ͏

    View full-size slide

  28. 7BVMUΛ༻͍ͨ,VCFSOFUFTͷ4FDSFU؅ཧ
    ,VCFSOFUFT্Ͱ4FSWJDF"DDPVOUΛ࡞੒͠·͢ɻ
    ࠓճ͸OPWJDFBQQͱ͍͏/BNFTQBDF͔Β7BVMUʹΞΫηε͢ΔͨΊͦͷ഑Լʹ4FSWJDF"DDPVOUΛ
    ࡞੒͍ͯ͠·͢ɻ
    ͳ͓ɺ4FSWJDF"DDPVOUʹରͯ͠,VCFSOFUFT্Ͱͷ3PMFͷόΠϯυ͸ෆཁͰ͢ɻ
    LVCFDUMDSFBUFTBOPWJDFWBVMUTBOOPWJDFBQQ
    TFSWJDFBDDPVOUOPWJDFWBVMUTBDSFBUFE

    View full-size slide

  29. 7BVMUΛ༻͍ͨ,VCFSOFUFTͷ4FDSFU؅ཧ
    7BVMU্Ͱ4FSWJDF"DDPVOUΛ༻͍ͨೝূΛߦ͏ͨΊͷ
    ,VCFSOFUFT"VUIFOUJDBUJPO.FUIPEΛ࡞੒͠·͢ɻ
    LVCFSOFUFTͱ͍͏
    "VUIFOUJDBUJPO.FUIPEΛ࡞੒

    View full-size slide

  30. 7BVMUΛ༻͍ͨ,VCFSOFUFTͷ4FDSFU؅ཧ
    ,VCFSOFUFT"1*4FSWFSΛࢦఆ
    "VUIFOUJDBUJPO.FUIPEΛ࡞੒͢Δʹ͋ͨͬͯ7BVMU͕4FSWJDF"DDPVOU5PLFOͷݕূΛߦ͏ͨΊʹɺ
    ,VCFSOFUFT"1*4FSWFSͷΤϯυϙΠϯτ৘ใΛઃఆ͠·͢ɻ

    View full-size slide

  31. 7BVMUΛ༻͍ͨ,VCFSOFUFTͷ4FDSFU؅ཧ
    7BVMU্Ͱ1PMJDZΛ࡞੒͠·͢ɻ
    ͜ͷ1PMJDZΛ3PMFʹׂΓ౰ͯΔ͜ͱͰɺ1PMJDZׂ͕Γ౰ͯΒΕͨ3PMFΛ࢖ͬͯॴఆͷػີ৘ใʹ
    ΞΫηεͰ͖ΔΑ͏ʹͳΓ·͢ɻ
    OPWJDFBQQQPMJDZͱ͍͏໊લͷ
    1PMJDZΛ࡞੒
    OPWJDFEBUBBQQDPO
    fi
    H΁ͷ
    ಡΈऔΓݖݶΛఆٛ

    View full-size slide

  32. 7BVMUΛ༻͍ͨ,VCFSOFUFTͷ4FDSFU؅ཧ
    7BVMU্Ͱ4FSWJDF"DDPVOUͱඥ෇͚ͨ3PMFΛ࡞੒͠ɺ1PMJDZΛׂΓ౰ͯ·͢ɻ
    OPWJDFBQQͱ͍͏໊લͷ3PMFΛ࡞੒
    ͜ͷ3PMFͱඥ෇͚Δ4FSWJDF"DDPVOUΛઃఆ
    OPWJDFBQQOPWJDFBQQTB

    ͜ͷ3PMFʹׂΓ౰ͯΔ1PMJDZΛઃఆ
    OPWJDFBQQQPMJDZ

    View full-size slide

  33. 7BVMUΛ༻͍ͨ,VCFSOFUFTͷ4FDSFU؅ཧ
    ͔͜͜Β͸7BVMUʹ֨ೲͨ͠ػີ৘ใΛ,VCFSOFUFT͔Βར༻͢Δํ๏ʹ͍ͭͯ͝঺հ͠·͢ɻ
    Ҿ༻
    7BVMUʹ֨ೲͨ͠γʔΫϨοτΛ,VCFSOFUFT͔Β׆༻͢Δํ๏ !KBDPQFO

    IUUQTTQFBLFSEFDLDPNKBDPQFOWBVMUOJHFOBTJUBTJLVSFUVUPXPLVCFSOFUFTLBSBIVPZPOHTVSVGBOHGB TMJEF

    View full-size slide

  34. "HFOEB
    4FDSFU؅ཧ
    7BVMU
    7BVMUͷΠϯετʔϧ
    7BVMU΁ͷػີ৘ใ֨ೲ
    7BVMUΛ༻͍ͨ,VCFSOFUFTͷ4FDSFU؅ཧ
    &YUFSOBM4FDSFU0QFSBUPSΛ༻͍Δύλʔϯ
    7BVMU"HFOUΛ༻͍Δύλʔϯ
    4FDSFUT4UPSF$4*%SJWFSΛ༻͍Δύλʔϯ
    ·ͱΊ

    View full-size slide

  35. &YUFSOBM4FDSFU0QFSBUPSΛ༻͍Δύλʔϯ
    Ҿ༻
    7BVMUʹ֨ೲͨ͠γʔΫϨοτΛ,VCFSOFUFT͔Β׆༻͢Δํ๏ !KBDPQFO

    IUUQTTQFBLFSEFDLDPNKBDPQFOWBVMUOJHFOBTJUBTJLVSFUVUPXPLVCFSOFUFTLBSBIVPZPOHTVSVGBOHGB TMJEF
    &YUFSOBM4FDSFU0QFSBUPS)BTIJ$PSQ7BVMU
    IUUQTFYUFSOBMTFDSFUTJPWQSPWJEFSIBTIJDPSQWBVMU

    View full-size slide

  36. &YUFSOBM4FDSFU0QFSBUPSΛ༻͍Δύλʔϯ
    &YUFSOBM4FDSFU0QFSBUPS
    *OUSPEVDUJPO IUUQTFYUFSOBMTFDSFUTJPW

    &YUFSOBM4FDSFUT0QFSBUPSJTB,VCFSOFUFTPQFSBUPSUIBUJOUFHSBUFTFYUFSOBMTFDSFUNBOBHFNFOUTZTUFNT
    MJLF"844FDSFUT.BOBHFS )BTIJ$PSQ7BVMU (PPHMF4FDSFUT.BOBHFS "[VSF,FZ7BVMU *#.$MPVE4FDSFUT
    .BOBHFS BOENBOZNPSF5IFPQFSBUPSSFBETJOGPSNBUJPOGSPNFYUFSOBM"1*TBOEBVUPNBUJDBMMZJOKFDUTUIF
    WBMVFTJOUPB,VCFSOFUFT4FDSFU
    <ҙ༁>
    ྑ͍ײ͡ʹ֎෦͔Βػີ৘ใΛऔಘͯ͠,VCFSOFUFTͷ4FDSFUΛ࡞Δ
    ҼΈʹ&YUFSOBM4FDSFU0QFSBUPS͸7BVMUҎ֎ʹ༷ʑͳ,.4ΛόοΫΤϯυͱͯ͠࢖༻Ͱ͖Δɻ
    IUUQTFYUFSOBMTFDSFUTJPWJOUSPEVDUJPOTUBCJMJUZTVQQPSU
    FYUFSOBMTFDSFUTJP
    IUUQTFYUFSOBMTFDSFUTJP

    View full-size slide

  37. &YUFSOBM4FDSFU0QFSBUPSΛ༻͍Δύλʔϯ
    ,VCFSOFUFT 7BVMU
    4FDSFUT
    64&3/".&VTFS
    1"44803%QBTTXPSE
    &YUFSOBM
    4FDSFU
    0QFSBUPS
    "11
    FYUFSOBMTFDSFUZBNM
    ػີ৘ใΛؚ·ͳ͍ ,FZͷΈ

    64&3/".&
    1"44803%
    4FDSFU4UPSF
    &YUFSOBM4FDSFU
    64&3/".&VTFS
    1"44803%QBTTXPSE
    ᶃ&YUFSOBM4FDSFUΛ࡞੒
    ᶄ7BVMU΁ͷΞΫηε৘ใΛऔಘ
    ᶅ7BVMU͔Βػີ৘ใΛऔಘ
    ᶆऔಘͨ͠ػີ৘ใ͔Β4FDSFUΛ࡞੒
    &YUFSOBM4FDSFU0QFSBUPSΛར༻͢Δ͜ͱͰɺػີ৘ใΛؚ·ͳ͍&YUFSOBM4FDSFUΛհͯ͠
    7BVMU্ͷػີ৘ใ͔Β4FDSFUΛ࡞੒͢Δ͜ͱ͕Ͱ͖·͢ɻ

    View full-size slide

  38. &YUFSOBM4FDSFU0QFSBUPSΛ༻͍Δύλʔϯ
    ,VCFSOFUFTʹ)FMNΛ༻͍ͯ&YUFSOBM4FDSFU0QFSBUPSΛΠϯετʔϧ͠·͢ɻ
    ·ͨɺ&YUFSOBM4FDSFU0QFSBUPS͕7BVMUʹΞΫηε͢ΔͨΊͷ৘ใΛؚΉ4FDSFU4UPSFΛ
    ࡞੒͠·͢ɻ
    IFMNSFQPBEEFYUFSOBMTFDSFUTIUUQTDIBSUTFYUFSOBMTFDSFUTJP
    IFMNSFQPVQEBUF
    IFMNJOTUBMMFYUFSOBMTFDSFUTa
    FYUFSOBMTFDSFUTFYUFSOBMTFDSFUTa
    OFYUFSOBMTFDSFUTa
    DSFBUFOBNFTQBDF
    ˈLVCFDUMBQQMZGTFDSFUTUPSFWBVMULTZBNM

    View full-size slide

  39. &YUFSOBM4FDSFU0QFSBUPSΛ༻͍Δύλʔϯ
    4FDSFU4UPSFͰ͸ҎԼͷΑ͏ʹ7BVMUͷΤϯυϙΠϯτ΍ػີ৘ใͷ֨ೲઌɺ
    ೝূʹ༻͍Δ4FSWJDF"DDPVOU΍3PMFΛఆ͍ٛͯ͠·͢ɻ
    BQJ7FSTJPOFYUFSOBMTFDSFUTJPWCFUB
    LJOE4FDSFU4UPSF
    NFUBEBUB
    OBNFWBVMUCBDLFOE
    OBNFTQBDFOPWJDFBQQ
    TQFD
    QSPWJEFS
    WBVMU
    TFSWFSIUUQWBVMUWBVMU7BVMUͷΤϯυϙΠϯτ
    QBUIOPWJDF7BVMU্ͷػີ৘ใ֨ೲઌ 4FDSFUT&OHJOFT໊

    WFSTJPOW
    BVUI
    LVCFSOFUFT
    NPVOU1BUILVCFSOFUFT7BVMU্ͷ"VUIFOUJDBUJPO.FUIPE໊
    SPMFOPWJDFBQQ7BVMU্Ͱͷ3PMF 7BVMU্Ͱࢀর͢Δ1BUI΁ͷΞΫηεݖΛ෇༩͓ͯ͘͠

    TFSWJDF"DDPVOU3FG
    OBNFOPWJDFWBVMUTBWBVMUͷೝূʹ༻͍Δ4FSWJDF"DDPVOU
    TFDSFUTUPSFWBVMULTZBNM

    View full-size slide

  40. &YUFSOBM4FDSFU0QFSBUPSΛ༻͍Δύλʔϯ
    7BVMU͔Βػີ৘ใΛऔಘͯ͠4FDSFUΛ࡞੒͢ΔͨΊͷ&YUFSOBM4FDSFUΛ࡞੒ͯ͠Έ·͢ɻ
    BQJ7FSTJPOFYUFSOBMTFDSFUTJPWCFUB
    LJOE&YUFSOBM4FDSFU
    NFUBEBUB
    OBNFFYUFSOBMTFDSFUOPWJDFBQQ
    OBNFTQBDFOPWJDFBQQ
    TQFD
    SFGSFTI*OUFSWBMT
    TFDSFU4UPSF3FG
    OBNFWBVMUCBDLFOE࢖༻͢Δ4FDSFU4UPSF໊
    LJOE4FDSFU4UPSF
    UBSHFU
    OBNFOPWJDFBQQTFDSFUGSPNFYUFSOBMTFDSFU࡞੒͢ΔTFDSFU໊
    EBUB
    TFDSFU,FZVTFSOBNFTFDSFU಺ͰͷEBUB໊
    SFNPUF3FG
    LFZBQQDPO
    fi
    HWBVMU্Ͱͷύε
    QSPQFSUZ64&3/".&WBVMU্ͰͷLFZ
    TFDSFU,FZQBTTXPSETFDSFU಺ͰͷEBUB໊
    SFNPUF3FG
    LFZBQQDPO
    fi
    HWBVMU্Ͱͷύε
    QSPQFSUZ1"44803%WBVMU্ͰͷLFZ
    FYUFSOBMTFDSFUOPWJDFBQQZBNM
    ͜ͷ෦෼Ͱऔಘ͢Δػີ৘ใͷ,FZΛࢦఆ

    View full-size slide

  41. &YUFSOBM4FDSFU0QFSBUPSΛ༻͍Δύλʔϯ
    ҎԼͷΑ͏ʹɺػີ৘ใΛؚ·ͳ͍&YUFSOBM4FDSFUΛ࡞੒͢Δ͜ͱͰ
    ػີ৘ใΛؚΉ4FDSFU͕ࣗಈ࡞੒͞ΕΔ͜ͱ͕෼͔Γ·͢ɻ
    ·ͨɺ7BVMUଆͰػີ৘ใͷߋ৽Λߦͳͬͨ৔߹Ͱ΋ͦͷ஋͕4FDSFUʹࣗಈ൓ө͞Ε·͢ɻ
    LVCFDUMBQQMZGFYUFSOBMTFDSFUOPWJDFBQQZBNM
    FYUFSOBMTFDSFUFYUFSOBMTFDSFUTJPFYUFSOBMTFDSFUOPWJDFBQQDSFBUFE
    LVCFDUMOOPWJDFBQQHFUTFDSFU
    /".&5:1&%"5""(&
    OPWJDFBQQTFDSFUGSPNFYUFSOBMTFDSFU0QBRVFT
    LVCFDUMOOPWJDFBQQHFUTFDSFUOPWJDFBQQTFDSFUGSPNFYUFSOBMTFDSFUPKTPOQBUI\EBUB^
    \QBTTXPSED('[DEWDN2Y.K./2 VTFSOBNFE9/MDK&Z.[2^
    FDIPE9/MDK&Z.[2cCBTFE
    VTFS
    FDIPD('[DEWDN2Y.K./2cCBTFE
    QBTTXPSE
    &YUFSOBM4FDSFUΛ࡞੒
    ػີ৘ใΛؚΉ4FDSFU͕ࣗಈ࡞੒͞Εͨ

    View full-size slide

  42. "HFOEB
    4FDSFU؅ཧ
    7BVMU
    7BVMUͷΠϯετʔϧ
    7BVMU΁ͷػີ৘ใ֨ೲ
    7BVMUΛ༻͍ͨ,VCFSOFUFTͷ4FDSFU؅ཧ
    &YUFSOBM4FDSFU0QFSBUPSΛ༻͍Δύλʔϯ
    7BVMU"HFOUΛ༻͍Δύλʔϯ
    4FDSFUT4UPSF$4*%SJWFSΛ༻͍Δύλʔϯ
    ·ͱΊ

    View full-size slide

  43. 7BVMU"HFOUΛ༻͍Δύλʔϯ
    Ҿ༻
    7BVMUʹ֨ೲͨ͠γʔΫϨοτΛ,VCFSOFUFT͔Β׆༻͢Δํ๏ !KBDPQFO

    IUUQTTQFBLFSEFDLDPNKBDPQFOWBVMUOJHFOBTJUBTJLVSFUVUPXPLVCFSOFUFTLBSBIVPZPOHTVSVGBOHGB TMJEF
    *OKFDUJOH4FDSFUTJOUP,VCFSOFUFT1PETWJB7BVMU"HFOU$POUBJOFST
    IUUQTEFWFMPQFSIBTIJDPSQDPNWBVMUUVUPSJBMTLVCFSOFUFTLVCFSOFUFTTJEFDBS

    View full-size slide

  44. 7BVMU"HFOUΛ༻͍Δύλʔϯ
    7BVMU"HFOU*OKFDUPSͱݺ͹ΕΔػೳʹΑΓɺ1PE࡞੒࣌ʹ7BVMU"HFOU͕*OJU$POUBJOFS͓Αͼ
    4JEFDBS$POUBJOFSͱͯ͠ૠೖ͞Εɺػີ৘ใ͕ϑΝΠϧͱͯ͠ڞ༗ϘϦϡʔϜʹ࡞੒͞Ε·͢ɻ
    ,VCFSOFUFT 7BVMU
    4FDSFUT
    64&3/".&VTFS
    1"44803%QBTTXPSE
    "11 ᶄ7BVMU͔Βػີ৘ใΛऔಘ
    *OJU
    64&3/".&VTFS
    1"44803%QBTTXPSE
    FNQUZ%JS .FNPSZ

    WBVMUBHFOUJOKFDUPS
    ᶃ1PEىಈ࣌ʹ*OJU$POUBJOFSͱ
    ɹ4JEFDBS$POUBJOFSΛૠೖ .VUBUJPO8FCIPPL

    ᶅڞ༗ϘϦϡʔϜʹػີ৘ใΛϑΝΠϧͱͯ֨͠ೲ
    4JEFDBS

    View full-size slide

  45. 7BVMU"HFOUΛ༻͍Δύλʔϯ
    7BVMU্ͷػີ৘ใΛར༻͢Δ1PEΛ࡞੒͠·͢ɻ
    7BVMU"HFOUΛ༻͍ΔύλʔϯͰ͸NFUBEBUBBOOPUBUJPOT಺Ͱػີ৘ใऔಘʹؔ͢Δ
    ༷ʑͳ৘ใΛઃఆ͠·͢ɻ
    BQJ7FSTJPOW
    LJOE1PE
    NFUBEBUB
    OBNFOPWJDFBQQ
    OBNFTQBDFOPWJDFBQQ
    MBCFMT
    SVOOPWJDFBQQ
    BOOPUBUJPOT
    JOKFDUPSʹΑΔWBVMUBHFOUͷૠೖΛ༗ޮԽ
    WBVMUIBTIJDPSQDPNBHFOUJOKFDUUSVF

    JOJUDPOUBJOFSͷΈ TJEFDBS͸JOKFDU͠ͳ͍

    WBVMUIBTIJDPSQDPNBHFOUQSFQPQVMBUFPOMZUSVF
    ࢖༻͢ΔWBVMU্ͷSPMFΛࢦఆ
    WBVMUIBTIJDPSQDPNSPMFOPWJDFBQQ
    WBVMUTFDSFUT഑ԼʹBQQDPO
    fi
    HUYUͱ͍͏ϑΝΠϧ͕࡞੒͞ΕΔ
    WBVMUͷOPWJDFEBUBBQQDPO
    fi
    Hʹ͋Δ,7Λ࢖͏
    WBVMUIBTIJDPSQDPNBHFOUJOKFDUTFDSFUBQQDPO
    fi
    HUYUOPWJDFEBUBBQQDPO
    fi
    H
    OPWJDFBQQZBNM
    ࡞੒͢ΔϑΝΠϧͷϑΥʔϚοτΛࢦఆ
    WBVMUIBTIJDPSQDPNBHFOUJOKFDUUFNQMBUFBQQDPO
    fi
    HUYUc
    \\XJUITFDSFUOPWJDFEBUBBQQDPO
    fi
    H^^
    VTFSOBNF\\%BUBEBUB64&3/".&^^
    QBTTXPSE\\%BUBEBUB1"44803%^^
    \\FOE^^
    TQFD
    DPOUBJOFST
    JNBHFVCVOUV
    OBNFOPWJDFBQQ
    DPNNBOE<CJOTI D XIJMFEPTMFFQEPOF>
    TFSWJDF"DDPVOU/BNFOPWJDFWBVMUTBWBVMUͷೝূʹ࢖͏ͨΊͷ4FSWJDF"DDPVOU
    Annotations
    https://developer.hashicorp.com/vault/docs/platform/k8s/injector/annotations
    ͜ͷ෦෼Ͱऔಘ͢Δػີ৘ใͷ,FZΛࢦఆ

    View full-size slide

  46. 7BVMU"HFOUΛ༻͍Δύλʔϯ
    ҎԼͷΑ͏ʹ࡞੒ͨ͠1PE಺ʹ7BVMU͔Βऔಘͨ͠ػີ৘ใΛؚΉϑΝΠϧ͕࡞੒͞Ε͍ͯΔ͜ͱ͕
    ෼͔Γ·͢ɻ
    ·ͨɺ7BVMUଆͰػີ৘ใͷߋ৽Λߦͳͬͨ৔߹Ͱ΋ͦͷ஋͕ࣗಈ൓ө͞Ε·͢ɻ
    ˞4JEFDBSΛ༗ޮԽ͍ͯ͠Δ৔߹ͷΈ
    LVCFDUMBQQMZGOPWJDFBQQZBNM
    QPEOPWJDFBQQDSFBUFE
    LVCFDUMOOPWJDFBQQFYFDJUOPWJDFBQQDOPWJDFBQQCJOCBTI
    SPPU!OPWJDFBQQDBUWBVMUTFDSFUTBQQDPO
    fi
    HUYU
    VTFSOBNFVTFS
    QBTTXPSEQBTTXPSE
    ͳ͓7BVMU"HFOUΛ༻͍ΔύλʔϯͰ͸ػີ৘ใ͕ϑΝΠϧͱͯ͠௚઀ग़ྗ͞ΕΔͨΊɺ
    ,VCFSOFUFT্ʹ4FDSFU͸࡞੒͞Ε·ͤΜɻ
    ػີ৘ใΛ؀ڥม਺ʹઃఆ͍ͨ͠౳ͷ৔߹͸޻෉͕ඞཁʹͳΓ·͢ɻ
    &OWJSPONFOU7BSJBCMF&YBNQMF
    IUUQTEFWFMPQFSIBTIJDPSQDPNWBVMUEPDTQMBUGPSNLTJOKFDUPSFYBNQMFTFOWJSPONFOUWBSJBCMFFYBNQMF
    1PEΛ࡞੒
    1PEʹػີ৘ใ͕౉͞Εͨ

    View full-size slide

  47. "HFOEB
    4FDSFU؅ཧ
    7BVMU
    7BVMUͷΠϯετʔϧ
    7BVMU΁ͷػີ৘ใ֨ೲ
    7BVMUΛ༻͍ͨ,VCFSOFUFTͷ4FDSFU؅ཧ
    &YUFSOBM4FDSFU0QFSBUPSΛ༻͍Δύλʔϯ
    7BVMU"HFOUΛ༻͍Δύλʔϯ
    4FDSFUT4UPSF$4*%SJWFSΛ༻͍Δύλʔϯ
    ·ͱΊ

    View full-size slide

  48. 4FDSFUT4UPSF$4*%SJWFSΛ༻͍Δύλʔϯ
    Ҿ༻
    7BVMUʹ֨ೲͨ͠γʔΫϨοτΛ,VCFSOFUFT͔Β׆༻͢Δํ๏ !KBDPQFO

    IUUQTTQFBLFSEFDLDPNKBDPQFOWBVMUOJHFOBTJUBTJLVSFUVUPXPLVCFSOFUFTLBSBIVPZPOHTVSVGBOHGB TMJEF
    .PVOU7BVMU4FDSFUTUISPVHI$POUBJOFS4UPSBHF*OUFSGBDF $4*
    7PMVNF
    IUUQTEFWFMPQFSIBTIJDPSQDPNWBVMUUVUPSJBMTLVCFSOFUFTLVCFSOFUFTTFDSFUTUPSFESJWFS

    View full-size slide

  49. 4FDSFUT4UPSF$4*%SJWFSΛ༻͍Δύλʔϯ
    4FDSFU4UPSF$4*%SJWFS͕7BVMU$4*1SPWJEFSͱ࿈ܞͯ͠7BVMU͔Βػີ৘ใΛऔಘ͠ɺ
    ϘϦϡʔϜͱͯ͠1PEʹϚ΢ϯτ͠·͢ɻ
    ,VCFSOFUFT 7BVMU
    4FDSFUT
    64&3/".&VTFS
    1"44803%QBTTXPSE
    "11
    ᶃ7BVMU΁ͷΞΫηε৘ใͱ
    ɹػີ৘ใͷ,FZΛఆٛ
    7BVMU
    $4*1SPWJEFS
    4FDSFU1SPWJEFS$MBTT
    4FDSFU4UPSF
    $4*%SJWFS
    64&3/".&VTFS
    1"44803%QBTTXPSE
    4FDSFU7PMVNF UNQGT

    ᶄ1SPWJEFSΛհͯ͠7BVMU͔Βػີ৘ใΛऔಘ
    ᶅػີ৘ใΛ7PMVNFͱͯ͠Ϛ΢ϯτ
    64&3/".&
    1"44803%

    View full-size slide

  50. 4FDSFUT4UPSF$4*%SJWFSΛ༻͍Δύλʔϯ
    ,VCFSOFUFTʹ)FMNΛ༻͍ͯ4FDSFU4UPSF$4*%SJWFSΛΠϯετʔϧ͠·͢ɻ
    ͳ͓ɺ7BVMU$4*1SPWJEFSʹ͍ͭͯ͸7BVMUΠϯετʔϧ࣌ʹ߹ΘͤͯΠϯετʔϧ͍ͯ͠ΔͨΊɺ
    վΊͯΠϯετʔϧ͸ෆཁͰ͢ɻ
    IFMNSFQPBEETFDSFUTTUPSFDTJESJWFSIUUQTLVCFSOFUFTTJHTHJUIVCJPTFDSFUTTUPSFDTJESJWFSDIBSUT
    IFMNSFQPVQEBUF
    IFMNJOTUBMMDTJTFDSFUTTUPSFDTJESJWFSTFDSFUTTUPSFDTJESJWFSa
    TFUTZOD4FDSFUFOBCMFEUSVFDSFBUFOBNFTQBDFOTFDSFUTTUPSFDTJESJWFS

    View full-size slide

  51. 4FDSFUT4UPSF$4*%SJWFSΛ༻͍Δύλʔϯ
    4FDSFU1SPWJEFS$MBTTͱ1PEΛ࡞੒͠·͢ɻ
    BQJ7FSTJPOTFDSFUTTUPSFDTJYLTJPW
    LJOE4FDSFU1SPWJEFS$MBTT
    NFUBEBUB
    OBNFOPWJDFBQQTQD
    OBNFTQBDFOPWJDFBQQ
    TQFD
    QSPWJEFSWBVMU
    QBSBNFUFST
    WBVMU"EESFTTIUUQWBVMUWBVMUWBVMUͷΤϯυϙΠϯτΛࢦఆ
    SPMF/BNFOPWJDFBQQ࢖༻͢ΔWBVMU্ͷSPMFΛࢦఆ
    PCKFDUTc
    PCKFDU/BNFVTFSOBNFGSPNDTJϚ΢ϯτ࣌ͷϑΝΠϧ໊
    TFDSFU1BUIOPWJDFEBUBBQQDPO
    fi
    HWBVMU্ͷTFDSFU֨ೲઌ
    TFDSFU,FZ64&3/".&WBVMU্ͷLFZ
    PCKFDU/BNFQBTTXPSEGSPNDTJϚ΢ϯτ࣌ͷϑΝΠϧ໊
    TFDSFU1BUIOPWJDFEBUBBQQDPO
    fi
    HWBVMU্ͷTFDSFU֨ೲઌ
    TFDSFU,FZ1"44803%WBVMU্ͷLFZ
    BQJ7FSTJPOW
    LJOE1PE
    NFUBEBUB
    MBCFMT
    SVOOPWJDFBQQ
    OBNFOPWJDFBQQ
    OBNFTQBDFOPWJDFBQQ
    TQFD
    DPOUBJOFST
    JNBHFVCVOUV
    OBNFOPWJDFBQQ
    DPNNBOE<CJOTI D XIJMFEPTMFFQEPOF>
    WPMVNF.PVOUT
    OBNFOPWJDFBQQTFDSFUT
    NPVOU1BUINOUTFDSFUTTUPSF
    SFBE0OMZUSVF
    WPMVNFT
    OBNFOPWJDFBQQTFDSFUT
    DTJ
    ESJWFSTFDSFUTTUPSFDTJLTJPDTJESJWFSͱͯ͠TFDSFUTTUPSFDTJESJWFSΛࢦఆ
    SFBE0OMZUSVF
    WPMVNF"UUSJCVUFT
    TFDSFU1SPWJEFS$MBTTOPWJDFBQQTQD4FDSFU1SPWJEFS$MBTTΛࢦఆ
    TFSWJDF"DDPVOU/BNFOPWJDFWBVMUTBWBVMUͷೝূʹ࢖͏ͨΊͷ4FSWJDF"DDPVOU
    OPWJDFBQQZBNM
    OPWJDFBQQTQDZBNM

    View full-size slide

  52. 4FDSFUT4UPSF$4*%SJWFSΛ༻͍Δύλʔϯ
    ҎԼͷΑ͏ʹ࡞੒ͨ͠1PEʹϚ΢ϯτͨ͠7PMVNF഑Լʹɺ
    7BVMU͔Βऔಘͨ͠ػີ৘ใΛؚΉϑΝΠϧ͕࡞੒͞Ε͍ͯΔ͜ͱ͕෼͔Γ·͢ɻ
    ͜ͷέʔεͰ͸7BVMUଆͰػີ৘ใͷߋ৽Λߦͳͬͨ৔߹ͦͷ஋͸ࣗಈ൓ө͞Ε·ͤΜɻ
    LVCFDUMBQQMZGOPWJDFBQQTQDZBNM
    TFDSFUQSPWJEFSDMBTTTFDSFUTTUPSFDTJYLTJPOPWJDFBQQTQDDSFBUFE
    LVCFDUMBQQMZGOPWJDFBQQZBNM
    QPEOPWJDFBQQDSFBUFE
    LVCFDUMOOPWJDFBQQFYFDJUOPWJDFBQQCJOCBTI
    SPPU!OPWJDFBQQMTNOUTFDSFUTTUPSF
    QBTTXPSEGSPNDTJVTFSOBNFGSPNDTJ
    SPPU!OPWJDFBQQDBUNOUTFDSFUTTUPSFVTFSOBNFGSPNDTJ
    VTFS
    SPPU!OPWJDFBQQDBUNOUTFDSFUTTUPSFQBTTXPSEGSPNDTJ
    QBTTXPSE
    4FDSFU1SPWJEFS$MBTTΛ࡞੒
    1PEʹػີ৘ใ͕౉͞Εͨ
    1PEΛ࡞੒
    ˞ݱࡏͰ͸ࣗಈ൓ө͸4FDSFUT4UPSF$4*%SJWFSͱͯ͠BMQIBͷҐஔ෇͚ͰσϑΥϧτແޮɻ
    ɹ༗ޮԽͯ͠΋7BVMUͰ࢖͑Δͷ͔͸ෆ໌ɻ
    ɹ"VUPSPUBUJPOPGNPVOUFEDPOUFOUTBOETZODFE,VCFSOFUFT4FDSFUT

    ɹIUUQTTFDSFUTTUPSFDTJESJWFSTJHTLTJPUPQJDTTFDSFUBVUPSPUBUJPOIUNM

    View full-size slide

  53. 4FDSFUT4UPSF$4*%SJWFSΛ༻͍Δύλʔϯ
    ·ͨҎԼͷΑ͏ͳܗͰ4FDSFU1SPWJEFS$MBTTΛఆٛ͢Δ͜ͱͰ,VCFSOFUFT্ʹ
    4FDSFUΛ࡞੒͢Δ͜ͱ΋ՄೳͰ͢ɻ
    BQJ7FSTJPOTFDSFUTTUPSFDTJYLTJPW
    LJOE4FDSFU1SPWJEFS$MBTT
    NFUBEBUB
    OBNFOPWJDFBQQTQD
    OBNFTQBDFOPWJDFBQQ
    TQFD
    QSPWJEFSWBVMU
    QBSBNFUFST
    WBVMU"EESFTTIUUQWBVMUWBVMUWBVMUͷΤϯυϙΠϯτΛࢦఆ
    SPMF/BNFOPWJDFBQQ࢖༻͢ΔWBVMU্ͷSPMFΛࢦఆ
    PCKFDUTc
    PCKFDU/BNFVTFSOBNFGSPNDTJϚ΢ϯτ࣌ͷϑΝΠϧ໊
    TFDSFU1BUIOPWJDFEBUBBQQDPO
    fi
    HWBVMU্ͷTFDSFU֨ೲઌ
    TFDSFU,FZ64&3WBVMU্ͷLFZ
    PCKFDU/BNFQBTTXPSEGSPNDTJϚ΢ϯτ࣌ͷϑΝΠϧ໊
    TFDSFU1BUIOPWJDFEBUBBQQDPO
    fi
    HWBVMU্ͷTFDSFU֨ೲઌ
    TFDSFU,FZ1"44803%WBVMU্ͷLFZ
    TFDSFU0CKFDUTTFDSFUΛ࡞Δ
    TFDSFU/BNFOPWJDFBQQTFDSFUGSPNDTJ࡞੒͢Δ4FDSFU໊
    UZQF0QBRVF
    EBUB
    PCKFDU/BNFVTFSOBNFGSPNDTJ
    LFZVTFSOBNF
    PCKFDU/BNFQBTTXPSEGSPNDTJ
    LFZQBTTXPSE
    ͜ͷఆٛʹΑΓ4FDSFU͕࡞੒͞ΕΔ
    OPWJDFBQQTQDZBNM
    4ZODBT,VCFSOFUFT4FDSFU
    IUUQTTFDSFUTTUPSFDTJESJWFSTJHTLTJPUPQJDTTZODBTLVCFSOFUFTTFDSFUIUNM

    View full-size slide

  54. 4FDSFUT4UPSF$4*%SJWFSΛ༻͍Δύλʔϯ
    ·ͨҎԼͷΑ͏ͳܗͰ4FDSFU1SPWJEFS$MBTTΛఆٛ͢Δ͜ͱͰ,VCFSOFUFT্ʹ
    4FDSFUΛ࡞੒͢Δ͜ͱ΋ՄೳͰ͢ɻ
    LVCFDUMOOPWJDFBQQHFUTFDSFU
    /".&5:1&%"5""(&
    OPWJDFBQQTFDSFUGSPNFYUFSOBMTFDSFU0QBRVFI
    LVCFDUMOOPWJDFBQQHFUTFDSFUOPWJDFBQQTFDSFUGSPNFYUFSOBMTFDSFUPKTPOQBUI\EBUB^
    \QBTTXPSED('[DEWDN2Y.K./2 VTFSOBNFE9/MDK&Z.[2^
    FDIPE9/MDK&Z.[2cCBTFE
    VTFS
    FDIPD('[DEWDN2Y.K./2cCBTFE
    QBTTXPSE
    4FDSFU͕࡞੒͞Εͨ

    View full-size slide

  55. "HFOEB
    4FDSFU؅ཧ
    7BVMU
    7BVMUͷΠϯετʔϧ
    7BVMU΁ͷػີ৘ใ֨ೲ
    7BVMUΛ༻͍ͨ,VCFSOFUFTͷ4FDSFU؅ཧ
    &YUFSOBM4FDSFU0QFSBUPSΛ༻͍Δύλʔϯ
    7BVMU"HFOUΛ༻͍Δύλʔϯ
    4FDSFUT4UPSF$4*%SJWFSΛ༻͍Δύλʔϯ
    ·ͱΊ

    View full-size slide

  56. ·ͱΊ
    7BVMUΛ༻͍ͨ,VCFSOFUFTͷ4FDSFU؅ཧʹ͍ͭͯ͝঺հ͠·ͨ͠
    ɹ&YUFSOBM4FDSFU0QFSBUPS
    ɹ7BVMU"HFOU *OJU4JEFDBS$POUBJOFS

    ɹ4FDSFUT4UPSF$4*%SJWFS
    ެࣜϒϩάͰ֤ख๏ͷൺֱ΋ߦΘΕ͍ͯΔͷͰࢀߟʹͯ͠Έ͍ͯͩ͘͞
    ɹ,VCFSOFUFT7BVMUJOUFHSBUJPOWJB4JEFDBS"HFOU*OKFDUPSWT7BVMU4FDSFUT0QFSBUPSWT$4*QSPWJEFS
    IUUQTXXXIBTIJDPSQDPNCMPHLVCFSOFUFTWBVMUJOUFHSBUJPOWJBTJEFDBSBHFOUJOKFDUPSWTDTJQSPWJEFS

    View full-size slide