Lock in $30 Savings on PRO—Offer Ends Soon! ⏳

メインテーマはKubernetes

nwiizo
November 28, 2024

 メインテーマはKubernetes

2024年16:20-17:00(Track A)にて「メインテーマはKubernetes」というタイトルで登壇します。
セッションURL:https://event.cloudnativedays.jp/cndw2024/talks/2373

公式URL:https://event.cloudnativedays.jp/cndw2024/

nwiizo

November 28, 2024
Tweet

More Decks by nwiizo

Other Decks in Technology

Transcript

  1. ߨԋͷ֓ཁ wओཁͳϝοηʔδ w ,VCFSOFUFTΛऔΓר͘೥ͷٕज़ಈ޲ͱ൑அج४ͷఏࣔ w ࣮ફ஌ʹجͮ࣋͘ଓՄೳͳӡ༻Ξϓϩʔνͷڞ༗ w ٕज़બఆʹ͓͚Δݱ࣮ղͷ୳ٻ wѻ͏τϐοΫ w

    ਐԽ͢ΔΤίγεςϜʹ͓͚Δٕज़બ୒ͷߟ͑ํ w ૊৫ͷ੒ख़౓ʹԠͨ͡ஈ֊తͳಋೖઓུ w มԽΛલఏͱͨ͠ॊೈͳӡ༻ઃܭ w ,&1Λ׆༻ͨ͠ܭըతͳϓϥοτϑΥʔϜਐԽ w ࣦഊࣄྫ͔ΒֶͿ࣮ફతͳରԠઓུ wظ଴͢Δ੒Ռ w ٕज़બఆʹ͓͚Δ࣮ફతͳ൑அ࣠ͷ֫ಘ w ࣋ଓՄೳͳӡ༻ମ੍ͷߏங w มԽʹڧ͍૊৫ͮ͘Γ
  2. ,VCFSOFUFT w ೥ʹ(PPHMF͕ൃදͨ͠ίϯςφΦʔέετϨʔγϣϯπʔϧ w IUUQTXXXZPVUVCFDPNXBUDI W:SYO7,;FR, w ʮίϯςφԽ͞ΕͨΞϓϦέʔγϣϯΛͲ͜Ͱ΋σϓϩΠɺ ɹεέʔϧɺ؅ཧͰ͖ΔΦʔϓϯιʔεγεςϜʯ w

    IUUQTDMPVEHPPHMFDPNMFBSOXIBUJTLVCFSOFUFT IMKBTFDUJPO w ޡղΛڪΕͣʹ؆୯ʹݴ͏ͱ%PDLFSΛྑ͍ײ͡ʹ͢Δ΍ͭ w ૄ݁߹ͳγεςϜ w ճ෮ੑ w ؅ཧྗ  w Մ؍ଌੑ w ݎ࿚ͳࣗಈԽ w มԽʹڧ͍ https://ai.google/research/pubs/pub43438
  3. #PSH w-BSHFTDBMFDMVTUFSNBOBHFNFOUBU(PPHMFXJUI#PSH IUUQTTUBUJDHPPHMFVTFSDPOUFOUDPNNFEJBSFTFBSDIHPPHMFDPNKBQVCTBSDIJWF QEG w ೥ʹ(PPHMF͕։ൃΛ࢝Ίͨେن໛ͳΫϥελ؅ཧγεςϜ w ଟ਺ͷΫϥελʹލͬͯ਺ສͷ+PC΍Կઍ΋ͷΞϓϦέʔγϣϯ͕࣮ߦ͞ΕΔ w CPSHDGH

    CPSHDGH$-* #PSHMFU #PSH.BTUFSͳͲ,VCFSOFUFTͷ໘Ө͕͋Δ w!JOEVDUPS͞Μͷ#PSHͷ࿦จΛಡΈղ͘هࣄ͕ৄ͍͠ w IUUQTCMPHJOEVDUPSNFFOUSZ  job hello_world = { runtime = { cell = 'ic' } // Cell (cluster) to run in binary = '.../hello_world_webserver' // Program to run args = { port = '%port%' } // Command line parameters requirements = { // Resource requirements (optional) ram = 100M disk = 100M cpu = 0.1 } replicas = 5 // Number of tasks }
  4. ,VCFSOFUFTͷಛ௃ wෆมͳΠϯϑϥ w ॳظߏஙޙ͸ΠϯϑϥʹมߋΛՃ͑ͳ͍ w มߋΛՃ͑Δ࣌͸৽͘͠ΠϯϑϥΛߏங͠௚ͤ͹ྑ͍ wએݴతઃఆ w એݴతʹγεςϜͷ͋Δ΂͖࢟Λఆٛ w

    ໋ྩܕͰखॱ΍มߋཤྺΛه࿥͠ͳ͍ wࣗݾम෮ػೳ w ো֐΍ҟৗ͕ى͖ͯ΋3FDPODJMJBUJPO-PPQͷதͰγεςϜΛ͋Δ΂͖࢟ʹ໭͢ w FH ো֐ͷى͖ͨϊʔυͰಈ͘ΞϓϦέʔγϣϯΛผͷ৔ॴʹҠಈ͢Δ 
  5. ϚχϑΣετͱLVCFDUM w,VCFSOFUFTͷϦιʔεΛ:".-Ͱએݴతʹ؅ཧ w /HJOYͷίϯςφΛͭىಈͯ͠൪ϙʔτͰMJTUFO w :".-ΤϯδχΞͱݺ͹ΕΔॴҎ +40/Ͱ΋ॻ͚Δ  w :".-஍ࠈ

    :".-)FMM ͱݺ͹ΕΔ͘Β͍:".-Λॻ͖·͢ wϢʔβʔ͸ϚχϑΣετΛॻ͍ͯLVCFDUMͰ൓ө͢Δ w LVCFDUM͸,VCFSOFUFT͕ఏڙ͢Δ$-* w ,VCFSOFUFTͷ"1*αʔό͸0QFO"1*४ڌ w$-*Ͱ:".-͔Β+40/ʹม׵ͯ͠ϦΫΤετΛ౤͛Δ wϓϥάΠϯػೳͰ͋ΔLVCFDUMQMVHJO΍LSFXͷଘࡏ  QMVHJO
  6. ਪ঑͍ͨ͠ॻ੶ w,VCFSOFUFT׬શΨΠυୈೋ൛ w ॻ੶ͷಛ௃ w ࣗ෼͕ͲΕ͚ͩ,VCFSOFUFTʹ͍ͭͯཧղ͍ͯ͠Δ͔͕෼͔Δڸతͳॻ੶ w ,VCFSOFUFTॳ৺ऀ͔Β্ڃऀ·ͰରԠͨ͠ମܥతͳղઆ w όʔδϣϯͷػೳΛ໢ཏʢΞϧϑΝػೳΛؚΉʣ

    w ओཁͳτϐοΫ w جૅཧ࿦ͱ֓೦ w ίϯςφΦʔέετϨʔγϣϯͷجຊݪཧͱ,VCFSOFUFTͷΞʔΩςΫνϟઃܭ w Ϋϥελͷߏ੒ཁૉͱίϯϙʔωϯτؒͷ࿈ܞϝΧχζϜ w ࣮૷ͱӡ༻ w ΞϓϦέʔγϣϯͷίϯςφԽͱ,VCFSOFUFT΁ͷσϓϩΠϝϯτख๏ w εέʔϦϯάɺࣗಈԽઃఆɺ͓ΑͼηΩϡϦςΟϙϦγʔͷ࣮૷ w Ԡ༻ͱΤίγεςϜ w Ϋϥ΢υωΠςΟϒΞϓϦέʔγϣϯͷઃܭͱ$*$%ύΠϓϥΠϯͷߏங w ֤छΫϥ΢υϓϩόΠμʔͱͷ࿈ܞͱϞχλϦϯάମ੍ͷཱ֬ w τϥϒϧγϡʔςΟϯά w Ұൠతͳো֐ύλʔϯͷղܾͱύϑΥʔϚϯε࠷దԽͷख๏ w γεςϜ؂ࢹɺϩά෼ੳɺόοΫΞοϓઓུͷ࣮ફ  IUUQTCPPLJNQSFTTDPKQCPPLT
  7. ,VCFSOFUFTͷϦϦʔεपظʹ͍ͭͯ wϦϦʔεස౓೥ճʢ໿͔݄͝ͱʣ wओཁϑΣʔζ w ։ൃ 8FFLT ػೳͷ࣮૷ɾϨϏϡʔ w ίʔυϑϦʔζ 8FFLT

    ॏཁͳόάमਖ਼ͷΈڐՄ w ϦϦʔεޙ࡞ۀ 8FFLT ҆ఆԽͱ࣍ظϦϦʔε४උ w &OIBODFNFOUT'SFF[F 8FFLœ ػೳͷ֬ఆظݶ wඞཁͳϥϕϧ w TJH\OBNF^4*(Φʔφʔ w LJOE\UZQF^มߋͷछྨ CVH GFBUVSFͳͲ  w MHUN BQQSPWFEϨϏϡʔঝೝ w ༏ઌ౓ϥϕϧ w DSJUJDBMVSHFOUϦϦʔεඞਢ w JNQPSUBOUTPPO༏ઌతରԠ w JNQPSUBOUMPOHUFSN௕ظత՝୊ wϦϦʔεϒϥϯν؅ཧ w W9:ϒϥϯν࡞੒ɺ͔݄ؒͷύονϦϦʔεରԠ w஫ҙ఺ w ະղܾͷ13*TTVF͸࡟আ͞ΕΔՄೳੑ w 4*(΍ϦϦʔενʔϜͱͷີͳ࿈ܞ͕ॏཁ  IUUQTLVCFSOFUFTJPSFMFBTFT IUUQTLVCFSOFUFTJPSFMFBTFTSFMFBTF IUUQTHJUIVCDPNLVCFSOFUFTDPNNVOJUZCMPCNBTUFSDPOUSJCVUPSTEFWFMTJHSFMFBTFSFMFBTFNE
  8. ,&1ͷ֓ཁͱഎܠ w,VCFSOFUFT&OIBODFNFOU1SPQPTBMͱ͸ w ,VCFSOFUFTͷ৽ػೳఏҊΛମܥతʹ؅ཧ͢Δϓϩηε w LVCFSOFUFTFOIBODFNFOUTϦϙδτϦͰ؅ཧ w IUUQTHJUIVCDPNLVCFSOFUFTFOIBODFNFOUT w "MQIB#FUB("·Ͱͷ໌֬ͳϑϩʔఆٛ

    w 4*(ɺ8(ɺ6(Ͱߏ੒͞ΕΔڊେίϛϡχςΟͷڠௐΛ࣮ݱ w 4QFDJBM*OUFSFTU(SPVQT 4*( ͸ɺಛఆͷٕज़෼໺ʢྫɿ"1*ɺ4UPSBHFɺ/FUXPSLʣʹಛԽͯ͠։ൃΛਪਐ͢ΔৗઃͷάϧʔϓͰ͢ɻ w 8PSLJOH(SPVQT 8( ͸ɺෳ਺ͷ4*(ʹ·͕ͨΔಛఆͷτϐοΫʹ͍ͭͯظؒΛఆΊͯٞ࿦΍։ൃΛߦ͏άϧʔϓͰ͢ɻ w 6TFS(SPVQT 6( ͸ɺ#JH%BUB΍ػցֶशͳͲɺ,VCFSOFUFTϢʔβʔͷϢʔεέʔεʹؔ͢Δ৘ใަ׵΍՝୊ղܾΛߦ͏௕ظతͳίϛϡχςΟͰ͢ɻ  IUUQTXXXLVCFSOFUFTEFWSFTPVSDFTLFQT
  9. ,&1͓͢͢Ίίϯςϯπ -BTU8FFLJO ,VCFSOFUFT %FWFMPQNFOU ,VCFSOFUFTϓϩδΣΫ τͷίʔυΞΫςΟϏς Ο Ϛʔδɺ13ɺඇਪ ঑ɺόʔδϣϯߋ৽ɺϦ Ϧʔεεέδϡʔϧɺί

    ϛϡχςΟϛʔςΟϯά ͳͲ Λ·ͱΊͨिץχ ϡʔεϨλʔͰ͢ɻ IUUQTMXLEJOGP  ઌिͷ ,VCFSOFUFT ͦΜͳ-8,%Λ !FWFSQFBDFͱ !TVQFSCSPUIFST͕ղ આͯ͘͠Ε͍ͯΔɻ -8,%͸ߪಡ͢Δͱ ʮ͸ʁʯʹͳΔͷͰ͕͢ ิ׬ͯ͘͠ΕΔ IUUQTUXJUUFSDPN MXLTKQ ,VCFSOFUFT  !UPWFSTVT͕· ͱΊ͍ͯΔɻ;FOOͷ 4DSBQͰ͢ɻʮ࠷৽ಈ ޲ΩϟονΞοϓͰ͖ ͯͳ͍ʜʯΛʮ׬શʹ ཧղͨ͠ʯʹม͑Δ IUUQT[FOOEFW UPWFSTVTTDSBQT DD ff D ,VCFSOFUFT มߋ಺༰ڞ༗ձ ʮϦϦʔεϊʔτಡΉͷେ มʯΛʮͳΔ΄Ͳʂʯʹ ม͑Δूձɻ೔ʑࢥͬͯ· ͢ɻແྉͰྑ͍ͷ͔ͱ ⋯  IUUQTLVCFSOFUFT VQEBUFTDPOOQBTTDP N
  10. ΞϓϦέʔγϣϯ։ൃ΁ͷӨڹ w։ൃϓϩηε΁ͷޮՌ wػೳͷૣظධՁ͔Βϕʔλ൛ͷࢼݧతಋೖ ·Ͱɺ։ൃॳظஈ֊Ͱͷؔ༩͕࣮૷ͷ࣭Λߴ Ίɺֶͼͷ޷॥؀ΛੜΈग़͢աఔͱͳΓɺ݁ Ռͱͯ͠ϓϩμΫτͷ׬੒౓ͱ։ൃνʔϜͷ ཧղ౓Λಉ࣌ʹ޲্ͤ͞Δ͜ͱ͕Ͱ͖·͢ɻ wΞϓϦέʔγϣϯઃܭ΁ͷӨڹ wকདྷΛݟਾ͑ͨઃܭ൑அͱඇਪ঑ػೳͷࣄ લ೺ѲʹΑΓɺٕज़తෛ࠴Λ࠷খݶʹ཈͑ͳ

    ͕Β֦ுੑͷߴ͍ΞʔΩςΫνϟΛ࣮ݱͰ ͖ɺ͜ΕʹΑͬͯ௕ظతͳϝϯςφϯεੑͱ εέʔϥϏϦςΟΛ֬อ͢Δ͜ͱ͕Մೳͱͳ Γ·͢ɻ w࣮ફతͳ׆༻ํ๏ w ,&1Λ׆༻ͨ͠։ൃܭը͔Βஈ֊తͳຊ൪ಋ ೖ·Ͱɺ࣮ূʹجͮ͘ݕূΛॏͶΔ͜ͱͰ࣮֬ ͳਐԽΛ਱͛Δ͜ͱ͕Ͱ͖ɺͦͷաఔͰಘΒΕ Δ஌ݟ͸࣍ͷΠςϨʔγϣϯͷվળʹ΋׆͔͞ Ε͍͖ͯ·͢ɻ  IUUQTXXXLVCFSOFUFTEFWSFTPVSDFTLFQT w ػೳͷૣظධՁ͕Մೳ w "MQIB#FUBػೳͷࢼݧతಋೖ w ϑΟʔυόοΫͷఏڙػձ w ࣮૷લͷઃܭϨϏϡʔࢀՃ w ,&1Λ׆༻ͨ͠։ൃܭը w ৽ػೳͷ1SPPG0G$PODFQU w ςετ؀ڥͰͷݕূ w ஈ֊తͳຊ൪ಋೖ w ΑΓྑ͍ઃܭ൑அ w কདྷͷػೳΛݟਾ͑ͨઃܭ w ඇਪ঑ػೳͷࣄલ೺Ѳ w ϕετϓϥΫςΟεͷૣظ࠾༻
  11. +PC؅ཧͷڧԽ wόοΫΦϑ੍ݶͱϙουো֐ϙϦγʔ w #BDLP ff MJNJUQFSJOEFY ,VCFSOFUFTW<CFUB>  w ΠϯσοΫε͝ͱͷ࠶ࢼߦճ਺Λ੍ޚ

    w 1PEGBJMVSFQPMJDZ ,VCFSOFUFTW<TUBCMF>  w ࣦഊཧ༝ʹج͍ͮͨৄࡉͳ੍ޚ͕Մೳ  IUUQTLVCFSOFUFTJPEPDTDPODFQUTXPSLMPBETDPOUSPMMFSTKPCQPECBDLP ff GBJMVSFQPMJDZ IUUQTLVCFSOFUFTJPEPDTDPODFQUTXPSLMPBETDPOUSPMMFSTKPCQPEGBJMVSFQPMJDZ BQJ7FSTJPOCBUDIW LJOE+PC TQFD CBDLP ff -JNJU1FS*OEFY QPE'BJMVSF1PMJDZ SVMFT BDUJPO'BJM*OEFY PO&YJU$PEFT PQFSBUPS*O WBMVFT<  > w ϝϦοτ w όονδϣϒͷࡉ͔ͳ੍ޚ͕Մೳʹ w ো֐࣌ͷಈ࡞ΛΑΓৄࡉʹఆٛՄೳ w ӡ༻ίετͷ࡟ݮ w ผ్KPCܥͷπʔϧ͕ඞཁͩͬͨ
  12. $&-ϕʔεͷݕূϧʔϧ w 7BMJEBUJOH"ENJTTJPO1PMJDZ ,VCFSOFUFTW<TUBCMF>  w $PNNPO&YQSFTTJPO-BOHVBHF $&- ʹΑΔએݴతͳݕূ w

    ΑΓύϫϑϧͳݕূϩδοΫͷ࣮૷ w ඪ४ػೳͱͯ͠௥Ճ͞Ε·ͨ͠  IUUQTLVCFSOFUFTJPEPDTSFGFSFODFBDDFTTBVUIOBVUI[WBMJEBUJOHBENJTTJPOQPMJDZ BQJ7FSTJPOBENJTTJPOSFHJTUSBUJPOLTJPW LJOE7BMJEBUJOH"ENJTTJPO1PMJDZ TQFD GBJMVSF1PMJDZ'BJM NBUDI$POTUSBJOUT SFTPVSDF3VMFT BQJ(SPVQT<BQQT> BQJ7FSTJPOT<W> PQFSBUJPOT<$3&"5& 61%"5&> SFTPVSDFT<lEFQMPZNFOUT> WBMJEBUJPOT FYQSFTTJPOPCKFDUTQFDSFQMJDBT NFTTBHFSFQMJDBTNVTUCF IUUQTLVCFSOFUFTJPCMPHWBMJEBUJOHBENJTTJPOQPMJDZHB w ϝϦοτ w ॊೈͳݕূϧʔϧͷ࣮૷ w ηΩϡϦςΟϙϦγʔͷڧԽ w ӡ༻඼࣭ͷ޲্ IUUQTTSFBLFDPNCMPHLVCFSOFUFTDFMEFTDSJQUJPO validating admission webhook ΍ mutating admission webhook Λ࢖ͬͯผ్࣮૷͕ඞཁͩͬͨ
  13. ΑΓॊೈͳϔϧενΣοΫ w1SPCFͷ֦ுػೳ w %F fi OFBH31$MJWFOFTTQSPCF ,VCFSOFUFTW<TUBCMF>  w H31$ϓϩʔϒͷωΠςΟϒαϙʔτ

    w UFSNJOBUJPO(SBDF1FSJPE4FDPOET w ,VCFSOFUFTW<TUBCMF>  w 1PEϨϕϧͷ҆શͳऴ͕ྃͰ͖ΔΑ͏ʹͳͬͨ  IUUQTLVCFSOFUFTJPEPDTUBTLTDPO fi HVSFQPEDPOUBJOFSDPO fi HVSFMJWFOFTTSFBEJOFTTTUBSUVQQSPCFT BQJ7FSTJPOW LJOE1PE TQFD DPOUBJOFST OBNFBQQ MJWFOFTT1SPCF HSQD QPSU TUBSUVQ1SPCF IUUQ(FU QBUIIFBMUI[ QPSU GBJMVSF5ISFTIPME QFSJPE4FDPOET SFBEJOFTT1SPCF FYFD DPNNBOE DBU UNQIFBMUIZ JOJUJBM%FMBZ4FDPOET UFSNJOBUJPO(SBDF1FSJPE4FDPOET w ϝϦοτ w H31$ϕʔεͷϚΠΫϩαʔϏεͷ݈શੑ֬ೝ w ىಈ࣌ͷஈ֊తͳϔϧενΣοΫ w γϟοτμ΢ϯ࣌ͷ҆શͳॲཧ׬ྃ଴ͪ w ෳࡶͳΞϓϦέʔγϣϯঢ়ଶͷ؂ࢹ
  14. εςʔτϑϧͳΞϓϦέʔγϣϯͷӡ༻ੑͱ৴པੑΛ޲্ w4UBUFGVM4FUͷ৽ػೳ w 1FSTJTUFOU7PMVNF$MBJN3FUFOUJPO ,VCFSOFUFTW<CFUB>  w 4UBUFGVM4FU࡟আ࣌ͱεέʔϧ࣌ͷಈ࡞Λݸผʹ੍ޚՄೳ  

         w 4UBSUPSEJOBM ,VCFSOFUFTW<TUBCMF>  w ։࢝ॱংͷ੍ޚ  IUUQTLVCFSOFUFTJPEPDTDPODFQUTXPSLMPBETDPOUSPMMFSTTUBUFGVMTFU BQJ7FSTJPOBQQTW LJOE4UBUFGVM4FU TQFD QFSTJTUFOU7PMVNF$MBJN3FUFOUJPO1PMJDZ XIFO%FMFUFE3FUBJO4UBUFGVM4FU࡟আ࣌ XIFO4DBMFE%FMFUFεέʔϧμ΢ϯ࣌ BQJ7FSTJPOBQQTW LJOE4UBUFGVM4FU TQFD PSEJOBMT TUBSU1PE໊͕͔Β։࢝ XFC XFC   SFQMJDBT w 1PE໋໊ͷॊೈͳ੍ޚ w ϚΠάϨʔγϣϯ࣌ͷޓ׵ੑ֬อ w ӡ༻؀ڥʹԠͨ͡ઃఆ w σʔλ؅ཧͷॊೈੑ޲্ w εέʔϦϯά࣌ͷϦιʔε࠷దԽ w ӡ༻ίετͷ࡟ݮ
  15. εςʔτϑϧͳΞϓϦέʔγϣϯͷӡ༻ੑͱ৴པੑΛ޲্ w4UBUFGVM4FUͷ৽ػೳ w 1PE*OEFY-BCFM ,VCFSOFUFTW<CFUB>  w ࣗಈϥϕϧ෇༩  

           w .BYJNVNVOBWBJMBCMF1PET ,VCFSOFUFTW<BMQIB>  w 3PMMJOH6QEBUF࣌ͷ੍ޚ  IUUQTLVCFSOFUFTJPEPDTDPODFQUTXPSLMPBETDPOUSPMMFSTTUBUFGVMTFU ࣗಈతʹ෇༩͞ΕΔϥϕϧ NFUBEBUB MBCFMT BQQTLVCFSOFUFTJPQPEJOEFY֤1PEʹॱংΛࣔ͢ϥϕϧ͕෇༩ BQJ7FSTJPOBQQTW LJOE4UBUFGVM4FU TQFD VQEBUF4USBUFHZ SPMMJOH6QEBUF NBY6OBWBJMBCMFಉ࣌ʹΞοϓσʔτՄೳͳ1PE਺ w Ξοϓσʔτ଎౓ͷ࠷దԽ w αʔϏεՄ༻ੑͷҡ࣋ w Ϧιʔε࢖༻ޮ཰ͷ޲্ w τϥϑΟοΫϧʔςΟϯά w ϝτϦΫεϑΟϧλϦϯά w ϩάղੳͷޮ཰Խ
  16. ಈతϦιʔεׂΓ౰ͯ w%ZOBNJD3FTPVSDF"MMPDBUJPO %3"  w ಈతϦιʔεׂΓ౰ͯ͸1PEͱ$POUBJOFSؒͰϦιʔεΛཁٻɾڞ༗͢ΔͨΊͷ৽͍͠"1* w 1FSTJTUFOU7PMVNFTͷ"1*ΛҰൠతͳϦιʔε޲͚ʹ֦ுͨ͠΋ͷ w ओʹ(16ͳͲͷσόΠεϦιʔε؅ཧʹ࢖༻

    w ػೳͷ֓ཁͱಛ௃ w ͭͷ࣮૷Ξϓϩʔν w ίϯτϩʔϧϓϨʔϯίϯτϩʔϥʔํࣜ w ߏ଄ԽύϥϝʔλํࣜʢW"MQIBʣ  IUUQTLVCFSOFUFTJPEPDTDPODFQUTTDIFEVMJOHFWJDUJPOEZOBNJDSFTPVSDFBMMPDBUJPO %FWJDF$MBTTͷఆٛ BQJ7FSTJPOSFTPVSDFLTJPWBMQIB LJOE%FWJDF$MBTT NFUBEBUB OBNFHQVFYBNQMFDPN TQFD TFMFDUPST DFM FYQSFTTJPOEFWJDFESJWFSOWJEJBDPNHQV 3FTPVSDF$MBJN5FNQMBUFͷఆٛ BQJ7FSTJPOSFTPVSDFLTJPWBMQIB LJOE3FTPVSDF$MBJN5FNQMBUF NFUBEBUB OBNFHQVDMBJNUFNQMBUF TQFD TQFD EFWJDFT SFRVFTUT OBNFHQV EFWJDF$MBTT/BNFHQVFYBNQMFDPN 1PEͰͷར༻ BQJ7FSTJPOW LJOE1PE NFUBEBUB OBNFHQVQPE TQFD DPOUBJOFST OBNFNMUSBJOJOH JNBHFNMUSBJOJOHMBUFTU SFTPVSDFT DMBJNT OBNFHQVDMBJN SFTPVSDF$MBJNT OBNFHQVDMBJN SFTPVSDF$MBJN5FNQMBUF/BNFHQVDMBJNUFNQMBU w ͖Ίࡉ͔ͳϦιʔε੍ޚ w εέδϡʔϥʔͱͷ࿈ܞ w ΫϥελΦʔτεέʔϦϯάରԠ
  17. ʮ׬ᘳͳʯϚχϑΣετ͸ݬ૝Ͱ͋Δ wٕज़తͳਅ࣮ wʮ׬ᘳͳϚχϑΣετʯΛ௥ٻ͢Δ͜ ͱ͸ɺٕज़ͷਐԽͱӡ༻؀ڥͷઈ͑ؒ ͳ͍มಈͱ͍͏ݱ࣮ͷલͰ͸ݬ૝ʹա ͗ͣɺΉ͠ΖϚχϑΣετ͸૊৫ͷ஌ܙ ͱܦݧ͕৫Γࠐ·Εͨʮੜ͖ͨϚχϡ ϑΣετʯͱͯ͠ɺৗʹਐԽ͠ଓ͚Δ͜ ͱʹͦ͜ຊ࣭తͳՁ஋͕ଘࡏ͢Δɻ w࣮ફతͳΞϓϩʔν

    wมԽΛड͚ೖΕΔ͜ͱ΁ͷʮ఍߅ʯΛ ૊৫͔ΒऔΓআ͖ɺॊೈͳઃܭࢥ૝Λ ج൫ͱ͠ͳ͕ΒɺνʔϜશମͰͷ஌ࣝڞ ༗ͱ͍͏ʮू߹஌ʯͷྗΛ׆͔͠ɺ࣮ ݧతͳࢼߦͱ໌֬ͳه࿥ͱ͍͏྆ྠΛ ճ͢͜ͱͰɺ࣋ଓՄೳͳվળαΠΫϧΛ ཱ֬͢Δɻ  w ͢΂ͯͷঢ়گʹରԠͰ͖Δʮ׬ᘳͳʯϚχϑΣετ͸ଘࡏ͠ͳ͍ w ٕज़ͷਐԽʹ൐͏ܧଓతͳมԽ͸ෆՄආ w ӡ༻؀ڥͷมಈ͸ৗʹଘࡏ w ϚχϑΣετ͸ʮੜ͖͍ͯΔʯυΩϡϝϯτ w ׬ᘳΛ໨ࢦ͢ΑΓɺվળΛଓ͚Δ͜ͱ͕ॏཁ w ཁ݅͸ৗʹมԽ͢Δ͜ͱΛલఏͱ͢Δ w มԽΛड͚ೖΕΔॊೈͳ࢟੎ w ঢ়گʹԠͨ͡దԠతͳରԠ w ܧଓతͳվળͷॏཁੑ w มߋཤྺͷ໌֬ͳه࿥ w νʔϜ಺ͰͷφϨοδڞ༗ͷଅਐ w ςετ؀ڥͰͷੵۃతͳࢼߦ w ಋೖܦҢͷυΩϡϝϯτԽ w ཁ݅ͷ೺Ѳͱ෼ੳ
  18. ֤࣌఺Ͱͷ࠷దղΛ௥ٻ͢Δ wཁ݅ͷ೺Ѳͱ෼ੳ wʮ׬ᘳͳϚχϑΣετʯͱ͍͏ݬ૝Λ௥ ͍ٻΊΔͷͰ͸ͳ͘ɺΞϓϦέʔγϣϯ ΛऔΓרٕ͘ज़తɾ૊৫తɾ๏తཁ݅Λ ྫྷ੩ʹݟۃΊɺͦΕΒͷཁ݅ؒͷτϨʔ υΦϑΛҙࣝ͠ͳ͕Βɺݱ࣮తͳ੍໿ͷ தͰ࠷దͳόϥϯεΛ௥ٻ͢Δ͜ͱ͕ຊ ࣭తͳ՝୊ͱͳΔɻ w࣮૷Ξϓϩʔν

    wաڈͷ੒ޭମݧͱ͍͏ʮ҆શ஍ଳʯ͔Β ୤٫͠ɺ࠷৽ͷ஌ݟΛੵۃతʹऔΓೖΕ ͳ͕Β΋ɺγϯϓϧͳઃܭΛج൫ͱͯ͠ ஈ֊తͳਐԽΛ਱͛Δ͜ͱͰɺӡ༻σʔ λͱ͍͏ʮݱ࣮ʯʹج͍ͮͨҙࢥܾఆ ͱɺܧଓతͳٕज़ݕূͱ͍͏ʮ࣮ݧʯͷ όϥϯεΛอͪͳ͕Βɺॊೈ͔ͭ࣋ଓՄ ೳͳ࣮૷Λ࣮ݱ͢Δɻ  w ΞϓϦέʔγϣϯͷཁ݅Λਖ਼֬ʹཧղ w ӡ༻؀ڥͷಛੑΛ೺Ѳ w εέʔϥϏϦςΟཁ݅ͷఆٛ w ηΩϡϦςΟཁ݅ͷ໌֬Խ w νʔϜͷٕज़ελοΫͷߟྀ w ύϑΥʔϚϯεཁ݅ͷఆٛ w ίϯϓϥΠΞϯεཁ݅ͷ֬ೝ w ࠷৽ͷ஌ࣝͱ৘ใͷܧଓతͳऩू w ߋ৽͠ଓ͚͍ͯΔͷͰաڈͷ੒ޭମݧʹݻࣥ͠ͳ͍ w ঢ়گʹԠͨ͡ॊೈͳ൑அ w γϯϓϧͳॳظઃఆ͔Βͷஈ֊తͳ֦ு w ඞཁʹԠͨ͡ػೳͷ௥Ճ w ӡ༻σʔλʹجͮ͘ҙࢥܾఆ w ఆظతͳٕज़ݕূͷ࣮ࢪ
  19. มߋΛલఏͱͨ͠ઃܭ w۩ମతͳ࣮૷ํ๏ wʮཧ૝తͳઃܭʯͱ͍͏ݬ૝ʹनΘΕΔ͜ ͱͳ͘ɺγϯϓϧ͔ͭมߋ༰қͳج൫ઃܭ ͔Βελʔτ͠ɺ࣮ӡ༻σʔλ΍ٕज़ݕূ ͷ஌ݟΛੵΈॏͶͳ͕ΒɺϞδϡʔϧԽ͞ Εͨߏ੒ཁૉΛஈ֊తʹ֦ு͍ͯ͘͜͠ͱ Ͱɺݱ࣮ͷ੍໿ͱཁ݅ͷมԽʹॊೈʹରԠ Ͱ͖Δ࣋ଓՄೳͳΞʔΩςΫνϟΛ࣮ݱ͢ Δɻ

    wܧଓతվળ w೔ʑͷӡ༻͔ΒಘΒΕΔʮݱ৔ͷ੠ʯͱɺ ٕज़τϨϯυͱ͍͏ʮ࣌୅ͷைྲྀʯͷ྆ํ ʹࣖΛ܏͚ͳ͕ΒɺνʔϜશମͰͷφϨο δڞ༗Λ௨ͯ͡ू߹஌Λܗ੒͠ɺখ͞ͳվ ળͷੵΈॏͶ͕େ͖ͳՁ஋ΛੜΈग़͢ͱ͍ ͏৴೦ͷ΋ͱɺઈ͑ؒͳ͍ਐԽΛଓ͚Δ͜ ͱͰ૊৫ͷٕज़త੒ख़౓ΛߴΊ͍ͯ͘ɻ  w $PO fi H.BQͷઓུత׆༻ w ؀ڥม਺ͷ֎෦Խ w ґଘؔ܎ͷ໌ࣔతͳ؅ཧ w όʔδϣϯ؅ཧͷపఈʢ(JU౳ʣ w ϞδϡʔϧԽ͞Εͨઃܭ w υΩϡϝϯτͷࣗಈੜ੒ w ઃఆͷ֊૚Խ w มߋཤྺͷৄࡉͳه࿥ w কདྷͷӡ༻ෛ୲ͷܰݮ w มߋʹର͢ΔॊೈͳରԠ w ϝϯςφϯεੑͷ޲্ w τϥϒϧγϡʔςΟϯάͷ༰қ͞ w ϩʔϧόοΫͷ࣮ݱੑ w νʔϜؒͷڠۀޮ཰޲্ w ࣗಈԽͷଅਐ w ӡ༻σʔλʹجͮ͘࠷దԽ
  20. ஌ࣝڞ༗ͱܧଓతվળ w৘ใऩूͱධՁ w ,&1΍ηΩϡϦςΟΞυόΠβϦʔͱ͍ͬͨʮެ ࣜͳ৘ใݯʯͱɺίϛϡχςΟ͔Βͷ஌ݟͱ͍͏ ʮݱ৔ͷӥஐʯΛ૊Έ߹Θͤͳ͕Βɺӡ༻σʔλ ΍Πϯγσϯτ෼ੳ͔ΒಘΒΕΔʮ࣮ફ஌ʯΛମ ܥతʹऩूɾධՁ͢Δ͜ͱͰɺҙࢥܾఆͷ࣭Λߴ Ίɺ༧ଌతͳվળΞϓϩʔνΛ࣮ݱ͢Δج൫Λߏ ங͢Δɻ

    wνʔϜӡӦͱφϨοδ؅ཧ wఆظతͳνʔϜϛʔςΟϯά΍ϨϏ ϡʔϓϩηεͱ͍͏ʮܗࣜ஌Խ͞Ε ͨ৔ʯΛ௨ͯ͡҉໧஌ΛՄࢹԽ͠ɺ ͦΕΒΛυΩϡϝϯτ΍τϨʔχϯ άࢿྉͱͯ͠ʮ࠶ར༻Մೳͳࢿ࢈ʯ ʹঢ՚ͤ͞Δ͜ͱͰɺݸਓͷܦݧ΍ ஌ࣝΛ૊৫શମͷࡒ࢈ͱͯ࣋͠ଓత ʹ׆༻Ͱ͖Δ࢓૊ΈΛཱ֬͢Δɻ  w ,&1ʢ,VCFSOFUFT&OIBODFNFOU1SPQPTBMʣͷఆظతͳνΣοΫ w ίϛϡχςΟ৘ใͷੵۃతͳऩू w ӡ༻σʔλͷܧଓతͳ෼ੳ w ηΩϡϦςΟΞυόΠβϦʔͷ؂ࢹ w ύϑΥʔϚϯεϝτϦΫεͷऩू w ϢʔβʔϑΟʔυόοΫͷ׆༻ w Πϯγσϯτ෼ੳ͔Βͷֶश w ఆظతͳνʔϜϛʔςΟϯάͷ࣮ࢪ w ϖΞ࡞ۀతͳ w ϨϏϡʔϓϩηεͷཱ֬ w υΩϡϝϯτͷܧଓతͳߋ৽ w ઃఆ΍ӡ༻ϊ΢ϋ΢ͷڞ༗ w ஌ࣝͷଐਓԽ๷ࢭ w τϨʔχϯάࢿྉͷ੔උ w ϕετϓϥΫςΟεͷจॻԽ
  21. ਪ঑͍ͨ͠ॻ੶  IUUQTMFBSOJOHPSFJMMZDPNMJCSBSZWJFXLVCFSOFUFTCFTUQSBDUJDFT IUUQTMFBSOJOHPSFJMMZDPNMJCSBSZWJFXLVCFSOFUFTQBUUFSOTOE w ,VCFSOFUFT#FTU1SBDUJDFT OE&EJUJPO w ΞϓϦέʔγϣϯ։ൃ͔Β(JU0QT΍ΧΦεΤϯδχΞϦϯά ·Ͱͷ࠷৽ϓϥΫςΟεΛ໢ཏ͠ɺ࣮ಋೖࣄྫ͔ΒಘΒΕͨڭ

    ܇ΛؚΊΔ͜ͱͰɺ,VCFSOFUFTΤίγεςϜͷશମ૾ͱ࣮ ફతͳ׆༻ํ๏Λਂ͘ཧղͰ͖ΔҰ࡭ͱͳ͍ͬͯ·͢ɻ w ,VCFSOFUFT1BUUFSOT OE&EJUJPO w جૅ͔ΒΦϖϨʔλʔύλʔϯ·Ͱͷମܥతͳઃܭݪଇͱ۩ ମతͳ࣮૷ྫΛ௨ͯ͡ɺΫϥ΢υωΠςΟϒΞϓϦέʔγϣ ϯͷཧ૝తͳΞʔΩςΫνϟͱҰൠతͳམͱ݀͠Λแׅతʹ ཧղ͢Δ͜ͱ͕Ͱ͖Δࣔࠦʹ෋ΜͩΨΠυͱͳ͍ͬͯ·͢ɻ w ೔ຊޠ൛͕ʮ,VCFSOFUFTύλʔϯୈ൛ʯͱͯ͠ग़൛͞Ε ͍ͯΔ
  22. Copyrights©3-shake Inc. All Rights Reserved. 1. Pod ͷॳظԽॲཧ 2. Pod

    ͷఀࢭલͷॲཧ 3. ϔϧενΣοΫ 4. ઃఆͷ؅ཧ 5. ϝϯςφϯεͱΞοϓάϨʔυ 6. Pod ͷϦιʔεׂΓ౰ͯ 7. εέδϡʔϦϯά 8. Φʔτεέʔϧ 9. ετϨʔδ 10.ೝূͱೝՄ 11.ωοτϫʔΫͷΞΫηε੍ݶ 12.ϚχϑΣετͷ؅ཧ
  23. 1PEͷॳظԽॲཧ w ίϯςφىಈ࣌ʹॲཧΛߦ͏ w &/53:10*/5Ͱ࣮ߦ͢ΔίϚϯυͷதʹॲཧΛॻ͘ w TQFDDPOUBJOFST<>DPNNBOEͰ&/53:10*/5Λ্ॻ͖Մೳ w ॳظԽॲཧ༻ͷίϚϯυΛ࣮ߦ͔ͯ͠ΒΞϓϦέʔγϣϯΛىಈ w

    ΞϓϦέʔγϣϯͷϓϩηε͕1*%ʹͳΔΑ͏ʹ͢Δ͜ͱ w ॳظԽॲཧʹֻ͕͔࣌ؒΔ৔߹͸ɺϔϧενΣοΫͷௐ੔͕ඞཁ w 3FBEJOFTT-JWFOFTT1SPCF͕࠷ॳʹ࣮ߦ͞ΕΔ·Ͱͷ࣌ؒΛ૿΍͢ w 4UBSUVQ1SPCFͰॳظԽॲཧ͕׬ྃͨ͠Β0,Λฦ͢Α͏ʹ w 1PTU4UBSU)PPLͰϝΠϯͷίϯςφىಈޙʹॳظԽॲཧΛ࣮ߦ͢Δ w ϝΠϯͷίϯςφ͕ىಈ͢ΔલʹॳظԽॲཧ͕ඞཁͳ৔߹͸μϝ  IUUQTLVCFSOFUFTJPEPDTUBTLTDPO fi HVSFQPEDPOUBJOFSDPO fi HVSFQPEJOJUJBMJ[BUJPO
  24. 1PEͷॳظԽॲཧ w JOJU$POUBJOFSͰϝΠϯͷίϯςφىಈલʹ࣮ߦ w ผϓϩηεͰͷ࣮ߦͳͷͰஆػӡసʹ͸޲͔ͳ͍ w ॳظԽ༻ͷॲཧΛ࣮ߦ͢ΔίϯςφΛىಈ w JOJU$POUBJOFS͸1PEશମͷॳظԽॲཧ༻ w

    1PE࠶ىಈ࣌ʹJOJU$POUBJOFS͸࠶࣮ߦ͞Εͳ͍ w IUUQTJTTVFTLTJP  kind: Deployment apiVersion: apps/v1 metadata: name: test labels: name: test spec: selector: matchLabels: app: "test" template: metadata: name: test labels: app: "test" spec: initContainers: - name: sleep image: alpine:3.18 command: ["sleep", "1s"] containers: - name: test image: alpine:3.18 command: ["exit", "1"] + test-6b8c8b5548-pk9z8 › sleep - test-6b8c8b5548-pk9z8 › sleep + test-6b8c8b5548-pk9z8 › test - test-6b8c8b5548-pk9z8 › test + test-6b8c8b5548-pk9z8 › test - test-6b8c8b5548-pk9z8 › test IUUQTLVCFSOFUFTJPEPDTUBTLTDPO fi HVSFQPEDPOUBJOFSDPO fi HVSFQPEJOJUJBMJ[BUJPO
  25. 1PEͷఀࢭલͷॲཧ w 1PE͕ఀࢭ͢Δͱ֤ίϯςφʹ4*(5&3.͕ඈͿ w άϨʔεϑϧγϟοτμ΢ϯͰطଘͷϦΫΤετॲཧΛऴΘΒͤΕ͹0,ʁ w ϩʔυόϥϯαʔ΍4FSWJDF͔Β֎ΕΔͷʹֻ͕͔࣌ؒΔ w ٸʹ৽نίωΫγϣϯͷड෇ΛࢭΊΔͱYYʹܨ͕Δ w

    1SF4UPQ)PPLͰಛఆͷ࣌ؒTMFFQͯ͠4*(5&3.͕དྷΔͷΛ஗ΒͤΔ w όονॲཧͷ৔߹͸4*(5&3.Λड͚ͨޙͷॲཧΛਖ਼࣮͘͠૷͢Δ͜ͱ w ॲཧͷ్தͩͱݩʹ໭͢ w ॲཧͷ్த݁ՌΛ֎෦ʹه࿥͢Δ  IUUQTLVCFSOFUFTJPEPDTDPODFQUTXPSLMPBETQPETQPEMJGFDZDMF
  26. ϔϧενΣοΫ w ਖ਼ৗͰͳ͍1PEʹϢʔβʔͷϦΫΤετ͕ߦ͘ͱʁ w ϦΫΤετΛॲཧͰ͖ͣΤϥʔʹͳΔ w ϢʔβʔͷετϨε͕ཷ·Δ w ਖ਼ৗͰͳ͍1PEΛ4FSWJDF͔Β֎͍ͨ͠ w

    4FSWJDF͔Βআ֎͢Δ αʔϏεΞ΢τ͢Δ ͱӨڹΛ཈͑ΒΕΔ w ਖ਼ৗ͔ਖ਼ৗͰͳ͍͔Ͳ͏΍ͬͯ൑அ͢Δʁ w ΞϓϦέʔγϣϯଆͰϔϧενΣοΫ༻ͷΤϯυϙΠϯτΛ࣮૷ w FH ৗʹ0,Λฦ͢ w FH αʔϏεΛఏڙ͢Δ४උ͕Ͱ͖ͨΒ0,Λฦ͠ɺ αʔϏεΛఏڙͰ͖ͳ͍৔߹ʹΛฦ͢  IUUQTLVCFSOFUFTJPEPDTUBTLTDPO fi HVSFQPEDPOUBJOFSDPO fi HVSFMJWFOFTTSFBEJOFTTTUBSUVQQSPCFT
  27. ϔϧενΣοΫ w -JWFOFTT1SPCF w ϓϩηε͕σουϩοΫ͍ͯ͠ͳ͍͔ͷࢮ׆؂ࢹ w Ұఆճ਺ࣦഊ͢Δͱ1PEΛ࠶ىಈ͢Δ w 3FBEJOFTT1SPCF w

    αʔϏεΠϯ͢Δ४උ͕Ͱ͖͍ͯΔ͔ w Ұఆճ਺ࣦഊ͢Δͱ4FSWJDF͔Β֎ΕΔ w 1PEʹ઀ଓ͕͍͔ͳ͘ͳΔ w 4UBSUVQ1SPCF w 1PEͷॳظԽॲཧʹֻ͕͔࣌ؒΔ৔߹ʹ࢖༻ w 4UBSUVQ1SPCF͕੒ޭ͠ͳ͍ݶΓ-JWFOFTT3FBEJOFTT1SPCF͸࣮ߦ͞Εͳ͍  Kubernetes ͷ Probe ͷ࢓૊Έͱߟྀ఺ IUUQT[FOOEFWUPWFSTVTBSUJDMFTEG
  28. ઃఆͷ؅ཧ w ιʔείʔυʹઃఆΛຒΊࠐΉͷ͸ՄೳͳݶΓආ͚Δ w ؀ڥຖʹઃఆΛม͑ͨͯ͘΋ม͑ΒΕͳ͍ w $PO fi H.BQ w

    ઃఆϑΝΠϧ΍؀ڥม਺Λ1PEʹຒΊࠐΉ w ίϯςφΠϝʔδ಺ͷઃఆϑΝΠϧͷ্ॻ͖΋Ͱ͖Δ w ಉҰͷίϯςφΠϝʔδΛ࢖ͬͯɺ$PO fi H.BQͰ؀ڥͷࠩ෼Λѻ͏ w 4FDSFU w σʔλϕʔεͷ઀ଓઌ৘ใͳͲͷൿີ৘ใΛؚΉ৔߹ʹ࢖༻ w #BTFΤϯίʔυ͍ͯ͠Δ͚ͩͳͷͰൿີ৘ใͷ؅ཧ͸ผͰߦ͏ w 4FDSFU.BOBHFS 7BVMU ʜ  IUUQTLVCFSOFUFTJPEPDTDPODFQUTDPO fi HVSBUJPO
  29. ϝϯςφϯεͱΞοϓάϨʔυ w ,VCFSOFUFTͷϝϯςφϯε w ,VCFSOFUFTͷϊʔυͰҟৗ͕ى͖ͨ৔߹ʹର৅ͷϊʔυΛআ֎ w ,VCFSOFUFTͷόʔδϣϯߋ৽ w ,VCFSOFUFTͷ৽͍͠ػೳΛ࢖͍͍ͨ w

    ,VCFSOFUFTʹؔΘΔ੬ऑੑΛमਖ਼͍ͨ͠ w ,VCFSOFUFTͷόʔδϣϯ͸ϲ݄ ϲ݄Ͱ&P-Λܴ͑Δ w ఆظతʹߋ৽͢Δඞཁ͕͋Δ w ΤίγεςϜ܈ʹҾͬுΒΕͯΞοϓάϨʔυΛ༨ّͳ͘͞ΕΔ͜ͱ΋͋Δ  IUUQTLVCFSOFUFTJPEPDTUBTLTBENJOJTUFSDMVTUFSDMVTUFSVQHSBEF
  30. ϝϯςφϯεͱΞοϓάϨʔυ w ,VCFSOFUFTͷόʔδϣϯߋ৽ͷઓུ w Ϋϥελ੾Γସ͑ w ΫϥελΛ৽͘͠࡞੒ͯ͠Ҡߦ w ҆શ͕ͩɺ޻਺ֻ͕͔Δ w

    JOQMBDFߋ৽ w طଘͷΫϥελͷόʔδϣϯΛߋ৽ w ໰୊͕ى͖ͨ࣌ͷ੾Γ໭͕͠ࠔ೉͕ͩɺ޻਺͸গͳ͘͢Ή  IUUQTLVCFSOFUFTJPEPDTUBTLTBENJOJTUFSDMVTUFSDMVTUFSVQHSBEF
  31. ϝϯςφϯεͱΞοϓάϨʔυ w JOQMBDFߋ৽ͷखॱ w ίϯτϩʔϧϓϨʔϯͷόʔδϣϯΛߋ৽ w ৽͍͠ϊʔυΛ࡞੒ͯ͠Ϋϥελʹ௥Ճ w ݹ͍ϊʔυΛϝϯςφϯεঢ়ଶʹͯ͠1PEΛҠಈ &WJDU

     w ݹ͍ϊʔυΛ࡟আ w ৽͍͠ϊʔυΛ࡞੒ͯ͠Ϋϥελʹ௥Ճ w ʜ  IUUQTLVCFSOFUFTJPEPDTUBTLTBENJOJTUFSDMVTUFSDMVTUFSVQHSBEF
  32. ϝϯςφϯεͱΞοϓάϨʔυ w ,VCFSOFUFTͷϊʔυΛϝϯςφϯεঢ়ଶʹ͢Δ w ϗετϚγϯͷҟৗ΍ϊΠδʔωΠόʔʹΑΓύϑΥʔϚϯεӨڹ͕ w ,VCFSOFUFTͷΞοϓάϨʔυ࡞ۀͰ৽͍͠όʔδϣϯͷϊʔυʹҠߦ͍ͨ͠ w $PSEPO w

    ϊʔυʹ͜ΕҎ্1PE͕εέδϡʔϧ͞Εͳ͍Α͏ʹ͢Δ w %SBJO w $PSEPO ϊʔυ্ͷ1PEΛผͷϊʔυʹୀආ͢Δ w 1PEΛՄೳͳݶΓ҆શʹୀආͯ͠࠶εέδϡʔϧΛཁٻ͢Δ w 1PE%JTSVQUJPO#VEHFU 1%# Λߟྀͯ͠Ҡಈͯ͘͠ΕΔͷͰઃఆਪ঑  IUUQTLVCFSOFUFTJPEPDTUBTLTBENJOJTUFSDMVTUFSDMVTUFSVQHSBEF
  33. 1PEͷϦιʔεׂΓ౰ͯ w ,VCFSOFUFTͰαϙʔτ͍ͯ͠ΔϦιʔεͷछྨ w $16 w ϝϞϦ w ೚ҙͷϦιʔε FH(16

    '1(" ʜ  w $16ͷ୯Ґ w ઈରྔͱͯ͠ද͢ w W$16ͷϊʔυͷ$16ཁٻ͕ͷ৔߹͸W$16 w W$16ϛϦ$16ϛϦίΞ w ϝϞϦͷ୯Ґ w (JΪϏόΠτ㲈(#ΪΨόΠτ  IUUQTLVCFSOFUFTJPEPDTUBTLTDPO fi HVSFQPEDPOUBJOFSBTTJHODQVSFTPVSDF
  34. 1PEͷϦιʔεׂΓ౰ͯ w 3FRVFTUT SFTPVSDFTSFRVFTUT  w $16΍ϝϞϦཁٻ w ϊʔυ্ͷίϯςφͷ$16ཁٻͷ߹ܭͰ෼ׂ͞ΕΔ w

    ϊʔυ্ʹ1PEΛεέδϡʔϧ͢Δࡍʹ࢖༻ w Ͳͷϊʔυ΋Ϧιʔεෆ଍ͩͱ1PE͸1FOEJOHঢ়ଶʹ w -JNJUT SFTPVSDFTMJNJUT  w $16΍ϝϞϦׂΓ౰ͯͷ্ݶ w $16ͷ৔߹͸௒͑ͯ΋εϩοτϦϯά͞ΕΔ w ϝϞϦ্ݶΛ௒͑Δͱ00.,JMM͞ΕΔ  apiVersion: v1 kind: Pod metadata: name: nginx spec: containers: - name: nginx image: nginx:1.25.1 resources: limits: memory: 200Mi cpu: 700m requests: memory: 200Mi cpu: 700m IUUQTLVCFSOFUFTJPEPDTUBTLTDPO fi HVSFQPEDPOUBJOFSBTTJHODQVSFTPVSDF
  35. 1PEͷϦιʔεׂΓ౰ͯ w $PNQMFUFMZ'BJS4DIFEVMFS $'4  w -JOVYͷσϑΥϧτͷ$16εέδϡʔϥʔ w ϓϩηεͷ$16࣌ؒ͸ॏΈ෇͚͞Εͯฏ౳ʹ෼ׂ͞ΕΔ w

    ,VCFSOFUFT͸༏ઌ౓෇͚ʹOJDF஋Λ࢖͍ͬͯͳ͍ w $16-JNJUTΛࢦఆ͠ͳ͍৔߹ɺDHSPVQຖͷ$16TIBSFTͷ஋Ͱ෼ׂ w ͭͷ1PE͕   Ͱ$16ཁٻ w ͭͷ1PE͕$16࣌ؒΛ☼ ☼ ☼ ¢࢖༻  https://medium.com/directeam/kubernetes-resources-under-the-hood-part-2-6eeb50197c44
  36. 1PEͷϦιʔεׂΓ౰ͯ w $PNQMFUFMZ'BJS4DIFEVMFS $'4  w $16-JNJUT͕͋Δ৔߹͸ɺ$HSPVQCBOEXJEUIDPOUSPM͕ൃಈ w NTͷλΠϜ΢Οϯυ΢ʹ෼ׂ͞ΕɺNT NT͔͠࢖͑ͳ͍

    w NTͷ಺ͷNTΛ࢖ͬͨΒεϩοτϦϯά͞ΕΔ w NTͰऴΘ͍ͬͯͨॲཧ͕NT  NTNTֻ͔Δ  https://engineering.indeedblog.com/blog/2019/12/unthrottled-fixing-cpu-limits-in-the-cloud/ 200m ͷ CPU ཁٻͰ CPU ্ݶ͕ͳ͍ 200m ͷ CPU ੍ݶͱ 400m ͷ CPU ্ݶ
  37. εέδϡʔϦϯά w LVCFTDIFEVMFS͕1PEΛϊʔυʹׂΓ౰ͯΔ w 1PEΛ࡞੒͢Δͱ͖ʹ௨ৗOPEF/BNF͸ࢦఆ͠ͳ͍ w खಈͰࢦఆՄೳ͕ͩɺͦͷ৔߹͸LVCFTDIFEVMFS͕ؔΘΒͳ͍ w ϊʔυʹे෼ͳۭ͖Ϧιʔε͕ͳ͍ͱɺ1PEͷىಈʹࣦഊ FH0VU0G$16

     w ϊʔυʹׂΓ౰ͯΒΕ͍ͯͳ͍1FOEJOHঢ়ଶͳ1PEΛݕग़ w Ωϡʔͷத͔Β1FOEJOHঢ়ଶͳ1PEΛऔಘ w 1PEͷϦιʔεཁٻͳͲͷ৚݅ʹ߹Θͳ͍ϊʔυΛআ֎ w ࢒ͬͨϊʔυ͔Β࠷దͳϊʔυ΁഑ஔ  IUUQTLVCFSOFUFTJPEPDTDPODFQUTTDIFEVMJOHFWJDUJPOLVCFTDIFEVMFS
  38. εέδϡʔϦϯά w /PEF4FMFDUPS w 1PEΛಛఆͷϥϕϧ͕෇༩͞Εͨϊʔυʹ഑ஔ w /PEF" ffi OJUZ/PEF"OUJ" ff

    i OJUZ w /PEF4FMFDUPSͱ΍ͬͯΔ͜ͱ͸ಉ͕ͩ͡ɺϧʔϧΛॊೈʹઃఆՄೳ w ඞͣ৚݅Λຬͨ͢PSग़དྷΔ͚ͩ৚݅Λຬͨ͢ w 1PE5PQPMPHZ4QSFBE$POTUSBJOUT w κʔϯ΍Ϧʔδϣϯʹލͬͯ1PEΛͲ͏഑ஔ͢Δ͔ͷϧʔϧΛॊೈʹઃఆՄೳ w 5BJOUT5PMFSBUJPOT w ϊʔυͷ؍఺͔Β1PEΛ഑ஔ͢Δɾ͠ͳ͍ΛઃఆՄೳ  IUUQTLVCFSOFUFTJPEPDTDPODFQUTTDIFEVMJOHFWJDUJPOLVCFTDIFEVMFS
  39. ΦʔτεέʔϦϯά w )PSJ[POUBM1PE"VUPTDBMFS w 1PEͷ୆਺Λ૿ݮͤͯ͞ਫฏํ޲ʹεέʔϦϯά w .FUSJDT4FSWFS΍֎෦ͷϝτϦΫεΛݟͯ൑அ w 7FSUJDBM1PE"VUPTDBMFS w

    1PEͷϦιʔεׂΓ౰ͯΛมߋͯ͠ਨ௚ํ޲ʹεέʔϦϯά w .FUSJDT4FSWFSͷϝτϦΫεΛݟͯ൑அ w $MVTUFS"VUPTDBMFS w ,VCFSOFUFTͷϊʔυΛਫฏํ޲ʹεέʔϦϯά w Ϧιʔεෆ଍Ͱ1FOEJOHঢ়ଶͳ1PEΛݕ஌ͯ͠ϊʔυΛ௥Ճͯ͘͠ΕΔ w Ϧιʔεͷۭ͖͕ଟ͍ϊʔυΛݟ͚ͭͯϊʔυΛ࡟আͯ͘͠ΕΔ 
  40. ετϨʔδ w $POUBJOFS4UPSBHF*OUFSGBDF $4* ʹ४ڌͨ͠υϥΠόΛ࢖༻ w Ϋϥ΢υϓϩόΠμʔ΍ϕϯμʔ͕υϥΠόΛఏڙ͍ͯ͠Δ͜ͱ͕ଟ͍ w Ϣʔβʔ͸$4*υϥΠόΛΠϯετʔϧͯ͠࢖͏ w

    $4*υϥΠόʹΑͬͯػೳ͕Ұ෦ҟͳΔ w ӬଓϘϦϡʔϜͷಈతϓϩϏδϣχϯά w ϘϦϡʔϜͷεφοϓγϣοτͱϦετΞ w ϘϦϡʔϜͷϦαΠζ w ΞΫηεϞʔυ w 3FBE8SJUF0ODF w 3FE8SJUF.BOZ  IUUQTLVCFSOFUFTJPCMPHDPOUBJOFSTUPSBHFJOUFSGBDFHB
  41. ετϨʔδ w ,VCFSOFUFTΫϥελͷ؅ཧऀ͕4UPSBHF$MBTTΛ࡞੒ w Ͳͷ$4*υϥΠόΛ࢖༻͢Δ͔ w ϘϦϡʔϜͷ࠶ར༻ϙϦγʔ w 17$͕࡟আ͞Εͨ࣌ʹ17ͱཪଆͷσΟεΫΛ࡟আ͢Δ͔ w

    $4*υϥΠόʹ౉͢ύϥϝʔλͷࢦఆ w $4*υϥΠόͷ࣮૷ʹΑΓҟͳΔ w ϘϦϡʔϜͷϦαΠζػೳͷ༗ޮԽ w $4*υϥΠόͷ࣮૷ʹΑΓҟͳΔ w ࠶࡞੒ͳ͠Ͱ૿΍͢͜ͱ͕Ͱ͖Δ w ݮΒ͢͜ͱ͸Ͱ͖ͳ͍  apiVersion: storage.k8s.io/v1 kind: StorageClass metadata: name: csi-gce-pd provisioner: pd.csi.storage.gke.io parameters: type: pd-standard volumeBindingMode: WaitForFirstConsumer allowVolumeExpansion: true reclaimPolicy: Delete IUUQTLVCFSOFUFTJPEPDTDPODFQUTTUPSBHF
  42. ετϨʔδ w Ϣʔβʔ͕1FSTJTUFOU7PMVNF$MBJN 17$ ࡞੒ w Ͳͷ4UPSBHF$MBTTΛ࢖༻͢Δ͔ w ෷͍ग़͢σΟεΫ༰ྔ w

    ΞΫηεϞʔυ w Ϣʔβʔ͕1PEʹ17$Λඥ෇͚ w Ͳͷ17$ΛͲ͜ʹϚ΢ϯτ͢Δ͔ w %FQMPZNFOUͷϨϓϦΧ਺͕ͰࠔΔ w શͯͷ1PEͰ17Λڞ༗͠Α͏ͱ͢Δ w 3FBE8SJUF.BOZͳϘϦϡʔϜ͔͠࢖͑ͳ͍  apiVersion: v1 kind: PersistentVolumeClaim metadata: name: pvc-demo spec: accessModes: ["ReadWriteOnce"] resources: requests: storage: 30Gi storageClassName: standard-rwo --- kind: Pod apiVersion: v1 metadata: name: pod-demo spec: volumes: - name: pvc-demo-vol persistentVolumeClaim: claimName: pvc-demo containers: - name: pod-demo image: nginx volumeMounts: - mountPath: "/usr/share/nginx/html" name: pvc-demo-vol IUUQTLVCFSOFUFTJPEPDTDPODFQUTTUPSBHF
  43. ετϨʔδ w Ϣʔβʔ͕4UBUFGVM4FUΛ࡞੒ w WPMVNF$MBJN5FNQMBUFͰJOMJOFࢦఆՄೳ w ϨϓϦΧ਺͕૿͑Δͱ17͕৽͘͠෷͍ग़͞ΕΔ w 3FBE8SJUF0ODFͳϘϦϡʔϜ΋0, w

    WPMVNF$MBJN5FNQMBUF͸ෆมͳͷͰޙͰมߋແཧ  apiVersion: apps/v1 kind: StatefulSet metadata: name: mysql spec: selector: matchLabels: app: mysql replicas: 3 template: metadata: labels: app: mysql spec: containers: - name: mysql image: mysql:8.0 volumeMounts: - name: mysql-data mountPath: /data volumeClaimTemplates: - metadata: name: mysql-data spec: accessModes: [ "ReadWriteOnce" ] resources: requests: storage: 20Gi IUUQTLVCFSOFUFTJPEPDTDPODFQUTTUPSBHF
  44. ೝূͱೝՄ w ೝূͱೝՄͷҧ͍ w ೝূ͸૬खͷ਎ݩΛ֬ೝ͢Δ͜ͱ w FH Ϋϥ΢υϓϩόΠμʔͷ0"VUIೝূͰ਎ݩΛ֬ೝ w FH

    4FSWJDF"DDPVOUͷτʔΫϯݕূͰ਎ݩΛ֬ೝ w ೝՄ͸ݖݶΛ༩͑Δ͜ͱ w FH 3PMF3PMF#JOEJOHͳͲͰݖݶΛ༩͑Δ w 3PMF#BTFE"DDFTT$POUSPM 3#"$  w σϑΥϧτͰ3#"$ͰೝՄ w 3PMF$MVTUFS3PMF w 3PMF#JOEJOH$MVTUFS3PMF#JOEJOH  ൴͸ OK ൴͸ NG Aͱ͍͏ ૢ࡞ IUUQTLVCFSOFUFTJPKBEPDTSFGFSFODFBDDFTTBVUIOBVUI[BVUIFOUJDBUJPO
  45. ೝূͱೝՄ w ೝՄͷϧʔϧ w Ϧιʔε w %FQMPZNFOU w 4FSWJDF w

    &OEQPJOU4MJDF w $PO fi H.BQ w ʜ  ◦ ૢ࡞ ▪ * (શͯͷॲཧ) ▪ create ▪ delete ▪ get ▪ list ▪ update ▪ patch ▪ watch IUUQTLVCFSOFUFTJPKBEPDTSFGFSFODFBDDFTTBVUIOBVUI[BVUIFOUJDBUJPO
  46. ೝূͱೝՄ w ,VCFSOFUFTͷϦιʔε w OBNFTQBDFʹดͨ͡ͷϦιʔε w ΫϥελશମͷϦιʔε w 3PMF3PMF#JOEJOH w

    ಛఆͷOBNFTQBDFʹଐ͢ΔϦιʔεΛૢ࡞ w $MVTUFS3PMF$MVTUFS3PMF#JOEJOH w ΫϥελείʔϓͷϦιʔεΛૢ࡞ w OBNFTQBDFʹดͨ͡Ϧιʔε͕ͩɺશOBNFTQBDFͷϦιʔεΛૢ࡞͍ͨ͠ w $MVTUFS3PMF͸಺෦ίϯϙʔωϯτ༻΍ࣄલఆٛ͞Εͨ΋ͷ͕࠷ॳ͔Β͋Δ w ͱ͸͍͑$MVTUFS3PMFΛ࡞ͬͯ࢖͏ํ͕҆શ  apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: name: cluster-admin rules: - apiGroups: - '*' resources: - '*' verbs: - '*' - nonResourceURLs: - '*' verbs: - '*' IUUQTLVCFSOFUFTJPKBEPDTSFGFSFODFBDDFTTBVUIOBVUI[BVUIFOUJDBUJPO
  47. ೝূͱೝՄ  apiVersion: v1 kind: ServiceAccount metadata: name: web namespace:

    demo kind: Role apiVersion: rbac.authorization.k8s.io/v1 metadata: name: web-rw-deployment namespace: demo rules: - apiGroups: [""] resources: ["pods"] verbs: ["get", "list", "watch"] - apiGroups: ["apps"] resources: ["deployments"] verbs: ["get", "list", "watch", "create", "update", "patch", "delete"] kind: RoleBinding apiVersion: rbac.authorization.k8s.io/v1 metadata: name: web-rw-deployment namespace: demo subjects: - kind: ServiceAccount name: web namespace: demo roleRef: kind: Role name: web-rw-deployment apiGroup: rbac.authorization.k8s.io IUUQTLVCFSOFUFTJPKBEPDTSFGFSFODFBDDFTTBVUIOBVUI[BVUIFOUJDBUJPO
  48. ೝূͱೝՄ w ΫϥΠΞϯτͱLVCFBQJTFSWFSͷೝূ w LVCFDPO fi HϑΝΠϧΛੜ੒ dLVCFDPO fi H

     w ઀ଓઌ΍ೝূํ๏͕هࡌ͞Ε͍ͯΔ w ࣗ෼Ͱॻ͘͜ͱ͸΄΅ͳ͍ w Ϋϥ΢υϓϩόΠμʔ͸0"VUIೝূͱ࿈ܞՄೳ w Ϋϥ΢υϓϩόΠμʔͷೝূ৘ใ͕࢖͑Δ w ೝূ༻ͷQMVHJOΛఏڙ w ෳ਺ͷΫϥελΛར༻͍ͯ͠Δ৔߹ w LVCFDUMDPO fi HVTFDPOUFYUΛ੾Γସ͑Δ w LVCFDUY LVCJFͳͲͷπʔϧΛ࢖༻  apiVersion: v1 kind: Config clusters: - cluster: certificate-authority-data: **** server: https://***.***.***.*** name: sample-cluster contexts: - context: cluster: sample-cluster user: sample-cluster name: sample-cluster current-context: sample-cluster users: - name: sample-cluster user: exec: apiVersion: client.authentication.k8s.io/v1beta1 command: gke-gcloud-auth-plugin provideClusterInfo: true IUUQTLVCFSOFUFTJPKBEPDTSFGFSFODFBDDFTTBVUIOBVUI[BVUIFOUJDBUJPO
  49. ೝূͱೝՄ w 1PEʹ4FSWJDF"DDPVOUΛׂΓ౰ͯͳ͍ͱ w EFGBVMUͱ͍͏໊લͷ4FSWJDF"DDPVOUׂ͕Γ౰ͯΒΕΔ w OBNFTQBDFΛ࡞੒͢Δͱࣗಈతʹ࡞੒͞ΕΔ4FSWJDF"DDPVOU w ଞͷ1PE΋EFGBVMUͷ4FSWJDF"DDPVOUΛϚ΢ϯτ w

    ୭͔͕EFGBVMUͷ4FSWJDF"DDPVOUʹڧ͍ݖݶΛ෇༩ͨ͠Βʁ w EFGBVMUͷ4FSWJDF"DDPVOUͷڞ༗͸ඇਪ঑  IUUQTLVCFSOFUFTJPKBEPDTSFGFSFODFBDDFTTBVUIOBVUI[BVUIFOUJDBUJPO
  50. ೝূͱೝՄ w 1PE͕ඞཁͳݖݶ͸ͦΕͧΕͰઃఆ͢Δ w 4FSWJDF"DDPVOU w 3PMF3PMF#JOEJOH w $MVTUFS3PMF$MVTUFS3PMF#JOEJOH w

    Ϋϥελશମͷ,VCFSOFUFTϦιʔεΛૢ࡞͠ͳ͍ͳΒෆཁ w 1PE͕,VCFSOFUFTϦιʔεΛૢ࡞͠ͳ͍৔߹΋4FSWJDF"DDPVOU͸࡞Δ w ݖݶΛඥ෇͚ͳ͚Ε͹Կ΋Ͱ͖ͳ͍ͷͱಉ͡  IUUQTLVCFSOFUFTJPKBEPDTSFGFSFODFBDDFTTBVUIOBVUI[BVUIFOUJDBUJPO
  51. ೝূͱೝՄ w 4FSWJDF"DDPVOUͷτʔΫϯͷ؅ཧ w 1PEʹ4FSWJDF"DDPVOUΛඥ෇͚Δͱ,VCFSOFUFT͕ྑ͍ײ͡ʹ΍ͬͯ͘ΕΔ w #PVOE4FSWJDF"DDPVOU5PLFOͱ͸Կ͔ w ,VCFSOFUFTͷϥΠϒϥϦ FHDMJFOUHP

    Λ࢖͏ͱྑ͍ײ͡ʹ΍ͬͯ͘ΕΔ w 4FSWJDF"DDPVOUͷӬଓτʔΫϯΛखಈͰ࡞੒ w $*$%πʔϧͳͲผͷ,VCFSOFUFTΫϥελ͔ΒϦιʔεΛૢ࡞͍ͨ࣌͠ w ,VCFSOFUFT͸໌ࣔతʹൃߦ w ࣄલʹ4FSWJDF"DDPVOUΛ࡞੒  apiVersion: v1 kind: Secret metadata: name: sample-token annotations: kubernetes.io/service-account.name: "sample" type: kubernetes.io/service-account-token IUUQTLVCFSOFUFTJPKBEPDTSFGFSFODFBDDFTTBVUIOBVUI[BVUIFOUJDBUJPO
  52. ωοτϫʔΫͷΞΫηε੍ݶ w 1PEؒͷ௨৴Λ੍ݶͯ͠ɺηΩϡϦςΟࣄނͷӨڹൣғΛݮΒ͍ͨ͠ w ୈࡾऀ͕1PEΛ࡞੒ͯ͠΋઀ଓͰ͖Δ૬ख͕ݶΒΕ͍ͯΔ w ୈࡾऀ͕1PEΛ৐ͬऔͬͯ΋઀ଓͰ͖Δ૬ख͕ݶΒΕ͍ͯΔ w αʔϏε΁ͷΞΫηεΛ੍ݶ͍ͨ͠ w

    *1੍ݶʹΑΓࣾ಺ͷϢʔβʔ͚ͩΞΫηεΛڐՄ͍ͨ͠ w %%P4߈ܸΛ๷͍͗ͨ w ΞϓϦέʔγϣϯͷ੬ऑੑΛಥ͔Εͳ͍Α͏ʹ͍ͨ͠  IUUQTLVCFSOFUFTJPEPDTDPODFQUTTFSWJDFTOFUXPSLJOHOFUXPSLQPMJDJFT
  53. ωοτϫʔΫͷΞΫηε੍ݶ w /FUXPSL1PMJDZ w 1PEؒͷ௨৴ΛڐՄͨ͠Γېࢭͨ͠ΓͰ͖Δ w $/*QMVHJOͰରԠ͕ඞཁ w ΧελϜϦιʔεͱ֦ͯ͠ு͞Ε͍ͯΔ͜ͱ΋ w

    EFNPOBNFTQBDFʹ͋Δ3FEJT΁ͷΞΫηεΛ੍ݶ w 3FEJTͷϙʔτ൪߸Ͱ͋ΔUDQ͕ର৅ w ͔ΒͷΞΫηεΛېࢭ w ͔ΒͷΞΫηε͸আ͘  apiVersion: networking.k8s.io/v1 kind: NetworkPolicy metadata: name: redis spec: podSelector: matchLabels: app: redis policyTypes: - Ingress ingress: - from: - ipBlock: cidr: 172.17.0.0/16 except: - 172.17.1.0/24 - namespaceSelector: matchLabels: project: demo ports: - protocol: TCP port: 6379 IUUQTLVCFSOFUFTJPEPDTDPODFQUTTFSWJDFTOFUXPSLJOHOFUXPSLQPMJDJFT
  54. ωοτϫʔΫͷΞΫηε੍ݶ w Ϋϥ΢υϕϯμʔͷϩʔυόϥϯαʔ w ಛఆͷ*1͔Βͷ઀ଓΛ੍ݶͨ͠Γɺ߈ܸ͔Βͷ๷ޚ w "848"' w (PPHMF$MPVE"SNPS w

    Ϋϥ΢υϕϯμʔຖʹࢦఆͷํ๏͕ҟͳΔͷͰলུ w ։ൃ؀ڥʹΞΫηεͰ͖Δ*1Λ੍ݶ͍ͨ͠ w ຊ൪؀ڥ΁ͷ%%P4߈ܸͷ๷ޚ  IUUQTLVCFSOFUFTJPEPDTDPODFQUTTFSWJDFTOFUXPSLJOHOFUXPSLQPMJDJFT
  55. ϚχϑΣετͷ؅ཧ w ,VCFSOFUFTͷϚχϑΣετ͸جຊతʹ:".-Ͱ؅ཧ w :".-஍ࠈ :".-)FMM ͱݺ͹ΕΔ͘Β͍:".-Λॻ͖·͢ w ͱ͸͍͑ɺϚχϑΣετΛޮ཰తʹ؅ཧͯ͠ɺ࠶ར༻͍ͨ͠ w

    ϚχϑΣετΛ؅ཧ͢ΔͨΊͷπʔϧ w )FMN w ,VTUPNJ[F w ଞʹ΋͋Δ͕ɺ্ͷͭͷͲͪΒ͔͕ଟ͍ w ͲͪΒ΋ྑ͍ѱ͍͕͋ΔͷͰɺ͕ͬͪ͜༏Ε͍ͯΔ͸ͳ͍ 
  56. ϚχϑΣετͷ؅ཧ w )FMN w ϚχϑΣετΛ࠶ར༻ՄೳͳܗͰύοέʔδԽ͢Δ࢓૊Έ w 6CVOUVͷBQU΍"QMJOFͷ"1,ͷͳͲͱಉ͡ύοέʔδϚωʔδϟ w ύοέʔδͷ͜ͱΛ$IBSUͱݺͿ w

    $IBSU͸੩తαΠτ΍ίϯςφϨδετϦ͔Β഑෍Մೳ w IUUQTBSUJGBDUIVCJP w $IBSU͔Βੜ੒࣮ͨ͠ମΛ3FMFBTFͱݺͿ w Πϯετʔϧ΍ߋ৽ͳͲͷϥΠϑαΠΫϧ΋؅ཧՄೳ 
  57. ϚχϑΣετͷ؅ཧ w )FMN w :".-ϑΝΠϧΛ(PͷςϯϓϨʔτΤϯδϯ ֦ுه๏ Λ࢖ͬͯੜ੒ w ύϥϝʔλԽ͞Εͨ෦෼͸Ϣʔβʔ͕޷͖ʹมߋՄೳ w

    ٯʹݴ͏ͱύϥϝʔλԽ͞Ε͍ͯͳ͍෦෼͸ม͑ΒΕͳ͍ w ςϯϓϨʔτ͕ෳࡶʹͳΓ͕ͪ w σόοά͕େม w ଟ͘ͷπʔϧ͕ެࣜͰఏڙ  {{- if .Values.server.serviceAccount.create }} apiVersion: v1 kind: ServiceAccount metadata: name: {{ template "argo-cd.serverServiceAccountName" . }} namespace: {{ .Release.Namespace | quote }} {{- if .Values.server.serviceAccount.annotations }} annotations: {{- range $key, $value := .Values.server.serviceAccount.annotations }} {{ $key }}: {{ $value | quote }} {{- end }} {{- end }} {{- end }}
  58. ϚχϑΣετͷ؅ཧ w ,VTUPNJ[F w :".-ϑΝΠϧʹύονΛ౰ͯͯมߋΛՃ͑Δ w େݩͷ:".-ϑΝΠϧΛࣄલʹ४උ͢Δඞཁ͸͋Δ w 63-ࢦఆͰࢀর΋Մೳ w

    ؀ڥຖͷࠩ෼͸ύονΛॻ͚ͩ͘Ͱྑ͍ w ೚ҙͷϦιʔεΛࠩ͠ࠐΊΔ w ςϯϓϨʔτΑΓॊೈ w ॊೈͳͷͰσόοάେม w ಄Λ࢖͏ w )FMNͱ΋࿈ܞͰ͖Δ w ഑෍ͷ࢓૊Έ͕ऑ͍  apiVersion: kustomize.config.k8s.io/v1beta1 kind: Kustomization resources: - https://github.com/knative/serving/releases/download/v0.12.0/serving.yaml patches: - patch: |- apiVersion: rbac.authorization.k8s.io/v1 kind: RoleBinding metadata: name: custom-metrics-auth-reader namespace: kube-system $patch: delete
  59. $MPVE/BUJWF$PNQVUJOH'PVOEBUJPO $/$' w೥݄ʹઃཱ͞Εͨ-JOVY'PVOEBUJPOͷҰͭͰඇӦརஂମ w Ϋϥ΢υωΠςΟϒٕज़ͷ࣋ଓՄೳͳΤίγεςϜΛߏஙͯ͠ҭͯΔ w ϓϩδΣΫτͷ੒ख़౓ຖʹ(SBEVBUFE *ODVCBUJOH 4BOECPYʹ෼ྨ w

    4BOECPYɿ࣮ݧతͳ৽͍͠ϓϩδΣΫτͷड͚ೖΕ w *ODVCBUJOHɿ࣮༻Խʹ޲͚ͨ੒௕ஈ֊ͷϓϩδΣΫτ w (SBEVBUFEɿ࢈ۀඪ४ͱཱͯ֬ͨ͠͠ϓϩδΣΫτ w Ϣʔβʔ͕Ͳͷٕज़΍πʔϧΛબͿ͔ͷॿ͚ʹ΋ͳΔ w ,VCFSOFUFTͷਐԽͰඪ४ػೳͱͯ͠ఏڙͰ͖Δཁ݅΋૿͑ΔͷͰ௥͍ͬͯ͘ͷ͕େࣄ 
  60. 044Λ࢖͏҆৺ײ͕͋Δ  IUUQTXXXDODGJPQSPKFDUT wΤίγεςϜͷ࣋ଓՄೳੑ wٕज़બఆͷʮਖ਼ղʯΛ௥ٻ͢ΔͷͰ͸ͳ͘ɺมԽΛલఏͱ ͨ͠ॊೈͳ੾Γସ͑ೳྗΛ૊৫ʹࠜ෇͔ͤΔ͜ͱͰɺΦʔ ϓϯͳٕज़ֵ৽ͱίϛϡχςΟͷ༗ػతͳ੒௕Λ׆༻͠ͳ ͕Βɺ࣋ଓతͳൃలΛ࣮ݱ͢Δੜଶܥͱͯ͠ਐԽΛଓ͚ͯ ͍Δɻ wඪ४ԽͱϕετϓϥΫςΟε

    wٕज़બఆͷʮࣦഊʯΛڪΕΔͷͰ͸ͳ͘ɺͦΕΛֶशػձ ͱͯ͠ଊ͑ɺΫϥ΢υωΠςΟϒٕज़ͷඪ४Խͱ૬ޓӡ༻ ੑΛ׆༻͢Δ͜ͱͰɺ؀ڥมԽ΍ཁ݅มߋʹॊೈʹରԠͰ ͖ΔదԠྗΛ֫ಘ͠ɺ࣋ଓՄೳͳٕज़ج൫Λཱ͍֬ͯ͠ Δɻ w࢈ۀք΁ͷӨڹ wϕϯμʔϩοΫΠϯ͔Βͷղ์͸ɺٕज़બఆͷʮ੍໿ʯ͔ Βͷղ์Ͱ΋͋ΓɺࣦഊΛڐ༰͢ΔจԽͱॊೈͳٕज़੾Γ ସ͑ͷೳྗΛ૊Έ߹ΘͤΔ͜ͱͰɺΠϊϕʔγϣϯΛՃ଎ ͤ͞ɺ૊৫ͷٕज़తͳϨδϦΤϯεΛߴΊ͍ͯΔɻ 0VS(SBEVBUFE1SPKFDUT
  61. ࢢ৔ʹ͓͚Δ,VCFSOFUFTͷཱͪҐஔ wඪ४ϓϥοτϑΥʔϜͱͯ͠ w ,VCFSOFUFT͸ɺ೥ʹΘͨΔ$/$'ͷத֩ϓ ϩδΣΫτͱͯ͠ͷਐԽΛܦͯɺٕज़తͳ༏Ґੑ ΑΓ΋Ή͠ΖɺΤίγεςϜͷ๛͔͞ͱ࣋ଓతͳ ൃలੑʹΑͬͯɺΫϥ΢υωΠςΟϒ࣌୅ͷ༳Δ ͗ͳ͍ج൫ͱͯ͠ͷ஍ҐΛཱ͍֬ͯ͠Δɻ wϕϯμʔϩοΫΠϯͷѱຐ w

    ʰϕϯμʔϩοΫΠϯʱͱ͍͏ݴ༿͸ɺ࣌ͱͯ͠ ٕज़తͳٞ࿦Λ௒͑ͯײ৘తͳ൑அج४ͱͳΓɺ &$4΍$MPVE3VO͕࣮࣋ͭ੷ʹجͮ͘༏ҐੑΑ Γ΋ɺ૊৫ͷҙࢥܾఆʹΑΓେ͖ͳӨڹΛٴ΅͢ ݱ࣮͕ු͖ூΓʹͳ͍ͬͯΔɻ  ٕज़બఆʹઈରతͳਖ਼ղ͸ͳ͍ w $/$'ϑϥοάγοϓͱͯ͠ͷ೥ͷൃల࣮੷ w Ҏ্ͷϓϩδΣΫτʹΑΔΤίγεςϜܗ੒ w ίϯςφج൫ʹ͓͚Δࣄ্࣮ͷඪ४Խ w &,4(,&",4ʹΑΔಋೖোนͷ࣮࣭తͳ௿Լ w &$4$MPVE3VOͱͷٕज़త༏Ґੑൺֱ w ײ৘తͳϩοΫΠϯݒ೦ͷҙࢥܾఆ΁ͷӨڹ
  62. ೥ͷ൑அج४૊৫ͷݱঢ়ɹ wطଘͷٕज़ελοΫͱ஌ݟ w ૊৫͕͢Ͱʹ͍࣋ͬͯΔٕज़తͳࢿ࢈ͱܦݧ͸ɺ৽͍͠ϓϥ οτϑΥʔϜͷಋೖίετʹ௚઀Өڹ͠·͢ɻྫ͑͹ɺ͢Ͱ ʹ,VCFSOFUFTͷ஌ݟ͕͋ΔνʔϜͱɺ"84ωΠςΟϒα ʔϏεʹਫ਼௨ͨ͠νʔϜͰ͸ɺ࠷దͳબ୒͕ҟͳ͖ͬͯ· ͢ɻ wνʔϜͷن໛ͱ੒ख़౓ w

    νʔϜͷن໛ͱ੒ख़౓͸ɺઐ೚43&νʔϜΛ࣋ͭ૊৫ͱ։ൃ ऀʹΑΔ݉೚ӡ༻Ͱ͸ɺϓϥοτϑΥʔϜʹٻΊΔࣗಈԽͷ ౓߹͍͕ҟͳΔΑ͏ʹɺ૊৫ݻ༗ͷ࠷దղΛࣔࠦ͠·͢ɻ wӡ༻ମ੍ͱෛՙͷڐ༰ൣғ w ӡ༻ମ੍ͷݱ࣮͸ɺͷଈ࣌ରԠ͕Մೳͳ૊৫ͱཌӦ ۀ೔ରԠΛڐ༰͢Δ૊৫Ͱ͸ɺϚωʔδυαʔϏε΁ͷґଘ ౓͕มΘΔΑ͏ʹɺϓϥοτϑΥʔϜબఆͷຊ࣭తͳ൑அ࣠ ͱͳΓ·͢ɻकΔ΂͖͸ϧʔϧ͔ʁαʔϏε͔ʁ  ݱ࣮͸ཧ૝΁ͷಓ͠Δ΂ɺ૊৫ͷࠓ͕ϓϥοτϑΥʔϜબఆͷ࠷ྑͷࢦ਑ͱͳΔɻ w "84ωΠςΟϒ׆༻૊৫ͱ,Tख़࿅૊৫Ͱͷ࠷దղͷҧ͍ w ΦϯϓϨϛε͔ΒͷίϯςφԽܦݧWTΫϥ΢υωΠςΟϒ։ൃܦݧ w ϞϊϦε͔ΒϚΠΫϩαʔϏε΁ͷҠߦ஌ݟͷ༗ແ w &,4(,&",4࠾༻ͱόχϥ,Tࣗલߏஙͷબ୒෼ذ w ো֐࣌ͷ෼Ҏ಺෮چ4-"WTཌӦۀ೔ରԠڐ༰ w ϚϧνΫϥελ৑௕ߏ੒WTγϯάϧΫϥελߏ੒ w ઐ೚43&νʔϜ໊ମ੍WT։ൃऀʹΑΔ݉೚ӡ༻ମ੍ w Ϋϥ΢υωΠςΟϒΞʔΩςΫτࡏ੶WT֎෦ίϯαϧλϯτґଘ w աڈ೥ؒͷ,Tຊ൪ӡ༻࣮੷WT1P$ஈ֊ͷٕज़ݕূ
  63. ೥ͷ൑அج४γεςϜཁ݅ wεέʔϥϏϦςΟͷඞཁੑ w εέʔϥϏϦςΟ͸ɺ$MPVE3VOɺ&$4͕ఏڙ͢Δແ ؅ཧͷࣗಈεέʔϦϯάͱɺ,VCFSOFUFT͕࣮ݱ͢Δ៛ ີͳ੍ޚͷؒͰɺ૊৫ͷϫʔΫϩʔυಛੑʹԠͨ͡࠷ద ͳόϥϯεΛݟग़͢ඞཁ͕͋Γ·͢ɻ wηΩϡϦςΟཁ݅ w ηΩϡϦςΟཁ݅͸ɺϚωʔδυαʔϏε͕ఏڙ͢Δݎ

    ࿚ͳج४ͱɺΧελϚΠζՄೳͳಠࣗͷηΩϡϦςΟ౷ ੍ͷؒͰɺ૊৫ͷϦεΫڐ༰౓ʹج͍ͮͨ൑அΛഭΒΕ ·͢ɻ wγεςϜཁ͔݅Βͷඞཁੑ w γεςϜཁ݅͸ɺ)551ಛԽܕϓϥοτϑΥʔϜͷޮ཰ ੑͱ൚༻ϓϥοτϑΥʔϜͷॊೈੑͷؒͰɺϫʔΫϩʔ υͷଟ༷ੑʹԠͨ͡ద੾ͳબ୒Λಋ͘ࢦඪͱͳΓ·͢ɻ  ΞʔΩςΫνϟΛܾΊΔͷ͸τϨϯυͰ͸ͳ͘ཁ݅Ͱ͋Δ w ਺ઍ314ͷόʔετରԠWT҆ఆͨ͠௿ෛՙӡ༻ w $MPVE3VOͷࣗಈεέʔϧWT,Tͷ͖Ίࡉ੍͔͍ޚ w ίετޮ཰ॏࢹͷ༧ଌεέʔϧWTଈԠੑॏࢹͷࣗಈεέʔϧ w "1*αʔϏεͷ$MPVE3VO࠷దԽWT.-ϫʔΫϩʔυͷ,Tඞਢ w όονॲཧͷॊೈͳεέδϡʔϦϯάཁ݅ w ϦΞϧλΠϜσʔλॲཧͷ௿ϨΠςϯγཁ݅ w 1$*%44ཁ݅ԼͰͷ&,4Ϛωʔδυ࠾༻WTΦϯϓϨ,Tߏங w Ϛϧνςφϯτ؀ڥͰͷϦιʔε෼཭౓ͷཁ݅ w ۚ༥ن੍ԼͰͷ؂ࠪϩάཁ݅ͱϓϥοτϑΥʔϜબఆ
  64. ೥ͷ൑அج४௕ظతͳల๬ wΫϥ΢υઓུʢ୯ҰϚϧνʣ w Ϋϥ΢υઓུ͸ɺಛఆϕϯμʔͷઌਐػೳʹΑΔՁ ஋૑ग़ͱɺϚϧνΫϥ΢υʹΑΔબ୒ࢶͷ֬อͱ͍ ͏ɺҰݟ૬൓͢ΔཁૉͷؒͰ૊৫ݻ༗ͷ࠷దղΛݟ ग़͢աఔͱͳΔɻ w੒௕ܭըͱεέʔϧ w ੒௕ܭը͸ɺٕज़τϨϯυͷ௥ैͰ͸ͳ͘ɺΤϯδ

    χΞͷʰ΍Γ͍ͨʱʰಘҙʱͱ͍͏಺ൃతಈػͱɺ ૊৫ͷ࣋ଓՄೳͳਐԽΛཱ྆ͤ͞Δબ୒ͱͳΔ΂͖ Ͱ͋Δɻ wٕज़తෛ࠴΁ͷରԠ w ٕज़తෛ࠴͸ɺ࣌ͱͯ͠ʰൃ߬ʱͱͯ͠ػೳ͠ɺ૊ ৫ͷ੒ख़౓ʹԠٕͨ͡ज़બఆͱద੾ͳ؅ཧʹΑΓɺ Ή͠ΖڧΈ΁ͱঢ՚ͤ͞Δ͜ͱ͕ՄೳͱͳΔɻ  Կ͕ى͜Δ͔ͳΜͯ෼͔Βͳ͍ͷͰࣦഊલఏͰߟ͓͍͑ͯͬͯ͘͏৺ߏ͑ w "84($1"[VSF׬શґଘWTϚϧνΫϥ΢υ෼ࢄߏ੒ w ୯ҰΫϥ΢υͷ౷߹αʔϏε׆༻WTΫϥ΢υΞάϊεςΟοΫઃܭ w ಛఆΫϥ΢υͷߴ౓ػೳ࠾༻WT൚༻తͳ࣮૷ํࣜ w ϨΨγʔϞϊϦεࢿ࢈ͷஈ֊తϞμφΠζ w ӡ༻ࣗಈԽͷशख़౓ʹԠͨ͡ஈ֊తಋೖ w طଘΠϯϑϥࢿ࢈ͷ׆༻ͱഇغͷ൑அج४ w ੔ཧ͞ΕͨυΩϡϝϯτͳΜͯͳΜ΅͋ͬͯ΋͍͍Ͱ͔͢ΒͶʙ w ,TŧŔŕŪƂŜſνʔϜWT"84׬શཧղ૊৫ w άϩʔόϧల։Λݟਾ͑ͨϚϧνϦʔδϣϯߏ੒ w ৽نαʔϏε௥Ճʹ൐͏ϓϥοτϑΥʔϜ֦ுੑ
  65. ׬ᘳͳղܾࡦ͸ͳ͍ͦͷ୅ΘΓʹͰ͖Δ͜ͱ wٕज़બఆʹzࣦഊ͸͖ͭ΋ͷ w ʮਖ਼ղʯΛ௥ٻ͢ΔͷͰ͸ͳ͘ɺʮͦͷ࣌఺Ͱͷ࠷దղʯΛબͿ w $MPVE3VO΍&$4͕࠷దͳέʔε΋͋Δ w ࣦഊΛڪΕͣʹɺࣦഊ͔ΒֶͿମ੍Λ࡞Δ wબఆͷ൑அ࣠Λ໌֬ʹ w

    νʔϜͷٕज़ελοΫͱܦݧ w γεςϜཁ݅ͱΞʔΩςΫνϟͷ੍໿ w ӡ༻ମ੍ͱෛՙͷڐ༰ൣғ wॊೈͳରԠྗΛҭͯΔ w ,&1΍ϦϦʔεରԠΛ௨ͨ͡มԽͷ༧ଌ w ஈ֊తͳಋೖͱݕূ w ੾Γସ͑΍͍͢ઃܭΛҙࣝ͢Δ  ׬ᘳͳϚχϑΣετ΍ΞʔΩςΫνϟ͸ଘࡏ͠·ͤΜɻΉ͠Ζɺ ࣦഊΛલఏͱͨ͠ॊೈͳ૊৫ͮ͘ΓͱɺมԽʹରԠͰ͖Δٕज़ྗ ͷҭ੒͕ɺ௕ظతͳ੒ޭ΁ͷۙಓͱͳΓ·͢ɻ
  66. ࢀߟࢿྉ w TIBLFࣾ಺ࢿྉίϯςφɾ,VCFSOFUFTೖ໳ ௕ᖒࢯɾݩ಺ࢯ  w -BSHFTDBMFDMVTUFSNBOBHFNFOUBU(PPHMFXJUI#PSH w IUUQTTUBUJDHPPHMFVTFSDPOUFOUDPNNFEJBSFTFBSDIHPPHMFDPNKBQVCTBSDIJWFQEG w

    (PPHMF͕࡞ͬͨ෼ࢄΞϓϦέʔγϣϯج൫ɺ#PSHͷ࿦จΛಡΈղ͘ಋೖฤ w IUUQTCMPHJOEVDUPSNFFOUSZ w ʙͷͱ͖Կ͕ى͖Δͷ͔,VCFSOFUFT൛ʂ w IUUQTHJUIVCDPNKBNJFIBOOBGPSEXIBUIBQQFOTXIFOLTUSFFNBTUFSKBKQ w ,VCFSOFUFTɺ΍Ί·ͨ͠ w IUUQTCMPHGBUIFSHFEPXOFUHPPECZFLVCFSOFUFT w ೥ͿΓ͙Β͍ʹΫϥ΢υ࢖ͬͨ݁Ռɺ,VCFSOFUFTҎ֎ͷϚωʔδυαʔϏεͱ͔جຊཁΒͳ͘ͳ͍ʁͱͳͬͨ࿩ w IUUQTVNBIBUFCMPKQFOUSZ w ,VCFSOFUFTʹ͓͚Δ$&-ͷهड़ํ๏·ͱΊ w IUUQTTSFBLFDPNCMPHLVCFSOFUFTDFMEFTDSJQUJPO 
  67. ࢀߟࢿྉ w <,VCFSOFUFT>%ZOBNJD3FTPVSDF"MMPDBUJPOͷ͍· w IUUQT[FOOEFWUPWFSTVTBSUJDMFTGFBBGC w 1MBUGPSN&OHJOFFSJOHPO,VCFSOFUFT w IUUQTMFBSOJOHPSFJMMZDPNMJCSBSZWJFXQMBUGPSNFOHJOFFSJOHPO w

    $/$'-BOETDBQF w IUUQTMBOETDBQFDODGJP w (SBEVBUFEBOE*ODVCBUJOH1SPKFDUT w IUUQTXXXDODGJPQSPKFDUT w ,VCFSOFUFT׬શΨΠυୈೋ൛ w IUUQTCPPLJNQSFTTDPKQCPPLT w ,VCFSOFUFT&OIBODFNFOU1SPQPTBMT ,&1T  w IUUQTXXXLVCFSOFUFTEFWSFTPVSDFTLFQT w ,VCFSOFUFT%PDVNFOUBUJPO$PODFQUT8PSLMPBET w IUUQTLVCFSOFUFTJPEPDTDPODFQUTXPSLMPBET