Tweet
Tweet

Slide 1

Slide 1 text

,VCFSOFUFTWך⚺ז㢌刿挿 5BLBTIJ,VTVNJ ;-BC

Slide 2

Slide 2 text

,VCFSOFUFTW Ӝ Wٔٔ٦أ Ӝ ⚺ז㢌刿挿 إُؗٔذ؍ך䓼⻉ أذ٦زؿٕך؟ه٦ز䓼⻉ 䭁䓸䚍ךぢ♳ Ӝ ,VCFSOFUFTכ٠剢嫣ךٔٔ٦أ؟؎ؙٕ Wכ剢劣✮㹀 

Slide 3

Slide 3 text

2JJUBח׮鎸鯹׃גְתׅ  http://qiita.com/tkusumi/items/817cf85917efd24c7a4f

Slide 4

Slide 4 text

إُؗٔذ؍ך䓼⻉ Ӝ FUDEך农〾⻉ BMQIB  Ӝ 1PE꟦鸐⥋׾ⵖ䖴ׅ׷/FUXPSL1PMJDZָTUBCMFח Ӝ /PEFך埄ꣲ׾״׶⿑㺘חׅ׷/PEF"VUIPSJ[BUJPOך鷄⸇ Ӝ ,VCFMFUך5-4鏾僇剅ךٗ٦ذ٦ءّٝ BMQIB  Ӝ 넝䏝ז湊叨ؚٗך鷄⸇ BMQIB 

Slide 5

Slide 5 text

أذ٦زؿٕך؟ه٦ز䓼⻉ Ӝ 4UBUFGVM4FUך荈⹛،حفر٦ز Ӝ 4UBUFGVM4FUח넝鸞זأ؛٦ٕךؔفءָّٝ鷄⸇ SFBEZ׾䖉׋׆ח⚛⴨חأ؛٦ٕדֹ׷ٌ٦سָ鷄⸇ Ӝ %BFNPO4FUך،حفر٦زך䓼⻉ 㾶娖הٗ٦ٕغحؙ Ӝ ٗ٦ٕؕر؍أؙ׾17ה׃ג⢪ִ׷MPDBMأزٖ٦آ BMQIB  ⴓ侔ؿ؋؎ٕءأذيזוח剑黝 

Slide 6

Slide 6 text

䭁䓸䚍ךぢ♳ Ӝ "1*،ؚٔ؜٦ءّٝ堣腉 CFUB  Ӝ $VTUPN3FTPVSDF%FOJUJPOך㼪Ⰵ CFUB  5IJSE1BSUZ3FTPVSDFכ䐖姺 Ӝ 䭁䓸דֹ׷"ENJTTJPO$POUSPMMFSך堣腉 CFUB  Ӝ فٓؖـٕז$MPVE1SPWJEFS BMQIB  Ӝ $POUBJOFS3VOUJNF*OUFSGBDF $3* ך䓼⻉ 

Slide 7

Slide 7 text

׉ך➭䫙磏 Ӝ %PDLFS⟃♳ך㜥さ1PEⰻכⰟ剣ך1*%瑞꟦׾⢪ֲ״ֲח さ׻ׇג1*%㉏겗׮鍑寸 QBVTF؝ٝذشָ1*%  ءؚشٕ׮鷏׸׷״ֲח Ӝ 1PEךFUDIPTUT׾鏣㹀דֹ׷״ֲחז׏׋ BMQIB  Ӝ /PEFךIPTU*1ָEPXOXBSE"1*ד《׸׷״ֲחז׏׋ Ӝ LVCFMFUךNFUSJDTחD"EWJTPSך䞔㜠ָろת׸זֻז׏׋ 

Slide 8

Slide 8 text

WGFBUVSF䫙磏

Slide 9

Slide 9 text

FUDEך农〾⻉ BMQIB Ӝ ٔا٦أ珏ⴽ׾䭷㹀׃ג农〾⻉ "&4$#$זוח㼎䘔 Ӝ "1*؟٦غ٦ךؔفءّٝד䭷㹀 鏣㹀ؿ؋؎ٕ׾䭷㹀 Ӝ 农〾⻉ׁ׸׋ر٦ةכQSFYָאֻ LTFODBFTDCDW ⦼ך鿇ⴓ׌ֽ农〾⻉ׁ׸׷  kind: EncryptionConfig apiVersion: v1 resources: - resources: - secrets providers: - aescbc: keys: - name: key1 secret: ...... - identity: {} 鏣㹀⢽ &ODSZQUJPO$POH

Slide 10

Slide 10 text

/PEF"VUIPSJ[BUJPO Ӝ /PEFכ荈ⴓחأ؛آُ٦ׁٕ׸׋ 1PEח秡בֻ䞔㜠׌ָֽ鋅׸׷״ֲח ꟼ⤘זְ4FDSFUכ鋅ִזֻז׷ Ӝ إُؗٔذ؍ٔأָؙ剑㼭ꣲח Ӝ 钠〳ה"ENJTTJPO$POUSPMMFSך鏣㹀 BVUIPSJ[BUJPONPEF/PEF  BENJTTJPODPOUSPM/PEF3FTUSJDUJPO   1PE" 1PE# 4FDSFU" 4FDSFU# /PEF /PEF

Slide 11

Slide 11 text

넝䏝ז湊叨ؚٗ BMQIB Ӝ 鑫稢ז湊叨ؚٗ׾鎸ꐮדֹ׷ SFRVFTU SFTQPOTFךCPEZזו Ӝ XFCIPPLغحؙؒٝسָ鷄⸇ 넝䏝ז湊叨כXFCIPPLך׫㼎䘔 Ӝ 湊叨ךهٔء٦כ稢ַֻⵖ䖴דֹ׷  rules: - level: Request resources: - group: "" resources: ["configmaps"] namespaces: ["kube-system"] - level: Metadata resources: - group: "" resources: ["secrets", "configmaps"] 鏣㹀⢽

Slide 12

Slide 12 text

/FUXPSL1PMJDZָTUBCMFח Ӝ 1PE꟦ך鸐⥋׾ⵖ䖴דֹ׷ Ӝ OFUXPSL⩎ך؟ه٦زָ䗳銲 Ӝ 鏣㹀⢽ Ⰻגך1PEך鸐⥋׾犜姺 OBNFTQBDFⰻך׫鏩〳  1PE# 1PE& 1PE" 1PE% 1PE$ 1PE' OBNFTQBDF9 OBNFTQBDF:

Slide 13

Slide 13 text

D"EWJTPSךًزؙٔأך《׶倯JOW Ӝ D"EWJTPSNFUSJDTך《׶倯ָ㢌刿 LVCFMFUNFUSJDTחろת׸זֻז׷ Ӝ Wַ׵׮㢌׻׏גְ׷ךד岣䠐 Ӝ QSPNFUIFVTך鏣㹀㢌刿ָ䗳銲  ؒٝسه؎ٝز _WY NFUSJDT W_W NFUSJDT W_ NFUSJDTDBEWJTPS

Slide 14

Slide 14 text

LVCFSOFUFTW Ӝ Wכ剢劣ٔٔ٦أ✮㹀 'FBUVSFGSFF[F $PEFGSFF[F WSFMFBTF Ӝ ⦐➂涸ח孡חז׷׮ך %FCVH$POUBJOFST *NQMFNFOU*174CBTFEJODMVTUFSTFSWJDFMPBECBMBODJOH 

Slide 15

Slide 15 text

8FBSFIJSJOH CJUMZ[MBCDBSFFST