VaultとConsulによる恒久的な安全なインターナル通信（LT）/ Secure internal communicaton by Hashicorp Vault

by https://speakerdeck.com/linyows

Slide 1

Slide 1 text

5PNPIJTB0EB(.01FQBCP *OD +VOF 7BVMUͱ$POTVMʹΑΔ߃ٱతͰ ҆શͳΠϯλʔφϧ௨৴ʢ-5ʣ 'VLVPLBHP

Slide 2

Slide 2 text

'VLVPLBHP (.0ϖύϘϓϦϯγύϧΤϯδχΞ খా஌ԝ!MJOZPXT ٕज़෦ٕज़ج൫νʔϜ IUUQTUPNPIJTBPEBDPN

Slide 3

Slide 3 text

'VLVPLBHP એ఻ 8&#%#13&44WPM )BTIJ$PSQ7BVMUͷ هࣄΛدߘ͠·ͨ͠ ͜Ε

Slide 4

Slide 4 text

'VLVPLBHP )BTIJDPSQ7BVMUͱ͸ ▸ ྨ͍كͳൿີ৘ใ؅ཧιϑτ΢ΣΞ ▸ ྫ͑͹ɺ%#ύεϫʔυ΍"84ͷτʔΫϯ΍҉߸Խ༻ݤͳͲ ▸ ࢖͍͜ͳ͢͜ͱͰγεςϜͷηΩϡϦςΟΛ͍͍ײ͡ʹ͢Δ͜ ͱ͕Ͱ͖Δ

Slide 5

Slide 5 text

'VLVPLBHP ͨ͘͞Μػೳ͕͋Δ ▸ ೝূɿBQQSPMF BXT B[VSF HPPHMFDMPVE LT HJUIVC MEBQ SBEJVT UMTDFSU UPLFO VTFSOBNFQX ▸ ൿີɿBE BXT DPOTVM DVCCZIPMF EC HPPHMFDMPVE LW JEFOUJUZ OPNBE TLJ SBCCJUNR TTI UPUQ USBOTJU ▸ ؂ࠪɿpMF TZTMPH TPDLFU

Slide 6

Slide 6 text

Ͳ͏࢖͑͹͍͍ͷʁ 'VLVPLBHP

Slide 7

Slide 7 text

'VLVPLBHP جຊతʹ͸ηΩϡϦςΟʹؔΘΔ΋ͷΛकΔ ▸ γεςϜ͕ԿΛѻ͍ͬͯΔ͔Ͱ࢖͏ػೳ͕มΘͬͯ͘Δ ▸ ͔͠͠ɺ୯ҰαʔόͰͳ͍ݶΓϩʔϧؒͷΠϯλʔφϧ௨৴͸ ඞͣ͋Δ ▸ -#1SPYZ8FC΍+PC"1*%#Έ͍ͨͳ

Slide 8

Slide 8 text

'VLVPLBHP ϓϥΠϕʔτ*1ͳͷͰ͜͏͍͏΍ͭͰ͢Ͷ ▸ Ϋϥε" ▸ Ϋϥε# ▸ Ϋϥε$ ͜͏͍͏*1Ͱ௨৴͢Δͱ͖ʹ҆શͰ͋Δͱݴ͑·͔͢ʁ

Slide 9

Slide 9 text

௨৴ͷηΩϡϦςΟͪΌΜͱ΍ͬͯΔʁ 'VLVPLBHP

Slide 10

Slide 10 text

'VLVPLBHP ͓٬༷ͷճ౴ ▸ ϓϥΠϕʔτωοτϫʔΫͳͷͰ໰୊ͳ͍ ▸ 4FMGTJHOFEূ໌ॻ͚ͩͲ5-4Ͱ௨৴ͯ͠Δ͔Β໰୊ͳ͍ ▸ େࣄͳ৘ใͳ͍͔Βେৎ෉ ▸ ࣗલͷೝূہཱͯͯظݶ೥Ͱઃఆͯ͠΍ͬͯΔΑ ▸ -FU`T&ODSZQU·ͨ͸ূ໌ॻങͬͯӡ༻ͯ͠ΔΑ

Slide 11

Slide 11 text

'VLVPLBHP ͓٬༷ͷճ౴ ▸ ϓϥΠϕʔτωοτϫʔΫͳͷͰ໰୊ͳ͍ ▸ 4FMGTJHOFEূ໌ॻ͚ͩͲ5-4Ͱ௨৴ͯ͠Δ͔Β໰୊ͳ͍ ▸ େࣄͳ৘ใͳ͍͔Βେৎ෉ ▸ ࣗલͷೝূہཱͯͯظݶ೥Ͱઃఆͯ͠΍ͬͯΔΑ ▸ -FU`T&ODSZQU·ͨ͸ূ໌ॻങͬͯӡ༻ͯ͠ΔΑ $

Slide 12

Slide 12 text

'VLVPLBHP ·͋ؤுͬͯΔ͓٬༷ͷ໰୊఺ ▸ ֎෦ͷূ໌ॻΛ࢖͏ͷ͸ɺఆظతʹূ໌ॻͷߋ৽ ͕͋ΔͷͰӡ༻͕໘౗ ▸ ࣗલͰೝূہΛ͢Δͷ͸ɺखӡ༻ʹͳΓ͕ͪ׌ͭ ӡ༻͕େมͳͷͰ༗ޮظݶΛ௕͘ઃఆ͕ͪ͠Ͱྑ ͘ͳ͍

Slide 13

Slide 13 text

΋ͬͱखܰͰ҆શʹͳΓ͍ͨ 'VLVPLBHP

Slide 14

Slide 14 text

'VLVPLBHP

Slide 15

Slide 15 text

'VLVPLBHP 7BVMUͱ$POTVMɺͦͯ͠$POTVM5FNQMBUFΛ࢖͑͹ɺಈతʹߋ৽͞ΕΔ1,*؀ڥ͕Ͱ͖Δ

Slide 16

Slide 16 text

'VLVPLBHP 7BVMUͷಈత1,*؀ڥͷ5JQT ▸ ॳظߏங࣌ʹ7BVMU΁ͷ௨৴͸Ͳ͏͢Δ7FSJGZGBMTFͰ࡞Δ ▸ 5FSSBGPSN౳ͷ0SDIFTUSBUPSͰ"1*͔Β·ͣ$"ͷެ։ݤΛऔಘ ͢Δ ▸ $POTVM5FNQMBUFΛ࢖͏ͷͰϑΝΠϧͷݖݶʹ஫ҙ ▸ 7BVMUͷূ໌ॻ͸SFMPBEͰ࠶ಡΈࠐΈͰ͖Δ

Slide 17

Slide 17 text

'VLVPLBHP ·ͱΊ ▸ 7BVMU͸ߴػೳ͕ͩ1,*͔Βಋೖ͍ͯ͘͠ͱΑ͍ ▸ 7BVMU͸)BTIJDPSQπʔϧΛ૊Έ߹ΘͤΔͱΑΓศརʹͳΔ

Slide 18

Slide 18 text

PT&YJU 'VLVPLBHP