ͦͷ઀ଓઌ৘ใ͸Ͳ͜ʹ גࣜձࣾGunosy ඿஍྄ี

͓·͑ͩΕ • @aibou (͸·͡ Γΐ͏͚͢) • ʮ͍͋΅͏͞Μͬͯຊ໊ͳΜͰ͚ͨͬ͠ʁʯ • GunosyαʔϏεͷΠϯϑϥશൠ୲౰(AWSྺ1೥ͪΐ͍) • Java(Spring Boot), Ruby, Chef • झຯɿεϙʔπ؍ઓ ⚾Ϟʔλʔεϙʔπ • ࡢ೔DAZNొ࿥͠·ͨ͠ɻڵຯ͋Δਓ͸࠙਌ձͰͥͻ • Ԍ্ྺ͋Γ

AWS Lambda ࢖͍ͬͯΔํʹ࣭໰Ͱ͢

ൿີͳ৘ใͲ͜ʹॻ͍ͯ·͔͢ʁ ʢDB઀ଓ৘ใ౳ʣ

AWSίϯιʔϧͷΤσΟλʹ ίʔυ௚ॻ͖

Jenkins౳ͷࣗલϏϧυαʔό ͰύϥϝʔλԽ

ΦϯϓϨϦϙδτϦ(GHE, svn) ͔ͩΒϋʔυίʔυ

GunosyͰ͸AWS KMSΛ࢖ͬͯ ઀ଓઌ৘ใΛ҉߸Խ͍ͯ͠·͢ -BNCEB࢖͏࣌͸ɺͰ͢ɻ ීஈ͸0QTXPSLTͷ$VTUPN+TPOʹॻ͍ͯ·͢

ࠓ೔͸ͦͷ͓࿩Λ͠·͢

͋ͬɾɾɾ IUUQEFWDMBTTNFUIPEKQDMPVEEFDSZQUTFOTJUJWFEBUBXJUILNTPOMBNCEBJOWPDBUJPO

GunosyͰ͸AWS KMSΛ࢖ͬͯ ઀ଓઌ৘ใ͕ೖͬͨϑΝΠϧΛ ؙ͝ͱ҉߸Խ͍ͯ͠·͢

ྲྀΕతͳ JBN6QEBUF'VODUJPO$PEF JBN1VCMJTI7FSTJPO LNT%FDSZQU DPOOFDU JBN&ODSZQU UFTU[JQQJOH

ConfigϑΝΠϧͷαϯϓϧ { "DATABASES": { "master": { "HOST": "", "PORT": "", "NAME": "", "USER": "", "PASSWORD": "" } } } γϯϓϧʂ ΋ͪΖΜ%#Ҏ֎ͷઃఆ΋هࡌͯͨ͠Γ͠·͢

Lambda্Ͱͷσίʔυ ʢPythonʣ kms = boto3.client('kms') with open(encrypted_json_path) as f: _settings = json.loads( kms.decrypt(CiphertextBlob=f.read())['Plaintext'] ) DATABASES = _settings.get("DATABASES") or {} # DATABASES['master']['HOST'] # DATABASES['master']['USER'] IPHF@@JOJU@@QZʹॻ͍͓͚ͯ͹ JNQPSUIPHFͰ࢖͑Δͷ΋˓

ࠔͬͨ͜ͱ ɾݖݶͷ෷͍ग़͠ ɾઃఆߋ৽͕ΊΜͲ͍͘͞ ɾݱঢ়Ͳ͏͍͏ઃఆʹͳͬͯΔ͔Θ͔Βͳ͍ ͜ͷล͸ɹɹɹΛ࢖͑͹ղܾͰ͖ͦ͏

ཪϫβ lambda functionͷ descriptionʹઃఆΛຒΊΔʂ

function description

Description͔Βऔಘ ʢPythonʣ import boto3 import json def lambda_handler(event, context): configuration = boto3.client('lambda').get_function_configuration( FunctionName=context.function_name ) json_conf = json.loads(configuration['Description']) return json_conf['name']

࠷ޙʹ AWS Lambda Ruby Φωγϟεʂ