スクラムチームのDevOpsを支えるPlatform Engineering @ 実践DevOps！〜KAGとkubellの取り組み〜

Slide 1

Slide 1 text

εΫϥϜνʔϜͷ%FW0QTΛࢧ͑Δ 1MBUGPSN&OHJOFFSJOH   4JN4UB !TIJNBHBKJ   ࣮ફ%FW0QTʂʙ,"(ͱLVCFMMͷऔΓ૊Έʙ LLEFWPQT   ˡϗϫΠτγϚϦεͷΞϧλ

Slide 2

Slide 2 text

ࣗݾ঺հ ɹ࡛ۄɹʢʙେֶͷ్த·Ͱʣ ˠࡳຈɹʢʙେֶɾ೥ʣ ˠਆಸ઒ʢʙେֶӃʙब৬ͯ͠೥൒͘Β͍ʣ ˠࡳຈɹʢʙ೥ͪΐͬͱɺݱࡏʣ ޷͖ͳ"84αʔϏεɿ4UFQ'VODUJPOT 4JN4UBʢΦϯϥΠϯͷ͕ͨ͢ʣ ,%%*ΞδϟΠϧ։ൃηϯλʔגࣜձࣾ ϓϥοτϑΥʔϜΤϯδχΞϦϯά෦ !TIJNBHBKJ 5XJUUFS 4FSWFSMFTT ͝౰஍ΧάΧά

Slide 3

Slide 3 text

ϗϫΠτγϚϦεͱ ฻Β͍ͯ͠·͢🐿 ˢ౳਎େνϧλϦε 5XJUUFSΞΧ΢ϯτ΋͋ΔΑ !BMUB@XIJUFDIJQ

Slide 4

Slide 4 text

աڈͷొஃࢿྉΞοϓͯ͠·͢ʢࠓ೔ͷࢿྉ΋ʂʣ IUUQTTQFBLFSEFDLDPNTIJNBHBKJ

Slide 5

Slide 5 text

ݸਓϒϩάΛӡ༻͍ͯ͠·͢͠·͕͡ ͠Ήͦ͘ "84ΞοϓσʔτΛ ຖिߋ৽ʂ   ͦͷଞ Ϋϥ΢υΨδΣοτ γϚϦεͷ࿩ͳͲ

Slide 6

Slide 6 text

͠Ήͦ͘3BEJP "84ͷΞοϓσʔτΛαΫοͱΩϟονΞοϓ !͠Ήͦ͘ ຖिਫ༵ʙ ഑৴தʂ

Slide 7

Slide 7 text

No content

Slide 8

Slide 8 text

"HFOEB • 1MBUGPSN&OHJOFFSJOHͷ֓ཁ • ,"(ͷ1MBUGPSN&OHJOFFSJOHͱ   ࢧԉπʔϧ܈ʮLBHUPPMTʯ • Πϯφʔιʔεͷ׆༻ • ·ͱΊ

Slide 9

Slide 9 text

1MBUGPSN&OHJOFFSJOHͷ֓ཁ

Slide 10

Slide 10 text

1MBUGPSN&OHJOFFSJOHʢ1'&ʣͱ͸ʁ ϓϥοτϑΥʔϜɾΤϯδχΞϦϯάͱ͸Կ͔ʁ(BSUOFS IUUQTXXXHBSUOFSDPKQKBBSUJDMFTXIBUJTQMBUGPSNFOHJOFFSJOH ҎԼΛຬͨ͢ϓϥοτϑΥʔϜΛ   ߏங͢ΔΞϓϩʔνΛࢦ͢ ໨ඪɿ ɾ։ൃऀͷੜ࢈ੑ޲্ ɾϏδωεՁ஋ͷ૑ग़ ໨తɿ ɾ։ൃऀͷೝ஌ෛՙΛܰݮ ɾ։ൃऀͷΤΫεϖϦΤϯε޲্ खஈɿ ɾηϧϑαʔϏεػೳͷॆ࣮ ɾΠϯϑϥ΍ӡ༻ͷࣗಈԽ

Slide 11

Slide 11 text

ΞδϟΠϧ%FW0QTͱ1MBUGPSN&OHJOFFSJOH ϓϥοτϑΥʔϜΤϯδχΞϦϯάͱ͸ IUUQTMFBSONJDSPTPGUDPNKBKQQMBUGPSNFOHJOFFSJOHXIBUJTQMBUGPSNFOHJOFFSJOH 4%-$ ιϑτ΢ΣΞ։ൃͷ ϑΣʔζΛࣔ͢ࢦ਑ ΞδϟΠϧ։ൃ খ͍͞αΠΫϧͰͷ ։ൃͷ࣮ફʹΑΔ ૉૣ͍Ձ஋ఏڙ %FW0QT ܧଓతͳσϦόϦʔΛ࣮ݱ͢ΔͨΊͷ ։ൃख๏ͱӡ༻ͷࣗಈԽɾޮ཰Խ 1MBUGPSN&OHJOFFSJOH ։ൃ΍ηΩϡϦςΟɾΨόφϯεΛ ؀ڥ੔උ΍*B$ɺࣗಈԽͳͲͰࢧԉ "HJMF4%-$4LZSPDLFUJOH:PVS1SPKFDUXJUI"HJMF1SJODJQMFT IUUQTNMTEFWDPNCMPHBHJMFTEMD

Slide 12

Slide 12 text

ιϑτ΢ΣΞ։ൃΛ๺ւಓཱྀߦʹྫ͑Δͱʜ 4%-$ ໨త஍·Ͱͷ஍ਤ %FW0QT ަ௨खஈʢ৐Γ෺ʣ ΞδϟΠϧ։ൃ ͍ΖΜͳܦ༝஍Ͱඞཁͳ΋ͷΛ੔උ ΢ΥʔλʔϑΥʔϧ։ൃ ୯Ұͷަ௨खஈͰ໨త஍·Ͱ௚௨ 1MBUGPSN&OHJOFFSJOH ަ௨Πϯϑϥ ʢࠃಓɺߴ଎ɺۭ࿏ɺߤ࿏౳ʣ ࡳຈˠവؗ΁ߦ͘ͷʹ ͔ͭͯ͸మಓͰ͔͔͕࣌ؒͬͨ ࣨའ͔Βߤ࿏Λ੔උͰ͖Ε͹ େ෯ʹ͕࣌ؒ୹ॖͰ͖Δ͔΋͠Εͳ͍ খḺˠ໢૸΁ߦ͘ͷʹ ೔ߴɺѴ઒ɺ۴࿏ͳͲΛܦ༝ͯ͠ ඞཁͳ΋ͷΛἧ͍͑ͯ͘ͷ͕ΞδϟΠϧ ৐Γ෺ʢెาɺഅɺඈߦધʣ͕%FW0QT ಓͷ։୓͕1MBUGPSN&OHJOFFSJOH $PQZSJHIU4PVHPV4IPVLFO$0 -UE"MM3JHIUT3FTFSWFE

Slide 13

Slide 13 text

,"(ͷ1MBUGPSN&OHJOFFSJOHͱ   ࢧԉπʔϧ܈ʮLBHUPPMTʯ

Slide 14

Slide 14 text

,"(1'&νʔϜͷ͓࢓ࣄ • ࣾ಺ڞ௨(JU)VC&OUFSQSJTF4FSWFSʢ()&4ʣͷ؅ཧ • ()&4΍ࣗࣾΫϥ΢υ؀ڥͷίετ࠷దԽ • ࣗࣾΫϥ΢υ؀ڥ΍*E1ͷӡ༻ɺ؅ཧ • ࣗࣾΫϥ΢υ؀ڥͱ֤Ҋ݅؀ڥͷηΩϡϦςΟվળ   ˠ4FDVSJUZ)VC΍(VBSE%VUZͷಋೖɺ؅ཧͳͲ • ֤εΫϥϜνʔϜ΁ͷώΞϦϯάɺࢧԉϝχϡʔ࡞੒ • ͦͷଞ ։ൃऀ؀ڥͷҰ෦Πϯϑϥ؅ཧ΍෦෼తͳ$$P&Λ୲͍ͳ͕Β গͣͭ͠1MBUGPSN&OHJOFFSJOHΛ࣮ફ

Slide 15

Slide 15 text

ηϧϑαʔϏεܕͷϓϥοτϑΥʔϜ 1MBUGPSN&OHJOFFSJOHPO4FSWFSMFTT IUUQTTQFBLFSEFDLDPN@LFOTIQMBUGPSNFOHJOFFSJOHPOTFSWFSMFTT • "84ͷ৔߹ɺҎԼͷ͕ͭީิʹͳΓಘΔ • "NB[PO$PEF$BUBMZTU • "844FSWJDF$BUBMPH • #BDLTUBHF • (JU)VCͳͲͷίʔυϦϙδτϦͰ΋ఏڙ͸Մೳ   ˠ,"(Ͱ͸ࣾ಺ͷ(JU)VC&OUFSQSJTF0SHBOJ[BUJPOΛ׆༻

Slide 16

Slide 16 text

(JU)VC&OUFSQSJTFͷ੔උʹΑΔ஍൫ݻΊ ϙʔλϧϦϙδτϦͷ࡞੒ ϦϙδτϦͷ࡞੒ϧʔϧ੍ఆ 5FBNTʹΑΔݖݶ؅ཧ

Slide 17

Slide 17 text

ηϧϑαʔϏεπʔϧ܈ʮLBHUPPMTʯ w1MBUGPSN&OHJOFFSJOHͱͯ͠ͷࢧԉπʔϧΛఏڙ͍ͨ͠ͱ͍͏ϞνϕʔγϣϯͰ։࢝ w·ͣ͸ݩʑͷ1'&෦ʹΑΔۀ຿ʢΠϯϑϥ΍$$P&دΓʣʹؔ࿈͢Δ΋ͷΛ૝ఆ wηΩϡϦςΟɺΨόφϯεܥ wίετͷ࡟ݮ w(JU)VC&OUFSQSJTFͷར༻ิॿ LBHUPPMT w ϓϥοτϑΥʔϜνʔϜ͕ఏڙ͢ΔࢧԉπʔϧʢϦϙδτϦʣ܈ w *B$ɺίʔυεχϖοτͳͲศརͳπʔϧ΍ɺηΩϡϦςΟ্࣮ࢪͯ͠ཉ͍͠΋ͷΛల։༧ఆ

Slide 18

Slide 18 text

LBHUPPMTͷ঺հ • (VBSE%VUZ4VNNBSJ[FS • (VBSE%VUZͷݕग़݁ՌΛ#FESPDLͰ෼͔Γ΍͔ͯ͘͢͠Β௨஌ • 4FDVSJUZ)VCʹू໿͞Εͨ(VBSE%VUZݕग़݁Ռʹ΋ରԠ • $PEF#VJME3VOOFS • ()&ͷ4FMGIPTUFE3VOOFSΛϚωʔδυͰల։ • 71$ͷ࡞੒͔Β(JU)VC"QQTܦ༝Ͱͷ઀ଓ·ͰΨΠυ෇͖Ͱ࡞੒ • /"54DIFEVMFS • /"5(BUFXBZΛ༵೔ͱ࣌ؒͰ࡞੒࡟আ͠ɺίετΛ࡟ݮ • TBNQMFTFDVSJUZIVCOPUJGJDBUJPOT • 4FDVSJUZ)VC͔Βͷ௨஌Λ4MBDL΁ૹ৴͢ΔͨΊͷ5FSSBGPSNίʔυ

Slide 19

Slide 19 text

ྫɿ(VBSE%VUZ4VNNBSJ[FS (VBSE%VUZ͔Βͷ௨஌Λ ͦͷ··4/4Ͱૹ৴͢Δͱ ͚ͬ͜͏ೝ஌ෛՙߴ͍ͷͰ શ෦#FESPDLʹ౤͛ͯ ͍͍ײ͡ʹͯ͠௨஌

Slide 20

Slide 20 text

ྫɿ(VBSE%VUZ4VNNBSJ[FSͷߏ੒ *B$ʹ*OGSBTUSVDUVSF$PNQPTFSɺΞϓϦέʔγϣϯʹ4UFQ'VODUJPOTΛར༻ͯ͠ ϩʔίʔυ͔ͭ(6*Ͱͷࢹ֮ԽʹΑΔೝ஌ෛՙͷܰݮΛ࣮ݱ AWS Cloud GuardDuty Step Functions Bedrock SNS Invoke Execute EventBridge User Threats E-Mail Publish Slack Security Hub ᶃ(VBSE%VUZͷΠϕϯτΛ௚઀र͏ ᶄ4FDVSJUZ)VCʹू໿͞ΕͨΠϕϯτΛर͏ ͷͲͪΒ͔Λબ୒ͯ͠σϓϩΠՄೳ

Slide 21

Slide 21 text

Πϯφʔιʔεͷ׆༻

Slide 22

Slide 22 text

,"(ͷ૊৫ͱ1MBUGPSN&OHJOFFSJOHతͳ՝୊ • ,"(ͷ૊৫ܗଶ • ࣄۀձࣾͱҟͳΓɺ֤Ҋ֤݅νʔϜͰγεςϜ͕ҟͳΔ • "84͚ͩͰͳ͘(PPHMF$MPVE"[VSFͷҊ݅΋ͦͦ͜͜ • ஍ਤʢཱྀߦઌʣ΍ަ௨खஈʢࣗಈंɺమಓɺඈߦػɺધʣ͕όϥόϥ   ˠಓ࿏͚ͩͰͳ͘ઢ࿏΍ۭ࿏ɺߤ࿏΋੔උ͠ͳ͚Ε͹ͳΒͳ͍ • ϓϥοτϑΥʔϜνʔϜͷݶք • ΧόʔͰ͖Δٕज़ྖҬ͕ݶΒΕͯ͠·͏   ˠʮࢧԉͰ͖Δ΋ͷʯͱʮٻΊΒΕ͍ͯΔ΋ͷʯͷΞϯϚον • πʔϧ૿ՃʹΑΔϝϯςφϯε΍վળ͕Ͱ͖Δ࿑ྗͷෆ଍ • ಓ࿏Ҏ֎Λ։୓Ͱ͖ΔϦιʔε΍ϊ΢ϋ΢͕଍Γͳ͍ • ޮՌతʹ֤νʔϜΛࢧԉͰ͖Δ͔ͱ͍͏ෆ҆ɾɾɾ

Slide 23

Slide 23 text

ͦΜͳͱ͖ʹग़ձͬͨͷ͕ ͪ͜Β

Slide 24

Slide 24 text

IUUQTZPVUVCF/0I@J'-:D TJ@,NF.TX#RER1(

Slide 25

Slide 25 text

No content

Slide 26

Slide 26 text

ɹͦ͏ͩɺ ɹΠϯφʔιʔεɺ ɹ΍Ζ͏ɻ

Slide 27

Slide 27 text

Πϯφʔιʔεͱ͸ʁ ΠϯφʔιʔεͰ࢝ΊΔ૊৫಺Φʔϓϯιʔε։ൃೖ໳ IUUQTTQFBLFSEFDLDPNZVIBUUPSJOOFSTPVSDFMFBSOJOHQBUIKBQBOFTF ҰݴͰද͢ͱʮࣾ಺Φʔϓϯιʔεʯ

Slide 28

Slide 28 text

LBHUPPMTͷํ਑มߋ LBHUPPMT w ϓϥοτϑΥʔϜνʔϜ͕ఏڙ͢ΔࢧԉπʔϧʢϦϙδτϦʣ܈ w *B$ɺίʔυεχϖοτͳͲศརͳπʔϧ΍ɺηΩϡϦςΟ্࣮ࢪͯ͠ཉ͍͠΋ͷΛల։༧ఆ w $0/53*#65*/(NEΛઃ͚ɺ։ൃऀ͔ΒͷίϯτϦϏϡʔγϣϯΛΦʔϓϯʹड͚ೖΕ

Slide 29

Slide 29 text

LBHJTNͷ௥Ճ ͲͪΒ΋Πϯφʔιʔεʢࣾ಺ΦʔϓϯιʔεʣͷҐஔ෇͚ ؅ཧӡ༻ͷओମ͕ϓϥοτϑΥʔϜνʔϜ͔༗ࢤ͔ͷҧ͍ LBHUPPMT w ϓϥοτϑΥʔϜνʔϜ͕ఏڙ͢ΔࢧԉπʔϧʢϦϙδτϦʣ܈ w *B$ɺίʔυεχϖοτͳͲศརͳπʔϧ΍ɺηΩϡϦςΟ্࣮ࢪͯ͠ཉ͍͠΋ͷΛల։༧ఆ w $0/53*#65*/(NEΛઃ͚ɺ։ൃऀ͔ΒͷίϯτϦϏϡʔγϣϯΛΦʔϓϯʹड͚ೖΕ LBHJTN w ֤νʔϜ΍ϧʔϧͳͲɺࣾ಺ͷ͋ΒΏΔ৔ॴ͔Βఏڙӡ༻͞ΕΔϓϩμΫτ w ϦϙδτϦͷ࡞੒ϧʔϧʹଇΕ͹୭Ͱ΋ఏڙ0, w ֤ϦϙδτϦͷϧʔϧʹै͑͹୭Ͱ΋ίϯτϦϏϡʔτ0, ಠஅͰউखʹ໊෇͚·ͨ͠

Slide 30

Slide 30 text

LBHJTNͷJTNͬͯͳʹʁ JOOFSTPVSDFNBO

Slide 31

Slide 31 text

1MBUGPSN&OHJOFFSJOHºΠϯφʔιʔεͷޮՌ • Φʔϓϯͳ؀ڥͷߏங • πʔϧ΍φϨοδΛࣾ಺શମͰڞ༗ɺ஝ੵ • ʮंྠͷ࠶ൃ໌ʯͷ๷ࢭɺαΠϩԽͷղফ • ίϥϘϨʔγϣϯจԽͷৢ੒ • ࣗൃతͳϑΟʔυόοΫͱίϯτϦϏϡʔγϣϯͷଅਐ • νʔϜؒɺνʔϜͱ1'&νʔϜؒͷίϛϡχέʔγϣϯڧԽ   ˠ֤νʔϜͷʮधཁʯΛΑΓ೺ѲͰ͖ΔΑ͏ʹͳΔ • ϓϩμΫτͱ૊৫ͷվળ • πʔϧͷ඼࣭΍։ൃੜ࢈ੑͷ޲্

Slide 32

Slide 32 text

,"(1MBUGPSN&OHJOFFSJOHͷ՝୊ • Πϯφʔιʔε͸ʮ1'&νʔϜͷෛ୲ܰݮʯΛҙຯ͠ͳ͍ • ϝϯςφϯεͷͨΊʹ͸֤ఏڙπʔϧΛཧղ͢Δඞཁ͕͋Δ • ։ൃνʔϜ͕ٻΊ͍ͯΔ΋ͷΛ἞ΈऔΓɺఏڙ͢Δ౒Ί͸࢒Δ • ʮࣗൃతͳࢀՃʯΛଅ͢؀ڥͮ͘Γ͕ٻΊΒΕΔ • πʔϧͷఏڙ΍ίϯτϦϏϡʔγϣϯ͸͋͘·Ͱળҙʢ༗ࢤʣ • ͍͔ʹଟ͘ͷϝϯόʔʹಈػ෇͚Λ༩͑ɺר͖ࠐΊΔ͔͕ॏཁ ˠҰछͷࣾ಺ίϛϡχςΟΛ1'&νʔϜ͕ӡӦ͢ΔΑ͏ͳߏਤ • ޮՌͷଌఆΛߦ͏ͨΊͷࢦඪ୳͠ • Πϯφʔιʔεͷҙٛ΍ӨڹΛఆྔతʹଌΔʢ4UBS਺ͳͲʁʣ

Slide 33

Slide 33 text

ԿΑΓֶΜͰ࣮ફ͢΂͖ʂ νʔϜτϙϩδʔ Πϯφʔιʔεύλʔϯ ίϛϡχςΟ ͦͷଞ༷ʑͳ ઌਓͷ࣮ફྫ΋͋Γ

Slide 34

Slide 34 text

·ͱΊ

Slide 35

Slide 35 text

·ͱΊ • 1MBUGPSN&OHJOFFSJOHͷऔΓ૊ΈΛଅਐ্͍ͯ͘͠Ͱɺ   ΠϯφʔιʔεʹײԽ͞Εɺཱ྆ͤ͞ΔܗͰൃ଍   ˠʮLBHUPPMTʯͱʮLBHJTNʯ • 1MBUGPSN&OHJOFFSJOHͱΠϯφʔιʔεͱͷ૊Έ߹ΘͤʹΑΓɺ   αΠϩԽͷղফ΍ंྠͷ࠶ൃ໌ͷ཈੍͕ظ଴Ͱ͖Δ • Πϯφʔιʔε׆ಈ͸1'&͕ӡӦ͢ΔίϛϡχςΟ   ˠଟ͘ͷਓΛר͖ࠐΈͳ͕ΒɺࣗൃతͳจԽΛৢ੒͢Δ • ઌਓͷφϨοδͱίϛϡχςΟ͔Βֶͼɺ࣮ફ͢Δʂ

Slide 36

Slide 36 text

5IBOLZPVʂ