Kubernetes ͱ CI/CD ͷ ׆༻ʹ͍ͭͯ 

Agenda • ͸͡Ίʹ • γεςϜ֓ཁ • Kubernetes ͷ׆༻ • GitHub Actions Ͱͷ CI/CD • ࠓޙͷվળ఺ 

͸͡Ίʹ 

୭ • ύʔιϧΩϟϦΞגࣜձࣾ αʔϏεاը։ൃຊ෦ • @_k725 • ۀ຿: Πϯϑϥ, ηΩϡϦςΟͷ ΞυόΠεɾۀ຿؀ڥվળͳͲ • झຯ: ϓϩάϥϛϯά, OPSEC, OSINT, ͓ण࢘޷͖🍣 

಺༰ʹؔͯ͠ • Kubernetes ʹ͍ͭͯ৮ΕΔ෦෼͕ଟ͍Ͱ͢ 🙇 

γεςϜ֓ཁ 

ͦ΋ͦ΋͜Ε͸…? • ݱࡏӡ༻͍ͯ͠Δ CAREER POCKET* ͷத৺తͳσʔλϕʔε • σʔλϕʔεͷϓϩδΣΫτ໊͸ Candicom • Candidate (ީิ) + Communication (΍ΓͱΓ) = Candicom • αΠϘ΢ζࣾͷ Kintone Λར༻͍͕ͯͨ͠ ࣾ಺ͷنఆʹΑΓར༻Λଓ͚Δͷ͕೉͘͠ͳͬͨ • ؆୯ͳಡΈॻ͖͢Δ API Λඋ͑ͨɺϛχαΠζͷΫϩʔϯ * CAREER POCKET ʹ͍ͭͯ͸ޙड़ 

ར༻Πϝʔδ ౤ߘ స৬τʔΫ ཤྺه࿥* Candicom * ཤྺͳͲͷ৘ใ͸ར༻ऀͷಉҙͷԼอ؅͍ͯ͠·͢ 

ػೳ • ϑΟϧλΛ࢖༻ͨ͠Ϧετ • CSV Πϯϙʔτ, ΤΫεϙʔτ • RESTful ͳ CRUD API 

Kubernetes ͷ׆༻ 

Kubernetes (k8s) ͱ͸ • Google ͕ઃܭͨ͠ίϯςφΦʔέ ετϨʔγϣϯγεςϜ • ίϯςφΛΫϥελ (ෳ਺ͷϚγϯ ͷଋ) ಺Ͱԣஅͯ͠σϓϩΠ, ε έʔϦϯά͢ΔͨΊͷϓϥοτ ϑΥʔϜ Kubernetes - Wikimedia Commons / CC BY 4.0 

Πϯϑϥߏ੒ 

Pros and Cons • Pros ☺ • ಛఆͷίϯϙʔωϯτͷΈͷߋ৽ͷ৔߹ɺӨڹൣғ͕ݶΒΕΔ • εέʔϦϯά, Autohealing, ϩΪϯά, ϝτϦΫεऔಘͷԸܙ͕ Kubernetes ʹΑͬͯಘΒΕΔ (ओʹϚωʔδυͳ Kubernetes ͷ৔߹) • Cons 😭 • Kubernetes ୯ମͰͷӡ༻͸͸͖ͬΓݴͬͯͭΒ͍ [ཁग़య] • σϓϩΠपΓͳͲ͸ॳظͷஈ֊Ͱؾͮ͘ • ಛʹεςʔτΛ࣋ͭϦιʔε (DB, ΩϟογϡͳͲ) Λ ΫϥελʹࠞͥΔͱ໽հͳଘࡏʹͳΔ 

GitHub Actions Ͱͷ CI/CD 

Կ΋ߟ͑ͳ͍ͱ٧·Δ • ಛʹ kubectl yaml ؔ࿈ • Q. ࠷৽ͷΠϝʔδΛৗʹ࢖͏Α͏ʹ͢Δʹ͸ʁ • ΠϝʔδλάΛมߋ͠ͳ͍ͱ৽͍͠ίϯςφ͕σϓϩΠ͞Εͳ͍ • Ͱ΋ɺ೴ࢮͰ docker pull [image]:latest ͍ͨ͠ • Q. ։ൃ, εςʔδϯά, ঎༻؀ڥͰͷ஋ͷ੾Γସ͑Λߦ͏ʹ͸ʁ • ௕ʑ͍͠ yaml ΛίϐϖࡇΓͨ͘͠ͳ͍ • Q. ൿಗʹ͢΂͖৘ใ͸Ͳ͏΍ͬͯӅ͢ʁ • ྲྀੴʹ؀ڥม਺ʹϕλॻ͖͸ͭΒ͍ 

࠷৽ͷΠϝʔδΛৗʹ࢖͍͍ͨ • 1. Skaffold* ͰΠϝʔδͷ Ϗϧυɾϓογϡ • 2. latest λά΋Ϗϧυ͠ ͨΠϝʔδʹ͚ͭͯ͋͛ ͯϓογϡ͢Δ • 3. Skaffold Ͱ Kubernetes Ϋϥελ΁ͷσϓϩΠ * Skaffold ʹ͍ͭͯ͸ޙड़ 

Skaffoldͱ͸ • Google Ͱ࡞ΒΕͨ Kubernetes ΁ͷσϓϩΠΛศརʹ͢Δπʔϧ • kubectl, kustomize, helm ͳͲΛΑ͠ͳʹ࣮ߦͯ͘͠ΕΔ • ϥούʔ + Ұ෦ಠࣗͷػೳ ͷΑ͏ͳ… 

؀ڥຖʹ஋Λ੾Γସ͍͑ͨ 

ൿಗ৘ใΛ͍࣋ͪͨ • Β͘Β͘ίʔε (ඪ४ػೳ) • Ϋϥελ΁ͷ؅ཧݖݶΛ࣋ͬͯΔͱ༨༟ͰσʔλΛݟΔ͜ͱ͕ग़དྷΔ • GCP ͷ؅ཧը໘͔Β Key-Value ͷ Key ͸֬ೝՄೳ • ͜ͷϦιʔεࣗମ΋ yaml ͰදݱͰ͖Δ͕ɺ͜ͷํ๏Λ࢖͏৔߹͸ ҙਤతʹ yaml Λॻ͔ͳ͍ํ͕ྑͦ͞͏ɻ (git ʹίϛοτͱ͔ͷՄೳੑ) 

ൿಗ৘ใΛ͍࣋ͪͨ • ηΩϡΞίʔε • HashiCorp Vault • جຊతͳ Key-Value ܗࣜͰͷอ؅Ҏ֎ʹɺಈతͳ IAM ੜ੒ɺ σʔλͷ༗ޮظݶɺ؂ࠪϩάɺσʔλͷ҉߸Խ/෮߸Խ ͳͲͳͲ ߦ͑Δ • AWS KMS, Cloud KMS, Cloud Secret Manager ͳͲ 

ͨͩ͠ • (ͲͷΈͪ) Ϋϥελ, Pod ಺ʹ৵ೖ͞ΕΔͱ͍͘Β IAM Λߜ͍ͬͯͯ ΋Ωπ͍෦෼΋͋Δ (RBAC ͷ࢖༻ͰΧόʔग़དྷΔ෦෼΋͋Δ) • ϓϩάϥϜଆ΋ϝϞϦʹೝূ৘ใͳͲΛ࣋ͭ͜ͱʹͳΔͷͰɺϦʔυ ΦϯϦʔίϯςφ & γΣϧΞΫηεണୣͩͬͨΓ͢Δ΂͖ (?) • ͜ͷลΓ͸ GKE ͷυΩϡϝϯτͳͲΛಡΈ·͕࣮ͨ֬͠ͳͷ͸ෆ ໌… 

ࠓޙ*ͷվળ఺ ͜ͷล͸ղܾ👏 *ࠓޙͱ͔ॻ͖ͭͭ͜ͷ࿩ͷݩωλ͸ 2020/06 ͘Β͍Ͱ͢… 

END