自作 Controller による Secret の配布と収集 / Distributing and collecting secrets with self-made controller

by Takayuki Kasai

Slide 1

Slide 1 text

Slide 2

Slide 2 text

Slide 3

Slide 3 text

Slide 4

Slide 4 text

Slide 5

Slide 5 text

©2019 Wantedly, Inc. 4FDSFUͷ഑෍ w શͯͷ/BNFTQBDFʹڞ௨ͯ͠ઃఆͯ͠ཉ͍͠4FDSFU͕͋Δ w JNBHF1VMM4FDSFU EEBHFOUUPLFO FUD w /BNFTQBDFΛ࡞Δͨͼʹઃఆ͢Δͷ͸໘౗ w 4FDSFUΛ௥Ճมߋ࡟আͨ͠Βطଘͷ/BNFTQBDFʹ΋൓өͯ͠΄͍͠ ˠXBOUFEMZLOTLFMͱ͍͏$POUSPMMFSΛ࡞੒ͨ͠ w DMJFOUHP࣮૷ w ࡞੒ͨ͠ͷ͸Կ΋ແ͔ͬͨ೥લɹࠓͳΒ1PE1SFTFUΛ࢖͏

Slide 6

Slide 6 text

Slide 7

Slide 7 text

Slide 8

Slide 8 text

©2019 Wantedly, Inc. എܠ"SHPͷಋೖ templates: - name: alpine container: image: alpine command: - job-A - name: ubuntu container: image: ubuntu command: - job-Z - name: argo-workflow dag: tasks: - name: alpine-job-A template: alpine - name: ubuntu-job-Z dependencies: [alpine-job-A] template: ubuntu "SHP8PSLqPXϑΝΠϧͷྫ ʢؔ܎ͳ͍෦෼͸লུʣ

Slide 9

Slide 9 text

©2019 Wantedly, Inc. 4FDSFUͷऩूϞνϕʔγϣϯ "SHP8PSLqPXͷઃܭͱ8BOUFEMZͷӡ༻ϧʔϧͷ૬ੑ͕ѱ͍ w /BNFTQBDF.JDSPTFSWJDFͱ͍͏ӡ༻ϧʔϧ w ֤.JDSPTFSWJDFͷ؀ڥม਺͸֤/BNFTQBDFͷઐ༻4FDSFUͰ؅ཧ͞Ε͍ͯΔ w ͭͷ8PSLqPX͕ෳ਺ͷ.JDSPTFSWJDFͰߏ੒͞ΕΔ͜ͱ͕͋Δ w 8PSLqPXʹؚ·ΕΔ֤εςοϓ͸શͯͭͷ/BNFTQBDF಺Ͱ࣮ߦ͞ΕΔ w ֤εςοϓͰඞཁͳ؀ڥม਺͕ผͷ/BNFTQBDFʹ͋ͬͯಡΈࠐΊͳ͍ ෳ਺.JDSPTFSWJDFͷ4FDSFUΛͭͷ/BNFTQBDFʹू໿͢Δඞཁੑ

Slide 10

Slide 10 text

Slide 11

Slide 11 text

©2019 Wantedly, Inc. 4FDSFUͷऩूͲ͏΍͔ͬͨ apiVersion: rigger.k8s.wantedly.com/v1beta1 kind: Plan metadata: name: plan-sample spec: syncTargetSecretName: env syncDestNamespace: sync-dest XBOUFEMZSJHHFS w 1MBO3FTPVSDFͰઃఆ͢Δ w TZOD5BSHFU4FDSFU/BNF w ෳ੡ݩͷ4FDSFU໊ w TZOD%FTU/BNFTQBDF w ෳ੡ઌͷ/BNFTQBDF໊

Slide 12

Slide 12 text

©2019 Wantedly, Inc. /BNFTQBDFTZODEFTU 4FDFUTFSWJDFCB[FOW 4FDFUTFSWJDFCBSFOW /BNFTQBDFTFSWJDFCB[ /BNFTQBDFTFSWJDFCBS /BNFTQBDFTFSWJDFGPP 4FDSFUͷऩूͲ͏΍͔ͬͨ 4FDFUFOW 4FDFUFOW 4FDFUFOW 50,&/BBB 50,&/ZZZ 50,&/[[[ 4FDFUTFSWJDFGPPFOW 50,&/BBB 50,&/ZZZ 50,&/[[[ SJHHFS