Upgrade to Pro — share decks privately, control downloads, hide ads and more …

JavaScriptと歩くポリシーエンジン jsPolicy

RyuSA
December 07, 2021

JavaScriptと歩くポリシーエンジン jsPolicy

Kubernetesポリシーエンジンとして新しく出てきたjsPolicyについての紹介です

https://k8s-novice-jp.connpass.com/event/229951/

RyuSA

December 07, 2021
Tweet

More Decks by RyuSA

Other Decks in Technology

Transcript

  1. 3ZV4"
    +BWB4DSJQUͱา͘ϙϦγʔΤϯδϯ KT1PMJDZ
    ͋ʔΔʔ͜ʔɺ͋ʔΔʔ͜ʔ̇

    View Slide

  2. 3ZV4"
    'JOBODJBM4FSWJDF&OHJOFFS
    +BWB4QSJOH#PPU5ZQFTDSJQU3FBDU
    %PDLFS,VCFSOFUFT
    3ZV4"
    SZVTB@FOH

    View Slide

  3. ʹʮΞϯνύλʔϯʯͳϚχϑΣετΛνΣοΫ͢Δػߏ
    ྫಛݖ1PE΍ྨ͢Δ1PEΛېࢭ͍ͨ͠ ૊৫΍๏ྩʹ߹ΘͤͨίϯϓϥΠΞϯε੍ޚΛߦ͍͍ͨ FUD
    3#"$ɿϢʔβʔ͕Ϧιʔεʹରͯ͠ద੾ͳݖݶΛ͍࣋ͬͯΔ͔Λݕূ͢Δ
    ˠ ϚχϑΣετͷݕࠪ͸Ͱ͖ͳ͍
    1PE4FDVSJUZ1PMJDZɿ1PEͷϚχϑΣετͷݕࠪΛߦ͏ػೳ
    ˠ 1PEͷΈ ,VCFSOFUFT WͰ࡟আ༧ఆ
    ˠ SEQBSUZͷπʔϧΛ࢖ͬͯϚχϑΣετͷ݈શੑνΣοΫΛ͠Α͏ʂ DG"ENJTTJPO8FCIPPL
    ϙϦγʔΤϯδϯͱ͸

    View Slide

  4. ༗໊ͳϙϦγʔΤϯδϯ

    View Slide

  5. ༗໊ͳϙϦγʔΤϯδϯ
    ຊ೔ͷओ໾

    View Slide

  6. w -PGU-BCTࣾͷ։ൃ͍ͯ͠ΔϙϦγʔΤϯδϯ
    w ໊લͷ௨Γʮ+BWB4DSJQUʯͰϙϦγʔΛ࣮૷Ͱ͖Δ
    w ΈΜͳେ޷͖5ZQF4DSJQUͰ΋࣮૷Ͱ͖Δ
    w 7BMJEBUJPO.VUBUJPOαϙʔτ
    w ೚ҙͷ&WFOUΛड͚औͬͯΩοΫ͢Δ$POUSPMMFSػೳ

    View Slide

  7. શମͷྲྀΕߏ੒
    +T1PMJDZ#VOEMF
    7+BWB4DSJQU4BOECPY
    LVCFDUMDSFBUF
    8FCIPPL
    GFFECBDL
    3VO7BMJEBUJPO
    &YFD+BWB4DSJQU
    %FQMPZ$3
    %FWFMPQ+T1PMJDZ
    +T1PMJDZ

    View Slide

  8. ؾʹͳΔ࢖͍ํ
    ᶃ KT1PMJDZΛΫϥελʔʹΠϯετʔϧ
    )FMNͰαΫοͱ

    View Slide

  9. ؾʹͳΔ࢖͍ํ
    ᶄ 5ZQF4DSJQU+BWB4DSJQUͰ࣮૷
    ςϯϓϨʔτΛ׆༻͢Δͱ͍͍ײ͡

    View Slide

  10. ؾʹͳΔ࢖͍ํ
    ᶅ ୯ମςετͰϚχϑΣετݕࠪͷݕࠪ
    ୯ମςετϑϨʔϜϫʔΫKFTUͰίʔυΧόϨοδΛௐ΂Δ

    View Slide

  11. ؾʹͳΔ࢖͍ํ
    ᶆ XFCQBDLͷ+T1PMJDZϓϥάΠϯͰϏϧυ
    5ZQF4DSJQUΛίϯύΠϧ͠ɺΧελϜϦιʔεʹຒΊࠐΉ

    View Slide

  12. ؾʹͳΔ࢖͍ํ
    ᶇ LVCFDUMBQQMZͰ+T1PMJDZ#VOEMFϦιʔεΛσϓϩΠʂ
    Ϗϧυͨ͠ΧελϜϦιʔεΛσϓϩΠ͠ɺ"ENJTTJPO8FCIPPLʹొ࿥

    View Slide

  13. Ͷʁ͔ΜͨΜͰ͠ΐʁ

    View Slide

  14. w ΈΜͳͷڞ௨ݴޠ+BWB4DSJQUͰॻ͚Δ
    w +BWB4DSJQUʜʜϗϜϖʜʜ๚໰ऀ਺Χ΢ϯλʔʜʜřŕŗŦŵŜƄ
    w ηΩϡϦςΟʹؔΘΔ෦෼ͳͷͰɺνʔϜ૊৫಺Ͱߩݙ΁ͷϋʔυϧ͕௿͍͜ͱ͸ྑ͍͜ͱ
    w දݱྗ͸ແݶେ㱣
    w ݴޠͷදݱྗʹ೰Ή͜ͱ΋ͳ͘ͳΔ
    w ͨͩ΍Γ͗͢ʹ͸஫ҙ
    w /PEFKTͷΤίγεςϜΛϑϧ׆༻Ͱ͖Δ
    w LVCFSOFUFTDMJFOU!/PEFKT
    w ୯ମςετϑϨʔϜϫʔΫ KFTU
    w $*ύΠϓϥΠϯ
    w FUD
    1SPT

    View Slide

  15. $POT
    w མͪண͚ɺ·ͩϦϦʔεͨ͠͹͔Γͩʜʜʂ
    w ೥݄ʹճ໨ͷϦϦʔεͰ͋ΔW͕࡞੒͞Εͨ͹͔Γ
    w ຊ൪؀ڥಋೖʹ͸·ͩૣ͍ɺૉ௚ʹ01"΍,ZWFSOPΛ࢖͏ํ͕ྑͦ͞͏
    w ૬ख͸ɺ/PEFKTͰ͋Δ
    w ҉ࠇ+BWB4DSJQUࠇຐज़
    w ͜Μʹͪ͸ɺOPEF@NPEVMFT

    View Slide