Upgrade to Pro
— share decks privately, control downloads, hide ads and more …
Speaker Deck
Sign up for free
Menu
Search
Features
All features
Private URLs
Password Protection
Custom URLS
Scheduled publishing
Remove Branding
Restrict embedding
Deck Collections
Notes
Features
All features
Private URLs
Password Protection
Custom URLS
Scheduled publishing
Remove Branding
Restrict embedding
Deck Collections
Notes
Explore
Featured decks
Featured speakers
Programming
Technology
Storyboards
Explore
Featured decks
Featured speakers
Programming
Technology
Storyboards
Pricing
Search
Sign in
Sign up for free
「全然わからない。俺たちは雰囲気でコンテナをやっている」 /operating-contain...
Search
KONDO Uchio
February 17, 2018
Technology
18k
33
Share
Embed
Copy iframe code
Copy JS code
Copy link
Start on current slide
「全然わからない。俺たちは雰囲気でコンテナをやっている」 /operating-containers-just-with-a-hunch
Hacker Tackle 2018 発表資料
KONDO Uchio
February 17, 2018
More Decks by KONDO Uchio
See All by KONDO Uchio
大規模レガシーテストを 倒すための CI基盤の作り方 / #CICD2023
udzura
5
2.6k
Ruby x BPF in Action / RubyKaigi 2022
udzura
0
330
Narrative of Ruby & Rust
udzura
0
280
開発者生産性指標の可視化 / pepabo-four-keys
udzura
3
1.9k
Talk of RBS
udzura
0
520
Re: みなさん最近どうですか? / FGN tech meetup in 2021
udzura
0
870
Dockerとやわらかい仮想化 - ProSec-IT/SECKUN 2021 edition -
udzura
2
830
Device access filtering in cgroup v2
udzura
1
1.1k
"Story of Rucy" on RubyKaigi takeout 2021
udzura
0
960
Other Decks in Technology
See All in Technology
AIがコードを書く時代に、エンジニアは何で自分の価値を証明するのか / In an era where AI writes code how do engineers prove their value
carta_engineering
3
1.1k
ストレスなくAIと付き合いたい!こんなときどうしてる?
namiki64
3
590
Rustuna: Rustによる高速なOptuna実装
pfn
PRO
0
200
『SAR衛星データ解析入門』のご紹介とその応用
syuchimu
0
120
How to Design Configuration for Rails Applications
willnet
1
830
FinOps Agentが生んだ技術負債:コスト自動調査の落とし穴と解消までの道のり
oasis1994liveforever
1
120
Optunaの最新リリースv5.0について
pfn
PRO
0
120
会社説明資料
persolserverworks
0
9.8k
Railsで挑む大量データ永続化 〜600億件を永続化するための設計とボトルネックとの戦い〜
occhi
1
720
JAWS-UGグッズ職人仕事の流儀
kentapapa
0
120
⾮構造化データを価値に変える AI エージェント基盤とその組織
ivry_presentationmaterials
0
190
Gemini Intelligence 入門 ― AppFunctions と Gemini Nano
takuroabe
0
290
Featured
See All Featured
How to Build an AI Search Optimization Roadmap - Criteria and Steps to Take #SEOIRL
aleyda
1
2.2k
Writing Fast Ruby
sferik
630
63k
30 Presentation Tips
portentint
PRO
1
430
The B2B funnel & how to create a winning content strategy
katarinadahlin
PRO
1
570
Optimizing for Happiness
mojombo
378
71k
Why You Should Never Use an ORM
jnunemaker
PRO
61
10k
Fireside Chat
paigeccino
43
4.1k
実際に使うSQLの書き方 徹底解説 / pgcon21j-tutorial
soudai
PRO
203
77k
The Spectacular Lies of Maps
axbom
PRO
1
1.1k
Redefining SEO in the New Era of Traffic Generation
szymonslowik
1
480
Everyday Curiosity
cassininazir
0
360
Impact Scores and Hybrid Strategies: The future of link building
tamaranovitovic
0
460
Transcript
ۙ౻Ӊஐ࿕(.01FQBCP *OD !)BDLFS5BDLMF શવΘ͔Βͳ͍ɻ ԶͨͪงғؾͰ ίϯςφΛͬͯ ͍Δ
ۙ౻Ӊஐ࿕!VE[VSB &$αʔϏεɺΦϯϥΠϯήʔϜ։ൃͳͲΛܦͯɺ ΑΓ(.0ϖύϘٕज़ج൫νʔϜɻಉΑ ΓԬࢢʹҠॅɻڞஶʹʰύʔϑΣΫτ3VCZʱ ʰύʔϑΣΫτ3BJMTʱͳͲ͕͋ΔɻNSVCZΛΈ ࠐΜͩ-JOVYίϯςφϥϯλΠϜʮ)BDPOJXBʯͷ ࡞ऀɻ)BDPOJXBؔ࿈ͷ׆ಈͱͯ͠ɺ3VCZ,BJHJ ͰͷτʔΫ͕࠾͞Εɺ·ͨιϑτΣΞ ͰୈճԬ3VCZେΛडɻݱࡏɺ)BDPOJXB Λϕʔεͱͨ͠ΫϥυαʔϏεͰ͋ΔʮϩϦϙο
ϓʂϚωʔδυΫϥυʯʹٕࣾज़ސ ͱ͠ ͯࢀՃ͍ͯ͠Δɻ
ࠓͷ͓ w งғؾͰίϯςφͷதΛཧղ͢Δ w งғؾͰίϯςφͷΤίγεςϜΛཧղɹ w งғؾͰίϯςφΛࣗ࡞͢Δʹ w ͳΜͳΜͩΑʂงғؾͬͯʂʢ·ͱΊʣ
งғؾͰίϯ ςφͷதΛ ཧղ͢Δ
ίϯςφԾԽ
ίϯςφɺ ࡞ͬͨ͜ͱ͋Γ·͔͢ʁ
͡Ό͋࡞ͬͯΈ·͠ΐ͏͔
%PDLFSΛྫʹ͠·͢ wී௨ͷ-JOVY 6CVOUV#JPOJD ʹ%PDLFSΛೖΕͯɺෳݸίϯςφΛ ࡞ͬͯΈΔɻ $ docker run --rm -d
debian:latest /bin/sleep 99 d003ac5389a1631d789f5d1b77bf201adc517ad9acc91bd5...
࠷ۙ DF ͷ%PDLFS w͜͜ͰɺΈͳ͞Μ͓ೃછΈͷQTίϚϯυΛൃߦͯ͠Έ·͠ΐ͏ w;Ή;Ή
ίϯςφͷTMFFQίϚϯυ ϗετϚγϯ͔Β ௨ৗͷϓϩηεͷΑ͏ʹݟ͑·͢
ͭ·Γ
ίϯςφϓϩηεͳΜ ͩʂʂʂʂʂʂʂʂʂʂʂʂʂʂʂʂ ʂʂʂʂʂʂʂʂʂʂ
ίϯςφʮԾԽʯͬͯݴ͏͚ΕͲ wίϯςφͷ࣮ݱʹ͓͍ͯɺϋʔυΣΞͷԾԽʢ$16ɺϝϞϦͳ Ͳʣߦ͍ͬͯͳ͍͜ͱʹҙɻ wEPDLFSSVOFYFDͳͲͰʮಠཱͨ͠-JOVYͷڥʹೖΔʯ͜ͱ͕ग़དྷ ΔɻͦͷΑ͏ʹಠཱͨ͠ڥΛ࡞ΕΔ͜ͱࣗମΛࢦͯ͠ɺʮԾԽʯ ͱݺΜͰ͍Δͱݴ͑Δɻ wٯʹϓϩηεͳͷͰɺͦͷଞͷԾԽख๏ΑΓܰྔͩ͠ɺΑΓࡉ͔ ੍͍ޚ͕ՄೳʹͳΔଆ໘͋Δɻ
DGͦͷଞͷԾԽ wϗετܕ͋Δ04ʹɺઐ༻ͷιϑτΣΞΛೖΕͯԾԽ͢Δ wϋΠύʔόΠβܕԾԽઐ༻ͷ04ͷ্Ͱ7.Λ্͛Δ wͳͲͳͲɺ࣮ݱͷํࣜز͔ͭ͋Δ͕ɺಛͱͯ͠ɺϋʔυΣΞͷ ԾԽΛߦ͏ɻͦͷͨΊ04ͷछྨࣗ༝ʹͳΔ͕ɺίϯςφΑΓ Φʔόʔϔου͕େ͖͘ͳΔɻ
None
None
ϓϩηε͕ίϯςφԽ͍ͯ͠Δ͔ௐΔ wΈΜͳ/procͷ͜ͱศརʹ׆༻ͯ͠·͢ΑͶʁ w/proc/PID/*ʹଘࡏ͢ΔϑΝΠϧʹ͍ͭͯɺී௨ͷϓϩηεͷͷ ͱʮίϯςφԽͨ͠ʯͷͷΛൺֱ͢Δͱɺز͔ͭͷଐੑ͕ҟͳͬͯ ͍Δ͜ͱ͕Θ͔Δɻ w/proc/PID/ns, /proc/PID/cgroup, /proc/PID/status,
ʮίϯςφԽʯ͢ΔͨΊͷ -JOVYͷػೳ
-JOVY/BNFTQBDF
QSPD1*%OT͕ҧ͏ wΑ͘ݟΔͱҧ͏ wVUTͱ͔JQDͱ͔NOUͱ͔ ͍Ζ͍Ζ͋Δ w͜ΕΒɺάϩʔόϧͳ໊લۭؒͱผͷ04ϦιʔεΛׂΓͯΒ Ε͍ͯΔ͜ͱΛҙຯ͢Δɻͦ͏͍͏໊લۭؒΛ-JOVY/BNFTQBDFͱ ݺΜͰ͍Δɻ wྫ͑654/BNFTQBDFάϩʔόϧͳϗετ໊ͱಠཱͨ͠ϗετ໊Λ࣋ͯΔ
None
ίϯςφͷωοτϫʔΫʹʮೖΔʯ wOTFOUFSͱ͍͏ίϚϯυͰ-JOVY/BNFTQBDFʹೖΔ͜ͱ͕Ͱ͖Δɻ wEPDLFSFYFDͱൺֱͯ͠ΈΑ͏ $ sudo nsenter \ --net=/proc/$( \ docker
inspect hackertackle_1 -f ‘{{.State.Pid}}' \ )/ns/net
EPDLFSFYFD OTFOUFS
DHSPVQ
DHSPVQͱ wDHSPVQ $POUSPM(SPVQ ͱɺҙͷϓϩηεΛάϧʔϐϯάͰ͖Δ ػೳɻͨͩάϧʔϓʹ͢Δ͚ͩͰͳ͘ɺͦͷάϧʔϓ͝ͱʹ04ͷϋʔ υΣΞͳͲͷϦιʔεΛ੍ݶɺ͋Δ͍౷ܭใΛऔಘͰ͖Δɻ wྫ w$16ͷ੍ݶάϧʔϓશମͷ$16ར༻Λ/ʹԡ͑ͨ͞ΓɺίΞΛ ݻఆͨ͠ΓͰ͖Δɻ·ͨ$16࣌ؒͷ౷ܭΘ͔Δ wϝϞϦͷ੍ݶάϧʔϓશମͰ͏ϝϞϦར༻ঢ়گΛ੍ݶɺܭଌͰ͖
Δɻݶքʹୡͨ࣌͠ͷڍಈબΔ
QJETαϒγεςϜ wͦͷάϧʔϓʹॴଐ͢ΔϓϩηεΛ੍ݶͰ͖Δɻ wDHSPVQಛఆͷϑΝΠϧʹॻ͖ࠐΉ͜ͱͰγϡοͱ͑Δɻ ݸʹ੍ݶ
ͦͷάϧʔϓʹॴଐ͢ΔϓϩηεΛ ੍ݶͰ͖Δ ʹ GPSLCPNCରࡦ͕Ͱ͖Δ
ࢼͯ͠Έ·͠ΐ͏ w˞ࣦഊ͢Δͱɺ؋͝ͱམͪ·͢ term1:~$ echo $$ #=> 5849 term2:~$ echo 5849
| \ sudo tee /sys/fs/cgroup/pids/hackertackle/tasks term1:~$ cat /proc/self/cgroup | grep pids 3:pids:/hackertackle term1:~$ #... doing fork bomb ...
ੜؐ
ͦͷଞͷػೳ wDISPPUQJWPU@SPPU͋ΔαϒσΟϨΫτϦʹೖΓࠐΉ wSMJNJUVMJNJUͷͭ w,FSOFM$BQBCJMJUZSPPUͷݖݶΛׂͯ͠Ұ෦Λ༩ɺୣ͏ wTFDDPNQγεςϜίʔϧͷϑΟϧλϦϯά w."$ BQQBSNPS4&-JOVY50.0:0ଞ
TFDDPNQͷྫ wίϯςφ෦ͰɺNLEJSίϚϯυͰ͏γεςϜίʔϧ ʢmkdir(2)ʣDIPXOίϚϯυͰ͏ͭʢchownat(2)ʣͷݺͼ ग़͠ΛϑΟϧλʔ͢Δ͜ͱ͕Ͱ͖Δɻͨͱ͑SPPUͰ֘ૢ࡞͕ෆՄ ೳʹɻ͖ͳίϚϯυΛstrace(1)Ͱௐͯ෧ҹ͠Α͏ʂ ➡ ➡
ং൫ͷ·ͱΊ wίϯςφಛघͳϓϩηεͱߟ͑Ε0, wϓϩηεΛϗετ͔ΒִɺϦιʔεΛ੍ݶɺݖݶΛηΩϡΞʹߜΓ ࠐΉ͜ͱͰɺ࣮࣭7.తಠཱڥͱ͢Δͷ͕جຊతͳߟ͑ํ wόϥόϥͷγεςϜίʔϧΛGPSLͱFYFDͷؒͰࣗͰݺͼग़ͤɺί ϯςφ͔ͨ͠ϓϩηεΛࣗ࡞͢Δ͜ͱͰ͖Δ
งғؾ௫Ί͔ͨͳʁ
งғؾͰίϯ ςφͷΤίγ εςϜΛཧղ
ίϯςφ༻ޠ
ίϯςφ༻ޠ %PDLFS -9$ -9% .PCZ ,VCFSOFUFT 'MBOOFM SVOD (,& &$4
"$* 0$* 5FDUPOJD $PSF04 )BDPOJXB SLU SBJMDBS $BMJDP /PNBE 4XBSN
ଟ͘ͳ͍ʁ
આ໌Ͱ͖·͔͢ʁ
ϨΠϠͰߟ͑ͯΈΔ SVOD %PDLFS -9$ -9% )BDPOJXB .PCZ SLU ,VCFSOFUFT 'MBOOFM
$BMJDP 4XBSN /PNBE SBJMDBS $3*0 $POUBJOFSE
ิॿઢΛҾ͜͏ SVOD %PDLFS -9$ -9% )BDPOJXB .PCZ SLU ,VCFSOFUFT 'MBOOFM
$BMJDP 4XBSN /PNBE SBJMDBS $3*0 $POUBJOFSE 0$* 4QFD $3*
0$* 0QFO$POUBJOFS*OJUJBUJWF
0$*ͱ wίϯςφͷ৭ʑͳنɾن֨Λඪ४Խ͍ͯ͠Δஂମ w0$*ͷنʹ४ڌ͢ΔͱԿ͕خ͍͔͠ʁ wΠϝʔδͷϑΥʔϚοτ͕౷Ұ͞Ε͍ճ͠Ͱ͖Δ w04͝ͱʹඞཁͳύϥϝʔλ͕ཧ͞ΕͯࣗͰඞཁͳϥϯλΠϜΛ ࣮Ͱ͖ͨΓ͢Δ w࣮ͨ͠ϥϯλΠϜΛ֎෦πʔϧͱ࿈ܞ͢Δͷ༰қʹͳΔ
ʢ·ͨʣ%PDLFSϑΝϛϦͰߟ͑ͯΈΑ͏ EPDLFSίϚϯυͰίϯςφΛ্ཱͪ͛ΔͱɺΊͪΌ໊͍લ ͷϓϩηε͕Ͱ͖ͯɺͦͷԼʹ࣮ࡍͷίϯςφͷ1*%ίϚϯ υ͕ੜ͑Δ͜ͱ͕Θ͔ΔɻSVODͱ͍͏Ωʔϫʔυ͕ݟ͑Δɻ
SVODͷϨΠϠʔՄͰ͋Δ w0$*ͷنͲ͓Γͷ࣮Λͨ͠ίϯςφϥϯλΠϜͰ͋Εɺ ͦΕΛ%PDLFSͷΠϯλʔϑΣʔε͔Βૢ࡞ͯ͠ίϯςφΛ࡞ΕΔ wͦͷ͋ͨΓΛDPOUBJOFSE EPDLFS ͰEPDLFSDPOUBJOFSETIJNͱ͍ ͏ϓϩάϥϜ͕୲͍ͬͯΔ
͍֮͑ͯ·͔͢ɺSBJMDBS w0SBDMFͷίϯςφϥϯλΠϜɺࠓͷτʔΫେگɾ3VTU w%PDLFSͷϥϯλΠϜʹSBJMDBSΛ͏Α͏ʹࢦఆՄೳ wSBJMDBSͰίϯςφΛ্ཱͪ͛ΔΑ͏ʹΦϓγϣϯΛೖΕΔ FEHFͷͰ͔͠ಈ͔ͳ͍ͷͰͦΕʹΞοϓάϨʔυ͓ͯ͘͠ ExecStart=/usr/bin/dockerd -H fd:// --experimental \
--add-runtime "rc=/usr/local/bin/railcar"
SBJMDBSΛ%PDLFSͰ͑Δ
$3* $POUBJOFS3VOUJNF*OUFSGBDF
͜ͷ ,VCFSOFUFT ʹؔͯ͠ wૉਓͳΜͰ͕͢ w͍͢·ͤΜɺશൠతʹงғؾͳΜͰ͕͢ wؒҧ͍ͬͯͨΒ͝ࢦఠ͓ئ͍͠·͢ʂ 8BSOJOH
NJOJDVCFͳͲͰαΫοͱLTڥΛ w࡞ͬͯΈΔ wNJOJLVCFTTIͰೖΔͱɺવEPDLFSϓϩηε͕ଘࡏ͍ͯ͠ΔͰ͢Ͷ wຬͨ͠ͷͰ ͜ͷڥফ͠·͢
ࠓɺΦϓγϣϯΛม͑Δ wҎԼͷΦϓγϣϯͰNJOJLVCFTUBSU͢Δ wʢ্ख͘ಈ͔ͳ͍࣌Ұ୴NJOJLVCFTUPQΦϓγϣϯແ͠Ͱ NJOJLVCFTUBSUʣ $ minikube start \ --network-plugin=cni \
--container-runtime=cri-o \ --bootstrapper=kubeadm
DSJP ͍ͬͯ͏ͭʁ w͕͍Δ w͍ͭ͜୭ͩ
DSJPSLUMFUͳͲͳͲ w$3*ͱɺ,VCFSOFUFT͔Βར༻͢ΔͨΊʹඞཁͳΠϯλϑΣʔεͷ ༷ͷࣄͰɺH31$Λ͍ͬͯΔ w$3*ϓϩτίϧΛΔσʔϞϯΛ্ཱͪ͛Δ͜ͱͰɺόοΫΤϯυͷ ࣮ʹؔͳ͘LVCFDUMͰಉ͡Α͏ʹΫϥελΛߏஙՄೳɻ wDSJPίϯςφϓϩηεΛ্ཱͪ͛ΔϥϯλΠϜʹSVODΛ͏ wSLUMFUίϯςφϓϩηεΛ্ཱͪ͛ΔϥϯλΠϜʹSLUΛ͏
͜͜·Ͱͷ·ͱΊ w0$*ͱ͍͏ஂମͷ࡞ͬͨنʹԊͬͯίϯςφϥϯλΠϜΛ࡞Δͱศ ར w$3*ͱ͍͏نʹԊ࣮ͬͨͰίϯςφϥϯλΠϜΛ࡞Δͱศར w͜ΕΒͷنͰίϯςφϥϯλΠϜͨͪΛઢҾ͖͢Δ͜ͱ͕Ͱ͖Δ
ṖͷਤΛՃͯ͠࠶ܝ SVOD -9$ -9% )BDPOJXB .PCZ SLU ,VCFSOFUFT 'MBOOFM $BMJDP
4XBSN /PNBE SBJMDBS $3*0 $POUBJOFSE 0$* 4QFD $3* ,FSOFMTZTDBMM
ṖͷਤΛՃͯ͠࠶ܝ SVOD -9$ -9% )BDPOJXB .PCZ SLU ,VCFSOFUFT 'MBOOFM $BMJDP
4XBSN /PNBE SBJMDBS $3*0 $POUBJOFSE 0$* 4QFD $3* ,FSOFMTZTDBMM ʮϥϯλΠϜʯͱ͍͏ݺͼํͰ͜ͷ྆ํͷൣғΛࢦ͍ͯ͠Δ ͷͰΊͪΌࠞཚ͢ΔɻͲͪΒͷׂ͔ҙࣝ͢Δͱ٢
ṖͷਤΛՃͯ͠࠶ܝ SVOD -9$ -9% )BDPOJXB .PCZ SLU ,VCFSOFUFT 'MBOOFM $BMJDP
4XBSN /PNBE SBJMDBS $3*0 $POUBJOFSE 0$* 4QFD $3* ,FSOFMTZTDBMM %PDLFS͜͜Λ ·ͱΊͯར༻͢ΔԿ͔
ṖͷਤΛՃͯ͠࠶ܝ SVOD -9$ -9% )BDPOJXB .PCZ SLU ,VCFSOFUFT 'MBOOFM $BMJDP
4XBSN /PNBE SBJMDBS $3*0 $POUBJOFSE ,FSOFMTZTDBMM -9$-9%ʹؔͯ͠ɺ0$*ͱ·ͨผ͕ͩɺ ͬ͘͟Γ-9$͕ΧʔωϧΓͱΓɺ-9%͕)551"1*Λ୲ )BDPOJXB͜Ε͔Β)551 5$1 JOUFSGBDFΛ࡞Γ·͢
࠷ޙͷϨΠϠʔ͚ SVOD -9$ -9% )BDPOJXB .PCZ SLU ,VCFSOFUFT 'MBOOFM $BMJDP
4XBSN /PNBE SBJMDBS $3*0 $POUBJOFSE 0$* 4QFD $3* ,FSOFMTZTDBMM
ίϯςφͷωοτϫʔΫઃఆ wز͔ͭઓུ͕͋Δɻ w ΫϥελϦϯά͠ͳ͍ wϗετϚγϯʹͱͲ·ΔͳΒɺ%PDLFSͷσϑΥϧτͰߏΘͳ͍ w ࣗྗͰWYMBOͳΓΛߏஙͯ͠ؤுΔ wίϯςφ͕͏ϒϦοδͳͲࣗͰҾͬுͬͯؤுͬͯؤுΔ w $/*ʹԊͬͨϓϥάΠϯΛར༻͢Δ
$/* $POUBJOFS/FUXPSL*OUFSGBDF
$/*ͱ w͜Ε·ͨɺ0QFO$POUBJOFS*OJUJBUJWFͷఆΊͨίϯςφͷωοτ ϫʔΫͷن w,VCFSOFUFTͰར༻Ͱ͖Δ wOFUXPSLQMVHJODOJͰىಈ͠ɺϚχϑΣετͰ$/*ͷ+40/ͱ γεςϜίϯςφͦͷଞΛྲྀ͠ࠐΉ wϚχϑΣετΛྲྀ͠ࠐΉͱɺϗετ/etc/cni/net.dʹઃఆ͕ೖ ΓɺඞཁͳγεςϜίϯςφ্ཱ͕͕ͪΓ༗ޮʹͳΔ
qBOOFMͷྫ wqBOOFMWYMBO -PWFS- Λ࣮ݱ͢ΔσʔϞϯ wࣗͰΜͰ͍͍͚Ͳɺ $/*ϓϥάΠϯ͕͋Δ $ kubectl apply -f
kube-flannel.yml ʮqBOOFMΛͬͯ-JOVYͰ࣮ݱ͢ΔWYMBOͷ͞ΘΓΛΔʯ IUUQTRJJUBDPNVE[VSBJUFNTCEEBGBCEG
DBMJDPͷྫ w1SPKFDU$BMJDP-ͷΈͰ࣮ݱ͍ͯ͠Δ εέʔϥϒϧͳωοτϫʔΫΛఏڙ͢Δ ϓϩδΣΫτɻ#(1Λར༻͍ͯ͠Δ w ʮ:BIPP+"1"/.FFU6QʢΠϯϑϥٕज़ΧϯϑΝϨϯεʣηογϣϯᶆʯ IUUQTXXXTMJEFTIBSFOFUUFDICMPHZBIPPZBIPPKBQBONFFUVQ $ kubectl apply
-f calico.yaml
ͦͷଞͷબࢶ wIUUQTLVCFSOFUFTJPEPDTDPODFQUTDMVTUFSBENJOJTUSBUJPO OFUXPSLJOH w͍Ζ͍ΖͳϨΠϠʔͰΊͪΌ͋Δ͠ɺϚωʔδυڥݻ༗ͷઃఆ͋ ΔΑ͏ͩʁ
࣮ϕʔεͳϨΠϠΘ͚·ͱΊ SVOD -9$ -9% )BDPOJXB .PCZ SLU ,VCFSOFUFT 'MBOOFM $BMJDP
4XBSN /PNBE SBJMDBS $3*0 $POUBJOFSE 0$* 4QFD $3* ,FSOFMTZTDBMM $/* $MVTUFSFE/PEF1PPM
ଟ ͜͜·ͰͰ
0OFNPSFUIJOH
งғؾͰίϯ ςφΛࣗ࡞͠ ͯΈͨ
ࣗ࡞Ұཡ wίϯςφϥϯλΠϜ)BDPOJXB wίϯςφઓུ ΦʔέετϨʔγϣϯ 'BTU$POUBJOFSXJUI/)).TUBDL
)BDPOJXB wίϯςφϥϯλΠϜɻNSVCZݴޠΛΈࠐΜͰ͍ͯɺίʔυͰίϯς φͷઃఆৼΔ͍ͳͲΛهड़Ͱ͖Δɻ wྫ͑ɺ࠷ॳʹઆ໌ͨ͠/BNFTQBDFͷԿΛ͢Δ͔ɺ*1ԿΛͭ ͚Δ͔ɺDHSPVQͷύϥϝʔλΛͲ͏͢Δ͔ɻ w͋Δ͍ɺىಈ࣌ɺఀࢭ࣌ɺىಈޙ/ඵޙʹಛఆͷॲཧΛߦ͏ɺɻ w͕࡞ͬͨɻ
'BTU$POUBJOFS wͬ͘͟ΓߦͰ wϦΫΤετ͕͋Δ·Ͱ ىಈ͠ͳ͍ wىಈޙɺҰఆ࣌ؒޙʹఀࢭ wͲΜͲΜίϯςφ͕॥͢Δ wDG1IPFOJY4FSWFST1BUUFSO wDG'BTU$(* ˞ʮҰาઌߦ͘ίϯςφཧΞʔΩςΫνϟʯ8&# %#13&447PM
ΦʔέετϨʔγϣϯΞʔΩςΫνϟ w$.%# $POUFOUT.BOBHFNFOU%BUBCBTF ͷঢ়ଶʹऩଋ͢Δ ˞ʮ'BTU$POUBJOFS࣮ߦڥͷมԽʹૉૣ͘దԠͰ͖Δ߃ৗੑΛ࣋ͭγεςϜΞʔΩςΫνϟʯদຊ྄հଞɺ
,VCFTUBDLͱͷൺֱ SVOD ,VCFSOFUFT 'MBOOFM $BMJDP $3*0 $POUBJOFSE ,FSOFMTZTDBMM $MVTUFSFE/PEF1PPM )BDPOJXB
OHY@NSVCZ CBTFE TFSWJDFNFTI OHY@NSVCZ )551"1* +BSEJO #SJEHF WFUI $.%# FUDE
࠙ձ Ͱ
ऴΘΓʹ
ίϯςφɺͬͯ·͔͢ʁ wԿͷͨΊʹ͍ͬͯ·͔͢ʁ w࣮ΘΕ͍ͯΔͷͰʁ wίϯςφͰ͋ͳͨͷղܾ͠·͔͢ʁ w ͍͢·ͤΜɺݴ͍ա͗·ͨ͠
ίϯςφͷ ʮงғؾʯ
ίϯςφͷ ֓೦Ϟσϧ
௨ৗ͖ΘΊͯ؆ૉԽ͞Εͨɺ͋ΔϞϊ͕Ͳ ͏ಈ͔͘ͷઆ໌ʢʣɻ ͜Εɺʹཱ͍ͬͯΔݶΓɺશͳͷ Ͱͳͯ͘Α͍ɻਖ਼֬Ͱ͋Δඞཁ͢Βͳ͍ɻ ʰ୭ͷͨΊͷσβΠϯʁʱ%"ϊʔϚϯɺ༁վగ൛
ίϯςφͷ֓೦Ϟσϧʁ wͦΕίϯςφͰ͢Ͷ w͍ΘΏΔϋΠύʔόΠβܕͳͲͷ7.ͱಉ͡Α͏ʹѻͬͯ͠·͏όΠ Ξε͕͋ΔͷͰͳ͍ͩΖ͏͔ɻ w࣮ࡍʮϩάΠϯʯͯ͠ʮ04ʯʹݟ͑ͯ͠·͏ͷͰɺͦ͏ͳΓ͕ͪ wLVCFDUMͳͲͷૢ࡞ͰޙΖͰԿ͕ى͍ͬͯ͜Δ͔૾Ͱ͖Δʁ w͔͠͠7.ͷΑ͏ʹԿ͔ԾԽ͞Ε͍ͯΔΘ͚Ͱͳ͍͠ɺϗε τʹΑΔ੍େ͖͍͠ɺඍົʹҧ͏ͱ͜Ζ͕ଟʑ͋Δɻ
ίϯςφΛͪΌΜͱӡ༻͢Δʹ ʢ·ͩ·ͩʣதΛ͍͔͚ͯ ཧղ͢Δ͜ͱ͕ॏཁɻ
ͦΕʹ தΛ͔ͬ͠Γཧղ͢Δ͜ͱ ָ͍͠ʢͣʣ
&OKPZ5BDLMJOH $POUBJOFS&DPTZTUFN
ࢀߟࢿྉ w0$* IUUQTHJUIVCDPNPQFODPOUBJOFSTSVOUJNFTQFD IUUQTHJUIVCDPNPQFODPOUBJOFSTJNBHFTQFD w1SPUPUZQJOH,VCFSOFUFT$3*CZ!SFNPSF͞Μ IUUQTTQFBLFSEFDLDPNSFNPSFQSPUPUZQJOHLVCFSOFUFTDSJ XJUISVCZBOEHSQD
4QFDJBM5IBOLT wϖύϘίϯςφࡾॐ࢜ͷ͓ೋਓʢ࠷ޙͷҰਓၟӽͳ͕Βʣ w!UONU w!S@UBLBJTIJ