Upgrade to Pro
— share decks privately, control downloads, hide ads and more …
Speaker Deck
Sign up for free
Menu
Search
Features
All features
Private URLs
Password Protection
Custom URLS
Scheduled publishing
Remove Branding
Restrict embedding
Deck Collections
Notes
Features
All features
Private URLs
Password Protection
Custom URLS
Scheduled publishing
Remove Branding
Restrict embedding
Deck Collections
Notes
Explore
Featured decks
Featured speakers
Programming
Technology
Storyboards
Explore
Featured decks
Featured speakers
Programming
Technology
Storyboards
Pricing
Search
Sign in
Sign up for free
「全然わからない。俺たちは雰囲気でコンテナをやっている」 /operating-contain...
Search
Sponsored
·
SiteGround - Reliable hosting with speed, security, and support you can count on.
→
KONDO Uchio
February 17, 2018
Technology
18k
33
Share
Embed
Copy iframe code
Copy JS code
Copy link
Start on current slide
「全然わからない。俺たちは雰囲気でコンテナをやっている」 /operating-containers-just-with-a-hunch
Hacker Tackle 2018 発表資料
KONDO Uchio
February 17, 2018
More Decks by KONDO Uchio
See All by KONDO Uchio
大規模レガシーテストを 倒すための CI基盤の作り方 / #CICD2023
udzura
5
2.6k
Ruby x BPF in Action / RubyKaigi 2022
udzura
0
340
Narrative of Ruby & Rust
udzura
0
290
開発者生産性指標の可視化 / pepabo-four-keys
udzura
3
1.9k
Talk of RBS
udzura
0
520
Re: みなさん最近どうですか? / FGN tech meetup in 2021
udzura
0
880
Dockerとやわらかい仮想化 - ProSec-IT/SECKUN 2021 edition -
udzura
2
840
Device access filtering in cgroup v2
udzura
1
1.1k
"Story of Rucy" on RubyKaigi takeout 2021
udzura
0
960
Other Decks in Technology
See All in Technology
Context Ontology Accelerator 入門 (業務データの意味を、AI エージェントに渡す)
inariku
PRO
3
590
FinOpsを導入してマルチプロダクトのコスト最適化を実現する
kworkdev
PRO
0
140
属人化したISMS運用をGitHubとAIで仕組み化した1年間の記録
sioncojp
4
1.7k
Ebitengine製iOSアプリ公開ボタンを押す会
eiei114
0
110
Gifu WordPress Meetup #200 に向けて、私たちには何ができるだろうか?/ 2026-11-07 Gifu WordPress Meetup
torounit
0
240
evcc & Home Assistant
naltatis
0
400
公共分野での生成AI活用
toru_kubota
1
310
MCPでAIが自分で調べに行く
cdataj
0
110
llm-d に入門してみた / Try out llm-d
kota2and3kan
0
100
Software Engineering in an AI-Driven World
erikjhordan_rey
0
130
Kiro 入門 (1 つのエージェントを、どの画面からでも) | 目指せ Kiro マスター 01
inariku
PRO
6
1.3k
Microsoft Entra Kerberos で実現するクラウド デバイス管理
tamaiyutaro
2
660
Featured
See All Featured
RailsConf 2023
tenderlove
30
1.6k
Being A Developer After 40
akosma
PRO
92
590k
Producing Creativity
orderedlist
PRO
348
41k
Agile that works and the tools we love
rasmusluckow
331
22k
Why Your Marketing Sucks and What You Can Do About It - Sophie Logan
marketingsoph
0
470
Designing for humans not robots
tammielis
254
26k
The Mindset for Success: Future Career Progression
greggifford
PRO
0
560
Designing Experiences People Love
moore
143
24k
Effective software design: The role of men in debugging patriarchy in IT @ Voxxed Days AMS
baasie
1
600
Java REST API Framework Comparison - PWX 2021
mraible
34
9.8k
The Limits of Empathy - UXLibs8
cassininazir
2
770
Breaking role norms: Why Content Design is so much more than writing copy - Taylor Woolridge
uxyall
1
510
Transcript
ۙ౻Ӊஐ࿕(.01FQBCP *OD !)BDLFS5BDLMF શવΘ͔Βͳ͍ɻ ԶͨͪงғؾͰ ίϯςφΛͬͯ ͍Δ
ۙ౻Ӊஐ࿕!VE[VSB &$αʔϏεɺΦϯϥΠϯήʔϜ։ൃͳͲΛܦͯɺ ΑΓ(.0ϖύϘٕज़ج൫νʔϜɻಉΑ ΓԬࢢʹҠॅɻڞஶʹʰύʔϑΣΫτ3VCZʱ ʰύʔϑΣΫτ3BJMTʱͳͲ͕͋ΔɻNSVCZΛΈ ࠐΜͩ-JOVYίϯςφϥϯλΠϜʮ)BDPOJXBʯͷ ࡞ऀɻ)BDPOJXBؔ࿈ͷ׆ಈͱͯ͠ɺ3VCZ,BJHJ ͰͷτʔΫ͕࠾͞Εɺ·ͨιϑτΣΞ ͰୈճԬ3VCZେΛडɻݱࡏɺ)BDPOJXB Λϕʔεͱͨ͠ΫϥυαʔϏεͰ͋ΔʮϩϦϙο
ϓʂϚωʔδυΫϥυʯʹٕࣾज़ސ ͱ͠ ͯࢀՃ͍ͯ͠Δɻ
ࠓͷ͓ w งғؾͰίϯςφͷதΛཧղ͢Δ w งғؾͰίϯςφͷΤίγεςϜΛཧղɹ w งғؾͰίϯςφΛࣗ࡞͢Δʹ w ͳΜͳΜͩΑʂงғؾͬͯʂʢ·ͱΊʣ
งғؾͰίϯ ςφͷதΛ ཧղ͢Δ
ίϯςφԾԽ
ίϯςφɺ ࡞ͬͨ͜ͱ͋Γ·͔͢ʁ
͡Ό͋࡞ͬͯΈ·͠ΐ͏͔
%PDLFSΛྫʹ͠·͢ wී௨ͷ-JOVY 6CVOUV#JPOJD ʹ%PDLFSΛೖΕͯɺෳݸίϯςφΛ ࡞ͬͯΈΔɻ $ docker run --rm -d
debian:latest /bin/sleep 99 d003ac5389a1631d789f5d1b77bf201adc517ad9acc91bd5...
࠷ۙ DF ͷ%PDLFS w͜͜ͰɺΈͳ͞Μ͓ೃછΈͷQTίϚϯυΛൃߦͯ͠Έ·͠ΐ͏ w;Ή;Ή
ίϯςφͷTMFFQίϚϯυ ϗετϚγϯ͔Β ௨ৗͷϓϩηεͷΑ͏ʹݟ͑·͢
ͭ·Γ
ίϯςφϓϩηεͳΜ ͩʂʂʂʂʂʂʂʂʂʂʂʂʂʂʂʂ ʂʂʂʂʂʂʂʂʂʂ
ίϯςφʮԾԽʯͬͯݴ͏͚ΕͲ wίϯςφͷ࣮ݱʹ͓͍ͯɺϋʔυΣΞͷԾԽʢ$16ɺϝϞϦͳ Ͳʣߦ͍ͬͯͳ͍͜ͱʹҙɻ wEPDLFSSVOFYFDͳͲͰʮಠཱͨ͠-JOVYͷڥʹೖΔʯ͜ͱ͕ग़དྷ ΔɻͦͷΑ͏ʹಠཱͨ͠ڥΛ࡞ΕΔ͜ͱࣗମΛࢦͯ͠ɺʮԾԽʯ ͱݺΜͰ͍Δͱݴ͑Δɻ wٯʹϓϩηεͳͷͰɺͦͷଞͷԾԽख๏ΑΓܰྔͩ͠ɺΑΓࡉ͔ ੍͍ޚ͕ՄೳʹͳΔଆ໘͋Δɻ
DGͦͷଞͷԾԽ wϗετܕ͋Δ04ʹɺઐ༻ͷιϑτΣΞΛೖΕͯԾԽ͢Δ wϋΠύʔόΠβܕԾԽઐ༻ͷ04ͷ্Ͱ7.Λ্͛Δ wͳͲͳͲɺ࣮ݱͷํࣜز͔ͭ͋Δ͕ɺಛͱͯ͠ɺϋʔυΣΞͷ ԾԽΛߦ͏ɻͦͷͨΊ04ͷछྨࣗ༝ʹͳΔ͕ɺίϯςφΑΓ Φʔόʔϔου͕େ͖͘ͳΔɻ
None
None
ϓϩηε͕ίϯςφԽ͍ͯ͠Δ͔ௐΔ wΈΜͳ/procͷ͜ͱศརʹ׆༻ͯ͠·͢ΑͶʁ w/proc/PID/*ʹଘࡏ͢ΔϑΝΠϧʹ͍ͭͯɺී௨ͷϓϩηεͷͷ ͱʮίϯςφԽͨ͠ʯͷͷΛൺֱ͢Δͱɺز͔ͭͷଐੑ͕ҟͳͬͯ ͍Δ͜ͱ͕Θ͔Δɻ w/proc/PID/ns, /proc/PID/cgroup, /proc/PID/status,
ʮίϯςφԽʯ͢ΔͨΊͷ -JOVYͷػೳ
-JOVY/BNFTQBDF
QSPD1*%OT͕ҧ͏ wΑ͘ݟΔͱҧ͏ wVUTͱ͔JQDͱ͔NOUͱ͔ ͍Ζ͍Ζ͋Δ w͜ΕΒɺάϩʔόϧͳ໊લۭؒͱผͷ04ϦιʔεΛׂΓͯΒ Ε͍ͯΔ͜ͱΛҙຯ͢Δɻͦ͏͍͏໊લۭؒΛ-JOVY/BNFTQBDFͱ ݺΜͰ͍Δɻ wྫ͑654/BNFTQBDFάϩʔόϧͳϗετ໊ͱಠཱͨ͠ϗετ໊Λ࣋ͯΔ
None
ίϯςφͷωοτϫʔΫʹʮೖΔʯ wOTFOUFSͱ͍͏ίϚϯυͰ-JOVY/BNFTQBDFʹೖΔ͜ͱ͕Ͱ͖Δɻ wEPDLFSFYFDͱൺֱͯ͠ΈΑ͏ $ sudo nsenter \ --net=/proc/$( \ docker
inspect hackertackle_1 -f ‘{{.State.Pid}}' \ )/ns/net
EPDLFSFYFD OTFOUFS
DHSPVQ
DHSPVQͱ wDHSPVQ $POUSPM(SPVQ ͱɺҙͷϓϩηεΛάϧʔϐϯάͰ͖Δ ػೳɻͨͩάϧʔϓʹ͢Δ͚ͩͰͳ͘ɺͦͷάϧʔϓ͝ͱʹ04ͷϋʔ υΣΞͳͲͷϦιʔεΛ੍ݶɺ͋Δ͍౷ܭใΛऔಘͰ͖Δɻ wྫ w$16ͷ੍ݶάϧʔϓશମͷ$16ར༻Λ/ʹԡ͑ͨ͞ΓɺίΞΛ ݻఆͨ͠ΓͰ͖Δɻ·ͨ$16࣌ؒͷ౷ܭΘ͔Δ wϝϞϦͷ੍ݶάϧʔϓશମͰ͏ϝϞϦར༻ঢ়گΛ੍ݶɺܭଌͰ͖
Δɻݶքʹୡͨ࣌͠ͷڍಈબΔ
QJETαϒγεςϜ wͦͷάϧʔϓʹॴଐ͢ΔϓϩηεΛ੍ݶͰ͖Δɻ wDHSPVQಛఆͷϑΝΠϧʹॻ͖ࠐΉ͜ͱͰγϡοͱ͑Δɻ ݸʹ੍ݶ
ͦͷάϧʔϓʹॴଐ͢ΔϓϩηεΛ ੍ݶͰ͖Δ ʹ GPSLCPNCରࡦ͕Ͱ͖Δ
ࢼͯ͠Έ·͠ΐ͏ w˞ࣦഊ͢Δͱɺ؋͝ͱམͪ·͢ term1:~$ echo $$ #=> 5849 term2:~$ echo 5849
| \ sudo tee /sys/fs/cgroup/pids/hackertackle/tasks term1:~$ cat /proc/self/cgroup | grep pids 3:pids:/hackertackle term1:~$ #... doing fork bomb ...
ੜؐ
ͦͷଞͷػೳ wDISPPUQJWPU@SPPU͋ΔαϒσΟϨΫτϦʹೖΓࠐΉ wSMJNJUVMJNJUͷͭ w,FSOFM$BQBCJMJUZSPPUͷݖݶΛׂͯ͠Ұ෦Λ༩ɺୣ͏ wTFDDPNQγεςϜίʔϧͷϑΟϧλϦϯά w."$ BQQBSNPS4&-JOVY50.0:0ଞ
TFDDPNQͷྫ wίϯςφ෦ͰɺNLEJSίϚϯυͰ͏γεςϜίʔϧ ʢmkdir(2)ʣDIPXOίϚϯυͰ͏ͭʢchownat(2)ʣͷݺͼ ग़͠ΛϑΟϧλʔ͢Δ͜ͱ͕Ͱ͖Δɻͨͱ͑SPPUͰ֘ૢ࡞͕ෆՄ ೳʹɻ͖ͳίϚϯυΛstrace(1)Ͱௐͯ෧ҹ͠Α͏ʂ ➡ ➡
ং൫ͷ·ͱΊ wίϯςφಛघͳϓϩηεͱߟ͑Ε0, wϓϩηεΛϗετ͔ΒִɺϦιʔεΛ੍ݶɺݖݶΛηΩϡΞʹߜΓ ࠐΉ͜ͱͰɺ࣮࣭7.తಠཱڥͱ͢Δͷ͕جຊతͳߟ͑ํ wόϥόϥͷγεςϜίʔϧΛGPSLͱFYFDͷؒͰࣗͰݺͼग़ͤɺί ϯςφ͔ͨ͠ϓϩηεΛࣗ࡞͢Δ͜ͱͰ͖Δ
งғؾ௫Ί͔ͨͳʁ
งғؾͰίϯ ςφͷΤίγ εςϜΛཧղ
ίϯςφ༻ޠ
ίϯςφ༻ޠ %PDLFS -9$ -9% .PCZ ,VCFSOFUFT 'MBOOFM SVOD (,& &$4
"$* 0$* 5FDUPOJD $PSF04 )BDPOJXB SLU SBJMDBS $BMJDP /PNBE 4XBSN
ଟ͘ͳ͍ʁ
આ໌Ͱ͖·͔͢ʁ
ϨΠϠͰߟ͑ͯΈΔ SVOD %PDLFS -9$ -9% )BDPOJXB .PCZ SLU ,VCFSOFUFT 'MBOOFM
$BMJDP 4XBSN /PNBE SBJMDBS $3*0 $POUBJOFSE
ิॿઢΛҾ͜͏ SVOD %PDLFS -9$ -9% )BDPOJXB .PCZ SLU ,VCFSOFUFT 'MBOOFM
$BMJDP 4XBSN /PNBE SBJMDBS $3*0 $POUBJOFSE 0$* 4QFD $3*
0$* 0QFO$POUBJOFS*OJUJBUJWF
0$*ͱ wίϯςφͷ৭ʑͳنɾن֨Λඪ४Խ͍ͯ͠Δஂମ w0$*ͷنʹ४ڌ͢ΔͱԿ͕خ͍͔͠ʁ wΠϝʔδͷϑΥʔϚοτ͕౷Ұ͞Ε͍ճ͠Ͱ͖Δ w04͝ͱʹඞཁͳύϥϝʔλ͕ཧ͞ΕͯࣗͰඞཁͳϥϯλΠϜΛ ࣮Ͱ͖ͨΓ͢Δ w࣮ͨ͠ϥϯλΠϜΛ֎෦πʔϧͱ࿈ܞ͢Δͷ༰қʹͳΔ
ʢ·ͨʣ%PDLFSϑΝϛϦͰߟ͑ͯΈΑ͏ EPDLFSίϚϯυͰίϯςφΛ্ཱͪ͛ΔͱɺΊͪΌ໊͍લ ͷϓϩηε͕Ͱ͖ͯɺͦͷԼʹ࣮ࡍͷίϯςφͷ1*%ίϚϯ υ͕ੜ͑Δ͜ͱ͕Θ͔ΔɻSVODͱ͍͏Ωʔϫʔυ͕ݟ͑Δɻ
SVODͷϨΠϠʔՄͰ͋Δ w0$*ͷنͲ͓Γͷ࣮Λͨ͠ίϯςφϥϯλΠϜͰ͋Εɺ ͦΕΛ%PDLFSͷΠϯλʔϑΣʔε͔Βૢ࡞ͯ͠ίϯςφΛ࡞ΕΔ wͦͷ͋ͨΓΛDPOUBJOFSE EPDLFS ͰEPDLFSDPOUBJOFSETIJNͱ͍ ͏ϓϩάϥϜ͕୲͍ͬͯΔ
͍֮͑ͯ·͔͢ɺSBJMDBS w0SBDMFͷίϯςφϥϯλΠϜɺࠓͷτʔΫେگɾ3VTU w%PDLFSͷϥϯλΠϜʹSBJMDBSΛ͏Α͏ʹࢦఆՄೳ wSBJMDBSͰίϯςφΛ্ཱͪ͛ΔΑ͏ʹΦϓγϣϯΛೖΕΔ FEHFͷͰ͔͠ಈ͔ͳ͍ͷͰͦΕʹΞοϓάϨʔυ͓ͯ͘͠ ExecStart=/usr/bin/dockerd -H fd:// --experimental \
--add-runtime "rc=/usr/local/bin/railcar"
SBJMDBSΛ%PDLFSͰ͑Δ
$3* $POUBJOFS3VOUJNF*OUFSGBDF
͜ͷ ,VCFSOFUFT ʹؔͯ͠ wૉਓͳΜͰ͕͢ w͍͢·ͤΜɺશൠతʹงғؾͳΜͰ͕͢ wؒҧ͍ͬͯͨΒ͝ࢦఠ͓ئ͍͠·͢ʂ 8BSOJOH
NJOJDVCFͳͲͰαΫοͱLTڥΛ w࡞ͬͯΈΔ wNJOJLVCFTTIͰೖΔͱɺવEPDLFSϓϩηε͕ଘࡏ͍ͯ͠ΔͰ͢Ͷ wຬͨ͠ͷͰ ͜ͷڥফ͠·͢
ࠓɺΦϓγϣϯΛม͑Δ wҎԼͷΦϓγϣϯͰNJOJLVCFTUBSU͢Δ wʢ্ख͘ಈ͔ͳ͍࣌Ұ୴NJOJLVCFTUPQΦϓγϣϯແ͠Ͱ NJOJLVCFTUBSUʣ $ minikube start \ --network-plugin=cni \
--container-runtime=cri-o \ --bootstrapper=kubeadm
DSJP ͍ͬͯ͏ͭʁ w͕͍Δ w͍ͭ͜୭ͩ
DSJPSLUMFUͳͲͳͲ w$3*ͱɺ,VCFSOFUFT͔Βར༻͢ΔͨΊʹඞཁͳΠϯλϑΣʔεͷ ༷ͷࣄͰɺH31$Λ͍ͬͯΔ w$3*ϓϩτίϧΛΔσʔϞϯΛ্ཱͪ͛Δ͜ͱͰɺόοΫΤϯυͷ ࣮ʹؔͳ͘LVCFDUMͰಉ͡Α͏ʹΫϥελΛߏஙՄೳɻ wDSJPίϯςφϓϩηεΛ্ཱͪ͛ΔϥϯλΠϜʹSVODΛ͏ wSLUMFUίϯςφϓϩηεΛ্ཱͪ͛ΔϥϯλΠϜʹSLUΛ͏
͜͜·Ͱͷ·ͱΊ w0$*ͱ͍͏ஂମͷ࡞ͬͨنʹԊͬͯίϯςφϥϯλΠϜΛ࡞Δͱศ ར w$3*ͱ͍͏نʹԊ࣮ͬͨͰίϯςφϥϯλΠϜΛ࡞Δͱศར w͜ΕΒͷنͰίϯςφϥϯλΠϜͨͪΛઢҾ͖͢Δ͜ͱ͕Ͱ͖Δ
ṖͷਤΛՃͯ͠࠶ܝ SVOD -9$ -9% )BDPOJXB .PCZ SLU ,VCFSOFUFT 'MBOOFM $BMJDP
4XBSN /PNBE SBJMDBS $3*0 $POUBJOFSE 0$* 4QFD $3* ,FSOFMTZTDBMM
ṖͷਤΛՃͯ͠࠶ܝ SVOD -9$ -9% )BDPOJXB .PCZ SLU ,VCFSOFUFT 'MBOOFM $BMJDP
4XBSN /PNBE SBJMDBS $3*0 $POUBJOFSE 0$* 4QFD $3* ,FSOFMTZTDBMM ʮϥϯλΠϜʯͱ͍͏ݺͼํͰ͜ͷ྆ํͷൣғΛࢦ͍ͯ͠Δ ͷͰΊͪΌࠞཚ͢ΔɻͲͪΒͷׂ͔ҙࣝ͢Δͱ٢
ṖͷਤΛՃͯ͠࠶ܝ SVOD -9$ -9% )BDPOJXB .PCZ SLU ,VCFSOFUFT 'MBOOFM $BMJDP
4XBSN /PNBE SBJMDBS $3*0 $POUBJOFSE 0$* 4QFD $3* ,FSOFMTZTDBMM %PDLFS͜͜Λ ·ͱΊͯར༻͢ΔԿ͔
ṖͷਤΛՃͯ͠࠶ܝ SVOD -9$ -9% )BDPOJXB .PCZ SLU ,VCFSOFUFT 'MBOOFM $BMJDP
4XBSN /PNBE SBJMDBS $3*0 $POUBJOFSE ,FSOFMTZTDBMM -9$-9%ʹؔͯ͠ɺ0$*ͱ·ͨผ͕ͩɺ ͬ͘͟Γ-9$͕ΧʔωϧΓͱΓɺ-9%͕)551"1*Λ୲ )BDPOJXB͜Ε͔Β)551 5$1 JOUFSGBDFΛ࡞Γ·͢
࠷ޙͷϨΠϠʔ͚ SVOD -9$ -9% )BDPOJXB .PCZ SLU ,VCFSOFUFT 'MBOOFM $BMJDP
4XBSN /PNBE SBJMDBS $3*0 $POUBJOFSE 0$* 4QFD $3* ,FSOFMTZTDBMM
ίϯςφͷωοτϫʔΫઃఆ wز͔ͭઓུ͕͋Δɻ w ΫϥελϦϯά͠ͳ͍ wϗετϚγϯʹͱͲ·ΔͳΒɺ%PDLFSͷσϑΥϧτͰߏΘͳ͍ w ࣗྗͰWYMBOͳΓΛߏஙͯ͠ؤுΔ wίϯςφ͕͏ϒϦοδͳͲࣗͰҾͬுͬͯؤுͬͯؤுΔ w $/*ʹԊͬͨϓϥάΠϯΛར༻͢Δ
$/* $POUBJOFS/FUXPSL*OUFSGBDF
$/*ͱ w͜Ε·ͨɺ0QFO$POUBJOFS*OJUJBUJWFͷఆΊͨίϯςφͷωοτ ϫʔΫͷن w,VCFSOFUFTͰར༻Ͱ͖Δ wOFUXPSLQMVHJODOJͰىಈ͠ɺϚχϑΣετͰ$/*ͷ+40/ͱ γεςϜίϯςφͦͷଞΛྲྀ͠ࠐΉ wϚχϑΣετΛྲྀ͠ࠐΉͱɺϗετ/etc/cni/net.dʹઃఆ͕ೖ ΓɺඞཁͳγεςϜίϯςφ্ཱ͕͕ͪΓ༗ޮʹͳΔ
qBOOFMͷྫ wqBOOFMWYMBO -PWFS- Λ࣮ݱ͢ΔσʔϞϯ wࣗͰΜͰ͍͍͚Ͳɺ $/*ϓϥάΠϯ͕͋Δ $ kubectl apply -f
kube-flannel.yml ʮqBOOFMΛͬͯ-JOVYͰ࣮ݱ͢ΔWYMBOͷ͞ΘΓΛΔʯ IUUQTRJJUBDPNVE[VSBJUFNTCEEBGBCEG
DBMJDPͷྫ w1SPKFDU$BMJDP-ͷΈͰ࣮ݱ͍ͯ͠Δ εέʔϥϒϧͳωοτϫʔΫΛఏڙ͢Δ ϓϩδΣΫτɻ#(1Λར༻͍ͯ͠Δ w ʮ:BIPP+"1"/.FFU6QʢΠϯϑϥٕज़ΧϯϑΝϨϯεʣηογϣϯᶆʯ IUUQTXXXTMJEFTIBSFOFUUFDICMPHZBIPPZBIPPKBQBONFFUVQ $ kubectl apply
-f calico.yaml
ͦͷଞͷબࢶ wIUUQTLVCFSOFUFTJPEPDTDPODFQUTDMVTUFSBENJOJTUSBUJPO OFUXPSLJOH w͍Ζ͍ΖͳϨΠϠʔͰΊͪΌ͋Δ͠ɺϚωʔδυڥݻ༗ͷઃఆ͋ ΔΑ͏ͩʁ
࣮ϕʔεͳϨΠϠΘ͚·ͱΊ SVOD -9$ -9% )BDPOJXB .PCZ SLU ,VCFSOFUFT 'MBOOFM $BMJDP
4XBSN /PNBE SBJMDBS $3*0 $POUBJOFSE 0$* 4QFD $3* ,FSOFMTZTDBMM $/* $MVTUFSFE/PEF1PPM
ଟ ͜͜·ͰͰ
0OFNPSFUIJOH
งғؾͰίϯ ςφΛࣗ࡞͠ ͯΈͨ
ࣗ࡞Ұཡ wίϯςφϥϯλΠϜ)BDPOJXB wίϯςφઓུ ΦʔέετϨʔγϣϯ 'BTU$POUBJOFSXJUI/)).TUBDL
)BDPOJXB wίϯςφϥϯλΠϜɻNSVCZݴޠΛΈࠐΜͰ͍ͯɺίʔυͰίϯς φͷઃఆৼΔ͍ͳͲΛهड़Ͱ͖Δɻ wྫ͑ɺ࠷ॳʹઆ໌ͨ͠/BNFTQBDFͷԿΛ͢Δ͔ɺ*1ԿΛͭ ͚Δ͔ɺDHSPVQͷύϥϝʔλΛͲ͏͢Δ͔ɻ w͋Δ͍ɺىಈ࣌ɺఀࢭ࣌ɺىಈޙ/ඵޙʹಛఆͷॲཧΛߦ͏ɺɻ w͕࡞ͬͨɻ
'BTU$POUBJOFS wͬ͘͟ΓߦͰ wϦΫΤετ͕͋Δ·Ͱ ىಈ͠ͳ͍ wىಈޙɺҰఆ࣌ؒޙʹఀࢭ wͲΜͲΜίϯςφ͕॥͢Δ wDG1IPFOJY4FSWFST1BUUFSO wDG'BTU$(* ˞ʮҰาઌߦ͘ίϯςφཧΞʔΩςΫνϟʯ8&# %#13&447PM
ΦʔέετϨʔγϣϯΞʔΩςΫνϟ w$.%# $POUFOUT.BOBHFNFOU%BUBCBTF ͷঢ়ଶʹऩଋ͢Δ ˞ʮ'BTU$POUBJOFS࣮ߦڥͷมԽʹૉૣ͘దԠͰ͖Δ߃ৗੑΛ࣋ͭγεςϜΞʔΩςΫνϟʯদຊ྄հଞɺ
,VCFTUBDLͱͷൺֱ SVOD ,VCFSOFUFT 'MBOOFM $BMJDP $3*0 $POUBJOFSE ,FSOFMTZTDBMM $MVTUFSFE/PEF1PPM )BDPOJXB
OHY@NSVCZ CBTFE TFSWJDFNFTI OHY@NSVCZ )551"1* +BSEJO #SJEHF WFUI $.%# FUDE
࠙ձ Ͱ
ऴΘΓʹ
ίϯςφɺͬͯ·͔͢ʁ wԿͷͨΊʹ͍ͬͯ·͔͢ʁ w࣮ΘΕ͍ͯΔͷͰʁ wίϯςφͰ͋ͳͨͷղܾ͠·͔͢ʁ w ͍͢·ͤΜɺݴ͍ա͗·ͨ͠
ίϯςφͷ ʮงғؾʯ
ίϯςφͷ ֓೦Ϟσϧ
௨ৗ͖ΘΊͯ؆ૉԽ͞Εͨɺ͋ΔϞϊ͕Ͳ ͏ಈ͔͘ͷઆ໌ʢʣɻ ͜Εɺʹཱ͍ͬͯΔݶΓɺશͳͷ Ͱͳͯ͘Α͍ɻਖ਼֬Ͱ͋Δඞཁ͢Βͳ͍ɻ ʰ୭ͷͨΊͷσβΠϯʁʱ%"ϊʔϚϯɺ༁վగ൛
ίϯςφͷ֓೦Ϟσϧʁ wͦΕίϯςφͰ͢Ͷ w͍ΘΏΔϋΠύʔόΠβܕͳͲͷ7.ͱಉ͡Α͏ʹѻͬͯ͠·͏όΠ Ξε͕͋ΔͷͰͳ͍ͩΖ͏͔ɻ w࣮ࡍʮϩάΠϯʯͯ͠ʮ04ʯʹݟ͑ͯ͠·͏ͷͰɺͦ͏ͳΓ͕ͪ wLVCFDUMͳͲͷૢ࡞ͰޙΖͰԿ͕ى͍ͬͯ͜Δ͔૾Ͱ͖Δʁ w͔͠͠7.ͷΑ͏ʹԿ͔ԾԽ͞Ε͍ͯΔΘ͚Ͱͳ͍͠ɺϗε τʹΑΔ੍େ͖͍͠ɺඍົʹҧ͏ͱ͜Ζ͕ଟʑ͋Δɻ
ίϯςφΛͪΌΜͱӡ༻͢Δʹ ʢ·ͩ·ͩʣதΛ͍͔͚ͯ ཧղ͢Δ͜ͱ͕ॏཁɻ
ͦΕʹ தΛ͔ͬ͠Γཧղ͢Δ͜ͱ ָ͍͠ʢͣʣ
&OKPZ5BDLMJOH $POUBJOFS&DPTZTUFN
ࢀߟࢿྉ w0$* IUUQTHJUIVCDPNPQFODPOUBJOFSTSVOUJNFTQFD IUUQTHJUIVCDPNPQFODPOUBJOFSTJNBHFTQFD w1SPUPUZQJOH,VCFSOFUFT$3*CZ!SFNPSF͞Μ IUUQTTQFBLFSEFDLDPNSFNPSFQSPUPUZQJOHLVCFSOFUFTDSJ XJUISVCZBOEHSQD
4QFDJBM5IBOLT wϖύϘίϯςφࡾॐ࢜ͷ͓ೋਓʢ࠷ޙͷҰਓၟӽͳ͕Βʣ w!UONU w!S@UBLBJTIJ