おうちk8sクラスタのための 外部ロードバランサーを用意した話

Transcript

1. ͓͏ͪLTΫϥελͷͨΊͷ ֎෦ϩʔυόϥϯαʔΛ༻ҙͨ͠࿩ 
2. ࣗݾ঺հ apiVersion: lt.beah.jp/v1 kind: Profile metadata: name: “Ѩ෦
   ݡଠ࿠” spec: belongs: - “౦༸େֶ ৘ใ࿈ܞֶ෦” technologies: - “Golang” - “Kubernetes” - “Swift” - “Ruby on Rails” - “Nuxt.js” - “Google Apps Script” - “Google Cloud Platform” hobbies: - “pictures” - “YouTube” 
3. ͓͏ͪ,VCFSOFUFTͷߏ੒ • ࣗ୐ˠύϒϦοΫΫϥ΢υˠϋΠϒϦουˠࣗ୐ • ࠷ۙͷԁ҆΋ड͚ͯɺ׬શࣗ୐ʹγϑτ • ߹ܭͰ୆ͷ/PEF • $POUSPM
   1MBOFʷ
   ˠ ϥζύΠ • 8PSLFS
   /PEFʷ
   ˠ ී௨ͷ1$ • -PBE
   #BMBODFSʷ
   ˠ ݹ͍*OUFM
   .BD
   NJOJ • શ͕ͯ,VCFSOFUFT্Ͱಈ͍͍ͯΔ • $FQIʹΑΔ෼ࢄετϨʔδ ˠ )%%Ͱ߹ܭ5# • "SHP$%
   ˠ (JU)VC্ͷ.BOJGFTUʹΑΔ(JU0QT • )BTIJ$PSQ
   7BVMU
   ˠ (JU0QTͷͨΊͷػີ৘ใ؅ཧ • .BTUPEPO
   ˠ ΠϯϓϨκϯϏʹݏؾ͕ࠩͯ͠ซ༻த • ϒϩά • ফඅిྗతʹ͸8ఔ౓ • ӡ༻ίετΛߟ͑ͯ΋ύϒϦοΫΫϥ΢υΑΓ҆Ձ 
4. ϩʔυόϥϯαʔ͕ඞཁͳഎܠ • $POUSPM
   1MBOFͷ)"ԽΛߦ͍͍ͨ • LVCFBQJTFSWFS͕ෳ਺͋ΔͨΊɺϩʔυόϥϯγϯά͍ͨ͠ • /PEFͷμ΢ϯ࣌ʹ͸ɺͦͷ/PEFʹ͸ϩʔυόϥϯγϯά͠ͳ͍ • .FUBM-#Ͱ͸෺଍Γͳ͍ • #(1Λ஻ΕΔϧʔλʔ͕ͳ͍৔߹͸-FBEFS
   4QFBLFS͕"31ʹԠ౴͢Δ͜ͱͰɺ֎෦*1Λ -JTUFO͢Δ • ͳͷͰɺݫີʹ͸ෛՙ෼ࢄͰ͸ͳ͍ • ७ਮʹϩϚϯ͕͋Δ • ύϒϦοΫΫϥ΢υͬΆ͍-#BB4ɺ΍ͬͯΈͨ͘ͳ͍Ͱ͔͢ʁ 
5. )"1SPYZͰϩʔυόϥϯαʔΛ࡞Δ • OHJOYͷΑ͏ͳϦόʔεϓϩΩγ • OHJOYͰϩʔυόϥϯγϯά͢ΔΑΓ΋ύϑΥʔϚϯεߴ • ಛʹਂ͘͸৮Ε·ͤΜ • ΏʔͯΑ͘஌Βͳ͍··࢖ͬͯΔɾɾɾ • )"1SPYZ
   
   LFFQBMJWFEͰɺ)"1SPYZࣗମ΋ߴՄ༻ੑΛऔΔ͜ͱ͕Ͱ͖ Δ • LFFQBMJWFEͰԾ૝*1ΛCJOEˠ"DUJWFͷ)"1SPYZμ΢ϯ࣌ʹ͸4UBOECZ͕Ծ૝*1 ΛCJOEͯ͠ಈ͍ͯ͘ΕΔ 
6. )"1SPYZͷઃఆ • )"1SPYZΛΠϯετʔϧͨ͠Ϛγϯͷ/*$ʹɺ*1ΞυϨε ΛόΠϯυͤ͞Δ • ͜͜ͰLFFQBMJWFEΛ࢖͏ • LFFQBMJWFEΛ࢖Θͳ͍ͳΒOFUQMBOͱ͔Ͱઃఆͯ͠΋ྑͦ͞͏ • FUDIBQSPYZIBQSPYZDGHΛઃఆ • 'SPOUFOE͸ɺ)"1SPYZଆͷઃఆ CJOEͰ*1ΞυϨεΛԡ͑͞ ͍ͯΔ • #BDLFOE͸ɺ4FSWFSͷू߹ • 4FSWFS͸ɺసૹઌͷ*1ΞυϨεɾϙʔτͷର • ઃఆϑΝΠϧΛಡΈࠐ·ͤΔ͜ͱͰɺͦͷ*1ΞυϨε΁ͷΞ Ϋηε͕ɺ/PEF1PSUʹసૹ͞ΕΔ • /PEF1PSU͔Βઌ͸໨తͷίϯςφʹసૹ͞ΕΔ 
7. ख࡞ۀͰ΍Δͷ͸ͭΒ͍ • /PEF1PSU
   4FSWJDFΛ࡞੒ޙɺׂΓ౰ͯΒΕ ͨ/PEF1PSUΛௐ΂ͯɺ)"1SPYZͷઃఆΛ ߦ͏ ௚઀44)Ͱೖͬͯઃఆ • ઃఆ߲໨͕ 'SPOUFOE#BDLFOE#BDLFOE4FSWFSͷ ͭʹΘͨΔ • ࡟আ͢Δࡍ΋ɺ͜ΕΒͷઃఆΛ࡟আ͢Δ͜ͱʹ ͳΔ • ͦͷลͷࣗಈԽ͕LTͷϝϦοτͳͷʹɺख ࡞ۀ͕ൃੜͯ͠͠·͍ͬͯΔͷ͕ྑ͘ͳ͍ 
8. ख࡞ۀͰ΍Δͷ͸ͭΒ͍ • /PEF1PSU
   4FSWJDFΛ࡞੒ޙɺׂΓ౰ͯΒΕ ͨ/PEF1PSUΛௐ΂ͯɺ)"1SPYZͷઃఆΛ ߦ͏ ௚઀44)Ͱೖͬͯઃఆ • ઃఆ߲໨͕ 'SPOUFOE#BDLFOE#BDLFOE4FSWFSͷ ͭʹΘͨΔ • ࡟আ͢Δࡍ΋ɺ͜ΕΒͷઃఆΛ࡟আ͢Δ͜ͱʹ ͳΔ • ͦͷลͷࣗಈԽ͕LTͷϝϦοτͳͷʹɺख ࡞ۀ͕ൃੜͯ͠͠·͍ͬͯΔͷ͕ྑ͘ͳ͍ ΍ͬͺ ʮUZQF
   -PBE#BMBODFSʯ ࢖͍͍ͨʂʂʂ 
9. UZQF
   -PBE#BMBODFSͷͨΊʹ • &,4΍(,&Ͱ͸ɾɾɾ • UZQF
   -PBE#BMBODFSͷ4FSWJDF͕࡞੒͞ΕΔͱɺLT ֎෦ʹ/-#($-#Λ࡞੒͢Δ • LT্ͷNBOJGFTUʹج͍ͮͯʮDMPVEQSPWJEFSʯ͕ "84΍($1ͷ"1*Λୟ͍ͯϩʔυόϥϯαʔΛߏ੒͢ Δ • ͦΕͧΕͷΫϥ΢υ༻ʹ༻ҙ͞Ε͓ͯΓɺࣗ࡞0, • ,VCFSOFUFT΍TJHTͰ؅ཧ͞Ε͍ͯͳ͍΋ͷ %JHJUBM0DFBO΍0SBDMF$MPVEɺ-JOPEFͳͲ ΋ଟ͍ • )"1SPYZ༻ʹDMPVEQSPWJEFSΛ։ൃ͢Ε͹ɺLTͷ ࢓૊ΈͷதͰ؅ཧΛࣗಈԽͰ͖Δ 
10. UZQF
    -PBE#BMBODFSͷͨΊʹ • )"1SPYZ͸"1*ͰઃఆΛߦ͏͜ͱ ͕Ͱ͖Δ • "1*Λୟ͘ͱɺઃఆϑΝΠϧ΁ͷॻ͖ ࠐΈ 
    ઃఆ൓өΛߦͬͯ͘ΕΔ • )"1SPYZͱ͸ผͷϓϩηεͰ࣮ߦ͢ Δܗ • ΦϨΦϨDMPVEQSPWJEFS͔Β )"1SPYZͷ"1*Λୟ͚͹ྑͦ͞͏ 
11. ΍Δ͜ͱ͸؆୯ • -PBE#BMBODFS
    4FSWJDF࡞੒࣌ • 4FSWJDF΁ͷ*1ׂΓ౰ͯ • ֤8PSLFS
    /PEFͷ*1ͱɺ4FSWJDFͷ/PEF1PSU͔Βɺ4FSWFSͱ#BDLFOEΛ࡞੒ • ׂΓ౰ͯͨ*1ͱɺ4FSWJDFͷ1PSU͔Βɺ#JOEͱ'SPOUFOEΛ࡞੒ • -PBE#BMBODFS
    4FSWJDFߋ৽࣌ • ௥Ճɾ࡟আ͞Εͨ/PEFͷ*1ͱ/PEF1PSUʹରԠ͢Δ4FSWFSͱ#BDLFOEΛ௥Ճɾ࡟আ • ௥Ճɾ࡟আ͞Εͨ1PSUʹରԠ͢Δ#JOEΛ௥Ճɾ࡟আ • -PBE#BMBODFS
    4FSWJDF࡟আ࣌ • ؔ࿈͢Δ#JOE'SPOUFOE4FSWFS#BDLFOEΛ࡟আ • ࣮ࡍʹ͸'SPOUFOE#BDLFOEͷ࡟আͷΈͰ0, ࿈ಈͯ͠#JOE4FSWFS΋࡟আ͞ΕΔ 
12. ؆୯ɾɾɾʁ • ىಈ࣌ • αϙʔτ͍ͯ͠Δ$MPVE
    1SPWJEFSΛฦ͢ 4FSWJDFͷΈαϙʔτɾ/PEF΍*OTUBODF͸؅ཧ͠ͳ͍ • $MPVE
    1SPWJEFSͷొ࿥ • -PBE#BMBODFS
    4FSWJDF࡞੒࣌ • 4FSWJDF΁ͷ*1ׂΓ౰ͯ • ֤8PSLFS
    /PEFͷ*1ͱɺ4FSWJDFͷ/PEF1PSU͔Βɺ4FSWFSͱ#BDLFOEΛ࡞੒ • ׂΓ౰ͯͨ*1ͱɺ4FSWJDFͷ1PSU͔Βɺ#JOEͱ'SPOUFOEΛ࡞੒ • $POUSPMMFSىಈ࣌ʹ΋͜ͷؔ਺͕ ͳ͔ͥ ݺ͹ΕΔͷͰɺͦͷ৔߹͸4LJQ • -PBE#BMBODFS
    4FSWJDFߋ৽࣌ • ௥Ճɾ࡟আ͞Εͨ/PEFͷ*1ͱ/PEF1PSUʹରԠ͢Δ4FSWFSͱ#BDLFOEΛ௥Ճɾ࡟আ • ௥Ճɾ࡟আ͞Εͨ1PSUʹରԠ͢Δ#JOEΛ௥Ճɾ࡟আ • -PBE#BMBODFS
    4FSWJDF࡟আ࣌ • ؔ࿈͢Δ#JOE'SPOUFOE4FSWFS#BDLFOEΛ࡟আ • ࣮ࡍʹ͸'SPOUFOE#BDLFOEͷ࡟আͷΈͰ0, ࿈ಈͯ͠#JOE4FSWFS΋࡟আ͞ΕΔ 
13. ࣮ࡍͷ࣮૷ • LVCFSOFUFTDMPVEQSPWEFSͷɺ ͜ͷJOUFSGBDFΛ࣮૷͢Ε͹Α͍ • ৘ใऔಘ΍ɺϩʔυόϥϯαʔͷ࡞੒ɾ ߋ৽ɾ࡟আͷؔ਺ • Πϕϯτൃੜ࣌ʹؔ਺͕ݺ͹ΕΔͷͰɺ ͦͷؔ਺಺Ͱ)"1SPYZΛૢ࡞͢Δ • (FU-PBE#BMBODFS(FU-PBE#BMBO DFS/BNF͸Α͘Θ͔Βͳ͍ɾɾɾ 
14. 3#"$ͷઃఆ • 4FSWJDFͷঢ়ଶΛXBUDIͯ͠ɺߋ ৽͢ΔͨΊɺؔ࿈͢Δݖݶ͕ඞཁ • /PEFͷ৘ใΛ࢖͍ͬͯΔ͕ɺ/PEF ͷݖݶ͸ඞཁͳ͍ɾɾɾʁ🤔 • 4FSWJDFʹର͢Δ&WFOUΛ࡞੒͢Δ ͨΊɺ&WFOUͷݖݶ΋ඞཁ 
15. 3#"$ͷઃఆ • 4FSWJDFͷঢ়ଶΛXBUDIͯ͠ɺߋ৽͢Δ ͨΊɺؔ࿈͢Δݖݶ͕ඞཁ • /PEFͷ৘ใΛ࢖͍ͬͯΔ͕ɺ/PEFͷݖݶ ͸ඞཁͳ͍ɾɾɾʁ🤔 • 4FSWJDFʹର͢Δ&WFOUΛ࡞੒͢ΔͨΊɺ &WFOUͷݖݶ΋ඞཁ • -FBEFSબग़ͷͨΊͷ$POGJH.BQ΍ -FBTFͷݖݶ΋ඞཁ • Ͳ͜ʹॻ͍ͯ͋ͬͨΜͩ😇 
16. ༨ஊ • UZQF
    -PBE#BMBODFS͸࣮ݱ͕ͨ͠ɺར༻Ͱ͖Δ*1ΞυϨε͸ͭͷΈ • ࣗ୐ͳͷͰɾɾɾ • OHJOYJOHSFTTDPOUSPMMFSΛར༻ • OHJOYJOHSFTTDPOUSPMMFSʹΑͬͯ࡞੒͞ΕΔ4FSWJDF͕-PBE#BMBODFSͳ͚ͩ • άϩʔόϧ*1ΞυϨε͕ෳ਺߱ͬͯ͘Δ؀ڥɺಌΕ͕͋Γ·͢Ͷ • ࣗ୐ʹޫϑΝΠόʔຊ͸Ωπ͍ɾɾɾ • ͱ͜ΖͰɺ)"1SPYZ༻ͷ$MPVE
    1SPWJEFSͱ͔ɺΈΜͳߟ͑ͦ͏ͳ΋ͷͳͷ͕ͩɺͳ͍ͷ ͔ʁʁʁ🤔 • *OHSFTT
    $POUSPMMFS͸͋ͬͨ 
17. ·ͱΊ • $POUSPM
    1MBOFͷ)"Խʹ൐ͬͯಋೖͨ͠)"1SPYZΛɺΞϓϦέʔγϣϯ༻ͷ ֎෦ϩʔυόϥϯαʔͱͯ͠΋׆༻ • )"1SPYZͷઃఆΛख࡞ۀͰ΍Δͷ͸ͭΒΈͳͷͰɺ$MPVE
    1SPWJEFSΛ࣮૷͢ Δ͜ͱͰɺύϒϦοΫΫϥ΢υͷ,BB4ͷΑ͏ͳʮUZQF
    -PBE#BMBODFSʯΛ࣮ ݱ • )"1SPYZ͸"1*Ͱઃఆ͕Ͱ͖Δ • ࣮૷ʹ͸·ͩ؁͍ͱ͜Ζ͕͋Δ͕ɺ͓͏ͪΫϥελͷӡ༻ෛՙΛܰݮ͢Δ͜ͱ ͕Ͱ͖ͨ 
18. ࣮૷ͨ͠΋ͷ͕ͪ͜Βʹ্͕ͬͯ·͢