HelmとService Brokerで始める検証環境自動構築 / Helm and Service Broker

第39回 PaaS勉強会での発表資料です。
HelmとService Brokerを使ってKubernetes上でPR単位などで環境を自動構築する話をしました。

Transcript

1. HelmͱService BrokerͰ ࢝ΊΔݕূ؀ڥࣗಈߏங ୈ39ճ PaaSษڧձ Teppei Fukuda (@knqyf263)
2. ࣗݾ঺հ • Teppei Fukuda (@knqyf263) • ߪಡອըࡶࢽ • δϟϯϓ • αϯσʔ • ϚΨδϯ • Ϡϯάδϟϯϓ • ϠϯάϚΨδϯ • δϟϯϓSQ • ผ࡭গ೥ϚΨδϯ • ίϛοΫDAYSɾεϚϗΞϓϦଟ਺
3. ຊ೔ͷྲྀΕ • ݕূ؀ڥࣗಈߏஙͷఆٛ • HelmʹΑΔݕূ؀ڥࣗಈߏங • Service BrokerʹΑΔ֎෦αʔϏεϓϩϏδϣχϯά • Helm + Service Broker • Service Brokerͷݱঢ়ͷ໰୊఺
4. ஫ҙࣄ߲ • ର৅ऀ͸KubernetesΛ࢖͑ΔਓʹͳΓ·͢ • Kubernetesʹؔ͢Δઆ໌͸͠·ͤΜ • Կ͕ग़དྷΔ͔ɺΛ఻͑Δ͜ͱΛॏࢹ͍ͯ͠·͢ • ඞཁͳઃఆΛҰ෦লུͨ͠Γ͍ͯ͠·͢ • ਤʹॻ͖੾Εͳ͔ͬͨࡉ͔͍࿩͸ޱ಄Ͱิ͍·͢ • ηΩϡϦςΟ෦ͷΤϯδχΞͳͷͰৄ͍͜͠ͱ͸Α͘෼͔Γ·ͤΜ
5. ݕূ؀ڥ ࠓݕূ؀ڥ
   σϓϩΠ͍͍ͯ͠ʁ ͜͜Ͱ͸։ൃதʹ࢖ΘΕΔݕূ༻ͷڞ༗؀ڥͱఆٛ͠·͢ ࠓ࢖ͬͯΔ͔Βμϝ ݕূ؀ڥ
6. ݕূ؀ڥ ·ͩʔʁ ͜Μͳͱ͖ʹࣗ෼༻ͷݕূ؀ڥ͕͋Ε͹... ·ͩμϝʔ ݕূ؀ڥ
7. ઐ༻ͷݕূ؀ڥ ࣗ෼༻ͷ؀ڥͰ
   ͙͢ςετͰ͖Δ ଴ͪ࣌ؒͳ͠ʂ ݕূ؀ڥ ݕূ؀ڥ ͔͠͠༧Ί؀ڥΛ༻ҙ͓ͯ͘͠ͷ͸େม ʢ͍ͭ͘ඞཁ͔΋෼͔Βͳ͍ʣ
8. ݕূ؀ڥࣗಈߏங ݕূ؀ڥ ݕূ؀ڥ ݕূ؀ڥ QVTI͞ΕͨΒ ࣗಈͰ࡞Δ
9. ίϯςφͳΒ؆୯ͳ͸ͣ...!!
10. • KubernetesͷύοέʔδϚωʔδϟʔ • apt/yum/homebrewͷΑ͏ͳ΋ͷ • deb, rpmʹ૬౰͢Δ΋ͷ͸Chartͱ ݺ͹ΕΔ • ༗໊ͳΞϓϦέʔγϣϯͷChart͸ ഑෍͞Ε͍ͯΔ • helm install͢Δ͚ͩͰk8s্ʹల։ • e.g. helm install jenkins https://github.com/helm/charts/tree/master/stable/ Helmͱ͸ʁ https://helm.sh/
11. Chartͱ͸ʁ $ tree wordpress wordpress !"" Chart.yaml … !"" templates # !"" NOTES.txt # !"" _helpers.tpl # !"" deployment.yaml # !"" externaldb-secrets.yaml # !"" ingress.yaml # !"" pvc.yaml # !"" secrets.yaml # !"" svc.yaml … # %"" tls-secrets.yaml !"" values-production.yaml %"" values.yaml • Kubernetestͷ
 Ϧιʔεͷू߹ • ࡶʹݴ͑͹ςϯϓϨʔ τͱม਺ͷू߹ ςϯϓϨʔτ
    ʢ%FQMPZNFOUͱ͔ *OHSFTTͱ͔ʣ ม਺ఆٛ
12. ςϯϓϨʔτ apiVersion: extensions/v1beta1 kind: Ingress metadata: ... spec: rules: - host: {{ .Values.ingress.hostname }} http: paths: - path: / backend: serviceName: {{ template "fullname" . }} servicePort: {{ .Values.service.port }} ීஈॻ͍ͯΔYAMLΛςϯϓϨʔτԽ͢Δ͚ͩ ม਺ ม਺
13. ී௨ͷYAML apiVersion: extensions/v1beta1 kind: Ingress metadata: ... spec: rules: - host: www.example.com http: paths: - path: / backend: serviceName: test-svc servicePort: 80 ͜Ε͕
14. ςϯϓϨʔτԽͨ͠YAML apiVersion: extensions/v1beta1 kind: Ingress metadata: ... spec: rules: - host: {{ .Values.ingress.hostname }} http: paths: - path: / backend: serviceName: {{ template "fullname" . }} servicePort: {{ .Values.service.port }} ͜͏
15. ม਺ఆٛ $ cat values.yaml service: port: 80 ingress: hostname: www.example.com ͋ͱ͸ values.yaml ʹม਺Λఆٛ͢Δ͚ͩ γϯϓϧ Πϯσϯτ͸υοτͰܨ͙ ʢJOHSFTTIPTUOBNF
16. helm install $ helm install --set ingress.hostname=test.example.com test-chart CLIͰΠϯετʔϧ࣌ʹม਺ͷ্ॻ͖΋Մೳ
17. ෳ਺ͷϦιʔεΛ·ͱΊΒΕΔ $ tree wordpress wordpress !"" Chart.yaml … !"" templates # !"" NOTES.txt # !"" _helpers.tpl # !"" deployment.yaml # !"" externaldb-secrets.yaml # !"" ingress.yaml # !"" pvc.yaml # !"" secrets.yaml # !"" svc.yaml … # %"" tls-secrets.yaml !"" values-production.yaml %"" values.yaml Service༻ͷYAML Deployment༻ͷYAML Ingress༻ͷYAML helm installͰશͯk8s্ʹల։͞ΕΔ
18. ґଘؔ܎΋هड़Մೳ $ cat sentry/requirements.yaml dependencies: - name: postgresql version: 0.18.0 repository: https://kubernetes-charts.storage.googleapis.com/ - name: redis version: 3.8.1 repository: https://kubernetes-charts.storage.googleapis.com/ sentryͷChartʹ͸PostgreSQLͱRedis͕ඞཁ
19. ChartΛࣗ࡞͢Δ $ tree test-chart test-chart !"" Chart.yaml !"" charts !"" requirements.lock !"" requirements.yaml !"" templates # !"" NOTES.txt # !"" _helpers.tpl # !"" api # # !"" deployment.yaml # # !"" ingress.yaml # # %"" svc.yaml # %"" ui # !"" deployment.yaml # !"" ingress.yaml # %"" svc.yaml %"" values.yaml • ྫɿDBͱΩϟογϡαʔόΛ
 ඞཁͱ͢ΔγϯάϧϖʔδΞ ϓϦέʔγϣϯ • UI: ੩తϑΝΠϧΛ഑෍͢Δίϯςφ
 
 ʢຊ൪͸CDNʹஔ͘ͷͰݕূ؀ڥͷΈʣ • API: APIαʔόΛ࣮૷ͨ͠ίϯςφ • DB: PostgresQLʢطଘͷChartΛར༻ʣ • ΩϟογϡɿRedisʢطଘͷChartΛར༻ʣ 3FEJTͱ1PTUHSF42-Λهड़
    ʢલड़ʣ "1*ؔ࿈ 6*ؔ࿈ ม਺
20. APIαʔό apiVersion: extensions/v1beta1 kind: Deployment ... spec: template: spec: ... containers: - name: {{ .Chart.Name }}-api image: "{{ .Values.api.image.repository }}:{{ .Values.api.image.tag }}" ... env: - name: POSTGRES_HOST value: {{ template "postgresql.fullname" . }} - name: REDIS_HOST value: {{ template "redis.fullname" . }} DB৘ใ౳͸؀ڥม਺Ͱ౉ͤΔΑ͏ʹ͓ͯ͘͠ (౉͠ํ͸ConfigMap/Secretܦ༝Ͱ΋ԿͰ΋ྑ͍ʣ %#αʔό৘ใ Ωϟογϡαʔό৘ใ
21. UIαʔό apiVersion: extensions/v1beta1 kind: Deployment ... spec: template: spec: ... containers: - name: {{ .Chart.Name }}-ui ... env: - name: API_HOST value: {{ .Values.api.ingress.hostname }} APIαʔόͷϗετ໊͸؀ڥม਺Ͱ౉͢ "1*αʔό৘ใ
22. UIαʔό {{- if .Values.test.enabled -}} apiVersion: extensions/v1beta1 kind: Deployment ... spec: template: spec: ... containers: - name: {{ .Chart.Name }}-ui image: "{{ .Values.ui.image.repository }}:{{ .Values.ui.image.tag }}" ... env: - name: API_HOST value: {{ .Values.api.ingress.hostname }} {{- end -}} ςετ࣌ͷΈ༗ޮʹ͢Δ ৚݅෼ذ༻ͷม਺Λ
    ࣗ෼Ͱఆ͓ٛͯ͘͠
23. ม਺ఆٛ $ cat values.yaml test enabled: true api image: tag: latest ingress: hostname: api.example.com ui: image: tag: latest ingress: Hostname: ui.example.com Ϧιʔεؒͷܨ͗໨Λશͯม਺Խ͢Δ ʢͦͯ͠؀ڥม਺౳Ͱ౉ͤΔΑ͏ʹ͢Δʣ
24. ॏཁͳ͜ͱͳͷͰ੔ཧ • Ϧιʔεؒͷܨ͗໨Λશͯม਺Խ͢Δ • UIαʔό <=> APIαʔό • APIαʔό <=> DBαʔό • APIαʔό <=> Ωϟογϡαʔό, etc. • ม਺Խ͢Δ͜ͱͰಉ͡Chart͔Βෳ਺ੜ੒͠΍͘͢ͳΔ • ݕূ࣌ͷΈඞཁͳϦιʔε͸৚݅෼ذ͢Δ
25. ׬੒ܗ 6* Kubernetes "1* 1PTUHSF42- 3FEJT ui.example.com api.example.com ᶃ ᶄ ᶅ
26. helm installͰશͯల։͞ΕΔ 6* "1* 1PTUHSF42- 3FEJT 6* "1* 1PTUHSF42- 3FEJT test-chart helm install test-chart
27. ϦϦʔε໊ • Helmʹ͸ϦϦʔεͷ֓೦͕͋Δ • ϦϦʔε໊͕ҟͳΕ͹ಉ͡ύοέʔδΛෳ਺ల։Մೳ Kubernetes 8PSEQSFTT chart XPSEQSFTT XPSEQSFTT helm install --name wordpress1 wordpress helm install --name wordpress2 wordpress
28. test-chart΋ෳ਺ల։Մೳ 6* "1* 1PTUHSF42- 3FEJT test-chart 6* "1* 1PTUHSF42- 3FEJT 6* "1* 1PTUHSF42- 3FEJT test2 test1 helm install --name test1 test-chart helm install --name test2 test-chart
29. test-chart΋ෳ਺ల։Մೳ test-chart 6* "1* 1PTUHSF42- 3FEJT helm install --set api.ingress.hostname=test1-api.example.com --set ui.ingress.hostname=test1-ui.example.com --name test1 test-chart 6* "1* 1PTUHSF42- 3FEJT test1-ui.example.com test1-api.example.com 6* "1* 1PTUHSF42- 3FEJT helm install --set api.ingress.hostname=test2-api.example.com --set ui.ingress.hostname=test2-ui.example.com --name test2 test-chart test2-ui.example.com test2-api.example.com %/4Ϩίʔυ΋ࣗಈੜ੒
    ʢ؀ڥʹΑͬͯ͸ࣄલઃఆ͕ඞཁʣ
30. ͜ΕΛCIͰ࣮ߦ͢Ε͹...ʁ
31. 6* "1* 1PTUHSF42- 3FEJT pr1-api.example.com helm install --set api.ingress.hostname=pr1-api.example.com --set ui.ingress.hostname=pr1-ui.example.com --name pr1 test-chart pr1-ui.example.com PR࡞੒ʢ#1ʣ Job࣮ߦ Kubernetes PR୯ҐͰͷݕূ؀ڥͷࣗಈߏங͕Մೳʂ
32. 6* "1* 1PTUHSF42- 3FEJT pr1-api.example.com helm delete --purge pr1 pr1-ui.example.com PRΫϩʔζʢ#1ʣ Job࣮ߦ Kubernetes ࡟আ΋؆୯
33. શͯղܾ
34. ͱ͸ͳΒͳ͍
35. Ϋϥ΢υαʔϏεͷ Ϧιʔε͕ࣗಈߏஙͰ͖ͳ͍
36. AWSͷ৔߹ 6* Kubernetes "1* 3%4 &MBTUJ$BDIF ui.example.com api.example.com 424 AWS ϚωʔδυαʔϏεͱ૊Έ߹Θͤͯ࢖͏͜ͱ΋ଟ͍
37. RDSΛ࢖͏৔߹ 6* "1* 3%4 ᶃઌʹϓϩϏδϣχϯά AWS Kubernetes ᶄ%#৘ใΛίϯςφʹ౉͢
    ϗετ໊*%18ʣ
38. ͠ΜͲ͍ ʢࣗಈߏங΋೉͍͠ʣ
39. ͦ͜ͰService Broker ※ ྫͱͯ͠AWSΛ༻͍·͕͢GCP౳Ͱ΋جຊ͸ಉ͡Ͱ͢
40. Service Brokerͱ͸ʁ ༷ʑͳαʔϏεΛϓϩϏδϣχϯά͢Δͷ͸ํ๏΋ҧ͏ͨΊେม
41. Service Brokerͱ͸ʁ ஥հਓΛڬΉ͜ͱͰΠϯλϑΣʔεΛ౷Ұ͠ૄ݁߹ʹ ϒϩʔΧʔʹґཔ Service Broker ϒϩʔΧʔ͕
    ϓϩϏδϣχϯά ݩʑ͸Cloud Foundryͷ࢓૊Έ
42. Kubernetesͷ৔߹͸ʁ YAMLͰ֎෦αʔϏε͕ѻ͑ΔΑ͏ʹͳΔ :".-Λ౤͛Δ Service Broker ϒϩʔΧʔ͕
    ϓϩϏδϣχϯά
43. Service Broker಺Ͱ΋෼୲ Service Broker AWS Service Broker GCP Service Broker ͦΕͧΕͷϦιʔεΛ୲౰ ࢦࣔΛड͚
    ద੾ͳ૬खʹґཔ
44. αʔϏε͕૿͑ͯ΋ରԠ͕༰қ AWS Service Broker GCP Service Broker Azure Service Broker ৽͘͠௥Ճ
45. Service Catalog Kubernetes AWS Service Broker GCP Service Broker ,VCFSOFUFTͰ4FSWJDF
    #SPLFSΛ
    ར༻͢ΔͨΊͷ࢓૊Έ Service Catalog
46. Service Catalog Kubernetes AWS Service Broker GCP Service Broker Service Catalog :".-Λ౤͛Δ ґཔ ϓϩϏδϣχϯά
47. SQSΛ࡞Γ͍ͨ৔߹ apiVersion: servicecatalog.k8s.io/v1beta1 kind: ServiceInstance metadata: name: sqs-test spec: clusterServiceClassExternalName: sqs clusterServicePlanExternalName: standard ୹͍YAMLΛॻ͚ͩ͘ Ϧιʔεͷ͜ͱΛ4FSWJDF*OTUBODFͱݺͿ 424Λࢦఆ
48. Kubernetes LVCFDUM Service Catalog AWS Service Broker ґཔ ϓϩϏδϣχϯά ServiceInstance ࣗಈͰߏங͞ΕΔ
49. RDSΛ࢖͏৔߹ 6* "1* 3%4 ઌʹϓϩϏδϣχϯά͢Δ AWS Kubernetes %#৘ใΛίϯςφʹ౉͢ ͜Ε͸ղܾ ͜Ε͸ղܾ
    ͍ͯ͠ͳ͍
50. ServiceBinding • ServiceInstanceͷ৘ใΛSecretͱͯ͠࡞੒͢Δ࢓૊Έ • YAMLΛॻ͚ͩ͘ͰࣗಈͰSecret͕ੜ੒͞ΕΔ apiVersion: servicecatalog.k8s.io/v1beta1 kind: ServiceBinding metadata: name: sqs-test-binding spec: instanceRef: name: sqs-test ৘ใΛऔಘ͍ͨ͠
    4FSWJDF*OTUBODF໊Λࢦఆ
    ʢ͖ͬ͞࡞ͬͨ΍ͭʣ
51. Secret $ kubectl get secret sqs-test-binding -o yaml apiVersion: v1 data: DEAD_LETTER_QUEUE_ARN: "" DEAD_LETTER_QUEUE_NAME: "" DEAD_LETTER_QUEUE_URL: "" QUEUE_ARN: XXXXXXXXXXXXXXXXXXXXXXXXXXXXXX QUEUE_NAME: YYYYYYYYYYYYYYYYYYYYYYYYYYYYYY QUEUE_URL: ZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZ ... kind: Secret type: Opaque ੜ੒͞ΕͨSQSʹؔ͢Δ৘ใ͕อଘ͞Ε͍ͯΔ
52. Kubernetes LVCFDUM Service Catalog AWS Service Broker ৘ใऔಘ ServiceBinding Secret ࡞੒
53. Status • Status͸CLIͰ֬ೝ͢Δ͜ͱ͕ग़དྷΔ • Provisining, Ready, Deprovisioning, etc. $ kubectl plugin svcat get instances NAME NAMESPACE CLASS PLAN STATUS +----------+-----------+-------+------------+--------------+ sqs-test default s3 custom Ready $ kubectl plugin svcat get binding NAME NAMESPACE INSTANCE STATUS +------------------+-----------+-----------+------------+ sqs-test-binding default sqs-test Provisining
54. શମ૾ https://aws.amazon.com/jp/partners/servicebroker/
55. Kubernetes LVCFDUM Service Catalog AWS Service Broker ৘ใऔಘ ServiceInstance/ServiceBinding Secret ࡞੒ ґཔ ϓϩϏδϣχϯά
56. SecretΛPodʹ౉ͤ͹ HelmͰChartԽͰ͖ͦ͏
57. APIαʔό apiVersion: apps/v1beta2 kind: Deployment metadata: name: api template: spec: containers: ... env: - name: RDS_HOSTNAME valueFrom: secretKeyRef: name: rds-binding key: ENDPOINT_ADDRESS - name: QUEUE_NAME valueFrom: secretKeyRef: name: sqs-binding key: QUEUE_NAME Secretܦ༝ͰDB৘ใ౳Λ౉͢ ※Πϝʔδ
58. HelmͰAWSϦιʔε΋ల։ 6* "1* 6* "1* 3%4
    4FSWJDF*OTUBODF
 
 4FSWJDF#JOEJOH test-chart 424
    4FSWJDF*OTUBODF
 
 4FSWJDF#JOEJOH 3%4 424 AWS Secret Secret Kubernetes
59. 6* "1* pr1-api.example.com pr1-ui.example.com PR࡞੒ʢ#1ʣ Job࣮ߦ Kubernetes PR୯ҐͰAWSϦιʔεΛ࡞Δ͜ͱ΋Մೳʂ 3%4 424 AWS pr1-rds pr1-sqs Secret 13ઐ༻ͷ 3%4΍Ωϡʔ helm install
60. શͯղܾ
61. ͱ͸ͳΒͳ͍
62. ࣮ࡍʹӡ༻͢Δͱ ೉͍͠఺͕ଟ਺ ʢࣄྫϕʔεͰ۪௚ʹ঺հʣ
63. 1. S3ͷόέοτ͕ফ͑ͳ͍ $ aws s3 ls 2018-10-12 20:44:25 aws-service-broker-s3-AAAAA-AAA-s3bucket-AAAAA 2018-10-15 17:58:44 aws-service-broker-s3-BBBBB-BBB-s3bucket-BBBBB 2018-10-15 17:59:12 aws-service-broker-s3-CCCCC-CCC-s3bucket-CCCCC 2018-10-15 18:12:53 aws-service-broker-s3-DDDDD-DDD-s3bucket-DDDDD 2018-10-16 17:58:39 aws-service-broker-s3-EEEEE-EEE-s3bucket-EEEEE S3ͷServiceInstanceΛফͯ͠΋όέοτ͕࢒Δ aws-servicebrokerͷ໰୊
64. ௚ͨ͠ ʢDeletionPolicy͕RetainݻఆͩͬͨͷͰม਺Խͨ͠ʣ ※όέοτ͕ۭ͡Όͳ͍ͱফ͑ͳ͍ͷͰ·ͩվળͷ༨஍͋Γ
65. 2. SNSͷ࠶ૹϙϦγʔ͕ઃఆͰ͖ͳ͍ $ aws sns list-subscriptions { "Subscriptions": [ { "SubscriptionArn": "PendingConfirmation", "Owner": "XXXXXXXXXXXX", "Protocol": "https", "Endpoint": "https://test.example.com", "TopicArn": "arn:aws:sns:ap-northeast-1:XXXXXXXXXX:aws-service-broker-sns" } ] } ͏·͘࠶ૹ͞ΕͣPeindingConfirmationʹͳͬͯ͠·͏ aws-servicebrokerͷ໰୊
66. ௚ͨ͠ ʢ࠶ૹϙϦγʔΛઃఆͰ͖ΔΑ͏ʹͨ͠ʣ
67. 3. ද͕ࣔͣΕͯΔ $ kubectl plugin svcat get classes NAME NAMESPACE DESCRIPTION +------------------+-----------+----------------------------------------------+ dh-emr AWS Service Broker - Amazon EMR dh-dynamodb AWS Service Broker - Amazon DynamoDB dh-rdsmariadb AWS Service Broker - Amazon RDS for MariaDB dh-rekognition AWS Service Broker - Amazon Rekognition dh-athena AWS Service Broker - Amazon Athena. dh-sqs AWS Servicebroker - Amazon SQS dh-kms AWS Service Broker - KMS Key dh-rdspostgresql AWS Service Broker - Amazon RDS for ... SQS͚͓͔͍ͩ͠ aws-servicebrokerͷ໰୊
68. ௚ͨ͠
69. 4. Service Brokerʹ༩͑Δݖݶ͕ڧ͍ { "Sid": "ServiceClassPermissions", "Action": [ "athena:*", "dynamodb:*", "kms:*", "elasticache:*", "elasticmapreduce:*", "kinesis:*", "rds:*", "redshift:*", "route53:*", "s3:*", "sns:*", "sns:*", "sqs:*", "ec2:*", "iam:*", "lambda:*" ], "Resource": [ "*" ], "Effect": "Allow" } IAMΠϯελϯεϩʔϧͰ༩͑ΔͱଞͷPod΋ڧ͍ݖݶΛ࣋ͬͯ͠·͏ AWSݻ༗ͷ࿩
70. $ kubectl get pods -n aws-sb -o yaml apiVersion: v1 items: - apiVersion: v1 kind: Pod metadata: annotations: iam.amazonaws.com/role: awssb_role kiamΛ࢖͏ Pod୯ҐͰIAMϩʔϧΛׂΓ౰ͯΔ 1PEઐ༻ͷ
    *".ϩʔϧ https://github.com/uswitch/kiam
71. ͔͠͠kiamʹ΋೉఺͕... ※ ͕࣌ؒͳ͍ͷͰলུ
72. 5. annotation͕ઃఆͰ͖ͳ͍ $ cat values.yaml image: awsservicebroker/aws-servicebroker:beta imagePullPolicy: Always authenticate: true tls: cert: key: deployClusterServiceBroker: true aws: region: us-east-1 bucket: awsservicebroker key: templates/latest s3region: us-east-1 tablename: awssb accesskeyid: "" secretkey: "" targetaccountid: "" targetrolename: "" vpcid: "" brokerconfig: verbosity: 10 brokerid: awsservicebroker prescribeoverrides: true aws-servicebrokerͷ໰୊ kiam͸annotationͰIAMϩʔϧΛ੍ޚ͍ͯ͠Δ
73. ௚ͨ͠
74. 6. λΠϛϯά໰୊ʢॏཁʣ Secret ·ͩ࡞੒
    ͞Ε͍ͯͳ͍
    ͨΊΤϥʔ ͕͔͔࣌ؒΔ "1* test-chart 6* "1* 3%4 424 helm install
75. initContainers: - name: init-s3-binding image: k8s-kubectl command: ['sh', '-c', 'until kubectl get secrets s3-binding; do echo waiting for s3-binding; sleep 5; done;'] initContainersΛ࢖͏ Secret͕ੜ੒͞ΕΔ·ͰPodͷੜ੒Λ଴ػ
 ʢղܾ͢Δͱ͸ݴ͑ਏ͍ʣ https://kubernetes.io/docs/concepts/workloads/pods/init-containers/
76. 7. ServiceCatalogෆ҆ఆ໰୊ kubectl get pods -n catalog NAME READY STATUS RESTARTS AGE catalog-catalog-apiserver-86d695b7dc-d78xf 0/2 CrashLoopBackOff 359 11d catalog-catalog-controller-manager-64f69dd964-lzs7c 0/1 CrashLoopBackOff 206 11d test-chart 6* "1* 3%4 424 Service Catalog 4FSWJDF$BUBMPH͕
    ࢮ͵ͱԿ΋Ͱ͖ͳ͘ͳΔ
77. ະղܾ ʢଟ෼ϝϞϦपΓʣ Service Catalog࠶ΠϯετʔϧͰҰԠ௚Δ HelmͰσϑΥϧτઃఆͩͱզʑͷ؀ڥͰ͸ࢮ͵
78. Service CatalogΛ࠶Πϯετʔϧͨ͠৔߹ͷฐ֐ $ kubectl plugin svcat get brokers NAME NAMESPACE URL STATUS +-------------------+-----------+----------------------------------------------------+--------+ test-chart 6* "1* 3%4 424 Service Catalog 4FSWJDF
    $BUBMPHʹొ࿥͍ͯͨ͠
    4FSWJDF
    #SPLFS΋ফ͑Δ 4FSWJDF
    #JOEJOH΋ফ͑Δ େࢂࣄ
79. ྑ͍ײ͡ʹ௚͢ํ๏͕͋Ε͹ Ͳͳ͔ͨڭ͑ͯԼ͍͞ ʢetcdͷόοΫΞοϓͱ͔...ʁʣ
80. 8. Deprovisionʹࣦഊͨ͋͠ͱServiceInstance͕࢒Γଓ͚Δ $ kubectl plugin svcat get instances NAME NAMESPACE CLASS PLAN STATUS +---------------------+-----------+--------+--------------+----------------------+ test-s3 default dh-s3 custom DeprovisionCallFailed test-chart Service Catalog %FQSPWJTJPO
    GBJMFE IFMN
    EFMFUF ґཔ YAMLࣗମ͸΋͏ফ͍͑ͯΔͷͰग़དྷΔ͜ͱ͕ͳ͍ 6* "1* 3%4 424
81. ະղܾ --forceͷΑ͏ͳΦϓγϣϯ͸ݱࡏະ࣮૷ͬΆ͍ https://github.com/kubernetes-incubator/service-catalog/issues/2268
82. ڍ͛ͨͷ͸Ұྫ ·ͩ·ͩଟ਺͋Δ
83. ServiceBroker·ͱΊ • ServiceBrokerΛ࢖͏͜ͱͰଞͷϦιʔεͱಉ༷ʹΫϥ΢υαʔϏ ε΋؅ཧͰ͖ͯඇৗʹศར • Helm + ServiceBrokerͰ؀ڥߏஙͷࣗಈԽ͕େ෯ʹਪ͠ਐΊΒΕΔ • ҰํͰ·ͩ໰୊΋ଟ͘ൃల్্ͳײ͡ • ಛʹaws-servicebroker͸·ͩ·ͩʢAzure΍GCP͸҆ఆͯͦ͠͏ʣ • ࣗ෼ͰίʔυΛ௚͢ؾ͕֓͋ΔਓͳΒΦεεϝ • ࠓ͙҆͢ఆͯ͠࢖͍͍ͨਓʹ͸Φεεϝ͠ͳ͍
84. Appendix
85. Open Service Broker API Kubernetes Service Catalog AWS Service Broker GCP Service Broker 0QFO
    4FSWJDF
    #SPLFS
    "1* ͱͯ͠ఆٛ͞Ε͍ͯΔ
86. Open Service Broker API γϯϓϧͳHTTPαʔόͳͷͰ؆୯ʹࣗ࡞Մೳ https://github.com/openservicebrokerapi/servicebroker/blob/v2.14/spec.md
87. Open Service Broker for PostgreSQL • PostgreSQLΛϓϩϏδϣχϯά͢ΔService Broker • ษڧͷͨΊʹࣗ࡞ͯ͠Έͨ • https://github.com/knqyf263/osbpsql • ڵຯ͕͋Δਓ͕͍Ε͹͍͔ͭͦͷ࿩΋ • ຊ౰͸͜ͷลΓͷ࿩΋͔ͨͬͨ͠
88. ࢀߟαΠτ • k8s͕ಋೖ͢ΔService Brokerͷ࢓૊Έͱ͸ • http://jaco.udcp.info/entry/k8s-service-broker • CFͷศརػೳΛଞͷ؀ڥͰ΋ɻOpen Service Broker • https://www.slideshare.net/jacopen/cfopen-service-broker • Open Service Broker for ͘͞ΒͷΫϥ΢υͰKubernetes + Service Catalogग़དྷΔΑ͏ʹ ͳΓ·ͨ͠ • http://febc-yamamoto.hatenablog.jp/entry/2018/03/10/090229 • Open Service Broker APIΛ࢖ͬͯCloud FoundryͱKubernetesͰService BrokerΛ૬ޓ ӡ༻͢Δ • https://blog.ik.am/entries/497
89. Thank you for your attention