KubernetesのSecret管理~Vaultへの超入門~/Vault on Kubernetes

!NPDIJ[VLJ ,VCFSOFUFTͷ4FDSFU؅ཧ d7BVMU΁ͷ௒ೖ໳d ,VCFSOFUFT/PWJDF5PLZP

,FJUB.PDIJ[VLJ XIPBNJ !NPDIJ[VLJ 🌕8BOUUPCFB1SPGFTTJPOBM*5&OHJOFFS ❤,VCFSOFUFT 🚨"GPY OPUBSBDDPPOEPH

͸͡Ίʹ ۙ೥ɺγʔΫϨοτ৘ใͷ؅ཧ͕ͱͯ΋ॏཁʹͳ͍ͬͯΔதͰɺ ͲͷΑ͏ʹ؅ཧ͢Δͷ͕ྑ͍ͷ͔೰Ή͜ͱ͕ଟ͍͔ͱࢥ͍·͢ɻ ద੾ͳ؅ཧΛ͠ͳ͚Ε͹ɺγʔΫϨοτ৘ใ͸༷ʑͳՕॴʹ෼ࢄͯ͠ஔ͔Εͯ͠·͍ɺ ख͕෇͚ΒΕͳ͍ঢ়ଶʹͳͬͯ͠·͍·͢ɻ ͦ͜Ͱࠓճ͸ɺγʔΫϨοτ৘ใΛҰݩతʹ؅ཧͰ͖ɺ ,VCFSOFUFTͷϦιʔεͱ༰қʹ࿈ܞͤ͞Δ͜ͱ͕Ͱ͖Δ)BTIJDPSQ7BVMUͱ͍͏ πʔϧΛ঺հ͍͖ͤͯͨͩ͞·͢ɻ ຊ-5Ͱ͸ɺ7BVMUͷΠϯετʔϧ͔Βɺ༷ʑͳγʔΫϨοτ৘ใͷऔಘํ๏ʹؔͯ͠ͷ ͓࿩Λͤͯ͞௖͖·͢ɻ

͸͡Ίʹ ۙ೥ɺγʔΫϨοτ৘ใͷ؅ཧ͕ͱͯ΋ॏཁʹͳ͍ͬͯΔதͰɺ ͲͷΑ͏ʹ؅ཧ͢Δͷ͕ྑ͍ͷ͔೰Ή͜ͱ͕ଟ͍͔ͱࢥ͍·͢ɻ ద੾ͳ؅ཧΛ͠ͳ͚Ε͹ɺγʔΫϨοτ৘ใ͸༷ʑͳՕॴʹ෼ࢄͯ͠ஔ͔Εͯ͠·͍ɺ ख͕෇͚ΒΕͳ͍ঢ়ଶʹͳͬͯ͠·͍·͢ɻ ͦ͜Ͱࠓճ͸ɺγʔΫϨοτ৘ใΛҰݩతʹ؅ཧͰ͖ɺ ,VCFSOFUFTͷϦιʔεͱ༻ҙʹ࿈ܞͤ͞Δ͜ͱ͕Ͱ͖Δ)BTIJDPSQ7BVMUͱ͍͏ πʔϧΛ঺հ͍͖ͤͯͨͩ͞·͢ɻ ຊ-5Ͱ͸ɺ7BVMUͷΠϯετʔϧ͔Βɺ༷ʑͳγʔΫϨοτ৘ใͷऔಘํ๏ʹؔͯ͠ͷ ͓࿩Λͤͯ͞௖͖·͢ɻ
ཁ͸7BVMUͰ,VCFSOFUFTͷ4FDSFU؅ཧ ΍ͬͯΈͨͥͱ͍͏͓࿩Ͱ͢

͸͡Ίʹ ɾܝࡌ಺༰͸ݸਓͷݟղͰ͋Γɺॴଐ͢Δاۀ΍૊৫ͷཱ৔ɺઓུɺҙݟΛ୅ද͢Δ΋ͷͰ͸͋Γ·ͤΜ ɾهࡌ͞Ε͍ͯΔձ໊ࣾɺ঎඼໊ɺ·ͨ͸αʔϏε໊͸ɺ֤ࣾͷ঎ඪొ࿥·ͨ͸঎ඪͰ͢

"HFOEB 4FDSFU؅ཧ 7BVMU 7BVMUͷΠϯετʔϧ 7BVMU΁ͷػີ৘ใ֨ೲ 7BVMUΛ༻͍ͨ,VCFSOFUFTͷ4FDSFU؅ཧ &YUFSOBM4FDSFU0QFSBUPSΛ༻͍Δύλʔϯ 7BVMU"HFOUΛ༻͍Δύλʔϯ 4FDSFUT4UPSF$4*%SJWFSΛ༻͍Δύλʔϯ ·ͱΊ

4FDSFU؅ཧ ,VCFSOFUFTͰػີ৘ใΛѻ͏γʔϯʹ͓͍ͯɺ ,VCFSOFUFTͰ͸4FDSFUϦιʔεΛ༻͍ͯ1PEʹػີ৘ใΛ౉͢͜ͱ͕Ͱ͖·͢ɻ BQJ7FSTJPOW LJOE1PE TQFD FOW4FDSFUͷ஋Λ؀ڥม਺ʹઃఆ OBNF64&3/"/&؀ڥม਺໊
WBMVF'SPN TFDSFU,FZ3FG OBNFOPWJDFBQQTFDSFU4FDSFU໊ LFZVTFSOBNF OBNF1"44803%؀ڥม਺໊ WBMVF'SPN TFDSFU,FZ3FG OBNFOPWJDFBQQTFDSFU4FDSFU໊ LFZQBTTXPSE WPMVNF.PVOUT4FDSFUΛ7PMVNFͱͯ͠.PVOU OBNFDPO fi H NPVOU1BUINOUDPO fi H SFBE0OMZUSVF WPMVNFT OBNFDPO fi H TFDSFU TFDSFU/BNFOPWJDFBQQTFDSFU OPWJDFBQQZBNM OPWJDFBQQTFDSFU OPWJDFBQQ

4FDSFU؅ཧ BQJ7FSTJPOW LJOE4FDSFU NFUBEBUB OBNFOPWJDFBQQTFDSFU OBNFTQBDFOPWJDFBQQ UZQF0QBRVF EBUB QBTTXPSE6&'56E16L2Y.K./2 VTFSOBNF77/'6K&Z.[2
Ұൠతʹ4FDSFUϦιʔε͸ҎԼͷΑ͏ͳϚχϑΣετϑΝΠϧ͔Β࡞੒ՄೳͰ͢ɻ ͔͠͠ͳ͕Β͜ΕͩͱϑΝΠϧͦͷ΋ͷʹ୭Ͱ΋σίʔυՄೳͳػີ৘ใΛهࡌ͢Δ͜ͱʹͳΓɺ ϚχϑΣετϑΝΠϧͷ؅ཧํ๏͕՝୊ͱͳΓ·͢ɻ OPWJDFBQQTFDSFUZBNM FDIPE9/MDK&Z.[2cCBTFE VTFS FDIPD('[DEWDN2Y.K./2cCBTFE QBTTXPSE ͜ͷ஋͑͞஌͍ͬͯΕ͹୭Ͱ΋σίʔυՄೳ OPWJDFBQQTFDSFU OPWJDFBQQ TFDSFUZBNM ίϨΛͲ͏؅ཧ͢Δ͔ 64&3/".&VTFS 1"44803%QBTTXPSE #BTFͰΤϯίʔυ͍ͯ͠Δ͚ͩ

4FDSFU؅ཧ ͜Εʹର͠ύοͱࢥ͍ͭ͘ϚχϑΣετϑΝΠϧͷ؅ཧํ๏͸ྫ͑͹ ҎԼͷΑ͏ͳ΋ͷ͕ڍ͛ΒΕ·͢ɻ ϚχϑΣετϑΝΠϧࣗମͷ؅ཧΛؾΛ෇͚Δ ɹɾಛఆͷਓ͚͕ͩ4FDSFUϚχϑΣετϑΝΠϧΛ؅ཧ͢Δ ɹɾ1SJWBUFͳ(JU)VCϦϙδτϦͰϚχϑΣετϑΝΠϧΛ؅ཧ͢Δ ϚχϑΣετϑΝΠϧʹؚ·ΕΔػີ৘ใΛผ్ൿີ伴ͰΤϯίʔυ͢Δ ɹɾ1PE಺ͷൿີ伴Ͱσίʔυ ɹɾ4FDSFU࡞੒࣌ʹσίʔυ FYTFBMFETFDSFU
ਓతϛεͷϦεΫɺػີ৘ใͷѻ͍ਏ͞ɺػີ৘ใࣗମϑΝΠϧͰѻ͍ͨ͘ͳ͍FUD

4FDSFU؅ཧ ΑΓηΩϡΞʹػີ৘ใΛѻ͏खஈͱͯ͠ɺػີ৘ใͦͷ΋ͷΛϚχϑΣετϑΝΠϧͰ͸ͳ͘ ,.4 ,FZ.BOBHFNFOU4ZTUFN Ͱ؅ཧ͢Δͱ͍͏खஈ͕ߟ͑ΒΕ·͢ɻ ࠓճ͸,.4ͱͯ͠7BVMUΛ࢖༻͠ɺ,VCFSOFUFT্Ͱػີ৘ใΛѻ͏ྫΛ͝঺հ͠·͢ɻ OPWJDFBQQ ,.4 ,FZ.BOBHFNFOU4ZTUFN 64&3/".&VTFS
1"44803%QBTTXPSE ػີ৘ใઐ༻ͷ৔ॴͰ؅ཧ

7BVMU 8IBUJT7BVMU IUUQTEFWFMPQFSIBTIJDPSQDPNWBVMU 4FDVSF TUPSF BOEUJHIUMZDPOUSPMBDDFTTUPUPLFOT QBTTXPSET DFSUJ
fi DBUFT FODSZQUJPOLFZTGPSQSPUFDUJOHTFDSFUT BOEPUIFSTFOTJUJWFEBUBVTJOHB6* $-* PS)551"1* <ҙ༁> ྑ͍ײ͡ʹػີ৘ใΛ؅ཧͯ͠ѻ͑Δ

7BVMU !KBDPQFO͞Μͷࢿྉ 7BVMUʹ֨ೲͨ͠γʔΫϨοτΛ,VCFSOFUFT͔Β׆༻͢Δํ๏ IUUQTTQFBLFSEFDLDPNKBDPQFOWBVMUOJHFOBTJUBTJLVSFUVUPXPLVCFSOFUFTLBSBIVPZPOHTVSVGBOHGB LTͱ7BVMUΛ૊Έ߹ΘͤͯγʔΫϨοτΛ΋ͬͱηΩϡΞʹ IUUQTTQFBLFSEFDLDPNKBDPQFOLTUPWBVMUXP[VNJIFXBTFUFTJLVSFUVUPXPNPUVUPTFLJZVBOJ ࢀߟ

7BVMUͷΠϯετʔϧ ,VCFSOFUFT΁ͷ7BVMUͷΠϯετʔϧ͸)FMNΛ༻͍Δ͜ͱͰ؆୯ʹߦ͑·͢ɻ IFMNSFQPBEEIBTIJDPSQIUUQTIFMNSFMFBTFTIBTIJDPSQDPN IFMNSFQPVQEBUF IFMNJOTUBMMWBVMUIBTIJDPSQWBVMUOBNFTQBDFWBVMUDSFBUFOBNFTQBDFGWBMVFTZBNM Install vault https://developer.hashicorp.com/vault/tutorials/kubernetes/kubernetes-raft-deployment-guide#install-vault

7BVMUͷΠϯετʔϧ ࠓճ͸ݕূ޲͚ʹҎԼͷΑ͏ͳઃఆΛ༻͍·ͨ͠ɻ %FW4FSWFS EFWFOBCMFEUSVF ͱ͍͏ݕূ༻ͷ01΋༻ҙ͞Ε͍ͯΔͨΊ ͦͪΒΛ༻͍ͯ΋ྑ͍͔΋͠Ε·ͤΜɻ˞ະݕূ TFSWFS JOHSFTTJOHSFTTઃఆ FOBCMFEUSVF JOHSFTT$MBTT/BNFOHJOY
IPTUT IPTUWBVMUFYBNQMFDPN QBUIT<> EBUB4UPSBHF FOBCMFEGBMTF17$࡞੒ͷແޮԽ ݕূ༻ VJ8FC6*Λ༗ޮԽ FOBCMFEUSVF DTJTFDSFUTTUPSFDTJESJWFSQSPWJEFSWBVMUΛΠϯετʔϧ FOBCMFEUSVF WBMVFTZBNM Con fi gure Vault Helm Chart https://developer.hashicorp.com/vault/tutorials/kubernetes/kubernetes-raft-deployment-guide#con fi gure-vault-helm-chart "Dev" Server Mode https://developer.hashicorp.com/vault/docs/concepts/dev-server

7BVMUͷΠϯετʔϧ Πϯετʔϧ׬ྃޙ͸7BVMU͸4FBMFEͱݺ͹ΕΔঢ়ଶ࣌ͳ͓ͬͯΓɺ جຊతʹ7BVMUͷػೳΛར༻ग़དྷͳ͍ 7BVMUʹอଘ͞Ε͍ͯΔσʔλʹΞΫηεͰ͖ͳ͍ ঢ়ଶʹ ͳ͍ͬͯ·͢ɻ LVCFDUMOWBVMUHFUQP /".&3&"%:45"5643&45"354"(& WBVMU3VOOJOHT WBVMUBHFOUJOKFDUPSECCDGI[3VOOJOHT
WBVMUDTJQSPWJEFSI[[3VOOJOHT WBVMUDTJQSPWJEFSTTMO3VOOJOHT WBVMUDTJQSPWJEFSWKI3VOOJOHT Seal/Unseal https://developer.hashicorp.com/vault/docs/concepts/seal

7BVMUͷΠϯετʔϧ 7BVMU1PEʹFYFD͠ॳظԽίϚϯυΛ࣮ߦ͢Δ͜ͱͰҎԼͷΑ͏ʹ6OTFBM,FZͱ3PPU5PLFO ͕෷͍ग़͞Ε·͢ɻ ˞ࠓճ͸σϞ༻ʹ֤஋Λެ։͍ͯ͠·͕͢ɺ࣮ࡍ͸͜ΕΒͷ஋͸ػີ৘ใʹ֘౰͢ΔͨΊެ։͠ͳ͍Α͏ʹ͍ͯͩ͘͠͞ɻ LVCFDUMFYFDTUEJOUSVFUUZUSVFWBVMUOWBVMUWBVMUPQFSBUPSJOJU 6OTFBM,FZH %(8+46T*04NR(#"VUW/ 8"W5,8L[0JBX( 6OTFBM,FZ)250SVCINCBQ$:L,QJXYKVY*13HV:4P0Y3706 6OTFBM,FZ;KM6$U9"LW"'V16UKY89I[B[#H1L0GRS/R&-H["
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

7BVMUͷΠϯετʔϧ ॳظԽ࣌ʹൃߦ͞Εͨ6OTFBM,FZΛ༻͍Δ͜ͱͰɺ7BVMUΛ6OTFBMFEঢ়ଶʹͯ͠ 7BVMUΛ࢖༻Ͱ͖ΔΑ͏ʹ͠·͢ɻ ˞ҎԼͰ͸8FC6*ͷྫΛ͍ࣔͯ͠·͕͢ɺ$-*Ͱ΋ಉ༷ͷૢ࡞͕ՄೳͰ͢ 4FBMFEঢ়ଶ ͜͜ʹ6OTFBM,FZΛೖྗ ˞σϑΥϧτճ

7BVMUͷΠϯετʔϧ 6OTFBM͕׬ྃ͢Δͱ4UBUVT͕6OTFBMFEʹมΘΓɺॳظԽ࣌ʹ෷͍ग़͞Εͨ3PPU5PLFOΛ༻͍ͯ ϩάΠϯͰ͖ΔΑ͏ʹͳΓ·͢ɻ ˞3PPU5PLFO͸ॴҦ#VJME*Oͷ"ENJOJTUSBUPSݖݶʹ֘౰͢ΔͨΊɺॳظηοτΞοϓ͕ऴΘͬͨΒແޮԽ͢Δ͜ͱ͕ਪ঑͞Ε·͢ɻ 6OTFBMFEঢ়ଶ 3PPU5PLFOͰϩάΠϯ Root Tokens https://developer.hashicorp.com/vault/docs/concepts/tokens#root-tokens

7BVMUͷΠϯετʔϧ ࢀߟ 7BVMU͕σʔλʹΞΫηε͢ΔͨΊʹ͸SPPULFZΛσίʔυͰ͖Δඞཁ͕͋Δɻ SPPULFZ͸6OTFBM,FZͰσίʔυͰ͖ΔͨΊɺ6OTFBM,FZΛ7BVMUʹ౉ͯ͠σʔλʹΞΫηεͰ͖Δ Α͏ʹ͢Δ࡞ۀ͕6OTFBMʹ֘౰͢Δɻ ·ͨɺ6OTFBM,FZ͸4IBNJST4FDSFU4IBSJOHͱ͍͏࢓૊ΈΛ༻͍ͯ෼ࢄ؅ཧ͞ΕΔɻ Seal/Unseal https://developer.hashicorp.com/vault/docs/concepts/seal 7BVMUͷσʔλΛ σίʔυ͢ΔͨΊͷ伴
ˠSPPULFZͰΤϯίʔυ͞Ε͍ͯΔ &ODSZQUJPO,FZΛ σίʔυ͢ΔͨΊͷ伴 ˠ6OTFBM,FZͰΤϯίʔυ͞Ε͍ͯΔ SPPULFZΛσίʔυ͢ΔͨΊͷ伴

7BVMU΁ͷػີ৘ใ֨ೲ ͜͜Ͱ͸ྫͱͯ͠ɺ,FZ7BMVFܗࣜͰ7BVMUʹػີ৘ใΛ֨ೲͯ͠Έ·͢ɻ ,7λΠϓͰOPWJDFͱ͍͏ ໊લͷ4FDSFUT&OHJOΛ࡞੒

7BVMU΁ͷػີ৘ใ֨ೲ ͜͜Ͱ͸ྫͱͯ͠ɺ,FZ7BMVFܗࣜͰ7BVMUʹػີ৘ใΛ֨ೲͯ͠Έ·͢ɻ ػີ৘ใΛ֨ೲ

7BVMUΛ༻͍ͨ,VCFSOFUFTͷ4FDSFU؅ཧ 7BVMUͰ؅ཧ͞Ε͍ͯΔػີ৘ใʹ,VCFSNFUFT͔ΒΞΫηε͢ΔͨΊʹɺ ԿΒ͔ͷํ๏Ͱ7BVMUଆͰೝূೝՄΛߦ͏ඞཁ͕͋Γ·͢ɻ ɹೝূ7BVMUͰ͸,VCFSOFUFTͷ4FSWJDF"DDPVOUΛ༻͍ͯೝূΛߦ͏ํ๏͕ఏڙ͞Ε͍ͯΔ ɹೝՄ7BVMUͷ3PMFɺ1PMJDZͱ͍͏࢓૊ΈΛ༻͍ͯػີ৘ใ΁ͷΞΫηεΛ੍ޚ͢Δ Kubernetes Auth Method https://developer.hashicorp.com/vault/docs/auth/kubernetes ,VCFSOFUFT
4FSWJDF"DDPVOU 7BVMU 3PMF 1PMJDZ 4FDSFUT 4FSWJDF"DDPVOUΛ࢖ͬͯ 7BVMU্ͷػີ৘ใΛऔಘ 64&3/".&VTFS 1"44803%QBTTXPSE 4FSWJDF"DDPVOUΛ࢖ͬͯ ͱඥ෇͚ͨ3PMFΛ༻͍ͯ ػີ৘ใʹΞΫηε ػີ৘ใ΁ͷΞΫηεݖΛઃఆ ˞7BVMU͸4FSWJDF"DDPVOUΛ࢖ͬͨϦΫΤετΛड͚ͨΒɺ ɹ,VCFSOFUFT"1*ʹϦΫΤετΛߦ͍ ɹ5PLFOͷݕূΛߦ͏

7BVMUΛ༻͍ͨ,VCFSOFUFTͷ4FDSFU؅ཧ ,VCFSOFUFT্Ͱ4FSWJDF"DDPVOUΛ࡞੒͠·͢ɻ ࠓճ͸OPWJDFBQQͱ͍͏/BNFTQBDF͔Β7BVMUʹΞΫηε͢ΔͨΊͦͷ഑Լʹ4FSWJDF"DDPVOUΛ ࡞੒͍ͯ͠·͢ɻ ͳ͓ɺ4FSWJDF"DDPVOUʹରͯ͠,VCFSOFUFT্Ͱͷ3PMFͷόΠϯυ͸ෆཁͰ͢ɻ LVCFDUMDSFBUFTBOPWJDFWBVMUTBOOPWJDFBQQ TFSWJDFBDDPVOUOPWJDFWBVMUTBDSFBUFE

7BVMUΛ༻͍ͨ,VCFSOFUFTͷ4FDSFU؅ཧ 7BVMU্Ͱ4FSWJDF"DDPVOUΛ༻͍ͨೝূΛߦ͏ͨΊͷ ,VCFSOFUFT"VUIFOUJDBUJPO.FUIPEΛ࡞੒͠·͢ɻ LVCFSOFUFTͱ͍͏ "VUIFOUJDBUJPO.FUIPEΛ࡞੒

7BVMUΛ༻͍ͨ,VCFSOFUFTͷ4FDSFU؅ཧ ,VCFSOFUFT"1*4FSWFSΛࢦఆ "VUIFOUJDBUJPO.FUIPEΛ࡞੒͢Δʹ͋ͨͬͯ7BVMU͕4FSWJDF"DDPVOU5PLFOͷݕূΛߦ͏ͨΊʹɺ ,VCFSOFUFT"1*4FSWFSͷΤϯυϙΠϯτ৘ใΛઃఆ͠·͢ɻ

7BVMUΛ༻͍ͨ,VCFSOFUFTͷ4FDSFU؅ཧ 7BVMU্Ͱ1PMJDZΛ࡞੒͠·͢ɻ ͜ͷ1PMJDZΛ3PMFʹׂΓ౰ͯΔ͜ͱͰɺ1PMJDZׂ͕Γ౰ͯΒΕͨ3PMFΛ࢖ͬͯॴఆͷػີ৘ใʹ ΞΫηεͰ͖ΔΑ͏ʹͳΓ·͢ɻ OPWJDFBQQQPMJDZͱ͍͏໊લͷ 1PMJDZΛ࡞੒ OPWJDFEBUBBQQDPO fi H΁ͷ ಡΈऔΓݖݶΛఆٛ

7BVMUΛ༻͍ͨ,VCFSOFUFTͷ4FDSFU؅ཧ 7BVMU্Ͱ4FSWJDF"DDPVOUͱඥ෇͚ͨ3PMFΛ࡞੒͠ɺ1PMJDZΛׂΓ౰ͯ·͢ɻ OPWJDFBQQͱ͍͏໊લͷ3PMFΛ࡞੒ ͜ͷ3PMFͱඥ෇͚Δ4FSWJDF"DDPVOUΛઃఆ OPWJDFBQQOPWJDFBQQTB ͜ͷ3PMFʹׂΓ౰ͯΔ1PMJDZΛઃఆ OPWJDFBQQQPMJDZ

7BVMUΛ༻͍ͨ,VCFSOFUFTͷ4FDSFU؅ཧ ͔͜͜Β͸7BVMUʹ֨ೲͨ͠ػີ৘ใΛ,VCFSOFUFT͔Βར༻͢Δํ๏ʹ͍ͭͯ͝঺հ͠·͢ɻ Ҿ༻ 7BVMUʹ֨ೲͨ͠γʔΫϨοτΛ,VCFSOFUFT͔Β׆༻͢Δํ๏ !KBDPQFO IUUQTTQFBLFSEFDLDPNKBDPQFOWBVMUOJHFOBTJUBTJLVSFUVUPXPLVCFSOFUFTLBSBIVPZPOHTVSVGBOHGB TMJEF

&YUFSOBM4FDSFU0QFSBUPSΛ༻͍Δύλʔϯ Ҿ༻ 7BVMUʹ֨ೲͨ͠γʔΫϨοτΛ,VCFSOFUFT͔Β׆༻͢Δํ๏ !KBDPQFO IUUQTTQFBLFSEFDLDPNKBDPQFOWBVMUOJHFOBTJUBTJLVSFUVUPXPLVCFSOFUFTLBSBIVPZPOHTVSVGBOHGB TMJEF &YUFSOBM4FDSFU0QFSBUPS)BTIJ$PSQ7BVMU IUUQTFYUFSOBMTFDSFUTJPWQSPWJEFSIBTIJDPSQWBVMU

&YUFSOBM4FDSFU0QFSBUPSΛ༻͍Δύλʔϯ &YUFSOBM4FDSFU0QFSBUPS *OUSPEVDUJPO IUUQTFYUFSOBMTFDSFUTJPW &YUFSOBM4FDSFUT0QFSBUPSJTB,VCFSOFUFTPQFSBUPSUIBUJOUFHSBUFTFYUFSOBMTFDSFUNBOBHFNFOUTZTUFNT MJLF"844FDSFUT.BOBHFS )BTIJ$PSQ7BVMU (PPHMF4FDSFUT.BOBHFS "[VSF,FZ7BVMU
*#.$MPVE4FDSFUT .BOBHFS BOENBOZNPSF5IFPQFSBUPSSFBETJOGPSNBUJPOGSPNFYUFSOBM"1*TBOEBVUPNBUJDBMMZJOKFDUTUIF WBMVFTJOUPB,VCFSOFUFT4FDSFU <ҙ༁> ྑ͍ײ͡ʹ֎෦͔Βػີ৘ใΛऔಘͯ͠,VCFSOFUFTͷ4FDSFUΛ࡞Δ ҼΈʹ&YUFSOBM4FDSFU0QFSBUPS͸7BVMUҎ֎ʹ༷ʑͳ,.4ΛόοΫΤϯυͱͯ͠࢖༻Ͱ͖Δɻ IUUQTFYUFSOBMTFDSFUTJPWJOUSPEVDUJPOTUBCJMJUZTVQQPSU FYUFSOBMTFDSFUTJP IUUQTFYUFSOBMTFDSFUTJP

&YUFSOBM4FDSFU0QFSBUPSΛ༻͍Δύλʔϯ ,VCFSOFUFT 7BVMU 4FDSFUT 64&3/".&VTFS 1"44803%QBTTXPSE &YUFSOBM 4FDSFU 0QFSBUPS "11
FYUFSOBMTFDSFUZBNM ػີ৘ใΛؚ·ͳ͍ ,FZͷΈ 64&3/".& 1"44803% 4FDSFU4UPSF &YUFSOBM4FDSFU 64&3/".&VTFS 1"44803%QBTTXPSE ᶃ&YUFSOBM4FDSFUΛ࡞੒ ᶄ7BVMU΁ͷΞΫηε৘ใΛऔಘ ᶅ7BVMU͔Βػີ৘ใΛऔಘ ᶆऔಘͨ͠ػີ৘ใ͔Β4FDSFUΛ࡞੒ &YUFSOBM4FDSFU0QFSBUPSΛར༻͢Δ͜ͱͰɺػີ৘ใΛؚ·ͳ͍&YUFSOBM4FDSFUΛհͯ͠ 7BVMU্ͷػີ৘ใ͔Β4FDSFUΛ࡞੒͢Δ͜ͱ͕Ͱ͖·͢ɻ

&YUFSOBM4FDSFU0QFSBUPSΛ༻͍Δύλʔϯ ,VCFSOFUFTʹ)FMNΛ༻͍ͯ&YUFSOBM4FDSFU0QFSBUPSΛΠϯετʔϧ͠·͢ɻ ·ͨɺ&YUFSOBM4FDSFU0QFSBUPS͕7BVMUʹΞΫηε͢ΔͨΊͷ৘ใΛؚΉ4FDSFU4UPSFΛ ࡞੒͠·͢ɻ IFMNSFQPBEEFYUFSOBMTFDSFUTIUUQTDIBSUTFYUFSOBMTFDSFUTJP IFMNSFQPVQEBUF IFMNJOTUBMMFYUFSOBMTFDSFUTa FYUFSOBMTFDSFUTFYUFSOBMTFDSFUTa OFYUFSOBMTFDSFUTa DSFBUFOBNFTQBDF
ˈLVCFDUMBQQMZGTFDSFUTUPSFWBVMULTZBNM

&YUFSOBM4FDSFU0QFSBUPSΛ༻͍Δύλʔϯ 4FDSFU4UPSFͰ͸ҎԼͷΑ͏ʹ7BVMUͷΤϯυϙΠϯτ΍ػີ৘ใͷ֨ೲઌɺ ೝূʹ༻͍Δ4FSWJDF"DDPVOU΍3PMFΛఆ͍ٛͯ͠·͢ɻ BQJ7FSTJPOFYUFSOBMTFDSFUTJPWCFUB LJOE4FDSFU4UPSF NFUBEBUB OBNFWBVMUCBDLFOE OBNFTQBDFOPWJDFBQQ TQFD QSPWJEFS
WBVMU TFSWFSIUUQWBVMUWBVMU7BVMUͷΤϯυϙΠϯτ QBUIOPWJDF7BVMU্ͷػີ৘ใ֨ೲઌ 4FDSFUT&OHJOFT໊ WFSTJPOW BVUI LVCFSOFUFT NPVOU1BUILVCFSOFUFT7BVMU্ͷ"VUIFOUJDBUJPO.FUIPE໊ SPMFOPWJDFBQQ7BVMU্Ͱͷ3PMF 7BVMU্Ͱࢀর͢Δ1BUI΁ͷΞΫηεݖΛ෇༩͓ͯ͘͠ TFSWJDF"DDPVOU3FG OBNFOPWJDFWBVMUTBWBVMUͷೝূʹ༻͍Δ4FSWJDF"DDPVOU TFDSFUTUPSFWBVMULTZBNM

&YUFSOBM4FDSFU0QFSBUPSΛ༻͍Δύλʔϯ 7BVMU͔Βػີ৘ใΛऔಘͯ͠4FDSFUΛ࡞੒͢ΔͨΊͷ&YUFSOBM4FDSFUΛ࡞੒ͯ͠Έ·͢ɻ BQJ7FSTJPOFYUFSOBMTFDSFUTJPWCFUB LJOE&YUFSOBM4FDSFU NFUBEBUB OBNFFYUFSOBMTFDSFUOPWJDFBQQ OBNFTQBDFOPWJDFBQQ TQFD SFGSFTI*OUFSWBMT TFDSFU4UPSF3FG
OBNFWBVMUCBDLFOE࢖༻͢Δ4FDSFU4UPSF໊ LJOE4FDSFU4UPSF UBSHFU OBNFOPWJDFBQQTFDSFUGSPNFYUFSOBMTFDSFU࡞੒͢ΔTFDSFU໊ EBUB TFDSFU,FZVTFSOBNFTFDSFU಺ͰͷEBUB໊ SFNPUF3FG LFZBQQDPO fi HWBVMU্Ͱͷύε QSPQFSUZ64&3/".&WBVMU্ͰͷLFZ TFDSFU,FZQBTTXPSETFDSFU಺ͰͷEBUB໊ SFNPUF3FG LFZBQQDPO fi HWBVMU্Ͱͷύε QSPQFSUZ1"44803%WBVMU্ͰͷLFZ FYUFSOBMTFDSFUOPWJDFBQQZBNM ͜ͷ෦෼Ͱऔಘ͢Δػີ৘ใͷ,FZΛࢦఆ

&YUFSOBM4FDSFU0QFSBUPSΛ༻͍Δύλʔϯ ҎԼͷΑ͏ʹɺػີ৘ใΛؚ·ͳ͍&YUFSOBM4FDSFUΛ࡞੒͢Δ͜ͱͰ ػີ৘ใΛؚΉ4FDSFU͕ࣗಈ࡞੒͞ΕΔ͜ͱ͕෼͔Γ·͢ɻ ·ͨɺ7BVMUଆͰػີ৘ใͷߋ৽Λߦͳͬͨ৔߹Ͱ΋ͦͷ஋͕4FDSFUʹࣗಈ൓ө͞Ε·͢ɻ LVCFDUMBQQMZGFYUFSOBMTFDSFUOPWJDFBQQZBNM FYUFSOBMTFDSFUFYUFSOBMTFDSFUTJPFYUFSOBMTFDSFUOPWJDFBQQDSFBUFE LVCFDUMOOPWJDFBQQHFUTFDSFU /".&5:1&%"5""(& OPWJDFBQQTFDSFUGSPNFYUFSOBMTFDSFU0QBRVFT LVCFDUMOOPWJDFBQQHFUTFDSFUOPWJDFBQQTFDSFUGSPNFYUFSOBMTFDSFUPKTPOQBUI\EBUB^
\QBTTXPSED('[DEWDN2Y.K./2 VTFSOBNFE9/MDK&Z.[2^ FDIPE9/MDK&Z.[2cCBTFE VTFS FDIPD('[DEWDN2Y.K./2cCBTFE QBTTXPSE &YUFSOBM4FDSFUΛ࡞੒ ػີ৘ใΛؚΉ4FDSFU͕ࣗಈ࡞੒͞Εͨ

7BVMU"HFOUΛ༻͍Δύλʔϯ Ҿ༻ 7BVMUʹ֨ೲͨ͠γʔΫϨοτΛ,VCFSOFUFT͔Β׆༻͢Δํ๏ !KBDPQFO IUUQTTQFBLFSEFDLDPNKBDPQFOWBVMUOJHFOBTJUBTJLVSFUVUPXPLVCFSOFUFTLBSBIVPZPOHTVSVGBOHGB TMJEF *OKFDUJOH4FDSFUTJOUP,VCFSOFUFT1PETWJB7BVMU"HFOU$POUBJOFST IUUQTEFWFMPQFSIBTIJDPSQDPNWBVMUUVUPSJBMTLVCFSOFUFTLVCFSOFUFTTJEFDBS

7BVMU"HFOUΛ༻͍Δύλʔϯ 7BVMU"HFOU*OKFDUPSͱݺ͹ΕΔػೳʹΑΓɺ1PE࡞੒࣌ʹ7BVMU"HFOU͕*OJU$POUBJOFS͓Αͼ 4JEFDBS$POUBJOFSͱͯ͠ૠೖ͞Εɺػີ৘ใ͕ϑΝΠϧͱͯ͠ڞ༗ϘϦϡʔϜʹ࡞੒͞Ε·͢ɻ ,VCFSOFUFT 7BVMU 4FDSFUT 64&3/".&VTFS 1"44803%QBTTXPSE "11 ᶄ7BVMU͔Βػີ৘ใΛऔಘ
*OJU 64&3/".&VTFS 1"44803%QBTTXPSE FNQUZ%JS .FNPSZ WBVMUBHFOUJOKFDUPS ᶃ1PEىಈ࣌ʹ*OJU$POUBJOFSͱ ɹ4JEFDBS$POUBJOFSΛૠೖ .VUBUJPO8FCIPPL ᶅڞ༗ϘϦϡʔϜʹػີ৘ใΛϑΝΠϧͱͯ֨͠ೲ 4JEFDBS

7BVMU"HFOUΛ༻͍Δύλʔϯ 7BVMU্ͷػີ৘ใΛར༻͢Δ1PEΛ࡞੒͠·͢ɻ 7BVMU"HFOUΛ༻͍ΔύλʔϯͰ͸NFUBEBUBBOOPUBUJPOT಺Ͱػີ৘ใऔಘʹؔ͢Δ ༷ʑͳ৘ใΛઃఆ͠·͢ɻ BQJ7FSTJPOW LJOE1PE NFUBEBUB OBNFOPWJDFBQQ OBNFTQBDFOPWJDFBQQ MBCFMT
SVOOPWJDFBQQ BOOPUBUJPOT JOKFDUPSʹΑΔWBVMUBHFOUͷૠೖΛ༗ޮԽ WBVMUIBTIJDPSQDPNBHFOUJOKFDUUSVF JOJUDPOUBJOFSͷΈ TJEFDBS͸JOKFDU͠ͳ͍ WBVMUIBTIJDPSQDPNBHFOUQSFQPQVMBUFPOMZUSVF ࢖༻͢ΔWBVMU্ͷSPMFΛࢦఆ WBVMUIBTIJDPSQDPNSPMFOPWJDFBQQ WBVMUTFDSFUT഑ԼʹBQQDPO fi HUYUͱ͍͏ϑΝΠϧ͕࡞੒͞ΕΔ WBVMUͷOPWJDFEBUBBQQDPO fi Hʹ͋Δ,7Λ࢖͏ WBVMUIBTIJDPSQDPNBHFOUJOKFDUTFDSFUBQQDPO fi HUYUOPWJDFEBUBBQQDPO fi H OPWJDFBQQZBNM ࡞੒͢ΔϑΝΠϧͷϑΥʔϚοτΛࢦఆ WBVMUIBTIJDPSQDPNBHFOUJOKFDUUFNQMBUFBQQDPO fi HUYUc \\XJUITFDSFUOPWJDFEBUBBQQDPO fi H^^ VTFSOBNF\\%BUBEBUB64&3/".&^^ QBTTXPSE\\%BUBEBUB1"44803%^^ \\FOE^^ TQFD DPOUBJOFST JNBHFVCVOUV OBNFOPWJDFBQQ DPNNBOE<CJOTI D XIJMFEPTMFFQEPOF> TFSWJDF"DDPVOU/BNFOPWJDFWBVMUTBWBVMUͷೝূʹ࢖͏ͨΊͷ4FSWJDF"DDPVOU Annotations https://developer.hashicorp.com/vault/docs/platform/k8s/injector/annotations ͜ͷ෦෼Ͱऔಘ͢Δػີ৘ใͷ,FZΛࢦఆ

7BVMU"HFOUΛ༻͍Δύλʔϯ ҎԼͷΑ͏ʹ࡞੒ͨ͠1PE಺ʹ7BVMU͔Βऔಘͨ͠ػີ৘ใΛؚΉϑΝΠϧ͕࡞੒͞Ε͍ͯΔ͜ͱ͕ ෼͔Γ·͢ɻ ·ͨɺ7BVMUଆͰػີ৘ใͷߋ৽Λߦͳͬͨ৔߹Ͱ΋ͦͷ஋͕ࣗಈ൓ө͞Ε·͢ɻ ˞4JEFDBSΛ༗ޮԽ͍ͯ͠Δ৔߹ͷΈ LVCFDUMBQQMZGOPWJDFBQQZBNM QPEOPWJDFBQQDSFBUFE LVCFDUMOOPWJDFBQQFYFDJUOPWJDFBQQDOPWJDFBQQCJOCBTI SPPU!OPWJDFBQQDBUWBVMUTFDSFUTBQQDPO fi
HUYU VTFSOBNFVTFS QBTTXPSEQBTTXPSE ͳ͓7BVMU"HFOUΛ༻͍ΔύλʔϯͰ͸ػີ৘ใ͕ϑΝΠϧͱͯ͠௚઀ग़ྗ͞ΕΔͨΊɺ ,VCFSOFUFT্ʹ4FDSFU͸࡞੒͞Ε·ͤΜɻ ػີ৘ใΛ؀ڥม਺ʹઃఆ͍ͨ͠౳ͷ৔߹͸޻෉͕ඞཁʹͳΓ·͢ɻ &OWJSPONFOU7BSJBCMF&YBNQMF IUUQTEFWFMPQFSIBTIJDPSQDPNWBVMUEPDTQMBUGPSNLTJOKFDUPSFYBNQMFTFOWJSPONFOUWBSJBCMFFYBNQMF 1PEΛ࡞੒ 1PEʹػີ৘ใ͕౉͞Εͨ

4FDSFUT4UPSF$4*%SJWFSΛ༻͍Δύλʔϯ Ҿ༻ 7BVMUʹ֨ೲͨ͠γʔΫϨοτΛ,VCFSOFUFT͔Β׆༻͢Δํ๏ !KBDPQFO IUUQTTQFBLFSEFDLDPNKBDPQFOWBVMUOJHFOBTJUBTJLVSFUVUPXPLVCFSOFUFTLBSBIVPZPOHTVSVGBOHGB TMJEF .PVOU7BVMU4FDSFUTUISPVHI$POUBJOFS4UPSBHF*OUFSGBDF $4* 7PMVNF
IUUQTEFWFMPQFSIBTIJDPSQDPNWBVMUUVUPSJBMTLVCFSOFUFTLVCFSOFUFTTFDSFUTUPSFESJWFS

4FDSFUT4UPSF$4*%SJWFSΛ༻͍Δύλʔϯ 4FDSFU4UPSF$4*%SJWFS͕7BVMU$4*1SPWJEFSͱ࿈ܞͯ͠7BVMU͔Βػີ৘ใΛऔಘ͠ɺ ϘϦϡʔϜͱͯ͠1PEʹϚ΢ϯτ͠·͢ɻ ,VCFSOFUFT 7BVMU 4FDSFUT 64&3/".&VTFS 1"44803%QBTTXPSE "11 ᶃ7BVMU΁ͷΞΫηε৘ใͱ
ɹػີ৘ใͷ,FZΛఆٛ 7BVMU $4*1SPWJEFS 4FDSFU1SPWJEFS$MBTT 4FDSFU4UPSF $4*%SJWFS 64&3/".&VTFS 1"44803%QBTTXPSE 4FDSFU7PMVNF UNQGT ᶄ1SPWJEFSΛհͯ͠7BVMU͔Βػີ৘ใΛऔಘ ᶅػີ৘ใΛ7PMVNFͱͯ͠Ϛ΢ϯτ 64&3/".& 1"44803%

4FDSFUT4UPSF$4*%SJWFSΛ༻͍Δύλʔϯ ,VCFSOFUFTʹ)FMNΛ༻͍ͯ4FDSFU4UPSF$4*%SJWFSΛΠϯετʔϧ͠·͢ɻ ͳ͓ɺ7BVMU$4*1SPWJEFSʹ͍ͭͯ͸7BVMUΠϯετʔϧ࣌ʹ߹ΘͤͯΠϯετʔϧ͍ͯ͠ΔͨΊɺ վΊͯΠϯετʔϧ͸ෆཁͰ͢ɻ IFMNSFQPBEETFDSFUTTUPSFDTJESJWFSIUUQTLVCFSOFUFTTJHTHJUIVCJPTFDSFUTTUPSFDTJESJWFSDIBSUT IFMNSFQPVQEBUF IFMNJOTUBMMDTJTFDSFUTTUPSFDTJESJWFSTFDSFUTTUPSFDTJESJWFSa TFUTZOD4FDSFUFOBCMFEUSVFDSFBUFOBNFTQBDFOTFDSFUTTUPSFDTJESJWFS

4FDSFUT4UPSF$4*%SJWFSΛ༻͍Δύλʔϯ 4FDSFU1SPWJEFS$MBTTͱ1PEΛ࡞੒͠·͢ɻ BQJ7FSTJPOTFDSFUTTUPSFDTJYLTJPW LJOE4FDSFU1SPWJEFS$MBTT NFUBEBUB OBNFOPWJDFBQQTQD OBNFTQBDFOPWJDFBQQ TQFD QSPWJEFSWBVMU QBSBNFUFST
WBVMU"EESFTTIUUQWBVMUWBVMUWBVMUͷΤϯυϙΠϯτΛࢦఆ SPMF/BNFOPWJDFBQQ࢖༻͢ΔWBVMU্ͷSPMFΛࢦఆ PCKFDUTc PCKFDU/BNFVTFSOBNFGSPNDTJϚ΢ϯτ࣌ͷϑΝΠϧ໊ TFDSFU1BUIOPWJDFEBUBBQQDPO fi HWBVMU্ͷTFDSFU֨ೲઌ TFDSFU,FZ64&3/".&WBVMU্ͷLFZ PCKFDU/BNFQBTTXPSEGSPNDTJϚ΢ϯτ࣌ͷϑΝΠϧ໊ TFDSFU1BUIOPWJDFEBUBBQQDPO fi HWBVMU্ͷTFDSFU֨ೲઌ TFDSFU,FZ1"44803%WBVMU্ͷLFZ BQJ7FSTJPOW LJOE1PE NFUBEBUB MBCFMT SVOOPWJDFBQQ OBNFOPWJDFBQQ OBNFTQBDFOPWJDFBQQ TQFD DPOUBJOFST JNBHFVCVOUV OBNFOPWJDFBQQ DPNNBOE<CJOTI D XIJMFEPTMFFQEPOF> WPMVNF.PVOUT OBNFOPWJDFBQQTFDSFUT NPVOU1BUINOUTFDSFUTTUPSF SFBE0OMZUSVF WPMVNFT OBNFOPWJDFBQQTFDSFUT DTJ ESJWFSTFDSFUTTUPSFDTJLTJPDTJESJWFSͱͯ͠TFDSFUTTUPSFDTJESJWFSΛࢦఆ SFBE0OMZUSVF WPMVNF"UUSJCVUFT TFDSFU1SPWJEFS$MBTTOPWJDFBQQTQD4FDSFU1SPWJEFS$MBTTΛࢦఆ TFSWJDF"DDPVOU/BNFOPWJDFWBVMUTBWBVMUͷೝূʹ࢖͏ͨΊͷ4FSWJDF"DDPVOU OPWJDFBQQZBNM OPWJDFBQQTQDZBNM

4FDSFUT4UPSF$4*%SJWFSΛ༻͍Δύλʔϯ ҎԼͷΑ͏ʹ࡞੒ͨ͠1PEʹϚ΢ϯτͨ͠7PMVNF഑Լʹɺ 7BVMU͔Βऔಘͨ͠ػີ৘ใΛؚΉϑΝΠϧ͕࡞੒͞Ε͍ͯΔ͜ͱ͕෼͔Γ·͢ɻ ͜ͷέʔεͰ͸7BVMUଆͰػີ৘ใͷߋ৽Λߦͳͬͨ৔߹ͦͷ஋͸ࣗಈ൓ө͞Ε·ͤΜɻ LVCFDUMBQQMZGOPWJDFBQQTQDZBNM TFDSFUQSPWJEFSDMBTTTFDSFUTTUPSFDTJYLTJPOPWJDFBQQTQDDSFBUFE LVCFDUMBQQMZGOPWJDFBQQZBNM QPEOPWJDFBQQDSFBUFE LVCFDUMOOPWJDFBQQFYFDJUOPWJDFBQQCJOCBTI SPPU!OPWJDFBQQMTNOUTFDSFUTTUPSF
QBTTXPSEGSPNDTJVTFSOBNFGSPNDTJ SPPU!OPWJDFBQQDBUNOUTFDSFUTTUPSFVTFSOBNFGSPNDTJ VTFS SPPU!OPWJDFBQQDBUNOUTFDSFUTTUPSFQBTTXPSEGSPNDTJ QBTTXPSE 4FDSFU1SPWJEFS$MBTTΛ࡞੒ 1PEʹػີ৘ใ͕౉͞Εͨ 1PEΛ࡞੒ ˞ݱࡏͰ͸ࣗಈ൓ө͸4FDSFUT4UPSF$4*%SJWFSͱͯ͠BMQIBͷҐஔ෇͚ͰσϑΥϧτແޮɻ ɹ༗ޮԽͯ͠΋7BVMUͰ࢖͑Δͷ͔͸ෆ໌ɻ ɹ"VUPSPUBUJPOPGNPVOUFEDPOUFOUTBOETZODFE,VCFSOFUFT4FDSFUT   ɹIUUQTTFDSFUTTUPSFDTJESJWFSTJHTLTJPUPQJDTTFDSFUBVUPSPUBUJPOIUNM

4FDSFUT4UPSF$4*%SJWFSΛ༻͍Δύλʔϯ ·ͨҎԼͷΑ͏ͳܗͰ4FDSFU1SPWJEFS$MBTTΛఆٛ͢Δ͜ͱͰ,VCFSOFUFT্ʹ 4FDSFUΛ࡞੒͢Δ͜ͱ΋ՄೳͰ͢ɻ BQJ7FSTJPOTFDSFUTTUPSFDTJYLTJPW LJOE4FDSFU1SPWJEFS$MBTT NFUBEBUB OBNFOPWJDFBQQTQD OBNFTQBDFOPWJDFBQQ TQFD QSPWJEFSWBVMU
QBSBNFUFST WBVMU"EESFTTIUUQWBVMUWBVMUWBVMUͷΤϯυϙΠϯτΛࢦఆ SPMF/BNFOPWJDFBQQ࢖༻͢ΔWBVMU্ͷSPMFΛࢦఆ PCKFDUTc PCKFDU/BNFVTFSOBNFGSPNDTJϚ΢ϯτ࣌ͷϑΝΠϧ໊ TFDSFU1BUIOPWJDFEBUBBQQDPO fi HWBVMU্ͷTFDSFU֨ೲઌ TFDSFU,FZ64&3WBVMU্ͷLFZ PCKFDU/BNFQBTTXPSEGSPNDTJϚ΢ϯτ࣌ͷϑΝΠϧ໊ TFDSFU1BUIOPWJDFEBUBBQQDPO fi HWBVMU্ͷTFDSFU֨ೲઌ TFDSFU,FZ1"44803%WBVMU্ͷLFZ TFDSFU0CKFDUTTFDSFUΛ࡞Δ TFDSFU/BNFOPWJDFBQQTFDSFUGSPNDTJ࡞੒͢Δ4FDSFU໊ UZQF0QBRVF EBUB PCKFDU/BNFVTFSOBNFGSPNDTJ LFZVTFSOBNF PCKFDU/BNFQBTTXPSEGSPNDTJ LFZQBTTXPSE ͜ͷఆٛʹΑΓ4FDSFU͕࡞੒͞ΕΔ OPWJDFBQQTQDZBNM 4ZODBT,VCFSOFUFT4FDSFU IUUQTTFDSFUTTUPSFDTJESJWFSTJHTLTJPUPQJDTTZODBTLVCFSOFUFTTFDSFUIUNM

4FDSFUT4UPSF$4*%SJWFSΛ༻͍Δύλʔϯ ·ͨҎԼͷΑ͏ͳܗͰ4FDSFU1SPWJEFS$MBTTΛఆٛ͢Δ͜ͱͰ,VCFSOFUFT্ʹ 4FDSFUΛ࡞੒͢Δ͜ͱ΋ՄೳͰ͢ɻ LVCFDUMOOPWJDFBQQHFUTFDSFU /".&5:1&%"5""(& OPWJDFBQQTFDSFUGSPNFYUFSOBMTFDSFU0QBRVFI LVCFDUMOOPWJDFBQQHFUTFDSFUOPWJDFBQQTFDSFUGSPNFYUFSOBMTFDSFUPKTPOQBUI\EBUB^ \QBTTXPSED('[DEWDN2Y.K./2 VTFSOBNFE9/MDK&Z.[2^ FDIPE9/MDK&Z.[2cCBTFE
VTFS FDIPD('[DEWDN2Y.K./2cCBTFE QBTTXPSE 4FDSFU͕࡞੒͞Εͨ

·ͱΊ 7BVMUΛ༻͍ͨ,VCFSOFUFTͷ4FDSFU؅ཧʹ͍ͭͯ͝঺հ͠·ͨ͠ ɹ&YUFSOBM4FDSFU0QFSBUPS ɹ7BVMU"HFOU *OJU4JEFDBS$POUBJOFS ɹ4FDSFUT4UPSF$4*%SJWFS ެࣜϒϩάͰ֤ख๏ͷൺֱ΋ߦΘΕ͍ͯΔͷͰࢀߟʹͯ͠Έ͍ͯͩ͘͞ ɹ,VCFSOFUFT7BVMUJOUFHSBUJPOWJB4JEFDBS"HFOU*OKFDUPSWT7BVMU4FDSFUT0QFSBUPSWT$4*QSPWJEFS IUUQTXXXIBTIJDPSQDPNCMPHLVCFSOFUFTWBVMUJOUFHSBUJPOWJBTJEFDBSBHFOUJOKFDUPSWTDTJQSPWJEFS

5IBOL:PV

KubernetesのSecret管理~Vaultへの超入門~/Vault on Kubern...

KubernetesのSecret管理~Vaultへの超入門~/Vault on Kubernetes

Transcript

More Decks by mochizuki875

Other Decks in Technology

Featured