スクラムチームのDevOpsを支えるPlatform Engineering @ 実践DevOps！ 〜KAGとkubellの取り組み〜

Transcript

1. εΫϥϜνʔϜͷ%FW0QTΛࢧ͑Δ
   1MBUGPSN
   &OHJOFFSJOH 
 4JN4UB
   !TIJNBHBKJ
    
 ࣮ફ%FW0QTʂ
   ʙ,"(ͱLVCFMMͷऔΓ૊Έʙ
   LLEFWPQT 
 ˡϗϫΠτγϚϦεͷΞϧλ
2. ࣗݾ঺հ ɹ࡛ۄɹʢʙେֶͷ్த·Ͱʣ
   ˠࡳຈɹʢʙେֶɾ೥ʣ
   ˠਆಸ઒ʢʙେֶӃʙब৬ͯ͠೥൒͘Β͍ʣ
   ˠࡳຈɹʢʙ೥ͪΐͬͱɺݱࡏʣ
   ޷͖ͳ"84αʔϏεɿ
   4UFQ
   'VODUJPOT 4JN4UBʢΦϯϥΠϯͷ͕ͨ͢ʣ
   ,%%*ΞδϟΠϧ։ൃηϯλʔגࣜձࣾ
   ϓϥοτϑΥʔϜΤϯδχΞϦϯά෦ !TIJNBHBKJ
   5XJUUFS 4FSWFSMFTT ͝౰஍ΧάΧά
3. ϗϫΠτγϚϦεͱ
   ฻Β͍ͯ͠·͢🐿 ˢ౳਎େνϧλϦε 5XJUUFSΞΧ΢ϯτ΋͋ΔΑ
   !BMUB@XIJUFDIJQ
4. աڈͷొஃࢿྉΞοϓͯ͠·͢ʢࠓ೔ͷࢿྉ΋ʂʣ IUUQTTQFBLFSEFDLDPNTIJNBHBKJ
5. ݸਓϒϩάΛӡ༻͍ͯ͠·͢
   ͠·͕͡ ͠Ήͦ͘
   "84ΞοϓσʔτΛ
   ຖिߋ৽ʂ 
 ͦͷଞ
   Ϋϥ΢υΨδΣοτ
   γϚϦεͷ࿩ͳͲ
6. ͠Ήͦ͘3BEJP
   "84ͷΞοϓσʔτΛαΫοͱΩϟονΞοϓ !͠Ήͦ͘ ຖिਫ༵
   ʙ
   ഑৴தʂ
8. "HFOEB • 1MBUGPSN
   &OHJOFFSJOHͷ֓ཁ
   • ,"(ͷ1MBUGPSN
   &OHJOFFSJOHͱ 
 ࢧԉπʔϧ܈ʮLBHUPPMTʯ
   • Πϯφʔιʔεͷ׆༻
   • ·ͱΊ
9. 1MBUGPSN
   &OHJOFFSJOHͷ֓ཁ
10. 1MBUGPSN
    &OHJOFFSJOHʢ1'&ʣͱ͸ʁ ϓϥοτϑΥʔϜɾΤϯδχΞϦϯάͱ͸Կ͔ʁ
    
    (BSUOFS
    IUUQTXXXHBSUOFSDPKQKBBSUJDMFTXIBUJTQMBUGPSNFOHJOFFSJOH ҎԼΛຬͨ͢ϓϥοτϑΥʔϜΛ 
 ߏங͢ΔΞϓϩʔνΛࢦ͢
    ໨ඪɿ
    ɾ։ൃऀͷੜ࢈ੑ޲্
    ɾϏδωεՁ஋ͷ૑ग़
    ໨తɿ
    ɾ։ൃऀͷೝ஌ෛՙΛܰݮ
    ɾ։ൃऀͷΤΫεϖϦΤϯε޲্
    खஈɿ
    ɾηϧϑαʔϏεػೳͷॆ࣮
    ɾΠϯϑϥ΍ӡ༻ͷࣗಈԽ
11. ΞδϟΠϧ%FW0QTͱ1MBUGPSN
    &OHJOFFSJOH ϓϥοτϑΥʔϜ
    ΤϯδχΞϦϯάͱ͸
    IUUQTMFBSONJDSPTPGUDPNKBKQQMBUGPSNFOHJOFFSJOHXIBUJTQMBUGPSNFOHJOFFSJOH 4%-$
    ιϑτ΢ΣΞ։ൃͷ
    ϑΣʔζΛࣔ͢ࢦ਑ ΞδϟΠϧ։ൃ
    খ͍͞αΠΫϧͰͷ
    ։ൃͷ࣮ફʹΑΔ
    ૉૣ͍Ձ஋ఏڙ %FW0QT
    ܧଓతͳσϦόϦʔΛ࣮ݱ͢ΔͨΊͷ
    ։ൃख๏ͱӡ༻ͷࣗಈԽɾޮ཰Խ
    1MBUGPSN
    &OHJOFFSJOH
    ։ൃ΍ηΩϡϦςΟɾΨόφϯεΛ
    ؀ڥ੔උ΍*B$ɺࣗಈԽͳͲͰࢧԉ "HJMF
    4%-$
    4LZSPDLFUJOH
    :PVS
    1SPKFDU
    XJUI
    "HJMF
    1SJODJQMFT
    IUUQTNMTEFWDPNCMPHBHJMFTEMD
12. ιϑτ΢ΣΞ։ൃΛ๺ւಓཱྀߦʹྫ͑Δͱʜ 4%-$
    ໨త஍·Ͱͷ஍ਤ
    %FW0QT
    ަ௨खஈʢ৐Γ෺ʣ
    ΞδϟΠϧ։ൃ
    ͍ΖΜͳܦ༝஍Ͱඞཁͳ΋ͷΛ੔උ
    ΢ΥʔλʔϑΥʔϧ։ൃ
    ୯Ұͷަ௨खஈͰ໨త஍·Ͱ௚௨
    1MBUGPSN
    &OHJOFFSJOH
    ަ௨Πϯϑϥ
    ʢࠃಓɺߴ଎ɺۭ࿏ɺߤ࿏౳ʣ ࡳຈˠവؗ΁ߦ͘ͷʹ
    ͔ͭͯ͸మಓͰ͔͔͕࣌ؒͬͨ
    ࣨའ͔Βߤ࿏Λ੔උͰ͖Ε͹
    େ෯ʹ͕࣌ؒ୹ॖͰ͖Δ͔΋͠Εͳ͍ খḺˠ໢૸΁ߦ͘ͷʹ
    ೔ߴɺѴ઒ɺ۴࿏ͳͲΛܦ༝ͯ͠
    ඞཁͳ΋ͷΛἧ͍͑ͯ͘ͷ͕ΞδϟΠϧ
    ৐Γ෺ʢెาɺഅɺඈߦધʣ͕%FW0QT
    ಓͷ։୓͕1MBUGPSN
    &OHJOFFSJOH $PQZSJHIU
    ˜
    
    
    
    4PVHPV
    4IPVLFO
    $0
    -UE
    "MM
    3JHIUT
    3FTFSWFE
13. ,"(ͷ1MBUGPSN
    &OHJOFFSJOHͱ 
 ࢧԉπʔϧ܈ʮLBHUPPMTʯ
14. ,"(
    1'&νʔϜͷ͓࢓ࣄ • ࣾ಺ڞ௨(JU)VC
    &OUFSQSJTF
    4FSWFSʢ()&4ʣͷ؅ཧ
    • ()&4΍ࣗࣾΫϥ΢υ؀ڥͷίετ࠷దԽ
    • ࣗࣾΫϥ΢υ؀ڥ΍*E1ͷӡ༻ɺ؅ཧ
    • ࣗࣾΫϥ΢υ؀ڥͱ֤Ҋ݅؀ڥͷηΩϡϦςΟվળ 
 ˠ4FDVSJUZ
    )VC΍(VBSE%VUZͷಋೖɺ؅ཧͳͲ
    • ֤εΫϥϜνʔϜ΁ͷώΞϦϯάɺࢧԉϝχϡʔ࡞੒
    • ͦͷଞ ։ൃऀ؀ڥͷҰ෦Πϯϑϥ؅ཧ΍෦෼తͳ$$P&Λ୲͍ͳ͕Β
    গͣͭ͠1MBUGPSN
    &OHJOFFSJOHΛ࣮ફ
15. ηϧϑαʔϏεܕͷϓϥοτϑΥʔϜ 1MBUGPSN
    &OHJOFFSJOH
    PO
    4FSWFSMFTT
    IUUQTTQFBLFSEFDLDPN@LFOTIQMBUGPSNFOHJOFFSJOHPOTFSWFSMFTT • "84ͷ৔߹ɺҎԼͷ͕ͭީิʹͳΓಘΔ
    • "NB[PO
    $PEF$BUBMZTU
    • "84
    4FSWJDF
    $BUBMPH
    • #BDLTUBHF
    • (JU)VCͳͲͷίʔυϦϙδτϦͰ΋ఏڙ͸Մೳ 
 ˠ,"(Ͱ͸ࣾ಺ͷ(JU)VC
    &OUFSQSJTF
    0SHBOJ[BUJPOΛ׆༻
16. (JU)VC
    &OUFSQSJTFͷ੔උʹΑΔ஍൫ݻΊ ϙʔλϧϦϙδτϦͷ࡞੒ ϦϙδτϦͷ࡞੒ϧʔϧ੍ఆ 5FBNTʹΑΔݖݶ؅ཧ
17. ηϧϑαʔϏεπʔϧ܈ʮLBHUPPMTʯ w1MBUGPSN
    &OHJOFFSJOHͱͯ͠ͷࢧԉπʔϧΛఏڙ͍ͨ͠ͱ͍͏ϞνϕʔγϣϯͰ։࢝
    w·ͣ͸ݩʑͷ1'&෦ʹΑΔۀ຿ʢΠϯϑϥ΍$$P&دΓʣʹؔ࿈͢Δ΋ͷΛ૝ఆ
    wηΩϡϦςΟɺΨόφϯεܥ
    wίετͷ࡟ݮ
    w(JU)VC
    &OUFSQSJTFͷར༻ิॿ LBHUPPMT
    w ϓϥοτϑΥʔϜνʔϜ͕ఏڙ͢ΔࢧԉπʔϧʢϦϙδτϦʣ܈
    w *B$ɺίʔυεχϖοτͳͲศརͳπʔϧ΍ɺηΩϡϦςΟ্࣮ࢪͯ͠ཉ͍͠΋ͷΛల։༧ఆ
    
18. LBHUPPMTͷ঺հ • (VBSE%VUZ4VNNBSJ[FS
    • (VBSE%VUZͷݕग़݁ՌΛ#FESPDLͰ෼͔Γ΍͔ͯ͘͢͠Β௨஌
    • 4FDVSJUZ
    )VCʹू໿͞Εͨ(VBSE%VUZݕग़݁Ռʹ΋ରԠ
    • $PEF#VJME3VOOFS
    • ()&ͷ4FMGIPTUFE
    3VOOFSΛϚωʔδυͰల։
    • 71$ͷ࡞੒͔Β(JU)VC
    "QQTܦ༝Ͱͷ઀ଓ·ͰΨΠυ෇͖Ͱ࡞੒
    • /"54DIFEVMFS
    • /"5
    (BUFXBZΛ༵೔ͱ࣌ؒͰ࡞੒࡟আ͠ɺίετΛ࡟ݮ
    • TBNQMFTFDVSJUZIVCOPUJGJDBUJPOT
    • 4FDVSJUZ
    )VC͔Βͷ௨஌Λ4MBDL΁ૹ৴͢ΔͨΊͷ5FSSBGPSNίʔυ
19. ྫɿ(VBSE%VUZ4VNNBSJ[FS (VBSE%VUZ͔Βͷ௨஌Λ
    ͦͷ··4/4Ͱૹ৴͢Δͱ
    ͚ͬ͜͏ೝ஌ෛՙߴ͍ͷͰ
    શ෦#FESPDLʹ౤͛ͯ
    ͍͍ײ͡ʹͯ͠௨஌
20. ྫɿ(VBSE%VUZ4VNNBSJ[FSͷߏ੒ *B$ʹ*OGSBTUSVDUVSF
    $PNQPTFSɺΞϓϦέʔγϣϯʹ4UFQ
    'VODUJPOTΛར༻ͯ͠
    ϩʔίʔυ͔ͭ(6*Ͱͷࢹ֮ԽʹΑΔೝ஌ෛՙͷܰݮΛ࣮ݱ AWS Cloud GuardDuty Step Functions Bedrock SNS Invoke Execute EventBridge User Threats E-Mail Publish Slack Security Hub ᶃ(VBSE%VUZͷΠϕϯτΛ௚઀र͏
    ᶄ4FDVSJUZ
    )VCʹू໿͞ΕͨΠϕϯτΛर͏
    ͷͲͪΒ͔Λબ୒ͯ͠σϓϩΠՄೳ
21. Πϯφʔιʔεͷ׆༻
22. ,"(ͷ૊৫ͱ1MBUGPSN
    &OHJOFFSJOHతͳ՝୊ • ,"(ͷ૊৫ܗଶ
    • ࣄۀձࣾͱҟͳΓɺ֤Ҋ֤݅νʔϜͰγεςϜ͕ҟͳΔ
    • "84͚ͩͰͳ͘(PPHMF
    $MPVE"[VSFͷҊ݅΋ͦͦ͜͜
    • ஍ਤʢཱྀߦઌʣ΍ަ௨खஈʢࣗಈंɺమಓɺඈߦػɺધʣ͕όϥόϥ 
 ˠಓ࿏͚ͩͰͳ͘ઢ࿏΍ۭ࿏ɺߤ࿏΋੔උ͠ͳ͚Ε͹ͳΒͳ͍
    • ϓϥοτϑΥʔϜνʔϜͷݶք
    • ΧόʔͰ͖Δٕज़ྖҬ͕ݶΒΕͯ͠·͏ 
 ˠʮࢧԉͰ͖Δ΋ͷʯͱʮٻΊΒΕ͍ͯΔ΋ͷʯͷΞϯϚον
    • πʔϧ૿ՃʹΑΔϝϯςφϯε΍վળ͕Ͱ͖Δ࿑ྗͷෆ଍
    • ಓ࿏Ҏ֎Λ։୓Ͱ͖ΔϦιʔε΍ϊ΢ϋ΢͕଍Γͳ͍
    • ޮՌతʹ֤νʔϜΛࢧԉͰ͖Δ͔ͱ͍͏ෆ҆ɾɾɾ
23. ͦΜͳͱ͖ʹग़ձͬͨͷ͕
    ͪ͜Β
24. IUUQTZPVUVCF/0I@J'-:D TJ@,NF.TX#RER1(
26. ɹͦ͏ͩɺ
    ɹΠϯφʔιʔεɺ
    ɹ΍Ζ͏ɻ
27. Πϯφʔιʔεͱ͸ʁ ΠϯφʔιʔεͰ࢝ΊΔ
    ૊৫಺Φʔϓϯιʔε։ൃೖ໳
    IUUQTTQFBLFSEFDLDPNZVIBUUPSJOOFSTPVSDFMFBSOJOHQBUIKBQBOFTF ҰݴͰද͢ͱʮࣾ಺Φʔϓϯιʔεʯ
28. LBHUPPMTͷํ਑มߋ LBHUPPMT
    w ϓϥοτϑΥʔϜνʔϜ͕ఏڙ͢ΔࢧԉπʔϧʢϦϙδτϦʣ܈
    w *B$ɺίʔυεχϖοτͳͲศརͳπʔϧ΍ɺηΩϡϦςΟ্࣮ࢪͯ͠ཉ͍͠΋ͷΛల։༧ఆ
    w $0/53*#65*/(NEΛઃ͚ɺ։ൃऀ͔ΒͷίϯτϦϏϡʔγϣϯΛΦʔϓϯʹड͚ೖΕ
29. LBHJTNͷ௥Ճ ͲͪΒ΋Πϯφʔιʔεʢࣾ಺ΦʔϓϯιʔεʣͷҐஔ෇͚
    ؅ཧӡ༻ͷओମ͕ϓϥοτϑΥʔϜνʔϜ͔༗ࢤ͔ͷҧ͍ LBHUPPMT
    w ϓϥοτϑΥʔϜνʔϜ͕ఏڙ͢ΔࢧԉπʔϧʢϦϙδτϦʣ܈
    w *B$ɺίʔυεχϖοτͳͲศརͳπʔϧ΍ɺηΩϡϦςΟ্࣮ࢪͯ͠ཉ͍͠΋ͷΛల։༧ఆ
    w $0/53*#65*/(NEΛઃ͚ɺ։ൃऀ͔ΒͷίϯτϦϏϡʔγϣϯΛΦʔϓϯʹड͚ೖΕ LBHJTN
    w ֤νʔϜ΍ϧʔϧͳͲɺࣾ಺ͷ͋ΒΏΔ৔ॴ͔Βఏڙӡ༻͞ΕΔϓϩμΫτ
    w ϦϙδτϦͷ࡞੒ϧʔϧʹଇΕ͹୭Ͱ΋ఏڙ0,
    w ֤ϦϙδτϦͷϧʔϧʹै͑͹୭Ͱ΋ίϯτϦϏϡʔτ0, ಠஅͰউखʹ໊෇͚·ͨ͠
30. LBHJTNͷJTNͬͯͳʹʁ JOOFS
    TPVSDF
    NBO
31. 1MBUGPSN
    &OHJOFFSJOH
    º
    ΠϯφʔιʔεͷޮՌ • Φʔϓϯͳ؀ڥͷߏங
    • πʔϧ΍φϨοδΛࣾ಺શମͰڞ༗ɺ஝ੵ
    • ʮंྠͷ࠶ൃ໌ʯͷ๷ࢭɺαΠϩԽͷղফ
    • ίϥϘϨʔγϣϯจԽͷৢ੒
    • ࣗൃతͳϑΟʔυόοΫͱίϯτϦϏϡʔγϣϯͷଅਐ
    • νʔϜؒɺνʔϜͱ1'&νʔϜؒͷίϛϡχέʔγϣϯڧԽ 
 ˠ֤νʔϜͷʮधཁʯΛΑΓ೺ѲͰ͖ΔΑ͏ʹͳΔ
    • ϓϩμΫτͱ૊৫ͷվળ
    • πʔϧͷ඼࣭΍։ൃੜ࢈ੑͷ޲্
32. ,"(
    1MBUGPSN
    &OHJOFFSJOHͷ՝୊ • Πϯφʔιʔε͸ʮ1'&νʔϜͷෛ୲ܰݮʯΛҙຯ͠ͳ͍
    • ϝϯςφϯεͷͨΊʹ͸֤ఏڙπʔϧΛཧղ͢Δඞཁ͕͋Δ
    • ։ൃνʔϜ͕ٻΊ͍ͯΔ΋ͷΛ἞ΈऔΓɺఏڙ͢Δ౒Ί͸࢒Δ
    • ʮࣗൃతͳࢀՃʯΛଅ͢؀ڥͮ͘Γ͕ٻΊΒΕΔ
    • πʔϧͷఏڙ΍ίϯτϦϏϡʔγϣϯ͸͋͘·Ͱળҙʢ༗ࢤʣ
    • ͍͔ʹଟ͘ͷϝϯόʔʹಈػ෇͚Λ༩͑ɺר͖ࠐΊΔ͔͕ॏཁ
    ˠҰछͷࣾ಺ίϛϡχςΟΛ1'&νʔϜ͕ӡӦ͢ΔΑ͏ͳߏਤ
    • ޮՌͷଌఆΛߦ͏ͨΊͷࢦඪ୳͠
    • Πϯφʔιʔεͷҙٛ΍ӨڹΛఆྔతʹଌΔʢ4UBS਺ͳͲʁʣ
33. ԿΑΓֶΜͰ࣮ફ͢΂͖ʂ νʔϜτϙϩδʔ Πϯφʔιʔεύλʔϯ ίϛϡχςΟ ͦͷଞ༷ʑͳ
    ઌਓͷ࣮ફྫ΋͋Γ
34. ·ͱΊ
35. ·ͱΊ • 1MBUGPSN
    &OHJOFFSJOHͷऔΓ૊ΈΛଅਐ্͍ͯ͘͠Ͱɺ 
 ΠϯφʔιʔεʹײԽ͞Εɺཱ྆ͤ͞ΔܗͰൃ଍ 
 ˠʮLBHUPPMTʯͱʮLBHJTNʯ
    • 1MBUGPSN
    &OHJOFFSJOHͱΠϯφʔιʔεͱͷ૊Έ߹ΘͤʹΑΓɺ 
 αΠϩԽͷղফ΍ंྠͷ࠶ൃ໌ͷ཈੍͕ظ଴Ͱ͖Δ
    • Πϯφʔιʔε׆ಈ͸1'&͕ӡӦ͢ΔίϛϡχςΟ 
 ˠଟ͘ͷਓΛר͖ࠐΈͳ͕ΒɺࣗൃతͳจԽΛৢ੒͢Δ
    • ઌਓͷφϨοδͱίϛϡχςΟ͔Βֶͼɺ࣮ફ͢Δʂ
36. 5IBOL
    ZPVʂ