Upgrade to Pro
— share decks privately, control downloads, hide ads and more …
Speaker Deck
Sign up for free
Menu
Search
Features
All features
Private URLs
Password Protection
Custom URLS
Scheduled publishing
Remove Branding
Restrict embedding
Deck Collections
Notes
Features
All features
Private URLs
Password Protection
Custom URLS
Scheduled publishing
Remove Branding
Restrict embedding
Deck Collections
Notes
Explore
Featured decks
Featured speakers
Programming
Technology
Storyboards
Explore
Featured decks
Featured speakers
Programming
Technology
Storyboards
Pricing
Search
Sign in
Sign up for free
「全然わからない。俺たちは雰囲気でコンテナをやっている」 /operating-contain...
Search
KONDO Uchio
February 17, 2018
Technology
18k
33
Share
Embed
Copy iframe code
Copy JS code
Copy link
Start on current slide
「全然わからない。俺たちは雰囲気でコンテナをやっている」 /operating-containers-just-with-a-hunch
Hacker Tackle 2018 発表資料
KONDO Uchio
February 17, 2018
More Decks by KONDO Uchio
See All by KONDO Uchio
大規模レガシーテストを 倒すための CI基盤の作り方 / #CICD2023
udzura
5
2.6k
Ruby x BPF in Action / RubyKaigi 2022
udzura
0
320
Narrative of Ruby & Rust
udzura
0
280
開発者生産性指標の可視化 / pepabo-four-keys
udzura
3
1.9k
Talk of RBS
udzura
0
510
Re: みなさん最近どうですか? / FGN tech meetup in 2021
udzura
0
870
Dockerとやわらかい仮想化 - ProSec-IT/SECKUN 2021 edition -
udzura
2
830
Device access filtering in cgroup v2
udzura
1
1k
"Story of Rucy" on RubyKaigi takeout 2021
udzura
0
950
Other Decks in Technology
See All in Technology
Vibe Coding で作ったプロダクトをどう安全に動かすか / How to Safely Run Products Built with Vibe Coding
glidenote
0
460
AIエージェントの一手は 誰も見ていない - Falco拡張OSS「Prempti」とeBPFで サーバーレス実行基盤を二層防御する
keitah
0
450
白金鉱業Meetup Vol.25 アウトカムが二値のデータに対するCausal Impact
brainpadpr
0
270
Claude in Chrome 入門 / Introduction to Claude in Chrome
cielo1985
0
880
AIによるクリエイティブ生成を行う上での試行錯誤
plaidtech
PRO
0
170
Oracle Cloud Network Path Analyzerを試してみた/I Tried Out Oracle Cloud Network Path Analyzer
masakiokuda
1
110
Cloudflare Workers 向けアプリを C# で構築する ~WASM Native AOT への道~
nenonaninu
1
910
現場で役立つ技術負債の効果的な返済方法
masuda220
PRO
9
5k
Von-Neumann Machines, Dreams & The Futures of IT
ufried
0
120
絵ではじめるKubernetesセキュリティ
aoi1
4
690
え、こんなに早く改修できるの?──新人エンジニアとスクラムマスターの2人が語る、AI×アジャイル開発の現場
ysasago
2
630
SREへの勘違いに気づいた後の話
tomodakengo
0
130
Featured
See All Featured
What’s in a name? Adding method to the madness
productmarketing
PRO
24
4.2k
Breaking role norms: Why Content Design is so much more than writing copy - Taylor Woolridge
uxyall
1
410
DevOps and Value Stream Thinking: Enabling flow, efficiency and business value
helenjbeal
1
390
Jamie Indigo - Trashchat’s Guide to Black Boxes: Technical SEO Tactics for LLMs
techseoconnect
PRO
0
680
Templates, Plugins, & Blocks: Oh My! Creating the theme that thinks of everything
marktimemedia
31
2.9k
Understanding Cognitive Biases in Performance Measurement
bluesmoon
32
3k
Put a Button on it: Removing Barriers to Going Fast.
kastner
60
4.6k
YesSQL, Process and Tooling at Scale
rocio
174
15k
Scaling GitHub
holman
464
140k
Navigating Weather and Climate Data
rabernat
0
520
Google's AI Overviews - The New Search
badams
0
1.6k
Claude Code のすすめ
schroneko
67
230k
Transcript
ۙ౻Ӊஐ࿕(.01FQBCP *OD !)BDLFS5BDLMF શવΘ͔Βͳ͍ɻ ԶͨͪงғؾͰ ίϯςφΛͬͯ ͍Δ
ۙ౻Ӊஐ࿕!VE[VSB &$αʔϏεɺΦϯϥΠϯήʔϜ։ൃͳͲΛܦͯɺ ΑΓ(.0ϖύϘٕज़ج൫νʔϜɻಉΑ ΓԬࢢʹҠॅɻڞஶʹʰύʔϑΣΫτ3VCZʱ ʰύʔϑΣΫτ3BJMTʱͳͲ͕͋ΔɻNSVCZΛΈ ࠐΜͩ-JOVYίϯςφϥϯλΠϜʮ)BDPOJXBʯͷ ࡞ऀɻ)BDPOJXBؔ࿈ͷ׆ಈͱͯ͠ɺ3VCZ,BJHJ ͰͷτʔΫ͕࠾͞Εɺ·ͨιϑτΣΞ ͰୈճԬ3VCZେΛडɻݱࡏɺ)BDPOJXB Λϕʔεͱͨ͠ΫϥυαʔϏεͰ͋ΔʮϩϦϙο
ϓʂϚωʔδυΫϥυʯʹٕࣾज़ސ ͱ͠ ͯࢀՃ͍ͯ͠Δɻ
ࠓͷ͓ w งғؾͰίϯςφͷதΛཧղ͢Δ w งғؾͰίϯςφͷΤίγεςϜΛཧղɹ w งғؾͰίϯςφΛࣗ࡞͢Δʹ w ͳΜͳΜͩΑʂงғؾͬͯʂʢ·ͱΊʣ
งғؾͰίϯ ςφͷதΛ ཧղ͢Δ
ίϯςφԾԽ
ίϯςφɺ ࡞ͬͨ͜ͱ͋Γ·͔͢ʁ
͡Ό͋࡞ͬͯΈ·͠ΐ͏͔
%PDLFSΛྫʹ͠·͢ wී௨ͷ-JOVY 6CVOUV#JPOJD ʹ%PDLFSΛೖΕͯɺෳݸίϯςφΛ ࡞ͬͯΈΔɻ $ docker run --rm -d
debian:latest /bin/sleep 99 d003ac5389a1631d789f5d1b77bf201adc517ad9acc91bd5...
࠷ۙ DF ͷ%PDLFS w͜͜ͰɺΈͳ͞Μ͓ೃછΈͷQTίϚϯυΛൃߦͯ͠Έ·͠ΐ͏ w;Ή;Ή
ίϯςφͷTMFFQίϚϯυ ϗετϚγϯ͔Β ௨ৗͷϓϩηεͷΑ͏ʹݟ͑·͢
ͭ·Γ
ίϯςφϓϩηεͳΜ ͩʂʂʂʂʂʂʂʂʂʂʂʂʂʂʂʂ ʂʂʂʂʂʂʂʂʂʂ
ίϯςφʮԾԽʯͬͯݴ͏͚ΕͲ wίϯςφͷ࣮ݱʹ͓͍ͯɺϋʔυΣΞͷԾԽʢ$16ɺϝϞϦͳ Ͳʣߦ͍ͬͯͳ͍͜ͱʹҙɻ wEPDLFSSVOFYFDͳͲͰʮಠཱͨ͠-JOVYͷڥʹೖΔʯ͜ͱ͕ग़དྷ ΔɻͦͷΑ͏ʹಠཱͨ͠ڥΛ࡞ΕΔ͜ͱࣗମΛࢦͯ͠ɺʮԾԽʯ ͱݺΜͰ͍Δͱݴ͑Δɻ wٯʹϓϩηεͳͷͰɺͦͷଞͷԾԽख๏ΑΓܰྔͩ͠ɺΑΓࡉ͔ ੍͍ޚ͕ՄೳʹͳΔଆ໘͋Δɻ
DGͦͷଞͷԾԽ wϗετܕ͋Δ04ʹɺઐ༻ͷιϑτΣΞΛೖΕͯԾԽ͢Δ wϋΠύʔόΠβܕԾԽઐ༻ͷ04ͷ্Ͱ7.Λ্͛Δ wͳͲͳͲɺ࣮ݱͷํࣜز͔ͭ͋Δ͕ɺಛͱͯ͠ɺϋʔυΣΞͷ ԾԽΛߦ͏ɻͦͷͨΊ04ͷछྨࣗ༝ʹͳΔ͕ɺίϯςφΑΓ Φʔόʔϔου͕େ͖͘ͳΔɻ
None
None
ϓϩηε͕ίϯςφԽ͍ͯ͠Δ͔ௐΔ wΈΜͳ/procͷ͜ͱศརʹ׆༻ͯ͠·͢ΑͶʁ w/proc/PID/*ʹଘࡏ͢ΔϑΝΠϧʹ͍ͭͯɺී௨ͷϓϩηεͷͷ ͱʮίϯςφԽͨ͠ʯͷͷΛൺֱ͢Δͱɺز͔ͭͷଐੑ͕ҟͳͬͯ ͍Δ͜ͱ͕Θ͔Δɻ w/proc/PID/ns, /proc/PID/cgroup, /proc/PID/status,
ʮίϯςφԽʯ͢ΔͨΊͷ -JOVYͷػೳ
-JOVY/BNFTQBDF
QSPD1*%OT͕ҧ͏ wΑ͘ݟΔͱҧ͏ wVUTͱ͔JQDͱ͔NOUͱ͔ ͍Ζ͍Ζ͋Δ w͜ΕΒɺάϩʔόϧͳ໊લۭؒͱผͷ04ϦιʔεΛׂΓͯΒ Ε͍ͯΔ͜ͱΛҙຯ͢Δɻͦ͏͍͏໊લۭؒΛ-JOVY/BNFTQBDFͱ ݺΜͰ͍Δɻ wྫ͑654/BNFTQBDFάϩʔόϧͳϗετ໊ͱಠཱͨ͠ϗετ໊Λ࣋ͯΔ
None
ίϯςφͷωοτϫʔΫʹʮೖΔʯ wOTFOUFSͱ͍͏ίϚϯυͰ-JOVY/BNFTQBDFʹೖΔ͜ͱ͕Ͱ͖Δɻ wEPDLFSFYFDͱൺֱͯ͠ΈΑ͏ $ sudo nsenter \ --net=/proc/$( \ docker
inspect hackertackle_1 -f ‘{{.State.Pid}}' \ )/ns/net
EPDLFSFYFD OTFOUFS
DHSPVQ
DHSPVQͱ wDHSPVQ $POUSPM(SPVQ ͱɺҙͷϓϩηεΛάϧʔϐϯάͰ͖Δ ػೳɻͨͩάϧʔϓʹ͢Δ͚ͩͰͳ͘ɺͦͷάϧʔϓ͝ͱʹ04ͷϋʔ υΣΞͳͲͷϦιʔεΛ੍ݶɺ͋Δ͍౷ܭใΛऔಘͰ͖Δɻ wྫ w$16ͷ੍ݶάϧʔϓશମͷ$16ར༻Λ/ʹԡ͑ͨ͞ΓɺίΞΛ ݻఆͨ͠ΓͰ͖Δɻ·ͨ$16࣌ؒͷ౷ܭΘ͔Δ wϝϞϦͷ੍ݶάϧʔϓશମͰ͏ϝϞϦར༻ঢ়گΛ੍ݶɺܭଌͰ͖
Δɻݶքʹୡͨ࣌͠ͷڍಈબΔ
QJETαϒγεςϜ wͦͷάϧʔϓʹॴଐ͢ΔϓϩηεΛ੍ݶͰ͖Δɻ wDHSPVQಛఆͷϑΝΠϧʹॻ͖ࠐΉ͜ͱͰγϡοͱ͑Δɻ ݸʹ੍ݶ
ͦͷάϧʔϓʹॴଐ͢ΔϓϩηεΛ ੍ݶͰ͖Δ ʹ GPSLCPNCରࡦ͕Ͱ͖Δ
ࢼͯ͠Έ·͠ΐ͏ w˞ࣦഊ͢Δͱɺ؋͝ͱམͪ·͢ term1:~$ echo $$ #=> 5849 term2:~$ echo 5849
| \ sudo tee /sys/fs/cgroup/pids/hackertackle/tasks term1:~$ cat /proc/self/cgroup | grep pids 3:pids:/hackertackle term1:~$ #... doing fork bomb ...
ੜؐ
ͦͷଞͷػೳ wDISPPUQJWPU@SPPU͋ΔαϒσΟϨΫτϦʹೖΓࠐΉ wSMJNJUVMJNJUͷͭ w,FSOFM$BQBCJMJUZSPPUͷݖݶΛׂͯ͠Ұ෦Λ༩ɺୣ͏ wTFDDPNQγεςϜίʔϧͷϑΟϧλϦϯά w."$ BQQBSNPS4&-JOVY50.0:0ଞ
TFDDPNQͷྫ wίϯςφ෦ͰɺNLEJSίϚϯυͰ͏γεςϜίʔϧ ʢmkdir(2)ʣDIPXOίϚϯυͰ͏ͭʢchownat(2)ʣͷݺͼ ग़͠ΛϑΟϧλʔ͢Δ͜ͱ͕Ͱ͖Δɻͨͱ͑SPPUͰ֘ૢ࡞͕ෆՄ ೳʹɻ͖ͳίϚϯυΛstrace(1)Ͱௐͯ෧ҹ͠Α͏ʂ ➡ ➡
ং൫ͷ·ͱΊ wίϯςφಛघͳϓϩηεͱߟ͑Ε0, wϓϩηεΛϗετ͔ΒִɺϦιʔεΛ੍ݶɺݖݶΛηΩϡΞʹߜΓ ࠐΉ͜ͱͰɺ࣮࣭7.తಠཱڥͱ͢Δͷ͕جຊతͳߟ͑ํ wόϥόϥͷγεςϜίʔϧΛGPSLͱFYFDͷؒͰࣗͰݺͼग़ͤɺί ϯςφ͔ͨ͠ϓϩηεΛࣗ࡞͢Δ͜ͱͰ͖Δ
งғؾ௫Ί͔ͨͳʁ
งғؾͰίϯ ςφͷΤίγ εςϜΛཧղ
ίϯςφ༻ޠ
ίϯςφ༻ޠ %PDLFS -9$ -9% .PCZ ,VCFSOFUFT 'MBOOFM SVOD (,& &$4
"$* 0$* 5FDUPOJD $PSF04 )BDPOJXB SLU SBJMDBS $BMJDP /PNBE 4XBSN
ଟ͘ͳ͍ʁ
આ໌Ͱ͖·͔͢ʁ
ϨΠϠͰߟ͑ͯΈΔ SVOD %PDLFS -9$ -9% )BDPOJXB .PCZ SLU ,VCFSOFUFT 'MBOOFM
$BMJDP 4XBSN /PNBE SBJMDBS $3*0 $POUBJOFSE
ิॿઢΛҾ͜͏ SVOD %PDLFS -9$ -9% )BDPOJXB .PCZ SLU ,VCFSOFUFT 'MBOOFM
$BMJDP 4XBSN /PNBE SBJMDBS $3*0 $POUBJOFSE 0$* 4QFD $3*
0$* 0QFO$POUBJOFS*OJUJBUJWF
0$*ͱ wίϯςφͷ৭ʑͳنɾن֨Λඪ४Խ͍ͯ͠Δஂମ w0$*ͷنʹ४ڌ͢ΔͱԿ͕خ͍͔͠ʁ wΠϝʔδͷϑΥʔϚοτ͕౷Ұ͞Ε͍ճ͠Ͱ͖Δ w04͝ͱʹඞཁͳύϥϝʔλ͕ཧ͞ΕͯࣗͰඞཁͳϥϯλΠϜΛ ࣮Ͱ͖ͨΓ͢Δ w࣮ͨ͠ϥϯλΠϜΛ֎෦πʔϧͱ࿈ܞ͢Δͷ༰қʹͳΔ
ʢ·ͨʣ%PDLFSϑΝϛϦͰߟ͑ͯΈΑ͏ EPDLFSίϚϯυͰίϯςφΛ্ཱͪ͛ΔͱɺΊͪΌ໊͍લ ͷϓϩηε͕Ͱ͖ͯɺͦͷԼʹ࣮ࡍͷίϯςφͷ1*%ίϚϯ υ͕ੜ͑Δ͜ͱ͕Θ͔ΔɻSVODͱ͍͏Ωʔϫʔυ͕ݟ͑Δɻ
SVODͷϨΠϠʔՄͰ͋Δ w0$*ͷنͲ͓Γͷ࣮Λͨ͠ίϯςφϥϯλΠϜͰ͋Εɺ ͦΕΛ%PDLFSͷΠϯλʔϑΣʔε͔Βૢ࡞ͯ͠ίϯςφΛ࡞ΕΔ wͦͷ͋ͨΓΛDPOUBJOFSE EPDLFS ͰEPDLFSDPOUBJOFSETIJNͱ͍ ͏ϓϩάϥϜ͕୲͍ͬͯΔ
͍֮͑ͯ·͔͢ɺSBJMDBS w0SBDMFͷίϯςφϥϯλΠϜɺࠓͷτʔΫେگɾ3VTU w%PDLFSͷϥϯλΠϜʹSBJMDBSΛ͏Α͏ʹࢦఆՄೳ wSBJMDBSͰίϯςφΛ্ཱͪ͛ΔΑ͏ʹΦϓγϣϯΛೖΕΔ FEHFͷͰ͔͠ಈ͔ͳ͍ͷͰͦΕʹΞοϓάϨʔυ͓ͯ͘͠ ExecStart=/usr/bin/dockerd -H fd:// --experimental \
--add-runtime "rc=/usr/local/bin/railcar"
SBJMDBSΛ%PDLFSͰ͑Δ
$3* $POUBJOFS3VOUJNF*OUFSGBDF
͜ͷ ,VCFSOFUFT ʹؔͯ͠ wૉਓͳΜͰ͕͢ w͍͢·ͤΜɺશൠతʹงғؾͳΜͰ͕͢ wؒҧ͍ͬͯͨΒ͝ࢦఠ͓ئ͍͠·͢ʂ 8BSOJOH
NJOJDVCFͳͲͰαΫοͱLTڥΛ w࡞ͬͯΈΔ wNJOJLVCFTTIͰೖΔͱɺવEPDLFSϓϩηε͕ଘࡏ͍ͯ͠ΔͰ͢Ͷ wຬͨ͠ͷͰ ͜ͷڥফ͠·͢
ࠓɺΦϓγϣϯΛม͑Δ wҎԼͷΦϓγϣϯͰNJOJLVCFTUBSU͢Δ wʢ্ख͘ಈ͔ͳ͍࣌Ұ୴NJOJLVCFTUPQΦϓγϣϯແ͠Ͱ NJOJLVCFTUBSUʣ $ minikube start \ --network-plugin=cni \
--container-runtime=cri-o \ --bootstrapper=kubeadm
DSJP ͍ͬͯ͏ͭʁ w͕͍Δ w͍ͭ͜୭ͩ
DSJPSLUMFUͳͲͳͲ w$3*ͱɺ,VCFSOFUFT͔Βར༻͢ΔͨΊʹඞཁͳΠϯλϑΣʔεͷ ༷ͷࣄͰɺH31$Λ͍ͬͯΔ w$3*ϓϩτίϧΛΔσʔϞϯΛ্ཱͪ͛Δ͜ͱͰɺόοΫΤϯυͷ ࣮ʹؔͳ͘LVCFDUMͰಉ͡Α͏ʹΫϥελΛߏஙՄೳɻ wDSJPίϯςφϓϩηεΛ্ཱͪ͛ΔϥϯλΠϜʹSVODΛ͏ wSLUMFUίϯςφϓϩηεΛ্ཱͪ͛ΔϥϯλΠϜʹSLUΛ͏
͜͜·Ͱͷ·ͱΊ w0$*ͱ͍͏ஂମͷ࡞ͬͨنʹԊͬͯίϯςφϥϯλΠϜΛ࡞Δͱศ ར w$3*ͱ͍͏نʹԊ࣮ͬͨͰίϯςφϥϯλΠϜΛ࡞Δͱศར w͜ΕΒͷنͰίϯςφϥϯλΠϜͨͪΛઢҾ͖͢Δ͜ͱ͕Ͱ͖Δ
ṖͷਤΛՃͯ͠࠶ܝ SVOD -9$ -9% )BDPOJXB .PCZ SLU ,VCFSOFUFT 'MBOOFM $BMJDP
4XBSN /PNBE SBJMDBS $3*0 $POUBJOFSE 0$* 4QFD $3* ,FSOFMTZTDBMM
ṖͷਤΛՃͯ͠࠶ܝ SVOD -9$ -9% )BDPOJXB .PCZ SLU ,VCFSOFUFT 'MBOOFM $BMJDP
4XBSN /PNBE SBJMDBS $3*0 $POUBJOFSE 0$* 4QFD $3* ,FSOFMTZTDBMM ʮϥϯλΠϜʯͱ͍͏ݺͼํͰ͜ͷ྆ํͷൣғΛࢦ͍ͯ͠Δ ͷͰΊͪΌࠞཚ͢ΔɻͲͪΒͷׂ͔ҙࣝ͢Δͱ٢
ṖͷਤΛՃͯ͠࠶ܝ SVOD -9$ -9% )BDPOJXB .PCZ SLU ,VCFSOFUFT 'MBOOFM $BMJDP
4XBSN /PNBE SBJMDBS $3*0 $POUBJOFSE 0$* 4QFD $3* ,FSOFMTZTDBMM %PDLFS͜͜Λ ·ͱΊͯར༻͢ΔԿ͔
ṖͷਤΛՃͯ͠࠶ܝ SVOD -9$ -9% )BDPOJXB .PCZ SLU ,VCFSOFUFT 'MBOOFM $BMJDP
4XBSN /PNBE SBJMDBS $3*0 $POUBJOFSE ,FSOFMTZTDBMM -9$-9%ʹؔͯ͠ɺ0$*ͱ·ͨผ͕ͩɺ ͬ͘͟Γ-9$͕ΧʔωϧΓͱΓɺ-9%͕)551"1*Λ୲ )BDPOJXB͜Ε͔Β)551 5$1 JOUFSGBDFΛ࡞Γ·͢
࠷ޙͷϨΠϠʔ͚ SVOD -9$ -9% )BDPOJXB .PCZ SLU ,VCFSOFUFT 'MBOOFM $BMJDP
4XBSN /PNBE SBJMDBS $3*0 $POUBJOFSE 0$* 4QFD $3* ,FSOFMTZTDBMM
ίϯςφͷωοτϫʔΫઃఆ wز͔ͭઓུ͕͋Δɻ w ΫϥελϦϯά͠ͳ͍ wϗετϚγϯʹͱͲ·ΔͳΒɺ%PDLFSͷσϑΥϧτͰߏΘͳ͍ w ࣗྗͰWYMBOͳΓΛߏஙͯ͠ؤுΔ wίϯςφ͕͏ϒϦοδͳͲࣗͰҾͬுͬͯؤுͬͯؤுΔ w $/*ʹԊͬͨϓϥάΠϯΛར༻͢Δ
$/* $POUBJOFS/FUXPSL*OUFSGBDF
$/*ͱ w͜Ε·ͨɺ0QFO$POUBJOFS*OJUJBUJWFͷఆΊͨίϯςφͷωοτ ϫʔΫͷن w,VCFSOFUFTͰར༻Ͱ͖Δ wOFUXPSLQMVHJODOJͰىಈ͠ɺϚχϑΣετͰ$/*ͷ+40/ͱ γεςϜίϯςφͦͷଞΛྲྀ͠ࠐΉ wϚχϑΣετΛྲྀ͠ࠐΉͱɺϗετ/etc/cni/net.dʹઃఆ͕ೖ ΓɺඞཁͳγεςϜίϯςφ্ཱ͕͕ͪΓ༗ޮʹͳΔ
qBOOFMͷྫ wqBOOFMWYMBO -PWFS- Λ࣮ݱ͢ΔσʔϞϯ wࣗͰΜͰ͍͍͚Ͳɺ $/*ϓϥάΠϯ͕͋Δ $ kubectl apply -f
kube-flannel.yml ʮqBOOFMΛͬͯ-JOVYͰ࣮ݱ͢ΔWYMBOͷ͞ΘΓΛΔʯ IUUQTRJJUBDPNVE[VSBJUFNTCEEBGBCEG
DBMJDPͷྫ w1SPKFDU$BMJDP-ͷΈͰ࣮ݱ͍ͯ͠Δ εέʔϥϒϧͳωοτϫʔΫΛఏڙ͢Δ ϓϩδΣΫτɻ#(1Λར༻͍ͯ͠Δ w ʮ:BIPP+"1"/.FFU6QʢΠϯϑϥٕज़ΧϯϑΝϨϯεʣηογϣϯᶆʯ IUUQTXXXTMJEFTIBSFOFUUFDICMPHZBIPPZBIPPKBQBONFFUVQ $ kubectl apply
-f calico.yaml
ͦͷଞͷબࢶ wIUUQTLVCFSOFUFTJPEPDTDPODFQUTDMVTUFSBENJOJTUSBUJPO OFUXPSLJOH w͍Ζ͍ΖͳϨΠϠʔͰΊͪΌ͋Δ͠ɺϚωʔδυڥݻ༗ͷઃఆ͋ ΔΑ͏ͩʁ
࣮ϕʔεͳϨΠϠΘ͚·ͱΊ SVOD -9$ -9% )BDPOJXB .PCZ SLU ,VCFSOFUFT 'MBOOFM $BMJDP
4XBSN /PNBE SBJMDBS $3*0 $POUBJOFSE 0$* 4QFD $3* ,FSOFMTZTDBMM $/* $MVTUFSFE/PEF1PPM
ଟ ͜͜·ͰͰ
0OFNPSFUIJOH
งғؾͰίϯ ςφΛࣗ࡞͠ ͯΈͨ
ࣗ࡞Ұཡ wίϯςφϥϯλΠϜ)BDPOJXB wίϯςφઓུ ΦʔέετϨʔγϣϯ 'BTU$POUBJOFSXJUI/)).TUBDL
)BDPOJXB wίϯςφϥϯλΠϜɻNSVCZݴޠΛΈࠐΜͰ͍ͯɺίʔυͰίϯς φͷઃఆৼΔ͍ͳͲΛهड़Ͱ͖Δɻ wྫ͑ɺ࠷ॳʹઆ໌ͨ͠/BNFTQBDFͷԿΛ͢Δ͔ɺ*1ԿΛͭ ͚Δ͔ɺDHSPVQͷύϥϝʔλΛͲ͏͢Δ͔ɻ w͋Δ͍ɺىಈ࣌ɺఀࢭ࣌ɺىಈޙ/ඵޙʹಛఆͷॲཧΛߦ͏ɺɻ w͕࡞ͬͨɻ
'BTU$POUBJOFS wͬ͘͟ΓߦͰ wϦΫΤετ͕͋Δ·Ͱ ىಈ͠ͳ͍ wىಈޙɺҰఆ࣌ؒޙʹఀࢭ wͲΜͲΜίϯςφ͕॥͢Δ wDG1IPFOJY4FSWFST1BUUFSO wDG'BTU$(* ˞ʮҰาઌߦ͘ίϯςφཧΞʔΩςΫνϟʯ8&# %#13&447PM
ΦʔέετϨʔγϣϯΞʔΩςΫνϟ w$.%# $POUFOUT.BOBHFNFOU%BUBCBTF ͷঢ়ଶʹऩଋ͢Δ ˞ʮ'BTU$POUBJOFS࣮ߦڥͷมԽʹૉૣ͘దԠͰ͖Δ߃ৗੑΛ࣋ͭγεςϜΞʔΩςΫνϟʯদຊ྄հଞɺ
,VCFTUBDLͱͷൺֱ SVOD ,VCFSOFUFT 'MBOOFM $BMJDP $3*0 $POUBJOFSE ,FSOFMTZTDBMM $MVTUFSFE/PEF1PPM )BDPOJXB
OHY@NSVCZ CBTFE TFSWJDFNFTI OHY@NSVCZ )551"1* +BSEJO #SJEHF WFUI $.%# FUDE
࠙ձ Ͱ
ऴΘΓʹ
ίϯςφɺͬͯ·͔͢ʁ wԿͷͨΊʹ͍ͬͯ·͔͢ʁ w࣮ΘΕ͍ͯΔͷͰʁ wίϯςφͰ͋ͳͨͷղܾ͠·͔͢ʁ w ͍͢·ͤΜɺݴ͍ա͗·ͨ͠
ίϯςφͷ ʮงғؾʯ
ίϯςφͷ ֓೦Ϟσϧ
௨ৗ͖ΘΊͯ؆ૉԽ͞Εͨɺ͋ΔϞϊ͕Ͳ ͏ಈ͔͘ͷઆ໌ʢʣɻ ͜Εɺʹཱ͍ͬͯΔݶΓɺશͳͷ Ͱͳͯ͘Α͍ɻਖ਼֬Ͱ͋Δඞཁ͢Βͳ͍ɻ ʰ୭ͷͨΊͷσβΠϯʁʱ%"ϊʔϚϯɺ༁վగ൛
ίϯςφͷ֓೦Ϟσϧʁ wͦΕίϯςφͰ͢Ͷ w͍ΘΏΔϋΠύʔόΠβܕͳͲͷ7.ͱಉ͡Α͏ʹѻͬͯ͠·͏όΠ Ξε͕͋ΔͷͰͳ͍ͩΖ͏͔ɻ w࣮ࡍʮϩάΠϯʯͯ͠ʮ04ʯʹݟ͑ͯ͠·͏ͷͰɺͦ͏ͳΓ͕ͪ wLVCFDUMͳͲͷૢ࡞ͰޙΖͰԿ͕ى͍ͬͯ͜Δ͔૾Ͱ͖Δʁ w͔͠͠7.ͷΑ͏ʹԿ͔ԾԽ͞Ε͍ͯΔΘ͚Ͱͳ͍͠ɺϗε τʹΑΔ੍େ͖͍͠ɺඍົʹҧ͏ͱ͜Ζ͕ଟʑ͋Δɻ
ίϯςφΛͪΌΜͱӡ༻͢Δʹ ʢ·ͩ·ͩʣதΛ͍͔͚ͯ ཧղ͢Δ͜ͱ͕ॏཁɻ
ͦΕʹ தΛ͔ͬ͠Γཧղ͢Δ͜ͱ ָ͍͠ʢͣʣ
&OKPZ5BDLMJOH $POUBJOFS&DPTZTUFN
ࢀߟࢿྉ w0$* IUUQTHJUIVCDPNPQFODPOUBJOFSTSVOUJNFTQFD IUUQTHJUIVCDPNPQFODPOUBJOFSTJNBHFTQFD w1SPUPUZQJOH,VCFSOFUFT$3*CZ!SFNPSF͞Μ IUUQTTQFBLFSEFDLDPNSFNPSFQSPUPUZQJOHLVCFSOFUFTDSJ XJUISVCZBOEHSQD
4QFDJBM5IBOLT wϖύϘίϯςφࡾॐ࢜ͷ͓ೋਓʢ࠷ޙͷҰਓၟӽͳ͕Βʣ w!UONU w!S@UBLBJTIJ