VaultとConsulによる恒久的な安全なインターナル通信（LT）/ Secure internal communicaton by Hashicorp Vault

Transcript

1. 5PNPIJTB0EB(.01FQBCP *OD +VOF 7BVMUͱ$POTVMʹΑΔ߃ٱతͰ ҆શͳΠϯλʔφϧ௨৴ʢ-5ʣ 'VLVPLBHP

2. 'VLVPLBHP (.0ϖύϘϓϦϯγύϧΤϯδχΞ খా஌ԝ!MJOZPXT ٕज़෦ٕज़ج൫νʔϜ IUUQTUPNPIJTBPEBDPN

3. 'VLVPLBHP એ఻ 8&# %#13&44WPM )BTIJ$PSQ7BVMUͷ هࣄΛدߘ͠·ͨ͠ ͜Ε

4. 'VLVPLBHP )BTIJDPSQ7BVMUͱ͸ ▸ ྨ͍كͳൿີ৘ใ؅ཧιϑτ΢ΣΞ ▸ ྫ͑͹ɺ%#ύεϫʔυ΍"84ͷτʔΫϯ΍҉߸Խ༻ݤͳͲ ▸ ࢖͍͜ͳ͢͜ͱͰγεςϜͷηΩϡϦςΟΛ͍͍ײ͡ʹ͢Δ͜ ͱ͕Ͱ͖Δ

5. 'VLVPLBHP ͨ͘͞Μػೳ͕͋Δ ▸ ೝূɿBQQSPMF BXT B[VSF HPPHMFDMPVE LT HJUIVC MEBQ

   SBEJVT UMTDFSU UPLFO VTFSOBNFQX ▸ ൿີɿBE BXT DPOTVM DVCCZIPMF EC HPPHMFDMPVE LW JEFOUJUZ OPNBE TLJ SBCCJUNR TTI UPUQ USBOTJU ▸ ؂ࠪɿpMF TZTMPH TPDLFU

6. Ͳ͏࢖͑͹͍͍ͷʁ 'VLVPLBHP

7. 'VLVPLBHP جຊతʹ͸ηΩϡϦςΟʹؔΘΔ΋ͷΛकΔ ▸ γεςϜ͕ԿΛѻ͍ͬͯΔ͔Ͱ࢖͏ػೳ͕มΘͬͯ͘Δ ▸ ͔͠͠ɺ୯ҰαʔόͰͳ͍ݶΓϩʔϧؒͷΠϯλʔφϧ௨৴͸ ඞͣ͋Δ ▸ -#1SPYZ8FC΍+PC"1*%#Έ͍ͨͳ

8. 'VLVPLBHP ϓϥΠϕʔτ*1ͳͷͰ͜͏͍͏΍ͭͰ͢Ͷ ▸ Ϋϥε" ▸ Ϋϥε# ▸ Ϋϥε$ ͜͏͍͏*1Ͱ௨৴͢Δͱ͖ʹ҆શͰ͋Δͱݴ͑·͔͢ʁ

9. ௨৴ͷηΩϡϦςΟͪΌΜͱ΍ͬͯΔʁ 'VLVPLBHP

10. 'VLVPLBHP ͓٬༷ͷճ౴ ▸ ϓϥΠϕʔτωοτϫʔΫͳͷͰ໰୊ͳ͍ ▸ 4FMGTJHOFEূ໌ॻ͚ͩͲ5-4Ͱ௨৴ͯ͠Δ͔Β໰୊ͳ͍ ▸ େࣄͳ৘ใͳ͍͔Βେৎ෉ ▸ ࣗલͷೝূہཱͯͯظݶ೥Ͱઃఆͯ͠΍ͬͯΔΑ

    ▸ -FU`T&ODSZQU·ͨ͸ূ໌ॻങͬͯӡ༻ͯ͠ΔΑ

11. 'VLVPLBHP ͓٬༷ͷճ౴ ▸ ϓϥΠϕʔτωοτϫʔΫͳͷͰ໰୊ͳ͍ ▸ 4FMGTJHOFEূ໌ॻ͚ͩͲ5-4Ͱ௨৴ͯ͠Δ͔Β໰୊ͳ͍ ▸ େࣄͳ৘ใͳ͍͔Βେৎ෉ ▸ ࣗલͷೝূہཱͯͯظݶ೥Ͱઃఆͯ͠΍ͬͯΔΑ

    ▸ -FU`T&ODSZQU·ͨ͸ূ໌ॻങͬͯӡ༻ͯ͠ΔΑ $

12. 'VLVPLBHP ·͋ؤுͬͯΔ͓٬༷ͷ໰୊఺ ▸ ֎෦ͷূ໌ॻΛ࢖͏ͷ͸ɺఆظతʹূ໌ॻͷߋ৽ ͕͋ΔͷͰӡ༻͕໘౗ ▸ ࣗલͰೝূہΛ͢Δͷ͸ɺखӡ༻ʹͳΓ͕ͪ׌ͭ ӡ༻͕େมͳͷͰ༗ޮظݶΛ௕͘ઃఆ͕ͪ͠Ͱྑ ͘ͳ͍

13. ΋ͬͱखܰͰ҆શʹͳΓ͍ͨ 'VLVPLBHP

14. 'VLVPLBHP

15. 'VLVPLBHP 7BVMUͱ$POTVMɺͦͯ͠$POTVM5FNQMBUFΛ࢖͑͹ɺಈతʹߋ৽͞ΕΔ1,*؀ڥ͕Ͱ͖Δ

16. 'VLVPLBHP 7BVMUͷಈత1,*؀ڥͷ5JQT ▸ ॳظߏங࣌ʹ7BVMU΁ͷ௨৴͸Ͳ͏͢Δ7FSJGZGBMTFͰ࡞Δ ▸ 5FSSBGPSN౳ͷ0SDIFTUSBUPSͰ"1*͔Β·ͣ$"ͷެ։ݤΛऔಘ ͢Δ ▸ $POTVM5FNQMBUFΛ࢖͏ͷͰϑΝΠϧͷݖݶʹ஫ҙ ▸

    7BVMUͷূ໌ॻ͸SFMPBEͰ࠶ಡΈࠐΈͰ͖Δ

17. 'VLVPLBHP ·ͱΊ ▸ 7BVMU͸ߴػೳ͕ͩ1,*͔Βಋೖ͍ͯ͘͠ͱΑ͍ ▸ 7BVMU͸)BTIJDPSQπʔϧΛ૊Έ߹ΘͤΔͱΑΓศརʹͳΔ

18. PT&YJU 'VLVPLBHP