Soumettre la recherche
Mettre en ligne
Terraform_Vault紹介F5-NGINX_Community-20200805
•
1 j'aime
•
180 vues
S
shinyatsukasaki
Suivre
Terraform_Vault紹介F5-NGINX_Community
Lire moins
Lire la suite
Ingénierie
Signaler
Partager
Signaler
Partager
1 sur 27
Télécharger maintenant
Télécharger pour lire hors ligne
Recommandé
いまさら聞けないNGINXコンフィグ_F5-NGINX-Community-20200805
いまさら聞けないNGINXコンフィグ_F5-NGINX-Community-20200805
shinyatsukasaki
Terraformを活用した自動化デモ_F5-NGINX_Community-20200805
Terraformを活用した自動化デモ_F5-NGINX_Community-20200805
shinyatsukasaki
2024 State of Marketing Report – by Hubspot
2024 State of Marketing Report – by Hubspot
Marius Sescu
Everything You Need To Know About ChatGPT
Everything You Need To Know About ChatGPT
Expeed Software
Product Design Trends in 2024 | Teenage Engineerings
Product Design Trends in 2024 | Teenage Engineerings
Pixeldarts
How Race, Age and Gender Shape Attitudes Towards Mental Health
How Race, Age and Gender Shape Attitudes Towards Mental Health
ThinkNow
AI Trends in Creative Operations 2024 by Artwork Flow.pdf
AI Trends in Creative Operations 2024 by Artwork Flow.pdf
marketingartwork
Skeleton Culture Code
Skeleton Culture Code
Skeleton Technologies
Recommandé
いまさら聞けないNGINXコンフィグ_F5-NGINX-Community-20200805
いまさら聞けないNGINXコンフィグ_F5-NGINX-Community-20200805
shinyatsukasaki
Terraformを活用した自動化デモ_F5-NGINX_Community-20200805
Terraformを活用した自動化デモ_F5-NGINX_Community-20200805
shinyatsukasaki
2024 State of Marketing Report – by Hubspot
2024 State of Marketing Report – by Hubspot
Marius Sescu
Everything You Need To Know About ChatGPT
Everything You Need To Know About ChatGPT
Expeed Software
Product Design Trends in 2024 | Teenage Engineerings
Product Design Trends in 2024 | Teenage Engineerings
Pixeldarts
How Race, Age and Gender Shape Attitudes Towards Mental Health
How Race, Age and Gender Shape Attitudes Towards Mental Health
ThinkNow
AI Trends in Creative Operations 2024 by Artwork Flow.pdf
AI Trends in Creative Operations 2024 by Artwork Flow.pdf
marketingartwork
Skeleton Culture Code
Skeleton Culture Code
Skeleton Technologies
Vivazz, Mieres Social Housing Design Spain
Vivazz, Mieres Social Housing Design Spain
timesproduction05
Roadmap to Membership of RICS - Pathways and Routes
Roadmap to Membership of RICS - Pathways and Routes
M Maged Hegazy, LLM, MBA, CCP, P3O
BSides Seattle 2024 - Stopping Ethan Hunt From Taking Your Data.pptx
BSides Seattle 2024 - Stopping Ethan Hunt From Taking Your Data.pptx
fenichawla
ONLINE FOOD ORDER SYSTEM PROJECT REPORT.pdf
ONLINE FOOD ORDER SYSTEM PROJECT REPORT.pdf
Kamal Acharya
UNIT-IFLUID PROPERTIES & FLOW CHARACTERISTICS
UNIT-IFLUID PROPERTIES & FLOW CHARACTERISTICS
rknatarajan
Call Girls in Ramesh Nagar Delhi 💯 Call Us 🔝9953056974 🔝 Escort Service
Call Girls in Ramesh Nagar Delhi 💯 Call Us 🔝9953056974 🔝 Escort Service
9953056974 Low Rate Call Girls In Saket, Delhi NCR
Online banking management system project.pdf
Online banking management system project.pdf
Kamal Acharya
UNIT-II FMM-Flow Through Circular Conduits
UNIT-II FMM-Flow Through Circular Conduits
rknatarajan
Structural Analysis and Design of Foundations: A Comprehensive Handbook for S...
Structural Analysis and Design of Foundations: A Comprehensive Handbook for S...
Dr.Costas Sachpazis
Extrusion Processes and Their Limitations
Extrusion Processes and Their Limitations
120cr0395
data_management_and _data_science_cheat_sheet.pdf
data_management_and _data_science_cheat_sheet.pdf
JiananWang21
chapter 5.pptx: drainage and irrigation engineering
chapter 5.pptx: drainage and irrigation engineering
mulugeta48
Call for Papers - African Journal of Biological Sciences, E-ISSN: 2663-2187, ...
Call for Papers - African Journal of Biological Sciences, E-ISSN: 2663-2187, ...
Christo Ananth
The Most Attractive Pune Call Girls Budhwar Peth 8250192130 Will You Miss Thi...
The Most Attractive Pune Call Girls Budhwar Peth 8250192130 Will You Miss Thi...
ranjana rawat
VIP Model Call Girls Kothrud ( Pune ) Call ON 8005736733 Starting From 5K to ...
VIP Model Call Girls Kothrud ( Pune ) Call ON 8005736733 Starting From 5K to ...
SUHANI PANDEY
Unit 1 - Soil Classification and Compaction.pdf
Unit 1 - Soil Classification and Compaction.pdf
RagavanV2
(INDIRA) Call Girl Bhosari Call Now 8617697112 Bhosari Escorts 24x7
(INDIRA) Call Girl Bhosari Call Now 8617697112 Bhosari Escorts 24x7
Call Girls in Nagpur High Profile Call Girls
Generative AI or GenAI technology based PPT
Generative AI or GenAI technology based PPT
bhaskargani46
(INDIRA) Call Girl Meerut Call Now 8617697112 Meerut Escorts 24x7
(INDIRA) Call Girl Meerut Call Now 8617697112 Meerut Escorts 24x7
Call Girls in Nagpur High Profile Call Girls
AKTU Computer Networks notes --- Unit 3.pdf
AKTU Computer Networks notes --- Unit 3.pdf
ankushspencer015
PEPSICO Presentation to CAGNY Conference Feb 2024
PEPSICO Presentation to CAGNY Conference Feb 2024
Neil Kimberley
Content Methodology: A Best Practices Report (Webinar)
Content Methodology: A Best Practices Report (Webinar)
contently
Contenu connexe
Dernier
Vivazz, Mieres Social Housing Design Spain
Vivazz, Mieres Social Housing Design Spain
timesproduction05
Roadmap to Membership of RICS - Pathways and Routes
Roadmap to Membership of RICS - Pathways and Routes
M Maged Hegazy, LLM, MBA, CCP, P3O
BSides Seattle 2024 - Stopping Ethan Hunt From Taking Your Data.pptx
BSides Seattle 2024 - Stopping Ethan Hunt From Taking Your Data.pptx
fenichawla
ONLINE FOOD ORDER SYSTEM PROJECT REPORT.pdf
ONLINE FOOD ORDER SYSTEM PROJECT REPORT.pdf
Kamal Acharya
UNIT-IFLUID PROPERTIES & FLOW CHARACTERISTICS
UNIT-IFLUID PROPERTIES & FLOW CHARACTERISTICS
rknatarajan
Call Girls in Ramesh Nagar Delhi 💯 Call Us 🔝9953056974 🔝 Escort Service
Call Girls in Ramesh Nagar Delhi 💯 Call Us 🔝9953056974 🔝 Escort Service
9953056974 Low Rate Call Girls In Saket, Delhi NCR
Online banking management system project.pdf
Online banking management system project.pdf
Kamal Acharya
UNIT-II FMM-Flow Through Circular Conduits
UNIT-II FMM-Flow Through Circular Conduits
rknatarajan
Structural Analysis and Design of Foundations: A Comprehensive Handbook for S...
Structural Analysis and Design of Foundations: A Comprehensive Handbook for S...
Dr.Costas Sachpazis
Extrusion Processes and Their Limitations
Extrusion Processes and Their Limitations
120cr0395
data_management_and _data_science_cheat_sheet.pdf
data_management_and _data_science_cheat_sheet.pdf
JiananWang21
chapter 5.pptx: drainage and irrigation engineering
chapter 5.pptx: drainage and irrigation engineering
mulugeta48
Call for Papers - African Journal of Biological Sciences, E-ISSN: 2663-2187, ...
Call for Papers - African Journal of Biological Sciences, E-ISSN: 2663-2187, ...
Christo Ananth
The Most Attractive Pune Call Girls Budhwar Peth 8250192130 Will You Miss Thi...
The Most Attractive Pune Call Girls Budhwar Peth 8250192130 Will You Miss Thi...
ranjana rawat
VIP Model Call Girls Kothrud ( Pune ) Call ON 8005736733 Starting From 5K to ...
VIP Model Call Girls Kothrud ( Pune ) Call ON 8005736733 Starting From 5K to ...
SUHANI PANDEY
Unit 1 - Soil Classification and Compaction.pdf
Unit 1 - Soil Classification and Compaction.pdf
RagavanV2
(INDIRA) Call Girl Bhosari Call Now 8617697112 Bhosari Escorts 24x7
(INDIRA) Call Girl Bhosari Call Now 8617697112 Bhosari Escorts 24x7
Call Girls in Nagpur High Profile Call Girls
Generative AI or GenAI technology based PPT
Generative AI or GenAI technology based PPT
bhaskargani46
(INDIRA) Call Girl Meerut Call Now 8617697112 Meerut Escorts 24x7
(INDIRA) Call Girl Meerut Call Now 8617697112 Meerut Escorts 24x7
Call Girls in Nagpur High Profile Call Girls
AKTU Computer Networks notes --- Unit 3.pdf
AKTU Computer Networks notes --- Unit 3.pdf
ankushspencer015
Dernier
(20)
Vivazz, Mieres Social Housing Design Spain
Vivazz, Mieres Social Housing Design Spain
Roadmap to Membership of RICS - Pathways and Routes
Roadmap to Membership of RICS - Pathways and Routes
BSides Seattle 2024 - Stopping Ethan Hunt From Taking Your Data.pptx
BSides Seattle 2024 - Stopping Ethan Hunt From Taking Your Data.pptx
ONLINE FOOD ORDER SYSTEM PROJECT REPORT.pdf
ONLINE FOOD ORDER SYSTEM PROJECT REPORT.pdf
UNIT-IFLUID PROPERTIES & FLOW CHARACTERISTICS
UNIT-IFLUID PROPERTIES & FLOW CHARACTERISTICS
Call Girls in Ramesh Nagar Delhi 💯 Call Us 🔝9953056974 🔝 Escort Service
Call Girls in Ramesh Nagar Delhi 💯 Call Us 🔝9953056974 🔝 Escort Service
Online banking management system project.pdf
Online banking management system project.pdf
UNIT-II FMM-Flow Through Circular Conduits
UNIT-II FMM-Flow Through Circular Conduits
Structural Analysis and Design of Foundations: A Comprehensive Handbook for S...
Structural Analysis and Design of Foundations: A Comprehensive Handbook for S...
Extrusion Processes and Their Limitations
Extrusion Processes and Their Limitations
data_management_and _data_science_cheat_sheet.pdf
data_management_and _data_science_cheat_sheet.pdf
chapter 5.pptx: drainage and irrigation engineering
chapter 5.pptx: drainage and irrigation engineering
Call for Papers - African Journal of Biological Sciences, E-ISSN: 2663-2187, ...
Call for Papers - African Journal of Biological Sciences, E-ISSN: 2663-2187, ...
The Most Attractive Pune Call Girls Budhwar Peth 8250192130 Will You Miss Thi...
The Most Attractive Pune Call Girls Budhwar Peth 8250192130 Will You Miss Thi...
VIP Model Call Girls Kothrud ( Pune ) Call ON 8005736733 Starting From 5K to ...
VIP Model Call Girls Kothrud ( Pune ) Call ON 8005736733 Starting From 5K to ...
Unit 1 - Soil Classification and Compaction.pdf
Unit 1 - Soil Classification and Compaction.pdf
(INDIRA) Call Girl Bhosari Call Now 8617697112 Bhosari Escorts 24x7
(INDIRA) Call Girl Bhosari Call Now 8617697112 Bhosari Escorts 24x7
Generative AI or GenAI technology based PPT
Generative AI or GenAI technology based PPT
(INDIRA) Call Girl Meerut Call Now 8617697112 Meerut Escorts 24x7
(INDIRA) Call Girl Meerut Call Now 8617697112 Meerut Escorts 24x7
AKTU Computer Networks notes --- Unit 3.pdf
AKTU Computer Networks notes --- Unit 3.pdf
En vedette
PEPSICO Presentation to CAGNY Conference Feb 2024
PEPSICO Presentation to CAGNY Conference Feb 2024
Neil Kimberley
Content Methodology: A Best Practices Report (Webinar)
Content Methodology: A Best Practices Report (Webinar)
contently
How to Prepare For a Successful Job Search for 2024
How to Prepare For a Successful Job Search for 2024
Albert Qian
Social Media Marketing Trends 2024 // The Global Indie Insights
Social Media Marketing Trends 2024 // The Global Indie Insights
Kurio // The Social Media Age(ncy)
Trends In Paid Search: Navigating The Digital Landscape In 2024
Trends In Paid Search: Navigating The Digital Landscape In 2024
Search Engine Journal
5 Public speaking tips from TED - Visualized summary
5 Public speaking tips from TED - Visualized summary
SpeakerHub
ChatGPT and the Future of Work - Clark Boyd
ChatGPT and the Future of Work - Clark Boyd
Clark Boyd
Getting into the tech field. what next
Getting into the tech field. what next
Tessa Mero
Google's Just Not That Into You: Understanding Core Updates & Search Intent
Google's Just Not That Into You: Understanding Core Updates & Search Intent
Lily Ray
How to have difficult conversations
How to have difficult conversations
Rajiv Jayarajah, MAppComm, ACC
Introduction to Data Science
Introduction to Data Science
Christy Abraham Joy
Time Management & Productivity - Best Practices
Time Management & Productivity - Best Practices
Vit Horky
The six step guide to practical project management
The six step guide to practical project management
MindGenius
Beginners Guide to TikTok for Search - Rachel Pearson - We are Tilt __ Bright...
Beginners Guide to TikTok for Search - Rachel Pearson - We are Tilt __ Bright...
RachelPearson36
Unlocking the Power of ChatGPT and AI in Testing - A Real-World Look, present...
Unlocking the Power of ChatGPT and AI in Testing - A Real-World Look, present...
Applitools
12 Ways to Increase Your Influence at Work
12 Ways to Increase Your Influence at Work
GetSmarter
ChatGPT webinar slides
ChatGPT webinar slides
Alireza Esmikhani
More than Just Lines on a Map: Best Practices for U.S Bike Routes
More than Just Lines on a Map: Best Practices for U.S Bike Routes
Project for Public Spaces & National Center for Biking and Walking
Ride the Storm: Navigating Through Unstable Periods / Katerina Rudko (Belka G...
Ride the Storm: Navigating Through Unstable Periods / Katerina Rudko (Belka G...
DevGAMM Conference
Barbie - Brand Strategy Presentation
Barbie - Brand Strategy Presentation
Erica Santiago
En vedette
(20)
PEPSICO Presentation to CAGNY Conference Feb 2024
PEPSICO Presentation to CAGNY Conference Feb 2024
Content Methodology: A Best Practices Report (Webinar)
Content Methodology: A Best Practices Report (Webinar)
How to Prepare For a Successful Job Search for 2024
How to Prepare For a Successful Job Search for 2024
Social Media Marketing Trends 2024 // The Global Indie Insights
Social Media Marketing Trends 2024 // The Global Indie Insights
Trends In Paid Search: Navigating The Digital Landscape In 2024
Trends In Paid Search: Navigating The Digital Landscape In 2024
5 Public speaking tips from TED - Visualized summary
5 Public speaking tips from TED - Visualized summary
ChatGPT and the Future of Work - Clark Boyd
ChatGPT and the Future of Work - Clark Boyd
Getting into the tech field. what next
Getting into the tech field. what next
Google's Just Not That Into You: Understanding Core Updates & Search Intent
Google's Just Not That Into You: Understanding Core Updates & Search Intent
How to have difficult conversations
How to have difficult conversations
Introduction to Data Science
Introduction to Data Science
Time Management & Productivity - Best Practices
Time Management & Productivity - Best Practices
The six step guide to practical project management
The six step guide to practical project management
Beginners Guide to TikTok for Search - Rachel Pearson - We are Tilt __ Bright...
Beginners Guide to TikTok for Search - Rachel Pearson - We are Tilt __ Bright...
Unlocking the Power of ChatGPT and AI in Testing - A Real-World Look, present...
Unlocking the Power of ChatGPT and AI in Testing - A Real-World Look, present...
12 Ways to Increase Your Influence at Work
12 Ways to Increase Your Influence at Work
ChatGPT webinar slides
ChatGPT webinar slides
More than Just Lines on a Map: Best Practices for U.S Bike Routes
More than Just Lines on a Map: Best Practices for U.S Bike Routes
Ride the Storm: Navigating Through Unstable Periods / Katerina Rudko (Belka G...
Ride the Storm: Navigating Through Unstable Periods / Katerina Rudko (Belka G...
Barbie - Brand Strategy Presentation
Barbie - Brand Strategy Presentation
Terraform_Vault紹介F5-NGINX_Community-20200805
1.
F5 / NGINX
community DevSecOpsに貢献するTerraform+Vaultの紹介 伊藤仁智 HashiCorp, Sr. Solution Engineer Copyright © 2020 HashiCorp
2.
伊藤仁智(Masa Ito) Sr. Solutions
Engineer at HashiCorp masa@hashicorp.com
3.
Copyright © 2018
HashiCorp Company overview 3 ミッション キー製品 設立 2012 by Mitchell Hashimoto and Armon Dadgar (HashiCorp Japanは2018年9月発足) Unlocking Cloud Operating Model. CEO Dave MacJannet
4.
ハイブリッドなインフラへのシフト Traditional Datacenter “Static” Modern Datacenter “Dynamic” Dedicated Infrastructure Private Cloud 専用マシン →
オンデマンド AWS Azure GCP ...+ + +
5.
© 2018 HashiCorpTERRAFORM
PRINCIPLE 5 Terraform: Infrastructure as Code ● インフラの「望むべき姿」をコード化 ● Terraformが「望むべき姿」を構築 ● 200を超えるProvider ● 「誰」が「いつ」実行しようと「望むべき姿」が構築される ● ヒューマンエラーを防ぐ ● Policy as Codeでコンプライアンスやガバナンスを強化 ● GitOpsでコードを中心にチームコラボレーション
6.
プロビジョニングのワークフローを統一
7.
Application Deliveryのライフサイクル 新しいアプリケーショ ンを開発 APP DEVELOPER チケットベースでサー バー申請 SERVER
ADMIN アプリケーションへの FQDNを作成 NETWORK ADMIN IPアドレスのアサイン アプリケーションを ロードバランサーへ登 録 ポートの設定 ヘルスチェック 運用&監視 OPERATOR
8.
Application Deliveryのライフサイクル 新しいアプリケーショ ンを開発 APP DEVELOPER チケットベースでサー バー申請 SERVER
ADMIN アプリケーションへの FQDNを作成 NETWORK ADMIN IPアドレスのアサイン アプリケーションを ロードバランサーへ登 録 ポートの設定 ヘルスチェック 運用&監視 OPERATOR とある会社によると 22週・・・
9.
Application Deliveryのライフサイクル 新しいアプリケーショ ンを開発 APP DEVELOPER チケットベースでサー バー申請 SERVER
ADMIN アプリケーションへの FQDNを作成 NETWORK ADMIN IPアドレスのアサイン アプリケーションを ロードバランサーへ登 録 ポートの設定 ヘルスチェック 運用&監視 OPERATOR とある会社によると 22週・・・
10.
新しいApplication Delivery 新しいアプリケーショ ンを開発 APP DEVELOPER サーバーやネットワー クの構築は
Terraform でプロビジョニング SERVER ADMIN NETWORK ADMIN Terraformコードその ものがリファレンス ロードバランサーも Terraformで設定 OPERATOR コード化しチーム間で共有
11.
新しいApplication Delivery 新しいアプリケーショ ンを開発 APP DEVELOPER サーバーやネットワー クの構築は
Terraform でプロビジョニング SERVER ADMIN NETWORK ADMIN Terraformコードその ものがリファレンス ロードバランサーも Terraformで設定 OPERATOR 自動化によりスケーラビリティを大幅に向上 Provisioning
12.
クラウドセキュリティ Traditional Datacenter “Static” Modern Datacenter “Dynamic” Dedicated Infrastructure Private Cloud AWS
Azure GCP ...+ + +
13.
クラウドセキュリティ Traditional Datacenter “Static” Modern Datacenter “Dynamic” Dedicated Infrastructure Private Cloud AWS
Azure GCP ...+ + + High Trust IP-based → Low Trust Identity-based
14.
APP DEVELOPER SERVER
ADMIN NETWORK ADMIN OPERATOR PKIAPI IdentityやRoleによって様々なシステムと連携
15.
APP DEVELOPER SERVER
ADMIN NETWORK ADMIN OPERATOR PKIAPI ApplicationもインフラもSecretが必要
16.
APP DEVELOPER SERVER
ADMIN NETWORK ADMIN OPERATOR PKIAPI ApplicationもインフラもSecretが必要 これらのSecretを ● どこで管理しますか? ● どうやってアクセスさせますか? ● 暗号化していますか? ● 漏れたときどうしますか?
17.
Copyright © 2018
HashiCorp じゃあどうするか? 17 1. Secretの中央管理(Centralization) 2. 暗号化(Encryption) 3. 認証(Authentication) 4. 認可(Authorization) 5. 鍵交換(Rotation)
18.
Copyright © 2018
HashiCorp じゃあどうするか? 18 1. Secretの中央管理(Centralization) 2. 暗号化(Encryption) 3. 認証(Authentication) 4. 認可(Authorization) 5. 鍵交換(Rotation) これ全部Vaultで出来ます
19.
Copyright © 2018
HashiCorp 19 信頼できるアイデンティティに対して、安全にシークレットを提供する 認証 アイデンティティによるアクセス シークレットエンジン ポリシーに基づいたシークレット管理 クライアント
20.
Copyright © 2018
HashiCorp 20 信頼できる認証基盤との連携 信頼できる認証基盤で認証 Authentication 認証 アイデンティティによるアクセス シークレットエンジン ポリシーに基づいたシークレット管理 クライアント
21.
Copyright © 2018
HashiCorp 21 Tokenの取得 認証 アイデンティティによるアクセス シークレットエンジン ポリシーに基づいたシークレット管理 クライアント Token ポリシー • シークレットエンジンへのアクセス • APIエンドポイントへのアクセス アプリやシステムへのアクセスを認可 Authorization 信頼できる認証基盤で認証 Authentication
22.
Copyright © 2018
HashiCorp 22 シークレットのリクエスト 認証 アイデンティティによるアクセス シークレットエンジン ポリシーに基づいたシークレット管理 クライアント Token アプリやシステムへのアクセスを認可 Authorization ポリシー • シークレットエンジンへのアクセス • APIエンドポイントへのアクセス 信頼できる認証基盤で認証 Authentication
23.
Copyright © 2018
HashiCorp 23 シークレットの取得 認証 アイデンティティによるアクセス シークレットエンジン ポリシーに基づいたシークレット管理 クライアント Token アプリやシステムへのアクセスを認可 Authorization サービスの提供 ▪ 静的シークレット ▪ 動的シークレット ▪ 証明書 ▪ 暗号化サービス シークレット ポリシー • シークレットエンジンへのアクセス • APIエンドポイントへのアクセス 信頼できる認証基盤で認証 Authentication
24.
APP DEVELOPER SERVER
ADMIN NETWORK ADMIN OPERATOR PKIAPI SecurityチームによるSecretの中央管理 認証 認可 SECURITY OPS
25.
APP DEVELOPER SERVER
ADMIN NETWORK ADMIN OPERATOR PKIAPI まとめ SECURITY OPS プロビジョニングのワークフローを統一 シークレット管理のワークフローを統一
26.
APP DEVELOPER SERVER
ADMIN NETWORK ADMIN OPERATOR PKIAPI まとめ SECURITY OPS プロビジョニングのワークフローを統一 シークレット管理のワークフローを統一 DevSecOpsの成功
27.
ありがとうございました。 masa@hashicorp.com sales_japan@hashicorp.com learn.hashicorp.com hashicorp.com/events 27
Télécharger maintenant