[{"data":1,"prerenderedAt":1806},["ShallowReactive",2],{"/ja-jp/blog/categories/security/page/4":3,"navigation-ja-jp":21,"banner-ja-jp":450,"footer-ja-jp":458,"security-category-page-total-items-ja-jp":700,"security-category-page-featured-ja-jp":701,"security-category-page-4-ja-jp":1790},{"id":4,"title":5,"body":6,"category":6,"config":7,"content":11,"description":6,"extension":13,"meta":14,"navigation":15,"path":16,"seo":17,"slug":6,"stem":19,"testContent":6,"type":6,"__hash__":20},"blogCategories/ja-jp/blog/categories/security.yml","Security",null,{"template":8,"slug":9,"hide":10},"BlogCategory","security",false,{"name":12},"セキュリティ","yml",{},true,"/ja-jp/blog/categories/security",{"title":12,"description":18},"Browse articles related to セキュリティ on the GitLab Blog","ja-jp/blog/categories/security","NurKrti9U9DuY3QiqXnIttJSyKF0TC_mNZTQ_Le6Yek",{"logo":22,"freeTrial":27,"sales":32,"login":37,"items":42,"search":370,"minimal":403,"duo":420,"switchNav":429,"pricingDeployment":440},{"config":23},{"href":24,"dataGaName":25,"dataGaLocation":26},"/ja-jp/","gitlab logo","header",{"text":28,"config":29},"無料トライアルを開始",{"href":30,"dataGaName":31,"dataGaLocation":26},"https://gitlab.com/-/trial_registrations/new?glm_source=about.gitlab.com/ja-jp&glm_content=default-saas-trial/","free trial",{"text":33,"config":34},"デモをリクエスト",{"href":35,"dataGaName":36,"dataGaLocation":26},"/ja-jp/sales/?contact-topic=request-demo","sales",{"text":38,"config":39},"サインイン",{"href":40,"dataGaName":41,"dataGaLocation":26},"https://gitlab.com/users/sign_in/","sign in",[43,72,173,178,292,348],{"text":44,"config":45,"menu":47},"プラットフォーム",{"dataNavLevelOne":46},"platform",{"type":48,"columns":49},"cards",[50,56,64],{"title":44,"description":51,"link":52},"DevSecOpsに特化したインテリジェントオーケストレーションプラットフォーム",{"text":53,"config":54},"プラットフォームの詳細はこちら",{"href":55,"dataGaName":46,"dataGaLocation":26},"/ja-jp/platform/",{"title":57,"description":58,"link":59},"GitLab Duo Agent Platform","ソフトウェアライフサイクル全体を支えるエージェント型AI",{"text":60,"config":61},"GitLab Duoのご紹介",{"href":62,"dataGaName":63,"dataGaLocation":26},"/ja-jp/gitlab-duo-agent-platform/","gitlab duo agent platform",{"title":65,"description":66,"link":67},"GitLabが選ばれる理由","エンタープライズがGitLabを選ぶ主な理由をご覧ください",{"text":68,"config":69},"詳細はこちら",{"href":70,"dataGaName":71,"dataGaLocation":26},"/ja-jp/why-gitlab/","why gitlab",{"text":73,"left":15,"config":74,"menu":76},"製品",{"dataNavLevelOne":75},"solutions",{"type":77,"link":78,"columns":82,"feature":152},"lists",{"text":79,"config":80},"すべてのソリューションを表示",{"href":81,"dataGaName":75,"dataGaLocation":26},"/ja-jp/solutions/",[83,108,130],{"title":84,"description":85,"link":86,"items":91},"自動化","CI/CDと自動化でデプロイを加速",{"config":87},{"icon":88,"href":89,"dataGaName":90,"dataGaLocation":26},"AutomatedCodeAlt","/ja-jp/solutions/delivery-automation/","automated software delivery",[92,96,99,104],{"text":93,"config":94},"CI/CD",{"href":95,"dataGaLocation":26,"dataGaName":93},"/ja-jp/solutions/continuous-integration/",{"text":57,"config":97},{"href":62,"dataGaLocation":26,"dataGaName":98},"gitlab duo agent platform - product menu",{"text":100,"config":101},"ソースコード管理",{"href":102,"dataGaLocation":26,"dataGaName":103},"/ja-jp/solutions/source-code-management/","Source Code Management",{"text":105,"config":106},"自動化されたソフトウェアデリバリー",{"href":89,"dataGaLocation":26,"dataGaName":107},"Automated software delivery",{"title":12,"description":109,"link":110,"items":115},"セキュリティを犠牲にすることなくコード作成を高速化",{"config":111},{"href":112,"dataGaName":113,"dataGaLocation":26,"icon":114},"/ja-jp/solutions/application-security-testing/","security and compliance","ShieldCheckLight",[116,120,125],{"text":117,"config":118},"アプリケーションセキュリティテスト",{"href":112,"dataGaName":119,"dataGaLocation":26},"Application security testing",{"text":121,"config":122},"ソフトウェアサプライチェーンセキュリティ",{"href":123,"dataGaLocation":26,"dataGaName":124},"/ja-jp/solutions/supply-chain/","Software supply chain security",{"text":126,"config":127},"ソフトウェアコンプライアンス",{"href":128,"dataGaName":129,"dataGaLocation":26},"/ja-jp/solutions/software-compliance/","software compliance",{"title":131,"link":132,"items":137},"測定",{"config":133},{"icon":134,"href":135,"dataGaName":136,"dataGaLocation":26},"DigitalTransformation","/ja-jp/solutions/visibility-measurement/","visibility and measurement",[138,142,147],{"text":139,"config":140},"可視性と測定",{"href":135,"dataGaLocation":26,"dataGaName":141},"Visibility and Measurement",{"text":143,"config":144},"バリューストリーム管理",{"href":145,"dataGaLocation":26,"dataGaName":146},"/ja-jp/solutions/value-stream-management/","Value Stream Management",{"text":148,"config":149},"分析とインサイト",{"href":150,"dataGaLocation":26,"dataGaName":151},"/ja-jp/solutions/analytics-and-insights/","Analytics and insights",{"title":153,"type":77,"items":154},"GitLabが活躍する場所",[155,161,167],{"text":156,"config":157},"大企業",{"icon":158,"href":159,"dataGaLocation":26,"dataGaName":160},"Building","/ja-jp/enterprise/","enterprise",{"text":162,"config":163},"スモールビジネス",{"icon":164,"href":165,"dataGaLocation":26,"dataGaName":166},"Work","/ja-jp/small-business/","small business",{"text":168,"config":169},"公共部門",{"icon":170,"href":171,"dataGaLocation":26,"dataGaName":172},"Organization","/ja-jp/solutions/public-sector/","public sector",{"text":174,"config":175},"価格",{"href":176,"dataGaName":177,"dataGaLocation":26,"dataNavLevelOne":177},"/ja-jp/pricing/","pricing",{"text":179,"config":180,"menu":182},"関連リソース",{"dataNavLevelOne":181},"resources",{"type":77,"link":183,"columns":187,"feature":281},{"text":184,"config":185},"すべてのリソースを表示",{"href":186,"dataGaName":181,"dataGaLocation":26},"/ja-jp/resources/",[188,221,248],{"title":189,"items":190},"はじめに",[191,196,201,206,211,216],{"text":192,"config":193},"インストール",{"href":194,"dataGaName":195,"dataGaLocation":26},"/ja-jp/install/","install",{"text":197,"config":198},"クイックスタートガイド",{"href":199,"dataGaName":200,"dataGaLocation":26},"/ja-jp/get-started/","quick setup checklists",{"text":202,"config":203},"学ぶ",{"href":204,"dataGaLocation":26,"dataGaName":205},"https://university.gitlab.com/","learn",{"text":207,"config":208},"製品ドキュメント",{"href":209,"dataGaName":210,"dataGaLocation":26},"https://docs.gitlab.com/ja-jp/","product documentation",{"text":212,"config":213},"ベストプラクティスビデオ",{"href":214,"dataGaName":215,"dataGaLocation":26},"/ja-jp/getting-started-videos/","best practice videos",{"text":217,"config":218},"インテグレーション",{"href":219,"dataGaName":220,"dataGaLocation":26},"/ja-jp/integrations/","integrations",{"title":222,"items":223},"検索する",[224,229,234,239,243],{"text":225,"config":226},"お客様成功事例",{"href":227,"dataGaName":228,"dataGaLocation":26},"/ja-jp/customers/","customer success stories",{"text":230,"config":231},"ブログ",{"href":232,"dataGaName":233,"dataGaLocation":26},"/ja-jp/blog/","blog",{"text":235,"config":236},"Demo Hub",{"href":237,"dataGaName":238,"dataGaLocation":26},"/ja-jp/demo-hub/","demo hub",{"text":240,"config":241},"The Source",{"href":242,"dataGaName":233,"dataGaLocation":26},"/ja-jp/the-source/",{"text":244,"config":245},"リモート",{"href":246,"dataGaName":247,"dataGaLocation":26},"https://handbook.gitlab.com/handbook/company/culture/all-remote/","remote",{"title":249,"items":250},"つなげる",[251,256,261,266,271,276],{"text":252,"config":253},"GitLabサービス",{"href":254,"dataGaName":255,"dataGaLocation":26},"/ja-jp/services/","services",{"text":257,"config":258},"コントリビュート",{"href":259,"dataGaName":260,"dataGaLocation":26},"https://contributors.gitlab.com","contribute",{"text":262,"config":263},"コミュニティ",{"href":264,"dataGaName":265,"dataGaLocation":26},"/community/","community",{"text":267,"config":268},"フォーラム",{"href":269,"dataGaName":270,"dataGaLocation":26},"https://forum.gitlab.com/","forum",{"text":272,"config":273},"イベント",{"href":274,"dataGaName":275,"dataGaLocation":26},"/events/","events",{"text":277,"config":278},"パートナー",{"href":279,"dataGaName":280,"dataGaLocation":26},"/ja-jp/partners/","partners",{"config":282,"title":285,"text":286,"link":287},{"background":283,"textColor":284},"url('https://res.cloudinary.com/about-gitlab-com/image/upload/v1777322348/qpq8yrgn8knii57omj0c.png')","#000","GitLabの最新情報","最新の機能と改善点に関する情報をお届けします。",{"text":288,"config":289},"最新情報を読む",{"href":290,"dataGaName":291,"dataGaLocation":26},"/ja-jp/whats-new/","whats new",{"text":293,"config":294,"menu":296},"企業情報",{"dataNavLevelOne":295},"company",{"type":77,"columns":297},[298],{"items":299},[300,305,311,313,318,323,328,333,338,343],{"text":301,"config":302},"GitLabについて",{"href":303,"dataGaName":304,"dataGaLocation":26},"/ja-jp/company/","about",{"text":306,"config":307,"footerGa":310},"採用情報",{"href":308,"dataGaName":309,"dataGaLocation":26},"/jobs/","jobs",{"dataGaName":309},{"text":272,"config":312},{"href":274,"dataGaName":275,"dataGaLocation":26},{"text":314,"config":315},"経営陣",{"href":316,"dataGaName":317,"dataGaLocation":26},"/company/team/e-group/","leadership",{"text":319,"config":320},"ハンドブック",{"href":321,"dataGaName":322,"dataGaLocation":26},"https://handbook.gitlab.com/","handbook",{"text":324,"config":325},"投資家向け情報",{"href":326,"dataGaName":327,"dataGaLocation":26},"https://ir.gitlab.com/overview/default.aspx","investor relations",{"text":329,"config":330},"トラストセンター",{"href":331,"dataGaName":332,"dataGaLocation":26},"/ja-jp/security/","trust center",{"text":334,"config":335},"AI Transparency Center",{"href":336,"dataGaName":337,"dataGaLocation":26},"/ja-jp/ai-transparency-center/","ai transparency center",{"text":339,"config":340},"ニュースレター",{"href":341,"dataGaName":342,"dataGaLocation":26},"/company/contact/#contact-forms","newsletter",{"text":344,"config":345},"プレス",{"href":346,"dataGaName":347,"dataGaLocation":26},"/press/","press",{"text":349,"config":350,"menu":351},"お問い合わせ",{"dataNavLevelOne":295},{"type":77,"columns":352},[353],{"items":354},[355,360,365],{"text":356,"config":357},"お問い合わせはこちら",{"href":358,"dataGaName":359,"dataGaLocation":26},"/ja-jp/sales/","talk to sales",{"text":361,"config":362},"サポートを受ける",{"href":363,"dataGaName":364,"dataGaLocation":26},"https://support.gitlab.com/hc/en-us","support portal",{"text":366,"config":367},"カスタマーポータル",{"href":368,"dataGaName":369,"dataGaLocation":26},"https://customers.gitlab.com/customers/sign_in/","customer portal",{"close":371,"login":372,"suggestions":379},"閉じる",{"text":373,"link":374},"リポジトリとプロジェクトを検索するには、次にログインします",{"text":375,"config":376},"GitLab.com",{"href":40,"dataGaName":377,"dataGaLocation":378},"search login","search",{"text":380,"default":381},"提案",[382,384,389,391,395,399],{"text":57,"config":383},{"href":62,"dataGaName":57,"dataGaLocation":378},{"text":385,"config":386},"コード提案（AI）",{"href":387,"dataGaName":388,"dataGaLocation":378},"/ja-jp/solutions/code-suggestions/","Code Suggestions (AI)",{"text":93,"config":390},{"href":95,"dataGaName":93,"dataGaLocation":378},{"text":392,"config":393},"GitLab on AWS",{"href":394,"dataGaName":392,"dataGaLocation":378},"/ja-jp/partners/technology-partners/aws/",{"text":396,"config":397},"GitLab on Google Cloud",{"href":398,"dataGaName":396,"dataGaLocation":378},"/ja-jp/partners/technology-partners/google-cloud-platform/",{"text":400,"config":401},"GitLabを選ぶ理由",{"href":70,"dataGaName":402,"dataGaLocation":378},"Why GitLab?",{"freeTrial":404,"mobileIcon":408,"desktopIcon":413,"secondaryButton":416},{"text":28,"config":405},{"href":406,"dataGaName":31,"dataGaLocation":407},"https://gitlab.com/-/trials/new/","nav",{"altText":409,"config":410},"GitLabアイコン",{"src":411,"dataGaName":412,"dataGaLocation":407},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1758203874/jypbw1jx72aexsoohd7x.svg","gitlab icon",{"altText":409,"config":414},{"src":415,"dataGaName":412,"dataGaLocation":407},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1758203875/gs4c8p8opsgvflgkswz9.svg",{"text":189,"config":417},{"href":418,"dataGaName":419,"dataGaLocation":407},"https://gitlab.com/-/trial_registrations/new?glm_source=about.gitlab.com/ja-jp/get-started/","get started",{"freeTrial":421,"mobileIcon":425,"desktopIcon":427},{"text":422,"config":423},"GitLab Duoの詳細について",{"href":62,"dataGaName":424,"dataGaLocation":407},"gitlab duo",{"altText":409,"config":426},{"src":411,"dataGaName":412,"dataGaLocation":407},{"altText":409,"config":428},{"src":415,"dataGaName":412,"dataGaLocation":407},{"button":430,"mobileIcon":435,"desktopIcon":437},{"text":431,"config":432},"/switch",{"href":433,"dataGaName":434,"dataGaLocation":407},"#contact","switch",{"altText":409,"config":436},{"src":411,"dataGaName":412,"dataGaLocation":407},{"altText":409,"config":438},{"src":439,"dataGaName":412,"dataGaLocation":407},"https://res.cloudinary.com/about-gitlab-com/image/upload/v1773335277/ohhpiuoxoldryzrnhfrh.png",{"freeTrial":441,"mobileIcon":446,"desktopIcon":448},{"text":442,"config":443},"料金ページに戻る",{"href":176,"dataGaName":444,"dataGaLocation":407,"icon":445},"back to pricing","GoBack",{"altText":409,"config":447},{"src":411,"dataGaName":412,"dataGaLocation":407},{"altText":409,"config":449},{"src":415,"dataGaName":412,"dataGaLocation":407},{"title":451,"button":452,"config":456},"GitLab Orbitが登場: AIエージェントのためのコンテキストレイヤー",{"text":68,"config":453},{"href":454,"dataGaName":455,"dataGaLocation":26},"/ja-jp/gitlab-orbit/","orbit",{"layout":457,"disabled":10},"release",{"data":459},{"text":460,"source":461,"edit":467,"contribute":472,"config":477,"items":482,"minimal":691},"GitはSoftware Freedom Conservancyの商標です。当社は「GitLab」をライセンスに基づいて使用しています",{"text":462,"config":463},"ページのソースを表示",{"href":464,"dataGaName":465,"dataGaLocation":466},"https://gitlab.com/gitlab-com/marketing/digital-experience/about-gitlab-com/","page source","footer",{"text":468,"config":469},"このページを編集",{"href":470,"dataGaName":471,"dataGaLocation":466},"https://gitlab.com/gitlab-com/marketing/digital-experience/about-gitlab-com/-/blob/main/content/","web ide",{"text":473,"config":474},"ご協力をお願いします",{"href":475,"dataGaName":476,"dataGaLocation":466},"https://gitlab.com/gitlab-com/marketing/digital-experience/about-gitlab-com/-/blob/main/CONTRIBUTING.md/","please contribute",{"twitter":478,"facebook":479,"youtube":480,"linkedin":481},"https://twitter.com/gitlab","https://www.facebook.com/gitlab","https://www.youtube.com/channel/UCnMGQ8QHMAnVIsI3xJrihhg","https://www.linkedin.com/company/gitlab-com",[483,528,581,624,658],{"title":174,"links":484,"subMenu":499},[485,489,494],{"text":486,"config":487},"プランの表示",{"href":176,"dataGaName":488,"dataGaLocation":466},"view plans",{"text":490,"config":491},"Premiumを選ぶ理由",{"href":492,"dataGaName":493,"dataGaLocation":466},"/ja-jp/pricing/premium/","why premium",{"text":495,"config":496},"Ultimateを選ぶ理由",{"href":497,"dataGaName":498,"dataGaLocation":466},"/ja-jp/pricing/ultimate/","why ultimate",[500],{"title":349,"links":501},[502,504,506,508,513,518,523],{"text":349,"config":503},{"href":358,"dataGaName":36,"dataGaLocation":466},{"text":361,"config":505},{"href":363,"dataGaName":364,"dataGaLocation":466},{"text":366,"config":507},{"href":368,"dataGaName":369,"dataGaLocation":466},{"text":509,"config":510},"ステータス",{"href":511,"dataGaName":512,"dataGaLocation":466},"https://status.gitlab.com/","status",{"text":514,"config":515},"利用規約",{"href":516,"dataGaName":517,"dataGaLocation":466},"/terms/","terms of use",{"text":519,"config":520},"プライバシーに関する声明",{"href":521,"dataGaName":522,"dataGaLocation":466},"/ja-jp/privacy/","privacy statement",{"text":524,"config":525},"Cookie 優先設定",{"dataGaName":526,"dataGaLocation":466,"id":527,"isOneTrustButton":15},"cookie preferences","ot-sdk-btn",{"title":73,"links":529,"subMenu":538},[530,534],{"text":531,"config":532},"DevSecOpsプラットフォーム",{"href":55,"dataGaName":533,"dataGaLocation":466},"devsecops platform",{"text":535,"config":536},"AI支援開発",{"href":62,"dataGaName":537,"dataGaLocation":466},"ai-assisted development",[539],{"title":540,"links":541},"トピック",[542,546,551,556,561,566,571,576],{"text":93,"config":543},{"href":544,"dataGaName":545,"dataGaLocation":466},"/ja-jp/topics/ci-cd/","cicd",{"text":547,"config":548},"GitOps",{"href":549,"dataGaName":550,"dataGaLocation":466},"/ja-jp/topics/gitops/","gitops",{"text":552,"config":553},"DevOps",{"href":554,"dataGaName":555,"dataGaLocation":466},"/ja-jp/topics/devops/","devops",{"text":557,"config":558},"バージョン管理",{"href":559,"dataGaName":560,"dataGaLocation":466},"/ja-jp/topics/version-control/","version control",{"text":562,"config":563},"DevSecOps",{"href":564,"dataGaName":565,"dataGaLocation":466},"/ja-jp/topics/devsecops/","devsecops",{"text":567,"config":568},"クラウドネイティブ",{"href":569,"dataGaName":570,"dataGaLocation":466},"/ja-jp/topics/cloud-native/","cloud native",{"text":572,"config":573},"コーディングのためのAI",{"href":574,"dataGaName":575,"dataGaLocation":466},"/ja-jp/topics/devops/ai-for-coding/","ai for coding",{"text":577,"config":578},"エージェント型AI",{"href":579,"dataGaName":580,"dataGaLocation":466},"/ja-jp/topics/agentic-ai/","agentic ai",{"title":582,"links":583},"ソリューション",[584,587,589,594,598,601,604,607,609,611,614,619],{"text":117,"config":585},{"href":112,"dataGaName":586,"dataGaLocation":466},"Application Security Testing",{"text":105,"config":588},{"href":89,"dataGaName":90,"dataGaLocation":466},{"text":590,"config":591},"アジャイル開発",{"href":592,"dataGaName":593,"dataGaLocation":466},"/ja-jp/solutions/agile-delivery/","agile delivery",{"text":595,"config":596},"SCM",{"href":102,"dataGaName":597,"dataGaLocation":466},"source code management",{"text":93,"config":599},{"href":95,"dataGaName":600,"dataGaLocation":466},"continuous integration & delivery",{"text":143,"config":602},{"href":145,"dataGaName":603,"dataGaLocation":466},"value stream management",{"text":547,"config":605},{"href":606,"dataGaName":550,"dataGaLocation":466},"/ja-jp/solutions/gitops/",{"text":156,"config":608},{"href":159,"dataGaName":160,"dataGaLocation":466},{"text":162,"config":610},{"href":165,"dataGaName":166,"dataGaLocation":466},{"text":612,"config":613},"公共機関",{"href":171,"dataGaName":172,"dataGaLocation":466},{"text":615,"config":616},"教育",{"href":617,"dataGaName":618,"dataGaLocation":466},"/ja-jp/solutions/education/","education",{"text":620,"config":621},"金融サービス",{"href":622,"dataGaName":623,"dataGaLocation":466},"/ja-jp/solutions/finance/","financial services",{"title":625,"links":626},"リソース",[627,629,631,633,637,639,642,644,646,648,650,652,654,656],{"text":192,"config":628},{"href":194,"dataGaName":195,"dataGaLocation":466},{"text":197,"config":630},{"href":199,"dataGaName":200,"dataGaLocation":466},{"text":202,"config":632},{"href":204,"dataGaName":205,"dataGaLocation":466},{"text":207,"config":634},{"href":635,"dataGaName":636,"dataGaLocation":466},"https://docs.gitlab.com/ja-jp","docs",{"text":230,"config":638},{"href":232,"dataGaName":233,"dataGaLocation":466},{"text":640,"config":641},"最新リリース",{"href":290,"dataGaName":291,"dataGaLocation":466},{"text":225,"config":643},{"href":227,"dataGaName":228,"dataGaLocation":466},{"text":244,"config":645},{"href":246,"dataGaName":247,"dataGaLocation":466},{"text":252,"config":647},{"href":254,"dataGaName":255,"dataGaLocation":466},{"text":257,"config":649},{"href":259,"dataGaName":260,"dataGaLocation":466},{"text":262,"config":651},{"href":264,"dataGaName":265,"dataGaLocation":466},{"text":267,"config":653},{"href":269,"dataGaName":270,"dataGaLocation":466},{"text":272,"config":655},{"href":274,"dataGaName":275,"dataGaLocation":466},{"text":277,"config":657},{"href":279,"dataGaName":280,"dataGaLocation":466},{"title":659,"links":660},"会社情報",[661,663,665,667,669,671,675,680,682,684,686],{"text":301,"config":662},{"href":303,"dataGaName":295,"dataGaLocation":466},{"text":306,"config":664},{"href":308,"dataGaName":309,"dataGaLocation":466},{"text":314,"config":666},{"href":316,"dataGaName":317,"dataGaLocation":466},{"text":319,"config":668},{"href":321,"dataGaName":322,"dataGaLocation":466},{"text":324,"config":670},{"href":326,"dataGaName":327,"dataGaLocation":466},{"text":672,"config":673},"Sustainability",{"href":674,"dataGaName":672,"dataGaLocation":466},"/sustainability/",{"text":676,"config":677},"ダイバーシティ、インクルージョン、ビロンギング（DIB）",{"href":678,"dataGaName":679,"dataGaLocation":466},"/ja-jp/diversity-inclusion-belonging/","Diversity, inclusion and belonging",{"text":329,"config":681},{"href":331,"dataGaName":332,"dataGaLocation":466},{"text":339,"config":683},{"href":341,"dataGaName":342,"dataGaLocation":466},{"text":344,"config":685},{"href":346,"dataGaName":347,"dataGaLocation":466},{"text":687,"config":688},"現代奴隷制の透明性に関する声明",{"href":689,"dataGaName":690,"dataGaLocation":466},"https://handbook.gitlab.com/handbook/legal/modern-slavery-act-transparency-statement/","modern slavery transparency statement",{"items":692},[693,695,698],{"text":514,"config":694},{"href":516,"dataGaName":517,"dataGaLocation":466},{"text":696,"config":697},"Cookieの設定",{"dataGaName":526,"dataGaLocation":466,"id":527,"isOneTrustButton":15},{"text":519,"config":699},{"href":521,"dataGaName":522,"dataGaLocation":466},30,{"id":702,"title":703,"authors":704,"body":707,"category":9,"date":1774,"description":1775,"extension":1776,"externalUrl":6,"faq":6,"featured":15,"heroImage":1777,"meta":1778,"navigation":15,"path":1779,"seo":1780,"slug":1782,"stem":1783,"tags":1784,"template":1787,"updatedDate":1788,"__hash__":1789},"blogPosts/ja-jp/blog/gitlab-secrets-manager-add-eso-terraform-api-support.md","GitLab Secrets ManagerがESO、Terraform、APIに対応",[705,706],"Erick Bajao","Joe Randazzo",{"type":708,"value":709,"toc":1767},"minimark",[710,714,724,748,753,756,763,771,782,790,793,799,808,812,822,1132,1140,1144,1147,1272,1276,1283,1729,1732,1740,1749,1763],[711,712,713],"p",{},"CI/CDにはCI/CD用、KubernetesにはKubernetes用、Terraformにはまた別のシークレットストア。こうした分散した状態は、決して珍しくありません。ただ、増え続ける管理対象のツール、そしてアクセス制御の整合性を取り続ける負担。何か問題が起きたときには、ばらばらの監査証跡を突き合わせるところから始めることになります。",[711,715,716,717,723],{},"GitLab Secrets Managerが、External Secrets Operator（ESO）とTerraformに対応しました。",[718,719,722],"a",{"href":720,"rel":721},"https://docs.gitlab.com/ja-jp/ci/secrets/secrets_manager/non_cicd_access/",[],"CI/CDパイプラインの外側でも、安全にシークレットを取得できる","ようになります。OpenBaoを基盤とするGitLab Secrets Managerは、ソフトウェアデリバリーチェーン全体でシークレットの信頼できる唯一の情報源となる存在。1つのシークレットストアを、次のすべての用途で共有できます。",[725,726,727,731,734,737,740],"ul",{},[728,729,730],"li",{},"ESOを経由したKubernetesワークロード",[728,732,733],{},"TerraformまたはOpenTofuの実行",[728,735,736],{},"OpenBaoまたはVault CLI",[728,738,739],{},"GitLabのCI/CDジョブ（バージョン19.0以降）",[728,741,742,747],{},[718,743,746],{"href":744,"rel":745},"https://docs.gitlab.com/ja-jp/api/secrets_manager/",[],"Secrets Manager API","を利用した外部の自動化処理",[749,750,752],"h3",{"id":751},"kubernetesexternal-secrets-operator","Kubernetes：External Secrets Operator",[711,754,755],{},"ESOは、Vaultプロバイダーを介してGitLab Secrets Managerからシークレットを同期します。流れはシンプルです。クラスター内のワークロードが有効期間の短いJSON Web Token（JWT）を保持し、ESOがそれを使ってOpenBaoに認証。取得したシークレットは、Kubernetes Secretへ書き込まれます。",[711,757,758],{},[759,760],"img",{"alt":761,"src":762},"External Secrets Operator","https://res.cloudinary.com/about-gitlab-com/image/upload/v1785953823/ojlr4rv1r34oflo4fynv.png",[711,764,765,770],{},[718,766,769],{"href":767,"rel":768},"https://external-secrets.io/latest/api/secretstore/",[],"SecretStore","は、「どこからシークレットを取得し、どう認証するか」をESOに伝えるためのリソースです。GitLab Secrets ManagerはVault互換のKV v2 APIを公開しているため、設定にはVaultプロバイダーを指定します。namespaceフィールドが対応するのはGitLabの階層（Organization、グループ、プロジェクト）で、このストアから参照できるシークレットの範囲を決めるもの。認証に使うのは、GitLabが発行しKubernetes Secretに格納したJWTです。secretRefから参照します。",[772,773,778],"pre",{"className":774,"code":776,"language":777},[775],"language-text","apiVersion: external-secrets.io/v1\nkind: SecretStore\nmetadata:\n  name: gitlab-secrets-manager\n  namespace: my-app\nspec:\n  provider:\n    vault:\n      server: https://secrets.gitlab.com      # provider.vault.server\n      path: secrets/kv                        # provider.vault.path\n      version: v2\n      namespace: org_5/group_42/project_99    # provider.vault.namespace\n      auth:\n        jwt:\n          path: api_jwt/cel                   # provider.vault.auth.jwt.path\n          role: all_api                       # provider.vault.auth.jwt.role\n          secretRef:\n            name: gitlab-access-token         # Kubernetes secret holding the minted token\n            key: token\n","text",[779,780,776],"code",{"__ignoreMap":781},"",[711,783,784,789],{},[718,785,788],{"href":786,"rel":787},"https://external-secrets.io/latest/api/externalsecret/",[],"ExternalSecret","で定義するのは、「どのシークレットを取得し、どこに配置するか」です。先ほど作成したSecretStoreを参照し、リモートのシークレットをKubernetes Secretへマッピングします。あとはワークロードから、マウントまたは環境変数として参照するだけ。",[711,791,792],{},"ターゲットとなるシークレット（synced-secret）を作成し、管理するのはESOです。refreshIntervalで指定した間隔ごとにGitLabから再取得するため、値をローテーションしても再デプロイは不要。data配下の各エントリは、リモートのシークレット1つをターゲット側のキー1つに対応付けます。remoteRef.keyがGitLab Secrets Manager上のパス、propertyがそのシークレット内のフィールド、secretKeyがKubernetes側での格納先キーです。",[772,794,797],{"className":795,"code":796,"language":777},[775],"apiVersion: external-secrets.io/v1\nkind: ExternalSecret\nmetadata:\n  name: my-secret\n  namespace: my-app\nspec:\n  refreshInterval: 45m\n  secretStoreRef:\n    name: gitlab-secrets-manager\n    kind: SecretStore\n  target:\n    name: synced-secret\n  data:\n    - secretKey: value\n      remoteRef:\n        key: explicit/\u003Csecret_name>           # \u003Csecrets_path>/\u003Csecret_name>\n        property: value\n",[779,798,796],{"__ignoreMap":781},[711,800,801,802,807],{},"GitLab Secrets ManagerとESOを実際に組み合わせる手順は、",[718,803,806],{"href":804,"rel":805},"https://gitlab.com/guided-explorations/secrets-management/gitlab-secrets-manager-with-eso-and-k3s",[],"チュートリアル","で紹介しています。",[749,809,811],{"id":810},"infrastructure-as-codeterraformとopentofu","Infrastructure as Code：TerraformとOpenTofu",[711,813,814,815,818,819,821],{},"Terraformのstateや",[779,816,817],{},".tfvars","ファイルは、認証情報の流出経路になりやすい場所です。シークレットがそのままディスクに書き出されたり、気づかないうちにバージョン管理へコミットされたりするためです。回避策となるのが、GitLabのシークレットをデータソースとして読み込む方法。planやapplyの実行時に発行したJWTで認証します。Terraformから直接参照する形にすれば、",[779,820,817],{},"ファイルにもCI/CD変数にも認証情報を残さずに済みます。",[772,823,827],{"className":824,"code":825,"language":826,"meta":781,"style":781},"language-shell shiki shiki-themes github-light","data \"external\" \"gitlab_secrets_token\" {\n  program = [\"bash\", \"${path.module}/scripts/mint_token.sh\"]\n\n  query = {\n    project_id = var.gitlab_project_id\n  }\n}\n\nprovider \"vault\" {\n  address   = data.external.gitlab_secrets_token.result.server\n  namespace = data.external.gitlab_secrets_token.result.namespace\n\n  auth_login_jwt {\n    mount = data.external.gitlab_secrets_token.result.auth_path\n    role  = data.external.gitlab_secrets_token.result.role\n    jwt   = data.external.gitlab_secrets_token.result.jwt\n  }\n}\n\ndata \"vault_kv_secret_v2\" \"my_secret\" {\n  mount = data.external.gitlab_secrets_token.result.mount\n  name  = \"${data.external.gitlab_secrets_token.result.secrets_path}/\u003Csecret_name>\"\n}\n\noutput \"secret_value\" {\n  value     = data.vault_kv_secret_v2.my_secret.data[\"value\"]\n  sensitive = true\n}\n","shell",[779,828,829,848,882,888,898,909,915,921,926,937,949,960,965,973,984,996,1007,1012,1017,1022,1035,1046,1082,1087,1092,1103,1115,1127],{"__ignoreMap":781},[830,831,834,838,842,845],"span",{"class":832,"line":833},"line",1,[830,835,837],{"class":836},"s7eDp","data",[830,839,841],{"class":840},"sYBdl"," \"external\"",[830,843,844],{"class":840}," \"gitlab_secrets_token\"",[830,846,847],{"class":840}," {\n",[830,849,851,854,857,861,864,867,870,873,876,879],{"class":832,"line":850},2,[830,852,853],{"class":836},"  program",[830,855,856],{"class":840}," =",[830,858,860],{"class":859},"sgsFI"," [",[830,862,863],{"class":840},"\"bash\"",[830,865,866],{"class":859},", ",[830,868,869],{"class":840},"\"${",[830,871,872],{"class":859},"path",[830,874,875],{"class":840},".",[830,877,878],{"class":859},"module",[830,880,881],{"class":840},"}/scripts/mint_token.sh\"]\n",[830,883,885],{"class":832,"line":884},3,[830,886,887],{"emptyLinePlaceholder":15},"\n",[830,889,891,894,896],{"class":832,"line":890},4,[830,892,893],{"class":836},"  query",[830,895,856],{"class":840},[830,897,847],{"class":840},[830,899,901,904,906],{"class":832,"line":900},5,[830,902,903],{"class":836},"    project_id",[830,905,856],{"class":840},[830,907,908],{"class":840}," var.gitlab_project_id\n",[830,910,912],{"class":832,"line":911},6,[830,913,914],{"class":859},"  }\n",[830,916,918],{"class":832,"line":917},7,[830,919,920],{"class":859},"}\n",[830,922,924],{"class":832,"line":923},8,[830,925,887],{"emptyLinePlaceholder":15},[830,927,929,932,935],{"class":832,"line":928},9,[830,930,931],{"class":836},"provider",[830,933,934],{"class":840}," \"vault\"",[830,936,847],{"class":840},[830,938,940,943,946],{"class":832,"line":939},10,[830,941,942],{"class":836},"  address",[830,944,945],{"class":840},"   =",[830,947,948],{"class":840}," data.external.gitlab_secrets_token.result.server\n",[830,950,952,955,957],{"class":832,"line":951},11,[830,953,954],{"class":836},"  namespace",[830,956,856],{"class":840},[830,958,959],{"class":840}," data.external.gitlab_secrets_token.result.namespace\n",[830,961,963],{"class":832,"line":962},12,[830,964,887],{"emptyLinePlaceholder":15},[830,966,968,971],{"class":832,"line":967},13,[830,969,970],{"class":836},"  auth_login_jwt",[830,972,847],{"class":840},[830,974,976,979,981],{"class":832,"line":975},14,[830,977,978],{"class":836},"    mount",[830,980,856],{"class":840},[830,982,983],{"class":840}," data.external.gitlab_secrets_token.result.auth_path\n",[830,985,987,990,993],{"class":832,"line":986},15,[830,988,989],{"class":836},"    role",[830,991,992],{"class":840},"  =",[830,994,995],{"class":840}," data.external.gitlab_secrets_token.result.role\n",[830,997,999,1002,1004],{"class":832,"line":998},16,[830,1000,1001],{"class":836},"    jwt",[830,1003,945],{"class":840},[830,1005,1006],{"class":840}," data.external.gitlab_secrets_token.result.jwt\n",[830,1008,1010],{"class":832,"line":1009},17,[830,1011,914],{"class":859},[830,1013,1015],{"class":832,"line":1014},18,[830,1016,920],{"class":859},[830,1018,1020],{"class":832,"line":1019},19,[830,1021,887],{"emptyLinePlaceholder":15},[830,1023,1025,1027,1030,1033],{"class":832,"line":1024},20,[830,1026,837],{"class":836},[830,1028,1029],{"class":840}," \"vault_kv_secret_v2\"",[830,1031,1032],{"class":840}," \"my_secret\"",[830,1034,847],{"class":840},[830,1036,1038,1041,1043],{"class":832,"line":1037},21,[830,1039,1040],{"class":836},"  mount",[830,1042,856],{"class":840},[830,1044,1045],{"class":840}," data.external.gitlab_secrets_token.result.mount\n",[830,1047,1049,1052,1054,1057,1059,1061,1064,1066,1069,1071,1074,1076,1079],{"class":832,"line":1048},22,[830,1050,1051],{"class":836},"  name",[830,1053,992],{"class":840},[830,1055,1056],{"class":840}," \"${",[830,1058,837],{"class":859},[830,1060,875],{"class":840},[830,1062,1063],{"class":859},"external",[830,1065,875],{"class":840},[830,1067,1068],{"class":859},"gitlab_secrets_token",[830,1070,875],{"class":840},[830,1072,1073],{"class":859},"result",[830,1075,875],{"class":840},[830,1077,1078],{"class":859},"secrets_path",[830,1080,1081],{"class":840},"}/\u003Csecret_name>\"\n",[830,1083,1085],{"class":832,"line":1084},23,[830,1086,920],{"class":859},[830,1088,1090],{"class":832,"line":1089},24,[830,1091,887],{"emptyLinePlaceholder":15},[830,1093,1095,1098,1101],{"class":832,"line":1094},25,[830,1096,1097],{"class":836},"output",[830,1099,1100],{"class":840}," \"secret_value\"",[830,1102,847],{"class":840},[830,1104,1106,1109,1112],{"class":832,"line":1105},26,[830,1107,1108],{"class":836},"  value",[830,1110,1111],{"class":840},"     =",[830,1113,1114],{"class":840}," data.vault_kv_secret_v2.my_secret.data[\"value\"]\n",[830,1116,1118,1121,1123],{"class":832,"line":1117},27,[830,1119,1120],{"class":836},"  sensitive",[830,1122,856],{"class":840},[830,1124,1126],{"class":1125},"sYu0t"," true\n",[830,1128,1130],{"class":832,"line":1129},28,[830,1131,920],{"class":859},[711,1133,1134,1139],{},[718,1135,1138],{"href":1136,"rel":1137},"https://docs.gitlab.com/ja-jp/ci/secrets/secrets_manager/non_cicd_access/#use-with-terraform",[],"Terraformでシークレットを読み取る方法","は、ドキュメントで詳しく解説しています。",[749,1141,1143],{"id":1142},"コマンドラインopenbaoまたはvault-cli","コマンドライン：OpenBaoまたはVault CLI",[711,1145,1146],{},"すべてのワークフローがAPIを直接呼び出すわけではありません。Vault互換のツールを前提にスクリプトを組んでいるチームなら、OpenBaoまたはVault CLIがそのまま使えます。手順はVaultから読み取るときと同じ。GitLab Secrets Managerのシークレットをそのまま取得できます。",[772,1148,1150],{"className":824,"code":1149,"language":826,"meta":781,"style":781},"export VAULT_ADDR=\"\u003Cserver>\"\nexport VAULT_NAMESPACE=\"\u003Cnamespace>\"\n\n# Exchange the minted JWT for an OpenBao token, then export it.\nvault write \"auth/\u003Cauth_jwt_path>/login\" role=\u003Crole> jwt=\u003Ctoken>\nexport VAULT_TOKEN=\"\u003Cclient_token>\"\n\n# Read the secret value.\nvault kv get -mount=\u003Cpath> \"\u003Csecrets_path>/\u003Csecret_name>\"\n",[779,1151,1152,1167,1179,1183,1189,1229,1241,1245,1250],{"__ignoreMap":781},[830,1153,1154,1158,1161,1164],{"class":832,"line":833},[830,1155,1157],{"class":1156},"sD7c4","export",[830,1159,1160],{"class":859}," VAULT_ADDR",[830,1162,1163],{"class":1156},"=",[830,1165,1166],{"class":840},"\"\u003Cserver>\"\n",[830,1168,1169,1171,1174,1176],{"class":832,"line":850},[830,1170,1157],{"class":1156},[830,1172,1173],{"class":859}," VAULT_NAMESPACE",[830,1175,1163],{"class":1156},[830,1177,1178],{"class":840},"\"\u003Cnamespace>\"\n",[830,1180,1181],{"class":832,"line":884},[830,1182,887],{"emptyLinePlaceholder":15},[830,1184,1185],{"class":832,"line":890},[830,1186,1188],{"class":1187},"sAwPA","# Exchange the minted JWT for an OpenBao token, then export it.\n",[830,1190,1191,1194,1197,1200,1203,1206,1209,1212,1215,1218,1220,1223,1226],{"class":832,"line":900},[830,1192,1193],{"class":836},"vault",[830,1195,1196],{"class":840}," write",[830,1198,1199],{"class":840}," \"auth/\u003Cauth_jwt_path>/login\"",[830,1201,1202],{"class":840}," role=",[830,1204,1205],{"class":1156},"\u003C",[830,1207,1208],{"class":840},"rol",[830,1210,1211],{"class":859},"e",[830,1213,1214],{"class":1156},">",[830,1216,1217],{"class":840}," jwt=",[830,1219,1205],{"class":1156},[830,1221,1222],{"class":840},"toke",[830,1224,1225],{"class":859},"n",[830,1227,1228],{"class":1156},">\n",[830,1230,1231,1233,1236,1238],{"class":832,"line":911},[830,1232,1157],{"class":1156},[830,1234,1235],{"class":859}," VAULT_TOKEN",[830,1237,1163],{"class":1156},[830,1239,1240],{"class":840},"\"\u003Cclient_token>\"\n",[830,1242,1243],{"class":832,"line":917},[830,1244,887],{"emptyLinePlaceholder":15},[830,1246,1247],{"class":832,"line":923},[830,1248,1249],{"class":1187},"# Read the secret value.\n",[830,1251,1252,1254,1257,1260,1263,1265,1267,1269],{"class":832,"line":928},[830,1253,1193],{"class":836},[830,1255,1256],{"class":840}," kv",[830,1258,1259],{"class":840}," get",[830,1261,1262],{"class":1125}," -mount=",[830,1264,1205],{"class":1156},[830,1266,872],{"class":1125},[830,1268,1214],{"class":1156},[830,1270,1271],{"class":840}," \"\u003Csecrets_path>/\u003Csecret_name>\"\n",[749,1273,1275],{"id":1274},"secrets-manager-apiを使うケース","Secrets Manager APIを使うケース",[711,1277,1278,1279,1282],{},"GitLab CI/CD、Kubernetes、Terraformのどれにも当てはまらない自動化には、",[718,1280,746],{"href":744,"rel":1281},[],"という選択肢があります。認証情報をハードコーディングしたり、変数ファイルを別途用意したりしなくても、任意の外部システムからSecrets Managerのシークレットを取得できます。",[772,1284,1286],{"className":824,"code":1285,"language":826,"meta":781,"style":781},"# Request JWT token using Service Account\nRESPONSE=$(curl --silent --request POST \\\n  --header \"PRIVATE-TOKEN: \u003Cyour_access_token>\" \\\n  --url \"https://gitlab.example.com/api/v4/projects/\u003Cproject_id>/secrets_manager/access_token\")\n\nSERVER=$(echo \"$RESPONSE\" | jq --raw-output .provider.vault.server)\nNAMESPACE=$(echo \"$RESPONSE\" | jq --raw-output .provider.vault.namespace)\nMOUNT=$(echo \"$RESPONSE\" | jq --raw-output .provider.vault.path)\nSECRETS_PATH=$(echo \"$RESPONSE\" | jq --raw-output .provider.vault.secrets_path)\nAUTH_PATH=$(echo \"$RESPONSE\" | jq --raw-output .provider.vault.auth.jwt.path)\nROLE=$(echo \"$RESPONSE\" | jq --raw-output .provider.vault.auth.jwt.role)\nJWT=$(echo \"$RESPONSE\" | jq --raw-output .provider.vault.auth.jwt.token)\n\n# Exchange the JWT for a short-lived OpenBao token.\nVAULT_TOKEN=$(curl --silent --request POST \\\n  --header \"X-Vault-Namespace: $NAMESPACE\" \\\n  --data \"{\\\"role\\\":\\\"$ROLE\\\",\\\"jwt\\\":\\\"$JWT\\\"}\" \\\n  \"$SERVER/v1/auth/$AUTH_PATH/login\" | jq --raw-output .auth.client_token)\n\n# Read the secret value.\ncurl --silent \\\n  --header \"X-Vault-Token: $VAULT_TOKEN\" \\\n  --header \"X-Vault-Namespace: $NAMESPACE\" \\\n  \"$SERVER/v1/$MOUNT/data/$SECRETS_PATH/\u003Csecret_name>\"\n",[779,1287,1288,1293,1318,1328,1339,1343,1378,1406,1434,1462,1490,1518,1546,1550,1555,1574,1588,1638,1666,1670,1674,1682,1696,1708],{"__ignoreMap":781},[830,1289,1290],{"class":832,"line":833},[830,1291,1292],{"class":1187},"# Request JWT token using Service Account\n",[830,1294,1295,1298,1300,1303,1306,1309,1312,1315],{"class":832,"line":850},[830,1296,1297],{"class":859},"RESPONSE",[830,1299,1163],{"class":1156},[830,1301,1302],{"class":859},"$(",[830,1304,1305],{"class":836},"curl",[830,1307,1308],{"class":1125}," --silent",[830,1310,1311],{"class":1125}," --request",[830,1313,1314],{"class":840}," POST",[830,1316,1317],{"class":1125}," \\\n",[830,1319,1320,1323,1326],{"class":832,"line":884},[830,1321,1322],{"class":1125},"  --header",[830,1324,1325],{"class":840}," \"PRIVATE-TOKEN: \u003Cyour_access_token>\"",[830,1327,1317],{"class":1125},[830,1329,1330,1333,1336],{"class":832,"line":890},[830,1331,1332],{"class":1125},"  --url",[830,1334,1335],{"class":840}," \"https://gitlab.example.com/api/v4/projects/\u003Cproject_id>/secrets_manager/access_token\"",[830,1337,1338],{"class":859},")\n",[830,1340,1341],{"class":832,"line":900},[830,1342,887],{"emptyLinePlaceholder":15},[830,1344,1345,1348,1350,1352,1355,1358,1361,1364,1367,1370,1373,1376],{"class":832,"line":911},[830,1346,1347],{"class":859},"SERVER",[830,1349,1163],{"class":1156},[830,1351,1302],{"class":859},[830,1353,1354],{"class":1125},"echo",[830,1356,1357],{"class":840}," \"",[830,1359,1360],{"class":859},"$RESPONSE",[830,1362,1363],{"class":840},"\"",[830,1365,1366],{"class":1156}," |",[830,1368,1369],{"class":836}," jq",[830,1371,1372],{"class":1125}," --raw-output",[830,1374,1375],{"class":840}," .provider.vault.server",[830,1377,1338],{"class":859},[830,1379,1380,1383,1385,1387,1389,1391,1393,1395,1397,1399,1401,1404],{"class":832,"line":917},[830,1381,1382],{"class":859},"NAMESPACE",[830,1384,1163],{"class":1156},[830,1386,1302],{"class":859},[830,1388,1354],{"class":1125},[830,1390,1357],{"class":840},[830,1392,1360],{"class":859},[830,1394,1363],{"class":840},[830,1396,1366],{"class":1156},[830,1398,1369],{"class":836},[830,1400,1372],{"class":1125},[830,1402,1403],{"class":840}," .provider.vault.namespace",[830,1405,1338],{"class":859},[830,1407,1408,1411,1413,1415,1417,1419,1421,1423,1425,1427,1429,1432],{"class":832,"line":923},[830,1409,1410],{"class":859},"MOUNT",[830,1412,1163],{"class":1156},[830,1414,1302],{"class":859},[830,1416,1354],{"class":1125},[830,1418,1357],{"class":840},[830,1420,1360],{"class":859},[830,1422,1363],{"class":840},[830,1424,1366],{"class":1156},[830,1426,1369],{"class":836},[830,1428,1372],{"class":1125},[830,1430,1431],{"class":840}," .provider.vault.path",[830,1433,1338],{"class":859},[830,1435,1436,1439,1441,1443,1445,1447,1449,1451,1453,1455,1457,1460],{"class":832,"line":928},[830,1437,1438],{"class":859},"SECRETS_PATH",[830,1440,1163],{"class":1156},[830,1442,1302],{"class":859},[830,1444,1354],{"class":1125},[830,1446,1357],{"class":840},[830,1448,1360],{"class":859},[830,1450,1363],{"class":840},[830,1452,1366],{"class":1156},[830,1454,1369],{"class":836},[830,1456,1372],{"class":1125},[830,1458,1459],{"class":840}," .provider.vault.secrets_path",[830,1461,1338],{"class":859},[830,1463,1464,1467,1469,1471,1473,1475,1477,1479,1481,1483,1485,1488],{"class":832,"line":939},[830,1465,1466],{"class":859},"AUTH_PATH",[830,1468,1163],{"class":1156},[830,1470,1302],{"class":859},[830,1472,1354],{"class":1125},[830,1474,1357],{"class":840},[830,1476,1360],{"class":859},[830,1478,1363],{"class":840},[830,1480,1366],{"class":1156},[830,1482,1369],{"class":836},[830,1484,1372],{"class":1125},[830,1486,1487],{"class":840}," .provider.vault.auth.jwt.path",[830,1489,1338],{"class":859},[830,1491,1492,1495,1497,1499,1501,1503,1505,1507,1509,1511,1513,1516],{"class":832,"line":951},[830,1493,1494],{"class":859},"ROLE",[830,1496,1163],{"class":1156},[830,1498,1302],{"class":859},[830,1500,1354],{"class":1125},[830,1502,1357],{"class":840},[830,1504,1360],{"class":859},[830,1506,1363],{"class":840},[830,1508,1366],{"class":1156},[830,1510,1369],{"class":836},[830,1512,1372],{"class":1125},[830,1514,1515],{"class":840}," .provider.vault.auth.jwt.role",[830,1517,1338],{"class":859},[830,1519,1520,1523,1525,1527,1529,1531,1533,1535,1537,1539,1541,1544],{"class":832,"line":962},[830,1521,1522],{"class":859},"JWT",[830,1524,1163],{"class":1156},[830,1526,1302],{"class":859},[830,1528,1354],{"class":1125},[830,1530,1357],{"class":840},[830,1532,1360],{"class":859},[830,1534,1363],{"class":840},[830,1536,1366],{"class":1156},[830,1538,1369],{"class":836},[830,1540,1372],{"class":1125},[830,1542,1543],{"class":840}," .provider.vault.auth.jwt.token",[830,1545,1338],{"class":859},[830,1547,1548],{"class":832,"line":967},[830,1549,887],{"emptyLinePlaceholder":15},[830,1551,1552],{"class":832,"line":975},[830,1553,1554],{"class":1187},"# Exchange the JWT for a short-lived OpenBao token.\n",[830,1556,1557,1560,1562,1564,1566,1568,1570,1572],{"class":832,"line":986},[830,1558,1559],{"class":859},"VAULT_TOKEN",[830,1561,1163],{"class":1156},[830,1563,1302],{"class":859},[830,1565,1305],{"class":836},[830,1567,1308],{"class":1125},[830,1569,1311],{"class":1125},[830,1571,1314],{"class":840},[830,1573,1317],{"class":1125},[830,1575,1576,1578,1581,1584,1586],{"class":832,"line":998},[830,1577,1322],{"class":1125},[830,1579,1580],{"class":840}," \"X-Vault-Namespace: ",[830,1582,1583],{"class":859},"$NAMESPACE",[830,1585,1363],{"class":840},[830,1587,1317],{"class":1125},[830,1589,1590,1593,1596,1599,1602,1604,1607,1609,1612,1614,1617,1619,1622,1624,1626,1628,1631,1633,1636],{"class":832,"line":1009},[830,1591,1592],{"class":1125},"  --data",[830,1594,1595],{"class":840}," \"{",[830,1597,1598],{"class":1125},"\\\"",[830,1600,1601],{"class":840},"role",[830,1603,1598],{"class":1125},[830,1605,1606],{"class":840},":",[830,1608,1598],{"class":1125},[830,1610,1611],{"class":859},"$ROLE",[830,1613,1598],{"class":1125},[830,1615,1616],{"class":840},",",[830,1618,1598],{"class":1125},[830,1620,1621],{"class":840},"jwt",[830,1623,1598],{"class":1125},[830,1625,1606],{"class":840},[830,1627,1598],{"class":1125},[830,1629,1630],{"class":859},"$JWT",[830,1632,1598],{"class":1125},[830,1634,1635],{"class":840},"}\"",[830,1637,1317],{"class":1125},[830,1639,1640,1643,1646,1649,1652,1655,1657,1659,1661,1664],{"class":832,"line":1014},[830,1641,1642],{"class":840},"  \"",[830,1644,1645],{"class":859},"$SERVER",[830,1647,1648],{"class":840},"/v1/auth/",[830,1650,1651],{"class":859},"$AUTH_PATH",[830,1653,1654],{"class":840},"/login\"",[830,1656,1366],{"class":1156},[830,1658,1369],{"class":836},[830,1660,1372],{"class":1125},[830,1662,1663],{"class":840}," .auth.client_token",[830,1665,1338],{"class":859},[830,1667,1668],{"class":832,"line":1019},[830,1669,887],{"emptyLinePlaceholder":15},[830,1671,1672],{"class":832,"line":1024},[830,1673,1249],{"class":1187},[830,1675,1676,1678,1680],{"class":832,"line":1037},[830,1677,1305],{"class":836},[830,1679,1308],{"class":1125},[830,1681,1317],{"class":1125},[830,1683,1684,1686,1689,1692,1694],{"class":832,"line":1048},[830,1685,1322],{"class":1125},[830,1687,1688],{"class":840}," \"X-Vault-Token: ",[830,1690,1691],{"class":859},"$VAULT_TOKEN",[830,1693,1363],{"class":840},[830,1695,1317],{"class":1125},[830,1697,1698,1700,1702,1704,1706],{"class":832,"line":1084},[830,1699,1322],{"class":1125},[830,1701,1580],{"class":840},[830,1703,1583],{"class":859},[830,1705,1363],{"class":840},[830,1707,1317],{"class":1125},[830,1709,1710,1712,1714,1717,1720,1723,1726],{"class":832,"line":1089},[830,1711,1642],{"class":840},[830,1713,1645],{"class":859},[830,1715,1716],{"class":840},"/v1/",[830,1718,1719],{"class":859},"$MOUNT",[830,1721,1722],{"class":840},"/data/",[830,1724,1725],{"class":859},"$SECRETS_PATH",[830,1727,1728],{"class":840},"/\u003Csecret_name>\"\n",[749,1730,1731],{"id":1731},"始めるには",[711,1733,1734,1739],{},[718,1735,1738],{"href":1736,"rel":1737},"https://about.gitlab.com/ja-jp/blog/secrets-manager-in-public-beta/",[],"GitLab Secrets Managerは、PremiumおよびUltimateのお客様向けにパブリックベータとして提供中","です。ESO、Terraform、APIによるシークレットへのアクセスに対応しているのは、現時点でGitLab.comとGitLab Self-Managed。GitLab Dedicatedへの対応も近日中を予定しています。",[711,1741,1742,1743,1748],{},"ベータ期間中は無料でご利用いただけます。一般提供の開始後は、",[718,1744,1747],{"href":1745,"rel":1746},"https://docs.gitlab.com/ja-jp/subscriptions/gitlab_credits/",[],"GitLabクレジット","による課金対象の有料機能となる予定。課金が始まる前にはオプトインが必要で、事前にご案内します。",[711,1750,1751,1752,1756,1757,1762],{},"まずは",[718,1753,1755],{"href":720,"rel":1754},[],"ドキュメント","をご覧ください。足りない点やご要望があれば、",[718,1758,1761],{"href":1759,"rel":1760},"https://gitlab.com/gitlab-org/gitlab/-/work_items/598100",[],"こちらのイシュー","へお寄せください。一般提供に向けて、フィードバックを集めています。",[1764,1765,1766],"style",{},"html pre.shiki code .s7eDp, html code.shiki .s7eDp{--shiki-default:#6F42C1}html pre.shiki code .sYBdl, html code.shiki .sYBdl{--shiki-default:#032F62}html pre.shiki code .sgsFI, html code.shiki .sgsFI{--shiki-default:#24292E}html pre.shiki code .sYu0t, html code.shiki .sYu0t{--shiki-default:#005CC5}html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html pre.shiki code .sD7c4, html code.shiki .sD7c4{--shiki-default:#D73A49}html pre.shiki code .sAwPA, html code.shiki .sAwPA{--shiki-default:#6A737D}",{"title":781,"searchDepth":850,"depth":850,"links":1768},[1769,1770,1771,1772,1773],{"id":751,"depth":884,"text":752},{"id":810,"depth":884,"text":811},{"id":1142,"depth":884,"text":1143},{"id":1274,"depth":884,"text":1275},{"id":1731,"depth":884,"text":1731},"2026-08-06","スタック全体の認証情報管理をシンプルに。GitLab Secrets Managerは External Secrets Operator（ESO）、Terraform、Secrets Manager APIに対応し、CI/CD以外の ワークフローからもシークレットを安全に取得できます。","md","https://res.cloudinary.com/about-gitlab-com/image/upload/v1759320418/xjmqcozxzt4frx0hori3.png",{},"/ja-jp/blog/gitlab-secrets-manager-add-eso-terraform-api-support",{"config":1781,"title":703,"description":1775},{"noIndex":10},"gitlab-secrets-manager-add-eso-terraform-api-support","ja-jp/blog/gitlab-secrets-manager-add-eso-terraform-api-support",[9,1785,1786],"features","product","BlogPost","2026-08-07","KNsLXHzeIpgsAu8BZipUK1_WPDErx0A29u54BOqx1TQ",[1791,1798],{"title":1792,"heroImage":1793,"category":9,"description":1794,"authors":1795,"slug":1797,"externalUrl":6},"SBOMとは？セキュリティとの関連性を含めた完全ガイド","https://res.cloudinary.com/about-gitlab-com/image/upload/v1749664571/Blog/Hero%20Images/blog-image-template-1800x945__8_.png","SBOM（ソフトウェア部品表）がソフトウェア開発の管理やセキュリティに与える影響等について様々な観点から学びましょう。",[1796],"Sandra Gittlen","the-ultimate-guide-to-sboms",{"title":1799,"heroImage":1800,"category":9,"description":1801,"authors":1802,"slug":1805,"externalUrl":6},"GitLabで職務分離を実現し、コンプライアンスを遵守する方法","https://res.cloudinary.com/about-gitlab-com/image/upload/v1750098232/Blog/Hero%20Images/Blog/Hero%20Images/AdobeStock_479904468%20%281%29_4lmOEVlaXP0YC3hSFmOw6i_1750098232241.jpg","DevSecOpsプラットフォームを使用して開発速度を保ったまま、コンプライアンスを遵守しましょう。",[1803,1804],"Beatriz Barbosa","Fernando Diaz","ensuring-compliance",1786803790099]