投稿時間:2020-05-15 09:33:13 RSSフィード2020-05-15 09:00 分まとめ(43件)

カテゴリー等	サイト名等	記事タイトル・トレンドワード等	リンクURL	頻出ワード・要約等/検索ボリューム	登録日
IT	気になる、記になる…	Apple、スポーツや音楽のVR配信を提供するNextVRを買収	https://taisy0.com/2020/05/15/121679.html	apple	2020-05-14 23:23:01
IT	気になる、記になる…	Apple、｢Safari Technology Preview 106｣をリリース	https://taisy0.com/2020/05/15/121677.html	apple	2020-05-14 23:10:38
TECH	Engadget Japanese	紐靴なのに結ばない、履くのも脱ぐのもカンタンな特殊樹脂製の靴紐「Xpand」	https://japanese.engadget.com/jp-2020-05-14-xpand.html	xpand	2020-05-14 23:30:00
TECH	Engadget Japanese	LINE Payのポイント還元はなぜクレジットカード限定になってしまったのか（佐野正弘）	https://japanese.engadget.com/line-pay-230009212.html	linepay	2020-05-14 23:00:09
IT	＠IT System Designフォーラム 最新記事一覧	Google Cloud、「Google Cloud VMware Engine」を米国で一般提供開始へ、2020年後半には東京にも展開	https://www.atmarkit.co.jp/ait/articles/2005/15/news056.html	GoogleCloud、「GoogleCloudVMwareEngine」を米国で一般提供開始へ、年後半には東京にも展開GoogleCloudは年月日米国時間、GoogleCloudPlatform上でVMwareインフラを自動構築できる「GoogleCloudVMwareEngine」の一般提供を、年第四半期中に米国で開始すると発表した。	2020-05-15 08:30:00
IT	＠IT 全フォーラム 最新記事一覧	Google Cloud、「Google Cloud VMware Engine」を米国で一般提供開始へ、2020年後半には東京にも展開	https://www.atmarkit.co.jp/ait/articles/2005/15/news056.html	GoogleCloud、「GoogleCloudVMwareEngine」を米国で一般提供開始へ、年後半には東京にも展開GoogleCloudは年月日米国時間、GoogleCloudPlatform上でVMwareインフラを自動構築できる「GoogleCloudVMwareEngine」の一般提供を、年第四半期中に米国で開始すると発表した。	2020-05-15 08:30:00
IT	ITmedia 総合記事一覧	[ITmedia News] Appleの「MacBook Pro (13-inch, 2020, Four Thunderbolt 3 Ports) 」をマニアックに調べてみた	https://www.itmedia.co.jp/news/articles/2005/15/news045.html	inchfourthunderboltports	2020-05-15 08:54:00
IT	ITmedia 総合記事一覧	[ITmedia ビジネスオンライン] コロナで「減損先送り」が“合法的な粉飾決算”とならないために	https://www.itmedia.co.jp/business/articles/2005/15/news024.html	itmedia	2020-05-15 08:10:00
TECH	Techable（テッカブル）	HUAWEI nova 5T実機レビュー：スペシャルな紫色で、誰ともかぶらない個性を持ち歩こう	https://techable.jp/archives/122725	huaweinovat	2020-05-14 23:00:16
js	JavaScriptタグが付けられた新着投稿 - Qiita	お絵かきできるSNSを作りたい！7	https://qiita.com/cardcapt/items/5a00c0d3568e84592c78	お絵かきできるSNSを作りたい線の太さを実装していきたいと思います。	2020-05-15 08:18:33
js	JavaScriptタグが付けられた新着投稿 - Qiita	お絵かきできるSNSを作りたい！6	https://qiita.com/cardcapt/items/0a323d0916c1c0f905dc	↓この部分このままでも良いのですが、好きな色を追加出来る用にもした方がいい気がしてきたのでその他というパレットも用意します。	2020-05-15 08:04:55
Program	[全てのタグ]の新着質問一覧｜teratail（テラテイル）	stopwatchの結果を評価したい	https://teratail.com/questions/261726?rss=all		2020-05-15 08:56:30
Program	[全てのタグ]の新着質問一覧｜teratail（テラテイル）	display:none→block　にtransitionを設定したい場合	https://teratail.com/questions/261725?rss=all	displaynone→blockにtransitionを設定したい場合jQueryを使用して、タブメニュー造りの練習をしています。	2020-05-15 08:55:33
Program	[全てのタグ]の新着質問一覧｜teratail（テラテイル）	[Ruby on Rails]image_tag表示できない	https://teratail.com/questions/261724?rss=all	RubyonRailsimagetag表示できないimagetagでプロフィール画像を表示させようと試みていますが、以下のようなエラーが表示されます。	2020-05-15 08:48:43
Program	[全てのタグ]の新着質問一覧｜teratail（テラテイル）	lightgbm のverbose パラメータが機能しない	https://teratail.com/questions/261723?rss=all	該当のソースコードパラメータの設定は以下のようにしています。	2020-05-15 08:46:55
Program	[全てのタグ]の新着質問一覧｜teratail（テラテイル）	html,css:見出し機能の用語	https://teratail.com/questions/261722?rss=all	htmlcss	2020-05-15 08:46:21
Program	[全てのタグ]の新着質問一覧｜teratail（テラテイル）	Laravel Eloquentのデータ取得について	https://teratail.com/questions/261721?rss=all	LaravelEloquentのデータ取得についてLaravelのEloquentのデータ取得についてDBからデータの取得方法について困っています。	2020-05-15 08:23:07
Program	[全てのタグ]の新着質問一覧｜teratail（テラテイル）	Dockerでコンテナ内にbundle install されない	https://teratail.com/questions/261720?rss=all	Dockerでコンテナ内にbundleinstallされないDockerの知識がなく質問しています、すみませんdockerでアプリケーションを立ち上げる時bundlenbspinstallnbsppathnbspvendorbundleとでているのですがローカルのnbspvendercacheにインストールされてしまいます。	2020-05-15 08:09:29
技術ブログ	Developers.IO	静的WebサイトからLambdaを実行する様子をNew Relicの分散トレーシングで計測してみた	https://dev.classmethod.jp/articles/instrument-spa-and-lambda-with-newrelic-distributed-tracing/	awslambda	2020-05-14 23:57:04
技術ブログ	Developers.IO	汎用プログラミング言語でKubernetesのYAMLを生成するcdk8sが発表されました！	https://dev.classmethod.jp/articles/end-yaml-with-cdk8s/	introducingthecdkforkub	2020-05-14 23:51:04
海外TECH	DEV Community	Practical advice on specifying more granular permissions with Google Cloud IAM	https://dev.to/googlecloud/practical-advice-on-specifying-more-granular-permissions-with-google-cloud-iam-436l	Practical advice on specifying more granular permissions with Google Cloud IAMIn our last post we discussed some ways you could go about working out the minimum viable permissions you needed to deploy your application keeping in mind the principle of least privilege In this post we ll show a practical example of these concepts using a sample automation working through how to determine what services are used and what roles and permissions are required We ll use a four step Cloud Build automation as an example cloudbuild yamlsteps id build name gcr io cloud builders docker args build t gcr io PROJECT ID myservice id push name gcr io cloud builders docker args push gcr io PROJECT ID myservice id migrate name gcr io google appengine exec wrapper args i gcr io PROJECT ID myservice s PROJECT ID us central psql python manage py migrate id deploy name gcr io cloud builders gcloud args run deploy service platform managed region us central image gcr io PROJECT ID myservice When run with gcloud builds submit this configuration will tell Cloud Build perform four actions step build a container image step push that container image to the Google Container Repository gcr io step run a migrate action against a Cloud SQL database and step deploy a Cloud Run service This setup does assume that the Cloud SQL instance and Cloud Run service already exist This may seem like a throwaway line but it s important to note In this example Cloud Build isn t creating the instance so not only should the instance already exist but Cloud Build doesn t need rights to create an instance Same with the Cloud Run service only permission to run deploy needs to be granted By default Cloud Build only gets the Cloud Build Service Account role not anything related to Cloud Run or other products Another thing to note While I may describe Cloud Build doing something it s actually the service account entity that Cloud Build uses that is performing the operations But having to use the term The Cloud Build Service Account Entity is too long so I ll just be using Cloud Build If we attempt to run this build with just the base role for Cloud Build it will not succeed failing on step gcloud builds submit Step migrate django db utils OperationalError could not connect to server No such file or directorySo what permissions does Cloud Build need to execute this configuration First let s see what it has already then work out what more it needs The best place is to start with the configuration of the main product we re dealing with Checking the Cloud Build settings in the Cloud Console it details a few things The service account email is PROJECTNUM cloudbuild gserviceaccount com and useful documentation about what permissions it does and does not have For our purposes these points stick out Cloud Build has permission to push and pull images from Container Registry that s step push covered save build logs in Cloud Logging also useful to be able to see the results of the build Cloud Build does not have permission to do other things like deploying to App Engine manage Compute Engine accessing Cloud Storage bucketsThere are also details about how to grant these permissions For our purposes it suggests that for Cloud Run it should get the Cloud Run Admin role There s also docs in Cloud Build backing this up But what does the Cloud Run Admin role do Checking the list of roles for our project we can search for Cloud Run and look at the permissions Cloud Run Admin roles run admin lists resourcemanager projects get resourcemanager projects list run configurations get run configurations list run locations list run revisions delete run revisions get run revisions list run routes get run routes invoke run routes list run services create run services delete run services get run services getIamPolicy run services list run services setIamPolicy run services updateThat s quite a few permissions including some we don t immediately recognise for example resourcemanager It s best to leave those permissions alone But from what we do recognise those run services permissions some of those look like they grant too much for our circumstances For instance we probably don t want Cloud Build to have the ability to delete services run services delete Consider the step we failed on Step migrate Performing this action requires access to the database so we need to connect to Cloud SQL Looking through the Cloud SQL roles there s an entry for Cloud SQL Client roles cloudsql client cloudsql instances connect cloudsql instances getThis seems to fit our purposes well It allows connecting to the instance but it also allows to get details on this instance which is probably also useful when connecting So we ve determined that we need the Cloud SQL Client role and a subset of permissions form the Cloud Run Admin role We could just assign these roles to Cloud Build or we can create a custom role containing just the permissions we need Starting with all the permissions from these two roles we can check if our build succeeds then remove extra permissions testing each time until we have the minimum set of permissions we are comfortable with To start let s create a new role copying from Cloud Run Admin copying in the two Cloud SQL Client permissions then assign that role to Cloud Build PROJECT ID gcloud config get value project gcloud iam roles copy source roles run admin dest project PROJECT ID destination MinimumDeploydescription Full control over all Cloud Run resources etag BwWlGpkePM includedPermissions includedPermissions resourcemanager projects get run configurations get name projects PROJECT roles MinimumDeploystage ALPHAtitle Cloud Run Admin gcloud iam roles update MinimumDeploy project PROJECT ID add permissions cloudsql instances connect cloudsql instances getLet s also clean up that title and description while we re here gcloud iam roles describe MinimumDeployERROR gcloud iam roles describe Missing required argument organization or project Should specify the project or organization name for custom roles This error message is an important thing to note this is a custom role so we need to specify our project in all of this since it s unique to our project gcloud iam roles update MinimumDeploy project PROJECT ID title Minimum Deploy description Minimum permissions for Cloud Build custom service deployment description Minimum permissions for Cloud Build custom service deployment etag BwWlG qSY includedPermissions resourcemanager projects get run configurations get name projects PROJECT ID roles MinimumDeploystage ALPHAtitle Minimum Deploy Let s assign this new role to Cloud Build and try our build again Generate the value of the Cloud Build service account emailexport PROJECTNUM gcloud projects describe PROJECT ID format value projectNumber export CLOUDBUILD PROJECTNUM cloudbuild gserviceaccount com Get the fully qualified custom role nameMINIMUMDEPLOY gcloud iam roles describe MinimumDeploy project PROJECT ID format value name Bind the role as a member of Cloud Buildgcloud projects add iam policy binding PROJECT ID member serviceAccount CLOUDBUILD role MINIMUMDEPLOY gcloud builds submit Finished Step migrate Starting Step deploy Step deploy Already have image with digest gcr io cloud builders gcloudStep deploy ERROR gcloud run deploy PERMISSION DENIED Permission iam serviceaccounts actAs denied on service account serivce PROJECT ID iam gserviceaccount com or it may not exist Finished Step deploy The migrate step succeeded But it failed on the final deploy step But that s okay because thanks to the build logs we have the exact issue we are lacking a iam serviceaccounts actAs permission Let s go back to the documentation and see if we missed something Ah Grant the IAM Service Account User role to the Cloud Build service account on the Cloud Run runtime service account This is important The service that is being deployed isn t owned by Cloud Build We need to grant Cloud Build to do things on behalf of the service account that owns our Cloud Run service So what s that account We can check by describing the service and searching for the service account gcloud run services describe myservice format json grep serviceAccount serviceAccountName myservice PROJECT ID iam gserviceaccount com Ah good thing we checked This deployment isn t using the default compute service account but a custom service account So let s add Cloud Build as a user of that service account SERVICEACCT myservice PROJECT ID iam gserviceaccount com gcloud iam service accounts add iam policy binding SERVICEACCT member serviceAccount CLOUDBUILD role roles iam serviceAccountUser And try our build again gcloud builds submit Step deploy Service myservice revision myservice miw has been deployedand is serving percent of traffic at https myservice lt hash gt uc a run appFinished Step deploy Success We have deployed our service Now that we know the superset of permissions we need we can go about removing the permissions we do not want namely those delete permissions gcloud iam roles update MinimumDeploy project PROJECT ID remove permissions run services deletegcloud iam roles update MinimumDeploy project PROJECT ID remove permissions run revisions deleteAnd trying the build again gcloud build submitStep deploy Service myservice revision myservice waj has been deployedand is serving percent of traffic at https serivce lt hash gt uc a run appFinished Step deploy We are still able to successfully deploy but Cloud Build has reduced permissions By starting with the documented recommendations we were able to get our deployment working then go about reducing the permissions that the service account had for our specific use case This same methodology can be used outside of the specific services used in this example but when working through this process for your own deployment ensure that you read understand and follow both the documentation and error messages throughout the process Cheat sheet gcloud commands gcloud iam roles describe gcloud iam roles copy gcloud iam roles update gcloud projects add iam policy binding Learn more Advice on specifying more granular permissions with Google Cloud IAM Product specific Cloud IAM documentation	2020-05-14 23:17:24
Apple	AppleInsider - Frontpage News	Apple issues fifth watchOS 6.2.5 beta to developers	https://appleinsider.com/articles/20/05/14/apple-issues-fifth-watchos-625-beta-to-developers	Apple issues fifth watchOS beta to developersApple on Thursday issued a fifth beta version of watchOS to developers with the new iteration arriving one week after a fourth version was made available for testing	2020-05-14 23:57:08
Apple	AppleInsider - Frontpage News	T-Mobile to wind down Sprint consumer brand this summer	https://appleinsider.com/articles/20/05/14/t-mobile-to-wind-down-sprint-consumer-brand-this-summer	T Mobile to wind down Sprint consumer brand this summerAfter finalizing a long and drawn out merger process in April T Mobile this week said it plans to discontinue the Sprint brand in mid summer as it unifies the two companies enterprise and consumer segments	2020-05-14 23:32:47
海外TECH	Engadget	Steam uses AI to find interesting games you already own	https://www.engadget.com/steam-play-next-machine-learning-235313101.html	Steam uses AI to find interesting games you already ownValve launched Steam Labs late last year as a way to test out new features for its PC games store While it already brought the machine learning based Interactive Recommender from Labs to the regular Library the latest client update adds a wrinkle w	2020-05-14 23:53:13
海外科学	NYT > Science	‘It Could Happen Anytime’: Scientists Warn of Alaska Tsunami Threat	https://www.nytimes.com/2020/05/14/climate/alaska-landslide-tsunami.html	decades	2020-05-14 23:25:51
海外科学	NYT > Science	Coronavirus Live Updates: Virus Response Widens Political Divide in Swing States	https://www.nytimes.com/2020/05/14/us/coronavirus-news-updates.html	Coronavirus Live Updates Virus Response Widens Political Divide in Swing StatesA whistle blower told a House subcommittee that “lives were lost because the administration was too slow in preparing for the pandemic Even talking can propel the droplets that spread the virus a study suggests	2020-05-14 23:55:27
海外科学	NYT > Science	Live Coronavirus World News Updates	https://www.nytimes.com/2020/05/14/world/live-coronavirus-tracker.html	Live Coronavirus World News UpdatesThe pandemic may claim millions of indirect victims by blocking vaccinations and other medical care And it is reaching into some of the world s most vulnerable communities	2020-05-14 23:37:44
医療系	内科開業医のお勉強日記	COPDにおける吸気時声帯閉塞	https://kaigyoi.blogspot.com/2020/05/copd_15.html	この知見は、少なくとも一部のCOPD患者ではVCDが症状を複合化させる可能性があることを示唆しており、この点についても今後の研究が必要である。	2020-05-14 23:31:00
金融	日本銀行：RSS	企業物価指数（4月）	http://www.boj.or.jp/statistics/pi/cgpi_release/cgpi2004.pdf	企業物価指数	2020-05-15 08:50:00
ニュース	BBC News - Home	Newspaper headlines: 'Game changer' test and 19m 'may have had virus'	https://www.bbc.co.uk/news/blogs-the-papers-52670707	front	2020-05-14 23:05:12
GCP	Google Cloud Platform Japan 公式ブログ	管理者の皆様へ: パスワード アラートで企業の認証情報を保護する	https://cloud.google.com/blog/ja/products/chrome-enterprise/protecting-enterprise-credentials-with-password-alert/	アクティブ検出モードアクティブ検出モードをオンにすると、ホワイトリストに登録されていないウェブサイトやフィッシングサイトでユーザーが会社の認証情報を再利用しようとしたときに、パスワードアラートによって警告が表示されます。	2020-05-15 01:00:00
北海道	北海道新聞	梅干し毎日１個で健康効果を実感　和歌山の振興団体がモニター調査	https://www.hokkaido-np.co.jp/article/421113/	和歌山県田辺市	2020-05-15 08:46:00
北海道	北海道新聞	米、コロナでインサイダー疑惑　上院の委員長が一時離職を表明	https://www.hokkaido-np.co.jp/article/421112/	特別委員会	2020-05-15 08:46:00
北海道	北海道新聞	米マック、３０分ごとに除菌　再開指針策定、座席数減も	https://www.hokkaido-np.co.jp/article/421111/	除菌	2020-05-15 08:46:00
北海道	北海道新聞	ＮＹ証取、２６日から一部再開　約２カ月ぶり、３月から電子取引	https://www.hokkaido-np.co.jp/article/421110/	電子	2020-05-15 08:45:00
北海道	北海道新聞	ポールさんら音源、競売に　未発表曲を英国で	https://www.hokkaido-np.co.jp/article/421096/	元メンバー	2020-05-15 08:46:14
北海道	北海道新聞	米上院、ウイグル人権法案を可決　中国の反発必至、対立激化	https://www.hokkaido-np.co.jp/article/421104/	新疆ウイグル自治区	2020-05-15 08:26:14
ビジネス	東洋経済オンライン	東大生が｢難しい本もスラスラ読めちゃう｣ワケ 3つの｢読むべきポイント｣で誰にでもできる | リーダーシップ・教養・資格・スキル | 東洋経済オンライン	https://toyokeizai.net/articles/-/349449?utm_source=rss&utm_medium=http&utm_campaign=link_back	東洋経済オンライン	2020-05-15 08:10:00
ニュース	Newsweek	感染者急増するロシアはコロナ対中包囲網にどう対応するか──モスクワ便り	https://www.newsweekjapan.jp/stories/world/2020/05/post-93412.php	したがって現在のコロナの状況で言うならば、アメリカなどヵ国が「国家」として「中国」を訴えて裁判が進行し判決が出ても中国が従わない場合は、安保理に訴えることができるので、オランダ・ハーグと違い「強制力」を持っているわけだ。	2020-05-15 08:16:00
マーケティング	WEB担当者Forum	[ユーザー投稿] WEBパフォーマンス改善サービスでドーモとサムライズが協業　パフォーマンス計測から改善まで、エンドツーエンドでの対応強化	http://feedproxy.google.com/~r/web-tan/~3/_Nqtsz1JQLA/36020	続きを読む	2020-05-15 08:32:44
ニュース	THE BRIDGE	プレステ4の累計販売台数が1億1,000万台を突破	http://feedproxy.google.com/~r/SdJapan/~3/AYQr5djRJKI/playstation-4-sales-reach-110-4-million	playstation	2020-05-14 23:15:51
ニュース	THE BRIDGE	7,000企業のうち新規採用は46%ーーレイオフは21%、雇用凍結は32%【Candor調査】	http://feedproxy.google.com/~r/SdJapan/~3/EJWzS0IhB_I/candor-46-of-7000-companies-are-hiring-21-are-laying-off-32-froze-hiring	企業のうち新規採用はーレイオフは、雇用凍結は【Candor調査】新型コロナのパンデミックの最中でも新規採用を続ける企業は、が従業員の一時解雇を行い、が新規雇用を凍結ーテックワーカーの給与交渉を手助けをする企業、Candorの社以上に上るクラウドソースデータに関する報告だ。	2020-05-14 23:00:56
GCP	Cloud Blog JA	管理者の皆様へ: パスワード アラートで企業の認証情報を保護する	https://cloud.google.com/blog/ja/products/chrome-enterprise/protecting-enterprise-credentials-with-password-alert/	アクティブ検出モードアクティブ検出モードをオンにすると、ホワイトリストに登録されていないウェブサイトやフィッシングサイトでユーザーが会社の認証情報を再利用しようとしたときに、パスワードアラートによって警告が表示されます。	2020-05-15 01:00:00