Skip to content

EKS

Amazon Elastic Kubernetes Service (Amazon EKS) Icon-Architecture/64/Arch_Amazon-EKS-Cloud_64 is a fully managed service that you can use to run Kubernetes on AWS. Kubernetes is a single tenant orchestrator, i.e. a single instance of the control plane is shared among all the tenants within a cluster.

How auth is managed?

In AWS, any auth-related stuff is handled with Identity & Access Management (IAM), and EKS is no exception. The EKS relies on IAM for the authentication flow, meaning that the user/bot's identity needs to be present in the IAM to be allowed to talk to Kubernetes' control plane.Jan 30, 2023

CLI's used

kubectl – A command line tool for working with Kubernetes clusters.

eksctl – A command line tool for working with EKS clusters that automates many individual tasks.

Types of nodes in EKS

Fargate – Linux: Select this type of node if you want to run Linux applications on AWS Fargate. Fargate is a serverless compute engine that l ets you deploy Kubernetes pods without managing Amazon EC2 instances.

self-managed nodes – Linux : Select this type of node if you want to run Amazon Linux applications on Amazon EC2 instances.

eksctl create cluster --name my-cluster --region region-code --fargate

kubectl get nodes -o wide # view nodes

Notes

  • GuardDuty EKS Protection is a GuardDuty feature that monitors Amazon EKS cluster control plane activity by analyzing Amazon EKS audit logs.
  • Amazon ECR integrates with Amazon Inspector to provide automated, continuous scanning of your repositories. Your container images are scanned for both operating systems and programing language package vulnerabilities.
  • The Amazon VPC CNI plugin for Kubernetes add-on is deployed on each Amazon EC2 node in your Amazon EKS cluster.
  • The add-on creates elastic network interfaces and attaches them to your Amazon EC2 nodes. The add-on also assigns a private IPv4 or IPv6 address from your VPC to each Pod and service.
  • It comes pre-installed with EKS
  • Runs as DeamonSet named aws-node
  • CoreDNS:
  • It assigns DNS names to Services
  • Comes pre-installed

Was this page helpful?
-->