Kubernetes on AWS using Amazon EKS

Explore how Kubernetes on AWS with EKS separates a fully managed control plane in a dedicated EKS-managed VPC from a data plane in your VPC using node groups.

Explore EKS authentication and authorization, detailing IAM-based authentication, Kubernetes RBAC with cluster and namespace roles, and the four-step flow from identity verification to access control outcomes.

Set up a Cloud9 workspace to manage your EKS cluster, creating an EC2 instance in a VPC, configuring AWS CLI access, disabling temporary credentials, and installing kubectl.

Manually set up an Amazon EKS cluster in the AWS management console, configuring version, roles, VPC, security groups, kubeconfig, and a node group with IAM roles for kubectl access.

Provision an Amazon EKS cluster on AWS using the CDK, defining a VPC, private subnets, security groups, control plane, and node group with IAM roles and kubectl config.

Configure and deploy an Amazon EKS cluster with eksctl using a custom config, provisioning a VPC, private subnets, and a managed node group, then scale nodes as needed.

Learn how to map an iam user to kubernetes rbac in eks, using cluster roles and cluster role bindings, and distinguish cluster wide from namespace permissions.

Map an IAM role to a Kubernetes service account and configure a cluster role binding, then establish a trust and map the role in config map to enable laptop access.

Configure kube2iam to grant namespace-scoped AWS IAM roles for deployments, daemon sets, and pods by deploying a dedicated namespace, service account, cluster role, and cluster role binding.

Create a new namespace and an IAM role, configure trust with the node role, and annotate the namespace and deployments to grant granular, role-based access for Kubernetes apps on EKS.

Install the helm package manager for kubernetes by downloading the installer, making it executable, and running it to install the latest helm; then add, update, and search the stable repo.

Understand ingress controller, ingress, and service in Kubernetes on AWS EKS, and learn to deploy an ALB ingress controller to expose an app via a load balancer.

Deploy and configure the Nginx ingress controller on amazon eks with helm, enable ssl termination at the load balancer using an acm certificate, and ensure deployment across all azs.

Configure external dns on eks to automatically create route 53 records for ingresses, mapping domain names to load balancers, with an IAM role and namespace annotations.

deploy a sample app in a dev namespace, expose it with a service and Nginx ingress, and map a Route 53 domain to a load balancer for external access.

Deploy ALB ingress on AWS EKS by configuring an ALB ingress with ACM certificate and external DNS, mapping a host to the service.

Examine EKS scaling options on AWS, including cluster autoscaler with an AWS autoscaling group, horizontal pod autoscaler for deployments, and pod autoscaler for resource optimization and proper provisioning.

Deploy the cluster autoscaler for a Kubernetes on AWS EKS environment using eksctl. Adjust the max nodes in the auto scaling group and watch deployments scale.

Configure horizontal pod autoscaler on a deployment to scale between two and twenty replicas based on CPU utilization, set a 40% threshold, and observe autoscaling under load.

Deploy and observe vertical pod autoscaler automatically right-size CPU and memory for pods, improving resource utilization on Kubernetes on AWS with EKS.

Deploy the Kubernetes dashboard on an EKS cluster using an ingress to expose it via a domain, configure SSL and tokens, and grant read-only or admin access through roles.

Deploy stateful sets with persistent volumes backed by gp2 storage, ensuring stable, unique pod identities and ordered deployment via a headless service and volume claim templates.

Set up the csi drivers on eks, replace the default storage class with a csi-based provisioner, and deploy a stateful set to manage persistent volumes.