AWS EKS Kubernetes MasterClass (best practices) in 2020
What you'll learn
- how to setup K8s dashboard with RBAC
- how to monitor K8s cluster and apps using Prometheus and Grafana
- how to configure SSL Termination at AWS ELB created by ingress controller using k8s service YAML
- how to authenticate and authorize AWS IAM users to AWS EKS cluster using aws-iam-authenticator, aws-auth ConfigMap, and RBAC (Role Based Access Control) aka ClusterRoleBinding
- how to authorize Pods to AWS resources by creating pod-level IAM permission using IRSA (IAM Role for Service Account)
- how to scale EKS worker nodes automatically using CA (Cluster Autoscaler using IRSA) and how to stress test it
- how to scale pods automatically using HPA (horizontal pod autoscaler) and how to stress test it
- why you shouldn't use eksctl managed worker nodes in production
- why you should be careful when using EKS's default AWS-VPC-CNI plugin, because Pod IP pool gets exhausted based on EC2 instance type
Requirements
- you have decent knowledge of AWS (EC2, VPC, subnet, load balancer, IAM, etc)
- you have learned Kubernetes fundamentals (pod, service, deployment, ingress, configmap, role, etc)
- you have development experience in Kubernetes YAML resources
Description
If I summarize this course in one sentence?
Learn production-proof AWS EKS Best Practices using Handson concepts and labs (e.g. Helm, Dashboard, Ingress, SSL Termination, AWS ELB Logging, RBAC, IRSA, CA, HPA, Monitoring).
☆Please check preview videos to see if this course is really for you☆
Are you one of the below?
You want to learn how to use managed Kubernetes cluster on AWS EKS
You feel overwhelmed and don't know where to start with AWS EKS
You learned Kubernetes with minikube but don't know how to deploy K8s cluster on AWS
You want to know production-ready AWS EKS best Practices such as SSL Termination at AWS ELB, RBAC (Role Based Access Control), IRSA (IAM Role for Service Account), CA (Cluster Autoscaler using IRSA)
You want to be able to configure SSL for AWS ELB using K8s ingress controller
You want to be able to give right permissions to AWS IAM users in K8s cluster using ClusterRoleBinding (RBAC: Role Based Access Control)
You don't know how pod-level AWS IAM authentication (IRSA: IAM Role for Service Account) works
You want to learn how to monitor K8s apps using Prometheus and Grafana
Who should take this course
you have decent knowledge of AWS (EC2, VPC, subnet, load balancer, IAM, etc)
you have learned Kubernetes fundamentals (pod, service, deployment, ingress, configmap, role, etc)
you don't know how to go about learning Kubernetes on AWS
you have development experience in Kubernetes YAML resources
you want to learn about production-ready best practices for AWS EKS regarding security, monitoring, scaling, and performance
you want to learn ins and outs of AWS EKS from a cloud DevOps working at an US company in SF
you want to improve your AWS EKS knowledge and skills
who should NOT need to take this course
you already know a lot of AWS EKS
you are not planning on using Kuberenetes on AWS
you have never used AWS (EC2, VPC, subnet, load balancer, IAM, etc) before
you have never deployed pods in Kubernetes cluster
In this course, you will learn various aspects of AWS EKS best practices such as:
how to setup K8s dashboard with RBAC
how to monitor K8s cluster and apps using Prometheus and Grafana
how to configure SSL Termination at AWS ELB created by ingress controller using k8s service YAML
how to authenticate and authorize AWS IAM users to AWS EKS cluster using aws-iam-authenticator, aws-auth ConfigMap, and RBAC (Role Based Access Control) aka ClusterRoleBinding
how to authorize Pods to AWS resources by creating pod-level IAM permission using IRSA (IAM Role for Service Account)
how to scale EKS worker nodes automatically using CA (Cluster Autoscaler using IRSA) and how to stress test it
how to scale pods automatically using HPA (horizontal pod autoscaler) and how to stress test it
why you shouldn't use eksctl managed worker nodes in production
why you should be careful when using EKS's default AWS-VPC-CNI plugin, because Pod IP pool gets exhausted based on EC2 instance type
6 Reasons why you should take this course:
1. Instructed by a cloud DevOps engineer (with CKA and certified AWS DevOps pro) working at US company in SF
I have been pretty handson with Kubernetes, AWS, and AWS EKS. With 6.5+ industry experience in both North America and Europe, I breakdown and explain hard concepts using diagrams
2. Abstract Concepts Explained with Diagrams
You usually don't find a solution in multiple languages. Catered for Java backend developers and Python developers. Also beneficial if you know one of them but also want to learn the other.
3. Updated Knowledge about AWS EKS in 2020
Some of the tools (such as kube2iam for pod-level IAM permissions) are outdated. I will demonstrate 2020-updated version of tools and concepts.
4. A Little Detail Matters in Production
When setting up AWS EKS cluster for production, you need to pay lots of attentions to security, reliability, and resilience. I have included how to secure HTTP connection to AWS ELB, how to enable AWS ELB access logs, how to configure pod-level IAM permission using IRSA, how to authorize AWS IAM users to K8s cluster using RBAC, how to setup CA with IRSAetc
5. Tons of handson!
I won't bore you with dry lectures. Instead every concepts are paired with handson demo.
6. Entire course under SIX HOURS
I tried to make this course compact and concise so students can learn the concepts and handson skills in shorted amount of time, because I know a life of software engineer is already pretty busy :)
My background & Education & Career experience
Cloud DevOps Software Engineer with 6.5+ years experience
Bachelor of Science in Computing Science from a Canadian university
Knows Java, C#, C++, Bash, Python, JavaScript, Terraform, IaC
Expert in AWS (holds AWS DevOps Professional certification) and Kubernetes (holds Certified Kubernetes Administrator, CKA)
I will see you inside!
Who this course is for:
- You want to learn how to use managed Kubernetes cluster on AWS EKS
- You feel overwhelmed and don't know where to start with AWS EKS
- You want to know production-ready AWS EKS best Practices such as SSL Termination at AWS ELB, RBAC (Role Based Access Control), IRSA (IAM Role for Service Account), CA (Cluster Autoscaler using IRSA)
- You want to be able to configure SSL for AWS ELB using K8s ingress controller
- You want to be able to give right permissions to AWS IAM users in K8s cluster using ClusterRoleBinding (RBAC: Role Based Access Control)
- You don't know how pod-level AWS IAM authentication (IRSA: IAM Role for Service Account) works
- You want to learn how to monitor K8s apps using Prometheus and Grafana
Course content
- Preview04:00
- Preview02:33
Instructor
He is a cloud DevOps working on AWS, Kubernetes, Docker, Terraform, CI/CD pipeline, etc at US company.
He is INFJ and seeks a right balance between typical dichotomy such as arts/science, logic/emotion, mind/body.
Education & Career experience
- Have interviewed at Microsoft, Google, Apple, Facebook, Intel, Adobe, etc
- Cloud DevOps Software Engineer with 6+ years experience
- Bachelor of Science in Computing Science from a Canadian university
- Knows data structure, algorithms, design patterns well
- Knows Java, C#, C++, Bash, Python, JavaScript, Terraform, IaC
- Expert in AWS (holds AWS DevOps Professional certification) and Kubernetes (holds Certified Kubernetes Administrator, CKA)
講師の略歴
- グーグル・マイクロソフト・フェイスブックなど北米・ヨーロッパで受けてきたコーディングテスト面接の経験
- 6年以上の北米・ヨーロッパでのエンジニア経験
- カナダの大学卒でCS専攻
- 得意な言語はバックエンドのオブジェクト指向系のJavaをはじめ、Linux Bashやインフラ系のTerraformも含みます
- AWSのDevOps ProのサーティフィケートとKubernetesのProサーティフィケート持っています
ノマド、ミニマリスト、自己改善大好き
野球・ボーイスカウト・書道・バイオリンをして育つ。国際科高校でニュージーランド語学留学→大学留学を考え高校の担任の提案である早稲田国際教養とICUの受験拒否(リーマンショック最中)→高卒派遣で働きTOEFLとSAT勉強両立→20歳でストレスから成人アレルギー発症し仕事辞める→英国PhD持ち伯父のローン支援でカナダのコミカレから4大学編入→自己啓発開始→ブラックベリーや米マイクソフトでインターン→チェコ交換留学→カナダ永住権→筋トレ大会準優勝→留学借金750万2年で完済→ドイツ移住→1年で15カ国旅する→米シリコンバレー企業で働く→ノマドエンジニアとして人生の最適化中(筋トレ・Tech・自己啓発読書・旅行)→ベンチプレス112キロ
尊敬する人物はアーノルドシュワちゃん、Iron Man、ElonMusk。