Udemy
  •  
  •  
  •  
  •  
  •  
  •  
  •  
  •  
  •  
  •  
  •  
  •  
  •  
Development
Web Development Data Science Mobile Development Programming Languages Game Development Database Design & Development Software Testing Software Engineering Development Tools No-Code Development
Business
Entrepreneurship Communications Management Sales Business Strategy Operations Project Management Business Law Business Analytics & Intelligence Human Resources Industry E-Commerce Media Real Estate Other Business
Finance & Accounting
Accounting & Bookkeeping Compliance Cryptocurrency & Blockchain Economics Finance Finance Cert & Exam Prep Financial Modeling & Analysis Investing & Trading Money Management Tools Taxes Other Finance & Accounting
IT & Software
IT Certification Network & Security Hardware Operating Systems Other IT & Software
Office Productivity
Microsoft Apple Google SAP Oracle Other Office Productivity
Personal Development
Personal Transformation Personal Productivity Leadership Career Development Parenting & Relationships Happiness Esoteric Practices Religion & Spirituality Personal Brand Building Creativity Influence Self Esteem & Confidence Stress Management Memory & Study Skills Motivation Other Personal Development
Design
Web Design Graphic Design & Illustration Design Tools User Experience Design Game Design Design Thinking 3D & Animation Fashion Design Architectural Design Interior Design Other Design
Marketing
Digital Marketing Search Engine Optimization Social Media Marketing Branding Marketing Fundamentals Marketing Analytics & Automation Public Relations Advertising Video & Mobile Marketing Content Marketing Growth Hacking Affiliate Marketing Product Marketing Other Marketing
Lifestyle
Arts & Crafts Beauty & Makeup Esoteric Practices Food & Beverage Gaming Home Improvement Pet Care & Training Travel Other Lifestyle
Photography & Video
Digital Photography Photography Portrait Photography Photography Tools Commercial Photography Video Design Other Photography & Video
Health & Fitness
Fitness General Health Sports Nutrition Yoga Mental Health Dieting Self Defense Safety & First Aid Dance Meditation Other Health & Fitness
Music
Instruments Music Production Music Fundamentals Vocal Music Techniques Music Software Other Music
Teaching & Academics
Engineering Humanities Math Science Online Education Social Science Language Teacher Training Test Prep Other Teaching & Academics
AWS Certification Microsoft Certification AWS Certified Solutions Architect - Associate AWS Certified Cloud Practitioner CompTIA A+ Cisco CCNA Amazon AWS CompTIA Security+ AWS Certified Developer - Associate
Graphic Design Photoshop Adobe Illustrator Drawing Digital Painting InDesign Character Design Canva Figure Drawing
Life Coach Training Neuro-Linguistic Programming Mindfulness Personal Development Personal Transformation Life Purpose Meditation Coaching Neuroscience
Web Development JavaScript React CSS Angular PHP WordPress Node.Js Python
Google Flutter Android Development iOS Development Swift React Native Dart Programming Language Mobile Development Kotlin SwiftUI
Digital Marketing Google Ads (Adwords) Social Media Marketing Google Ads (AdWords) Certification Marketing Strategy Internet Marketing YouTube Marketing Email Marketing Retargeting
SQL Microsoft Power BI Tableau Business Analysis Business Intelligence MySQL Data Analysis Data Modeling Big Data
Business Fundamentals Entrepreneurship Fundamentals Business Strategy Online Business Business Plan Startup Freelancing Blogging Home Business
Unity Game Development Fundamentals Unreal Engine C# 3D Game Development C++ Unreal Engine Blueprints 2D Game Development Blender
30-Day Money-Back Guarantee

This course includes:

  • 6 hours on-demand video
  • 3 articles
  • 2 downloadable resources
  • Full lifetime access
  • Access on mobile and TV
IT & Software Other IT & Software Amazon EKS

AWS EKS Kubernetes MasterClass (best practices) in 2020

Learn AWS EKS Best Practices using Handson (Helm, Ingress Controller SSL Termination, RBAC, IRSA, CA, HPA, Monitoring)
Highest Rated
Rating: 4.6 out of 54.6 (30 ratings)
328 students
Created by CS Career Kaizen (元Microsoft現シリバレエンジニア)
Last updated 11/2020
English
English [Auto]
30-Day Money-Back Guarantee

What you'll learn

  • how to setup K8s dashboard with RBAC
  • how to monitor K8s cluster and apps using Prometheus and Grafana
  • how to configure SSL Termination at AWS ELB created by ingress controller using k8s service YAML
  • how to authenticate and authorize AWS IAM users to AWS EKS cluster using aws-iam-authenticator, aws-auth ConfigMap, and RBAC (Role Based Access Control) aka ClusterRoleBinding
  • how to authorize Pods to AWS resources by creating pod-level IAM permission using IRSA (IAM Role for Service Account)
  • how to scale EKS worker nodes automatically using CA (Cluster Autoscaler using IRSA) and how to stress test it
  • how to scale pods automatically using HPA (horizontal pod autoscaler) and how to stress test it
  • why you shouldn't use eksctl managed worker nodes in production
  • why you should be careful when using EKS's default AWS-VPC-CNI plugin, because Pod IP pool gets exhausted based on EC2 instance type
Curated for the Udemy for Business collection

Requirements

  • you have decent knowledge of AWS (EC2, VPC, subnet, load balancer, IAM, etc)
  • you have learned Kubernetes fundamentals (pod, service, deployment, ingress, configmap, role, etc)
  • you have development experience in Kubernetes YAML resources

Description

If I summarize this course in one sentence?

Learn production-proof AWS EKS Best Practices using Handson concepts and labs (e.g. Helm, Dashboard, Ingress, SSL Termination, AWS ELB Logging, RBAC, IRSA, CA, HPA, Monitoring).


☆Please check preview videos to see if this course is really for you☆


Are you one of the below?

  • You want to learn how to use managed Kubernetes cluster on AWS EKS

  • You feel overwhelmed and don't know where to start with AWS EKS

  • You learned Kubernetes with minikube but don't know how to deploy K8s cluster on AWS

  • You want to know production-ready AWS EKS best Practices such as SSL Termination at AWS ELB, RBAC (Role Based Access Control), IRSA (IAM Role for Service Account), CA (Cluster Autoscaler using IRSA)

  • You want to be able to configure SSL for AWS ELB using K8s ingress controller

  • You want to be able to give right permissions to AWS IAM users in K8s cluster using ClusterRoleBinding (RBAC: Role Based Access Control)

  • You don't know how pod-level AWS IAM authentication (IRSA: IAM Role for Service Account) works

  • You want to learn how to monitor K8s apps using Prometheus and Grafana


Who should take this course

  • you have decent knowledge of AWS (EC2, VPC, subnet, load balancer, IAM, etc)

  • you have learned Kubernetes fundamentals (pod, service, deployment, ingress, configmap, role, etc)

  • you don't know how to go about learning Kubernetes on AWS

  • you have development experience in Kubernetes YAML resources

  • you want to learn about production-ready best practices for AWS EKS regarding security, monitoring, scaling, and performance

  • you want to learn ins and outs of AWS EKS from a cloud DevOps working at an US company in SF

  • you want to improve your AWS EKS knowledge and skills


who should NOT need to take this course

  • you already know a lot of AWS EKS

  • you are not planning on using Kuberenetes on AWS

  • you have never used AWS (EC2, VPC, subnet, load balancer, IAM, etc) before

  • you have never deployed pods in Kubernetes cluster


In this course, you will learn various aspects of AWS EKS best practices such as:

  • how to setup K8s dashboard with RBAC

  • how to monitor K8s cluster and apps using Prometheus and Grafana

  • how to configure SSL Termination at AWS ELB created by ingress controller using k8s service YAML

  • how to authenticate and authorize AWS IAM users to AWS EKS cluster using aws-iam-authenticator, aws-auth ConfigMap, and RBAC (Role Based Access Control) aka ClusterRoleBinding

  • how to authorize Pods to AWS resources by creating pod-level IAM permission using IRSA (IAM Role for Service Account)

  • how to scale EKS worker nodes automatically using CA (Cluster Autoscaler using IRSA) and how to stress test it

  • how to scale pods automatically using HPA (horizontal pod autoscaler) and how to stress test it

  • why you shouldn't use eksctl managed worker nodes in production

  • why you should be careful when using EKS's default AWS-VPC-CNI plugin, because Pod IP pool gets exhausted based on EC2 instance type



6 Reasons why you should take this course:

1. Instructed by a cloud DevOps engineer (with CKA and certified AWS DevOps pro) working at US company in SF

I have been pretty handson with Kubernetes, AWS, and AWS EKS. With 6.5+ industry experience in both North America and Europe, I breakdown and explain hard concepts using diagrams


2. Abstract Concepts Explained with Diagrams

You usually don't find a solution in multiple languages. Catered for Java backend developers and Python developers. Also beneficial if you know one of them but also want to learn the other.


3. Updated Knowledge about AWS EKS in 2020

Some of the tools (such as kube2iam for pod-level IAM permissions) are outdated. I will demonstrate 2020-updated version of tools and concepts.


4. A Little Detail Matters in Production

When setting up AWS EKS cluster for production, you need to pay lots of attentions to security, reliability, and resilience. I have included how to secure HTTP connection to AWS ELB, how to enable AWS ELB access logs, how to configure pod-level IAM permission using IRSA, how to authorize AWS IAM users to K8s cluster using RBAC, how to setup CA with IRSAetc


5. Tons of handson!

I won't bore you with dry lectures. Instead every concepts are paired with handson demo.


6. Entire course under SIX HOURS

I tried to make this course compact and concise so students can learn the concepts and handson skills in shorted amount of time, because I know a life of software engineer is already pretty busy :)



My background & Education & Career experience

  • Cloud DevOps Software Engineer with 6.5+ years experience

  • Bachelor of Science in Computing Science from a Canadian university

  • Knows Java, C#, C++, Bash, Python, JavaScript, Terraform, IaC

  • Expert in AWS (holds AWS DevOps Professional certification) and Kubernetes (holds Certified Kubernetes Administrator, CKA)


I will see you inside!

Who this course is for:

  • You want to learn how to use managed Kubernetes cluster on AWS EKS
  • You feel overwhelmed and don't know where to start with AWS EKS
  • You want to know production-ready AWS EKS best Practices such as SSL Termination at AWS ELB, RBAC (Role Based Access Control), IRSA (IAM Role for Service Account), CA (Cluster Autoscaler using IRSA)
  • You want to be able to configure SSL for AWS ELB using K8s ingress controller
  • You want to be able to give right permissions to AWS IAM users in K8s cluster using ClusterRoleBinding (RBAC: Role Based Access Control)
  • You don't know how pod-level AWS IAM authentication (IRSA: IAM Role for Service Account) works
  • You want to learn how to monitor K8s apps using Prometheus and Grafana

Course content

16 sections • 63 lectures • 5h 59m total length

  • Preview04:00
  • Preview02:33

  • Download course material
    00:03
  • Preview01:11
  • K8s Master Node (Control Plane) Overview
    01:25
  • Preview00:33
  • K8s Objects Recap (Pod, Deployment, Service, Ingress, ConfigMap)
    03:36

  • AWS Setup (Account, IAM user, Access Key, IAM policy)
    06:47
  • TIPS: How to Reduce AWS Billing & Setup Email Alerts
    00:30
  • Install CLIs (aws, aws-iam-authenticator, kubectl, eksctl)
    11:47
  • Create named AWS Profile in ~/.aws/credentials
    00:27
  • Create AWS EKS Cluster using eksctl
    03:33
  • AWS Networking Architecture Recap (VPC, subnets, AZ, etc)
    04:54
  • EKS Console Walkthrough
    01:10

  • Preview04:54
  • Helm Commands Demo (repo, install, upgrade, rollback)
    14:57

  • Preview00:20
  • Step 1: Install Metrics Server
    01:45
  • Step 2: Install K8s Dashboard v2
    04:30
  • Step 3: Create RBAC (Role-Based Authorization) for Dashboard and Log in
    03:51
  • K8s Dashboard Walkthrough (namespace, logs, exec into shell)
    02:52

  • Deploy Pods and Services and Access Externally (public AWS ELB)
    10:09
  • Guestbook App Architecture (AWS & K8s) Explained
    02:18

  • Preview02:42
  • Install Nginx Ingress Controller using Helm Chart
    03:47
  • Create Ingress Resource YAML for L7 HTTP (path/host) Load Balancing
    07:33
  • Enable SSL Termination at AWS ELB by Provisioning SSL Self-Signed Cert
    21:19
  • How to Fix "400 Bad Request: Plain HTTP request was send to HTTPS port"
    07:17
  • Enable AWS ELB Access Log (S3 Bucket, Bucket Policy, K8s Service YAML)
    24:54
  • Limitations with Nginx Ingress Controller (Why Istio Service Mesh is Awesome)
    12:46
  • Recap of Ingress Controller, SSL, Istio Service Mesh
    01:47

  • AWS User Authentication & Authorization in K8s (aws-auth ConfigMap)
    04:57
  • Preview03:10
  • Preview03:05
  • Create new AWS IAM user
    05:01
  • Allow AWS IAM user to K8s Cluster as K8s Admin (ANTI-PATTERN!)
    07:21
  • Restrict K8s User Access by RBAC (ClusterRoleBinding)
    06:43
  • Restrict AWS User Access by Binding them to ClusterRole in aws-auth ConfigMap
    03:37
  • Recap of Authentication and Authorization in K8s Cluster for AWS IAM User & Role
    02:18

  • Install Prometheus using Helm Chart
    10:15
  • Install Grafana using Helm Chart (Dashboard Walkthrough)
    13:59

  • Enable K8s Control Plane Loggings (api server, authenticator, control manager)
    06:25

Instructor

CS Career Kaizen (元Microsoft現シリバレエンジニア)
元Microsoft→現Sillicon Valley DevOps、AWS DevOps Pro, CKA
CS Career Kaizen (元Microsoft現シリバレエンジニア)
  • 4.4 Instructor Rating
  • 1,176 Reviews
  • 5,403 Students
  • 9 Courses

He is a cloud DevOps working on AWS, Kubernetes, Docker, Terraform, CI/CD pipeline, etc at US company.


He is INFJ and seeks a right balance between typical dichotomy such as arts/science, logic/emotion, mind/body.


Education & Career experience

- Have interviewed at Microsoft, Google, Apple, Facebook, Intel, Adobe, etc

- Cloud DevOps Software Engineer with 6+ years experience

- Bachelor of Science in Computing Science from a Canadian university

- Knows data structure, algorithms, design patterns well

- Knows Java, C#, C++, Bash, Python, JavaScript, Terraform, IaC

- Expert in AWS (holds AWS DevOps Professional certification) and Kubernetes (holds Certified Kubernetes Administrator, CKA)


講師の略歴

- グーグル・マイクロソフト・フェイスブックなど北米・ヨーロッパで受けてきたコーディングテスト面接の経験

- 6年以上の北米・ヨーロッパでのエンジニア経験

- カナダの大学卒でCS専攻

- 得意な言語はバックエンドのオブジェクト指向系のJavaをはじめ、Linux Bashやインフラ系のTerraformも含みます

- AWSのDevOps ProのサーティフィケートとKubernetesのProサーティフィケート持っています


ノマド、ミニマリスト、自己改善大好き

野球・ボーイスカウト・書道・バイオリンをして育つ。国際科高校でニュージーランド語学留学→大学留学を考え高校の担任の提案である早稲田国際教養とICUの受験拒否(リーマンショック最中)→高卒派遣で働きTOEFLとSAT勉強両立→20歳でストレスから成人アレルギー発症し仕事辞める→英国PhD持ち伯父のローン支援でカナダのコミカレから4大学編入→自己啓発開始→ブラックベリーや米マイクソフトでインターン→チェコ交換留学→カナダ永住権→筋トレ大会準優勝→留学借金750万2年で完済→ドイツ移住→1年で15カ国旅する→米シリコンバレー企業で働く→ノマドエンジニアとして人生の最適化中(筋トレ・Tech・自己啓発読書・旅行)→ベンチプレス112キロ

尊敬する人物はアーノルドシュワちゃん、Iron Man、ElonMusk。

  • Udemy for Business
  • Teach on Udemy
  • Get the app
  • About us
  • Contact us
  • Careers
  • Blog
  • Help and Support
  • Affiliate
  • Terms
  • Privacy policy
  • Cookie settings
  • Sitemap
  • Featured courses
Udemy
© 2021 Udemy, Inc.