Skip to content

AWS ‐ EKS

Jump to bottom
FullstackCodingGuy edited this page Sep 19, 2024 · 1 revision

Elastic Kubernetes Service - EKS

EKS is a kubernetes service is a cross cloud kubernetes technology for deploying containers where as ECS is a amazon's custom deployment solution for containers

Features

  • Kubernetes control plane across Availability Zones
  • Control plane determines auto scaling
  • AWS service integrations (Ex: integration with ECR for pulling images)
  • Automatic updates of images

Components

  • EKS Control Plane - is a collection of nodes, allows the users to interact with, it runs with special account
  • EKS Nodes - these node run on EC2 instances, no control for user, managed by EKS, containers run on these nodes in your account, tied to control plane certificate.

A Node is a virtual infrastructure that you control

Pod

Clusters are comprised of Pods, Pods are collection of containers that run on a node.

EKS Pod Scheduling

  • Self-managed nodes
  • Managed node-groups
  • AWS Fargate - infra automatically manages the scaling for you

EKS Cluster Storage

A place to store data by pods

  • Storage Class - is a template to indicate what storage the pod should use
    • EBS CSI Driver - allows single ec2 instances to connect
    • EFS CSI Driver - allows multiple ec2 instances to connect
    • FSx for Lusture CSI Driver - Cost effective/fast/scalable

EKS Networking

  • Clusters in single region exposed and managed by control plane - behind the scene amazon uses ec2 instances to manage cluster behind a VPC - it could be private or public subnets
  • Clusters can be run on Fargate pods also - which runs only on private subnets

EKS Workloads

Containers that run one or more pods, using aws management console you can manage workloads

  • Scale Pods (using load balancer)
    • Vertical - Increase Infra capacity
    • Horizontal - Replication of pods
    • Network load balancer - it works based on network traffic - eks will balance out the load in vertical and horizontal approach
    • Application load balancer - it works based on > how busy your pods are

EKS Cluster Authentication

Valid aws token is required to access/manage the eks cluster Authorization is managed within the EKS service by kubernetes

  • Identity and access management (IAM) - authentication token
  • Role based access control (RBAC) - authorization

Shared Responsibility

  • Security of the cloud provider (service itself) - by aws
  • Security in the cloud (the content of the service) - by user
Clone this wiki locally