I'm building a personal SRE project with guidance from a mentor. The EKS cluster was created with Terraform, Flux was bootstrapped through Terraform, and the setup uses reusable…
I'm building a personal SRE project with guidance from a mentor. The EKS cluster was provisioned with Terraform, and Flux was bootstrapped through Terraform as well. The setup…
What instance families are people using for production workloads on Amazon EKS? Our cluster currently runs mostly Node.js microservices on T3 instances, and so far they've worked well.…
With AWS ECS, when a service scales in or deploys, ECS first deregisters the task from the Application Load Balancer and lets existing requests drain before sending SIGTERM…
With AWS ECS, when a service scales in or deploys a new version, ECS deregisters the task from the load balancer and drains existing connections before sending SIGTERM…
I'm trying to understand how EKS Access Entries interact with native Kubernetes RBAC. Suppose an IAM role such as `dev-pod-reader` has an EKS Access Entry with the `AmazonEKSViewPolicy`…
I'm trying to understand how EKS Access Entries interact with native Kubernetes RBAC. Suppose an IAM role such as `dev-pod-reader` is registered with an EKS Access Entry and…
We run AWS EKS across four VPC environments—corporate, development, staging, and production—and use Envoy Gateway behind internal Network Load Balancers. cert-manager currently obtains certificates through DNS-01 validation against…
Hey everyone! I'm a senior DevOps engineer with a background in backend development. I've been wondering how the Kubernetes community manages evicted pods in their clusters. I was…
I'm trying to set up end-to-end encryption for my AWS EKS cluster. I'm considering using the AWS/k8s Gateway API Controller along with VPC Lattice to manage inbound connections,…
I'm exploring best practices for implementing end-to-end encryption in my AWS EKS cluster. I plan to utilize the AWS/k8s Gateway API Controller and VPC Lattice for managing incoming…
I'm digging into the new support for user namespaces in AWS EKS version 1.33, and while I know it generally boosts security, my company already has strict policies…