Create AWS EKS Cluster using Terraform: AWS EKS Kubernetes Tutorial - Part 2
VloĆŸit
- Äas pĆidĂĄn 2. 06. 2024
- đŽ - To support my channel, Iâd like to offer Mentorship/On-the-Job Support/Consulting - me@antonputra.com
đ [Playlist] AWS EKS Kubernetes Tutorial: âą AWS EKS Kubernetes Tut...
1. Create AWS VPC using Terraform
2. Create AWS EKS Cluster using Terraform
3. Add IAM User & IAM Role to AWS EKS
4. Horizontal Pod Autoscaler (HPA) on AWS EKS
5. Cluster Autoscaler Tutorial (EKS Pod Identities)
6. AWS Load Balancer Controller Tutorial (TLS)
7. Nginx Ingress Controller Tutorial (Cert-Manager & TLS)
8. CSI Driver Tutorial (ReadWriteOnce)
9. EFS CSI Driver Tutorial (ReadWriteMany)
10. AWS Secrets Manager Tutorial (Env & Files)
Based on the feedback, Iâll add the following sections (let me know if anything else is missing):
- Autoscaling with Karpenter
- Autoscaling with Keda
- Private Ingress with Private DNS & VPN
- Monitoring with Prometheus
- EKS self managed group
- EKS Fargate
- EKS Pod Identities vs. EKS IRSA (oidc) vs. Node roles
âŹâŹâŹâŹâŹ Experience & Location đŒ âŹâŹâŹâŹâŹ
âș Iâm a Senior Software Engineer at Juniper Networks (12+ years of experience)
âș Located in San Francisco Bay Area, CA (US citizen)
âŹâŹâŹâŹâŹâŹ Connect with me đ âŹâŹâŹâŹâŹâŹ
âș LinkedIn: / anton-putra
âș Twitter/X: / antonvputra
âș GitHub: github.com/antonputra
âș Email: me@antonputra.com
âŹâŹâŹâŹâŹâŹ Related videos đšâđ« âŹâŹâŹâŹâŹâŹ
đ [Playlist] Kubernetes Tutorials: âą Kubernetes Tutorials
đ [Playlist] Terraform Tutorials: âą Terraform Tutorials fo...
đ [Playlist] Network Tutorials: âą Network Tutorials
đ [Playlist] Apache Kafka Tutorials: âą Apache Kafka Tutorials
đ [Playlist] Performance Benchmarks: âą Performance Benchmarks
đ [Playlist] Database Tutorials: âą Database Tutorials
âŹâŹâŹâŹâŹâŹâŹ Timestamps â° âŹâŹâŹâŹâŹâŹâŹ
0:00 Kubernetes Architecture
3:45 EKS IAM Role Permissions
5:59 EKS Nodes IAM Role Permissions
7:46 Create EKS Cluster using Terraform
11:19 Create EKS Nodes using Terraform
16:45 EKS Overview in Console
18:12 Connect to EKS
âŹâŹâŹâŹâŹâŹâŹ Source Code đ âŹâŹâŹâŹâŹâŹâŹ
âș GitHub: github.com/antonputra/tutoria...
#AWS #EKS #Kubernetes - VÄda a technologie
đŽ - To support my channel, Iâd like to offer Mentorship/On-the-Job Support/Consulting - me@antonputra.com
Thank you very much Anton for all the videos you make! I learned a lot from your content!
thanks!
Another great video. Keep sharing your knowledge.
â€ïž
Amazing stuff . This is the right moment l to deep dive into EKS .
Thank you so much for the effort đđ»đđ»đđ»
thanks!
is it possible to use openTofu instead of terraform ?
This is fantastic, Iâm loving that youâve broken this into multiple videos and are going into a more detail helping me to build my production EKS cluster.
This is worth my subscription, keep up the good work.
thank you!
I didn't understand Kubernetes related technologies when I read about it on the internet, but your videos made it very easy to understand. I really appreciate it.
â€ïž
*Dude I see you are doing good....Keep up the good work :)....Dawai Dawai....Let the JUNIP people know you are doing well :)*
đđ
Great video!!! Now I am waiting for the next part. đ
thank you!
masterpiece Sir, curiously waiting for the rest of EKS videos and thank you for the great job.
thank you!
Part 3 will be released in 2 days. Playlist - czcams.com/play/PLiMWaCMwGJXnKY6XmeifEpjIfkWRo9v2l.html&si=Ku0ay7zUEKgfcVcb
1. Create AWS VPC using Terraform
2. Create AWS EKS Cluster using Terraform
3. Add IAM User & IAM Role to AWS EKS
4. Horizontal Pod Autoscaler (HPA) on AWS EKS
5. Cluster Autoscaler Tutorial (EKS Pod Identities)
6. AWS Load Balancer Controller Tutorial (TLS)
7. Nginx Ingress Controller Tutorial (Cert-Manager & TLS)
8. CSI Driver Tutorial (ReadWriteOnce)
9. EFS CSI Driver Tutorial (ReadWriteMany)
10. AWS Secrets Manager Tutorial (Env & Files)
Based on the feedback, Iâll add the following sections (let me know if anything else is missing):âš
- Autoscaling with Karpenter
- Autoscaling with Keda
- Private Ingress with Private DNS & VPN
- Monitoring with Prometheus
- EKS self managed group
- EKS Fargate
- EKS Pod Identities vs. EKS IRSA (oidc) vs. Node roles
few more sections to add are cilium integration and vpc lattice and gateway api advantages
@@dineshparva ok, added cilium, will take a look at the second one
I would add cluster upgrades too. Every few months we have new EKS version. How would you do an upgrade when you have all these dependent cluster components deployed with terraform. Best practices, zero downtime etc. when going from one EKS version to the next one.
@@rafalkita884 thanks, it heavily depends on the Kubernetes version itself not EKS. For example K8s can deprecated some APIs for example old ingress beta v1 and you would need to upgrade all your yaml files. So it's very hard to come up with general recommendation.
Thank you, great tutorial!
â€ïž
Great content!
â€ïž
Amazing Videos!
thank you!
In this video you create all resources using direct terraform resources. But we also have publicly available modules from Anton Babenko to create EKS and simplify the terraform layer, in my opinion. What do you think is better to use in production cases? Is it worth using such public terraform modules or is it better to create all the resources yourself?
I respect him, i just generally don't like using open source modules. For example that open source module still uses auth configmap to manage users. It's very easy for them to start using API but it will break your infra and you would have to keep using old versions until you create new eks clusters (just from my personal experience) Modules are great for consulting and temporary envs, when you don't need to maintain clusters for over the year. I know a lot of copy pasting but when you have 20+ clusters, update module can in all envs can take months or even year :)
Thanks for the video could you explain in layman terms what exactly is the oidc provider and its role in eks does it act like a authentication broker between iam and k8s in aws?
oidc provider allows you to establish relationship between AWS IAM and Kubernetes RBAC.
1. you create IAM role and define trust relationship with Kubernetes service account
2. you create Kubernetes service account and LINK IAM role with Kubernetes service account
Finally you can assign IAM permissions to Kubernetes pods. BUT you no longer need it at all, new better way is pod identities, video comparing all approaches coming in few days
You had created the eks cluster in the past what is that we can expect in this new series? How is it different from the previous EKS cluster you have created?
There have been few new developments on EKS side.
1. Kubernetes auth configmap is deprecated and recommended approach is to use new EKS API to add new users to the cluster
2. New way to grant permissions to application (we no longer use IAM OIDC provider and IAM roles for service accounts, instead we use Pod identities)
3. Some other small features in certain controllers like aws load balancer controller etc
@@AntonPutra I really appreciate what you doing for the community