Containers
Tag: HAQM Elastic Kubernetes Service (HAQM EKS)
Transparent encryption of node to node traffic on HAQM EKS using WireGuard and Cilium
Introduction As the move to cloud native architectures continues to accelerate, one of the common challenges we hear from our customers is that adopting security best practices in Kubernetes clusters can be challenging. One area in particular that has come up in conversations often is how best to encrypt data in transit. This data encryption […]
Microservices development using AWS controllers for Kubernetes (ACK) and HAQM EKS blueprints
Introduction Microservices architectures make applications easier to scale and faster to develop, which enables innovation and accelerating time-to-market for new features. For business applications with multiple clients (web, mobile, desktop, and smart devices), the application programming interface (API) Gateway microservices design pattern is helpful for adding centralized control and security. Containers and serverless are two […]
Exposing Kubernetes Applications, Part 3: Ingress-Nginx Controller
Introduction The Exposing Kubernetes Applications series focuses on ways to expose applications running in a Kubernetes cluster for external access. In Part 1, we explored Service and Ingress resource types that define two ways to control the inbound traffic in a Kubernetes cluster. We discussed handling of these resource types via Service and Ingress controllers, […]
Exposing Kubernetes Applications, Part 2: AWS Load Balancer Controller
Introduction The Exposing Kubernetes Applications series focuses on ways to expose applications running in a Kubernetes cluster for external access. In Part 1 of the series, we explored Service and Ingress resource types that define two ways to control the inbound traffic in a Kubernetes cluster. We discussed the handling of these resource types via […]
Exposing Kubernetes Applications, Part 1: Service and Ingress Resources
Introduction The Exposing Kubernetes Applications series focuses on ways to expose applications running in a Kubernetes cluster for external access. In this Part 1 of the series, we explore Service and Ingress resource types that define two ways to control the inbound traffic in a Kubernetes cluster. We discuss the handling of these resource types […]
Understanding and Cost Optimizing HAQM EKS Control Plane Logs
HAQM Elastic Kubernetes Service (HAQM EKS) is a managed container service that provides a highly available single-tenant control plane to run and scale Kubernetes applications in the cloud or on-premises. Logs are an important way to debug problems, audit cluster activities, and monitor the health of your application. Kubernetes logging can be divided into control […]
Addressing IPv4 address exhaustion in HAQM EKS clusters using private NAT gateways
Introduction The HAQM VPC Container Network Interface (CNI) plugin creates many advantages for pod networking when deployed on an HAQM Elastic Kubernetes Service (HAQM EKS) cluster. First, it lets us reuse proven, battle-tested HAQM Virtual Private Cloud (HAQM VPC) networking and security best practices for building Kubernetes clusters on AWS. This allows us to use […]
Run event-driven workflows with HAQM EKS and AWS Step Functions
Introduction Event-driven computing is a common pattern in modern application development with microservices, which is a great fit for building resilient and scalable software in AWS. Event-driven computing needs to be push-based with event-driven applications that are run on-demand when an event triggers the functional workflow. Tools that help you minimize resource usage and reduce […]
Getting started with HAQM EKS Anywhere on Bare Metal
We are happy to announce the general availability of HAQM EKS Anywhere on Bare Metal. We released HAQM EKS Anywhere in 2021 with support to run on-premises Kubernetes clusters using VMware and today you can use EKS Anywhere to provision clusters without virtualization. The new functionality adds support for managing the full hardware lifecycle to […]
Leverage AWS secrets stores from EKS Fargate with External Secrets Operator
Secrets management is a challenging but critical aspect of running secure and dynamic containerized applications at scale. To support this need to securely distribute secrets to running applications, Kubernetes provides native functionality to manage secrets in the form of Kubernetes Secrets. However, many customers choose to centralize the management of secrets outside of their Kubernetes […]