Containers
Tag: Kubernetes
Using Dex & dex-k8s-authenticator to authenticate to HAQM EKS
This post was contributed by Márk Sági-Kazár, Jeremy Cowan, and Jimmy Ray. Introduction In an earlier post, Paavan Mistry introduced us to the OIDC identity provider (IdP) authentication for HAQM Elastic Kubernetes Service (HAQM EKS), a feature that allows you to use an OIDC identity provider with new or existing clusters. Before launching this feature, […]
Policy-based countermeasures for Kubernetes – Part 2
Choosing the Right Policy-As-Code Solution In Part 1 of this series, we introduced the concept of policy-as-code (PaC), and discussed the following solutions: OPA, OPA/Gatekeeper and MagTape. In this post (Part 2) we will review the Kyverno and k-rail PaC solutions. For Kubernetes, there are several PaC solutions available in the open-source software (OSS) community. […]
Policy-based countermeasures for Kubernetes – Part 1
Choosing the right policy-as-code solution This is Part 1 in a two part series where we discuss policy-as-code solutions. As more organizations adopt containerization as a delivery strategy, the need for automated security, compliance, and privacy controls that detect, prevent, reduce, and counteract known and unknown threats, has increased. Out of this increased need for […]
Preparing for Kubernetes API deprecations when going from 1.15 to 1.16
Note: The contents of this blog are no longer up to date as the referenced HAQM EKS Kubernetes version is no longer supported. Refer to the HAQM EKS Kubernetes versions AWS documentation for up to date information on supported HAQM EKS Kubernetes versions. The way that Kubernetes evolves and introduces new features is via […]
Advertising click-prediction modeling on HAQM EKS
In digital advertising, the ad click-through rate (CTR) model predicts the probability of a click given the ads and context x (for example, shopping query, time of the day, device). The output of a CTR model can be seen as a conditional probability p(y = click|x). A precise estimation of this probability influences our ability […]
How to build container images with HAQM EKS on Fargate
This post was contributed by Re Alvarez Parmar and Olly Pomeroy Containers help developers simplify the way they package, distribute, and deploy their applications. Developers package their code into a container image that includes the application code, libraries, and any other dependencies. This image can be used to deploy the containerized application on any compatible […]
Fluent Bit Integration in CloudWatch Container Insights for EKS
Ugur KIRA, Dejun Hu, TP Kohli CloudWatch Container Insights CloudWatch Container Insights enables you to explore, analyze, and visualize your container metrics, Prometheus metrics, application logs, and performance log events through automated dashboards in the CloudWatch console. These dashboards summarize the performance and availability of clusters, nodes or EC2 instances, services, tasks, pods, and containers […]
Turbocharging EKS networking with Bottlerocket, Calico, and eBPF
This post is co-authored by Alex Pollitt, Co-founder and CTO at Tigera, Inc. Recently HAQM announced support for Bottlerocket on HAQM Elastic Kubernetes Service (HAQM EKS). Bottlerocket is an open source Linux distribution built by HAQM to run containers focused on security, operations, and manageability at scale. You can learn more about Bottlerocket in this […]
Ship and visualize your Istio virtual service traces with AWS X-Ray
AWS X-Ray is a managed distributed tracing system that helps customers gain end-to-end visibility of requests and provides rich visualization of connected services. This post will show how customers can integrate AWS X-Ray as a backend for Zipkin traces generated from services in a Istio service mesh.
Running microservices in HAQM EKS with AWS App Mesh and Kong
NOTICE: October 04, 2024 – This post no longer reflects the best guidance for configuring a service mesh with HAQM EKS and its examples no longer work as shown. Please refer to newer content on HAQM VPC Lattice. ——– This post was created in collaboration with Claudio Acquaviva, Solution Engineer, Kong, and Morgan Davies, Kong […]