Book Image

Mastering Elastic Kubernetes Service on AWS

By : Malcolm Orr, Yang-Xin Cao (Eason)
5 (1)
Book Image

Mastering Elastic Kubernetes Service on AWS

5 (1)
By: Malcolm Orr, Yang-Xin Cao (Eason)

Overview of this book

Kubernetes has emerged as the de facto standard for container orchestration, with recent developments making it easy to deploy and handle a Kubernetes cluster. However, a few challenges such as networking, load balancing, monitoring, and security remain. To address these issues, Amazon EKS offers a managed Kubernetes service to improve the performance, scalability, reliability, and availability of AWS infrastructure and integrate with AWS networking and security services with ease. You’ll begin by exploring the fundamentals of Docker, Kubernetes, Amazon EKS, and its architecture along with different ways to set up EKS. Next, you’ll find out how to manage Amazon EKS, encompassing security, cluster authentication, networking, and cluster version upgrades. As you advance, you’ll discover best practices and learn to deploy applications on Amazon EKS through different use cases, including pushing images to ECR and setting up storage and load balancing. With the help of several actionable practices and scenarios, you’ll gain the know-how to resolve scaling and monitoring issues. Finally, you will overcome the challenges in EKS by developing the right skill set to troubleshoot common issues with the right logic. By the end of this Kubernetes book, you’ll be able to effectively manage your own Kubernetes clusters and other components on AWS.
Table of Contents (28 chapters)
1
Part 1: Getting Started with Amazon EKS
7
Part 2: Deep Dive into EKS
13
Part 3: Deploying an Application on EKS
20
Part 4: Advanced EKS Service Mesh and Scaling
24
Part 5: Overcoming Common EKS Challenges

Reasons for upgrading EKS and key areas to focus on

EKS is a community project and, as such, it is constantly evolving; big releases currently happen approximately three times per year and normally contain at least one major change. For example, 1.21, released in April 2021, deprecated Pod security policies in favor of external admission control. This means that you will need to take advantage of newer Kubernetes features at some point. In addition, the Kubernetes community only supports the most recent three minor releases (for example, 1.25, 1.24, and 1.23), with older releases normally getting 1 year of patch releases, after which you are on your own!

Amazon takes the upstream Kubernetes release, tests and validates it with the AWS platform and components such as the AWS VPC CNI, and so on, and packages and releases it as an EKS release. This process takes roughly 6 months after the Kubernetes community release and will normally be supported for 14 months. This is illustrated...