AWS Open Source Blog
Author: Jeremy Cowan
Jeremy Cowan is a Specialist Solutions Architect for containers at AWS, although his family thinks he sells "cloud space". Prior to joining AWS, Jeremy worked for several large software vendors, including VMware, Microsoft, and IBM. When he's not working, you can usually find on a trail in the wilderness, far away from technology.
Security features of Bottlerocket, an open source Linux-based operating system
Bottlerocket is an open source Linux-based operating system from Amazon that was purpose built for running containers with a strong emphasis on security. The result is an operating system that comes with a variety of built-in controls for creating a secure environment for running containerized workloads. In this post, we’ll explore several of the security […]
Consistent OIDC authentication across multiple EKS clusters using Kube-OIDC-Proxy
Amazon Elastic Kubernetes Service (Amazon EKS) authenticates users against IAM before they’re granted access to an EKS cluster. Access to each cluster is controlled by the aws-auth ConfigMap, a file that maps IAM users/roles to Kubernetes RBAC groups. In this guest post from Josh Van Leeuwen from Jetstack, we look at how we can use […]
Authenticating to EKS Using GitHub Credentials with Teleport
July 15, 2020 update: Gravitational has updated the instructions for using Teleport with EKS to account for the latest changes in both products. Please see the Gravitational documentation for further details. This post describes how to configure Gravitational’s Teleport as an authentication proxy for Amazon Elastic Kubernetes Service (Amazon EKS), using GitHub as the identity […]
CNI Metrics Helper
The Amazon Elastic Container Service for Kubernetes (EKS) uses the VPC CNI plugin for pod networking. The plugin runs as a DaemonSet and is responsible for assigning an IP address to pods. When managing an EKS cluster, it may be important to know how many IP addresses have been assigned and how many are available. […]