Tag: k8s

You asked for it and with Kubernetes 1.13 we have enabled it:  Amazon Elastic Container Service for Kubernetes (EKS) now supports Pod Security Policies. In this post we will review what PSPs are, how to enable them in the Kubernetes control plane and how to use them, from both the cluster admin and the developer perspective. What is a Pod Security Policy and […]

中文版 – Kubernetes core components provide a rich set of metrics you can use to observe what is happening in the Control Plane. You can see how many watchers are on each resource in the API Server, the number of audit trail events, the latency of the requests to the API Server, and much more. These […]

中文版 – The Container Storage Interface (CSI) is a standard for exposing storage on top of container orchestrators such as Mesos or Kubernetes. CSI gives storage providers like AWS the opportunity to create a thin wrapper which will allow a Kubernetes cluster to automatically provision and manage the entire lifecycle of the storage class. Storage […]

This post is an updated version of Deploying the Heptio Authenticator to kops. Heptio Authenticator has since been donated to the Cloud Provider Special Interest Group (SIG), allowing the project to be collaboratively worked on. Now, instead of needing to manually configure the Authenticator, you can use kops primitives to deploy automatically when a cluster […]

NOTE: In mid-2019 we re-launched and intensified our efforts, deprecating and archiving the old code base of the AWS Service Operator and changing to a community-driven approach. We’re currently in the design phase and invite you to comment on the design issues and become a contributor to the new project, see details at the new GitHub […]

We’ve talked about FaaS (Functions as a Service) in Running FaaS on a Kubernetes Cluster on AWS Using Kubeless by Sebastien Goasguen. In this post, Alex Ellis, founder of the OpenFaaS project, walks you through how to use OpenFaaS on Amazon EKS. OpenFaaS is one of the most popular tools in the FaaS space, with […]

Arun, Abby, Brent and I all had the opportunity over the last two months to emcee the two AWS EKoSystem Days, in San Francisco and New York. These events brought together the launch of Amazon Elastic Container Service for Kubernetes, EKS (San Francisco), and the four-year anniversary of Kubernetes’ release and three years of its […]

There are a number of ways to create a Kubernetes cluster using Amazon Elastic Container Service. eksctl gives you a simple, single, one-line command to bring up a cluster with a basic VPC, and completes the process by writing a new KUBECONFIG and deploying the aws-auth ConfigMap, allowing you to get up and running with […]

This post has been updated – Deploying the AWS IAM Authenticator to kops 中文版   The Kubernetes 1.10 release has included alpha support for the client-go package to process external ExecCredential providers. This is being used to power the authentication against Amazon Elastic Container Service for Kubernetes (EKS) clusters while still following one of the […]

中文版 Mesosphere in September of 2017 announced it was bringing back support for Kubernetes on its popular DC/OS cluster management solution. The beta release supported creating a cluster; you could then SSH tunnel into the nodes and deploy standard Kubernetes primitives to it. As of early January, support was officially added for the –cloud-provider flag, […]