Getting Started on Amazon EKS

Everything you need to know to get started with Amazon EKS. Also contains my review of EKS and 3 pitfalls.

1. Matthew Barlocker
Founder @ Blue Matador

2. Architecture & Component Diagrams

3. Components in k8s masters
●Presents the k8s api
●kubectl connects to this
endpoint
kube-scheduleretcdkube-apiserver
●Key-value storage
●Can be swapped
●Assigns pods to nodes
●Factors in resources,
availability, and usage

●Node controller
●Replication controller
●Endpoints controller
●Service account & token
controller
cloud-controller-managerkube-controller-manager
●Interacts with cloud
●Node controller
●Route controller
●Volume controller
●Service controller

4. HA Masters with stacked etcd

5. HA Masters with external etcd

6. HA k8s considerations for master nodes
●Node failure
●Security
●Capacity
●Upgrades (system & k8s)
●Etcd management
○Replication failure
○Disaster recovery
○Corruption

7. Diagrams and Marketing Promises

8. Benefits on AWS site

9. EKS seems simple

10. EKS works with VPC, EC2, ELB, Autoscaling, etc

11. Step by Step Instructions

12. Getting started is misleading

13. Getting started is misleading

14. Follow the “Getting Started” guide
https://docs.aws.amazon.com/eks/latest/userguide/getting-started.html

15. Create your Amazon EKS Service Role in IAM

16. Create your Amazon EKS Service Role in IAM

17. Create your Amazon EKS Service Role in IAM

18. Create your Amazon EKS Cluster VPC in Cloudformation

19. Create your Amazon EKS Cluster VPC in Cloudformation

20. Create your Amazon EKS Cluster VPC in Cloudformation

21. Create Your Amazon EKS Cluster

22. Create Your Amazon EKS Cluster … on the Command Line
aws eks create-cluster
--name devel
--role-arn [ARN from Cloudwatch]
--resources-vpc-config
subnetIds=[subnet-a, …], securityGroupIds=[sg-a, …]

23. Create Your Amazon EKS Cluster … on the Command Line

24. Install and Configure kubectl
https://kubernetes.io/docs/tasks/tools/install-kubectl/

25. Install and Configure aws-iam-authenticator

26. Download and Install the Latest AWS CLI

27. Configure kubectl for Amazon EKS

28. Configure kubectl for Amazon EKS

29. Launch and Configure Amazon EKS Worker Nodes

30. Launch and Configure Amazon EKS Worker Nodes

31. Launch and Configure Amazon EKS Worker Nodes

32. Launch and Configure Amazon EKS Worker Nodes

33. Apply the AWS authenticator configuration map

34. Apply the AWS authenticator configuration map

35. Apply the AWS authenticator configuration map

36. Troubleshooting and learning

37. Private Subnets in VPC
●Check VPC Settings
○NAT Gateway
○Security Groups
○Route Tables
○Network ACLs
●Try Modifying CloudFormation instead

38. ●Create EKS cluster on CLI
●Creator = Owner
●Check your IAM keys and account
EKS Owner

39. AWS Profiles & aws-iam-authenticator

40. The good and the bad

41. ●Complete HA master control plane with zero
management
○Node failure
○Security
○Capacity
○Upgrades (system & k8s)
○Etcd management
○Replication failure
○Disaster recovery
○Corruption
●Authentication works with your existing IAM
EKS: The Good

42. EKS: The Bad
●EKS is not a fully managed cluster
○Node management
○Capacity / utilization requirements
○Monitoring
●aws-iam-authenticator required for all
admins
●I personally hate Cloudformation

43. Local brands and events

44. Automated Alerting in AWS | Blue Matador
●140+ alerts out-of-the-box
●Zero configuration or tuning
●Read-only IAM credentials

15 minutes to setup monitoring for:
●Compute: EKS, EC2, ECS, ELB Lambda,
Fargate, VPC, Beanstalk
●DB: RDS, Aurora, Dynamo, ElastiCache,
ElasticSearch
●Storage: S3, EBS
●Others: Route53, ACM, Cloudfront, SES,
SQS, SNS, Kinesis
●Kubernetes: Nodes, pods, services,
daemonsets
Personalized Demo
https://www.bluematador.com/request-demo

45. Keynote by:
Charlie Kindel
Lead Product
Manager of Alexa
Let’s Talk Tech | Free Event | Control4
6:15pm Networking, Food,
Vendors, and see Control4
Smart Home products

7:00pm Tech Talks and
Presentations

8:00pm Prizes and Networking
(must be present to win)

8:45pm <done>


Register Here:
https://tinyurl.com/C4-Lets-Talk-Tech

46. Any questions?