🔴 - To support my channel, I’d like to offer Mentorship/On-the-Job Support/Consulting - me@antonputra.com

I didn't understand Kubernetes related technologies when I read about it on the internet, but your videos made it very easy to understand. I really appreciate it.

@AntonPutra

Ай бұрын

❤️

Amazing stuff . This is the right moment l to deep dive into EKS . Thank you so much for the effort 🙏🏻🙏🏻🙏🏻

@AntonPutra

Ай бұрын

thanks!

@soufiane22v

Ай бұрын

is it possible to use openTofu instead of terraform ?

This is fantastic, I’m loving that you’ve broken this into multiple videos and are going into a more detail helping me to build my production EKS cluster. This is worth my subscription, keep up the good work.

@AntonPutra

Ай бұрын

thank you!

*Dude I see you are doing good....Keep up the good work :)....Dawai Dawai....Let the JUNIP people know you are doing well :)*

@AntonPutra

Ай бұрын

😂😂

Great video!!! Now I am waiting for the next part. 😁

@AntonPutra

Ай бұрын

thank you!

Thank you very much Anton for all the videos you make! I learned a lot from your content!

@AntonPutra

Ай бұрын

thanks!

masterpiece Sir, curiously waiting for the rest of EKS videos and thank you for the great job.

@AntonPutra

Ай бұрын

thank you!

It is a great explanation! thank you for all your videos!

@AntonPutra

15 күн бұрын

thanks!!

Part 3 will be released in 2 days. Playlist - kzread.info/head/PLiMWaCMwGJXnKY6XmeifEpjIfkWRo9v2l&si=Ku0ay7zUEKgfcVcb 1. Create AWS VPC using Terraform 2. Create AWS EKS Cluster using Terraform 3. Add IAM User & IAM Role to AWS EKS 4. Horizontal Pod Autoscaler (HPA) on AWS EKS 5. Cluster Autoscaler Tutorial (EKS Pod Identities) 6. AWS Load Balancer Controller Tutorial (TLS) 7. Nginx Ingress Controller Tutorial (Cert-Manager & TLS) 8. CSI Driver Tutorial (ReadWriteOnce) 9. EFS CSI Driver Tutorial (ReadWriteMany) 10. AWS Secrets Manager Tutorial (Env & Files) Based on the feedback, I’ll add the following sections (let me know if anything else is missing):
 - Autoscaling with Karpenter - Autoscaling with Keda - Private Ingress with Private DNS & VPN - Monitoring with Prometheus - EKS self managed group - EKS Fargate - EKS Pod Identities vs. EKS IRSA (oidc) vs. Node roles

@dineshparva

Ай бұрын

few more sections to add are cilium integration and vpc lattice and gateway api advantages

@AntonPutra

Ай бұрын

@@dineshparva ok, added cilium, will take a look at the second one

@rafalkita884

Ай бұрын

I would add cluster upgrades too. Every few months we have new EKS version. How would you do an upgrade when you have all these dependent cluster components deployed with terraform. Best practices, zero downtime etc. when going from one EKS version to the next one.

@AntonPutra

Ай бұрын

@@rafalkita884 thanks, it heavily depends on the Kubernetes version itself not EKS. For example K8s can deprecated some APIs for example old ingress beta v1 and you would need to upgrade all your yaml files. So it's very hard to come up with general recommendation.

Another great video. Keep sharing your knowledge.

@AntonPutra

Ай бұрын

❤️

Thank you, great tutorial!

@AntonPutra

Ай бұрын

❤️

Great content!

@AntonPutra

Ай бұрын

❤️

Amazing Videos!

@AntonPutra

Ай бұрын

thank you!

Great video! Helped me finding a couple of issues in a cluster setup. If you don't mind the question, is there any reason you choose not to use the VPC CNI addon?

@AntonPutra

17 күн бұрын

thanks, it actually comes by default with EKS as well as coredns, if I'm not mistaken

In this video you create all resources using direct terraform resources. But we also have publicly available modules from Anton Babenko to create EKS and simplify the terraform layer, in my opinion. What do you think is better to use in production cases? Is it worth using such public terraform modules or is it better to create all the resources yourself?

@AntonPutra

Ай бұрын

I respect him, i just generally don't like using open source modules. For example that open source module still uses auth configmap to manage users. It's very easy for them to start using API but it will break your infra and you would have to keep using old versions until you create new eks clusters (just from my personal experience) Modules are great for consulting and temporary envs, when you don't need to maintain clusters for over the year. I know a lot of copy pasting but when you have 20+ clusters, update module can in all envs can take months or even year :)

Thanks for the video could you explain in layman terms what exactly is the oidc provider and its role in eks does it act like a authentication broker between iam and k8s in aws?

@AntonPutra

Ай бұрын

oidc provider allows you to establish relationship between AWS IAM and Kubernetes RBAC. 1. you create IAM role and define trust relationship with Kubernetes service account 2. you create Kubernetes service account and LINK IAM role with Kubernetes service account Finally you can assign IAM permissions to Kubernetes pods. BUT you no longer need it at all, new better way is pod identities, video comparing all approaches coming in few days

good explanation. could you please put AWS url u showned in the video. it will good to read those also. Thanks. if u dont mind could you please implment istio also inside your video

@AntonPutra

14 күн бұрын

thanks, noted

@prakasha5870

14 күн бұрын

@@AntonPutra : Also prometheus and argoCD ( GitOps ) implenation inside with EKS cluster, it will be also great.

@AntonPutra

13 күн бұрын

@@prakasha5870 ok noted

You had created the eks cluster in the past what is that we can expect in this new series? How is it different from the previous EKS cluster you have created?

@AntonPutra

Ай бұрын

There have been few new developments on EKS side. 1. Kubernetes auth configmap is deprecated and recommended approach is to use new EKS API to add new users to the cluster 2. New way to grant permissions to application (we no longer use IAM OIDC provider and IAM roles for service accounts, instead we use Pod identities) 3. Some other small features in certain controllers like aws load balancer controller etc

@spasham74

Ай бұрын

@@AntonPutra I really appreciate what you doing for the community