Running Containers on Amazon Elastic Kubernetes Service

Day 3

Resources

The following resource links will provide more information and help reinforce topics covered during Day 3:

Module 7: Manage networking in Amazon EKS

• CNI custom networking
• App Mesh Inject
• AWS App Mesh Controller For K8s
• A Guide to the Kubernetes Networking Model
• De-mystifying cluster networking for Amazon EKS worker nodes
• Kubernetes Namespaces: use cases and insights
• Cross account IAM roles for Kubernetes service accounts
• How To Inspect Kubernetes Networking
• CoreDNS and Route53
• Learning AWS App Mesh
• Deciphering the Difference Between a Service Mesh and API Gateway
• Integrating AWS X-Ray with AWS App Mesh
• Everything you need to know about Kubernetes pod networking on AWS
• Lessons learnt while operating multi-tenant kubernetes cluster in production - Prateek Nayak (MYOB)
• AWS re:Invent 2017: Deep Dive into Amazon EKS
• Security groups for pods
• Cluster Networking
• Application load balancing on Amazon EKS
• Introducing The CIS Amazon EKS Benchmark
• aws-app-mesh-roadmap
• Using Service Meshes in AWS Cloud native networking use cases and good practices

Module 8: Managing Authentication and Authorization in Amazon EKS

• Authorization Overview
• Using RBAC Authorization
• Configure Service Accounts for Pods
• Managing users or IAM roles for your cluster
• IAM roles for service accounts
• Restricting access to the IMDS and Amazon EC2 instance profile credentials
• Cluster authentication
• Default roles and role bindings
• RBAC Lookup
• Kubernetes Operational View
• Amazon EKS Pod Identity Webhook
• AWS IAM Authenticator for Kubernetes
• Demystifying RBAC in Kubernetes
• Enabling cross-account access to Amazon EKS cluster resources
• Amazon EKS IAM Role for Service Accounts CDK/CloudFormation Library
• Role based access control (RBAC) policies in Kubernetes
• Introducing fine-grained IAM roles for service accounts
• Manage Amazon EKS with Okta SSO

Module 9: Implementing Secure Workflows

• Use multi-stage builds
• Portieris
• Clair
• Allowing users in other accounts to use a CMK
• Using EKS encryption provider support for defense-in-depth
• AWS Secrets Controller PoC: integrating AWS Secrets Manager with Kubernetes
• Using Gatekeeper as a drop-in Pod Security Policy replacement in Amazon EKS
• Introducing security groups for pods
• Installing Calico on Amazon EKS
• Introducing security groups for pods
• Security groups for pods

Module 10: Managing Upgrades in Amazon EKS

• Kubernetes Release Notes
• Kubernetes version and version skew support policy
• Kubernetes Deprecation Policy
• Updating a cluster
• Self-managed node updates
• Updating a managed node group
• Amazon EKS platform versions
• Amazon EKS Kubernetes versions
• Safely Drain a Node
• flagger
• Day 2 Kubernetes: Migrating EKS Node Groups with Zero Downtime
• EKS Rolling Update

Appendix A: Container Fundamentals

• The Twelve-Factor App
• Containers on AWS
• Docker — Beginner’s Guide - Part 1: Images & Containers
• Welcome To The Container Jungle: Docker vs. containerd vs. Nabla vs. Kata vs. Firecracker and more!
• Dcker Docs
• Dockerfile reference
• Dockerizing a Node.js web app
• Amazon ECR private registries
• How to Get Started with Docker
• How to Build and Test Your Docker Images in the Cloud
• The 1-Factor App: Using Kubernetes to Get a Jump Start on Modernization
• Don't Panic: Kubernetes and Docker
• Container runtimes
• Pull an Image from a Private Registry
• Open Container Initiative