# EKS for Kubernetes

\ <br>

![image-20200923111519203](https://199941116-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-M6ivT9AfNVmiT1Q6B2U%2Fuploads%2Fgit-blob-ecfb1cc6544c84844ba547a53faa8faa3934ef58%2Fimage-20200923111519203.png?alt=media)

\ <br>

## Managed node groups

> Automates node provisioning and lifecycle management for Amazon EKS Clusters

* No need to separately provision or register Amazon EC2 instances
* Recently added support for Launch Template and Custom AMI
* When a specific version is released, previous versions become deprecated
* .....

<br>

### Fargate

* Simply write and submit a Pod manifest, and the control plane manages everything automatically
* There may be security concerns, but it completely separates down to the hardware level

<br>

#### Advantages of using Fargate

* Different billing metrics can be applied per organization
* Per-Pod billing
  * The unit of management becomes the Pod!
    * Per-Pod access restrictions
    * Per-Pod network restrictions possible!
* ...

<br>

### Amazon VPC CNI Plugin

* ...

\ <br>

### Amazon EKS Ingress Controller

* When handling traffic, you need to distinguish between IP Mode and Instance Mode
  * This is possible because Amazon VPC CNI directly targets and uses IPs!

\ <br>

### IAM for Pods

* IAM permissions at the Pod level are possible
  * You can manage permissions per Pod!
* ...

\ <br>

## Logging and Monitoring

* Since the Control Plane is not accessible from the VPC..

<br>

### AWS App Mesh

* A service mesh that manages communication between services

<br>

### Amazon CloudWatch Container Insights

<https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/ContainerInsights.html>

\ <br>

## Hands-on

<https://www.eksworkshop.com/020\\_prerequisites/k8stools/>
