Kubernetes provides a simple metrics server for CPU and memory usage for each pod and node. Additionally, the Prometheus community has developed an improved version of the metrics server: Kube State Metrics Now, the combination of these two is like the Swiss Army Knife. Installing the Metrics Server You can easily set up the…

Part 1: How to use VPC Lattice in AWS? Establishing an external connection to a VPC Lattice installation is challenging. Because the services are located in the VPC Lattice’s link-local address range (169.254.171.0/24). I set up an environment similar to what I did in Part 1. I have 2 VPCs…

Part 1 — A: How to configure the Gateway API? Part 1 — B: How to use VPC Lattice in AWS? Connecting two separate VPCs on AWS might be difficult because of routing rules and overlapping IP addresses. Things might be more complicated when creating a connection between services that…

Part 2: How to Establish Connection Between Multiple EKS Clusters Using Gateway API and VPC Lattice? Gateway API is a Kubernetes interface that handles ingress/egress traffic in the cluster. Ingress or Gateway API? Each Ingress implementation has a different implementation. The main difference between ingress and the Gateway API is that the Gateway API…

Part 1: How to Access a Service in EKS Using an Application Load Balancer? In Part 1, the AWS Load Balancer Controller was enabled on the EKS cluster. That Ingress was set up for only one service, though. This post will be about using a single load balancer to access…

Part 2: How to Access Multiple Services in EKS using a Single Application Load Balancer? When we create a Service with a Load Balancer in EKS, AWS will create a classic load balancer. We need three things in order to enable the application load balancer in EKS. (source): An IAM…

Part 2: How to Establish External Connections to VPC Lattice? Multiple methods exist in AWS for establishing connectivity between VPCs; Transit gateway, VPC Peering, and Private Link. It can be hard to pair up multiple VPCs; see: How to Enable Peering Between Multiple (Inter-Region) VPCs via Transit Gateway? VPC Lattice…

You can take advantage of IAM's authentication mechanism when adding a new user to your EKS cluster. Imagine you need two different user groups; developers , admins Users in the group developers can see only pods and their logs Users in the group admins can do everything in the cluster …

Part 1: Kubernetes Core Concepts: Service Account Service Accounts in Kubernetes may have either expirable or non-expirable tokens. In Part 1, we examined tokens with no expiration date. Since they have no expiration date, Kubernetes advises against using them. How do you create an expirable token? There are two recommended methods for obtaining an expirable token: Projected…