Matthew Barlocker
Founder @ Blue Matador
Architecture & Component Diagrams
Components in k8s masters
● Presents the k8s api
● kubectl connects to this
endpoint
kube-scheduleretcdkube-apiserver
● Key-value storage
● Can be swapped
● Assigns pods to nodes
● Factors in resources,
availability, and usage
● Node controller
● Replication controller
● Endpoints controller
● Service account & token
controller
cloud-controller-managerkube-controller-manager
● Interacts with cloud
● Node controller
● Route controller
● Volume controller
● Service controller
HA Masters with stacked etcd
HA Masters with external etcd
HA k8s considerations for master nodes
● Node failure
● Security
● Capacity
● Upgrades (system & k8s)
● Etcd management
○ Replication failure
○ Disaster recovery
○ Corruption
Diagrams and Marketing Promises
Benefits on AWS site
EKS seems simple
EKS works with VPC, EC2, ELB, Autoscaling, etc
Step by Step Instructions
Getting started is misleading
Getting started is misleading
Follow the “Getting Started” guide
https://docs.aws.amazon.com/eks/latest/userguide/getting-started.html
Create your Amazon EKS Service Role in IAM
Create your Amazon EKS Service Role in IAM
Create your Amazon EKS Service Role in IAM
Create your Amazon EKS Cluster VPC in Cloudformation
Create your Amazon EKS Cluster VPC in Cloudformation
Create your Amazon EKS Cluster VPC in Cloudformation
Create Your Amazon EKS Cluster
Create Your Amazon EKS Cluster … on the Command Line
aws eks create-cluster
--name devel
--role-arn [ARN from Cloudwatch]
--resources-vpc-config
subnetIds=[subnet-a, …], securityGroupIds=[sg-a, …]
Create Your Amazon EKS Cluster … on the Command Line
Install and Configure kubectl
https://kubernetes.io/docs/tasks/tools/install-kubectl/
Install and Configure aws-iam-authenticator
Download and Install the Latest AWS CLI
Configure kubectl for Amazon EKS
Configure kubectl for Amazon EKS
Launch and Configure Amazon EKS Worker Nodes
Launch and Configure Amazon EKS Worker Nodes
Launch and Configure Amazon EKS Worker Nodes
Launch and Configure Amazon EKS Worker Nodes
Apply the AWS authenticator configuration map
Apply the AWS authenticator configuration map
Apply the AWS authenticator configuration map
Troubleshooting and learning
Private Subnets in VPC
● Check VPC Settings
○ NAT Gateway
○ Security Groups
○ Route Tables
○ Network ACLs
● Try Modifying CloudFormation instead
● Create EKS cluster on CLI
● Creator = Owner
● Check your IAM keys and account
EKS Owner
AWS Profiles & aws-iam-authenticator
The good and the bad
● Complete HA master control plane with zero
management
○ Node failure
○ Security
○ Capacity
○ Upgrades (system & k8s)
○ Etcd management
○ Replication failure
○ Disaster recovery
○ Corruption
● Authentication works with your existing IAM
EKS: The Good
EKS: The Bad
● EKS is not a fully managed cluster
○ Node management
○ Capacity / utilization requirements
○ Monitoring
● aws-iam-authenticator required for all
admins
● I personally hate Cloudformation
Local brands and events
Automated Alerting in AWS | Blue Matador
● 140+ alerts out-of-the-box
● Zero configuration or tuning
● Read-only IAM credentials
15 minutes to setup monitoring for:
● Compute: EKS, EC2, ECS, ELB Lambda,
Fargate, VPC, Beanstalk
● DB: RDS, Aurora, Dynamo, ElastiCache,
ElasticSearch
● Storage: S3, EBS
● Others: Route53, ACM, Cloudfront, SES,
SQS, SNS, Kinesis
● Kubernetes: Nodes, pods, services,
daemonsets
Personalized Demo
https://www.bluematador.com/request-demo
Keynote by:
Charlie Kindel
Lead Product
Manager of Alexa
Let’s Talk Tech | Free Event | Control4
6:15pm Networking, Food,
Vendors, and see Control4
Smart Home products
7:00pm Tech Talks and
Presentations
8:00pm Prizes and Networking
(must be present to win)
8:45pm <done>
Register Here:
https://tinyurl.com/C4-Lets-Talk-Tech
Any questions?

Getting Started on Amazon EKS