Amazon Elastic Container Service for Kubernetes (Amazon EKS) is an upcoming managed service for running Kubernetes on AWS. This session will provide an overview of Amazon EKS, why we built it, and how it works.

1. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Nick Brandaleone, AWS Solutions Architect

2. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Open source container
management platform
Helps you run
containers at scale
Gives you primitives
for building
modern applications
What is Kubernetes?
© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.

3. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.

4. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.

5. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
W h y d e v e l o p e r s l o v e K u b e r n e t e s
Kubernetes can be run anywhere
O N - P R E M I S E S C L O U D
© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.

6. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
W h y d e v e l o p e r s l o v e K u b e r n e t e s
A single extensible API
S C A L E P E R F O R M A N C E B R E A D T H

7. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Cloud-Native Applications
M I C R O S E R V I C E
T O O L I N G
N AT I V E
A P P L I C AT I O N S

8. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
But where you run K8s matters
Q U A L I T Y O F T H E
C L O U D P L AT F O R M
Q U A L I T Y O F T H E
A P P L I C AT I O N S
Y O U R U S E R S

9. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
63%of Kubernetes workloads
run on AWS today
—CNCF survey

10. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
3x Kubernetes Master Nodes (for HA)
Kubernetes on AWS

11. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
API
Server
Cloud
Controller
Controller
Manager
Scheduler Add-onsKubeDNS
Kubernetes Master

12. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Availability
Zone 1
etcd
Master
etcd
Master
etcd
Master
Availability
Zone 2
Availability
Zone 3

13. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Availability
Zone 1
etcd
Master
etcd
Master
Availability
Zone 2
Availability
Zone 3
etcd
Master

14. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Make AWS the
BEST PLACE
to run ANY
containerized applications
© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.

15. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
“Run Kubernetes for me.”

16. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
“Native AWS Integrations.”

17. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
”An Open Source Kubernetes Experience.”

18. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
E L A S T I C C O N TA I N E R S E RV I C E F O R K U B E R N E T E S
(EKS)

19. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.

20. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.

21. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.

22. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.

23. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Availability
Zone 1
etcd
Master
etcd
Master
Availability
Zone 2
Availability
Zone 3
etcd
Master

24. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
mycluster.eks.amazonaws.com
Availability
Zone 1
Availability
Zone 2
Availability
Zone 3
kubectl

25. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
D E M O !

26. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
aws eks create-cluster –cluster-name reinvent2017 –desired-master-version 1.7
–role-arn arn:aws:iam::account-id:role/role-name

27. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
aws eks describe-cluster –cluster-name reinvent2017

28. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
aws eks list-clusters

29. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
aws eks delete-cluster –cluster-name
reinvent2017

30. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.

31. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.

33. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Native VPC networking
with CNI plugin
Pods have the same VPC
address inside the pod
as on the VPC
Simple, secure networking
Open source and
on Github
…{ }

34. VPC CNI plugin
• Bridge between the K8s land – AWS VPC
• AWS R ou tab le I Ps
• Thin layer – no performance impact
• Pod IP ENI secondary IP

35. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.

36. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.

37. Amazon
CloudWatch
AWS
CloudTrail
Master

38. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Metrics
Nodes
Node exporter
Pod/Container
Kube-state-metrics
cAdvisor
Application
/metrics
JMX
Cluster-wide Aggregator
Prometheus, Heapster
Visualizer
Grafana, Kibana, Dashboard
Data Model
InfluxDB, Graphite
Alerting
AlertManager, Kapacitor

39. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.

40. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.

41. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.

42. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Heptio IAM Authenticator
An open source approach to integrating
AWS IAM authentication with Kubernetes

43. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
kubectl
3) Authorizes AWS Identity with RBAC
K8s API
1) Passes AWS Identity
2) Verifies AWS Identity
4) K8s action
allowed/denied
AWS Auth

44. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.

45. 1.9.21.9.3
Version
1.9
Version
1.10
© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.

46. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.

47. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
kubectl
Workers
PrivateLink
Interface Amazon EKS

48. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
MORE KUBERNETES
http://amzn.to/k8s-on-aws
Kubernetes on AWS Workshop:
https://aws.amazon.com/eks/
EKS FAQ:

49. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
DEPLOYING CONTAINERS
Server
Docker
Bins/Libs Bins/Libs
App2App1
Server
Docker
Bins/Libs Bins/Libs
App2App1
Server
Docker
Bins/Libs Bins/Libs
App2App1
Server
Docker
Bins/Libs Bins/Libs
App2App1
Server
Docker
Bins/Libs Bins/Libs
App2App1
Server
Docker
Bins/Libs Bins/Libs
App2App1
Server
Docker
Bins/Libs Bins/Libs
App2App1
Server
Docker
Bins/Libs Bins/Libs
App2App1
Server
Docker
Bins/Libs Bins/Libs
App2App1
Server
Docker
Bins/Libs Bins/Libs
App2App1
Server
Docker
Bins/Libs Bins/Libs
App2App1
Server
Docker
Bins/Libs Bins/Libs
App2App1
Server
Docker
Bins/Libs Bins/Libs
App2App1
Server
Docker
Bins/Libs Bins/Libs
App2App1
Server
Docker
Bins/Libs Bins/Libs
App2App1
Server
Docker
Bins/Libs Bins/Libs
App2App1
Server
Docker
Bins/Libs Bins/Libs
App2App1
Server
Docker
Bins/Libs Bins/Libs
App2App1
Server
Docker
Bins/Libs Bins/Libs
App2App1
Server
Docker
Bins/Libs Bins/Libs
App2App1
Server
Docker
Bins/Libs Bins/Libs
App2App1
Server
Docker
Bins/Libs Bins/Libs
App2App1
Server
Docker
Bins/Libs Bins/Libs
App2App1
Server
Docker
Bins/Libs Bins/Libs
App2App1
Server
Docker
Bins/Libs Bins/Libs
App2App1
Server
Docker
Bins/Libs Bins/Libs
App2App1
Server
Docker
Bins/Libs Bins/Libs
App2App1
Server
Docker
Bins/Libs Bins/Libs
App2App1
Server
Docker
Bins/Libs Bins/Libs
App2App1
Server
Docker
Bins/Libs Bins/Libs
App2App1
Hundreds of hosts with
thousands of containers
…OK, this is hard w/o help…
Amazon ECS