Alex Chircop

🚀 Open Source launch today: the "STS OIDC Driver" STS OIDC Driver is a tool that let's you "sign-in" to the AWS CLI/SDK using OIDC. The tool kicks off an OIDC flow between your OpenID Provider and AWS STS and gets you temporary AWS credentials for an IAM role. This is done without using IAM Identity Center, and instead uses an OIDC provider you configure in an AWS account. The tool built to be compatible with various OIDC/OAuth standards and security best practices scattered across all the different standards definitions and RFCs. I've been using this internally for a bit to test OpenID providers with AWS and learn how very non-standard this standard has been built across the major providers. Check it out, I hope you find it useful. https://lnkd.in/g5-n6977

244

6 Comments

Learn Kubernetes Weekly 132 hot off the press, and those are my top picks: 🤯 Istio-Proxy Chaos in the Middle of a Snowy Morning — Learn how an Istio-proxy OOMKilled error caused a production service outage due to excessive memory from mesh-wide configurations. The solution was to reduce memory use with namespace isolation and resource annotations. 📉 How did I reduce a $2,000/day non-prod (Ephemeral) AWS Network cost without an outage Ashish — This post shows how migrating a non-prod EKS workload from a multi-AZ to a single-AZ architecture eliminated cross-AZ traffic and reduced AWS network costs by $2K/day. 📦 Linux container from Scratch Michal — This article guides you through using terminal commands to build a Linux container from the ground up. If you prefer to read online (or receive it next week in your inbox), you can do so here: https://lnkd.in/gQy_-2Ry

66

2 Comments

No Kubernetes expertise? No problem. Just write instructions in plain English. Presenting a powerful PoC, an intelligent server layer for Amazon EKS that enables generative AI models to create, deploy, manage and troubleshoot Kubernetes clusters through natural language commands. Here is what it can do ** Creates Amazon EKS clusters with dedicated VPCs and proper networking ** Generates deployment YAMLs and manages K8s resources (CRUD operations) ** Detects and fixes YAML errors ** Deploys containerized apps with customizable parameters ** Monitors resources, retrieves logs/events from CloudWatch and supports operational queries ** Built with a security first design: IAM integration, access controls and read only modes All of this done in minutes using plain English. No kubectl. No YAML writing. Just tell it what you want. AI is not just assisting DevOps, it's transforming it. Please watch the below video in full screen to know the real capability of this PoC. https://lnkd.in/dZMpGGJ9 #GenerativeAI #Kubernetes #AmazonEKS #DevOpsAutomation #CloudNative #EKS #CloudEngineering

70

Most security tools weren’t built for #Kubernetes. NGFWs fail to understand Kubernetes constructs.. K8s tools don’t speak to IaaS... Service meshes don’t cover egress... It all adds up to security gaps and operational overhead. The Aviatrix Kubernetes Firewall bridges the gap. This infographic breaks down where traditional tools fall short and how Aviatrix simplifies, centralizes, and secures policy enforcement across your cloud-native and IaaS environments. 📎 View the full infographic: https://loom.ly/94wgTcM 😎 Get a demo: https://lnkd.in/eD7sWZdG #Kubernetes #Multicloud #ZeroTrust #CloudSecurity

63

6 Comments

AWS Community Blog Post: Deploy a vCluster on EKS Using Helm Priyankar Prasad (Senior Platform Engineer at Alteos) published this post demonstrating how to deploy vCluster using Helm - great for isolation. In modern Kubernetes deployments, multi-tenancy is a common challenge. Virtual clusters(vClusters) offer a lightweight way to create isolated environments without the overhead of multiple Kubernetes clusters. In this post, I’ll guide you through deploying a vCluster on Amazon EKS using Helm and connecting to it locally. (full link in comments) #aws #awscloud #kubernetes #K8s #amazoneks #helm #devops https://lnkd.in/eZadn4V6

62

4 Comments