From Zero to Production with Amazon EKS Blueprints for Terraform
Download as PDF, PPTX0 likes90 views
The document presents an overview of Amazon EKS and its blueprints for deploying Kubernetes clusters using Terraform, emphasizing the importance of flexibility and customization for various use cases. It highlights key challenges in Kubernetes adoption and offers integrated tools to facilitate best practices, cluster management, and team collaboration. The content also encourages users to explore and test EKS blueprints while providing resources for further learning.
From Zero to Production with Amazon EKS Blueprints for Terraform
- 1. © 2023, AmazonWeb Services, Inc. or its affiliates. All rights reserved. Amazon Confidential and Trademark. From Zero to Production with Amazon EKS Blueprints for Terraform Tal Hibner Technical Account Manager at AWS | Hashicorp Ambassador
- 2. © 2023, AmazonWeb Services, Inc. or its affiliates. All rights reserved. Amazon Confidential and Trademark. $ whoami
- 3. © 2023, AmazonWeb Services, Inc. or its affiliates. All rights reserved. Amazon Confidential and Trademark. 2021 is the year Kubernetes crossed the chasm Amazon EKS Fully managed container orchestration with Kubernetes 96% of organizations are either using or evaluating Kubernetes 5.6 Million developers using Kubernetes today (+67% from just a year ago). EKS is the most popular managed Kubernetes service available (39% of respondents) 2021 CNCF Cloud Survey
- 4. © 2023, AmazonWeb Services, Inc. or its affiliates. All rights reserved. Amazon Confidential and Trademark. Kubernetes adoption is still hard 16 Months Average time it takes a new customer to reach $10K MRR on EKS
- 5. © 2023, AmazonWeb Services, Inc. or its affiliates. All rights reserved. Amazon Confidential and Trademark. Day 2 Operational Challenges Amazon EKS Security Cilium Gatekeeper Secrets Manager Observability Prometheus Fluent Bit OTEL Reliability Karpenter Autoscaler Keda Delivery ArgoCD Flux Crossplane Other
- 6. © 2023, AmazonWeb Services, Inc. or its affiliates. All rights reserved. Amazon Confidential and Trademark. Multi-team Considerations Identity & Access Management Policy Management Namespace as a Service
- 7. © 2023, AmazonWeb Services, Inc. or its affiliates. All rights reserved. Amazon Confidential and Trademark. CNCF Cloud Map
- 8. © 2023, AmazonWeb Services, Inc. or its affiliates. All rights reserved. Amazon Confidential and Trademark. CNCF Cloud Map “There is no shortage of amazing tooling in the K8s ecosystem, but there is no guide for how to put all the tools together”
- 9. © 2023, AmazonWeb Services, Inc. or its affiliates. All rights reserved. Amazon Confidential and Trademark. What we hear from customers How do I integrate EKS external services like with Managed Grafana and Prometheus? What are sensible defaults for a best practices EKS cluster? How do I configure and EKS cluster to run workloads for multiple teams? How can I build an EKS cluster that meets the NSA hardening guidelines? How can I integrate EKS with an external IDP to manage cluster access? How can I run big data/analytics workloads on EKS?
- 10. © 2023, AmazonWeb Services, Inc. or its affiliates. All rights reserved. Amazon Confidential and Trademark. Working backwards from customers Flexible tools that allow customers to easily customize an EKS cluster to meet their unique requirements A starting point for net new development and experimentation on container services. Out of the box integrations with popular AWS services and open source tools A foundation that allows for customization and expansion over time.
- 11. © 2023, AmazonWeb Services, Inc. or its affiliates. All rights reserved. Amazon Confidential and Trademark. EKS Blueprints
- 12. © 2023, AmazonWeb Services, Inc. or its affiliates. All rights reserved. Amazon Confidential and Trademark. EKS Blueprints An open-source framework that allows you to configure and deploy complete EKS clusters Infrastructure as Code with Terraform Based on AWS best practices and recommendations Integrated with popular K8s tools and services Fully extensible and customizable
- 13. © 2023, AmazonWeb Services, Inc. or its affiliates. All rights reserved. Amazon Confidential and Trademark. Open Source Repositories
- 14. © 2023, AmazonWeb Services, Inc. or its affiliates. All rights reserved. Amazon Confidential and Trademark. • Configure and deploy EKS clusters according to AWS best practices. • Replicate clusters across AWS accounts and regions. • Integrate with an existing VPC or leverage the solution to deploy a new one. Cluster Management • Out of the box modules for popular Kubernetes add-ons. • Provisions AWS resources that are necessary to support add-on functionality. Add-on Management • Create distinct teams for both administrators and application owners. • Manage secure namespaces access for application teams. Team Management • Leverage GitOps tooling to manage workloads that run across your clusters. • Self-service onboarding of new workloads via a Pull Request. Workload Management What you get with EKS Blueprints
- 15. © 2023, AmazonWeb Services, Inc. or its affiliates. All rights reserved. Amazon Confidential and Trademark. Example Blueprint Teams Add-ons Clusters Amazon EKS Team B Team C Team D ArgoCD Nginx CoreDNS External DNS Cluster Autoscaler Grafana Cert Manager Prometheus Team A Team E AWS Outposts Bottlerocket AWS Fargate
- 16. © 2023, AmazonWeb Services, Inc. or its affiliates. All rights reserved. Amazon Confidential and Trademark. Some popular prebuilt modules and examples
- 17. © 2023, AmazonWeb Services, Inc. or its affiliates. All rights reserved. Amazon Confidential and Trademark. Customers
- 18. © 2023, AmazonWeb Services, Inc. or its affiliates. All rights reserved. Amazon Confidential and Trademark. What’s next? • Take EKS Blueprints for a test drive! • Introduce EKS Blueprints to your teams! • Check the last global Hashitalks of Juan Peredo from AWS – ”Fast Track your Kubernetes journey with EKS Blueprints for Terraform and Waypoint” – for watching a demo!
- 19. © 2023, AmazonWeb Services, Inc. or its affiliates. All rights reserved. Amazon Confidential and Trademark. Resources • GitHub Repository - https://github.com/aws-ia/terraform-aws-eks-blueprints • Documentation - https://aws-ia.github.io/terraform-aws-eks-blueprints • AWS Workshop - https://catalog.workshops.aws/eks-blueprints-terraform/en-US • Best Practices - https://aws.github.io/aws-eks-best-practices/
- 20. © 2023, AmazonWeb Services, Inc. or its affiliates. All rights reserved. Amazon Confidential and Trademark. Questions
- 21. © 2023, AmazonWeb Services, Inc. or its affiliates. All rights reserved. Amazon Confidential and Trademark. Thank You! Tal Hibner Technical Account Manager at AWS | Hashicorp Ambassador