AWS EKS — Managed Kubernetes

Elastic Kubernetes Service. Cluster setup, node groups, Fargate profiles, IRSA a add-ons.

Cluster setup

apiVersion: eksctl.io/v1alpha5
kind: ClusterConfig
metadata:
  name: production
  region: eu-west-1
  version: "1.29"
managedNodeGroups:
  - name: workers
    instanceType: m6i.xlarge
    desiredCapacity: 3
    minSize: 2
    maxSize: 10

IRSA

eksctl create iamserviceaccount \
  --cluster production \
  --name s3-reader \
  --attach-policy-arn arn:aws:iam::aws:policy/AmazonS3ReadOnlyAccess \
  --approve

Fine-grained IAM pro jednotlivé pody — žádné sdílené node credentials.

Add-ons

• CoreDNS, kube-proxy, VPC CNI
• EBS CSI Driver — persistent volumes
• AWS Load Balancer Controller — ALB/NLB

Shrnutí

EKS je production-grade K8s na AWS. Managed node groups + Fargate pro burst.