EKS_Auto_Mode_Deep_Live.pdf

Transcript

1. EKS Deep Live JAWSUG 横浜#81 re:invent 2024 re:Cap Container
2. hello! I am Soushi Hiruta X @web_se Facebook shiruta Github clouddev-code Zenn clouddev-code 2 • AWS CDK • Microservice architecture • Prometheus/Grafana Loki • Rust
3. 3 What’s newからContainerカテゴリで絞ると。。
4. Agemda ✘ 主な特徴 ✘ EKS on Fargate都の違い ✘ 制限事項、サポートしていない考慮事項 ✘ 既存からのマイグレーション . 4
5. 1. EKS Auto Modeの特徴 EKS Auto Modeはノード管理がフルマネージド 5
6. EKS Auto Mode Feature Streamline Kubernetes Cluster Management Application Avaiability Auto scaling Reply on Karpenter Efficiency Automated Upgrade 6 Security EKS Pod Identiy Agent Managed Components https://docs.aws.amazon.com/eks/latest/userguide/automode.html
7. EKS Auto Mode Shared Responsibility Model 7
8. EKS Auto Mode Node Pool 8 https://github.com/eksctl-io/eksctl/blob/main/userdocs/src/usage/auto-mode.md
9. EKS Auto Mode Node 9
10. EKS Auto Mode v.s. EKS on Fargate EKS Auto Mode EKS on Fargate Support DaemonSets, ARM, Spot No Support (*) GPU,DaemonSets, ARM, Spot, EBS mount Pricing Instance Pod 10
11. 2. EKS Auto Modeの考慮事項 EKS Auto Modeはノード管理がマネージドになりましたが、制限事項も ある。 11
12. EKS Auto Mode does not support. Security Groups per Pod(SGPP) Custom Networking. The IP Addresses of Pods and Nodes must be from the same CIDR Block.. Warm IP, warm prefid and warm ENI configurations and courage. Network Policy configurations such a contrack timer customization Enabling or disabling prefix delegration. 12 Minimum IP Targetrs configuration. Exporting network event logs to Cloudwatch Other configurations supported by open-source AWS CNI.
14. 既存からのマイグレーション AWS Load Balancer Controller Migrating volumes from EBS CSI Controller to EKS Auto Mode Block Storage VPC CNI 14
15. Load Balancer マイグレーションの考慮事項 The default targeting mode is IP Mode , not instance mode EKS Auto Mode only supports Security group mode for Network Load Balancer AWS does not support migrating load balancers from self managed AWS load balancer controller to management by EKS Auto Mode You cannot bring your own target groups. 15 The networking.ingress.ipBlock field in TargetGoundBinding spec is not supported
16. EKS Clusters with alternative CNI EKS auto Mode not supopport alternative CNI 16 https://docs.aws.amazon.com/eks/latest/userguide/alternate-cni-plugins.html
17. EKS Auto Modeで運用削減 サポートしていない事項を考慮したうえでどう すべきか 17
18. Ballon Pod Podがいなくなるとノードも削除されるので、優 先度の低いPodをうごかしておく、ノード起動 のレイテンシー削減 運用の考慮事項 18 ノードのログをCloudwatch出力なし
19. 2. Extra Resources For Business Plans, Marketing Plans, Project Proposals, Lessons, etc
20. Appendix Learn about VPC Networking and Load Balancing in EKS Auto Mode https://docs.aws.amazon.com/eks/latest/userguide/auto-networking.html Enable EKS Auto Mode on existing EKS clusters https://docs.aws.amazon.com/eks/latest/userguide/migrate-auto.html Amazon EKS AutoModeをはじめよう https://aws.amazon.com/jp/blogs/news/getting-started-with-amazon-eks-auto-mode/ 20
21. thanks! Any questions? You can find me at @web_se 21