Running Containers on Amazon Elastic Kubernetes Service (Amazon EKS)

In this course, you will learn to:

• Review and examine containers, Kubernetes, and Amazon EKS fundamentals—and the impact of containers on workflows
• Build an Amazon EKS cluster by selecting the correct compute resources to support worker nodes
• Secure your environment with AWS Identity and Access Management (IAM) authentication by creating an Amazon EKS service role for your cluster
• Deploy an application on the cluster, then publish container images to ECR and secure access via IAM policy
• Automate and deploy applications; examine automation tools and pipelines; and create a GitOps pipeline using WeaveFlux
• Collect monitoring data through metrics, logs, and tracing with AWS X-Ray and identify metrics for performance tuning
• Review scenarios where bottlenecks require the best scaling approach using horizontal or vertical scaling
• Assess the tradeoffs between efficiency, resiliency, and cost—along with the impact of tuning one instead of the other
• Describe and outline a holistic, iterative approach to optimizing your environment, designing for cost, efficiency, and resiliency
• Configure AWS networking services to support the cluster and describe how EKS/Amazon Virtual Private Cloud (VPC) functions simplify inter-node communications
• Describe the function of the VPC Container Network Interface (CNI) and review the benefits of a service mesh
• Upgrade your Kubernetes, Amazon EKS, and third-party tools

We recommend that attendees of this course have:

• Completed Introduction to Containers
• Completed Amazon Elastic Kubernetes Service (EKS) Primer
• Completed AWS Cloud Practitioner Essentials (or equivalent real-world experience)
• Basic Linux administration experience
• Basic network administration experience
• Basic knowledge of containers and microservices

This course is intended for people who provide container orchestration management in the AWS Cloud including:

• DevOps engineers
• Systems administrators

This course will be delivered through a blend of:

• Presentations
• Hands-on labs
• Demonstrations
• Group exercises

This course will cover the following concepts:

 

Day 1

Module 0: Course Introduction

• Course preparation activities and agenda

 

Module 1: Kubernetes Fundamentals

• Container orchestration
• Kubernetes objects
• Kubernetes internals

 

Module 2: Amazon EKS Fundamentals

• Introduction to Amazon EKS
• Amazon EKS control plane
• Amazon EKS data plane
• Fundamentals of Amazon EKS security
• Amazon EKS API

 

Module 3: Building an Amazon EKS Cluster

• Configuring your environment
• Creating an Amazon EKS cluster
• Demo: Deploying a cluster
• Deploying worker nodes
• Demo: Completing a cluster configuration
• Preparing for Lab 1: Building an Amazon EKS Cluster

 

Module 4: Deploying Applications to Your Amazon EKS Cluster

• Configuring Amazon Elastic Container Registry (Amazon ECR)
• Demo: Configuring Amazon ECR
• Deploying applications with Helm
• Demo: Deploying applications with Helm
• Continuous deployment in Amazon EKS
• GitOps and Amazon EKS
• Preparing for Lab 2: Deploying Applications

 

Day 2

Module 5: Configuring Observability in Amazon EKS

• Configuring observability in an Amazon EKS cluster
• Collecting metrics
• Using metrics for automatic scaling
• Managing logs
• Application tracing in Amazon EKS
• Gaining and applying insight from observability
• Preparing for Lab 3: Monitoring Amazon EKS

 

Module 6: Balancing Efficiency, Resilience, and Cost Optimization in Amazon EKS

• The high level overview
• Designing for resilience
• Designing for cost optimization
• Designing for efficiency

 

Module 7: Managing Networking in Amazon EKS

• Review: Networking in AWS
• Communicating in Amazon EKS
• Managing your IP space
• Deploying a service mesh
• Preparing for Lab 4: Exploring Amazon EKS Communication

 

Day 3

Module 8: Managing Authentication and Authorization in Amazon EKS

• Understanding the AWS shared responsibility model
• Authentication and authorization
• Managing IAM and RBAC
• Demo: Customizing RBAC roles
• Managing pod permissions using RBAC service accounts

 

Module 9: Implementing Secure Workflows

• Securing cluster endpoint access
• Improving the security of your workflows
• Improving host and network security
• Managing secrets
• Preparing for Lab 5: Securing Amazon EKS

 

Module 10: Managing Upgrades in Amazon EKS

• Planning for an upgrade
• Upgrading your Kubernetes version
• Amazon EKS platform versions