Skip to main content

Posts

Showing posts from May, 2022

EKS Cluster and Create CSI Driver to store credentials in AWS Secrets Manager via SecretProviderClass

EKS Cluster and Create CSI Driver to Store Credentials in AWS Secrets Manager Setup EKS Cluster and Manage Credentials at Runtime using CSI Driver with SecretProviderClass and AWS Secrets Manager Assuming you have configured/installed AWS CLI, EKSCTL, KUBECTL, and HELM. 📦 CSI Basic Information CSI (Container Storage Interface) is widely used as a Storage Technology. Created by Google | Mesosphere | Docker. It has two plugins : one runs on the Master Node (Centralized Controller Plugin) and another on Worker Nodes (Decentralized headless Node Plugin). CSI communication protocol is gRPC. The communication between Container Orchestration to Controller Plugin (Master) and to Node Plugin (Worker Node) happens using gRPC . CSI Drivers: vendor-specific, compiled into Kubernetes/OpenShift binaries. To use a CSI driver, a StorageClass needs to be assigned first. The CSI driver is then set as the Provisioner for the Storage Class. CSI drivers provide three main ser...

Basic things about ECS and Kubernetes

Basic Things About ECS & K8s AWS ECS, Kubernetes & Their Components 📦 AWS ECS Basic Information AWS ECS is the Docker-compatible container orchestration solution from Amazon. It allows us to run containerized applications on EC2 instances and scale both of them. ECS Clusters consist of Tasks which run in Docker containers, and container instances, among many other components. AWS Services Commonly Used with ECS: Elastic Load Balancer: This component can route traffic to containers. 3 kinds of load balancing are available: application, network, and classic. Elastic Block Store: This service provides persistent block storage for ECS tasks (workloads running in containers). CloudWatch: This service collects metrics from ECS. Based on CloudWatch metrics, ECS services can be scaled up or down. Virtual Private Cloud: An ECS cluster runs within a VPC. A VPC can have one or more subnets. CloudTrail: This service can log ECS API calls. Details cap...