AWS-Logo_White-Color
初期設定
Cloud9 の作成
初期セットアップ
Cloud9 用の IAM Role の作成
Cloud9 への IAM Role アタッチ
Cloud9 の IAM 設定の更新
eksctl での EKS Clusterの作成
EKS Cluster の作成
EKS Clusterの確認
AWS Fargate for Amazon EKS
Fargate Profile の作成
Deploying Pods to Fargate
IAM Role for service accountの設定
ALB Ingress Controller のデプロイ
Ingress の作成
Clean Up
CloudWatch Container Insights
WordPress のインストール
Wordpress へのアクセス
Preparing to Install Container Insights
Container Insights のインストール
Container Insights の確認
負荷テストツールのインストール
負荷テストの実行
パフォーマンス メトリクスの確認
アプリケーションログの確認
Logs Insightsのクエリサンプル
Clearn Up
[Option] beginner
Deploy the Kubernetes Dashboard
Deploy the Official Kubernetes Dashboard
Access the Dashboard
Cleanup
Deploy the Example Microservices
Deploy our Sample Applications
Deploy NodeJS Backend API
Deploy Crystal Backend API
Let's check Service Types
Ensure the ELB Service Role exists
Deploy Frontend Service
Find the Service Address
Scale the Backend Services
Scale the Frontend
Cleanup the applications
Helm
Introduction
Install Helm CLI
Deploy nginx With Helm
Update the Chart Repository
Search Chart Repositories
Add the Bitnami Repository
Install bitnami/nginx
Clean Up
Deploy Example Microservices Using Helm
Create a Chart
Customize Defaults
Deploy the eksdemo Chart
Test the Service
Rolling Back
Cleanup
Health Checks
Configure Liveness Probe
Configure Readiness Probe
Cleanup
Autoscaling our Applications and Clusters
Configure Horizontal Pod AutoScaler (HPA)
Scale an Application with HPA
Configure Cluster Autoscaler (CA)
Scale a Cluster with CA
Cleanup Scaling
Intro to RBAC
What is RBAC?
Install Test Pods
Create a User
Map an IAM User to K8s
Test the new user
Create the Role and Binding
Verify the Role and Binding
Cleanup
Using IAM Groups to manage Kubernetes access
Kubernetes Authentication
Create IAM Roles
Create IAM Groups
Create IAM Users
Configure Kubernetes RBAC
Configure Kubernetes Role Access
Test EKS access
Cleanup
IAM Roles for Service Accounts
Preparation
Create an OIDC identity provider
Creating an IAM Role for Service Account
Specifying an IAM Role for Service Account
Deploy Sample Pod
Cleanup
Securing Your Cluster with Network Policies
Create Network Policies Using Calico
Install Calico
Stars Policy Demo
Create Resources
Default Pod-to-Pod Communication
Apply Network Policies
Allow Directional Traffic
Cleanup
Exposing a Service
Connecting Applications with Services
Accessing the Service
Exposing the Service
Ingress
Ingress Controller
Clean Up
Assigning Pods to Nodes
nodeSelector
Affinity and anti-affinity
More Practical use-cases
Clean Up
Using Spot Instances with EKS
Add EC2 Workers - Spot
Deploy the AWS Node Termination Handler
Deploy an Application on Spot
Cleanup
Advanced VPC Networking with EKS
Using Secondary CIDRs with EKS
Prerequisites
Configure CNI
Create CRDs
Test Networking
Cleanup
Stateful containers using StatefulSets
Amazon EBS CSI Driver
Define Storageclass
Create ConfigMap
Create Services
Create StatefulSet
Test MySQL
Test Failure
Test Scaling
Cleanup
Deploying Microservices to EKS Fargate
Prerequisite
Creating a Fargate Profile
Deploying Pods to Fargate
Setup Prerequisites for ALB
Deploying ALB Ingress Controller
Ingress
Clean Up
Deploying Stateful Microservices with AWS EFS
Creating an EFS File System
EFS Provisioner for EKS with CSI Driver
Deploying the Stateful Services
Clean Up
Optimized Worker Node Management with Ocean by Spot.io
Create a Free Spot.io Account
Connect Ocean to your EKS Cluster
Deploying Applications With Ocean
Headroom - A Buffer For Faster Scale Out
Showback - Cost Allocation
Rightsizing Applications
Deploy Infrastructure Changes With Ease
Cluster Logs and Scaling Decisions
Cleanup
Encrypting Secrets with AWS Key Management Service (KMS) Keys
AWS KMS and Custom Key Store
Create a Secret
Access the Secret from a Pod
Cleanup The Lab
Securing Secrets using SealedSecrets
Creating and Deploying Secrets
Creating and Deploying Secrets (cont.)
Sealed Secrets for Kubernetes
Installing Sealed Secrets
Sealing Your Secrets
Managing the Sealing Key
Clean Up
Windows containers on EKS
Considerations
Windows nodes
Deploy an application
Cleanup
[Option] Intermediate
Resource Management
Basic Pod CPU and Memory Management
Advanced Pod CPU and Memory Management
Resource Quotas
Pod Priority and Preemption
Clean Up
Deploying Jenkins
CodeCommit Repository, Access, and Code
Creating the Jenkins Service Account
Deploy Jenkins
Logging In
Setup multibranch projects
Cleanup
CI/CD with CodePipeline
Create IAM Role
Modify aws-auth ConfigMap
Fork Sample Repository
GitHub Access Token
CodePipeline Setup
Trigger New Release
Cleanup
Logging with Elasticsearch, Fluent Bit, and Kibana (EFK)
Configure IRSA for Fluent Bit
Provision an Elasticsearch Cluster
Configure Elasticsearch Access
Deploy Fluent Bit
Kibana
Cleanup
Monitoring using Prometheus and Grafana
Prereqs
Deploy Prometheus
Deploy Grafana
Dashboards
Cleanup
Tracing with X-Ray
Modify IAM Role
Deploy X-Ray DaemonSet
Deploy Example Microservices
X-Ray Console
Cleanup
EKS CloudWatch Container Insights
Getting Started
Install WordPress
Accessing Wordpress
Preparing to Install Container Insights
Installing Container Insights
Verify CloudWatch Container Insights is working
Preparing your Load Test
Running the Load Test
Viewing our collected metrics
Viewing our collected logs
Using CloudWatch Alarms
Wrapping Up
GitOps with Weave Flux
Prereqs
GitHub Setup
Install Weave Flux
Create Image with CodePipeline
Deploy from Manifests
Deploy from Helm
Cleanup
Continuous Deployment with ArgoCD
Install Argo CD
Configure ArgoCD
Deploy an application
Update the application
Cleanup
Custom Resource Definition
Creating a CRD
Create Custom Objects
Clean Up
Backup and Restore using Velero
Create S3 Bucket and IAM Role for Velero
Install Velero
Deploy Test Application
Backup and Restore
Cleanup
CIS EKS Benchmark assessment using kube-bench
Introduction to CIS Amazon EKS Benchmark and kube-bench
Module 1: Install kube-bench in node
Module 2: Run kube-bench as a K8s job
Module 3: Run kube-bench in debug mode
Conclusion
Using Open Policy Agent (OPA) for policy-based control in EKS
Introduction to Open Policy Agent
OPA setup in EKS
OPA Policy Example 1: Approved container registry policy
Clean up
[Option] Advanced
Service Mesh with Istio
Introduction
Download and Install Istio CLI
Install Istio
Deploy Sample Apps
Traffic Management
Monitor & Visualize
Cleanup
Service Mesh with AWS App Mesh
Deploy the DJ app
About DJ App
Clone the Repo
Create DJ App
Test DJ App
Conclusion
AWS App Mesh Integration
About Sidecars
Install the App Mesh Controller
Conclusion
Porting DJ to App Mesh
Mesh Resources and Design
Create the Meshed Application
Sidecar Injection
Testing the Application
Canary Testing with a v2
Testing DJ App v2
App Mesh Cleanup
Batch Processing with Argo Workflow
Introduction
Kubernetes Jobs
Install Argo CLI
Deploy Argo
Configure Artifact Repository
Simple Batch Workflow
Advanced Batch Workflow
Argo Dashboard
Cleanup
Machine Learning using Kubeflow
Install
Kubeflow Dashboard
Jupyter Notebook
Model training
Model inference
Fairing
Kubeflow pipeline
Kubeflow Distributed Training
Cleanup
[Option] Conclusion
What Have We Accomplished
Let us know what you think!
[Option] Cleanup
Undeploy the applications
Delete the EKSCTL Cluster
Cleanup the Workspace
More
Containers from the Couch
CON203
CON205
CON206
OPN401
Tags
AppMesh Workshop
ECS Workshop
AWS Partner Workshops
More Resources
Authors
GitHub Project
Have questions?
Privacy
|
Site Terms
| © 2020, Amazon Web Services, Inc. or its affiliates. All rights reserved.
cis eks benchmark
taxonomy :: cis eks benchmark
CIS EKS Benchmark assessment using kube-bench