Create AWS EKS Cluster using Terraform: AWS EKS Kubernetes Tutorial - Part 2

[@AntonPutra]

🔴 - To support my channel, I’d like to offer Mentorship/On-the-Job Support/Consulting - [e-mail] 👉 [Playlist] AWS EKS Kubernetes Tutorial: kzbin.info/aero/PLiMWaCMwGJXnKY6XmeifEpjIfkWRo9v2l&si=wc6LIC5V2tD-Tzwl 👉 Kubernetes Tutorial for Beginners [Full Course]: kzbin.info/aero/PLiMWaCMwGJXkYKFa_x0Ch38uznuv-4c3l 👉 AWS EKS Tutorial for Beginners [Full Course]: kzbin.info/www/bejne/oajUanicerGMf6s 👉 Other Kubernetes Tutorials: kzbin.info/aero/PLiMWaCMwGJXnKY6XmeifEpjIfkWRo9v2l

[@enjoy5941]

I didn't understand Kubernetes related technologies when I read about it on the internet, but your videos made it very easy to understand. I really appreciate it.

[@AntonPutra]

❤️

[@soufiane22v]

Amazing stuff . This is the right moment l to deep dive into EKS . Thank you so much for the effort 🙏🏻🙏🏻🙏🏻

[@AntonPutra]

thanks!

[@soufiane22v]

is it possible to use openTofu instead of terraform ?

[@MatthewKennedyUK]

This is fantastic, I’m loving that you’ve broken this into multiple videos and are going into a more detail helping me to build my production EKS cluster. This is worth my subscription, keep up the good work.

[@AntonPutra]

thank you!

[@mcborov_]

Great lessons, easy to understand

[@AntonPutra]

thank you!

[@MihaiLupoiu]

Thank you very much Anton for all the videos you make! I learned a lot from your content!

[@AntonPutra]

thanks!

[@arunreddy1436]

masterpiece Sir, curiously waiting for the rest of EKS videos and thank you for the great job.

[@AntonPutra]

thank you!

[@mendoncaangelo]

*Dude I see you are doing good....Keep up the good work :)....Dawai Dawai....Let the JUNIP people know you are doing well :)*

[@AntonPutra]

😂😂

[@felipemireles8422]

It is a great explanation! thank you for all your videos!

[@AntonPutra]

thanks!!

[@evgenylikhonosov572]

Thank you, great tutorial!

[@AntonPutra]

❤️

[@GabrielPozo]

Great video!!! Now I am waiting for the next part. 😁

[@AntonPutra]

thank you!

[@raghuveer120]

Another great video. Keep sharing your knowledge.

[@AntonPutra]

❤️

[@RAHUL841991]

Great tutorial!

[@AntonPutra]

thank you!!

[@arnaullamas]

Great video! Helped me finding a couple of issues in a cluster setup. If you don't mind the question, is there any reason you choose not to use the VPC CNI addon?

[@AntonPutra]

thanks, it actually comes by default with EKS as well as coredns, if I'm not mistaken

[@RAHUL841991]

Amazing Videos!

[@AntonPutra]

thank you!

[@ZergStylexDD]

In this video you create all resources using direct terraform resources. But we also have publicly available modules from Anton Babenko to create EKS and simplify the terraform layer, in my opinion. What do you think is better to use in production cases? Is it worth using such public terraform modules or is it better to create all the resources yourself?

[@AntonPutra]

I respect him, i just generally don't like using open source modules. For example that open source module still uses auth configmap to manage users. It's very easy for them to start using API but it will break your infra and you would have to keep using old versions until you create new eks clusters (just from my personal experience) Modules are great for consulting and temporary envs, when you don't need to maintain clusters for over the year. I know a lot of copy pasting but when you have 20+ clusters, update module can in all envs can take months or even year :)

[@ZergStylexDD]

Great content!

[@AntonPutra]

❤️

[@dineshparva]

Thanks for the video could you explain in layman terms what exactly is the oidc provider and its role in eks does it act like a authentication broker between iam and k8s in aws?

[@AntonPutra]

oidc provider allows you to establish relationship between AWS IAM and Kubernetes RBAC. 1. you create IAM role and define trust relationship with Kubernetes service account 2. you create Kubernetes service account and LINK IAM role with Kubernetes service account Finally you can assign IAM permissions to Kubernetes pods. BUT you no longer need it at all, new better way is pod identities, video comparing all approaches coming in few days

[@prakasha5870]

good explanation. could you please put AWS url u showned in the video. it will good to read those also. Thanks. if u dont mind could you please implment istio also inside your video

[@AntonPutra]

thanks, noted

[@prakasha5870]

@@AntonPutra : Also prometheus and argoCD ( GitOps ) implenation inside with EKS cluster, it will be also great.

[@AntonPutra]

@@prakasha5870 ok noted

[@spasham74]

You had created the eks cluster in the past what is that we can expect in this new series? How is it different from the previous EKS cluster you have created?

[@AntonPutra]

There have been few new developments on EKS side. 1. Kubernetes auth configmap is deprecated and recommended approach is to use new EKS API to add new users to the cluster 2. New way to grant permissions to application (we no longer use IAM OIDC provider and IAM roles for service accounts, instead we use Pod identities) 3. Some other small features in certain controllers like aws load balancer controller etc

[@spasham74]

@@AntonPutra I really appreciate what you doing for the community