Skip to main content

Posts

Showing posts from 2022

EKS Cluster and Create CSI Driver to store credentials in AWS Secrets Manager via SecretProviderClass

EKS Cluster | CSI Driver | SecretProviderClass | AWS Secrets Manager Setup EKS Cluster and Manage Credentials at runtime using CSI driver using SecretProviderClass and Secrets Manager Assuming you have Configured/Installed AWS CLI, EKSCTL, KUBECTL, HELM. CSI Basic Information: CSI (Container Storage Interface) widely used as a Storage Technology. Created by Google | Mesosphere | Docker.  It has two two Plugins one runs on the Master Node (Centralized Controller Plugin) and another one on Worker Nodes (Decentralized headless Node Plugin).  CSI communication protocol is gRPC.   The communication between Container Orchestration to Controller Plugin (Master) and to Node Plugin (Worker Node) happens using gRPC .  CSI Drivers : vendor specific compiled into Kubernetes/openshift binaries. To use a CSI driver, a StorageClass needs to be assigned first.  The CSI driver is then set as the Provisioner for the Storage Class. CSI drivers provide three main service...

Few basic things about ECS and Kubernetes

Important things to note about ECS and Kubernetes Few basic things about ECS and Kubernetes Basic Information about the AWS ECS and Kubernetes and there Components. AWS ECS Basic Information: AWS ECS is the Docker-suitable container orchestration solution from Amazon. It allows us to run containerised applications on EC2 instances and scale both of them. The below architecture shows the high-level information about ECS. As shown above, ECS Clusters consist of Tasks which run in Docker containers, and container instances, among many other components.  Here are some AWS services commonly used with ECS: Elastic Load Balancer : This component can route traffic to containers. 3 kinds of load balancing are available: application, network and classic. Elastic Block Store : This service provides persistent block storage for ECS tasks (workloads running in containers). CloudWatch : This service collects metrics from ECS. Based on CloudWatch metrics, ECS services can be scal...