@darryl-ruggles.cloud#EKS #Security #IRSA #PodIdentities
Granting AWS permissions to Kubernetes pods can be done in a few different ways including using IAM Roles for Service Accounts (IRSA) and its OIDC provider per cluster. There is a new approach called EKS Pod Identities which can work
@darryl-ruggles.cloud#Karpenter #EKS #Kubernetes #Terraform #AWS
The Cluster Autoscaler (CAS) scales EKS worker nodes by adding instances to Auto Scaling Groups (ASGs), and each group knows one instance type. In practice that means a node group per instance type per AZ, and pods sitting