tag: Eks · 6 items
- Platform/SRE — Plan: This GA feature removes the need for an identity broker when authenticating multiple user populations (employees, contractors, CI/CD systems) to EKS clusters. Evaluate whether your clusters could simplify their auth architecture by replacing any intermediary OIDC broker with direct per-provider associations.
- CI/CD — Skip
- Leader — Skip
- Platform/SRE — Plan: EKS clusters created in 2018 have 10-year CAs now approaching expiry (~2028); audit cluster creation dates and schedule CA rotation this quarter — worker nodes must be replaced and external API clients updated to trust the successor CA before activation, which AWS will not do automatically.
- CI/CD — Learn: Pipelines that connect directly to EKS API servers (kubectl, Helm deploys, kubeconfig-based auth) qualify as external clients under the shared-responsibility model and would need CA trust updates during any rotation; no immediate action required but worth noting when rotation is scheduled by Platform.
- Leader — Skip
- Platform/SRE — Plan: New GA capability lets EKS cluster admins tune scheduler, controller manager, and API server parameters — e.g. switching to MostAllocated bin-packing to reduce node count. Review the full parameter list and evaluate whether tuning fits your cluster’s resource-utilization or scaling goals this quarter.
- CI/CD — Skip
- Leader — Skip
- Platform/SRE — Learn: EKS Provisioned Control Plane clusters now get significantly faster HPA-driven scaling with no configuration changes required — worth knowing if you run large clusters with many HPA objects, but no action needed.
- CI/CD — Skip
- Leader — Skip
- Platform/SRE — Plan: For EKS clusters in air-gapped or strict-egress VPCs, this GA capability enables IRSA token validation without internet access — evaluate adding the com.amazonaws.
.oidc-eks VPC interface endpoint to your network baseline this quarter. - CI/CD — Skip
- Leader — Skip
- Platform/SRE — Plan: New GA capability that changes how you’d architect EKS node pools for GPU/HPC workloads — evaluate EFA-only interfaces (no IP consumption) and placement group strategies for distributed training or high-availability production services this quarter.
- CI/CD — Skip
- Leader — Skip