|
1 | | -# aws-eks |
| 1 | +# aws-eks-auto |
2 | 2 |
|
3 | | -This is a nullstone module to create an AWS-managed Kubernetes Cluster using EKS and Fargate. |
4 | | -This module comes with a `deployers` IAM group that has privileges to perform deployments. |
| 3 | +Creates a Kubernetes cluster in Auto mode that uses AWS-managed node groups. |
5 | 4 |
|
6 | | -## Security & Compliance |
| 5 | +## When to use? |
7 | 6 |
|
8 | | -Security scanning is graciously provided by Bridgecrew. Bridgecrew is the leading fully hosted, cloud-native solution providing continuous Terraform security and compliance. |
| 7 | +### When Auto Mode is GREAT |
| 8 | +- SaaS workloads |
| 9 | +- stateless services |
| 10 | +- CI runners |
| 11 | +- internal platforms |
| 12 | +- preview environments (👀 very relevant to you) |
| 13 | +- cost optimization focus |
| 14 | +- teams without deep k8s infra skills |
9 | 15 |
|
10 | | -[](https://www.bridgecrew.cloud/link/badge?vcs=github&fullRepo=nullstone-modules%2Faws-fargate&benchmark=INFRASTRUCTURE+SECURITY) |
11 | | -[](https://www.bridgecrew.cloud/link/badge?vcs=github&fullRepo=nullstone-modules%2Faws-fargate&benchmark=CIS+AWS+V1.3) |
12 | | -[](https://www.bridgecrew.cloud/link/badge?vcs=github&fullRepo=nullstone-modules%2Faws-fargate&benchmark=PCI-DSS+V3.2) |
13 | | -[](https://www.bridgecrew.cloud/link/badge?vcs=github&fullRepo=nullstone-modules%2Faws-fargate&benchmark=NIST-800-53) |
14 | | -[](https://www.bridgecrew.cloud/link/badge?vcs=github&fullRepo=nullstone-modules%2Faws-fargate&benchmark=ISO27001) |
15 | | -[](https://www.bridgecrew.cloud/link/badge?vcs=github&fullRepo=nullstone-modules%2Faws-fargate&benchmark=SOC2) |
16 | | -[](https://www.bridgecrew.cloud/link/badge?vcs=github&fullRepo=nullstone-modules%2Faws-fargate&benchmark=HIPAA) |
| 16 | +### When Auto Mode is NOT ideal |
| 17 | +- custom networking |
| 18 | +- heavy DaemonSet reliance |
| 19 | +- GPU tuning |
| 20 | +- special storage drivers |
| 21 | +- low-level performance control |
| 22 | +- platform engineering teams wanting full control |
| 23 | +- highly predictable infra topology needs |
| 24 | + |
| 25 | +## Included Addons |
| 26 | + |
| 27 | +AWS automatically manages the following addons: |
| 28 | +- VPC CNI |
| 29 | +- CoreDNS |
| 30 | +- kube-proxy |
| 31 | +- Pod Identity Agent |
| 32 | +- metrics server |
| 33 | +- networking dataplane components |
| 34 | + |
| 35 | +## Limitations |
| 36 | + |
| 37 | +In auto mode, AWS manages a fleet of nodes which prevents you from performing various operations: |
| 38 | +1. You cannot run DaemonSets. |
| 39 | +2. You cannot SSH into nodes. |
| 40 | +3. You cannot optimize pod scheduling; AWS optimizes this. |
0 commit comments