Can I share one Load Balancer across multiple EKS services?

Yes, the skill includes patterns for using IngressGroups with the AWS Load Balancer Controller to consolidate multiple Ingress resources onto a single ALB.

Does this support security group management for individual pods?

Yes, it provides implementation steps for SecurityGroupPolicy (SGP), allowing you to assign AWS Security Groups directly to Kubernetes pods for fine-grained network control.

How do I fix IP exhaustion in my EKS cluster?

This skill provides configurations for enabling Prefix Delegation in the VPC CNI plugin, which allows you to assign significantly more IP addresses to nodes, or guidance on migrating to IPv6.

How does this skill handle external DNS records?

It includes a complete workflow for installing and configuring ExternalDNS with IAM Roles for Service Accounts (IRSA) to automatically sync Kubernetes services with Amazon Route 53.

Amazon EKS Networking

Name: Amazon EKS Networking
Author: adaptationio

byadaptationio

클라우드 인프라

Configures and manages Amazon EKS networking components including VPC CNI, load balancers, and network security policies.

소개

This skill provides a comprehensive framework for architecting and managing network infrastructure within Amazon EKS. It offers domain-specific guidance on configuring the VPC CNI plugin for high pod density, deploying AWS Load Balancer Controllers for L7 and L4 traffic, and implementing robust security through Network Policies and Security Groups for Pods. Whether you are troubleshooting connectivity, optimizing for cross-AZ costs, or setting up automated DNS with ExternalDNS, this skill provides the implementation patterns and CLI commands necessary to maintain a production-grade EKS environment.

주요 기능

Implementation of pod-level security using Network Policies and Security Groups.
Automated setup patterns for AWS Load Balancer Controller (ALB/NLB).
Advanced VPC CNI configuration including prefix delegation and custom networking.
Cost-reduction strategies for cross-AZ traffic and VPC endpoint integration.
ExternalDNS and CoreDNS optimization for automated service discovery.
0 GitHub stars

사용 사례

Securing multi-tenant clusters with default-deny network policies and specific ingress rules.
Scaling cluster capacity by enabling prefix delegation to overcome IP exhaustion.
Exposing microservices using shared Application Load Balancers to reduce AWS infrastructure costs.

소개

주요 기능

Implementation of pod-level security using Network Policies and Security Groups.
Automated setup patterns for AWS Load Balancer Controller (ALB/NLB).
Advanced VPC CNI configuration including prefix delegation and custom networking.
Cost-reduction strategies for cross-AZ traffic and VPC endpoint integration.
ExternalDNS and CoreDNS optimization for automated service discovery.
0 GitHub stars

사용 사례

Securing multi-tenant clusters with default-deny network policies and specific ingress rules.
Scaling cluster capacity by enabling prefix delegation to overcome IP exhaustion.
Exposing microservices using shared Application Load Balancers to reduce AWS infrastructure costs.