+++
author = "AWS Kubernetes Developer Advocates"
categories = ["Archive", "2022", "Weekly"]
date = 2022-09-02T07:00:00Z
description = "#030 edition of the EKS newsletter"
draft = false
slug = "030"
title = "EKS News 030"
+++
## AWS Container Announcements
* [Networking Best Practices for EKS is now available](https://aws.github.io/aws-eks-best-practices/networking/index/)
* [Announcing Workload Consolidation for Karpenter](https://aws.amazon.com/about-aws/whats-new/2022/08/workload-consolidation-karpenter/)
* The long awaited consolidation feature is now available with Karpenter v0.15.0
* Consolidation will automatically look for opportunities to reschedule workloads onto a set of more cost-efficient EC2 instances
* For more information, visit [karpenter.sh](karpenter.sh)
* [Red Hat OpenShift Service on AWS (ROSA) is now available in the Asia Pacific Region](https://aws.amazon.com/about-aws/whats-new/2022/08/red-hat-openshift-service-aws-rosa-available-asia-pacific-jakarta-region/)
* [AWS Support launches support for managing cases in Slack](https://aws.amazon.com/about-aws/whats-new/2022/08/aws-support-launches-managing-cases-slack/)
* Use the AWS Support App to collaborate with support agents on cases through Slack
* See the [documentation](https://docs.aws.amazon.com/awssupport/latest/user/aws-support-app-for-slack.html) for additional information
## AWS Container Blogs
* [Addressing IPv4 address exhaustion in Amazon EKS clsuters using private NAT gateways](https://aws.amazon.com/blogs/containers/addressing-ipv4-address-exhaustion-in-amazon-eks-clusters-using-private-nat-gateways/)
* Describes different ways to address the IP exhaustion issue when running EKS
* The private NAT gateway option allows instances in private subnets of a VPC to connect to other VPCs and on-premises networks with overlapping CIDR ranges
* Since a peering connection cannot be used to connect VPCs with overlapping CIDRs, a transit gatway is necessary
* Perform a thorough cost analysis based on AWS Transit Gateway pricing and assess whether the scale of your operations justifies the additional cost of using a transit gateway
* [Run event-driven workflows with Amazon EKS and AWS Step Functions](https://aws.amazon.com/blogs/containers/run-event-driven-workflows-with-amazon-eks-and-aws-step-functions/)
* Event-driven architectures with [Smart Endpoints and Dump Pipes](https://docs.aws.amazon.com/whitepapers/latest/running-containerized-microservices/smart-endpoints-and-dumb-pipes.html) patterns further decouple services, which makes it easier to develop, scale, and maintain complex systems
* They're efficient because they start when the event occurs and terminate when processing completes
* This post describes how to use [Step Functions](https://aws.amazon.com/step-functions/?step-functions.sort-by=item.additionalFields.postDateTime&step-functions.sort-order=desc) to execute Kubernetes pods/jobs in response to an event
* The walk-through illustrates how to use Step Functions/EKS to split a large file into smaller files and stores the results in an EFS file system
* [Deploying AWS Lambda functions using AWS Controllers for Kubernetes (ACK)](https://aws.amazon.com/blogs/compute/deploying-aws-lambda-functions-using-aws-controllers-for-kubernetes-ack/)
* With ACK for AWS Lambda, you can use manifest files to provision Lambda functions without creating separate process to deploy Lambda functions
* This post walks you through deploying a sample Lambda function from a Kubernetes cluster provided by Amazon EKS
* [Using Kubernetes Migration Factory (KMF) to migrate from Google Kubernetes Engine (GKE) to Amazon Elastic Kubernetes Service (Amazon EKS)](https://aws.amazon.com/blogs/opensource/using-kubernetes-migration-factory-kmf-to-migrate-from-google-kubernetes-engine-gke-to-amazon-elastic-kubernetes-service-amazon-eks/)
* Developed by AWS Professional Services, this tool can migrate Kubernetes resources and container images to EKS and ECR respectively
* Although GKE is specifically called out, this tool can migrate from **any** Kubernetes cluster to EKS
* The tool is available on [GitHub](https://github.com/awslabs/aws-kubernetes-migration-factory) under the Apache 2.0 license
## Videos and Webinars
* [K8s IRL](https://www.youtube.com/shorts/aB0zE-gzgkY)
* [EKS wildcard fargate profiles for servers kubernetes](https://www.youtube.com/shorts/0AEGKX6GGeU)
* [How To Create Virtual Kubernetes Clusters With vcluster By loft](https://www.youtube.com/watch?v=JqBjpvp268Y)
## Ecosystem News
* [Introducing COSI: Object Storage Management using Kubernetes APIs](https://kubernetes.io/blog/2022/09/02/cosi-kubernetes-object-storage-management/)
* [GCP, AWS, and Azure ARM-based server performance comparison](https://apisix.apache.org/blog/2022/08/12/arm-performance-google-aws-azure-with-apisix/)
* [Kubernetes resources under the hood — Part 3](https://shonlevran.medium.com/kubernetes-resources-under-the-hood-part-3-6ee7d6015965)
* [What can Confidential Computing do for the Kubernetes community?](https://www.cncf.io/blog/2022/08/31/what-can-confidential-computing-do-for-the-kubernetes-community/)
* [GitOps Days 2022: Flux Flagger deep dive](https://www.cncf.io/blog/2022/08/30/gitops-days-2022-flux-flagger-deep-dive/)
* [Kubernetes 1.25: cgroup v2 graduates to GA](https://kubernetes.io/blog/2022/08/31/cgroupv2-ga-1-25/)
* [PodSecurityPolicy: The Historical Context](https://kubernetes.io/blog/2022/08/23/podsecuritypolicy-the-historical-context/)
* [Kubernetes Load Testing | 8 Tools & Best Practices](https://www.containiq.com/post/kubernetes-load-testing)
* [Flux leverages Kubernetes workload identity and IAM when pulling OCI artifacts from managed registries](https://twitter.com/stefanprodan/status/1564999901657894912?s=20&t=ZIPanS2c3O9pM4HAl3zl_g)
* [Enterprise Kubernetes: Lessons Learned from Moneygram and HP](https://thenewstack.io/enterprise-kubernetes-lessons-learned-from-moneygram-and-hp)
* [Halving Kubernetes Compute Costs With Vertical Pod Autoscaler](https://medium.com/compass-true-north/halving-kubernetes-compute-costs-with-vertical-pod-autoscaler-df658c043301)
* [What Happens When Deleting a Pod](https://medium.com/@meng.yan/what-happens-when-deleting-a-pod-d1219c7e1b53)
* [How did we upgrade our EKS clusters from 1.15 to 1.22 without K8s knowledge?](https://medium.com/scout24-engineering/how-did-we-upgrade-our-eks-clusters-from-1-15-to-1-22-without-k8s-knowledge-2c96c1a94cc1)
## GitHub Projects
* [BotKube](https://github.com/kubeshop/botkube)
* BotKube helps you monitor your Kubernetes cluster, debug critical deployments and gives recommendations for standard practices by running checks on the Kubernetes resources
* Integrates with multiple communication platforms, such as Slack, Discord, or Mattermost
* [Mandoo Operator](https://github.com/mondoohq/mondoo-operator)
* Performs a security assessment of your cluster
* Mondoo ships out-of-the-box security policies for Kubernetes: CIS Kubernetes Benchmark and the Kubernetes Application Benchmark
* [dcp](https://github.com/exdx/dcp)
* Extracts the contents of an image onto the local filesystem or stdout
## For Fun
* [An oldie but goodie](https://i.redd.it/8v9fopt6wlx31.jpg)
{{< eo >}}