/var/log/diego

Kubernetes: Traefik and service backend HTTPs and Self-signed certificate

Thu, 15 Jun 2023 14:44:31 +0200

How to set up Traefik running as ingress controller in Kubernet to forward requests to a Kubernetes service backend that uses the HTTPS protocol and self-signed certificate.

References links

EKS: Your current user or role does not have access to Kubernetes objects on this EKS cluster.

Fri, 20 Aug 2021 15:48:42 +0200

When you install EKS for the first time, you receive the following message in the AWS Console UI.

Your current user or role does not have access to Kubernetes objects on this EKS cluster. This may be due to the current user or role not having Kubernetes RBAC permissions to describe cluster resources or not having an entry in the cluster’s auth config map.

This happen because your AWS user account doesn't have access to the Kubernetes control plane.

Schedule pods to start and stop in Kubernetes by date and time

Thu, 24 Jun 2021 09:47:41 +0200

Kubernetes by default doesn't provide this feature but you can use Another Autoscaler controller for that.

We are using this tool in my company to save some money on the Kubernetes clusters with GPU instances (P2 and G4DN); Developers using these types of instances generally use them during working hours, so we can terminate pods after working hours and our Cluster Autoscaler will scale-down instances that are idle.

Another Autoscaler page: https://github.com/dignajar/another-autoscaler

Kubernetes and GPU nodes on AWS

Mon, 26 Apr 2021 18:01:09 +0200

Time for GPU and Kubernetes, the idea is to provide an instance group with Kubernetes' nodes with GPU, also to save some money we can start the autoscaling group from 0 instances.

The environment

AWS
G4DN instances also tested on P2 instances
Kubernetes 1.18 deployed via Kops
Cluster Autoscaler 1.18
GPU Operator

Kubernetes: AWS Load Balancer Controller (ALB Ingress controller) and cross namespaces

Fri, 12 Feb 2021 16:28:53 +0100

Assuming you have deployed AWS Load Balancer Controller, the following steps are how to configure one ALB to expose all your services, also services cross namespaces.

Default configuration for the ALB "dev" with the following features:

HTTP redirect to HTTPs.
SSL termination, with ACM certificate provide from AWS.