Kubernetes
EKS node autoscaling with Karpenter, without node groups
Karpenter changes EKS node autoscaling by launching right-sized EC2 nodes from pending pods, then consolidating and replacing them as the fleet drifts.
12 min readRead article
Back to blog
Tag archive
aws
Practical writing on AWS foundations, account design, identity, networking, and cloud operating patterns.
Security
Auto-rotating RDS credentials with AWS Secrets Manager
Automatically update RDS credentials and application config on EC2 instances.
3 min readRead article
Security
Auto-update AWS security groups with Cloudflare IPs
How to auto update security groups with Cloudflare IPs using AWS Lambda
3 min readRead article
Delivery Workflows
Blue-green deployments on EC2 with OpenTofu and Ansible
Implement blue-green deployments using OpenTofu/Terraform and Ansible on EC2 workloads
4 min readRead article
Cloud Foundations
Managing multiple AWS accounts with OpenTofu/Terraform
Manage multiple AWS accounts with OpenTofu/Terraform, from the simplest setup up to AWS Control Tower AFT.
6 min readRead article
Security
Protecting your ALB with AWS WAF and CloudFront
Learn how to protect your ALB with AWS WAF and CloudFront.
4 min readRead article
Networking
Resolve private Route53 records from inside EKS
Resolve private Route53 records from inside an EKS cluster by pointing CoreDNS at the VPC resolver.
4 min readRead article
Delivery Workflows
Deploy to AWS from GitHub Actions with OIDC, no static keys
How to securely deploy to AWS from GitHub Actions using OIDC
6 min readRead article
Security
Syncing secrets into Kubernetes with External Secrets
Use External Secrets Operator to sync AWS Secrets Manager values into Kubernetes with IRSA, sane refresh policies, and less secret material in git.
9 min readRead article