Categories
Azure Kubernetes Networking Terraform

Azure AKS with private VPN access and Linux/Windows NodePools

In this post I will show you an example whose goal is to create an infrastructure that not only allows you to create an AKS, a Kubernetes managed on the Azure cloud provider, but also to access it completely privately, creating everything necessary for this via a dedicated P2S VPN.

Furthermore, the AKS will be able to use not only a system node pool, but also a node pool of Linux machines and another of Windows machines.

Let’s now describe the cloud architecture that will be created with this Terraform project example.

AKS cloud architecture with Linux and Windows nodepools reachable via private VPN
Categories
AWS Kubernetes Terraform

Boost Your EKS Efficiency: Migrating from Cluster-Autoscaler to Karpenter

In the previous post How to create an AWS EKS cluster with VPN access using Terraform, we had deployed cluster-autoscaler on our EKS to be able to automatically scale managed node groups.

Let’s now see how to deploy Karpenter on EKS via Terraform and then how to migrate from cluster-autoscaler to Karpenter.

We do this because Karpenter is a sort of evolution of cluster-autoscaler and has several advantages: not only is it faster and allows us to go beyond the constraints of managed node groups, but it allows us to better optimize costs and make development teams more autonomous.

How Karpenter works – original image from https://karpenter.sh/
Categories
AWS Kubernetes Terraform

How to create an AWS EKS cluster with VPN access using Terraform

This Terraform project example allows you to create an EKS with its VPC, its VPN to access it privately and the cluster-autoscaler.
It is excellent for creating your own infrastructure on which you can then carry out your own tests and developments.

In the following diagram we see a summary of the infrastructure that we will create, that is, a VPC with private and public subnets per availability zone, with an EKS and an AWS VPN client that allows you to connect to the private subnets, as well as access the EKS privately.

AWS EKS with private access via AWS client VPN