<aside> <img src="data:image/jpeg;base64,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" alt="data:image/jpeg;base64,/9j/4AAQSkZJRgABAQAAAQABAAD/2wCEAAkGBw0QDRANDxEPDQ0PDxAYDQ0QFRYWEA0QFxUYFhYRFRUZHSgkGBslGxMYITEhJSktLi4uFx8zODMsNygtLisBCgoKDg0OGBAQGy0mHSYtLSstMS0vKy0yLi0tLSstLSsrLSstLS0rLS0tLSstLSsrLS4uKy0tKysvLS0tLS0tLf/AABEIAOEA4QMBIgACEQEDEQH/xAAbAAACAgMBAAAAAAAAAAAAAAAAAQIGBAUHA//EAEIQAAEDAgEIBQkGBgIDAQAAAAEAAgMEEQUGEiExQWFxsRMiM1FzMjRCcoGRobLBByM1UmJ0FENTgoPRY9Il4fAk/8QAGgEAAwEBAQEAAAAAAAAAAAAAAAEFBAIDBv/EADkRAAECAgUKBgEDAwUAAAAAAAABAwIEERIhMVEiQWFxgaGxwdHwBRMyNJHhchRS0jOy8SM1QqLC/9oADAMBAAIRAxEAPwDJUlFC+HPsySEISAaaimkBJNRTSAaaSEgBSSSSAmhJNIATSQkqASTUU0gBNCSQE0KKaAJJITSAaagpLkBppIQAITQkBrUJJrcAKSihICSEISAaaimkBJNRTSAaaSEgBSSTcxwAJBAcLtJFg4d470gGhRCkkME0kJKgiSaimkAJoSSAkmopoAkkhNIBpqCkuQGhJCANamoprcBJCSaQApKKEgJIQhICSFFesEL3uDGNc951NaLkpaAIrLw7DZ6h2bEwu/M7U1nF2zmrLg+RwFn1Rv8A8LTo/ucOQ9629fi9HRs6MZuc0dWCIC447G+3TxVRnwxUh8yYWrDv+uOgnOz6LFUYStFu++Gk8MHyWghs+W08o7x9207m7eJ9wU8tmj+BJsLtkZm7tmj2FVmfH6ionjBPRxdKy0bPJPWHlH0uW5WfLXzF3iM5rdC6zHKvQspRCiLtsXb82mOJt6GYaidipVV+LU2fBg5ARt6OV9hnZzRnbbWvb4rNxbJqCa74/uJTtaOo472/UfFYmQHYS+IOS1tfjlRT10wa7Oj6TTE7S3UNXceHxXMLjMEk0j0NMK2ar7cc2a0cUD0c04rUVCpvus/zYarE8Knp3WkbYE9WQaWO4H6HSsJdDw3HKarb0bgGPcLOhksQ/c06nc9y12L5JNdd9Ocx22Jx6p9V2zgfgsT3hlaHzJaKtDhn+9tC7TU34hViqTCVYt31wKamvSpp5InmORrmOGtrh8R3jevJR1RUWhSkiotqEk1FNIATQkkBJNRTQBJJCaQDQooXNAGuQhC3gNNRTSAkhJNIAUlssIwOpqTdjc2O+mV2hg4fmPD4K7YZgNJSN6RxDntF3Ty2AZvaDobz3rZLyDr+VdDivLHhpMkxOts2LbFgnPDjoK1g+Sc0tny3gj7iPvHDc3ZxPuKtbW0VBFfqxA+kdMkh5nkNy0mM5ZAXjpRnHbM4aB6rdvE+4qo1FRJK8ySOc9x1ucbnhuG5a1mZaUShhK0WK97kSjSZPImJq15asOCd8fgsOM5XSyXZBeGP8/8AMcOPo+zTvVbv7zrPeoqSlPPuPRVo1pXhqwKTTMDUNWBKE7vxMjDu3i8VnMK+5a+Yu8RnNUHD+3i8VnzBX3LbzF3iM5qlI+0f1LwME37lnXzQxMgOwl8RvJVvKbz6f1lZMgOwl8Rvyqt5S+fT+v8ARKa9gzr/AJBL+9d1dDWKw4PlTNFZkl54t5+8aNztvA+8KvpKYy84zFWbWhe78dpvdagdhqxpSndx0yOajrordWUDWx2iRh7+8cQq1i2Sksd3wEyx/k/mN/7ezTuVdhlcxwexxY4anNNiParVhGV2plSL/wDM0fM0a+I9yqJNS82lWZSrF+5O7NS2E5ZZ+WWlhaYf2ryx2W6FKmQQSDoIOkHWD3JrotbhtJWMEgLXEjqzxkZ3A9/A/BVDF8np6e7rdLF/UYPJH6h6PLesc14a6zlJlQ4pzTnahol55t1aq2RYL17XQapNRTU42gmhJICSaimgCSEkJAa1NRTW0BoQhADur3k/knEGsmn+9eQCI/QbfTZ35j8OKoexdSxg/wDjJP245BUvDWoIljjjSmqiKm/oTvEHI4akEC0VloXd1MTF8p6anHRxATSN0BrNEbNxI5D4Kk4pi1RUuzpX3APVjGhrODfqdKwAms0zOuv2LYmCd28NB7y8m0x6UtxW/wCgUlFCxmoki62OE4JUVJ6jbMv1pHaGj27TuCu+F4BS0jekcQ57Rd08lg1m8A6G8de9bJaQdftuhxXljw0mSYnW2bFtiwTuzjoK1gOTM73smkHQRtc1wzh132N9Ddg0az8VYMt5GijzSQHOkZmjabG5WDjGWDReOmGc7bM4dUeq3bxPxVQqaiSV5fI5z3HW5xueG4blqdfl5dqJlnKVbFXNht2bVpMzbL77sLruSiXJ3dt+C5fZ+8dHM24zs9pttta1/gsXKXJ2cyvqIh0zXm7mN8tui2r0tWzTuVWp53xuD2Oc141OabEK3YRlkNDKoW/5mDR/c0cx7kmH5d5iFh7JouWnX8bbBusPtPK+zbTenfK3QVH/AOI7kLotdhNJWM6QZucR1Z4iLnjsd7dPBU/Fsn6inu4jpIv6jNTfWHo8t6yzPhzrCVvVDinNM29NJ7y8808tW6LBeWO5dBqVJJJTzYZdBiE0Ds+J5ado9F24jarlhGVUMtmTfcSfm/lO9vo+33qiJrVKzrssuQtmC3fWzbSZpiUbf9SW45/vaX3FsmYJrvitDIdN29m/iNnEfFUV7S0lp0FpII3jQVfsjL/wLfXdbcL6lRa/t5fEdzK1+JNtq22/DDQsVq0aqfnTQlJmkY40jcaiipSGxN55JqKajlIE0JJASQkhAGuQkmtoDTUU0gHsXUca/DJP245BctOpdTxr8Mk/bjkFV8N9D34/yJfiPrZ/LocuTUU1JKp608L5HtjYC57iA1o2kq8YLkfGyz6giV+yMdm3idbuXFVbJfz+D1/oVbsvKh7KeMMc5okkIfmm2c3NOgnuVORaaRqN+NKaq3bE2U0rnJk446rsDLa0Vr17tuwPXFcpaemHRxgSyNFhGywYy2wuGgcB8FSsUxeoqXXkddoPVjboa3gPqdK14Qs0zPOv2LZDgnPHhoNEtJNMWpauK3/XHSSQuk4PAw4dGS1pP8OdNhfUVzYalxNSnkJAtamslN1FF3UcvMo9FGlFFVaOPQki6zMIwyWplEbNAGl7z5LG957z3Dar3U/wdBTC7WkDQxpAL5X7zzOz3BdS0lE9CsarVhTOvfz8WqczE2jUSQIlaJc3feexChYfiM9O7PieW/mbrD+LdqumD5WQS2ZN9xIdp7N3t2e33qj11W+aV0r7Au2NFmtGxoHcvJcy865LLQ2tMOC90psX5G9KtvpTGlC4p1z/AAX7F8loJrvhtDIdOjsn+zZxHuKpVdRyQyOikGa5uvaCDqIO0Ky5BVEhdJEXOMbWAtYTcNN9ncsHLfz3/Gz6rVONsuy6TMENVVWhU+dl+ehDNKxutvqxHFWREp4GgUkklHKZ0TIvzJvrv5qi1/bS+I/5irzkV5k31381Ra/tpfEd8xVif9mxqT+0myfuXtfNTxTSQoqoUiSaimkA0k0IA1iaSFtAkkhNIA2LqmNfhkn7ccguVbF1XGvwyT9uOQVTw30PauURM8R9bP5dDlqEIUoqG0yX8/p/X/2rV9ofYQ+KflKq2S/n9P6/0KtH2idhD4p+VVJb2L2vkhLmPetaupRUJJqQpUOn4N+GR/tzyK57hOHy1MojYNPpOPksb+YromAszsOhaNboLD2gqWHUENHTkNBdmtLpHAXfIQO4fAL6R6U/UeUqrkolv/Wzd2p883N+QrtHqWKzfbv7Skg1tNh9L3MGs+nNIeZNvYB3Bc/xbE5amUySaNjGDyWN7h/vapY3i8lVLnu6rBfo2bGN+pO0rXKVOznm/wCm3ZAl2nTqwTbeU5SUVqmNy2Nb9Gjquy4mhRUlONpafs/7abwh8yx8tvPf8cf1WR9n3bzeEPmWNlx57/jj+qrRf7an5c1Jqe/X8ehoU0kKOUjoeRXmLfEfzVEr+2l8R/zFXvIrzFviP5qi1/by+K/5iq8/7NjUn9pNk/cva+anihJNRikCaSElQCSFFCQGuTUU1vAaaSFyA9i6pjf4XJ+3HILlexdTxz8Lk/bjkFU8N9D2pP8A0TPEfWz+XQ5cmopqSUzbZL+f0/r/AEKtH2idhD4p+Uqq5L+f0/if7Vq+0XsIfFPylVJb2L2vkhMmPetaupQ01FNSlKh1HBT/AONiI0HoDY+wrX5LZSCYCCY2nA6jzqmH/bms/BvwyP8AbnkVzFpIsRoItYjWD3q9NTMcv5MUN1FqY+khy8vA/wCdDF+6xcPUXPKzJvyqmBveZYh8XtHMe1U5XzJXKQTAQTG0w8h51TDu9bmsDKzJ3Nzqmnb1dJliHod72ju7xs16tWWblYHof1DF2dOP2m1D3lpiJqL9O/fmXHBOi7FKkhJNSCoWv7Pu3m8IfMsbLfz3/Ez6rI+z7t5vCHzL0y0wqd038QxpfHmNDs3S5lr6S3XbeFXqRReHIkKU281JdeGGfWlaMlOBVE1EFNRSodEyK8xb4j+aolf28viu+Yq95FeYt8R/NUOv7eXxX8yrE97NjUn9pNk/cva+angmhJRikTQoqSABCEJUAa1CSa2gNNRTQA9i6pjn4VJ+2HILlWxdVxz8Kk/bDkFS8O9D34pwiJniPrZ/L+Jy1CSalFM2eTUjW11OXENHSDSdWkED4lX3KnBn1ULWxua17HEgO1P0Wtcaly9b/BcqqiCzHHp4R6Dz12j9LvobjgqEpMtwwRNOpkxZ070GCblnI44XWlyocy96TU1tFNA/o5mOY7YDqcO8HURvC8F1ClraKviLOrJou6KQWkZv/wDYPtVbxrIx7LyUxMjf6TrdI31Tqdz4of8ADokSu0taHfuv2W6BM+IQqtR5KsWm7fdts0mXh2U1JHRMgcX9I2EtNmm2dY7VSgk9jmktcC1wNnNcLFp7iDqQsj8zG8kKRUZNnC+1cDSzLwNLEsP/ACtUmCQbjQRqI1g96uuC5YMEebVZ3SN0B7RfPG8bDzVITSYmY5eJYoF6DfloH4asaGzx00bpekpnODX3z4y0gNP6dx7tnLBp4XyODI2uc46mtFyVYMGySmls+a8Ef5T2rhub6Pt9ytX/AOHD4vRiB9ssh5nkNy2QSDjyq67RBDev+Fu1rsQyRzsDSI23THFdj8ql+zaUV1NXUThKWvhOx4sWn9JIuDq1HuVmwXK+N9mVAET9kg8g8Rrby4LNw/KOkqbxO6hdcCOYDNkHdfUTu5rX4zke115KY5jtsTj1T6p2cDo4LS2y6ynmSkdaHOi9pb8LrMzjzbq+XNQ1Yse6eaGwxXJ2lqR0kdo5HC4kjsWP3uGo8RpVLxTBqimP3jepfqyN0td7dh3FetJiFbQyGM5zQPKhk0tdvA+oVwwrKKlqh0bgI3uFjFJYtfuadTuB07l5qktOLQuQ5xXnuU9KZiVSlMtveib+aCyJ8xb4j+aolf28viv5ldSoqSOFvRxNDGZxOaNQJ12XK6/t5fFk+YpeJtq3LswLelm6gPD3EcedjS5bd6nkmkhQysCkkkkBJCSEAa5CSa2gNCSaQD2LrddTOloHQstnyQANubC+aNq5GrDgOVc9MGxv+/hGgMceuwfpd3bj8FukX4GlihjuiSjVf12GGel3HUhibvhWnXd0uzmorKOWF5jlY5jxsdtHeDqI3heC6nBVUOIRFvVlbrdG8WkjPfbWOI96rGN5FyR3kpiZWbYj2reGx3wPFD3h8UKV2lrQ7/vZboOWfEIYlqOpVi03b7ttmkqiEOaQSCCHA2IOgg9xGxCnFAlHI5rg5pLS03a5psWnvBGpW3BMs3NsyqBe3ZK0dces3U7iNPFVBNerL7jMVaBfvWh5PMNvJRGlPFNSnUquhoq+MPObLo6s0Zs9u6/0PuVLxnJeop7vaOnhHptHWaP1N2cRccFqqCumgf0kL3MO22pw7nDURxV3wXLKKSzKgCGT847J3Ha3lvVHzZabsdSrHj3z+Sd5UxK/01rQYLf3q+Cr4Pk/U1Ni1uZFtmfob/aPS9mjerthuCUlGzpHZpc0daolt1eGxvPeVj4xlbTwjMhIqJbaM0/dN4uGvgPgqRieK1FS7OleXW8lg0NZ6rfrrRWlpP05ceOHJNlK4qFSZm/VkQYZ168MELTjOWeuOlF/+Z40f2tPM+5VCed8jzJI5znHW5xuSvFNTX5lx9aY12Zk2daVKDMs2ylECdfnpQgLfYNlPPT2Y49PCPQceu0fpd9Do4LQoXm27G1FWgWhe78TtxqBxKsaUodMgqqGvjzOrJouWO0SM3j/AGCq5jGSMsd3095mf0z2jR9fZp3KOBZLVD3NlkLqZoN2kaJTvaPR4n3K6VVbDTxB0sma0Cwc43e8juA8o8FeRpJtqtMwVVxu26E0LShDic/SupDLxVk/bfvTltpKBS5SVsLDEHXtoGeM57OBPI3WnJJNzpJ1k7Ss7Ha5lRUvlY0sa7NsDrNhbOO/QsFQXo4ooqqxVkSlE1FpqBESskNVVtXWNNRTXgp6jTSQkAITQgDWJpIW0CSEk0gGhJNICcMrmOD2OcxzT1XNJDmncQrjguWzhaOqGcP67BpHrNGviPcVS016svuMrTAvRe8bzxel23kojTqmrpcdUrsLoq+MSDNeSOrUREZ/AnbwOrcqRjWTNRTXfbpoR/MYPJH6m+jx0jetZh+Iz07+kieWO2geS/c5uoq9YLllDLZlQBTyfn/lOPE+T7dG9b/MlpuyPJjxx67bcFJ/lTMr/Ty4MM6d6LMUOepro+M5J01ReSK0Ep03aPu5N5aOY+KouKYTUUzs2VhaCeq8aWv4O+mtYpiTdYtiuxTuw2S840/ZCtuC3/ZhpqCkshqGhCEANNe9BQTTv6OFjnu221NHe46gOKu+C5HxR2fUETyfk/lN4j0vbo3LRLyjkwuSlmOb72GeYm2mEy1twz/W0quEYFU1JuxubFfTK7Qz2d54fBXfC8BpaRvSHNc9ou6aSwDN7b6Gj4715YvlPTUw6NlpZRoDGeQzc52ocB8FScUxioqXXkfdoPVY3QxvAfU3K30ysndlucF5b4jBVmZu/Ig3r13IWnGcsWNuymGe7bK4dUeqNvE6OKp1VVSyvMkr3PcfSdyHcNwXghTZmacmFy1swzfa6VKDEq2wmQluOfvVQSQhCzHuNNRTSAkmoppKA0JISA1yEk1uAE0kJASQkmkA0JJpANNRTQBuMGyhqaUgNdnxbYX6W/29x4e4q9YXjtJWs6N2aHuHWp5bHO9W+h3PcFy5C1sTzjNl8OC8lzb00GOYkW3rbosU7t3LpLzjWRQN5KQ2O2B50H1HHVwPvCptTTyRvMcjXRvGtrhY8eG9WHBcsJ4rMmvUR/mJ+9YPWPle33q2g0OIQ+jMBs1SRE/EcjvWlZeXmrWVqxYd3a0s0Gb9RMS1j6VocU7426Tl0bHOcGtBcXGzWtBLnHuAGtW7BMjHOtJUnMbsiaeueLvR4DTwVipqOhw+Iv6seizpZDd792/g0exVvGss3vvHTAxt/qut0jvVGpvPguUlWJZK0wtK5oU7t1rQgLMvzK1ZdKIf3L3ZqtXUWWsxCioIxH1WWHVhjF3nfb6lUvGcp6ie7AeghPoNPWcP1O28BYLRPeXEucS5xN3OJuXHvJOtCzzE+46lWHJhwTr0oNEvIttrWiyosV76qAUlFNYKDaSQkmkAKSihICSEISAaaimkBJCSSVAGuTUU1uAkhJNIATSQkBJCSaQDQkmkA01FNADXtTzvjeJI3OjeNTmmxC8UJXXBfeZFXWSzOz5XuldsLjew7h3exeCE0lVVWlQRERKEGmoprkBoQhADTUU0gJISTSAFJRQkBJCEJANCSEgNchJNbgGmoppASQkmkAJpISAkhJNIBoSTSAaaimgBppIXIEkJJpANNRTSAaEIQA01FNICSEk0gBSUUJASQkhIDXJoQtoAmhCQAEwhCAGEIQuVAaaEIAEIQkA00ISAaQQhIBhNCEgGE0ISAaEISASaEJANSCEIUBJoQuQBCEJCP//Z" width="40px" /> EKS

• Kubernetes 컨트롤 플레인을 구성하거나 유지할 필요없이 AWS에서 Kubernetes를 쉽게 실행할 수 있는 관리형 서비스

<aside> 📚 Architecture

• AWS가 Master Node를 관리하고 사용자는 Worker Node를 관리
• AWS의 영역은 확인 불가능

</aside>

<aside> 👱🏻‍♂️ Control Plane

• Control Plane은 매우 중요하므로 최소 3개의 가용영역을 사용해 고 가용성의 싱글테넌트 아키텍처를 소유
• Control Plane을 구성하는 모든 요소들은 AWS 서비스들로 구성되어있음

</aside>

장점

<aside> 😀 장점

• Control Plane 관리의 부담이 없음
  • HA 구현, EC2 운영 등…
• 이슈 발생시 support가 존재
• Managed Node Group 있음
• AWS의 다양한 스토리지 서비스를 쉽게 마운트하고 사용 가능
• VPC CNI 자동 제공
  • Max Pods 개수가 ENI * (ENI 당 지원하는 IPv4 개수 - 1) + 2 라는 단점이 존재 </aside>

단점

<aside> 😦 단점

• 보안 요구사항
• 커스터 마이징의 여지가 사라짐
• 워크로드 요구사항 </aside>

배포 옵션

EKS

• 자체 Kubernetes Control Plane 또는 Node를 설치, 운영 및 유지 관리할 필요 없이 AWS에서 관리하는 AWS 클라우드에 Kubernetes Cluster를 배포하는 옵션

EKS Anywhere

• 온프레미스에서 Kubernetes Cluster를 생성하고 운영할 수 있게 해주는 배포 옵션

노드 유형

<aside> <img src="/icons/robot_gray.svg" alt="/icons/robot_gray.svg" width="40px" /> EKS managed node groups

• EKS에서 자동으로 EKS 클러스터의 노드를 생성 및 관리
• 사용자가 보안 및 업데이트 등의 일부분을 설정 및 관리 가능
• 모든 관리형 노드는 EKS에서 관리하는 EC2 Auto Scaling 그룹의 일부로 프로비저닝됨
• 관리형 노드 그룹을 생성할 때 온디맨드 또는 스팟 용량 유형을 선택할 수 있음

</aside>

<aside> <img src="https://s3-us-west-2.amazonaws.com/secure.notion-static.com/9fe386d0-a343-45dd-958e-fba131cc9bfd/fatgate.svg" alt="https://s3-us-west-2.amazonaws.com/secure.notion-static.com/9fe386d0-a343-45dd-958e-fba131cc9bfd/fatgate.svg" width="40px" /> Fargate

• 노드 관리를 AWS에서 담당
• AWS에서 EKS의 모든 환경을 자동으로 관리 </aside>

<aside> <img src="/icons/steering-wheel_gray.svg" alt="/icons/steering-wheel_gray.svg" width="40px" /> Self managed nodes

• 사용자가 직접 EKS 클러스터의 노드를 생성 및 관리
• 온디맨드 또는 스팟 용량 유형을 선택할 수 있음 </aside>

클러스터 인증 관리

<aside> <img src="/icons/card_gray.svg" alt="/icons/card_gray.svg" width="40px" /> 인증

• EKS는 IAM을 사용하여 Kubernetes 클러스터에 인증을 제공 (aws-iam-authenticator의 aws eks get-token 명령)
• 유효한 IAM 엔티티(IAM user/role)의 인증에만 사용 </aside>

<aside> <img src="/icons/badge_gray.svg" alt="/icons/badge_gray.svg" width="40px" /> 인가

• EKS 클러스터의 Kubernetes API와의 상호 작용에 대한 모든 권한은 기본
• Kubernetes RBAC 시스템을 통해 관리
  • kubernetes 리소스에 대한 사용 권한의 집합인 Role에 특정 IAM 사용자나 역할을 매핑 </aside>

Kubernetes RBAC

<aside> <img src="/icons/public_gray.svg" alt="/icons/public_gray.svg" width="40px" /> RBAC (Role Base Access Control)

• 역할 정의를 기반으로 접근제어를 하는 매커니즘
• Role
  • Kubernetes 리소스에 대한 사용권한을 정의하는 리소스
• RoleBinding
  • 해당 Role을 특정 사용자에게 매핑 시켜주는 것 </aside>

클러스터 인증 및 인가 과정

<aside> <img src="/icons/iterate_gray.svg" alt="/icons/iterate_gray.svg" width="40px" /> 인증 및 인가 과정

1. Client가 kubectl 명령어를 실행하면 IAM-identity 토큰과 함께 전달됨
2. API Server는 해당 요청의 IAM-identity 토큰을 Webhook 서비스로 전달
3. AWS IAM에서 유효한 IAM-identity 토큰인지 확인
4. IAM-identity 토큰이 클러스터의 유효한 사용자에 해당하는지 확인하기 위해 aws-auth ConfigMap 이라는 개체를 참조
5. EKS에서 RBAC을 진행 후 응답 </aside>

aws-auth

<aside> <img src="/icons/document_gray.svg" alt="/icons/document_gray.svg" width="40px" /> aws-auth

apiVersion:
data:
  mapRoles:
		- rolearn: arn:aws:iam::111111111111:role/devel-worker-nodes-NodeInstanceRole-74RF4UBDUKL6
		  username: system:node:{{EC2PrivateDNSName}}
			groups:
				- system:bootstrappers
				- system:nodes
  mapUsers:
	  - userarn: arn:aws:iam::111111111111:user/admin
	    username: admin
	    groups:
	      - system:masters
	  - userarn: arn:aws:iam::111111111111:user/test1
	    username: test1
	    groups:
	      - pod-admin

• ConfigMap이기에 YAML 형태
• EKS에 접근하는 IAM 엔티티(IAM user/role)같은 매핑정보를 저장하는 구성 파일 </aside>

</aside>