강의

멘토링

커뮤니티

Programming

/

Devops & Infra

CloudNet@ - Amazon EKS Extended Edition Course

This is an extended Amazon EKS course covering a wide range of topics that Amazon EKS users should definitely know.

(5.0) 4 reviews

82 learners

  • ongja
AWS
eks
Kubernetes
security
observability

Reviews from Early Learners

What you will learn!

  • Understanding how to configure and operate an EKS Fully Private Cluster

  • Building and Utilizing a Serverless EKS Environment Based on AWS Fargate

  • Configuring Network Security Using Amazon VPC CNI - Network Policy

  • Learning Rolling Update deployment strategy without data loss

  • Storage Expansion via Mountpoint for Amazon S3 CSI Driver

  • Building an Observability Environment based on the LGTM stack (Loki, Grafana, Tempo, Mimir)

  • Cost Optimization Strategies Using KubeCost and OpenCost in a FinOps Environment

  • Configuring Authentication and Authorization for EKS Users and Resources

  • Building a Secure Access Environment for EKS Clusters Using Teleport Access Platform

  • Building CI/CD Pipelines and GitOps with Jenkins & ArgoCD

Course Topic and Objectives


This is an expanded course that covers a wider variety of topics in greater depth, building upon the basic Amazon EKS course.

This course is an extended course that utilizes Amazon EKS, a managed Kubernetes service provided by AWS, to deploy EKS clusters in various configuration methods and provides in-depth coverage through hands-on practice focusing on topics frequently encountered in actual production environments.

After the basic lectures, it includes one step further expanded, practice-oriented content, and each section is designed to be usefully applicable in actual operations.


Based on the experience and study materials of the CloudNet@ team,

This is not just a follow-along lecture, but one where we practice together while considering "Why should it be structured this way?" and "What meaning does this setting have?"


I recommend this for people like this

  • Students who want to move to the next level after taking the basic EKS course

  • Cloud engineers and DevOps professionals who want to configure and utilize Amazon EKS environments in various ways

  • Someone who is considering authentication/authorization, security, monitoring, deployment strategies while operating EKS-based infrastructure

  • Anyone who wants to directly set up and experience a Kubernetes practice environment based on AWS is welcome!!


What will you learn?

  • Terraform-based EKS Practice Environment Configuration and Automation

  • Fully Private EKS Cluster Architecture Configuration

  • Fargate-based EKS Serverless Execution Environment Configuration

  • VPC CNI and Kubernetes NetworkPolicy Configuration and Security Group Application

  • Traffic Loss-Free Rolling Update Strategy in Ingress(ALB) Environment

  • Amazon S3 Integration CSI Driver Configuration and Static Volume Usage

  • Mimir, Loki, Tempo-based LGTM Observability Stack Configuration

  • OpenCost/KubeCost-based FinOps Environment Configuration

  • EKS Authentication/Authorization Framework (IAM, OIDC, RBAC, Pod Identity, etc.)

  • Configuring Secure Access to EKS Clusters through Teleport

  • Jenkins & ArgoCD CI/CD Pipeline Construction


How do you learn?

  • It proceeds in a systematic flow in the order of topic-based architecture concepts → diagramming → hands-on practice.

  • Each practice session is not just a simple test, but is composed of scenario-based practice.

  • Reusable automation scripts and hands-on environment code are also provided.


Why should I take the course?

  • This is a course that continues the flow of the existing basic EKS course, but allows you to learn through hands-on practice with a wider variety of topics in greater depth.

  • You'll learn by directly implementing components frequently encountered in practice such as Terraform, Fargate, Ingress, Monitoring, Authentication/Authorization, FinOps, CI/CD, etc. in an Amazon EKS environment.

  • We provide hands-on practical experience where you can directly configure and experience different topics.

  • Learning progresses in a way that doesn't just end with simple configuration, but understanding the meaning and effects of the configuration and applying it.


Features of this course

Provides various schematic explanations

To help you easily understand the operational flow of theory and practice, we provide various diagrammatic screens.

Lectures with a high proportion of hands-on practice

We've structured the course to provide various hands-on exercises, so you can follow along directly, see the results with your own eyes, and understand the concepts.

This is an experiential lecture with a high proportion of hands-on practice compared to theory.

Hands-On Page Provided

For the convenience of hands-on practice, we provide an EKS Hands-On web page created by our team.

Code-based Resource Deployment

For the convenience of practice, the basic infrastructure deployment will be done using Terraform.

With this, you can focus on learning just the section topics.

You'll learn this kind of content

Section (1) Course Introduction

  • Introduction to the Amazon EKS Extended Edition Course

  • CloudNet@ Team Introduction - Online Study Activities, Writing and Lecture Activities


Section (2) [Hands-on] Deploying AWS Resources with Terraform

  • Introduction to Terraform and Checking Its Operation

  • Understanding Terraform HCL Structure and HCL Block Types

  • Hands-on practice for deploying AWS resources with Terraform

Section (3) Amazon EKS Clusters

  • Introduction to Amazon EKS Cluster

  • EKS Fully Private Cluster Architecture

  • Checking the security groups configured in Amazon EKS Cluster

Section (4) [Hands-on] Configuring Amazon EKS Fully Private Cluster

  • EKS Fully Private Cluster Configuration and Verification

  • Endpoint Private Access Communication Flow Verification and Resource Deployment

Section (5) Amazon EKS Cluster - AWS Fargate

  • Introduction to AWS Fargate in Amazon EKS Cluster Environment

  • Diagrammatic explanation of AWS Fargate configuration

  • AWS Fargate Profile and Scheduling Method Verification

Section (6) [Hands-on] Configuring Amazon EKS Cluster - AWS Fargate

  • Create AWS Fargate Profile, then deploy pods and restart pods

  • Checking behavior when AWS Fargate Profile is deleted

Section (7) Amazon VPC CNI - Network Policy

  • Explanation of Network Policy functionality in a typical Kubernetes environment

  • Applying K8s Network Policy in Amazon VPC CNI Environment

  • AWS Security Group for Pods Explanation

Section (8) [Hands-on] Amazon VPC CNI - Configuring Network Policy

  • VPC CNI - Enable Network Policy feature and check related information

  • Demo Application for Verifying VPC CNI - Network Policy Operation


Section (9) [Hands-on] Zero-downtime Service in Amazon EKS Ingress ALB Environment

  • Environment where traffic loss occurs when performing Pod Rolling Updates

  • Readiness Probe, Graceful Shutdown, Termination Grace Period

  • Monitoring verification before and after applying traffic loss prevention measures

Section (10) [Hands-on] Configuring Mountpoint for Amazon S3 CSI Driver

  • Amazon S3 CSI Driver explanation and comparison with other CSI drivers

  • Amazon S3 CSI Driver Configuration Environment Static Provisioning Practice

Section (11) Observability Architecture

  • Explanation of Observability and the 3 Pillars of Observability

  • LGTM(Loki, Grafana, Tempo, Mimir) Observability Full Stack Architecture Explanation

  • Introduction to OpenTelemetry and OpenTelemetry Collector Architecture Explanation

Section (12) [Hands-on] Building LGTM Observability Full Stack

  • LGTM Backend System Configuration (Mimir, Loki, Tempo)

  • Configure OTel Collector and Grafana

  • Checking Metric, Log, Trace Information Through Hands-on Practice


Section (13) [Hands-on] Amazon EKS FinOps - Setting up KubeCost & OpenCost

  • Introduction to OpenCost and KubeCost: Explanation and Architecture Overview

  • OpenCost vs KubeCost Comparison

  • Hands-on Setup and Verification of OpenCost and KubeCost


Section (14) Amazon EKS Authentication & Authorization

  • Kubernetes Authentication Types

  • Kubernetes Authorization Types

  • Amazon EKS Authentication and Authorization Explanation

  • EKS Cluster Access Management

  • Instance Profile, IRSA, Pod Identity explanation

Section (15) [Hands-on] Amazon EKS - Configuring Authentication and Authorization

  • EKS User Authentication & Authorization Verification and Configuration (ConfigMap vs EKS API)

  • Amazon EKS cluster resource authentication and authorization configuration (Instance Profile, IRSA, Pod Identity)

Section (16) [Hands-on] Amazon EKS Secure Access - Configuring Teleport

  • Introduction to Teleport Access Platform and Architecture

  • Teleport installation and configuration, Teleport SSH node registration and access management

  • Register EKS cluster to Teleport

  • Delegating User Access Permissions Based on Teleport Roles

Section (17) Introduction CI/CD

  • CI/CD Introduction and Common Architecture and Tools

  • Jenkins Introduction and Structure, Jenkins Pipeline

  • ArgoCD Introduction and Architecture, GitOps, Comparison with Jenkins CD

Section (18) [Hands-on] Setting up Amazon EKS CI/CD

  • Gogs, Amazon ECR, Jenkins Configuration

  • Jenkins CI Pipeline Configuration

  • ArgoCD Configuration and GitOps Testing

  • Jenkins CD Pipeline Configuration


** In the future, we plan to open 2 additional Extra Sections at the service level. 🙂

The person who created this lecture

Hello. I'm Ongja, active in the CloudNet@ team.
Our CloudNet@ team is a study group that learns and shares knowledge about cloud-related technologies. We have been actively conducting various knowledge-sharing activities through diverse cloud-related online study activities, book writing, and lecture content creation. We will continue to meet you with video lecture content on various topics in the future. :)


Resume/Portfolio/Personal Videos

  • 'Hands-on AWS Network Fundamentals' authoring (published in 2020)

  • 'AWS Textbook' Writing (October 2023)

  • 'AWS Networking Fundamentals with CloudNet@' Inflearn Course (April 2023)

  • 'Amazon EKS Fundamentals with CloudNet@' Inflearn Course (September 2023)

Pre-enrollment Reference Information

Step by Step

  • Each section is structured in the order of theoretical explanation → hands-on practice, and it is recommended to take the lectures in sequence.

No!! Live

  • It's structured so that you can follow along with the hands-on practice,

    Repetitive tasks or sections requiring wait time have been appropriately edited, and you should pause the video when necessary to follow along with the hands-on practice.


  • It's recommended to proceed with the expectation that it will take about 1.5 times longer than the indicated estimated practice time.

Small billing charges incurred

  • We will utilize free tier environments as much as possible, but please note that small charges may occur during the hands-on practice.

  • It depends on your learning patterns and situation, but it's expected to cost around 20,000 won or more.

Learning Materials

  • Provides EKS Hands-On web page, a practical guide (https://www.ongja.space/cnaeelab)

  • Terraform resource deployment code provided

    • Terraform resource deployment command execution ⇒ Creating basic infrastructure for hands-on practice

    • Terraform resource deletion command execution ⇒ Delete basic infrastructure for practice

    • This explains how to download code during the course.

  • Lecture materials PDF/PPT provided

    • We basically provide lecture progress PDF files.

    • PPT files are provided in read-only format exclusively to course review writers.

      • Checking with a slide show would help you understand the dynamic behavior. If you need it, please apply via email :)

      • Email address: ongja@cloudneta.net

      • Format: [Course Name]/[Applicant Nickname]/[Review Availability]

      • Example: Amazon EKS Extended Edition Course/ongja_cloudnet@/Complete

Prerequisites and Important Notes

  • AWS Service Basic Understanding

  • Kubernetes Service Basic Understanding

  • Basic Understanding of Linux Shell Commands

  • This is a course that expands the scope a bit more from the basic Amazon EKS course, with beginner to intermediate difficulty level. If you have basic EKS prerequisite knowledge, you can proceed through all the processes without any difficulty.

Recommended for
these people

Who is this course right for?

  • A student who has taken the basic EKS course and wants to move on to the next level

  • Cloud engineers and DevOps personnel who want to configure and utilize the EKS environment in various ways

  • Anyone who is operating an EKS-based infrastructure and is considering authentication/authorization, security, monitoring, and deployment strategies.

  • Anyone who wants to build and experience a Kubernetes lab environment on AWS is welcome!!

Need to know before starting?

  • AWS Services

  • Kubernetes Basic Concepts

  • Amazon EKS Basics

Hello
This is

1,259

Learners

112

Reviews

104

Answers

4.9

Rating

3

Courses

안녕하세요. CloudNet@ 팀에서 활동 중인 Ongja라고 합니다.

저희 CloudNet@ 팀은 클라우드 관련 기술에 대해 지식을 학습하고 공유하는 스터디 그룹입니다.

다양한 클라우드 관련 온라인 스터디 활동과 책 집필과 강의 콘텐츠 제작을 통해 다양한 지식 공유 활동을 활발히 진행해 왔습니다.

앞으로도 다양한 주제의 영상 강의 콘텐츠로 찾아 뵙겠습니다. :)

개인블로그 -> https://ongja.space

팀블로그 -> http://blog.cloudneta.net

Curriculum

All

72 lectures ∙ (14hr 6min)

Course Materials:

Lecture resources
Published: 
Last updated: 

Reviews

All

4 reviews

5.0

4 reviews

  • shkim님의 프로필 이미지
    shkim

    Reviews 2

    Average Rating 5.0

    5

    63% enrolled

    좋아요

    • Ongja_CloudNet@
      Instructor

      안녕하세요. shkim님! CloudNet@ 팀입니다. 좋은 수강평 감사합니다 :)

  • ericserra님의 프로필 이미지
    ericserra

    Reviews 99

    Average Rating 4.9

    5

    100% enrolled

    EKS 라는 어려운 주제를 쉽게 설명해주셔서 감사합니다. 강사님께서 계획중인 다음의 강의를 개설 잘 하시고 여력이 되신다면 AWS의 Control Tower, IAM, WAF, NETWORK FIREWALL 를 포함하는 AWS 보안강의도 개설 부탁 드립니다. 감사합니다.

    • Ongja_CloudNet@
      Instructor

      안녕하세요. ericserra님! CloudNet@ 팀입니다. 우선 좋은 수강평 남겨주셔서 감사합니다. 그리고 제안하신 "AWS 보안" 주제에 대한 필요성은 깊은 공감을 하고 있으며, 커리큘럼 정리 및 강의 내용 고민 중에 있습니다. 향후 좋은 강의로 찾아뵙겠습니다. 감사합니다 :)

  • yhn711님의 프로필 이미지
    yhn711

    Reviews 3

    Average Rating 5.0

    5

    22% enrolled

    • Ongja_CloudNet@
      Instructor

      안녕하세요. yhn711님! CloudNet@팀 입니다. 좋은 수강평 남겨주셔서 감사합니다 :)

  • kjs3377님의 프로필 이미지
    kjs3377

    Reviews 2

    Average Rating 5.0

    5

    100% enrolled

    EKS 기본 강의에 이어서 확장판 강의도 잘 들었습니다. 정말 많은 도움이 되었고, 보안 파트랑 CI/CD 파트가 특히나 유익했네요. 다음 강의도 기대하겠습니다. 감사합니다~

    • Ongja_CloudNet@
      Instructor

      안녕하세요. CloudNet@팀 입니다. 좋은 수강평 남겨주셔서 감사합니다 :) 다음에도 좋은 강의로 찾아 뵙겠습니다.

$106.70

ongja's other courses

Check out other courses by the instructor!

Similar courses

Explore other courses in the same field!