3 ms·

I'm really interested in migrating some of our own systems/services to k8s and I'd love if you could elaborate a bit. How do IAM resouces or VPC subnets etc map

• kronin 9y ago
  You can use IAM to auth to a cluster using heptio authenticator https://github.com/heptio/authenticator/blob/master/README.md https://github.com/heptio/authenticator/blob/master/README.m... You can grant IAM roles to individual pods running in k8s using kube2iam, though there are new advancements seemingly coming, or already out, now that amazon has announced eks. https://github.com/jtblin/kube2iam https://github.com/jtblin/kube2iam Kops can provision and manage a cluster that incorporates multiple subnets allowing you to have a multi-az buildout https://github.com/kubernetes/kops/blob/master/docs/high_availability.md https://github.com/kubernetes/kops/blob/master/docs/high_ava...
• merb 9y ago
  well k8s has his own RBAC system so IAM does not map 1:1. The same with VPC subnets, you actually have your own network with k8s. Some can peer via BGP, like kube-router (as far as I know) and calico (which I use). So basically k8s is a little bit different than the concepts of aws.