Advanced Terraform for AWS EKS and VPC (TF v1.5. K8s v.1.27)

Learn production-proof Terraform & AWS EKS Best Practices using Handson concepts and labs

Created by: CSCareerKaizen.com | CKA & CKS & AWS DevOps Pro (元Microsoft現シリバレエンジニア)
元Microsoft→現Silicon Valley DevOps、AWS DevOps Pro, CKA&CKS

What Will I Learn?

• Terraform best practice of 3 layered modules architecture
• Create Terraform Remote Backend in 3-layered Module Architecture
• Create VPC with 3-layered subnets using Terraform Remote Module for VPC
• Create EKS Cluster in private subnet using Terraform Remote Module for EKS
• Encrypt K8s secrets using AWS KMS
• Encrypt AWS EBS Volumes used by AWS EKS Worker Nodes
• AWS Identity Authentication and Authorization in K8s Cluster using aws-auth configmap and clusterrolebinding
• Add K8s taint and label to worker nodes from `kubelet-extra-args` attribute
• Enable K8s Control Plane (Master Components) Logging
• Configure Pod Level Authorization using IRSA (IAM Role for Service Account)
• Scale K8s worker nodes using Cluster Autoscaler (CA)
• Auto Mount EFS to K8s Worker Nodes (EC2) using userdata script

Requirements

• you have intermediate knowledge of AWS (EC2, VPC, subnet, load balancer, IAM, EKS, S3, SSM, KMS, etc)
• you have learned EKS best practices (my other course "AWS EKS Handson")
• you have learned Terraform basics
• you want to deploy AWS and EKS for production
• you want to learn DevOps IaC best practices
• you want to level up your DevOps game to senior level, and get promotion, raise, or switch jobs

Target audience

• You learned Terraform basics but don't know how to write Terraform code for production-ready AWS infra
• You don't know how to use Terraform Remote Modules for VPC, IAM, Security Group, EKS, etc
• You learned AWS EKS best practices using EKSCTL CLI but now you want to apply them using Terraform
• You want to create AWS EKS using Terraform, and want to be able to give right permissions to AWS IAM identities in K8s cluster using ClusterRoleBinding (RBAC: Role Based Access Control)
• You don't know how to configure pod-level AWS IAM authentication (IRSA: IAM Role for Service Account) using Terraform
• You want to setup Cluster Autoscaler in Terraform
• You want to auto-mount EFS to EKS worker nodes using userdata script