Trending

#eks

Latest posts tagged with #eks on Bluesky

Posts tagged #eks

Streamline your EKS application networking with Gateway API | The Routing Loop
Streamline your EKS application networking with Gateway API | The Routing Loop

Streamline your EKS application networking with Gateway API | The Routing Loop #eks #kubernetes

0 0 0 0

🤖 Amazon EKS Auto Mode: Adiós al trabajo pesado de Kubernetes

https://thenewstack.io/eks-auto-mode-kubernetes/

#Kubernetes #AWS #EKS #DevOps

1 0 0 0
Preview
MCP Development with Gemini CLI, and Amazon AWS EKS Leveraging Gemini CLI and the underlying Gemini LLM to build Model Context Protocol (MCP) AI...

MCP Development with Gemini CLI, and Amazon AWS EKS Leveraging Gemini CLI and the underlying Gemini LLM to build Model Context Protocol (MCP) AI applications with Python with a local development en...

#eks #python #gemini #mcps

Origin | Interest | Match

1 0 0 0
aws/karpenter-provider-aws released v1.11.0 Features • add filtering for NodeClass configurations (#9017) #9017 (Ryan Mistretta) • support network interface configuration (#9027) #9027 (Ryan Mistretta) • Placement Group Support (#9030) #9030 (Joshua Guo) Bug Fixes • Avoid hash collisions for instance type zone info (#9023) #9023 (Andrew Mitchell) • iterate over all subnets in RunInstances dry-run validation (#9044) #9044 (Derek Frank) Documentation • add 1.10 tab to website (#9039) #9039 (Ryan Mistretta) Continuous Integration • remove latest from toolchain (#9038) #9038 (Ryan Mistretta) • add cleanup for leaked capacity reservations (#9051) #9051 (Ryan Mistretta) Chores • Release v1.10.0 (#9026) #9026 (github-actions[bot]) • update data from aws api (#9032) #9032 (Joshua Guo) • bump cosign to v2.6.2 (#9057) #9057 (Ryan Mistretta) • bump karpenter version (#9058) #9058 (Ryan Mistretta) Commits • search only returns results from selected version and fix latest version (#9033) #9033 (Joshua Guo) • 943d9d4: fix govcloud pricing script (#9050) (Joshua Guo) #9050

aws/karpenter-provider-aws released v1.11.0 #karpenter #eks #kubernetes

0 0 0 0
kubernetes-sigs/aws-load-balancer-controller released v3.2.1 Same release as https://github.com/kubernetes-sigs/aws-load-balancer-controller/releases/tag/v3.2.0, but fixes ListenerSet permissions for Gateway API users installing via Helm.

kubernetes-sigs/aws-load-balancer-controller released v3.2.1 #eks #kubernetes

1 0 0 0
kubernetes-sigs/aws-load-balancer-controller released v3.2.0 v3.2.0 Release Notes 📚 Quick Links v3.2.0 (requires Kubernetes 1.22+) Image: public.ecr.aws/eks/aws-load-balancer-controller:v3.2.0 Documentation Thanks to all our contributors!💜💜💜 ⚠️ Action Required CRD Updates Action : Please apply the latest CRD definitions • kubectl apply -k "github.com/aws/eks-charts/stable/aws-load-balancer-controller/crds?ref=master" Gateway API updates 🚨 This release moves the Gateway API version from 1.3 to 1.5. For NLB Gateway users, this means that TLSRoute has been moved to the v1 API and is no longer served in the Alpha API version. It is recommended to install the experimental version of the TLSRoute to ensure zero downtime upgrades. 🚨 • Installation of LBC Gateway API specific CRDs: kubectl apply -f https://raw.githubusercontent.com/kubernetes-sigs/aws-load-balancer-controller/refs/heads/main/config/crd/gateway/gateway-crds.yaml • If using only ALB Gateway • Standard Gateway API CRDs: kubectl apply -f https://github.com/kubernetes-sigs/gateway-api/releases/download/v1.5.0/standard-install.yaml • If using NLB Gateway • Experimental Gateway API CRDs: kubectl apply -f https://github.com/kubernetes-sigs/gateway-api/releases/download/v1.3.0/experimental-install.yaml [Required: Used for L4 Routes] 🚨Deprecations • --aws-vpc-tag-key is now deprecated and ignored. All tags from --aws-vpc-tags are always used for VPC lookup. This flag will be removed in a future release. 🚨Breaking Changes • If you were passing multiple tags via --aws-vpc-tags but your VPC only matched a subset of them, the controller will now fail to find the VPC since all tags are used as filters. Update your VPC tags or your --aws-vpc-tags value to ensure they match. 🚀 What's New Gateway API Features • Update to Gateway API v1.5.0 • Autodetect Gateway resources. No more feature flag flipping! The feature flags are still available to turn off the Gateway API feature. • Introduce ListenerSet resources Ingress Features • Add Frontend NLB attributes annotation 🔧 Enhancements and Fixes • [Bug fix] Fixed subnet resolution when subnets having conflicting name tags. • [Bug fix] Fixed multi tag VPC look ups. • [Bug fix] Normalize ingress DNS name to lower case. • [Bug fix] Prevent nil pointer when assigning endpoints to WAF / Shield clients. • [Enhancement] Configurable re-queue time for Target Group Bindings. • [Enhancement] Automatically skip aws: system tags during tag reconcilation. • [Enhancement] Backfill concurrency controls in Helm chart. • [Enhancement] Adding namespace selectors to Service and Ingress webhooks. Documentation Updates • Add cert expiry best practices • Add more AGA examples • Update label selector documentation What's Changed • update golang.org/x/net/ to resolve cves by @zac-nixon in https://github.com/kubernetes-sigs/aws-load-balancer-controller/pull/4608 • add auto detection of gateway api resources by @zac-nixon in https://github.com/kubernetes-sigs/aws-load-balancer-controller/pull/4602 • feat(ingress): add frontend-nlb-attribtues annotation for ingress by @swarner1033 in https://github.com/kubernetes-sigs/aws-load-balancer-controller/pull/4380 • Update documents for TargetGroupBinding and Helm Installation with ArgoCD by @zac-nixon in https://github.com/kubernetes-sigs/aws-load-balancer-controller/pull/4610 • Fix subnet resolution when multiple subnets share the same Name tag by @bjhaid in https://github.com/kubernetes-sigs/aws-load-balancer-controller/pull/4588 • add sorting after describeSubnet and update contribute instruction by @shuqz in https://github.com/kubernetes-sigs/aws-load-balancer-controller/pull/4612 • Upgrade to v1.5 of Gateway API by @zac-nixon in https://github.com/kubernetes-sigs/aws-load-balancer-controller/pull/4613 • [feat gw-api]add gateway and gatewayclass level tgc support by @shuqz in https://github.com/kubernetes-sigs/aws-load-balancer-controller/pull/4611 • fix route status reconciler for gw v1.5 upgrade by @zac-nixon in https://github.com/kubernetes-sigs/aws-load-balancer-controller/pull/4615 • ListenerSet event handler by @zac-nixon in https://github.com/kubernetes-sigs/aws-load-balancer-controller/pull/4616 • Add flag supporting configurable targetgroupbinding requeue duration by @cezarsa in https://github.com/kubernetes-sigs/aws-load-balancer-controller/pull/4617 • add target optimizer field to gateway documentation by @zac-nixon in https://github.com/kubernetes-sigs/aws-load-balancer-controller/pull/4619 • add listenerset, fix bug with route reconciler, add proper unit tests by @zac-nixon in https://github.com/kubernetes-sigs/aws-load-balancer-controller/pull/4620 • add cert expiry best practice by @zac-nixon in https://github.com/kubernetes-sigs/aws-load-balancer-controller/pull/4622 • [feat i2g]setup cli and framework by @shuqz in https://github.com/kubernetes-sigs/aws-load-balancer-controller/pull/4621 • Add missing feature gates to docs and fix search bar by @swibrow in https://github.com/kubernetes-sigs/aws-load-balancer-controller/pull/4618 • [feat aga] Add additional examples for usecases by @shraddhabang in https://github.com/kubernetes-sigs/aws-load-balancer-controller/pull/4623 • [Gateway API] ListenerSet Loader by @zac-nixon in https://github.com/kubernetes-sigs/aws-load-balancer-controller/pull/4625 • add ingress webhook validator selectors to helm chart by @zac-nixon in https://github.com/kubernetes-sigs/aws-load-balancer-controller/pull/4626 • Skip AWS system tags during tag reconciliation by @wweiwei-li in https://github.com/kubernetes-sigs/aws-load-balancer-controller/pull/4628 • [Gateway API] Validate ListenerSet listeners by @zac-nixon in https://github.com/kubernetes-sigs/aws-load-balancer-controller/pull/4629 • [feat i2g]implement annotation translate by @shuqz in https://github.com/kubernetes-sigs/aws-load-balancer-controller/pull/4630 • Expose some missing max-concurrency flags in Helm chart by @cezarsa in https://github.com/kubernetes-sigs/aws-load-balancer-controller/pull/4637 • [Gateway API] Support attaching routes from listeners originating from a ListenerSet by @zac-nixon in https://github.com/kubernetes-sigs/aws-load-balancer-controller/pull/4639 • [feat i2g]add translate for use-annotation by @shuqz in https://github.com/kubernetes-sigs/aws-load-balancer-controller/pull/4642 • [Gateway API] ListenerSet status updater by @zac-nixon in https://github.com/kubernetes-sigs/aws-load-balancer-controller/pull/4645 • fix: Allowing namespace selectors for mservice webhook by @wesbrownfavor in https://github.com/kubernetes-sigs/aws-load-balancer-controller/pull/4646 • add listener set docs by @zac-nixon in https://github.com/kubernetes-sigs/aws-load-balancer-controller/pull/4647 • Change default client-side rate-limiter to correctly match ELBv2 api limits by @cezarsa in https://github.com/kubernetes-sigs/aws-load-balancer-controller/pull/4641 • Fix multi-tag VPC lookup by @shraddhabang in https://github.com/kubernetes-sigs/aws-load-balancer-controller/pull/4638 • Update LabelSelector reference to v1.32 by @saivenkateshi in https://github.com/kubernetes-sigs/aws-load-balancer-controller/pull/4635 • resolve parent ref gateway whenever listener is used by @zac-nixon in https://github.com/kubernetes-sigs/aws-load-balancer-controller/pull/4650 • Fix ingress and service controllers to normalize dns name by @bobert-2 in https://github.com/kubernetes-sigs/aws-load-balancer-controller/pull/4655 • Fix FindLoadBalancerByDNSName to be case-insensitive by @bobert-2 in https://github.com/kubernetes-sigs/aws-load-balancer-controller/pull/4657 • fixes from listenerset conformance testing by @zac-nixon in https://github.com/kubernetes-sigs/aws-load-balancer-controller/pull/4660 • Fix: skip empty ExternalId in AssumeRole for cross-account TGB by @devanshpoplii in https://github.com/kubernetes-sigs/aws-load-balancer-controller/pull/4659 • fix: guard BaseEndpoint assignment for wafregional and shield clients by @kahirokunn in https://github.com/kubernetes-sigs/aws-load-balancer-controller/pull/4658 • Refactor Gateway API tests into modules by @zac-nixon in https://github.com/kubernetes-sigs/aws-load-balancer-controller/pull/4661 • update base image by @zac-nixon in https://github.com/kubernetes-sigs/aws-load-balancer-controller/pull/4664 • implement conditions and transforms translation by @shuqz in https://github.com/kubernetes-sigs/aws-load-balancer-controller/pull/4653 • add calculate attached listenerset unit test by @zac-nixon in https://github.com/kubernetes-sigs/aws-load-balancer-controller/pull/4665 New Contributors • @bjhaid made their first contribution in https://github.com/kubernetes-sigs/aws-load-balancer-controller/pull/4588 • @cezarsa made their first contribution in https://github.com/kubernetes-sigs/aws-load-balancer-controller/pull/4617 • @swibrow made their first contribution in https://github.com/kubernetes-sigs/aws-load-balancer-controller/pull/4618 • @wesbrownfavor made their first contribution in https://github.com/kubernetes-sigs/aws-load-balancer-controller/pull/4646 • @saivenkateshi made their first contribution in https://github.com/kubernetes-sigs/aws-load-balancer-controller/pull/4635 • @devanshpoplii made their first contribution in https://github.com/kubernetes-sigs/aws-load-balancer-controller/pull/4659 Full Changelog: https://github.com/kubernetes-sigs/aws-load-balancer-controller/compare/v3.1.0...v3.2.0

kubernetes-sigs/aws-load-balancer-controller released v3.2.0 #eks #kubernetes

0 0 0 0
kubernetes-sigs/aws-ebs-csi-driver released v1.58.0 AWS EBS CSI Driver CHANGELOG See CHANGELOG for full list of changes

kubernetes-sigs/aws-ebs-csi-driver released v1.58.0 #eks #kubernetes

0 0 0 0
awslabs/kro released v0.9.1 What's Changed • fix duplicate dependencies in RGD status by @a-hilaly in https://github.com/kubernetes-sigs/kro/pull/1211 • test(upgrade): fix flaky spurious-GR assertions by @jakobmoellerdev in https://github.com/kubernetes-sigs/kro/pull/1212 • chore: go1.26 by @jakobmoellerdev in https://github.com/kubernetes-sigs/kro/pull/1224 • chore(deps): bump the npm-security-updates group across 2 directories with 3 updates by @dependabot[bot] in https://github.com/kubernetes-sigs/kro/pull/1220 • docs: Set KRO_VERSION to 0.9.0 by @a-hilaly in https://github.com/kubernetes-sigs/kro/pull/1222 • chore: add Cloud Build configuration for image publishing by @jakobmoellerdev in https://github.com/kubernetes-sigs/kro/pull/1229 • support "suspended" as canonical value for kro.run/reconcile annotation by @a-hilaly in https://github.com/kubernetes-sigs/kro/pull/1221 • KREP-013: Graph Revisions by @a-hilaly in https://github.com/kubernetes-sigs/kro/pull/1174 • consolidate metrics into pkg/metrics with unified Register by @a-hilaly in https://github.com/kubernetes-sigs/kro/pull/1227 • KREP-000: Kube Resource Orchestrator, ret-con initial proposal by @jlbutler in https://github.com/kubernetes-sigs/kro/pull/1236 • fix(controller): handle observation of external nodes during deletion by @jakobmoellerdev in https://github.com/kubernetes-sigs/kro/pull/1232 • feat(cel): add hash library with sha256 and md5 functions by @NicholasBlaskey in https://github.com/kubernetes-sigs/kro/pull/1235 • docs: release 0.9.1 documentation by @NicholasBlaskey in https://github.com/kubernetes-sigs/kro/pull/1237 Full Changelog: https://github.com/kubernetes-sigs/kro/compare/v0.9.0...v0.9.1

awslabs/kro released v0.9.1 #kro #eks #kubernetes

0 0 0 0
kubernetes-sigs/aws-ebs-csi-driver released helm-chart-aws-ebs-csi-driver-2.58.0 A Helm chart for AWS EBS CSI Driver

kubernetes-sigs/aws-ebs-csi-driver released helm-chart-aws-ebs-csi-driver-2.58.0 #eks #kubernetes

0 0 0 0
Preview
EKS and The Cross-AZ Tax: How to Stop Paying AWS $0.02/GB for Traffic That Should Never Leave Your Availability Zone I run EKS clusters across three Availability Zones because that's what production resilience...

✍️ New blog post by Darryl Ruggles

EKS and The Cross-AZ Tax: How to Stop Paying AWS $0.02/GB for Traffic That Should Never Leave Your Availability Zone

#aws #eks #finops #vpc

2 1 0 0
Amazon CloudWatch launches OTel Container Insights for Amazon EKS (Preview) <p>Amazon CloudWatch introduces Container Insights with OpenTelemetry metrics for Amazon EKS, available in public preview. Building on the existing Container Insights experience, this capability provides deeper visibility into EKS clusters by collecting more metrics from widely adopted open source and AWS collectors and sending them to CloudWatch using the OpenTelemetry Protocol (OTLP). Each metric is automatically enriched with up to 150 descriptive labels, including Kubernetes metadata and customer-defined labels such as team, application, or business unit.<br> <br> Curated dashboards in the Container Insights console present cluster, node, and pod health with the ability to aggregate and filter metrics by instance type, availability zone, node group, or any custom label. For deeper analysis, customers can write queries using the Prometheus Query Language (PromQL) in CloudWatch Query Studio. The CloudWatch Observability EKS add-on provides one-click installation through the Amazon EKS console, or can be deployed through CloudFormation, CDK, or Terraform. The add-on automatically detects accelerated compute hardware including NVIDIA GPUs, Elastic Fabric Adapters, and AWS Trainium and Inferentia accelerators. For existing customers of the add-on, CloudWatch supports publishing both OpenTelemetry and existing Container Insights metrics at the same time.<br> <br> Container Insights with OpenTelemetry metrics is available in public preview in US East (N. Virginia), US West (Oregon), Asia Pacific (Sydney), Asia Pacific (Singapore), and Europe (Ireland). There is no charge for OpenTelemetry metrics from Container Insights during preview.&nbsp;To get started, see the<a href="http://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/container-insights-otel-metrics.html"> Container Insights with OpenTelemetry metrics for Amazon EKS.</a></p>

Amazon CloudWatch launches OTel Container Insights for Amazon EKS (Preview) #eks #kubernetes

0 0 0 0
Preview
Building PCI DSS-Compliant Architectures on Amazon EKS In this post, we explore key considerations, best practices, and architectural decisions hosting applications on EKS in shared tenancy environments while maintaining PCI DSS compliance.&nbsp;Please note this information is for reference purposes only and does not constitute legal or compliance advice—customers remain responsible for making their own independent assessment, and AWS products or services are provided 'as is' without warranties, representations, or conditions of any kind.

Building PCI DSS-Compliant Architectures on Amazon EKS #eks #kubernetes

0 0 0 0
Preview
ARMO ARMO closes the gap between development and security, giving development, DevOps, and DevSecOps the flexibility and ease to ensure high grade security and data protection no matter the environment – cloud native, hybrid, or legacy.

The latest update for #ArmoSec includes "#AI Agent Security Framework on #AWS #EKS: Implementation Guide" and "AI Workload Security on #Azure: Evaluating Defender for #Cloud Against Specialized Runtime Tools".

#Cybersecurity https://opsmtrs.com/3fde7yI

0 0 0 0
awslabs/amazon-eks-ami released AMI Release v20260318 What's Changed • fix: reserve EKS addon ports to prevent containerd port collisions by @Shreyank031 in https://github.com/awslabs/amazon-eks-ami/pull/2650 • chore: unpin containerd minor version by @mselim00 in https://github.com/awslabs/amazon-eks-ami/pull/2653 • feat(nodeadm): support public ecr authenticated ipv6 pulls by @mselim00 in https://github.com/awslabs/amazon-eks-ami/pull/2593 • fix(nodeadm): Bump Go version to 1.25.7 by @junpengdev in https://github.com/awslabs/amazon-eks-ami/pull/2657 New Contributors • @Shreyank031 made their first contribution in https://github.com/awslabs/amazon-eks-ami/pull/2650 Full Changelog: https://github.com/awslabs/amazon-eks-ami/compare/v20260311...v20260318

awslabs/amazon-eks-ami released AMI Release v20260318 #eks #kubernetes

0 0 0 0
Preview
Session policies for Amazon EKS Pod Identity In this post, we demonstrate how to use session policies to dynamically scope down IAM permissions for your Kubernetes pods without creating additional IAM roles, and discuss important considerations when adopting this feature.

Session policies for Amazon EKS Pod Identity #eks #kubernetes

0 0 0 0
Preview
A Complete Terraform Setup for EKS Auto Mode: Is it right for you? One of the things I appreciate about AWS is the range of container options available. I recently...

✍️ New blog post by Darryl Ruggles

A Complete Terraform Setup for EKS Auto Mode: Is it right for you?

#eks #aws #kubernetes #terraform

0 0 0 0
awslabs/kro released v0.9.0 What's Changed • cut docs v0.8.5 by @michaelhtm in https://github.com/kubernetes-sigs/kro/pull/1032 • fix: flaky validate RGD status test by @michaelhtm in https://github.com/kubernetes-sigs/kro/pull/1034 • chore(deps): bump webpack from 5.96.1 to 5.105.0 in /website in the npm_and_yarn group across 1 directory by @dependabot[bot] in https://github.com/kubernetes-sigs/kro/pull/1027 • refactor(cel): Move cel conversion functions to separate package by @NicholasBlaskey in https://github.com/kubernetes-sigs/kro/pull/1043 • Fix flaky validate RGD status integration test by @Aman-Cool in https://github.com/kubernetes-sigs/kro/pull/1041 • add jakobmoellerdev to kro-maintainers by @jlbutler in https://github.com/kubernetes-sigs/kro/pull/1020 • promote nicslatts to emeritus-kro-maintainers by @jlbutler in https://github.com/kubernetes-sigs/kro/pull/1044 • chore: bump controller-runtime to v0.23.1 by @NicholasBlaskey in https://github.com/kubernetes-sigs/kro/pull/1046 • chore: bump cel-go to v0.27.0 by @NicholasBlaskey in https://github.com/kubernetes-sigs/kro/pull/1047 • Limit collection size to 1000 to protect cluster performance by @NicholasBlaskey in https://github.com/kubernetes-sigs/kro/pull/1036 • Add map library with merge functionality by @a-hilaly in https://github.com/kubernetes-sigs/kro/pull/1068 • chore: limit collection dimension to 5 by @michaelhtm in https://github.com/kubernetes-sigs/kro/pull/1045 • fix(docs): Wrong schema apiVersion definition in RGD chaining by @gagahsyuja in https://github.com/kubernetes-sigs/kro/pull/1050 • fix: properly return error in simpleschema parsing when the marker does by @NickKeller in https://github.com/kubernetes-sigs/kro/pull/1073 • Add json.marshal and json.unmarshal cel functions by @NicholasBlaskey in https://github.com/kubernetes-sigs/kro/pull/1033 • chore(deps): bump the npm_and_yarn group across 2 directories with 4 updates by @dependabot[bot] in https://github.com/kubernetes-sigs/kro/pull/1070 • fix: remove the rgd labels from managed resources by @jakobmoellerdev in https://github.com/kubernetes-sigs/kro/pull/1075 • fix(applyset): preserve prune scope on UID conflicts and requeue retry by @a-hilaly in https://github.com/kubernetes-sigs/kro/pull/1081 • chore: Remove myself from NOTICE by @codesenju in https://github.com/kubernetes-sigs/kro/pull/1082 • Document escaping Bash '${VAR}' syntax for CEL by @mwarkentin in https://github.com/kubernetes-sigs/kro/pull/1083 • fix: pass up expressive error by @fabianburth in https://github.com/kubernetes-sigs/kro/pull/1078 • feat: disable instance reconciliation when a kro.run/reconcile:"disabled" label is present by @NickKeller in https://github.com/kubernetes-sigs/kro/pull/1062 • fix(runtime): schema-aware CEL value conversion by @jakobmoellerdev in https://github.com/kubernetes-sigs/kro/pull/1080 • chore(deps): bump the npm_and_yarn group across 1 directory with 2 updates by @dependabot[bot] in https://github.com/kubernetes-sigs/kro/pull/1087 • chore(deps): bump @tootallnate/once from 2.0.0 to removed in /website in the npm_and_yarn group across 1 directory by @dependabot[bot] in https://github.com/kubernetes-sigs/kro/pull/1089 • feat: external ref watches and external ref collections by @jakobmoellerdev in https://github.com/kubernetes-sigs/kro/pull/1079 • docs: expand external references to support collections with label selectors by @jakobmoellerdev in https://github.com/kubernetes-sigs/kro/pull/1093 • test: harden pkg/runtime coverage by @a-hilaly in https://github.com/kubernetes-sigs/kro/pull/1099 • build: group Dependabot npm and Go security updates by @a-hilaly in https://github.com/kubernetes-sigs/kro/pull/1096 • test(instance): harden instance reconciler coverage by @a-hilaly in https://github.com/kubernetes-sigs/kro/pull/1103 • fix(cel/ast): derive known functions from CEL environment by @a-hilaly in https://github.com/kubernetes-sigs/kro/pull/1109 • test(rgd): Harden rgd controller unit tests by @a-hilaly in https://github.com/kubernetes-sigs/kro/pull/1102 • docs(website): remove pre-v0.7.0 entries from versions.json by @a-hilaly in https://github.com/kubernetes-sigs/kro/pull/1111 • fix(graph/resolver): expose schema resolver metrics on controller-runtime registry by @a-hilaly in https://github.com/kubernetes-sigs/kro/pull/1113 • dynamiccontroller: retain parent informers for shared GVR watches by @a-hilaly in https://github.com/kubernetes-sigs/kro/pull/1105 • perf(graph): eliminate duplicate CEL type building during RGD construction by @jakobmoellerdev in https://github.com/kubernetes-sigs/kro/pull/1116 • Fix ResourceGraphDefinition delete predicate handling by @a-hilaly in https://github.com/kubernetes-sigs/kro/pull/1097 • feat: add metrics for pkg/runtime by @NicholasBlaskey in https://github.com/kubernetes-sigs/kro/pull/1053 • docs(metrics): add stability notice for ALPHA metrics by @jakobmoellerdev in https://github.com/kubernetes-sigs/kro/pull/1118 • perf(cel): cache base declarations and environment with sync.Once by @jakobmoellerdev in https://github.com/kubernetes-sigs/kro/pull/1119 • dynamiccontroller: rollback provisional watches on failed reconciles by @a-hilaly in https://github.com/kubernetes-sigs/kro/pull/1106 • test: verify externalref integration cases reconcile on watched updates by @a-hilaly in https://github.com/kubernetes-sigs/kro/pull/1123 • refactor(dag): use a heap-based topological sort by @a-hilaly in https://github.com/kubernetes-sigs/kro/pull/1122 • test(pkg/graph): harden unit tests for graph builder and friends by @a-hilaly in https://github.com/kubernetes-sigs/kro/pull/1120 • feat(compat): detect default value changes as non-breaking in schema comparison by @michaelhtm in https://github.com/kubernetes-sigs/kro/pull/1098 • Add AWS Accounts Factory example with nested RGDs by @tzahimizrahi in https://github.com/kubernetes-sigs/kro/pull/1128 • KREP-008: docs: add proposal for resource-backed includeWhen evaluation by @shivansh-source in https://github.com/kubernetes-sigs/kro/pull/933 • feat(cel): add deterministic seeded integer generation function by @a-hilaly in https://github.com/kubernetes-sigs/kro/pull/1108 • website: overhaul overview docs with interactive resource graph diagrams by @a-hilaly in https://github.com/kubernetes-sigs/kro/pull/1110 • Make string templates compile to concentation by @NicholasBlaskey in https://github.com/kubernetes-sigs/kro/pull/1131 • fix: return a requeue error when waiting for readiness by @fabianburth in https://github.com/kubernetes-sigs/kro/pull/1090 • feat(helm): add topologySpreadConstraints in deployment by @QuentinBtd in https://github.com/kubernetes-sigs/kro/pull/1137 • feat(instance): block graph propagation on terminating managed resources by @a-hilaly in https://github.com/kubernetes-sigs/kro/pull/1132 • Add RGD controller metrics by @NicholasBlaskey in https://github.com/kubernetes-sigs/kro/pull/1063 • feat(cel): add support for TwoVarComprehensions in CEL environment by @jakobmoellerdev in https://github.com/kubernetes-sigs/kro/pull/1136 • perf(cel): add caching for CEL compilation artifacts to optimize performance by @jakobmoellerdev in https://github.com/kubernetes-sigs/kro/pull/1129 • fix(cel): sort transformList result before comparison in TwoVar test by @a-hilaly in https://github.com/kubernetes-sigs/kro/pull/1141 • Fix: Kro controller metrics report errors when objects are deleted by @Avr8 in https://github.com/kubernetes-sigs/kro/pull/1059 • feat(cel): add metrics for CEL cache hit/miss tracking by @a-hilaly in https://github.com/kubernetes-sigs/kro/pull/1142 • Add instance controller metrics by @NicholasBlaskey in https://github.com/kubernetes-sigs/kro/pull/1056 • feat(cel): add cel.bind() support to default environment and AST inspector by @pnz1990 in https://github.com/kubernetes-sigs/kro/pull/1145 • website: add KREP roadmap page by @a-hilaly in https://github.com/kubernetes-sigs/kro/pull/1133 • docs: add "Building Abstractions with kro" guides by @a-hilaly in https://github.com/kubernetes-sigs/kro/pull/1112 • KREP-003: Decorators (Collection Watching) by @ellistarn in https://github.com/kubernetes-sigs/kro/pull/738 • refactor(api): move InstanceState and NodeState to api/v1alpha1 by @NicholasBlaskey in https://github.com/kubernetes-sigs/kro/pull/1134 • chore(deps): bump dompurify from 3.3.0 to 3.3.2 in /website in the npm_and_yarn group across 1 directory by @dependabot[bot] in https://github.com/kubernetes-sigs/kro/pull/1092 • feat(cel): add index-mutation functions to the lists library by @pnz1990 in https://github.com/kubernetes-sigs/kro/pull/1148 • chore: implement annotation change predicate to allow reconciles on a… by @shabbskagalwala in https://github.com/kubernetes-sigs/kro/pull/1155 • Add client-go and reflector metrics registration by @a-hilaly in https://github.com/kubernetes-sigs/kro/pull/1143 • test: add webhook denial integration tests with ValidatingAdmissionPolicy by @NicholasBlaskey in https://github.com/kubernetes-sigs/kro/pull/1154 • KREP-10 for cluster-scoped instance CRDs by @antcybersec in https://github.com/kubernetes-sigs/kro/pull/1030 • KREP-017 template field omission with omit() by @a-hilaly in https://github.com/kubernetes-sigs/kro/pull/1121 • allow includeWhen to reference other resources by @a-hilaly in https://github.com/kubernetes-sigs/kro/pull/1104 • Use expressive histogram buckets for controller reconciliation metrics by @a-hilaly in https://github.com/kubernetes-sigs/kro/pull/1157 • commit watches on requeue signals, not just on success by @a-hilaly in https://github.com/kubernetes-sigs/kro/pull/1158 • feat: implement KREP-10 - support cluster-scoped instance CRDs by @antcybersec in https://github.com/kubernetes-sigs/kro/pull/1152 • feat(cel): add omit() for conditional field omission in templates by @michaelhtm in https://github.com/kubernetes-sigs/kro/pull/1139 • test: integration test case, omit() removes field by @michaelhtm in https://github.com/kubernetes-sigs/kro/pull/1168 • feat(#510): implement standard Kubernetes feature gates via component-base by @jakobmoellerdev in https://github.com/kubernetes-sigs/kro/pull/1172 • fix: show root cause error by @fabianburth in https://github.com/kubernetes-sigs/kro/pull/1160 • fix(dynamic): skip parent instance events with unchanged generation by @jakobmoellerdev in https://github.com/kubernetes-sigs/kro/pull/1173 • fix(metadata): skip instance-namespace label for cluster-scoped instances by @a-hilaly in https://github.com/kubernetes-sigs/kro/pull/1175 • KREP-15: label/annotation migration to internal.kro.run/ prefix by @michaelhtm in https://github.com/kubernetes-sigs/kro/pull/1094 • docs: Update docs be explicitly clear about resources depending on schema.spec by @NickKeller in https://github.com/kubernetes-sigs/kro/pull/1072 • docs: document cluster-scoped instance support by @a-hilaly in https://github.com/kubernetes-sigs/kro/pull/1162 • fix(docs): correct RGD conditions by @a-hilaly in https://github.com/kubernetes-sigs/kro/pull/1181 • fix(collections): register collection watch for all expanded resources by @a-hilaly in https://github.com/kubernetes-sigs/kro/pull/1182 • feat(cel): add k8s Quantity library support by @NicholasBlaskey in https://github.com/kubernetes-sigs/kro/pull/1177 • fix(cel): handle oneOf string|number schemas in UnstructuredToVal by @a-hilaly in https://github.com/kubernetes-sigs/kro/pull/1179 • feat: Add opt-in pprof profiling support via build tags by @a-hilaly in https://github.com/kubernetes-sigs/kro/pull/922 • feat(graph): reject omit() on required resource metadata fields by @michaelhtm in https://github.com/kubernetes-sigs/kro/pull/1167 • refactor(runtime,instance): split large files and simplify state management by @jakobmoellerdev in https://github.com/kubernetes-sigs/kro/pull/1165 • feat(cel): add k8s Lists library support by @NicholasBlaskey in https://github.com/kubernetes-sigs/kro/pull/1178 • Use RGD metadata.name as the label for ResourceGraphDefinition controller metrics. by @a-hilaly in https://github.com/kubernetes-sigs/kro/pull/1140 • make instance requeue interval configurable by @a-hilaly in https://github.com/kubernetes-sigs/kro/pull/1184 • add verify-codegen script by @a-hilaly in https://github.com/kubernetes-sigs/kro/pull/1183 • feat(events): Add events for instance status condition transition by @spattk in https://github.com/kubernetes-sigs/kro/pull/1151 • feat(graph): gate omit() behind CELOmitFunction feature flag by @a-hilaly in https://github.com/kubernetes-sigs/kro/pull/1185 • docs: Add a page for feature gates by @a-hilaly in https://github.com/kubernetes-sigs/kro/pull/1186 • feat(helm): expose feature gates in chart values by @a-hilaly in https://github.com/kubernetes-sigs/kro/pull/1187 • fix(externalref): allow external collections to list across all namespaces by @a-hilaly in https://github.com/kubernetes-sigs/kro/pull/1180 • fix(test): use unique labels to avoid cross-namespace collisions by @a-hilaly in https://github.com/kubernetes-sigs/kro/pull/1193 • harden BuilderCache stores and cache iterator environments by @a-hilaly in https://github.com/kubernetes-sigs/kro/pull/1189 • add schema.Cache for pointer stable OpenAPI field lookups by @a-hilaly in https://github.com/kubernetes-sigs/kro/pull/1190 • perf: removes the lock convoy during large RGD bursts by @a-hilaly in https://github.com/kubernetes-sigs/kro/pull/1192 • fix: disable instance reconciliation with annotation instead of label by @michaelhtm in https://github.com/kubernetes-sigs/kro/pull/1191 • fix missing dynamic controller registration, and wire up missing metrics by @jakobmoellerdev in https://github.com/kubernetes-sigs/kro/pull/1146 • key typed env cache by schema structure instead of pointer address by @a-hilaly in https://github.com/kubernetes-sigs/kro/pull/1194 • Implementation of Graph Revisions (KREP-013) by @a-hilaly in https://github.com/kubernetes-sigs/kro/pull/1085 • fix: get rid of cel build caches due to problems during stabilization by @jakobmoellerdev in https://github.com/kubernetes-sigs/kro/pull/1195 • Add verify-codegen ci entrypoint by @a-hilaly in https://github.com/kubernetes-sigs/kro/pull/1196 • Add an upgrade test framework that validates kro upgrades don't break by @a-hilaly in https://github.com/kubernetes-sigs/kro/pull/1197 • refactor(apis): add condition prune mechanism for upgrades by @a-hilaly in https://github.com/kubernetes-sigs/kro/pull/1198 • fix(instance): surface graph resolution failures in conditions and metrics by @a-hilaly in https://github.com/kubernetes-sigs/kro/pull/1201 • docs(website): rewrite graph revisions page and add interactive diagrams by @a-hilaly in https://github.com/kubernetes-sigs/kro/pull/1199 • Update helm chart and values.yaml by @a-hilaly in https://github.com/kubernetes-sigs/kro/pull/1203 • docs: Fix formatting in the verify installation step (getting started… by @KatharinaSick in https://github.com/kubernetes-sigs/kro/pull/1188 • Watch owned GraphRevisions from the RGD controller by @a-hilaly in https://github.com/kubernetes-sigs/kro/pull/1200 • expose leader election tuning flags in helm chart by @a-hilaly in https://github.com/kubernetes-sigs/kro/pull/1205 • feat(perf): use DefaultUnstructuredConverter to eliminate JSON round-trips in conditions by @spattk in https://github.com/kubernetes-sigs/kro/pull/1204 • watch graph revisions by spec.snapshot.name for orphan adoption by @a-hilaly in https://github.com/kubernetes-sigs/kro/pull/1206 • cut docs for 0.9.0 by @a-hilaly in https://github.com/kubernetes-sigs/kro/pull/1207 New Contributors • @NicholasBlaskey made their first contribution in https://github.com/kubernetes-sigs/kro/pull/1043 • @gagahsyuja made their first contribution in https://github.com/kubernetes-sigs/kro/pull/1050 • @NickKeller made their first contribution in https://github.com/kubernetes-sigs/kro/pull/1073 • @mwarkentin made their first contribution in https://github.com/kubernetes-sigs/kro/pull/1083 • @shivansh-source made their first contribution in https://github.com/kubernetes-sigs/kro/pull/933 • @QuentinBtd made their first contribution in https://github.com/kubernetes-sigs/kro/pull/1137 • @Avr8 made their first contribution in https://github.com/kubernetes-sigs/kro/pull/1059 • @pnz1990 made their first contribution in https://github.com/kubernetes-sigs/kro/pull/1145 • @KatharinaSick made their first contribution in https://github.com/kubernetes-sigs/kro/pull/1188 Full Changelog: https://github.com/kubernetes-sigs/kro/compare/v0.8.5...v0.9.0

awslabs/kro released v0.9.0 #kro #eks #kubernetes

0 0 0 0
Preview
How Generali Malaysia optimizes operations with Amazon EKS In this post, we look at how Generali is using Amazon EKS Auto Mode and its integration with other AWS services to enhance performance while reducing operational overhead, optimizing costs, and enhancing security.

How Generali Malaysia optimizes operations with Amazon EKS #eksautomode #eks #kubernetes

0 0 0 0
kubernetes-sigs/aws-ebs-csi-driver released v1.57.1 AWS EBS CSI Driver CHANGELOG See CHANGELOG for full list of changes

kubernetes-sigs/aws-ebs-csi-driver released v1.57.1 #eks #kubernetes

0 0 0 0
Amazon EKS announces 99.99% Service Level Agreement and new 8XL scaling tier for Provisioned Control Plane clusters

חדש! Amazon EKS מציע SLA של 99.99% ורמת 8XL לאשכולות Provisioned Control Plane לביצועים מקסימליים #AWS #EKS

0 0 0 0
kubernetes-sigs/aws-ebs-csi-driver released helm-chart-aws-ebs-csi-driver-2.57.1 A Helm chart for AWS EBS CSI Driver

kubernetes-sigs/aws-ebs-csi-driver released helm-chart-aws-ebs-csi-driver-2.57.1 #eks #kubernetes

1 0 0 0
aws/karpenter-provider-aws released v1.10.0 Features • add kubereplay tool for workload replay (#8864) #8864 (Ellis Tarn) • support launching from interruptible ODCRs (#9019) #9019 (Ryan Mistretta) Bug Fixes • prevent RequestLimitExceeded CreateFleet error from marking ODCRs unavailable #8936 (Sarthak Umarani) Documentation • carry forward static capacity docs (#8956) #8956 (Jason Deal) • add karpenter.sh/nodepool, karpenter.k8s.aws/ec2nodeclass, topology.k8s.aws/zone-id labels to the list of well known labels. minor contribution guide update (#8960) #8960 (Derek Frank) • update cloudformation reference (#8958) #8958 (Jason Deal) • upgrade guide (#9025) #9025 (Ryan Mistretta) Chores • Release v1.9.0 (#8938) #8938 (github-actions[bot]) • Add kubelet Memory Manager policy for Bottlerocket (#8907) #8907 (Jens-Uwe Walther) • deps: bump golang.org/x/oauth2 from 0.23.0 to 0.27.0 in /tools/kubereplay (#8950) #8950 (dependabot[bot]) • Bump upstream karpenter version (#8979) #8979 (Jigisha Patil) • deps: bump the go-deps group across 1 directory with 14 updates (#8980) #8980 (dependabot[bot]) • deps-dev: bump tar from 7.5.6 to 7.5.9 in /website (#8974) #8974 (dependabot[bot]) • Add instances ineligible for free tier error (#9004) #9004 (Andrew Mitchell) • bump karpenter version (#9024) #9024 (Ryan Mistretta)

aws/karpenter-provider-aws released v1.10.0 #karpenter #eks #kubernetes

1 0 0 0
Preview
EKS Diagnoses: The Swiss Knife The 2 AM wake-up call every Kubernetes engineer dreads — and the tool I built to make it...

✍️ New blog post by Amar Tinawi

EKS Diagnoses: The Swiss Knife

#aws #eks #kubernetes #k8s

0 0 0 0
Amazon EKS announces 99.99% Service Level Agreement and new 8XL scaling tier for Provisioned Control Plane clusters <p><a href="https://aws.amazon.com/eks/">Amazon Elastic Kubernetes Service (Amazon EKS)</a>&nbsp;now offers a 99.99% Service Level Agreement (SLA) for clusters running on Provisioned Control Plane, up from the 99.95% SLA offered on standard control plane. Amazon EKS is also introducing the 8XL scaling tier, the largest available Provisioned Control Plane tier.<br> <br> Provisioned Control Plane gives you the ability to select your cluster's control plane capacity from a set of well-defined scaling tiers, ensuring the control plane is pre-provisioned and ready to handle traffic spikes or unpredictable bursts. The higher 99.99% SLA is measured in 1-minute intervals, providing a more granular and stringent availability commitment for mission-critical workloads. The new 8XL tier offers double the Kubernetes API server request processing capacity of the next lower 4XL tier, enabling workloads such as ultra-scale AI/ML training, high-performance computing (HPC), and large-scale data processing.<br> <br> Both the 99.99% SLA and the 8XL tier are available today in all AWS regions where Amazon EKS Provisioned Control Plane is offered. To learn more about the SLA, see the&nbsp;<a href="https://aws.amazon.com/eks/sla/">Amazon EKS Service Level Agreement</a>. For 8XL pricing and capabilities, see the&nbsp;<a href="https://aws.amazon.com/eks/pricing/">EKS pricing</a>&nbsp;and&nbsp;<a href="https://docs.aws.amazon.com/eks/latest/userguide/eks-provisioned-control-plane.html">EKS Provisioned Control Plane documentation</a>.</p>

Amazon EKS announces 99.99% Service Level Agreement and new 8XL scaling tier for Provisioned Control Plane clusters #eks #kubernetes

1 1 0 0
AWS Neuron announces support for Dynamic Resource Allocation with Amazon EKS <p>AWS announces the Neuron Dynamic Resource Allocation (DRA) driver for Amazon Elastic Kubernetes Service (EKS), bringing Kubernetes-native hardware-aware scheduling to AWS Trainium-based instances. The Neuron DRA driver publishes rich device attributes — including hardware topology and Neuron-EFA PCIe co-location — directly to the Kubernetes scheduler, enabling topology-aware placement decisions without custom scheduler extensions.<br> <br> Deploying AI workloads on Kubernetes requires ML engineers to make infrastructure decisions that are not directly related to model development, such as determining device counts, understanding hardware and network topologies, and writing accelerator-specific manifests. This creates friction, slows iteration, and tightly couples workloads to underlying infrastructure. As use cases expand to distributed training, long-context inference, and disaggregated architectures, this complexity becomes a scaling bottleneck.<br> <br> The Neuron DRA driver removes this burden by separating infrastructure concerns from ML workflows. Infrastructure teams define reusable ResourceClaimTemplates that capture device topology, allocation, and networking policies—for example, mapping instance types to optimal NeuronDevice and EFA configurations. ML engineers can simply reference these templates in their manifests, without needing to reason about hardware details. This enables consistent deployment across workload types while allowing per-workload configuration so multiple workloads can efficiently share the same nodes.<br> <br> The Neuron DRA driver supports all AWS Trainium instance types&nbsp; and is available in all AWS Regions where AWS Trainium is available.</p> <p>For documentation, sample templates, and implementation guides, visit <a href="https://awsdocs-neuron.readthedocs-hosted.com/en/latest/containers/neuron-dra.html">the Neuron DRA documentation.</a></p> <p><b>Learn more:</b><br> </p> <ul> <li><a href="https://awsdocs-neuron.readthedocs-hosted.com/en/latest/containers/neuron-dra.html">Neuron EKS DRA templates</a></li> <li><a href="https://awsdocs-neuron.readthedocs-hosted.com/en/latest/containers/kubernetes-getting-started.html" style="background-color: rgb(255,255,255);">Neuron EKS documentation</a></li> <li><a href="https://docs.aws.amazon.com/eks/latest/userguide/device-management-neuron.html">Amazon EKS documentation</a></li> </ul>

AWS Neuron announces support for Dynamic Resource Allocation with Amazon EKS #eks #kubernetes

0 0 0 0
Preview
The 80/20 of AWS (the services that actually matter) AWS has over 200 services. That number is intimidating. You log into the console, see a wall of icons, and immediately feel like you need a…

heyjoshlee.medium.com/the-80-20-of...

#AWS #cloud #infrastructure #EC2 #IAM #S3 #RDS #DynamoDB #Lambda #APIGateway #CloudFront #Route53 #SQS #SNS #CloudWatch #EKS #CDN

0 0 0 0
Preview
Tigera Tigera provides zero-trust network security and continuous compliance for Kubernetes platforms that enables enterprises to meet their security and compliance requirements.

The latest update for #Tigera includes "What Your #EKS Flow Logs Aren't Telling You" and "How AI Agents Communicate: Understanding the A2A Protocol for #Kubernetes".

#cybersecurity #devops https://opsmtrs.com/2ZYXor3

3 1 1 0
Preview
Deploy production generative AI at the edge using Amazon EKS Hybrid Nodes with NVIDIA DGX This post demonstrates a real-world example of integrating EKS Hybrid Nodes with NVIDIA DGX Spark, a compact and energy-efficient GPU platform optimized for edge AI deployment. In this post we walk you through deploying a large language model (LLM) for low-latency generative AI inference on-premises, setting up node monitoring and GPU observability with centralized management through Amazon EKS.

Deploy production generative AI at the edge using Amazon EKS Hybrid Nodes with NVIDIA DGX #eks #kubernetes

2 0 0 0
Preview
AI-powered event response for Amazon EKS In this post, you'll learn how AWS DevOps Agent integrates with your existing observability stack to provide intelligent, automated responses to system events.

AI-powered event response for Amazon EKS #eks #kubernetes

1 0 0 0
Preview
Building a Production-Grade Private EKS Cluster with OpenVPN, Prometheus & Grafana Step-by-step guide to deploying a private Amazon EKS cluster with zero public API exposure,...

✍️ New blog post by Asmaa Elalfy

Building a Production-Grade Private EKS Cluster with OpenVPN, Prometheus & Grafana

#devops #aws #eks #kubernetes

1 1 0 0