"use strict"; const {Fragment: _Fragment, jsxDEV: _jsxDEV} = arguments[0]; const {useMDXComponents: _provideComponents} = arguments[0]; function _createMdxContent(props) { const _components = { code: "code", h1: "h1", h2: "h2", h3: "h3", input: "input", li: "li", ol: "ol", p: "p", strong: "strong", ul: "ul", ..._provideComponents(), ...props.components }, {CH} = _components; if (!CH) _missingMdxReference("CH", false, "67:1-77:4"); if (!CH.Code) _missingMdxReference("CH.Code", true, "67:1-77:4"); return _jsxDEV(_Fragment, { children: [_jsxDEV("style", { dangerouslySetInnerHTML: { __html: "[data-ch-theme=\"assistance\"] { --ch-t-colorScheme: var(--ch-0);--ch-t-foreground: var(--ch-4);--ch-t-background: var(--ch-16);--ch-t-editor-background: var(--ch-16);--ch-t-editor-foreground: var(--ch-4);--ch-t-editor-rangeHighlightBackground: var(--ch-19);--ch-t-editor-infoForeground: var(--ch-18);--ch-t-editor-selectionBackground: var(--ch-17);--ch-t-tab-activeBackground: var(--ch-16);--ch-t-tab-activeForeground: var(--ch-4);--ch-t-tab-inactiveBackground: var(--ch-21);--ch-t-tab-inactiveForeground: var(--ch-15);--ch-t-tab-border: var(--ch-22);--ch-t-tab-activeBorder: var(--ch-16);--ch-t-editorGroupHeader-tabsBackground: var(--ch-21);--ch-t-editorLineNumber-foreground: var(--ch-20);--ch-t-input-foreground: var(--ch-4);--ch-t-sideBar-foreground: var(--ch-4);--ch-t-list-hoverBackground: var(--ch-25);--ch-t-list-hoverForeground: var(--ch-4); }" } }, undefined, false, { fileName: "" }, this), "\n", _jsxDEV(_components.h1, { id: "amazon-eks-upgrades-and-day-2-operations-practical-production-guide", children: "Amazon EKS Upgrades and Day-2 Operations: Practical Production Guide" }, undefined, false, { fileName: "", lineNumber: 2, columnNumber: 1 }, this), "\n", _jsxDEV(_components.p, { children: "If you’re already running Amazon EKS, the hardest part isn’t creating a cluster—it’s operating it reliably over time. “Day-2” EKS work includes upgrades, node rotations, add-on lifecycle management, autoscaling, IAM integration, security posture, and repeatable runbooks." }, undefined, false, { fileName: "", lineNumber: 4, columnNumber: 1 }, this), "\n", _jsxDEV(_components.p, { children: "This guide focuses on practical, low-risk operational patterns you can apply to existing clusters." }, undefined, false, { fileName: "", lineNumber: 6, columnNumber: 1 }, this), "\n", _jsxDEV(_components.h2, { id: "core-principles-for-safe-eks-operations", children: "Core principles for safe EKS operations" }, undefined, false, { fileName: "", lineNumber: 8, columnNumber: 1 }, this), "\n", _jsxDEV(_components.h2, { id: "1-treat-upgrades-as-a-routine-not-an-emergency", children: "1) Treat upgrades as a routine, not an emergency" }, undefined, false, { fileName: "", lineNumber: 10, columnNumber: 1 }, this), "\n", _jsxDEV(_components.ul, { children: ["\n", _jsxDEV(_components.li, { children: [_jsxDEV(_components.strong, { children: "Upgrade frequently" }, undefined, false, { fileName: "", lineNumber: 12, columnNumber: 3 }, this), " rather than infrequently"] }, undefined, true, { fileName: "", lineNumber: 12, columnNumber: 1 }, this), "\n", _jsxDEV(_components.li, { children: [_jsxDEV(_components.strong, { children: "Prefer small version jumps" }, undefined, false, { fileName: "", lineNumber: 13, columnNumber: 3 }, this), " (e.g., ", _jsxDEV(_components.code, { children: "1.27 -> 1.28" }, undefined, false, { fileName: "", lineNumber: 13, columnNumber: 41 }, this), ") to reduce unknowns"] }, undefined, true, { fileName: "", lineNumber: 13, columnNumber: 1 }, this), "\n", _jsxDEV(_components.li, { children: [_jsxDEV(_components.strong, { children: "Automate pre-checks" }, undefined, false, { fileName: "", lineNumber: 14, columnNumber: 3 }, this), " and ", _jsxDEV(_components.strong, { children: "standardize change windows" }, undefined, false, { fileName: "", lineNumber: 14, columnNumber: 31 }, this)] }, undefined, true, { fileName: "", lineNumber: 14, columnNumber: 1 }, this), "\n", _jsxDEV(_components.li, { children: [_jsxDEV(_components.strong, { children: "Always rotate nodes" }, undefined, false, { fileName: "", lineNumber: 15, columnNumber: 3 }, this), " as part of upgrades (don’t keep ancient AMIs)"] }, undefined, true, { fileName: "", lineNumber: 15, columnNumber: 1 }, this), "\n"] }, undefined, true, { fileName: "", lineNumber: 12, columnNumber: 1 }, this), "\n", _jsxDEV(_components.h2, { id: "2-standardize-your-baseline-components", children: "2) Standardize your baseline components" }, undefined, false, { fileName: "", lineNumber: 17, columnNumber: 1 }, this), "\n", _jsxDEV(_components.p, { children: "A stable baseline reduces upgrade complexity:" }, undefined, false, { fileName: "", lineNumber: 19, columnNumber: 1 }, this), "\n", _jsxDEV(_components.ul, { children: ["\n", _jsxDEV(_components.li, { children: [_jsxDEV(_components.strong, { children: "Managed node groups" }, undefined, false, { fileName: "", lineNumber: 21, columnNumber: 3 }, this), " (or Karpenter) for node lifecycle"] }, undefined, true, { fileName: "", lineNumber: 21, columnNumber: 1 }, this), "\n", _jsxDEV(_components.li, { children: [_jsxDEV(_components.strong, { children: "IRSA" }, undefined, false, { fileName: "", lineNumber: 22, columnNumber: 3 }, this), " for pods needing AWS APIs"] }, undefined, true, { fileName: "", lineNumber: 22, columnNumber: 1 }, this), "\n", _jsxDEV(_components.li, { children: [_jsxDEV(_components.strong, { children: "EKS managed add-ons" }, undefined, false, { fileName: "", lineNumber: 23, columnNumber: 3 }, this), " when possible (VPC CNI, CoreDNS, kube-proxy)"] }, undefined, true, { fileName: "", lineNumber: 23, columnNumber: 1 }, this), "\n", _jsxDEV(_components.li, { children: [_jsxDEV(_components.strong, { children: "Ingress" }, undefined, false, { fileName: "", lineNumber: 24, columnNumber: 3 }, this), " via AWS Load Balancer Controller (ALB/NLB)"] }, undefined, true, { fileName: "", lineNumber: 24, columnNumber: 1 }, this), "\n", _jsxDEV(_components.li, { children: [_jsxDEV(_components.strong, { children: "Metrics + logging" }, undefined, false, { fileName: "", lineNumber: 25, columnNumber: 3 }, this), " baked in"] }, undefined, true, { fileName: "", lineNumber: 25, columnNumber: 1 }, this), "\n"] }, undefined, true, { fileName: "", lineNumber: 21, columnNumber: 1 }, this), "\n", _jsxDEV(_components.h2, { id: "upgrade-overview-what-actually-needs-upgrading", children: "Upgrade overview: what actually needs upgrading" }, undefined, false, { fileName: "", lineNumber: 27, columnNumber: 1 }, this), "\n", _jsxDEV(_components.p, { children: "In EKS, you’ll typically upgrade:" }, undefined, false, { fileName: "", lineNumber: 29, columnNumber: 1 }, this), "\n", _jsxDEV(_components.ul, { children: ["\n", _jsxDEV(_components.li, { children: [_jsxDEV(_components.strong, { children: "Control plane version" }, undefined, false, { fileName: "", lineNumber: 31, columnNumber: 3 }, this), " (EKS-managed)"] }, undefined, true, { fileName: "", lineNumber: 31, columnNumber: 1 }, this), "\n", _jsxDEV(_components.li, { children: [_jsxDEV(_components.strong, { children: "Worker nodes" }, undefined, false, { fileName: "", lineNumber: 32, columnNumber: 3 }, this), " (node group AMI / launch template)"] }, undefined, true, { fileName: "", lineNumber: 32, columnNumber: 1 }, this), "\n", _jsxDEV(_components.li, { children: [_jsxDEV(_components.strong, { children: "Managed add-ons" }, undefined, false, { fileName: "", lineNumber: 33, columnNumber: 3 }, this), " (VPC CNI, CoreDNS, kube-proxy)"] }, undefined, true, { fileName: "", lineNumber: 33, columnNumber: 1 }, this), "\n", _jsxDEV(_components.li, { children: [_jsxDEV(_components.strong, { children: "Cluster add-ons" }, undefined, false, { fileName: "", lineNumber: 34, columnNumber: 3 }, this), " (AWS LB Controller, ExternalDNS, CSI driver, etc.)"] }, undefined, true, { fileName: "", lineNumber: 34, columnNumber: 1 }, this), "\n"] }, undefined, true, { fileName: "", lineNumber: 31, columnNumber: 1 }, this), "\n", _jsxDEV(_components.p, { children: "A good default upgrade order is:" }, undefined, false, { fileName: "", lineNumber: 36, columnNumber: 1 }, this), "\n", _jsxDEV(_components.ol, { children: ["\n", _jsxDEV(_components.li, { children: "Validate cluster readiness (PDBs, capacity, compatibility)" }, undefined, false, { fileName: "", lineNumber: 38, columnNumber: 1 }, this), "\n", _jsxDEV(_components.li, { children: ["Upgrade ", _jsxDEV(_components.strong, { children: "control plane" }, undefined, false, { fileName: "", lineNumber: 39, columnNumber: 12 }, this)] }, undefined, true, { fileName: "", lineNumber: 39, columnNumber: 1 }, this), "\n", _jsxDEV(_components.li, { children: ["Upgrade ", _jsxDEV(_components.strong, { children: "managed add-ons" }, undefined, false, { fileName: "", lineNumber: 40, columnNumber: 12 }, this)] }, undefined, true, { fileName: "", lineNumber: 40, columnNumber: 1 }, this), "\n", _jsxDEV(_components.li, { children: ["Rotate/upgrade ", _jsxDEV(_components.strong, { children: "worker nodes" }, undefined, false, { fileName: "", lineNumber: 41, columnNumber: 19 }, this)] }, undefined, true, { fileName: "", lineNumber: 41, columnNumber: 1 }, this), "\n", _jsxDEV(_components.li, { children: "Upgrade third-party controllers/operators" }, undefined, false, { fileName: "", lineNumber: 42, columnNumber: 1 }, this), "\n", _jsxDEV(_components.li, { children: "Post-upgrade verification and burn-in" }, undefined, false, { fileName: "", lineNumber: 43, columnNumber: 1 }, this), "\n"] }, undefined, true, { fileName: "", lineNumber: 38, columnNumber: 1 }, this), "\n", _jsxDEV(_components.h2, { id: "pre-upgrade-checklist", children: "Pre-upgrade checklist" }, undefined, false, { fileName: "", lineNumber: 45, columnNumber: 1 }, this), "\n", _jsxDEV(_components.h3, { id: "1-kubernetes-api-deprecations-and-compatibility", children: "1) Kubernetes API deprecations and compatibility" }, undefined, false, { fileName: "", lineNumber: 47, columnNumber: 1 }, this), "\n", _jsxDEV(_components.ul, { children: ["\n", _jsxDEV(_components.li, { children: "Confirm the Kubernetes version’s removed APIs." }, undefined, false, { fileName: "", lineNumber: 49, columnNumber: 1 }, this), "\n", _jsxDEV(_components.li, { children: "Check add-ons compatibility matrices." }, undefined, false, { fileName: "", lineNumber: 50, columnNumber: 1 }, this), "\n"] }, undefined, true, { fileName: "", lineNumber: 49, columnNumber: 1 }, this), "\n", _jsxDEV(_components.p, { children: "Useful signals:" }, undefined, false, { fileName: "", lineNumber: 52, columnNumber: 1 }, this), "\n", _jsxDEV(_components.ul, { children: ["\n", _jsxDEV(_components.li, { children: "Admission webhook failures" }, undefined, false, { fileName: "", lineNumber: 54, columnNumber: 1 }, this), "\n", _jsxDEV(_components.li, { children: "Controllers stuck in CrashLoop" }, undefined, false, { fileName: "", lineNumber: 55, columnNumber: 1 }, this), "\n", _jsxDEV(_components.li, { children: "Deprecated API usage from manifests" }, undefined, false, { fileName: "", lineNumber: 56, columnNumber: 1 }, this), "\n"] }, undefined, true, { fileName: "", lineNumber: 54, columnNumber: 1 }, this), "\n", _jsxDEV(_components.h3, { id: "2-poddisruptionbudgets-and-drainability", children: "2) PodDisruptionBudgets and drainability" }, undefined, false, { fileName: "", lineNumber: 58, columnNumber: 1 }, this), "\n", _jsxDEV(_components.p, { children: "Un-drainable nodes are the #1 upgrade/rotation killer." }, undefined, false, { fileName: "", lineNumber: 60, columnNumber: 1 }, this), "\n", _jsxDEV(_components.ul, { children: ["\n", _jsxDEV(_components.li, { children: ["Ensure workloads have ", _jsxDEV(_components.strong, { children: ">1 replica" }, undefined, false, { fileName: "", lineNumber: 62, columnNumber: 25 }, this), " where HA is needed"] }, undefined, true, { fileName: "", lineNumber: 62, columnNumber: 1 }, this), "\n", _jsxDEV(_components.li, { children: "Validate PDBs allow at least one pod to be disrupted" }, undefined, false, { fileName: "", lineNumber: 63, columnNumber: 1 }, this), "\n"] }, undefined, true, { fileName: "", lineNumber: 62, columnNumber: 1 }, this), "\n", _jsxDEV(_components.p, { children: "Example PDB:" }, undefined, false, { fileName: "", lineNumber: 65, columnNumber: 1 }, this), "\n", _jsxDEV(CH.Code, { codeConfig: chCodeConfig, northPanel: { "tabs": [""], "active": "", "heightRatio": 1 }, files: [{ "name": "", "focus": "", "code": { "lines": [{ "tokens": [{ "content": "apiVersion", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ": ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "policy/v1", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": "kind", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ": ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "PodDisruptionBudget", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": "metadata", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ":", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " name", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ": ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "api-pdb", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": "spec", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ":", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " minAvailable", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ": ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "2", "props": { "style": { "color": "var(--ch-2)" } } }] }, { "tokens": [{ "content": " selector", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ":", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " matchLabels", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ":", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " app", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ": ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "api", "props": { "style": { "color": "var(--ch-8)" } } }] }], "lang": "yaml" }, "annotations": [] }] }, undefined, false, { fileName: "", lineNumber: 67, columnNumber: 1 }, this), "\n", _jsxDEV(_components.h3, { id: "3-capacity-headroom", children: "3) Capacity headroom" }, undefined, false, { fileName: "", lineNumber: 79, columnNumber: 1 }, this), "\n", _jsxDEV(_components.p, { children: "You need spare capacity during rotations." }, undefined, false, { fileName: "", lineNumber: 81, columnNumber: 1 }, this), "\n", _jsxDEV(_components.ul, { children: ["\n", _jsxDEV(_components.li, { children: [_jsxDEV(_components.strong, { children: "Target" }, undefined, false, { fileName: "", lineNumber: 83, columnNumber: 3 }, this), ": at least ", _jsxDEV(_components.strong, { children: "20-30% headroom" }, undefined, false, { fileName: "", lineNumber: 83, columnNumber: 24 }, this), " for critical namespaces"] }, undefined, true, { fileName: "", lineNumber: 83, columnNumber: 1 }, this), "\n", _jsxDEV(_components.li, { children: "Ensure cluster autoscaler/Karpenter can scale up" }, undefined, false, { fileName: "", lineNumber: 84, columnNumber: 1 }, this), "\n"] }, undefined, true, { fileName: "", lineNumber: 83, columnNumber: 1 }, this), "\n", _jsxDEV(_components.h3, { id: "4-operational-safety-controls", children: "4) Operational safety controls" }, undefined, false, { fileName: "", lineNumber: 86, columnNumber: 1 }, this), "\n", _jsxDEV(_components.ul, { children: ["\n", _jsxDEV(_components.li, { children: "Confirm alerting works (PagerDuty/Slack etc.)" }, undefined, false, { fileName: "", lineNumber: 88, columnNumber: 1 }, this), "\n", _jsxDEV(_components.li, { children: "Define rollback (node group rollback + app rollback)" }, undefined, false, { fileName: "", lineNumber: 89, columnNumber: 1 }, this), "\n", _jsxDEV(_components.li, { children: "Snapshot critical config if needed" }, undefined, false, { fileName: "", lineNumber: 90, columnNumber: 1 }, this), "\n"] }, undefined, true, { fileName: "", lineNumber: 88, columnNumber: 1 }, this), "\n", _jsxDEV(_components.h2, { id: "control-plane-upgrade-eks", children: "Control plane upgrade (EKS)" }, undefined, false, { fileName: "", lineNumber: 92, columnNumber: 1 }, this), "\n", _jsxDEV(_components.p, { children: ["You can upgrade via console, ", _jsxDEV(_components.code, { children: "eksctl" }, undefined, false, { fileName: "", lineNumber: 94, columnNumber: 30 }, this), ", Terraform, or AWS CLI."] }, undefined, true, { fileName: "", lineNumber: 94, columnNumber: 1 }, this), "\n", _jsxDEV(_components.h3, { id: "example-using-eksctl", children: ["Example using ", _jsxDEV(_components.code, { children: "eksctl" }, undefined, false, { fileName: "", lineNumber: 96, columnNumber: 19 }, this)] }, undefined, true, { fileName: "", lineNumber: 96, columnNumber: 1 }, this), "\n", _jsxDEV(CH.Code, { codeConfig: chCodeConfig, northPanel: { "tabs": [""], "active": "", "heightRatio": 1 }, files: [{ "name": "", "focus": "", "code": { "lines": [{ "tokens": [{ "content": "eksctl ", "props": { "style": { "color": "var(--ch-3)" } } }, { "content": "upgrade cluster ", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": "\\", "props": { "style": { "color": "var(--ch-2)" } } }] }, { "tokens": [{ "content": " --name ", "props": { "style": { "color": "var(--ch-2)" } } }, { "content": "my-eks ", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": "\\", "props": { "style": { "color": "var(--ch-2)" } } }] }, { "tokens": [{ "content": " --region ", "props": { "style": { "color": "var(--ch-2)" } } }, { "content": "us-east-1 ", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": "\\", "props": { "style": { "color": "var(--ch-2)" } } }] }, { "tokens": [{ "content": " --version 1.29", "props": { "style": { "color": "var(--ch-2)" } } }] }], "lang": "bash" }, "annotations": [] }] }, undefined, false, { fileName: "", lineNumber: 98, columnNumber: 1 }, this), "\n", _jsxDEV(_components.h3, { id: "verify-control-plane-version", children: "Verify control plane version" }, undefined, false, { fileName: "", lineNumber: 105, columnNumber: 1 }, this), "\n", _jsxDEV(CH.Code, { codeConfig: chCodeConfig, northPanel: { "tabs": [""], "active": "", "heightRatio": 1 }, files: [{ "name": "", "focus": "", "code": { "lines": [{ "tokens": [{ "content": "aws ", "props": { "style": { "color": "var(--ch-3)" } } }, { "content": "eks describe-cluster ", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": "\\", "props": { "style": { "color": "var(--ch-2)" } } }] }, { "tokens": [{ "content": " --name ", "props": { "style": { "color": "var(--ch-2)" } } }, { "content": "my-eks ", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": "\\", "props": { "style": { "color": "var(--ch-2)" } } }] }, { "tokens": [{ "content": " --region ", "props": { "style": { "color": "var(--ch-2)" } } }, { "content": "us-east-1 ", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": "\\", "props": { "style": { "color": "var(--ch-2)" } } }] }, { "tokens": [{ "content": " --query ", "props": { "style": { "color": "var(--ch-2)" } } }, { "content": "'cluster.version' ", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": "\\", "props": { "style": { "color": "var(--ch-2)" } } }] }, { "tokens": [{ "content": " --output ", "props": { "style": { "color": "var(--ch-2)" } } }, { "content": "text", "props": { "style": { "color": "var(--ch-8)" } } }] }], "lang": "bash" }, "annotations": [] }] }, undefined, false, { fileName: "", lineNumber: 107, columnNumber: 1 }, this), "\n", _jsxDEV(_components.h2, { id: "managed-add-ons-upgrades", children: "Managed add-ons upgrades" }, undefined, false, { fileName: "", lineNumber: 115, columnNumber: 1 }, this), "\n", _jsxDEV(_components.p, { children: "EKS managed add-ons reduce operational burden but still require conscious lifecycle management." }, undefined, false, { fileName: "", lineNumber: 117, columnNumber: 1 }, this), "\n", _jsxDEV(_components.h3, { id: "list-add-ons", children: "List add-ons" }, undefined, false, { fileName: "", lineNumber: 119, columnNumber: 1 }, this), "\n", _jsxDEV(CH.Code, { codeConfig: chCodeConfig, northPanel: { "tabs": [""], "active": "", "heightRatio": 1 }, files: [{ "name": "", "focus": "", "code": { "lines": [{ "tokens": [{ "content": "aws ", "props": { "style": { "color": "var(--ch-3)" } } }, { "content": "eks list-addons ", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": "--cluster-name ", "props": { "style": { "color": "var(--ch-2)" } } }, { "content": "my-eks ", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": "--region ", "props": { "style": { "color": "var(--ch-2)" } } }, { "content": "us-east-1", "props": { "style": { "color": "var(--ch-8)" } } }] }], "lang": "bash" }, "annotations": [] }] }, undefined, false, { fileName: "", lineNumber: 121, columnNumber: 1 }, this), "\n", _jsxDEV(_components.h3, { id: "describe-add-on-versions", children: "Describe add-on versions" }, undefined, false, { fileName: "", lineNumber: 125, columnNumber: 1 }, this), "\n", _jsxDEV(CH.Code, { codeConfig: chCodeConfig, northPanel: { "tabs": [""], "active": "", "heightRatio": 1 }, files: [{ "name": "", "focus": "", "code": { "lines": [{ "tokens": [{ "content": "aws ", "props": { "style": { "color": "var(--ch-3)" } } }, { "content": "eks describe-addon-versions ", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": "\\", "props": { "style": { "color": "var(--ch-2)" } } }] }, { "tokens": [{ "content": " --addon-name ", "props": { "style": { "color": "var(--ch-2)" } } }, { "content": "vpc-cni ", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": "\\", "props": { "style": { "color": "var(--ch-2)" } } }] }, { "tokens": [{ "content": " --kubernetes-version 1.29 \\", "props": { "style": { "color": "var(--ch-2)" } } }] }, { "tokens": [{ "content": " --region ", "props": { "style": { "color": "var(--ch-2)" } } }, { "content": "us-east-1", "props": { "style": { "color": "var(--ch-8)" } } }] }], "lang": "bash" }, "annotations": [] }] }, undefined, false, { fileName: "", lineNumber: 127, columnNumber: 1 }, this), "\n", _jsxDEV(_components.h3, { id: "upgrade-add-on", children: "Upgrade add-on" }, undefined, false, { fileName: "", lineNumber: 134, columnNumber: 1 }, this), "\n", _jsxDEV(CH.Code, { codeConfig: chCodeConfig, northPanel: { "tabs": [""], "active": "", "heightRatio": 1 }, files: [{ "name": "", "focus": "", "code": { "lines": [{ "tokens": [{ "content": "aws ", "props": { "style": { "color": "var(--ch-3)" } } }, { "content": "eks update-addon ", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": "\\", "props": { "style": { "color": "var(--ch-2)" } } }] }, { "tokens": [{ "content": " --cluster-name ", "props": { "style": { "color": "var(--ch-2)" } } }, { "content": "my-eks ", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": "\\", "props": { "style": { "color": "var(--ch-2)" } } }] }, { "tokens": [{ "content": " --addon-name ", "props": { "style": { "color": "var(--ch-2)" } } }, { "content": "vpc-cni ", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": "\\", "props": { "style": { "color": "var(--ch-2)" } } }] }, { "tokens": [{ "content": " --resolve-conflicts ", "props": { "style": { "color": "var(--ch-2)" } } }, { "content": "OVERWRITE ", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": "\\", "props": { "style": { "color": "var(--ch-2)" } } }] }, { "tokens": [{ "content": " --region ", "props": { "style": { "color": "var(--ch-2)" } } }, { "content": "us-east-1", "props": { "style": { "color": "var(--ch-8)" } } }] }], "lang": "bash" }, "annotations": [] }] }, undefined, false, { fileName: "", lineNumber: 136, columnNumber: 1 }, this), "\n", _jsxDEV(_components.p, { children: "Recommended order:" }, undefined, false, { fileName: "", lineNumber: 144, columnNumber: 1 }, this), "\n", _jsxDEV(_components.ul, { children: ["\n", _jsxDEV(_components.li, { children: _jsxDEV(_components.code, { children: "kube-proxy" }, undefined, false, { fileName: "", lineNumber: 146, columnNumber: 3 }, this) }, undefined, false, { fileName: "", lineNumber: 146, columnNumber: 1 }, this), "\n", _jsxDEV(_components.li, { children: _jsxDEV(_components.code, { children: "vpc-cni" }, undefined, false, { fileName: "", lineNumber: 147, columnNumber: 3 }, this) }, undefined, false, { fileName: "", lineNumber: 147, columnNumber: 1 }, this), "\n", _jsxDEV(_components.li, { children: _jsxDEV(_components.code, { children: "coredns" }, undefined, false, { fileName: "", lineNumber: 148, columnNumber: 3 }, this) }, undefined, false, { fileName: "", lineNumber: 148, columnNumber: 1 }, this), "\n"] }, undefined, true, { fileName: "", lineNumber: 146, columnNumber: 1 }, this), "\n", _jsxDEV(_components.h2, { id: "node-rotation-strategies", children: "Node rotation strategies" }, undefined, false, { fileName: "", lineNumber: 150, columnNumber: 1 }, this), "\n", _jsxDEV(_components.h3, { id: "strategy-a-managed-node-group-rolling-update-simple", children: "Strategy A: Managed Node Group rolling update (simple)" }, undefined, false, { fileName: "", lineNumber: 152, columnNumber: 1 }, this), "\n", _jsxDEV(_components.p, { children: "If you use managed node groups, update the node group version/AMI and allow EKS to roll." }, undefined, false, { fileName: "", lineNumber: 154, columnNumber: 1 }, this), "\n", _jsxDEV(CH.Code, { codeConfig: chCodeConfig, northPanel: { "tabs": [""], "active": "", "heightRatio": 1 }, files: [{ "name": "", "focus": "", "code": { "lines": [{ "tokens": [{ "content": "eksctl ", "props": { "style": { "color": "var(--ch-3)" } } }, { "content": "upgrade nodegroup ", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": "\\", "props": { "style": { "color": "var(--ch-2)" } } }] }, { "tokens": [{ "content": " --cluster ", "props": { "style": { "color": "var(--ch-2)" } } }, { "content": "my-eks ", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": "\\", "props": { "style": { "color": "var(--ch-2)" } } }] }, { "tokens": [{ "content": " --name ", "props": { "style": { "color": "var(--ch-2)" } } }, { "content": "ng-general ", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": "\\", "props": { "style": { "color": "var(--ch-2)" } } }] }, { "tokens": [{ "content": " --kubernetes-version 1.29", "props": { "style": { "color": "var(--ch-2)" } } }] }], "lang": "bash" }, "annotations": [] }] }, undefined, false, { fileName: "", lineNumber: 156, columnNumber: 1 }, this), "\n", _jsxDEV(_components.h3, { id: "strategy-b-bluegreen-node-groups-safer", children: "Strategy B: Blue/green node groups (safer)" }, undefined, false, { fileName: "", lineNumber: 163, columnNumber: 1 }, this), "\n", _jsxDEV(_components.ol, { children: ["\n", _jsxDEV(_components.li, { children: ["Create a new node group ", _jsxDEV(_components.code, { children: "ng-general-v2" }, undefined, false, { fileName: "", lineNumber: 165, columnNumber: 28 }, this)] }, undefined, true, { fileName: "", lineNumber: 165, columnNumber: 1 }, this), "\n", _jsxDEV(_components.li, { children: "Cordon/drain old nodes" }, undefined, false, { fileName: "", lineNumber: 166, columnNumber: 1 }, this), "\n", _jsxDEV(_components.li, { children: "Delete old node group" }, undefined, false, { fileName: "", lineNumber: 167, columnNumber: 1 }, this), "\n"] }, undefined, true, { fileName: "", lineNumber: 165, columnNumber: 1 }, this), "\n", _jsxDEV(_components.p, { children: "This is excellent for:" }, undefined, false, { fileName: "", lineNumber: 169, columnNumber: 1 }, this), "\n", _jsxDEV(_components.ul, { children: ["\n", _jsxDEV(_components.li, { children: "Big AMI jumps" }, undefined, false, { fileName: "", lineNumber: 171, columnNumber: 1 }, this), "\n", _jsxDEV(_components.li, { children: ["Instance family changes (e.g., ", _jsxDEV(_components.code, { children: "m5 -> m7g" }, undefined, false, { fileName: "", lineNumber: 172, columnNumber: 34 }, this), ")"] }, undefined, true, { fileName: "", lineNumber: 172, columnNumber: 1 }, this), "\n", _jsxDEV(_components.li, { children: "Migrating from Bottlerocket/AL2 to another base" }, undefined, false, { fileName: "", lineNumber: 173, columnNumber: 1 }, this), "\n"] }, undefined, true, { fileName: "", lineNumber: 171, columnNumber: 1 }, this), "\n", _jsxDEV(_components.h3, { id: "drain-nodes-safely", children: "Drain nodes safely" }, undefined, false, { fileName: "", lineNumber: 175, columnNumber: 1 }, this), "\n", _jsxDEV(CH.Code, { codeConfig: chCodeConfig, northPanel: { "tabs": [""], "active": "", "heightRatio": 1 }, files: [{ "name": "", "focus": "", "code": { "lines": [{ "tokens": [{ "content": "kubectl ", "props": { "style": { "color": "var(--ch-3)" } } }, { "content": "cordon ", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": "<", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": "nod", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": "e", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": ">", "props": { "style": { "color": "var(--ch-7)" } } }] }, { "tokens": [{ "content": "kubectl ", "props": { "style": { "color": "var(--ch-3)" } } }, { "content": "drain ", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": "<", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": "nod", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": "e", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "> ", "props": { "style": { "color": "var(--ch-7)" } } }, { "content": "\\", "props": { "style": { "color": "var(--ch-2)" } } }] }, { "tokens": [{ "content": " --ignore-daemonsets \\", "props": { "style": { "color": "var(--ch-2)" } } }] }, { "tokens": [{ "content": " --delete-emptydir-data \\", "props": { "style": { "color": "var(--ch-2)" } } }] }, { "tokens": [{ "content": " --grace-period=60 \\", "props": { "style": { "color": "var(--ch-2)" } } }] }, { "tokens": [{ "content": " --timeout=10m", "props": { "style": { "color": "var(--ch-2)" } } }] }], "lang": "bash" }, "annotations": [] }] }, undefined, false, { fileName: "", lineNumber: 177, columnNumber: 1 }, this), "\n", _jsxDEV(_components.h2, { id: "autoscaling-cluster-autoscaler-vs-karpenter", children: "Autoscaling: Cluster Autoscaler vs Karpenter" }, undefined, false, { fileName: "", lineNumber: 186, columnNumber: 1 }, this), "\n", _jsxDEV(_components.h3, { id: "cluster-autoscaler", children: "Cluster Autoscaler" }, undefined, false, { fileName: "", lineNumber: 188, columnNumber: 1 }, this), "\n", _jsxDEV(_components.ul, { children: ["\n", _jsxDEV(_components.li, { children: "Integrates well with managed node groups" }, undefined, false, { fileName: "", lineNumber: 190, columnNumber: 1 }, this), "\n", _jsxDEV(_components.li, { children: "Simpler mental model" }, undefined, false, { fileName: "", lineNumber: 191, columnNumber: 1 }, this), "\n", _jsxDEV(_components.li, { children: "Scaling speed depends on node group constraints" }, undefined, false, { fileName: "", lineNumber: 192, columnNumber: 1 }, this), "\n"] }, undefined, true, { fileName: "", lineNumber: 190, columnNumber: 1 }, this), "\n", _jsxDEV(_components.h3, { id: "karpenter", children: "Karpenter" }, undefined, false, { fileName: "", lineNumber: 194, columnNumber: 1 }, this), "\n", _jsxDEV(_components.ul, { children: ["\n", _jsxDEV(_components.li, { children: "Faster, more flexible provisioning" }, undefined, false, { fileName: "", lineNumber: 196, columnNumber: 1 }, this), "\n", _jsxDEV(_components.li, { children: "Better binpacking, diverse instance selection" }, undefined, false, { fileName: "", lineNumber: 197, columnNumber: 1 }, this), "\n", _jsxDEV(_components.li, { children: "Great for cost optimization and bursty workloads" }, undefined, false, { fileName: "", lineNumber: 198, columnNumber: 1 }, this), "\n"] }, undefined, true, { fileName: "", lineNumber: 196, columnNumber: 1 }, this), "\n", _jsxDEV(_components.p, { children: "Day-2 guidance:" }, undefined, false, { fileName: "", lineNumber: 200, columnNumber: 1 }, this), "\n", _jsxDEV(_components.ul, { children: ["\n", _jsxDEV(_components.li, { children: ["Use Karpenter for ", _jsxDEV(_components.strong, { children: "stateless compute" }, undefined, false, { fileName: "", lineNumber: 202, columnNumber: 21 }, this), " and CA for ", _jsxDEV(_components.strong, { children: "stable node groups" }, undefined, false, { fileName: "", lineNumber: 202, columnNumber: 54 }, this), " (or go all-in on Karpenter once mature)"] }, undefined, true, { fileName: "", lineNumber: 202, columnNumber: 1 }, this), "\n", _jsxDEV(_components.li, { children: "Separate critical system workloads onto a stable node group" }, undefined, false, { fileName: "", lineNumber: 203, columnNumber: 1 }, this), "\n"] }, undefined, true, { fileName: "", lineNumber: 202, columnNumber: 1 }, this), "\n", _jsxDEV(_components.h2, { id: "iam-for-service-accounts-irsa", children: "IAM for Service Accounts (IRSA)" }, undefined, false, { fileName: "", lineNumber: 205, columnNumber: 1 }, this), "\n", _jsxDEV(_components.p, { children: "IRSA is foundational for day-2 operations." }, undefined, false, { fileName: "", lineNumber: 207, columnNumber: 1 }, this), "\n", _jsxDEV(_components.h3, { id: "example-service-account-annotated-for-irsa", children: "Example: service account annotated for IRSA" }, undefined, false, { fileName: "", lineNumber: 209, columnNumber: 1 }, this), "\n", _jsxDEV(CH.Code, { codeConfig: chCodeConfig, northPanel: { "tabs": [""], "active": "", "heightRatio": 1 }, files: [{ "name": "", "focus": "", "code": { "lines": [{ "tokens": [{ "content": "apiVersion", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ": ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "v1", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": "kind", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ": ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "ServiceAccount", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": "metadata", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ":", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " name", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ": ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "external-dns", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": " namespace", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ": ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "networking", "props": { "style": { "color": "var(--ch-8)" } } }] }, { "tokens": [{ "content": " annotations", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ":", "props": { "style": { "color": "var(--ch-4)" } } }] }, { "tokens": [{ "content": " eks.amazonaws.com/role-arn", "props": { "style": { "color": "var(--ch-6)" } } }, { "content": ": ", "props": { "style": { "color": "var(--ch-4)" } } }, { "content": "arn:aws:iam::123456789012:role/external-dns-irsa", "props": { "style": { "color": "var(--ch-8)" } } }] }], "lang": "yaml" }, "annotations": [] }] }, undefined, false, { fileName: "", lineNumber: 211, columnNumber: 1 }, this), "\n", _jsxDEV(_components.p, { children: "Best practices:" }, undefined, false, { fileName: "", lineNumber: 221, columnNumber: 1 }, this), "\n", _jsxDEV(_components.ul, { children: ["\n", _jsxDEV(_components.li, { children: "One role per controller/app where practical" }, undefined, false, { fileName: "", lineNumber: 223, columnNumber: 1 }, this), "\n", _jsxDEV(_components.li, { children: "Tight IAM permissions (least privilege)" }, undefined, false, { fileName: "", lineNumber: 224, columnNumber: 1 }, this), "\n", _jsxDEV(_components.li, { children: "Prefer AWS managed policies only when acceptable; otherwise custom" }, undefined, false, { fileName: "", lineNumber: 225, columnNumber: 1 }, this), "\n"] }, undefined, true, { fileName: "", lineNumber: 223, columnNumber: 1 }, this), "\n", _jsxDEV(_components.h2, { id: "networking-operations", children: "Networking operations" }, undefined, false, { fileName: "", lineNumber: 227, columnNumber: 1 }, this), "\n", _jsxDEV(_components.h3, { id: "vpc-cni-tuning", children: "VPC CNI tuning" }, undefined, false, { fileName: "", lineNumber: 229, columnNumber: 1 }, this), "\n", _jsxDEV(_components.p, { children: "Common day-2 tasks:" }, undefined, false, { fileName: "", lineNumber: 231, columnNumber: 1 }, this), "\n", _jsxDEV(_components.ul, { children: ["\n", _jsxDEV(_components.li, { children: "Avoid IP exhaustion" }, undefined, false, { fileName: "", lineNumber: 233, columnNumber: 1 }, this), "\n", _jsxDEV(_components.li, { children: "Configure prefix delegation where appropriate" }, undefined, false, { fileName: "", lineNumber: 234, columnNumber: 1 }, this), "\n", _jsxDEV(_components.li, { children: "Separate node groups across subnets/AZs" }, undefined, false, { fileName: "", lineNumber: 235, columnNumber: 1 }, this), "\n"] }, undefined, true, { fileName: "", lineNumber: 233, columnNumber: 1 }, this), "\n", _jsxDEV(_components.p, { children: "Signals of IP exhaustion:" }, undefined, false, { fileName: "", lineNumber: 237, columnNumber: 1 }, this), "\n", _jsxDEV(_components.ul, { children: ["\n", _jsxDEV(_components.li, { children: ["Pods stuck in ", _jsxDEV(_components.code, { children: "ContainerCreating" }, undefined, false, { fileName: "", lineNumber: 239, columnNumber: 17 }, this)] }, undefined, true, { fileName: "", lineNumber: 239, columnNumber: 1 }, this), "\n", _jsxDEV(_components.li, { children: ["CNI errors in ", _jsxDEV(_components.code, { children: "aws-node" }, undefined, false, { fileName: "", lineNumber: 240, columnNumber: 17 }, this), " logs"] }, undefined, true, { fileName: "", lineNumber: 240, columnNumber: 1 }, this), "\n"] }, undefined, true, { fileName: "", lineNumber: 239, columnNumber: 1 }, this), "\n", _jsxDEV(_components.h2, { id: "observability-runbook-minimum-viable", children: "Observability runbook (minimum viable)" }, undefined, false, { fileName: "", lineNumber: 242, columnNumber: 1 }, this), "\n", _jsxDEV(_components.p, { children: "At minimum you want:" }, undefined, false, { fileName: "", lineNumber: 244, columnNumber: 1 }, this), "\n", _jsxDEV(_components.ul, { children: ["\n", _jsxDEV(_components.li, { children: "Control plane logs enabled" }, undefined, false, { fileName: "", lineNumber: 246, columnNumber: 1 }, this), "\n", _jsxDEV(_components.li, { children: "Container logs centralized" }, undefined, false, { fileName: "", lineNumber: 247, columnNumber: 1 }, this), "\n", _jsxDEV(_components.li, { children: "Cluster metrics and dashboards" }, undefined, false, { fileName: "", lineNumber: 248, columnNumber: 1 }, this), "\n", _jsxDEV(_components.li, { children: "Alerting for node/pod saturation" }, undefined, false, { fileName: "", lineNumber: 249, columnNumber: 1 }, this), "\n"] }, undefined, true, { fileName: "", lineNumber: 246, columnNumber: 1 }, this), "\n", _jsxDEV(_components.h3, { id: "enable-eks-control-plane-logs", children: "Enable EKS control plane logs" }, undefined, false, { fileName: "", lineNumber: 251, columnNumber: 1 }, this), "\n", _jsxDEV(CH.Code, { codeConfig: chCodeConfig, northPanel: { "tabs": [""], "active": "", "heightRatio": 1 }, files: [{ "name": "", "focus": "", "code": { "lines": [{ "tokens": [{ "content": "aws ", "props": { "style": { "color": "var(--ch-3)" } } }, { "content": "eks update-cluster-config ", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": "\\", "props": { "style": { "color": "var(--ch-2)" } } }] }, { "tokens": [{ "content": " --name ", "props": { "style": { "color": "var(--ch-2)" } } }, { "content": "my-eks ", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": "\\", "props": { "style": { "color": "var(--ch-2)" } } }] }, { "tokens": [{ "content": " --region ", "props": { "style": { "color": "var(--ch-2)" } } }, { "content": "us-east-1 ", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": "\\", "props": { "style": { "color": "var(--ch-2)" } } }] }, { "tokens": [{ "content": " --logging ", "props": { "style": { "color": "var(--ch-2)" } } }, { "content": "'clusterLogging=[{types=[api,audit,authenticator,controllerManager,scheduler],enabled=true}]'", "props": { "style": { "color": "var(--ch-8)" } } }] }], "lang": "bash" }, "annotations": [] }] }, undefined, false, { fileName: "", lineNumber: 253, columnNumber: 1 }, this), "\n", _jsxDEV(_components.h2, { id: "backup-and-disaster-recovery", children: "Backup and disaster recovery" }, undefined, false, { fileName: "", lineNumber: 260, columnNumber: 1 }, this), "\n", _jsxDEV(_components.ul, { children: ["\n", _jsxDEV(_components.li, { children: ["Use ", _jsxDEV(_components.strong, { children: "Velero" }, undefined, false, { fileName: "", lineNumber: 262, columnNumber: 7 }, this), " for Kubernetes resources + PV snapshots (if supported)"] }, undefined, true, { fileName: "", lineNumber: 262, columnNumber: 1 }, this), "\n", _jsxDEV(_components.li, { children: ["Back up ", _jsxDEV(_components.strong, { children: "critical secrets" }, undefined, false, { fileName: "", lineNumber: 263, columnNumber: 11 }, this), " and GitOps source of truth"] }, undefined, true, { fileName: "", lineNumber: 263, columnNumber: 1 }, this), "\n", _jsxDEV(_components.li, { children: "Practice restore to a staging cluster" }, undefined, false, { fileName: "", lineNumber: 264, columnNumber: 1 }, this), "\n"] }, undefined, true, { fileName: "", lineNumber: 262, columnNumber: 1 }, this), "\n", _jsxDEV(_components.h2, { id: "security-hardening-day-2-essentials", children: "Security hardening (day-2 essentials)" }, undefined, false, { fileName: "", lineNumber: 266, columnNumber: 1 }, this), "\n", _jsxDEV(_components.ul, { children: ["\n", _jsxDEV(_components.li, { children: "Private API endpoint where possible" }, undefined, false, { fileName: "", lineNumber: 268, columnNumber: 1 }, this), "\n", _jsxDEV(_components.li, { children: ["Restrict ", _jsxDEV(_components.code, { children: "system:masters" }, undefined, false, { fileName: "", lineNumber: 269, columnNumber: 12 }, this), " mapping"] }, undefined, true, { fileName: "", lineNumber: 269, columnNumber: 1 }, this), "\n", _jsxDEV(_components.li, { children: "Use Pod Security Standards (or policy engine)" }, undefined, false, { fileName: "", lineNumber: 270, columnNumber: 1 }, this), "\n", _jsxDEV(_components.li, { children: "Scan images and enforce signed images if required" }, undefined, false, { fileName: "", lineNumber: 271, columnNumber: 1 }, this), "\n"] }, undefined, true, { fileName: "", lineNumber: 268, columnNumber: 1 }, this), "\n", _jsxDEV(_components.h3, { id: "example-restrict-public-endpoint", children: "Example: restrict public endpoint" }, undefined, false, { fileName: "", lineNumber: 273, columnNumber: 1 }, this), "\n", _jsxDEV(CH.Code, { codeConfig: chCodeConfig, northPanel: { "tabs": [""], "active": "", "heightRatio": 1 }, files: [{ "name": "", "focus": "", "code": { "lines": [{ "tokens": [{ "content": "aws ", "props": { "style": { "color": "var(--ch-3)" } } }, { "content": "eks update-cluster-config ", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": "\\", "props": { "style": { "color": "var(--ch-2)" } } }] }, { "tokens": [{ "content": " --name ", "props": { "style": { "color": "var(--ch-2)" } } }, { "content": "my-eks ", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": "\\", "props": { "style": { "color": "var(--ch-2)" } } }] }, { "tokens": [{ "content": " --region ", "props": { "style": { "color": "var(--ch-2)" } } }, { "content": "us-east-1 ", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": "\\", "props": { "style": { "color": "var(--ch-2)" } } }] }, { "tokens": [{ "content": " --resources-vpc-config ", "props": { "style": { "color": "var(--ch-2)" } } }, { "content": "endpointPublicAccess=", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": "false", "props": { "style": { "color": "var(--ch-2)" } } }, { "content": ",endpointPrivateAccess=", "props": { "style": { "color": "var(--ch-8)" } } }, { "content": "true", "props": { "style": { "color": "var(--ch-2)" } } }] }], "lang": "bash" }, "annotations": [] }] }, undefined, false, { fileName: "", lineNumber: 275, columnNumber: 1 }, this), "\n", _jsxDEV(_components.h2, { id: "post-upgrade-verification-checklist", children: "Post-upgrade verification checklist" }, undefined, false, { fileName: "", lineNumber: 282, columnNumber: 1 }, this), "\n", _jsxDEV(_components.ul, { className: "contains-task-list", children: ["\n", _jsxDEV(_components.li, { className: "task-list-item", children: [_jsxDEV(_components.input, { type: "checkbox", disabled: true }, undefined, false, { fileName: "" }, this), " ", _jsxDEV(_components.code, { children: "kubectl get nodes" }, undefined, false, { fileName: "", lineNumber: 284, columnNumber: 7 }, this), " shows expected version and readiness"] }, undefined, true, { fileName: "", lineNumber: 284, columnNumber: 1 }, this), "\n", _jsxDEV(_components.li, { className: "task-list-item", children: [_jsxDEV(_components.input, { type: "checkbox", disabled: true }, undefined, false, { fileName: "" }, this), " ", "CoreDNS healthy"] }, undefined, true, { fileName: "", lineNumber: 285, columnNumber: 1 }, this), "\n", _jsxDEV(_components.li, { className: "task-list-item", children: [_jsxDEV(_components.input, { type: "checkbox", disabled: true }, undefined, false, { fileName: "" }, this), " ", "Ingress controller healthy and can reconcile"] }, undefined, true, { fileName: "", lineNumber: 286, columnNumber: 1 }, this), "\n", _jsxDEV(_components.li, { className: "task-list-item", children: [_jsxDEV(_components.input, { type: "checkbox", disabled: true }, undefined, false, { fileName: "" }, this), " ", "Critical apps pass smoke tests"] }, undefined, true, { fileName: "", lineNumber: 287, columnNumber: 1 }, this), "\n", _jsxDEV(_components.li, { className: "task-list-item", children: [_jsxDEV(_components.input, { type: "checkbox", disabled: true }, undefined, false, { fileName: "" }, this), " ", "No elevated error rate / latency regressions"] }, undefined, true, { fileName: "", lineNumber: 288, columnNumber: 1 }, this), "\n", _jsxDEV(_components.li, { className: "task-list-item", children: [_jsxDEV(_components.input, { type: "checkbox", disabled: true }, undefined, false, { fileName: "" }, this), " ", "Cluster autoscaler/Karpenter functioning"] }, undefined, true, { fileName: "", lineNumber: 289, columnNumber: 1 }, this), "\n", _jsxDEV(_components.li, { className: "task-list-item", children: [_jsxDEV(_components.input, { type: "checkbox", disabled: true }, undefined, false, { fileName: "" }, this), " ", "Run a 24h burn-in period for non-trivial upgrades"] }, undefined, true, { fileName: "", lineNumber: 290, columnNumber: 1 }, this), "\n"] }, undefined, true, { fileName: "", lineNumber: 284, columnNumber: 1 }, this), "\n", _jsxDEV(_components.h2, { id: "recommended-operating-cadence", children: "Recommended operating cadence" }, undefined, false, { fileName: "", lineNumber: 292, columnNumber: 1 }, this), "\n", _jsxDEV(_components.ul, { children: ["\n", _jsxDEV(_components.li, { children: [_jsxDEV(_components.strong, { children: "Weekly" }, undefined, false, { fileName: "", lineNumber: 294, columnNumber: 3 }, this), ": review failed pods, node pressure events, deployment health"] }, undefined, true, { fileName: "", lineNumber: 294, columnNumber: 1 }, this), "\n", _jsxDEV(_components.li, { children: [_jsxDEV(_components.strong, { children: "Monthly" }, undefined, false, { fileName: "", lineNumber: 295, columnNumber: 3 }, this), ": patch/AMI rotation, add-on review, capacity and cost review"] }, undefined, true, { fileName: "", lineNumber: 295, columnNumber: 1 }, this), "\n", _jsxDEV(_components.li, { children: [_jsxDEV(_components.strong, { children: "Quarterly" }, undefined, false, { fileName: "", lineNumber: 296, columnNumber: 3 }, this), ": Kubernetes minor upgrades, resilience game days"] }, undefined, true, { fileName: "", lineNumber: 296, columnNumber: 1 }, this), "\n"] }, undefined, true, { fileName: "", lineNumber: 294, columnNumber: 1 }, this), "\n", _jsxDEV(_components.h2, { id: "conclusion", children: "Conclusion" }, undefined, false, { fileName: "", lineNumber: 298, columnNumber: 1 }, this), "\n", _jsxDEV(_components.p, { children: "EKS day-2 operations become straightforward when you standardize your platform baseline and make upgrades routine. Keep headroom, keep PDBs sane, rotate nodes regularly, and treat add-ons as first-class lifecycle components. Over time, you’ll reduce downtime risk and regain predictability for both upgrades and incident response." }, undefined, false, { fileName: "", lineNumber: 300, columnNumber: 1 }, this)] }, undefined, true, { fileName: "", lineNumber: 1, columnNumber: 1 }, this); } function MDXContent(props = {}) { const {wrapper: MDXLayout} = { ..._provideComponents(), ...props.components }; return MDXLayout ? _jsxDEV(MDXLayout, { ...props, children: _jsxDEV(_createMdxContent, { ...props }, undefined, false, { fileName: "" }, this) }, undefined, false, { fileName: "" }, this) : _createMdxContent(props); } return { default: MDXContent }; function _missingMdxReference(id, component, place) { throw new Error("Expected " + (component ? "component" : "object") + " `" + id + "` to be defined: you likely forgot to import, pass, or provide it." + (place ? "\nIt’s referenced in your code at `" + place + "`" : "")); }