Deploying Production AWS ROSA Clusters: Creation, Configuration, and Application Integration (CS229)
Learn to Create and configure production-grade ROSA clusters as part of a larger AWS customer’s footprint.
Create and configure production-grade ROSA clusters as part of a larger AWS customer’s footprint and then integrate applications on ROSA with AWS services while keeping a good security posture.
Deploying Production AWS ROSA Clusters: Creation, Configuration, and Application Integration (CS229) teaches how to configure ROSA clusters as part of pre-existing AWS environments and how to integrate ROSA with AWS services commonly used by IT operations teams, such as Amazon CloudWatch. This course also teaches how to integrate applications deployed on ROSA with AWS services in a way that cluster administrators and platform engineers retain control of credentials and roles required by applications to access AWS services instead of exposing those credentials to application developers.
Note: This course is offered as a 4 day in person class or a 5 day virtual class. Durations may vary based on the delivery. For full course details, scheduling, and pricing, select your location then “get started” on the right hand menu.
Course Content Summary
- Create ROSA STS PrivateLink clusters
- Connect PrivateLink ROSA clusters to existing VPCs and enable administrators and developers to access those clusters
- Configure dedicated machine pools and node/pod autoscaling
- Configure node, cluster, and audit log forwarding to Amazon CloudWatch
- Configure authentication and group sync with Amazon Cognito
- Integrate with external container registries such as ECR and Quay.io to deploy applications from private image repositories
- Configure storage classes to enable application access to different EBS volume types
- Configure storage classes and security contexts to enable application access to shared EFS storage volumes
- Configure pod identity using STS/IRSA to enable application access to AWS services such as database (Aurora), integration (SQS), and object storage (S3)
- Provision AWS services for applications using the AWS Controllers for Kubernetes (ACK)
- Federate and query application metrics (application workload monitoring) with Amazon Managed Prometheus Service
- Aggregate and query structured application logs with Amazon CloudWatch
- Configure custom domains and TLS certificates for secure public access to applications