aws-cdk-examples VS AKS

If you are in aws, look at CDK there are modules that make this pretty easy https://github.com/aws-samples/aws-cdk-examples/blob/master/typescript/lambda-cron/index.ts

I am not sure where to post my CDK question. I am trying this project specifically https://github.com/aws-samples/aws-cdk-examples/tree/master/python/existing-vpc-new-ec2-ebs-userdata

There are a ton of other example projects here for the AWS Cloud Development Kit: https://github.com/aws-samples/aws-cdk-examples Hope this helps, happy coding!

I am looking at examples of the CDK in python for example https://github.com/aws-samples/aws-cdk-examples/blob/master/python/ec2/instance/app.py

The cdk exple repo is also invaluable. I prefer cdk to terraform because it's actual infrastructure as Code as opposed to templating language as Code. There is fear of vendor lock. But I saw a while back that even hashicorp is working on a cdk implementation

For example, an AWS CDK that describes an infrastructure might look like this: https://github.com/aws-samples/aws-cdk-examples/tree/master/typescript/api-cors-lambda-crud-dynamodb

Ah yep, you're right. Just found someone asking the same thing from two days ago in the Azure AKS GitHub https://github.com/Azure/AKS/issues/3689. It should definitely be pulling the Ubuntu 22.04 fips compliant image if it were available.

Just did a search not sure related to your problem https://github.com/Azure/AKS/issues/85

As I could gather additional information which indicates some problems with the Monitoring Agent (high cpu on ama pods, no metrics delivered during CPU pressure, ama pods emitting logs), I opened a ticket on GitHub (https://github.com/Azure/AKS/issues/3469). Hopefully this helps to resolve the issue.

While I'm glad I saw this here, it's not one of our primary support channels. In the future, you can also raise an issue in our GitHub repository or file a support request.

You're dependent on the cloud provider for security settings in a lot of cases and they don't always get it right (e.g. AKS still doesn't have Node Authorization enabled! https://github.com/Azure/AKS/issues/3004)

For ASK even v1.22 got out of support yesterday 04 of December. https://github.com/Azure/AKS/releases/tag/2022-11-27

The Workload Identity add-on for AKS is still in progress. AKS has a public roadmap where you can find this kind of information.

Reference: https://github.com/Azure/AKS

For Thanos receive and query components to be available outside the cluster and secured with TLS, we will need ingress-nginx and cert-manager. For ingress, deploy the Helm chart using the following command, to account for this issue with AKS clusters >1.23: