Karpenter Best Practices

Karpenter Best Practices An architecture diagram generated by Archify. Select appropriate instance types · Types suited to the workload · Performance Optimization Select appropriate instance types Types suited to the workload Allow diverse instance types · Availability and cost optimization · Performance Optimization Allow diverse instance types Availability and cost optimization Set appropriate TTL · Matched to workload patterns · Performance Optimization Set appropriate TTL Matched to workload patterns Enable node consolidation · Optimize resource utilization · Performance Optimization Enable node consolidation Optimize resource utilization Utilize Spot instances · Cost savings · Cost Optimization Utilize Spot instances Cost savings Select appropriate instance sizes · Sizes suited to the workload · Cost Optimization Select appropriate instance sizes Sizes suited to the workload Utilize zero scaling · Scale nodes to 0 when idle · Cost Optimization Utilize zero scaling Scale nodes to 0 when idle Set node expiration · Regular replacement, latest types · Cost Optimization Set node expiration Regular replacement, latest types Use multiple availability zones · Deploy nodes across AZs · Availability Improvement Use multiple availability zones Deploy nodes across AZs Mix on-demand/Spot instances · Balance availability and cost · Availability Improvement Mix on-demand/Spot instances Balance availability and cost Set appropriate PDBs · Ensure application availability · Availability Improvement Set appropriate PDBs Ensure application availability Optimize interruption handling · Protect workloads on node interruption · Availability Improvement Optimize interruption handling Protect workloads on node interruption IAM role least privilege · Controller and node roles, least privilege · Security Hardening IAM role least privilege Controller and node roles, least privilege Security group restrictions · Allow only required traffic · Security Hardening Security group restrictions Allow only required traffic Encrypted EBS volumes · Encrypt node volumes · Security Hardening Encrypted EBS volumes Encrypt node volumes Require IMDSv2 · Token-required metadata access · Security Hardening Require IMDSv2 Token-required metadata access Performance Optimization Cost Optimization Availability Improvement Security Hardening Legend Availability Performance Cost Security