EKS Cluster Architecture

EKS Cluster Architecture An architecture diagram generated by Archify. Amazon EKS Cluster · AWS-managed Kubernetes · Architecture component · EKS Amazon EKS Cluster AWS-managed Kubernetes EKS Control Plane · API server · etcd · scheduler · AWS-managed · AWS managed components Control Plane API server · etcd · scheduler AWS managed components Data Plane · runs worker nodes · Customer responsibility Data Plane runs worker nodes Networking · pod network · Customer responsibility Networking pod network Security · authn · authz · Customer responsibility Security authn · authz Managed Node Groups · EKS-managed node lifecycle · Customer responsibility Managed Node Groups EKS-managed node lifecycle Self-Managed Nodes · EC2 you operate yourself · Customer responsibility Self-Managed Nodes EC2 you operate yourself Fargate · serverless pod execution · Customer responsibility Fargate serverless pod execution VPC CNI · assigns VPC IPs to pods · Customer responsibility VPC CNI assigns VPC IPs to pods IAM Authentication · IAM roles and policies · Customer responsibility IAM Authentication IAM roles and policies EC2 Auto Scaling Groups · scale node count in/out · Customer responsibility EC2 Auto Scaling Groups scale node count in/out AWS VPC · subnets · security groups · Customer responsibility AWS VPC subnets · security groups operated by AWS provisions nodes ENI · IP AWS-managed Customer responsibility Legend Backend Cloud Security

AWS owns

  • • Control plane operation: API server, etcd, scheduler
  • • Control plane upgrades requested via aws eks update-cluster-version

Customer owns

  • • Nodes: managed node groups · self-managed nodes · Fargate
  • • Networking: AWS VPC integration through VPC CNI
  • • Security: IAM authentication and RBAC mapping via the aws-auth ConfigMap