Windows Support Architecture in Amazon EKS

Windows Support Architecture in Amazon EKS An architecture diagram generated by Archify. EKS Control Plane · AWS managed · AWS Cloud › Amazon EKS EKS Control Plane AWS managed Linux Node Group · Linux node 1 · 2 · AWS Cloud › Amazon EKS Linux Node Group Linux node 1 · 2 System Pods · CoreDNS · VPC CNI · kube-proxy · AWS Cloud › Amazon EKS System Pods CoreDNS · VPC CNI · kube-proxy Windows Node Group · Windows node 1 · 2 · AWS Cloud › Amazon EKS Windows Node Group Windows node 1 · 2 Windows Application Pods · nodeSelector: kubernetes.io/os=windows · AWS Cloud › Amazon EKS Windows Application Pods nodeSelector: kubernetes.io/os=windows AWS IAM · auth · permissions · AWS Cloud AWS IAM auth · permissions Amazon VPC · networking · AWS Cloud Amazon VPC networking CloudWatch · logs · metrics · AWS Cloud CloudWatch logs · metrics Elastic Load Balancer · service exposure · AWS Cloud Elastic Load Balancer service exposure User · end users · Architecture component User end users manage manage run run HTTP :80 AWS Cloud Amazon EKS Legend Frontend Backend Cloud Security External

Enabling Windows support

  • • Update the VPC CNI plugin (vpc-resource-controller)
  • • Install the Windows VPC admission webhook

Windows Node Group

  • • eksctl create nodegroup --managed --node-ami-family WindowsServer2019FullContainer
  • • In the console, pick "Windows" as the AMI type

Deploying Windows applications

  • • Schedule onto Windows nodes with nodeSelector kubernetes.io/os: windows
  • • IIS container (servercore/iis) example, containerPort 80