Two EKS clusters and lab infrastructure

Two EKS clusters and lab infrastructure An architecture diagram generated by Archify. Management EKS · 1.36 / managed context · Architecture component Management EKS 1.36 / managed context Service EKS · 1.36 / service context · Architecture component Service EKS 1.36 / service context Aurora · SNS · SQS · Dedicated DB / event path · Architecture component Aurora · SNS · SQS Dedicated DB / event path Prometheus · Loki · Tempo · Grafana / management Collector · Architecture component Prometheus · Loki · Tempo Grafana / management Collector Prometheus + Collector · scrape / CRI logs / OTLP traces · Architecture component Prometheus + Collector scrape / CRI logs / OTLP traces CloudWatch Logs · Structured logs / AIOps · Architecture component CloudWatch Logs Structured logs / AIOps hosts collect SQL / events mTLS JSON logs Legend Backend Database Cloud

Prepare and create

  • • EKS1.36 / AL2023 / encrypted gp3
  • • Reuse VPC; verify nonoverlapping service CIDRs

Credentials

  • • IRSA restricted by namespace, ServiceAccount and audience
  • • Dedicated runtime DML account instead of DB master