Kubernetes Samples

Create an EBS volume snapshot from a running pod's PVC, restore it to a new PVC, and dynamically resize the restored volume — all without downtime.

Snapshot an EBS PVC in one AWS account's EKS cluster and restore it as a statically provisioned PV in a second account. Covers KMS key sharing for encrypted volumes.

Enable Proxy Protocol v2 on a Classic Load Balancer fronting an NGINX Ingress Controller so that real client IP addresses are visible inside pods.

Configure Fluent Bit on an EKS Fargate cluster to ship container logs to an AWS OpenSearch domain (VPC or public), covering OpenSearch versions 1.3 and 2.3.

Deploy a pod running a Python AWS SDK container authenticated via IRSA (IAM Roles for Service Accounts using OIDC web identity). The canonical pattern for secure SDK access in EKS.

Install the Kubernetes NFS CSI driver on EKS backed by Amazon EFS, bypassing the 1,000 access-point limit of the EFS CSI driver. Uses subdirectory-based dynamic provisioning.

Create EBS volume snapshots for each PVC of a Cassandra StatefulSet, delete and restore the StatefulSet from snapshots, then dynamically resize the restored PVCs.

Use Kubernetes Topology Aware Hints to keep in-zone traffic local, reducing inter-AZ data transfer costs and latency. Covers caveats with HPA, Cluster Autoscaler, and Spot instances.

Deploy a tcpdump DaemonSet that continuously captures node-level packet data and streams .pcap files to S3 — for post-incident analysis of connectivity problems.

Reusable NetworkPolicy building blocks — allow-all-egress, allow-all-ingress, and default-deny — for controlling pod-to-pod traffic with the Amazon VPC CNI plugin.

Serve an LLM with the vLLM Arm64 CPU Deep Learning Container on EKS Auto Mode, scheduled onto Graviton5 (m9g) nodes by a custom Karpenter NodePool. Token-gated, ClusterIP-only, with an On-Demand vs Spot cost comparison.