How to build an EKS kubernetes cluster with Ubuntu 20.04 on FIPS mode
Many clients have specific requirements for running their EKS Kubernetes clusters with Ubuntu: OS alignment across platforms, sysadmin knowledge or specific kernel features such Real Time Kernel or FIPS mode.
If your workloads need to run on FIPS mode for compliance, you will not only need to create your containers on FIPS mode (in other words, with FIPS certified crypto libraries) but also, since containers share kernel with host/worker nodes, you need to have also the worker node's kernel running on FIPS mode.
Ubuntu Pro 18.04 and 20.04 come with FIPS certified kernel and crypto libraries.
This tutorial will show you how to run EKS Kubernetes clusters with Ubuntu 20.04 on FIPS mode.
If you need more information:
- Ubuntu Pro on AWS - https://ubuntu.com/aws/pro
- Getting started with Ubuntu Pro - https://ubuntu.com/engage/aws-pro-onboarding
- Getting started with AWS EKS - https://docs.aws.amazon.com/eks/latest/userguide/getting-started.html
- FIPS on Ubuntu - https://ubuntu.com/security/certifications/docs/fips
- Activate Ubuntu Pro with an Ubuntu advantage token - https://ubuntu.com/advantage
- How to find the latest Ubuntu EKS AMIs - https://cloud-images.ubuntu.com/aws-eks
- Ubuntu support for EKS - https://aws.amazon.com/blogs/containers/introducing-ubuntu-support-for-amazon-eks-1-18/
- More about launch templates on EKS - https://aws.amazon.com/blogs/containers/introducing-launch-template-and-custom-ami-support-in-amazon-eks-managed-node-groups/
- Ubuntu-eks-fips packer file https://github.com/carlosbravoa/ubuntu-aws-examples/blob/main/packer_examples/eks-ubuntu-fips.json]
- How to create FIPS containers tutorial https://ubuntu.com/blog/fips-ubuntu-container-security-updates
Subscribe to our YouTube: https://bit.ly/3Sp6PKY
And follow our social accounts
LinkedIn:
https://bit.ly/3Jw6jGN
Twitter:
https://bit.ly/3OXSIJE
Facebook:
https://bit.ly/3Q15Yyn
Instagram:
https://bit.ly/3vE7Kxk
For more information visit https://www.ubuntu.com and https://www.canonical.com
#aws #ubuntu #kubernetes #fips