In the DuploCloud platform, a Kubernetes Cluster maps to a DuploCloud Infrastructure.

Start by creating a new Infrastructure in DuploCloud. When prompted to provide details for the new Infrastructure, select Enable EKS. In the EKS Version field, select the desired release.

Optionally, enable logging and custom EKS endpoints.

When the Infrastructure is in the ready state, as indicated by a Complete status, navigate to Kubernetes -> Services and select the Infrastructure from the NAME column to view the Kubernetes configuration details, including the token and configuration for kubectl.

When you create Tenants in an Infrastructure, a namespace is created in the Kubernetes cluster with the name duploservices-TENANT_NAME

Creating an Infrastructure

1. Click Add. The Add Infrastructure pane displays.

2. Define the Infrastructure by completing the fields:

Viewing Infrastructure settings

1. In the DuploCloud Portal, navigate to Administrator -> Infrastructure. The Infrastructure page displays.

2. From the Name column, select the Infrastructure containing settings that you want to view.

3. Click the Settings tab. The Infrastructure settings display.

Configuring EKS features (optional)

You can customize your EKS configuration:

• .

• Enable EKS endpoints, logs, Cluster Autoscaler, and more. For information about configuration options, see these topics.

Configuring ECS features (optional)

You can customize your ECS configuration. See the topic for information about configuration options.

An AWS creates a private connection to supported AWS services and VPC endpoint services powered by AWS PrivateLink. Amazon VPC instances do not require public IP addresses to communicate with the resources of the service. Traffic between an Amazon VPC and a service does not leave the Amazon network.

VPC endpoints are virtual devices. They are horizontally scaled, redundant, and highly available Amazon VPC components that allow communication between instances in an Amazon VPC and services without imposing availability risks or bandwidth constraints on network traffic. There are two types of VPC endpoints, , and .

DuploCloud allows you to specify predefined AWS endpoints for your Infrastructure in the DuploCloud Portal.

Setting up an Infrastructure that uses ECS is similar to creating an , except that during creation, instead of selecting Enable EKS, you select Enable ECS Cluster.

For more information about ECS Services, see the documentation.

Configuring Cluster Autoscaler for your Infrastructure

The Cluster AutoScaler automatically adjusts the number of nodes in your cluster when Pods fail or are rescheduled onto other nodes.

1. In the DuploCloud Portal, navigate to Administrator -> Infrastructure. The Infrastructure

To generate logs for AWS ECS clusters, you must first create an Elasticsearch logging container. Once auditing is enabled, your container logging data can be captured for analysis.

Prerequisites

• Create a Task Definition

• Define at least one .

• Enable the feature.

Enabling ECS ElasticSearch logging

1. In the DuploCloud Portal, navigate to Administrator -> Tenant. The Tenant page displays.

2. From the Name column, select the Tenant that is running the container for which you want to enable logging.

3. Click the Settings tab.

Verifying ECS logging is enabled

You can verify that ECS logging is enabled for a specific container.

1. In the DuploCloud Portal, navigate to Cloud Services -> ECS.

2. In the Task Definitions tab, select the Task Definition Family Name in which your container is defined.
3. Click the Task Definitions tab.

In the Container - 1 area, in the Container Other Config field, your LogConfiguration is displayed.

In the Container-2 area, another container is created by DuploCloud with the name log_router.

AWS SDKs and the AWS Command Line Interface (AWS CLI) automatically use the default public endpoint for each service in an AWS Region. However, when you create an Infrastructure in DuploCloud, you can specify a custom Private endpoint, a custom Public endpoint, or Both public and private custom endpoints. If you specify no endpoints, the default Public endpoint is used.

For more information about AWS Endpoints, see the AWS documentation.

Specifying public and private endpoints

1. Follow the steps in the section . Before clicking Create, specify EKS Endpoint Visibility.

2. From the EKS Endpoint Visibility list box, select Public, Private, or Both public and private. If you select private or Both public and private, the Allow VPN Access to the EKS Cluster option is enabled.

3. Click Advanced Options.

4. Using the Private Subnet CIDR and Public Subnet CIDR fields, specify CIDRs for alternate public and private endpoints.

5. Click Create.

Changing VPN visibility from public to private (optional)

To change VPN visibility from public to private after you have , follow these steps.

1. In the DuploCloud Portal, navigate to Administrator -> Infrastructure. The Infrastructure page displays.

2. From the NAME column, select the Infrastructure.

3. Click the Settings tab.

Changing EKS endpoint visibility (optional)

To modify the visibility for EKS endpoints you have already created:

1. In the DuploCloud Portal, navigate to Administrator -> Infrastructure. The Infrastructure page displays.

2. From the Name column, select the Infrastructure for which you want to modify EKS endpoints.

3. Click the Settings tab.

Enabling EKS logging while creating an Infrastructure

Follow the steps in the section Creating an Infrastructure. In the EKS Logging list box, select one or more ControlPlane Log types.

Enabling EKS logging for an existing Infrastructure

Enable EKS logging for an Infrastructure that you have already created.

1. In the DuploCloud Portal, navigate to Administrator -> Infrastructure.

2. From the NAME column, select the Infrastructure for which you want to enable EKS logging.

3. Click the Settings tab.

Infrastructure Security Group rules let you manage traffic controls at the Infrastructure level.

For security rules that apply to a specific Tenant, see the Security Groups page.

Adding Security Group Rules

1. In the DuploCloud Portal, navigate to Administrator -> Infrastructure.

2. Select the Infrastructure for which you want to add or view Security Group rules from the NAME column.

3. Select the Security Group Rules tab.

4. Click Add. The Add Infrastructure Security pane displays.

5. From the Source Type list box, select Tenant or IP Address.

6. From the Tenant list box, select the Tenant for which you want to set up the Security Rule.

7. Select the protocol from the Protocol list box.

8. In the Port Range field, specify the range of ports for access (for example, 1-65535).

9. Optionally, add a Description of the rule you are adding.

10. Click Add.

Viewing Security Group Rules

1. In the DuploCloud Portal, navigate to Administrator -> Infrastructure.

2. Select the Infrastructure from the Name column.

3. Click the Security Group Rules tab. Security Rules are displayed.

Deleting Security Group Rules

1. In the DuploCloud Portal, navigate to Administrator -> Infrastructure.

2. Select the Infrastructure from the Name column.

3. Click the Security Group Rules tab. Security Rules are displayed in rows.

AWS frequently updates the EKS version based on new features that are available in the Kubernetes platform. DuploCloud automates this upgrade in the DuploCloud Portal.