Providing access to AWS resources from Kubernetes using OIDC

If you're running a Kubernetes cluster with workloads that need access to AWS services you probably wondered what's the best way of granting that access. There are number of solutions that can be deployed: Use static user credentialsIf the cluster is running in AWS - use EC2 instance profileUse projects…

Automatically mounting an EBS volume using Ansible

When creating new EC2 instances that require persistent EBS volumes there's a number of steps that have to be carried out before the disk can be used. This post shows how to automate them. Definitions of the tasks presented below are also in https://github.com/pshemk/ec2-base. Please note…

Enabling IPv6 in AWS using CloudFormation

This post shows how to set up various VPC-related resources using CloudFormation to enable IPv6 for them. Components Diagram below shows all the components described in this post. VPCIPv6 requires one additional resource - AWS::EC2::VPCCidrBlock to request an /56 block of addresses from AWS. rVPC: Type: "AWS::EC2:…