Mike Stefaniak

Nothing definitive to share here - but this is being actively developed. One detail worth sharing, tentatively, we are moving to an eBPF based dataplane to enforce Network Policy -...

Yes - eventually this will be a kube-proxy replacement. And for cluster wide network policy - also yes - we won't be building any custom CRDs - but will leverage...

I can't give specific dates in this forum, but follow this issue for an update coming very soon.

@gregoryfranklin yes we plan to make cross account roles work with this proposal. @ajohnstone we haven't settled on implementation yet. One idea is to use a CSI driver to retrieve...

You would still need to call the EKS API to add the mapping, but this can be automated using IaC tools as part of the new cluster creation process. There...

With this proposal, yes there would be an EKS API call to make for each cluster instead of a trust policy update. Additionally, there would no longer be a need...

Hey @yann-soubeyrand that is correct. Looking for some feedback on that, would you want all labels and taints to automatically propagate to the ASG in the required format for scale...

Note that 1.18 adds support configurable scaling behavior https://kubernetes.io/docs/tasks/run-application/horizontal-pod-autoscale/#support-for-configurable-scaling-behavior So this will be possible once EKS supports 1.18

With the release of [Managed Nodes](https://github.com/aws/containers-roadmap/issues/139) with [CloudFormation support](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-eks-nodegroup.html), EKS now automatically handles updating aws-auth config map for joining nodes to a cluster. Does this satisfy the initial use case...

Hey @hellupline We are actually working on exactly that right now, an EKS API to manage IAM users and their permissions to an EKS cluster. This will allow you to...