Spotlight

Optimizing Pod IP Allocation in AWS EKS with Amazon VPC CNI Prefix Delegation

Muhammad Elmesary

This tutorial teaches how to optimize pod IP allocation in AWS EKS using VPC CNI prefix delegation to increase pod density per node and reduce IP address exhaustion in VPCs.

More articles →

Tools and utilities

More projects →

Events starting soon

Discover more events onn Kube Events →

We Broke Our EKS Cluster Autoscaler with the AL2023 Migration
We Broke Our EKS Cluster Autoscaler with the AL2023 Migration

Dilshan Wijesooriya, Senior Cloud Engineer, discusses a real incident where migrating EKS nodes to AL2023 caused the cluster autoscaler to lose AWS permissions silently.

You will learn:

  • Why AL2023 blocks pod access to instance metadata by default, breaking components that relied on node IAM roles (like cluster autoscaler, external-DNS, and AWS Load Balancer Controller)
  • How to implement IRSA correctly by configuring IAM roles, Kubernetes service accounts, and OIDC trust relationships, and why both AWS IAM and Kubernetes RBAC must be configured independently
  • The recommended migration strategy: move critical system components to IRSA before changing AMIs, test aggressively in non-production, and decouple identity changes from OS upgrades
  • How to audit which pods currently rely on node roles and clean up legacy IAM permissions to reduce attack surface after migration

Learn from production

More case studies →

Matching jobs

    • Account Executive - East with Stacklok

    • Salary: $150K a year

    • Location: remote from

    • Tech stack: Kubernetes, Go, GitHub Actions

    • Data Engineer with Runway

    • Salary: $270K to $370K a year

    • Location: remote from

    • Tech stack: Kubernetes, SQL, Python, Javascript, Java, C++, C#, Airflow

    • DevOps Engineer with SpaceX

    • Salary: $120K to $160K a year

    • Location: remote from

    • Tech stack: Kubernetes, Bare-metal, Docker, Shell, Python, C++, Elastic Search, Puppet, Ansible, ELK

    • DevSecOps Engineer with Robinhood

    • Salary: $169K to $255K a year

    • Location: based in the office (and remote from home) in Menlo Park, CA, USA

    • Tech stack: Kubernetes, AWS, GCP, Docker, Python, Go, Javascript

    • DevSecOps Engineer with Scale AI

    • Salary: $189.2K to $236.5K a year

    • Location: remote from

    • Tech stack: Kubernetes, Typescript, Python, Javascript

Discover more Kubernetes jobs on Kube Careers →

Subscribe to Learn Kubernetes Weekly

Trusted by 77K engineers. Delivered 166 issues and counting.

or subscribe via

Build something

More tutorials →

Call for Papers closing soon

  1. 3

    days

    Devopsdays Atlanta

    The Call For Paper is open until 19 January 2026 at CET. More info →
    • Location: Atlanta, GA, USA

    • In-person conference organized by Devopsdays.

    • The conference starts on the 21 April 2026.

    • Apply here
  2. 10

    days

    Observability Summit North America

    The Call For Paper is open until 26 January 2026 at CET. More info →
    • Location: Minneapolis, MN, USA

    • In-person conference organized by Linux Foundation.

    • The conference starts on the 22 May 2026.

    • Apply here
  3. 15

    days

    Devopsdays Zurich

    The Call For Paper is open until 31 January 2026 at CET. More info →
    • Location: Zurich, CH

    • In-person conference organized by Devopsdays.

    • The conference starts on the 6 May 2026.

    • Apply here
  4. 15

    days

    Devopsdays Prague

    The Call For Paper is open until 31 January 2026 at CET. More info →
    • Location: Prague, CZ

    • In-person conference organized by Devopsdays.

    • The conference starts on the 29 April 2026.

    • Apply here
  5. 16

    days

    Devopsdays Copenhagen

    The Call For Paper is open until 1 February 2026 at CET. More info →
    • Location: Copenhagen, DK

    • In-person conference organized by Devopsdays.

    • The conference starts on the 28 April 2026.

    • Apply here
  6. 17

    days

    KubeCon + CloudNativeCon India 2026

    The Call For Paper is open until 2 February 2026 at CET. More info →
    • Location: Mumbai, IN

    • In-person conference organized by CNCF.

    • The conference starts on the 19 June 2026.

    • Apply here
  7. 17

    days

    Web Days Convention

    The Call For Paper is open until 2 February 2026 at CET. More info →
    • Location: Aix-en-Provence, FR

    • In-person conference organized by Web Days.

    • The conference starts on the 6 February 2026.

    • Apply here

Thanks to our sponsors who make Kube Today possible

Find out more about being a sponsor →

More articles

Even more articles →