AWS Podcast Episode #732 Summary: Enhancing Multi-Cluster Visibility with EKS Dashboard
Release Date: August 4, 2025
In Episode #732 of the AWS Podcast, hosted by Shruti, Amazon Web Services delves into the complexities of managing multiple Kubernetes clusters across various AWS regions and accounts. The spotlight shines on the newly launched EKS Dashboard, a tool designed to centralize visibility and streamline governance for Kubernetes deployments. Joining Shruti is Sriram Ranganathan, a Product Manager at Amazon focusing on Elastic Kubernetes Service (EKS).
Introduction to Multi-Cluster Management Challenges
[00:55] Sriram Ranganathan:
"When our fleet of Kubernetes clusters grows, governance becomes a problem. Keeping up to date on security for all of those clusters also becomes quite a big problem."
Managing a growing number of Kubernetes clusters introduces significant challenges, especially when these clusters span multiple AWS accounts and regions. Common issues reported by customers include:
- Fragmented Visibility: As organizations expand, tracking the state, version, and location of each cluster becomes increasingly difficult.
- Governance and Security: Maintaining consistent governance and ensuring up-to-date security across all clusters is a formidable task.
- Add-On Management: Kubernetes’ modular nature requires numerous add-ons (e.g., networking, storage, observability), each with its own versioning and vulnerability considerations.
Sriram emphasizes the complexity of maintaining visibility over hundreds of clusters:
[02:34] Sriram:
"If I have 200 or 300 different clusters running across different accounts and regions, how do I know which version of Kubernetes those clusters are running on?"
Introducing the EKS Dashboard
The EKS Dashboard emerges as a comprehensive solution to these challenges, offering a centralized platform that provides a 10,000-foot view of an organization’s entire Kubernetes ecosystem.
[03:54] Shruti:
"Big challenges you're trying to solve are fragmented visibility across accounts, across regions... this is trying to give that centralized visibility."
Key Capabilities of EKS Dashboard:
-
Version Distribution Overview:
- Provides a breakdown of clusters by Kubernetes version.
- Helps identify clusters nearing the end of their support lifecycle for proactive upgrades.
-
Support Tier Management:
- Differentiates between clusters under standard and extended support.
- Forecasts additional costs associated with extended support, helping organizations manage budgets effectively.
-
Auto-Upgrade Insights:
- Projects which clusters will undergo automatic upgrades by EKS if not manually updated.
- Allows adjustable time frames for forecasting future upgrades.
-
Add-On Visibility and Management:
- Enumerates all add-ons installed across clusters, their versions, and associated vulnerabilities.
- Facilitates quick identification and upgrading of vulnerable add-ons without inspecting each cluster individually.
-
Cluster Health Metrics:
- Displays low-severity health issues such as IP address exhaustion or node group anomalies.
- Enables timely interventions to maintain cluster performance and reliability.
[12:42] Sriram:
"It does provide the low severity cluster health issues directly through the dashboard... you can visualize it directly from the dashboard and then you can take action on them to fix those."
Operational Planning and Upgrade Management
The EKS Dashboard not only surfaces critical information but also aids in operational planning, particularly around cluster upgrades.
[13:15] Sriram:
"The dashboard also tells you for each of the clusters, are there any error level upgrade insights? Are there any warning level upgrade insights?"
Upgrade Planning Features:
- Cluster Inventory: Quickly identifies clusters requiring upgrades from specific versions.
- Upgrade Insights: Highlights potential errors or warnings that may arise during upgrades, ensuring smoother transition processes.
- Proactive Planning: Assists in scheduling upgrades by providing a comprehensive view of the cluster states and potential impacts.
Add-On Management Across Clusters
Managing add-ons across numerous clusters is streamlined through the EKS Dashboard, which provides detailed visibility and control.
[15:30] Sriram:
"If one version of, let's say EBS CSI driver has some kind of a vulnerability and you want to upgrade it to the next version, how do you quickly identify without going into each cluster?"
Add-On Management Features:
- Version Tracking: Monitors the versions of each add-on across all clusters.
- Vulnerability Identification: Quickly identifies clusters running vulnerable versions of add-ons.
- Batch Upgrades: Facilitates bulk upgrading of add-ons across multiple clusters from a single interface.
Reporting and Export Capabilities
For teams requiring deeper analysis or reporting, the EKS Dashboard offers robust export functionalities.
[16:12] Shruti:
"There are lots of great filtering, sorting kind of functionality available... What are some of the reporting and export capabilities?"
Export Features:
- CSV Downloads: Allows exporting the entire dataset or filtered views to CSV files.
- Integration with Visualization Tools: Enables ingestion of exported data into external tools for advanced analytics and reporting.
[16:44] Sriram:
"You can download the entire data set directly from the console... or a specific set of affected resources."
Integration with AWS Organizations
Ensuring that only authorized personnel have access, the EKS Dashboard integrates seamlessly with AWS Organizations.
Access Control Features:
- AWS Organizations Integration: Requires that all accounts be nested under AWS Organizations.
- Trusted Access: Enabled via the Management account, though AWS recommends using a delegated administrator account to avoid over-privileged access.
- Scoped Access: Upcoming features will allow defining multiple delegated administrators, each with scoped visibility tailored to different organizational units.
[18:19] Sriram:
"We recommend that you do not use the Management account for accessing the Dashboard because Management account has lot more privileged capabilities."
Roadmap and Future Enhancements
Looking ahead, the EKS Dashboard team is focused on enhancing usability and expanding functionality based on customer feedback.
Planned Features:
-
Scope Delegated Administrator:
- Allows defining multiple delegated administrators with scoped visibility.
- Enables tailored access for different organizational units within a large enterprise.
-
Hybrid Node Visibility:
- Upcoming support for viewing clusters enrolled in hybrid nodes.
- Provides an overview of clusters utilizing hybrid nodes without delving into specific configurations, due to API limitations.
[20:29] Sriram:
"We are working on a feature called Scope Delegated Administrator, wherein you can define multiple different delegated administrators, each of which can have its own scope."
Getting Started with EKS Dashboard
For listeners interested in leveraging the EKS Dashboard, several resources are available:
- EKS Dashboard Launch Blog: Detailed announcement and initial setup guide.
- Deep Dive Blog: Comprehensive exploration of features and best practices.
- EKS User Guide: Dedicated section for the EKS Dashboard with step-by-step instructions.
Feedback can be provided through the public roadmap on GitHub or via AWS account teams to influence future developments.
[23:30] Sriram:
"You can refer to the EKS User Guide in terms of how to set it up... Please keep your feedback coming."
Conclusion
Episode #732 of the AWS Podcast provides an in-depth exploration of the EKS Dashboard, highlighting its role in simplifying the management of multiple Kubernetes clusters across AWS environments. With features ranging from centralized visibility and upgrade planning to robust add-on management and integration with AWS Organizations, the EKS Dashboard is poised to be an invaluable tool for developers and IT professionals aiming to maintain governance, security, and operational efficiency in their Kubernetes deployments.
For more information and to get started with the EKS Dashboard, visit the EKS User Guide or the official AWS Blog.
