4

I've created a new EKS cluster, and am trying to add a new node group to it.

I'm stuck on selecting a Node IAM Role from the dropdown.

node

I followed the link, and created all options for roles I could see fit, still none appear in the dropdown.

roles

Note: currently I don't really care about restricting access, I'm only trying to run some POC against EKS with a test account.

1 Answer 1

5

This is actually pretty well described in the docs.

Before you create worker nodes, you must create an IAM role with the following IAM policies:

AmazonEKSWorkerNodePolicy

AmazonEKS_CNI_Policy

AmazonEC2ContainerRegistryReadOnly

Also you need to make sure that this role could be assumed by EKS.

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Principal": {
        "Service": "ec2.amazonaws.com"
      },
      "Action": "sts:AssumeRole"
    }
  ]
}
3
  • update the policy under "Trust Relationships".
    – CairoCoder
    Feb 20, 2021 at 4:48
  • Technically the role gets assumed by EC2 rather than EKS. Having said that I'm still having the issue the OP described even after following the documentation (and double checking with your answer). There must be something else somewhere that causes a problem with this in some situations...
    – Tim Malone
    Apr 1 at 9:28
  • Ah... the refresh button next to the role list only pretends to refresh the roles. You have to actually hard refresh the page to see newly created roles. 🤦‍♂️
    – Tim Malone
    Apr 1 at 9:47

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.