Questions tagged [eks]
The eks tag has no usage guidance.
44
questions
0
votes
2
answers
28
views
I created an Amazon EKS Kubernetes cluster using Terraform, but now I do not have access to any of the resources, and kubectl fails due to credentials
This question seeks a solution for the following errors
If you create an EKS cluster using terraform, and then use the same credentials you used to create the cluster, but see these errors, then what ...
- 143
-1
votes
1
answer
10
views
waiting for EKS Node Group (mzml-eks-cluster:eks-node-group) create: unexpected state 'CREATE_FAILED', wanted target 'ACTIVE'
# Configuring AWS provider
provider "aws" {
region = var.region
access_key = var.AWS_ACCESS_KEY_ID
secret_key = var.AWS_SECRET_ACCESS_KEY
}
# Storing the state in the S3 bucket
...
0
votes
0
answers
13
views
Can't create EKS Node group with Terraform
I created an EKS cluster first, then create node group with Terraform.
data "aws_region" "current" {}
data "aws_iam_policy_document" "eks_worker_node_assume_role&...
- 101
0
votes
0
answers
16
views
EKS- pod stuck in containerCreating state when attached to 2 claims with RWX accessmode and efs storage class
I have pod deployed in EKS which has 2 PVCs attached, below is yaml snipped for the same
- name: dev1-rwx-volume
persistentVolumeClaim:
claimName: dev1-rwx-volume-pvc
- name: dev2-rwx-...
- 101
0
votes
1
answer
306
views
Error configuring TLS error: secret xxx does not exist
I am using "Traefik", "cert-mangaer", and "Let's Encrypt".
Here is my ClusterIssuer file
apiVersion: cert-manager.io/v1
kind: ClusterIssuer
metadata:
name: production-...
- 101
0
votes
1
answer
145
views
Got "Error: chart requires kubeVersion: >=1.19.0-0 which is incompatible with Kubernetes v1.16.0" when deploy kube-prometheus-stack using Argo CD
My Amazon EKS is using Kuberentes 1.30:
➜ kubectl version
Client Version: v1.30.0
Kustomize Version: v5.0.4-0.20230601165947-6ce0bf390ce3
Server Version: v1.30.0-eks-036c24b
However, when I deploy ...
- 101
0
votes
1
answer
93
views
Sealed Secrets got "error: cannot fetch certificate" in Amazon EKS cluster
I am using Amazon EKS.
I can list my services by
kubectl get services -n production-sealed-secrets
NAME TYPE CLUSTER-IP EXTERNAL-IP PORT(S) AGE
sealed-secrets ...
- 101
0
votes
0
answers
65
views
How to install prometheus elasticsearch exporter by helm?
I installed Prometheus by
helm repo add prometheus-community https://prometheus-community.github.io/helm-charts
helm repo update
helm install kube-prometheus-stack prometheus-community/kube-prometheus-...
- 101
0
votes
0
answers
43
views
How to setup EKS ADOT for sending OpenTelemetry metrics to self managed prometheus?
I have tried to configure ADOT collector using below yaml file
apiVersion: apps/v1
kind: Deployment
metadata:
name: adot-collector
namespace: monitoring
spec:
replicas: 1
selector:
...
0
votes
0
answers
23
views
AWS application load balancer not registering targets for EKS node target group
I have an EKS cluster with public/private access on a VPC with public and private subnets. I've setup my ALB in the public subnets on port 80, internet-facing and ip and installed the AWS controller ...
0
votes
0
answers
37
views
Understanding the Use of cattle-unauthenticated ClusterRole and ClusterRoleBinding for RANCHER
After running an EKS hardening program, I encountered a vulnerability related to the cattle-unauthenticated ClusterRole and its associated ClusterRoleBinding. The program advised against binding ...
- 1
0
votes
0
answers
103
views
`apiVersion` is set to `v1beta1`. Still getting 'no kind "ExecCredential" is registered for version "client.authentication.k8s.io/v1alpha1"'
Despite having explicitly set apiVersion: client.authentication.k8s.io/v1beta1, why the following error when running any kubectl command (f.e. kubectl version)?
Unable to connect to the server: ...
- 121
0
votes
0
answers
67
views
Helm Charts for deploying a web app with a frontend and 5 microservices
My organization has decided to migrate to kubernetes and we have chosen to leverage eks.My task is to migrate our simple system consisting of a frontend and 5 microservices to the cluster.I want to ...
- 1
0
votes
1
answer
668
views
metrics-server on EKS - no metrics to server
I am attempting to setup metrics-server to server my 'horizon pod autoscaling' and manage my app pods scaling based on CPU. I am unable to get the metrics-server to run properly which fails with ...
0
votes
0
answers
24
views
How to delete Kubernetes Finalisers Kubernetes.io/pv-protection?
I am trying to delete the finalisers in the PV by issuing kubectl patch command and it deletes partially leaving behind Kubernetes.io/pv-protection
Described the PVC and able to see two entries
...
1
vote
1
answer
131
views
EKS cluster upgrade from 1.23 to 1.24 ServiceUnavailableException: Updates in the cell are disabled
I've tried upgrading my EKS cluster to 1.24 and I keep getting this error: ServiceUnavailableException: Updates in the cell are disabled
I get this using the AWS console webpage here https://us-east-1....
- 153
0
votes
0
answers
261
views
User Id for securityContext.runAsUser not present in /etc/passwd
I'm reviewing some containers being deployed and have found that the User ID for securityContext.runAsUser is not present in the container's /etc/passwd.
securityContext:
runAsUser: 10001 # ...
- 101
0
votes
1
answer
179
views
What happens when you are running a "too old" version of k8s in eks?
I'm desperately trying to resolve all of our dockershim uses so we can migrate to EKS 1.24+, but I'm not optimistic I'll get it done before the "deadline".
I'm stuck on EKS 1.23 until I can ...
- 153
0
votes
1
answer
416
views
Run the latest image from ECR on EKS
I have a CircleCI set-up to push docker images to ECR, similar to this question here: What is the idiomatic way to reload EKS/Kube configs when a new image is pushed to ECR
My question is two-fold:
I'...
- 103
0
votes
1
answer
273
views
EKS: Usable Memory goes lower and lower on the node to 5% then jumps up to 80% available
I was able to correlate the "usable memory" going down with events in kubernetes:
Conditions:
Type Status LastHeartbeatTime LastTransitionTime ...
- 101
0
votes
0
answers
33
views
Expose consistent port across many namespaces in a dev k8s cluster
We have a development kubernetes cluster (hosted in EKS) to which engineers push feature branches. Each feature branch creates the same set of Deployments and Services in its own isolated namespace. ...
- 101
3
votes
1
answer
324
views
How to use same terraform code for both kubernetes clusters Oracle (OKE) and AWS (EKS)?
I want to use same terraform code for both kubernetes clusters oracle (OKE) and AWS (EKS) and install the argocd helm chart on it, I given my code below for your reference, now the problem I am facing ...
- 31
1
vote
1
answer
3k
views
EKS - Get availability zone of pod deployment from pod
In my EKS cluster, I have a few node groups that cover availability zone A and B. The pods running on the nodes are consumers/producers on various Kafka topics (MSK). There isn't any internal ...
- 121
4
votes
2
answers
283
views
Why use configuration management tools in the world of modern cloud?
Configuration management tools like Ansible, Chef, Puppet, and Saltstack allows us to configure a cluster of blank machines to help install and deploy an application. For example, with Ansible, we can ...
- 43
2
votes
1
answer
185
views
Does the AWS Admin user have the eks:AccessKubernetesApi permission?
I am logged in to AWS as the AWS Admin, with Administrator access.
How do I find out if this user has the eks:AccessKubernetesApi IAM permission?
- 195
2
votes
5
answers
9k
views
NodeCreationFailure: Instances failed to join the kubernetes cluster
I'm setting up an EKS cluster using https://github.com/ManagedKube/kubernetes-ops
and, based on that code, when I do a terraform apply I'm getting a NodeCreationFailure error.
Specifically:
│ Error: ...
- 195
1
vote
1
answer
1k
views
How to fix wrong /etc/resolv.conf in kubernetes pods after creating a cluster with EKS eksctl with vpc-cni plugin?
So, i've created a kubernetes cluster in EKS with eksctl, ClusterConfig:
apiVersion: eksctl.io/v1alpha5
kind: ClusterConfig
metadata:
name: exchange-develop
region: us-east-1
version: '1.19'
...
- 121
0
votes
1
answer
441
views
How many nodes can I have in single EKS cluster?
I have an EKS cluster and today my subnet had 0 Available IPv4 addresses.
Does that mean that there are limits per nodes within 1 cluster in EKS?
- 111
2
votes
3
answers
184
views
What is the idiomatic way to reload EKS/Kube configs when a new image is pushed to ECR
We are using CircleCI to automate the building of images when merges are detected on our release branch. Those images are then being pushed to ECR, but I am unsure of the best way to refresh some or ...
- 121
2
votes
1
answer
74
views
Should we deploy Storage Class Per Application OR one Storage Class for All applications?
I am using aws-ebs-csi-driver on k8s for persistent volumes. I came across a scenario where I can create ebs storage class once and then use it across all the statefulsets deployments to create ...
- 133
1
vote
1
answer
997
views
Installing NVIDIA driver on EKS nodes
I have a EKS cluster that has two node pools. One CPU general compute, the other one has GPU support (g4dn). I want to install NVIDIA driver on to the GPU node group. The best I can do right now is to ...
- 111
0
votes
1
answer
62
views
EKS NodeAffinity for Services
https://www.eksworkshop.com/beginner/140_assigning_pods/affinity/
Links like above usually show node affinity for "kind: Pod".
Isn't it possible to use node affinity for "kind: Service&...
- 255
4
votes
1
answer
8k
views
Kubernetes serve static content with ingress
I have a simple Django application and on a regular EC2 instance nginx is a reverse proxy serving static files and proxying requests to gunicorn/wsgi backend app.
Should I have a separate deployment ...
- 671
1
vote
1
answer
550
views
Where to install Prometheus for Kubernetes monitoring
I'm considering using Prometheus to monitor and analyze different metrics from my AWS EKS Kubernetes cluster running in Fargate, as it seems to be the standard tool during these times. However, ...
4
votes
3
answers
7k
views
Is AWS Fargate suitable for web applications?
I'm making a web-app, I've tried both ECS and EKS at AWS. It's been very comfortable to use Fargate instances instead of EC2. But I'm not sure I understand how to use them since when I count at it, it'...
- 219
1
vote
1
answer
2k
views
How to Integrate Amazon API Gateway with EKS using Application Load Balancer (ALB)?
According to the AWS documentation, it is possible to integrate Amazon API Gateway with EKS using ALB. However, by far most of this documentation explains how to do this with NLB instead of ALB. So ...
- 131
0
votes
1
answer
118
views
AWS ECS vs EKS for hybrid cloud strategy
What can EKS deployment do that ECS deployment can't do? is there any specific circumstances that you have to deploy your application on EKS but not ECS.
- 171
1
vote
1
answer
798
views
What does "eksctl create iamserviceaccount" do under the hood on an EKS cluster?
AWS supports IAM Roles for Service Accounts (IRSA) that allows cluster operators to map AWS IAM Roles to Kubernetes Service Accounts.
To do so, one has to create an iamserviceaccount in an EKS cluster:...
- 155
1
vote
1
answer
322
views
Is it possible to have an aws EKS infrastructure as code?
Is it possible to declare "a complete production level EKS with other aws services" using terraform? I know that terraform has an eks module and an aws provider. But I'm not sure if one can ...
- 155
1
vote
1
answer
187
views
In k8s, do the controller nodes have to be in same VPC as the worker nodes for a cluster?
I'm new to k8s and trying to grasp the infrastructure concepts, and trying to apply them in AWS. I know a k8s cluster has a control plane, which has the management nodes, and a data plane, which has ...
- 463
1
vote
2
answers
561
views
Spread pods over cluster
Current using AWS's auto-scale policy to start EKS worker nodes (min+desired 10, max 15) on a fixed time every day. There are 120 pods and 30 deployments.
Obviously, only one node will be up firstly. ...
- 189
0
votes
1
answer
79
views
Secure RDS (private endpoint) and allow connecting from local machine for specific predefined users
I'm looking for some way to allow access to RDS (Private endpoint) instances from local machine for a specific set of people (for the internal team.)
ways I know: Create Bastion EC2 and through SSH ...
5
votes
1
answer
4k
views
Cannot configure node group in new EKS cluster due to no Node IAM role found
I've created a new EKS cluster, and am trying to add a new node group to it.
I'm stuck on selecting a Node IAM Role from the dropdown.
I followed the link, and created all options for roles I could ...
- 153
0
votes
2
answers
98
views
EKS - created cluster from console with federated IAM admin - how to access
I have no programmatic access for the user who created the cluster only graphical.
I tried a lot of things and I always get access denied on kubectl as I have to use another IAM identity that has ...
