Questions tagged [eks]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0 votes
0 answers
21 views

Terraform & Helm & aws-load-balancer-controller : ALB won't be created

I try to deploy a complete cluster using EKS. When I run terraform apply the command completes successfully. I can see that my configured Pods, Deployments, Services were created. I also see the ...
  • 101
0 votes
0 answers
16 views

how to authenticate with the openvpn which has microsoft authenticator time based OTP authenticatiopipeline?

I have a cluster in the AWS EKS. We are using OpenVPN to connect to the cluster namespace and to connect to OpenVPN, we enabled the Microsoft MFA authenticator (Time-based OTP). The GitHub action ...
3 votes
1 answer
96 views

How to use same terraform code for both kubernetes clusters Oracle (OKE) and AWS (EKS)?

I want to use same terraform code for both kubernetes clusters oracle (OKE) and AWS (EKS) and install the argocd helm chart on it, I given my code below for your reference, now the problem I am facing ...
  • 31
0 votes
0 answers
17 views

port-forwarded service and telnet on it - closed by remote host

When doing telnet on port-forwarded service I get connection closed by remote host after 60 sec, who is closing this? Kuberentes 1.22? I am investigating weird behavior that happened on latest patch ...
0 votes
0 answers
29 views

Trying to create a production worthy EKS cluster using Terraform

I'm heading down a bad path using git@github.com:terraform-aws-modules/terraform-aws-eks/examples as a starting point for a production EKS cluster? Is there are better place to start? Is there a ...
0 votes
0 answers
11 views

Calico default ippool disabled

Our eks nodes suddenly started showing as unhealthy. When we checked, the calico default ippool was showing as disabled. Any idea on what might cause this? Also will using ebpf prevent this?
  • 235
0 votes
0 answers
16 views

Backing up Grafana

I have Grafana installed on my EKS cluster and have PVC attached. My question is if it's ok just to take a snapshot of the volume using the lifecycle policy to backup the data. Is it possible to ...
  • 111
0 votes
0 answers
62 views

Lacework vs Snyk for Container Scanning

I'm looking for a comparison on kubernetes container scanning tools. We use Amazon EKS. My company already uses both Lacework and Snyk's other products. The goal is to scan an image on deploy and ...
0 votes
0 answers
31 views

EKS: kubectl exec does not respect streamingConnectionIdleTimeout

Using EKS with Kubernetes 1.21, managed nodegroups in a private subnet. I'm trying to set the cluster up so that kubectl exec times out after inactivity regardless of the workload being execed into, ...
1 vote
1 answer
664 views

EKS - Get availability zone of pod deployment from pod

In my EKS cluster, I have a few node groups that cover availability zone A and B. The pods running on the nodes are consumers/producers on various Kafka topics (MSK). There isn't any internal ...
0 votes
0 answers
398 views

EKS cluster unable to create ingress/ALB via ALB controller

I am trying to create an ALB via the ALB ingress controller in an EKS cluster. I am running into the below error message Error from server (InternalError): error when creating "app/ingress.yaml&...
  • 465
0 votes
0 answers
22 views

Launch EKS without aws-node

EKS seems to launch aws-node daemon on every new cluster. How can I prevent this? Context - I'd like to start a cluster with Cilium out of the box, running aws-node prevents this.
  • 111
4 votes
2 answers
126 views

Why use configuration management tools in the world of modern cloud?

Configuration management tools like Ansible, Chef, Puppet, and Saltstack allows us to configure a cluster of blank machines to help install and deploy an application. For example, with Ansible, we can ...
2 votes
1 answer
89 views

Does the AWS Admin user have the eks:AccessKubernetesApi permission?

I am logged in to AWS as the AWS Admin, with Administrator access. How do I find out if this user has the eks:AccessKubernetesApi IAM permission?
  • 175
1 vote
3 answers
3k views

NodeCreationFailure: Instances failed to join the kubernetes cluster

I'm setting up an EKS cluster using https://github.com/ManagedKube/kubernetes-ops and, based on that code, when I do a terraform apply I'm getting a NodeCreationFailure error. Specifically: │ Error: ...
  • 175
0 votes
0 answers
110 views

Disable public DNS for EKS with private API server

When EKS API server endpoint access is set to 'Private', as per the docs: The cluster's API server endpoint is resolved by public DNS servers to a private IP address from the VPC. In the past, the ...
  • 101
0 votes
1 answer
542 views

How to fix wrong /etc/resolv.conf in kubernetes pods after creating a cluster with EKS eksctl with vpc-cni plugin?

So, i've created a kubernetes cluster in EKS with eksctl, ClusterConfig: apiVersion: eksctl.io/v1alpha5 kind: ClusterConfig metadata: name: exchange-develop region: us-east-1 version: '1.19' ...
  • 101
-1 votes
1 answer
94 views

How many nodes can I have in single EKS cluster?

I have an EKS cluster and today my subnet had 0 Available IPv4 addresses. Does that mean that there are limits per nodes within 1 cluster in EKS?
2 votes
3 answers
71 views

What is the idiomatic way to reload EKS/Kube configs when a new image is pushed to ECR

We are using CircleCI to automate the building of images when merges are detected on our release branch. Those images are then being pushed to ECR, but I am unsure of the best way to refresh some or ...
  • 121
1 vote
1 answer
51 views

Should we deploy Storage Class Per Application OR one Storage Class for All applications?

I am using aws-ebs-csi-driver on k8s for persistent volumes. I came across a scenario where I can create ebs storage class once and then use it across all the statefulsets deployments to create ...
  • 123
1 vote
1 answer
375 views

Installing NVIDIA driver on EKS nodes

I have a EKS cluster that has two node pools. One CPU general compute, the other one has GPU support (g4dn). I want to install NVIDIA driver on to the GPU node group. The best I can do right now is to ...
0 votes
1 answer
40 views

EKS NodeAffinity for Services

https://www.eksworkshop.com/beginner/140_assigning_pods/affinity/ Links like above usually show node affinity for "kind: Pod". Isn't it possible to use node affinity for "kind: Service&...
  • 235
3 votes
1 answer
5k views

Kubernetes serve static content with ingress

I have a simple Django application and on a regular EC2 instance nginx is a reverse proxy serving static files and proxying requests to gunicorn/wsgi backend app. Should I have a separate deployment ...
1 vote
1 answer
217 views

Where to install Prometheus for Kubernetes monitoring

I'm considering using Prometheus to monitor and analyze different metrics from my AWS EKS Kubernetes cluster running in Fargate, as it seems to be the standard tool during these times. However, ...
2 votes
3 answers
2k views

Is AWS Fargate suitable for web applications?

I'm making a web-app, I've tried both ECS and EKS at AWS. It's been very comfortable to use Fargate instances instead of EC2. But I'm not sure I understand how to use them since when I count at it, it'...
1 vote
1 answer
1k views

How to Integrate Amazon API Gateway with EKS using Application Load Balancer (ALB)?

According to the AWS documentation, it is possible to integrate Amazon API Gateway with EKS using ALB. However, by far most of this documentation explains how to do this with NLB instead of ALB. So ...
  • 131
0 votes
1 answer
77 views

AWS ECS vs EKS for hybrid cloud strategy

What can EKS deployment do that ECS deployment can't do? is there any specific circumstances that you have to deploy your application on EKS but not ECS.
1 vote
1 answer
609 views

What does "eksctl create iamserviceaccount" do under the hood on an EKS cluster?

AWS supports IAM Roles for Service Accounts (IRSA) that allows cluster operators to map AWS IAM Roles to Kubernetes Service Accounts. To do so, one has to create an iamserviceaccount in an EKS cluster:...
  • 155
1 vote
1 answer
273 views

Is it possible to have an aws EKS infrastructure as code?

Is it possible to declare "a complete production level EKS with other aws services" using terraform? I know that terraform has an eks module and an aws provider. But I'm not sure if one can ...
  • 155
1 vote
1 answer
92 views

In k8s, do the controller nodes have to be in same VPC as the worker nodes for a cluster?

I'm new to k8s and trying to grasp the infrastructure concepts, and trying to apply them in AWS. I know a k8s cluster has a control plane, which has the management nodes, and a data plane, which has ...
  • 315
1 vote
2 answers
479 views

Spread pods over cluster

Current using AWS's auto-scale policy to start EKS worker nodes (min+desired 10, max 15) on a fixed time every day. There are 120 pods and 30 deployments. Obviously, only one node will be up firstly. ...
  • 189
0 votes
1 answer
55 views

Secure RDS (private endpoint) and allow connecting from local machine for specific predefined users

I'm looking for some way to allow access to RDS (Private endpoint) instances from local machine for a specific set of people (for the internal team.) ways I know: Create Bastion EC2 and through SSH ...
3 votes
1 answer
2k views

Cannot configure node group in new EKS cluster due to no Node IAM role found

I've created a new EKS cluster, and am trying to add a new node group to it. I'm stuck on selecting a Node IAM Role from the dropdown. I followed the link, and created all options for roles I could ...
  • 133
0 votes
2 answers
82 views

EKS - created cluster from console with federated IAM admin - how to access

I have no programmatic access for the user who created the cluster only graphical. I tried a lot of things and I always get access denied on kubectl as I have to use another IAM identity that has ...