Questions tagged [eks]
The eks tag has no usage guidance.
34
questions
0
votes
0
answers
21
views
Terraform & Helm & aws-load-balancer-controller : ALB won't be created
I try to deploy a complete cluster using EKS. When I run terraform apply the command completes successfully. I can see that my configured Pods, Deployments, Services were created. I also see the ...
- 101
0
votes
0
answers
16
views
how to authenticate with the openvpn which has microsoft authenticator time based OTP authenticatiopipeline?
I have a cluster in the AWS EKS. We are using OpenVPN to connect to the cluster namespace and to connect to OpenVPN, we enabled the Microsoft MFA authenticator (Time-based OTP).
The GitHub action ...
3
votes
1
answer
96
views
How to use same terraform code for both kubernetes clusters Oracle (OKE) and AWS (EKS)?
I want to use same terraform code for both kubernetes clusters oracle (OKE) and AWS (EKS) and install the argocd helm chart on it, I given my code below for your reference, now the problem I am facing ...
- 31
0
votes
0
answers
17
views
port-forwarded service and telnet on it - closed by remote host
When doing telnet on port-forwarded service I get connection closed by remote host after 60 sec, who is closing this? Kuberentes 1.22? I am investigating weird behavior that happened on latest patch ...
0
votes
0
answers
29
views
Trying to create a production worthy EKS cluster using Terraform
I'm heading down a bad path using git@github.com:terraform-aws-modules/terraform-aws-eks/examples as a starting point for a production EKS cluster?
Is there are better place to start? Is there a ...
- 1
0
votes
0
answers
11
views
Calico default ippool disabled
Our eks nodes suddenly started showing as unhealthy.
When we checked, the calico default ippool was showing as disabled.
Any idea on what might cause this?
Also will using ebpf prevent this?
- 235
0
votes
0
answers
16
views
Backing up Grafana
I have Grafana installed on my EKS cluster and have PVC attached.
My question is if it's ok just to take a snapshot of the volume using the lifecycle policy to backup the data. Is it possible to ...
- 111
0
votes
0
answers
62
views
Lacework vs Snyk for Container Scanning
I'm looking for a comparison on kubernetes container scanning tools. We use Amazon EKS. My company already uses both Lacework and Snyk's other products. The goal is to scan an image on deploy and ...
0
votes
0
answers
31
views
EKS: kubectl exec does not respect streamingConnectionIdleTimeout
Using EKS with Kubernetes 1.21, managed nodegroups in a private subnet. I'm trying to set the cluster up so that kubectl exec times out after inactivity regardless of the workload being execed into, ...
1
vote
1
answer
664
views
EKS - Get availability zone of pod deployment from pod
In my EKS cluster, I have a few node groups that cover availability zone A and B. The pods running on the nodes are consumers/producers on various Kafka topics (MSK). There isn't any internal ...
- 11
0
votes
0
answers
398
views
EKS cluster unable to create ingress/ALB via ALB controller
I am trying to create an ALB via the ALB ingress controller in an EKS cluster. I am running into the below error message
Error from server (InternalError): error when creating "app/ingress.yaml&...
- 465
0
votes
0
answers
22
views
Launch EKS without aws-node
EKS seems to launch aws-node daemon on every new cluster. How can I prevent this?
Context - I'd like to start a cluster with Cilium out of the box, running aws-node prevents this.
- 111
4
votes
2
answers
126
views
Why use configuration management tools in the world of modern cloud?
Configuration management tools like Ansible, Chef, Puppet, and Saltstack allows us to configure a cluster of blank machines to help install and deploy an application. For example, with Ansible, we can ...
- 43
2
votes
1
answer
89
views
Does the AWS Admin user have the eks:AccessKubernetesApi permission?
I am logged in to AWS as the AWS Admin, with Administrator access.
How do I find out if this user has the eks:AccessKubernetesApi IAM permission?
- 175
1
vote
3
answers
3k
views
NodeCreationFailure: Instances failed to join the kubernetes cluster
I'm setting up an EKS cluster using https://github.com/ManagedKube/kubernetes-ops
and, based on that code, when I do a terraform apply I'm getting a NodeCreationFailure error.
Specifically:
│ Error: ...
- 175
0
votes
0
answers
110
views
Disable public DNS for EKS with private API server
When EKS API server endpoint access is set to 'Private', as per the docs:
The cluster's API server endpoint is resolved by public DNS servers to a private IP address from the VPC. In the past, the ...
- 101
0
votes
1
answer
542
views
How to fix wrong /etc/resolv.conf in kubernetes pods after creating a cluster with EKS eksctl with vpc-cni plugin?
So, i've created a kubernetes cluster in EKS with eksctl, ClusterConfig:
apiVersion: eksctl.io/v1alpha5
kind: ClusterConfig
metadata:
name: exchange-develop
region: us-east-1
version: '1.19'
...
- 101
-1
votes
1
answer
94
views
How many nodes can I have in single EKS cluster?
I have an EKS cluster and today my subnet had 0 Available IPv4 addresses.
Does that mean that there are limits per nodes within 1 cluster in EKS?
- 101
2
votes
3
answers
71
views
What is the idiomatic way to reload EKS/Kube configs when a new image is pushed to ECR
We are using CircleCI to automate the building of images when merges are detected on our release branch. Those images are then being pushed to ECR, but I am unsure of the best way to refresh some or ...
- 121
1
vote
1
answer
51
views
Should we deploy Storage Class Per Application OR one Storage Class for All applications?
I am using aws-ebs-csi-driver on k8s for persistent volumes. I came across a scenario where I can create ebs storage class once and then use it across all the statefulsets deployments to create ...
- 123
1
vote
1
answer
375
views
Installing NVIDIA driver on EKS nodes
I have a EKS cluster that has two node pools. One CPU general compute, the other one has GPU support (g4dn). I want to install NVIDIA driver on to the GPU node group. The best I can do right now is to ...
- 111
0
votes
1
answer
40
views
EKS NodeAffinity for Services
https://www.eksworkshop.com/beginner/140_assigning_pods/affinity/
Links like above usually show node affinity for "kind: Pod".
Isn't it possible to use node affinity for "kind: Service&...
- 235
3
votes
1
answer
5k
views
Kubernetes serve static content with ingress
I have a simple Django application and on a regular EC2 instance nginx is a reverse proxy serving static files and proxying requests to gunicorn/wsgi backend app.
Should I have a separate deployment ...
- 601
1
vote
1
answer
217
views
Where to install Prometheus for Kubernetes monitoring
I'm considering using Prometheus to monitor and analyze different metrics from my AWS EKS Kubernetes cluster running in Fargate, as it seems to be the standard tool during these times. However, ...
2
votes
3
answers
2k
views
Is AWS Fargate suitable for web applications?
I'm making a web-app, I've tried both ECS and EKS at AWS. It's been very comfortable to use Fargate instances instead of EC2. But I'm not sure I understand how to use them since when I count at it, it'...
- 199
1
vote
1
answer
1k
views
How to Integrate Amazon API Gateway with EKS using Application Load Balancer (ALB)?
According to the AWS documentation, it is possible to integrate Amazon API Gateway with EKS using ALB. However, by far most of this documentation explains how to do this with NLB instead of ALB. So ...
- 131
0
votes
1
answer
77
views
AWS ECS vs EKS for hybrid cloud strategy
What can EKS deployment do that ECS deployment can't do? is there any specific circumstances that you have to deploy your application on EKS but not ECS.
- 161
1
vote
1
answer
609
views
What does "eksctl create iamserviceaccount" do under the hood on an EKS cluster?
AWS supports IAM Roles for Service Accounts (IRSA) that allows cluster operators to map AWS IAM Roles to Kubernetes Service Accounts.
To do so, one has to create an iamserviceaccount in an EKS cluster:...
- 155
1
vote
1
answer
273
views
Is it possible to have an aws EKS infrastructure as code?
Is it possible to declare "a complete production level EKS with other aws services" using terraform? I know that terraform has an eks module and an aws provider. But I'm not sure if one can ...
- 155
1
vote
1
answer
92
views
In k8s, do the controller nodes have to be in same VPC as the worker nodes for a cluster?
I'm new to k8s and trying to grasp the infrastructure concepts, and trying to apply them in AWS. I know a k8s cluster has a control plane, which has the management nodes, and a data plane, which has ...
- 315
1
vote
2
answers
479
views
Spread pods over cluster
Current using AWS's auto-scale policy to start EKS worker nodes (min+desired 10, max 15) on a fixed time every day. There are 120 pods and 30 deployments.
Obviously, only one node will be up firstly. ...
- 189
0
votes
1
answer
55
views
Secure RDS (private endpoint) and allow connecting from local machine for specific predefined users
I'm looking for some way to allow access to RDS (Private endpoint) instances from local machine for a specific set of people (for the internal team.)
ways I know: Create Bastion EC2 and through SSH ...
3
votes
1
answer
2k
views
Cannot configure node group in new EKS cluster due to no Node IAM role found
I've created a new EKS cluster, and am trying to add a new node group to it.
I'm stuck on selecting a Node IAM Role from the dropdown.
I followed the link, and created all options for roles I could ...
- 133
0
votes
2
answers
82
views
EKS - created cluster from console with federated IAM admin - how to access
I have no programmatic access for the user who created the cluster only graphical.
I tried a lot of things and I always get access denied on kubectl as I have to use another IAM identity that has ...