Questions tagged [eks]
The eks tag has no usage guidance.
51 questions
5
votes
3
answers
7k
views
Is AWS Fargate suitable for web applications?
I'm making a web-app, I've tried both ECS and EKS at AWS. It's been very comfortable to use Fargate instances instead of EC2. But I'm not sure I understand how to use them since when I count at it, it'...
- 229
5
votes
1
answer
4k
views
Cannot configure node group in new EKS cluster due to no Node IAM role found
I've created a new EKS cluster, and am trying to add a new node group to it.
I'm stuck on selecting a Node IAM Role from the dropdown.
I followed the link, and created all options for roles I could ...
- 153
4
votes
2
answers
341
views
Why use configuration management tools in the world of modern cloud?
Configuration management tools like Ansible, Chef, Puppet, and Saltstack allows us to configure a cluster of blank machines to help install and deploy an application. For example, with Ansible, we can ...
- 43
4
votes
1
answer
9k
views
Kubernetes serve static content with ingress
I have a simple Django application and on a regular EC2 instance nginx is a reverse proxy serving static files and proxying requests to gunicorn/wsgi backend app.
Should I have a separate deployment ...
- 671
3
votes
1
answer
335
views
How to use same terraform code for both kubernetes clusters Oracle (OKE) and AWS (EKS)?
I want to use same terraform code for both kubernetes clusters oracle (OKE) and AWS (EKS) and install the argocd helm chart on it, I given my code below for your reference, now the problem I am facing ...
- 31
2
votes
5
answers
10k
views
NodeCreationFailure: Instances failed to join the kubernetes cluster
I'm setting up an EKS cluster using https://github.com/ManagedKube/kubernetes-ops
and, based on that code, when I do a terraform apply I'm getting a NodeCreationFailure error.
Specifically:
│ Error: ...
- 195
2
votes
3
answers
200
views
What is the idiomatic way to reload EKS/Kube configs when a new image is pushed to ECR
We are using CircleCI to automate the building of images when merges are detected on our release branch. Those images are then being pushed to ECR, but I am unsure of the best way to refresh some or ...
- 121
2
votes
1
answer
194
views
Does the AWS Admin user have the eks:AccessKubernetesApi permission?
I am logged in to AWS as the AWS Admin, with Administrator access.
How do I find out if this user has the eks:AccessKubernetesApi IAM permission?
- 195
2
votes
0
answers
50
views
Beginner at Kubernetes - cluster creation not finising - unable to work out why
I'm fairly new to K8s and learning through AWS EKS. I setup a cluster with:
cd <some dir>
CLUSTER_NAME=k8s-play
eksctl anywhere generate clusterconfig $CLUSTER_NAME --provider docker > $...
- 121
2
votes
1
answer
84
views
Should we deploy Storage Class Per Application OR one Storage Class for All applications?
I am using aws-ebs-csi-driver on k8s for persistent volumes. I came across a scenario where I can create ebs storage class once and then use it across all the statefulsets deployments to create ...
- 133
1
vote
1
answer
324
views
Is it possible to have an aws EKS infrastructure as code?
Is it possible to declare "a complete production level EKS with other aws services" using terraform? I know that terraform has an eks module and an aws provider. But I'm not sure if one can ...
- 155
1
vote
2
answers
561
views
Spread pods over cluster
Current using AWS's auto-scale policy to start EKS worker nodes (min+desired 10, max 15) on a fixed time every day. There are 120 pods and 30 deployments.
Obviously, only one node will be up firstly. ...
- 189
1
vote
1
answer
577
views
Where to install Prometheus for Kubernetes monitoring
I'm considering using Prometheus to monitor and analyze different metrics from my AWS EKS Kubernetes cluster running in Fargate, as it seems to be the standard tool during these times. However, ...
1
vote
1
answer
819
views
What does "eksctl create iamserviceaccount" do under the hood on an EKS cluster?
AWS supports IAM Roles for Service Accounts (IRSA) that allows cluster operators to map AWS IAM Roles to Kubernetes Service Accounts.
To do so, one has to create an iamserviceaccount in an EKS cluster:...
- 155
1
vote
1
answer
3k
views
EKS - Get availability zone of pod deployment from pod
In my EKS cluster, I have a few node groups that cover availability zone A and B. The pods running on the nodes are consumers/producers on various Kafka topics (MSK). There isn't any internal ...
- 121
1
vote
1
answer
1k
views
How to fix wrong /etc/resolv.conf in kubernetes pods after creating a cluster with EKS eksctl with vpc-cni plugin?
So, i've created a kubernetes cluster in EKS with eksctl, ClusterConfig:
apiVersion: eksctl.io/v1alpha5
kind: ClusterConfig
metadata:
name: exchange-develop
region: us-east-1
version: '1.19'
...
- 121
1
vote
1
answer
1k
views
Installing NVIDIA driver on EKS nodes
I have a EKS cluster that has two node pools. One CPU general compute, the other one has GPU support (g4dn). I want to install NVIDIA driver on to the GPU node group. The best I can do right now is to ...
- 111
1
vote
1
answer
2k
views
How to Integrate Amazon API Gateway with EKS using Application Load Balancer (ALB)?
According to the AWS documentation, it is possible to integrate Amazon API Gateway with EKS using ALB. However, by far most of this documentation explains how to do this with NLB instead of ALB. So ...
- 131
1
vote
1
answer
203
views
In k8s, do the controller nodes have to be in same VPC as the worker nodes for a cluster?
I'm new to k8s and trying to grasp the infrastructure concepts, and trying to apply them in AWS. I know a k8s cluster has a control plane, which has the management nodes, and a data plane, which has ...
- 475
1
vote
1
answer
139
views
EKS cluster upgrade from 1.23 to 1.24 ServiceUnavailableException: Updates in the cell are disabled
I've tried upgrading my EKS cluster to 1.24 and I keep getting this error: ServiceUnavailableException: Updates in the cell are disabled
I get this using the AWS console webpage here https://us-east-1....
- 153
0
votes
1
answer
211
views
What happens when you are running a "too old" version of k8s in eks?
I'm desperately trying to resolve all of our dockershim uses so we can migrate to EKS 1.24+, but I'm not optimistic I'll get it done before the "deadline".
I'm stuck on EKS 1.23 until I can ...
- 153
0
votes
1
answer
456
views
Run the latest image from ECR on EKS
I have a CircleCI set-up to push docker images to ECR, similar to this question here: What is the idiomatic way to reload EKS/Kube configs when a new image is pushed to ECR
My question is two-fold:
I'...
- 103
0
votes
1
answer
63
views
EKS NodeAffinity for Services
https://www.eksworkshop.com/beginner/140_assigning_pods/affinity/
Links like above usually show node affinity for "kind: Pod".
Isn't it possible to use node affinity for "kind: Service&...
- 255
0
votes
1
answer
119
views
AWS ECS vs EKS for hybrid cloud strategy
What can EKS deployment do that ECS deployment can't do? is there any specific circumstances that you have to deploy your application on EKS but not ECS.
- 171
0
votes
1
answer
84
views
Secure RDS (private endpoint) and allow connecting from local machine for specific predefined users
I'm looking for some way to allow access to RDS (Private endpoint) instances from local machine for a specific set of people (for the internal team.)
ways I know: Create Bastion EC2 and through SSH ...
0
votes
2
answers
105
views
EKS - created cluster from console with federated IAM admin - how to access
I have no programmatic access for the user who created the cluster only graphical.
I tried a lot of things and I always get access denied on kubectl as I have to use another IAM identity that has ...
0
votes
0
answers
6
views
keda-add-ons-http-interceptor pods are in CrashLoopBackOff - not sure what is missing here [closed]
{"level":"info","ts":1733906885.9611363,"caller":"interceptor/main.go:44","msg":"starting interceptor","timeoutConfig":{&...
0
votes
1
answer
65
views
ingress failing due to error: path /?(.*) cannot be used with pathType Prefix
I'm trying to deploy this ingress service on AWS EKS. it works locally, but not when deployed to EKS.
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
name: ingress-service
annotations:
...
0
votes
1
answer
17
views
PostgreSQL Pod and Image Pull Issues in AWS EKS Deployment
I am working on deploying Violet Labs' Helm chart on an AWS EKS cluster. Following the setup instructions provided by Violet Labs, the deployment encounters two primary issues:
PostgreSQL Pod ...
- 1
0
votes
0
answers
18
views
EKS DR Strategy - How to control container activation in warm standby region
I have an EKS cluster with a warm standby in another AWS region for disaster recovery. Some of my containerized applications process data and forward it to other systems - I need to ensure these ...
0
votes
1
answer
41
views
cert-manager and cluster issuer - not registering subdomain
I have this issue with one particular domain.
I have a setup in AWS where I deploy apps in EKS via helm-charts (ArgoCD) and if the helm chart has ingress defined ... it registers the domain in Route53 ...
- 1
0
votes
1
answer
59
views
why all my aws-node Pods in CrashLoopBackOff State in Kubernetes Cluster
I'm currently facing an issue with my Kubernetes cluster where all the aws-node pods in the kube-system namespace are in a CrashLoopBackOff state. Here are the details of my setup:
Kubernetes Version: ...
0
votes
0
answers
16
views
Building Infra on AWS using terraform for a multiaccount project
Building Infra on AWS using Terraform for a multiaccount project, where I need to build some eks, vpcs, rds, elastic cache and cross functional roles , I am roles and all other required components. ...
- 11
0
votes
0
answers
18
views
Can't create EKS Node group with Terraform
I created an EKS cluster first, then create node group with Terraform.
data "aws_region" "current" {}
data "aws_iam_policy_document" "eks_worker_node_assume_role&...
- 101
0
votes
0
answers
25
views
EKS- pod stuck in containerCreating state when attached to 2 claims with RWX accessmode and efs storage class
I have pod deployed in EKS which has 2 PVCs attached, below is yaml snipped for the same
- name: dev1-rwx-volume
persistentVolumeClaim:
claimName: dev1-rwx-volume-pvc
- name: dev2-rwx-...
- 101
0
votes
1
answer
598
views
Error configuring TLS error: secret xxx does not exist
I am using "Traefik", "cert-mangaer", and "Let's Encrypt".
Here is my ClusterIssuer file
apiVersion: cert-manager.io/v1
kind: ClusterIssuer
metadata:
name: production-...
- 101
0
votes
1
answer
237
views
Got "Error: chart requires kubeVersion: >=1.19.0-0 which is incompatible with Kubernetes v1.16.0" when deploy kube-prometheus-stack using Argo CD
My Amazon EKS is using Kuberentes 1.30:
➜ kubectl version
Client Version: v1.30.0
Kustomize Version: v5.0.4-0.20230601165947-6ce0bf390ce3
Server Version: v1.30.0-eks-036c24b
However, when I deploy ...
- 101
0
votes
1
answer
186
views
Sealed Secrets got "error: cannot fetch certificate" in Amazon EKS cluster
I am using Amazon EKS.
I can list my services by
kubectl get services -n production-sealed-secrets
NAME TYPE CLUSTER-IP EXTERNAL-IP PORT(S) AGE
sealed-secrets ...
- 101
0
votes
0
answers
93
views
How to install prometheus elasticsearch exporter by helm?
I installed Prometheus by
helm repo add prometheus-community https://prometheus-community.github.io/helm-charts
helm repo update
helm install kube-prometheus-stack prometheus-community/kube-prometheus-...
- 101
0
votes
0
answers
74
views
How to setup EKS ADOT for sending OpenTelemetry metrics to self managed prometheus?
I have tried to configure ADOT collector using below yaml file
apiVersion: apps/v1
kind: Deployment
metadata:
name: adot-collector
namespace: monitoring
spec:
replicas: 1
selector:
...
0
votes
0
answers
34
views
AWS application load balancer not registering targets for EKS node target group
I have an EKS cluster with public/private access on a VPC with public and private subnets. I've setup my ALB in the public subnets on port 80, internet-facing and ip and installed the AWS controller ...
0
votes
0
answers
47
views
Understanding the Use of cattle-unauthenticated ClusterRole and ClusterRoleBinding for RANCHER
After running an EKS hardening program, I encountered a vulnerability related to the cattle-unauthenticated ClusterRole and its associated ClusterRoleBinding. The program advised against binding ...
- 1
0
votes
0
answers
163
views
`apiVersion` is set to `v1beta1`. Still getting 'no kind "ExecCredential" is registered for version "client.authentication.k8s.io/v1alpha1"'
Despite having explicitly set apiVersion: client.authentication.k8s.io/v1beta1, why the following error when running any kubectl command (f.e. kubectl version)?
Unable to connect to the server: ...
- 121
0
votes
0
answers
108
views
Helm Charts for deploying a web app with a frontend and 5 microservices
My organization has decided to migrate to kubernetes and we have chosen to leverage eks.My task is to migrate our simple system consisting of a frontend and 5 microservices to the cluster.I want to ...
- 1
0
votes
1
answer
829
views
metrics-server on EKS - no metrics to server
I am attempting to setup metrics-server to server my 'horizon pod autoscaling' and manage my app pods scaling based on CPU. I am unable to get the metrics-server to run properly which fails with ...
0
votes
1
answer
293
views
EKS: Usable Memory goes lower and lower on the node to 5% then jumps up to 80% available
I was able to correlate the "usable memory" going down with events in kubernetes:
Conditions:
Type Status LastHeartbeatTime LastTransitionTime ...
- 101
0
votes
0
answers
35
views
Expose consistent port across many namespaces in a dev k8s cluster
We have a development kubernetes cluster (hosted in EKS) to which engineers push feature branches. Each feature branch creates the same set of Deployments and Services in its own isolated namespace. ...
- 101
0
votes
1
answer
467
views
How many nodes can I have in single EKS cluster?
I have an EKS cluster and today my subnet had 0 Available IPv4 addresses.
Does that mean that there are limits per nodes within 1 cluster in EKS?
- 111
-1
votes
3
answers
220
views
I created an Amazon EKS Kubernetes cluster using Terraform, but now I do not have access to any of the resources, and kubectl fails due to credentials
This question seeks a solution for the following errors
If you create an EKS cluster using terraform, and then use the same credentials you used to create the cluster, but see these errors, then what ...
- 153
-1
votes
1
answer
7
views
In kubernetes, I want to restrict my pod scheduling on worker node if memory utilisation of worker node goes above 50% of its capacity?
For eg: worker node(W) have 64GB of memory and 16vCPUs
resources assigned to a pod : cpu - 4 , memory- 8GB
Now only 4 pods can be scheduled on worker node(W).
How can i achieve this ?
Node affinity , ...
