Hot answers tagged

5 votes
Accepted

Cannot configure node group in new EKS cluster due to no Node IAM role found

This is actually pretty well described in the docs. Before you create worker nodes, you must create an IAM role with the following IAM policies: AmazonEKSWorkerNodePolicy AmazonEKS_CNI_Policy ...
user avatar
  • 604
3 votes
Accepted

Is it possible to have an aws EKS infrastructure as code?

Is it possible to declare "a complete production level EKS with other aws services" using terraform? Yes, and that is what many larger organizations do. I have implemented Kubernetes with ...
user avatar
  • 895
3 votes
Accepted

Kubernetes serve static content with ingress

You can't configure your Ingress to serve static data (from your host files for example) alone because the Ingress resource is just a way to configure a way of understanding for Kubernetes on how to ...
user avatar
  • 213
3 votes

Why use configuration management tools in the world of modern cloud?

Generally, things like Packer and Terraform handle most straight infra requirements best in the cloud. Of course, if you have kubernetes up already, it’s the same deal. A packer (or other AMI) image ...
user avatar
3 votes
Accepted

Why use configuration management tools in the world of modern cloud?

What value does Ansible have in a modern cloud environment? As the comments say, it depends on your needs. But I think there is value in considering this sort of thing, so I'm going to answer this ...
user avatar
  • 1,728
3 votes

Is AWS Fargate suitable for web applications?

But from what I've understood Fargate is more suitable for container that have a limited lifetime? That's not strictly correct, Fargate capabilities include tasks which are suitable for short-term ...
user avatar
3 votes
Accepted

Is AWS Fargate suitable for web applications?

Fargate is absolutely suitable for web apps. We have many customers that use it that way (and many others that use it in a more "batchy" way). Fargate is a managed compute engine and AWS ...
user avatar
  • 226
2 votes
Accepted

What does "eksctl create iamserviceaccount" do under the hood on an EKS cluster?

Yes It does more than just creating a service account. It does three things: It Creates an IAM role. It attaches the desired iam-policy (--attach-policy-arn <POLICY_ARN>) to the created IAM ...
user avatar
  • 155
2 votes

Spread pods over cluster

You should look into affinity and anti-affinity as that allows you to control what pods go on which node. You can have it so that with anti-affinity there is only 1 pod of each deployment on a node. ...
user avatar
  • 435
2 votes

What is the idiomatic way to reload EKS/Kube configs when a new image is pushed to ECR

The 'best approach' in a theory (coming from the perspective of k8s) would be GitOps: Cloud-native Continuous Deployment. Your question lack some important information, how are you doing your ...
user avatar
  • 604
1 vote
Accepted

Does the AWS Admin user have the eks:AccessKubernetesApi permission?

There are a few ways to perform the action you're looking for. I'll demonstrate how to accomplish this task from the command line and the console. Using the SDK's (e.g. boto3) are an option too. ...
user avatar
  • 580
1 vote

Installing NVIDIA driver on EKS nodes

GPU Operator helps manage NVIDIA drivers in Kubernetes clusters, you can deploy it using Helm.
user avatar
  • 150
1 vote

EKS NodeAffinity for Services

i guess you mean a Deployment because service do not have any pods, and yes, you can use node affinity on a Deployment. you can find it here https://www.howtoforge.com/use-node-affinity-in-kubernetes/
user avatar
1 vote

Where to install Prometheus for Kubernetes monitoring

This is more of an opinion based question but let me try to answer it. installing Prometheus itself in the very same k8s cluster (as another running set of pods) is a normal thing.Am I right or just ...
user avatar
1 vote

Is AWS Fargate suitable for web applications?

Nope, Fargate can be used for long running containerized workloads. Web apps, proxies, or any other containers. Maybe you are thinking of Fargate Spot? Fargate Spot is definitely not suitable for long ...
user avatar
  • 2,973
1 vote
Accepted

In k8s, do the controller nodes have to be in same VPC as the worker nodes for a cluster?

For Amazon EKS, the control plane is running in a separate VPC that is managed by Amazon. You only need to care about the VPC for the worker nodes. Amazon EKS control plane – Deployed and managed by ...
user avatar
  • 895
1 vote
Accepted

Spread pods over cluster

Take a look at the Descheduler. This project runs as a Kubernetes Job that aims at killing pods when it thinks the cluster is unbalanced. The LowNodeUtilization strategy seems to fit your case: This ...
user avatar
1 vote

How to Integrate Amazon API Gateway with EKS using Application Load Balancer (ALB)?

From the same page: The steps to integrate ALB and NLB with API Gateway are identical. Which is followed by a sentence with a link to a documentation for an ALB ingress, including prerequisites for ...
user avatar
1 vote

AWS ECS vs EKS for hybrid cloud strategy

In terms of general positioning this may be a good starting point. Given in the title you mention "hybrid" deployments you may be interested in investigating and investigating ECS Anywhere ...
user avatar
  • 226
1 vote

Secure RDS (private endpoint) and allow connecting from local machine for specific predefined users

I am not sure it will be helped. I have similar design in my office. I have some Kubernetes Cluster. all node and master running on local ip from a PVC. And my rds too, only have local ip run on same ...
user avatar
1 vote
Accepted

EKS - created cluster from console with federated IAM admin - how to access

The only way to manage IAM users - using appropriate account with IAM Administrator privileges. See AWS Identity and Access Management If you lost your root account, you may contact an AWS support, ...
user avatar
  • 552

Only top scored, non community-wiki answers of a minimum length are eligible