Questions tagged [amazon-eks]

83 questions
8
votes
1 answer

Worker Group VS Node Group EKS

I am trying to use https://registry.terraform.io/modules/terraform-aws-modules/eks/aws/12.2.0(Terraform AWS EKS provider) What is the difference between worker nodes and node group?
6
votes
1 answer

Kubernetes pod has unbound immediate PersistentVolumeClaims (eks)

I have following StorageClass defined for aws eks cluster (3 nodes) kind: StorageClass apiVersion: storage.k8s.io/v1 metadata: name: aws-gp2 annotations: storageclass.kubernetes.io/is-default-class: "true" provisioner:…
roy
  • 119
  • 1
  • 2
  • 12
3
votes
1 answer

HTTP/2 for ALB with EKS on AWS

I'm experimenting with AWS EKS and have created the following setup: EKS cluster with a single service/pod/node AWS ALB ingress controller ALB I try to configure the ALB to: create access logs provide HTTP/2 support My alb ingress controller…
chrisvdb
  • 1,199
  • 2
  • 10
  • 15
2
votes
2 answers

Kubernetes: run aws s3 sync/rsync against persistent volume on demand

Is there a way in Kubernetes to trigger a job to run on my containers on demand? The use case is to be able to have the containers sync from S3 to a persistent volume on demand. In the application's current architecture, new content is added to S3…
2
votes
1 answer

EKS suddenly failing with disk pressure

We have an EKS cluster with two t3.small nodes with 20Gi of ephemeral storage. The cluster runs only two small Nodejs (node:12-alpine) applications for now. This worked perfectly for a few weeks, and now suddenly we're getting disk pressure…
chrisvdb
  • 1,199
  • 2
  • 10
  • 15
2
votes
2 answers

How can I get Egress Static IP per namespace within a EKS cluster

My current setup involves an EKS Cluster with multiple namespaces (multi-tenant) across many different EKS nodes in private subnets. I would like the egress traffic from the pods to have a dedicated EIP per namespace. AFAIK there are no off the…
2
votes
0 answers

EKS - Use IAM roles for service accounts on multiple clusters

I am trying to use IAM roles for service accounts in EKS. https://docs.aws.amazon.com/eks/latest/userguide/iam-roles-for-service-accounts.html When it comes to create the IAM role to be assigned to a service account, I have to create it with a trust…
2
votes
1 answer

EKS ARM Node stuck in NotReady status - runtime network not ready cni config uninitialized

I have an EKS Cluster (AWS) named cluster-main running on Kubernetes version: 1.16 Platform version: eks.4 CNI version v1.6.1 There are two node groups in the cluster Cluster Name Instance Type AMI…
2
votes
1 answer

creating k8s secret results in public private key not matching

I have created a certificate using ACM. Now, I want to create a TLS secret using kubernetes, so that I can use the secret to configure Ingress Resource. I am trying to create a TLS secret using kubectl create secret tls fsi-secret…
Cricket
  • 41
  • 2
  • 3
2
votes
3 answers

Kubectl error You must be logged in to the server (Unauthorized) when using kubectl

I proceeded with the work referring to the following site (I don't use EKS.I create k8s on ec2 using kops) Getting Started with kOps on AWS When I tried to call kubectl get service I got the message: error: You must be logged in to the server…
2
votes
1 answer

Why would you want worker node traffic to leave a VPC? (AWS EKS)

When setting up AWS EKS, I came across a configuration option I don't understand. What is the use case for the "public" option as shown in this screenshot? This is the only option that makes worker node traffic leave the VPC in order to connect to…
2
votes
1 answer

Mounting EKS EFS with CSI Times Out before Pod Comes Up

I am using EKS with Kubernetes version 1.15 and when I create a Storageclass, Persistent-Volume, Persistent-Volume-Claim, and Deployment the pod fails with: Warning FailedAttachVolume 71s (x2 over 3m11s) attachdetach-controller …
Thingable
  • 21
  • 2
1
vote
1 answer

Not able to access RDS instance inside EKS cluster | EKS <-> RDS connection

I'm trying to access my existing RDS instance in the newly created EKS cluster. steps I have followed: Create a VPC peering connection by keeping RDS as requester and EKS as accepter. Add destination Accepter CIDRs with the peering connection. in…
1
vote
1 answer

Traffic encryption between EC2 and EKS pods

We are deploying our app to the EKS, and have a hybrid situation where some services aren't deployed yet within the EKS cluster. We want the traffic between services deployed on EC2 instances would be encrypted during communication with services…
Mickey Hovel
  • 111
  • 3
1
vote
0 answers

How do I allow an additional AWS user to gain access to EKS?

I'm trying to do: [ec2-user@xxxxxxxxx x]$ aws eks update-kubeconfig --name prod-eks-v2 --role-arn arn:aws:iam::9xxxxxxxxxxeks-v2-cluster-ServiceRole-xxxxxxxxxx An error occurred (AccessDeniedException) when calling the DescribeCluster operation:…
Chris Stryczynski
  • 1,176
  • 2
  • 15
  • 23
1
2 3 4 5 6