DEV Community: Ahmet Akan

Create an Elastic Kubernetes Service (EKS) cluster on AWS

Ahmet Akan — Tue, 31 Aug 2021 02:21:18 +0000

Summary

Amazon Elastic Kubernetes Service (Amazon EKS) is a managed Kubernetes service that makes it easy for you to run Kubernetes on AWS and on-premise. This tutorial will guide you through creating an EKS cluster on AWS.

Prerequisites

Set Up AWS Command Line Interface (CLI)
Set Up Kubernetes Command Line Tool (kubectl)

Steps

Create an Amazon VPC with public and private subnets.

$ aws cloudformation create-stack \
  --region us-east-1 \
  --stack-name my-eks-vpc-stack \
  --template-url https://amazon-eks.s3.us-west-2.amazonaws.com/cloudformation/2020-10-29/amazon-eks-vpc-private-subnets.yaml

Create a file named cluster-role-trust-policy.json with the following policy definition.

cluster-role-trust-policy.json

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Principal": {
        "Service": "eks.amazonaws.com"
      },
      "Action": "sts:AssumeRole"
    }
  ]
}

Create the AWS IAM role.

$ aws iam create-role \
  --role-name myAmazonEKSClusterRole \
  --assume-role-policy-document file://"cluster-role-trust-policy.json"

Attach the required Amazon EKS managed IAM policy to the role.

$ aws iam attach-role-policy \
  --policy-arn arn:aws:iam::aws:policy/AmazonEKSClusterPolicy \
  --role-name myAmazonEKSClusterRole

Open the Amazon EKS console at https://console.aws.amazon.com/eks/home#/clusters.

Make sure that the Region selected in the top right of your console is N.Virginia (us-east-1).

Select create cluster.

On the Configure cluster page enter a name for your cluster, such as my-cluster and select myAmazonEKSClusterRole for Cluster Service Role.

On the Specify networking page, select vpc-00x0000x000x0x000 | my-eks-vpc-stack-VPC from the VPC drop down list. Leave the remaining settings at their default values and select Next.

On the Configure logging page, select Next.

On the Review and create page, select Create.

To configure your computer to communicate with your cluster, Create or update a kubeconfig file for your cluster.

$ aws eks update-kubeconfig \
  --region us-east-1 \
  --name my-cluster

Test your configuration.

$ kubectl get svc

Setting Up Kubernetes Command Line Tool (kubectl)

Ahmet Akan — Tue, 31 Aug 2021 01:30:59 +0000

Summary

The Kubernetes command-line tool, kubectl, allows you to run commands against Kubernetes clusters. You can use kubectl to deploy applications, inspect and manage cluster resources, and view logs.

This tutorial will guide you through the installation and configuration of this tool on Linux.

Installation Steps:

Download the Amazon EKS vended kubectl from AWS. To download the Arm version, change amd64 to arm64 before running the command.

$ curl -o kubectl https://amazon-eks.s3.us-west-2.amazonaws.com/1.21.2/2021-07-05/bin/linux/amd64/kubectl

Add execute permission to the binary.

$ chmod +x ./kubectl

Add the binary to the search path.

$ mkdir -p $HOME/bin && cp ./kubectl $HOME/bin/kubectl && export PATH=$PATH:$HOME/bin

Verify the version with the following command:

$ kubectl version --short --client
Client Version: v1.21.2-13+d2965f0db10712

Setting Up AWS Command Line Interface (CLI)

Ahmet Akan — Tue, 31 Aug 2021 01:10:49 +0000

Summary

The AWS Command Line Interface (CLI) is a unified tool to manage AWS services. This tutorial will guide you through the installation and configuration of this tool on Linux.

Installation Steps:

We will start with downloading the the zip file from AWS.

$ curl "https://awscli.amazonaws.com/awscli-exe-linux-x86_64.zip" -o "awscliv2.zip"

Next, we will unzip the file and run the installation.

$ unzip awscliv2.zip

$ sudo ./aws/install

To make sure the installation is successful, we will print out the version of the AWS CLI on the screen.

$ aws --version
aws-cli/2.2.29 Python/3.8.8 Linux/5.4.119-14943-gff839c7fedcc exe/x86_64.debian.10 prompt/off

In the next few steps, we will log on to the AWS Management Console and set up a new AWS Identity and Access Management (IAM) user. This IAM user later will be used to configure the AWS CLI.

Choose IAM from the list of services and click on "Add User."

Choose your user name and check "Programmatic Access" and "AWS Management Console Access"

Attach "Administrator Access" permissions to the IAM user created.

Save your "Access Key ID" and "Secret Access Key" on your favorite password vault. These credentials are displayed only once, therefore it is essential to save them now.

$ aws configure

Go back to the terminal and configure the AWS CLI. We will use the us-east-1 as the default region for this guide.

Access Key ID: "From the Previous Step"
Secret Access Key: "From the Previous Step"
Default Region Name: us-east-1
Default Output: "Leave Blank"

Execute a command using the AWS CLI. For this example, we are listing all the IAM users.

$ aws iam list-users
{
    "Users": [
        {
            "Path": "/",
            "UserName": "ahmet.akan",
            "UserId": "AIDASNOJDUC6SGCXK3MPJ",
            "Arn": "arn:aws:iam::********:user/ahmet.akan",
            "CreateDate": "2021-08-31T00:05:26+00:00"
        }
    ]
}