Difference between revisions of "Deploy EKS cluster using Terraform"
Jump to navigation
Jump to search
(136 intermediate revisions by 7 users not shown) | |||
Line 1: | Line 1: | ||
− | https:// | + | * [[Terraform EKS module]]: |
− | + | ** https://registry.terraform.io/modules/terraform-aws-modules/eks/aws/latest | |
− | + | ** FAQ: https://github.com/terraform-aws-modules/terraform-aws-eks/blob/master/docs/faq.md | |
− | + | ** 21 resources: | |
+ | *** <code>[[aws_eks_cluster]]</code> ([[Terraform EKS apply output]], <code>[[terraform show (grep resource) in EKS|terraform show]]</code> | <code>grep [[resource]]</code>) | ||
+ | *** <code>[[aws_eks_addon]]</code> | ||
+ | ** Examples: https://github.com/terraform-aws-modules/terraform-aws-eks/tree/master/examples | ||
+ | == Example == | ||
+ | |||
+ | 0) Download code | ||
+ | :<code>[[git clone]] https://github.com/hashicorp/learn-terraform-provision-eks-cluster && [[cd learn-terraform-provision-eks-cluster]]</code> | ||
+ | |||
+ | 1) Execute (<code>[[tf login]]</code>) | ||
+ | * Change [[TFC execution mode]] to [[local]] in TFC web portal | ||
+ | * Change [[name]] in [[main.tf]] ([[Terraform module: vpc]] section) to your prefered VPC name | ||
+ | * Configure your [[AWS profile]] name in <code>[[main.tf]]</code>, do not use default. | ||
+ | |||
+ | [[export]] [[TF_CLOUD_ORGANIZATION]]=test | ||
+ | |||
+ | |||
+ | [[terraform init]] #It may take several minutes | ||
+ | [[terraform plan]] | ||
+ | [[Terraform EKS: terraform apply|terraform apply]]: [[Terraform EKS apply output]] | ||
+ | It may take around 15 min | ||
+ | |||
+ | one liner: export [[TF_CLOUD_ORGANIZATION]]=test && [[tf init]] && [[tf plan]] && [[tf apply]] | ||
+ | |||
+ | 2) Update configuration | ||
+ | Update [[kubeconfig]] with credentials: | ||
+ | [[aws eks]] --region $([[terraform output -raw region]]) [[update-kubeconfig]] --name $([[terraform output -raw]] cluster_name) | ||
+ | |||
+ | [[Added new context]] arn:aws:eks:us-east-2:XXXXXXX:cluster/myeks-eks-xxxx to /Users/youruser/[[.kube/config]] | ||
+ | |||
+ | 2.1) Review EKS cluster created | ||
+ | [[kubectl get nodes]] | ||
+ | NAME STATUS ROLES AGE VERSION | ||
+ | ip-10-0-1-29.us-east-2.compute.internal Ready <none> 5m31s [[v1.23]].9-eks-ba74326 | ||
+ | ip-10-0-1-47.us-east-2.compute.internal Ready <none> 5m21s v1.23.9-eks-ba74326 | ||
+ | ip-10-0-2-121.us-east-2.compute.internal Ready <none> 5m13s v1.23.9-eks-ba74326 | ||
+ | |||
+ | 3) Review [[resources]]: | ||
+ | <code>[[terraform show (EKS using Terraform)|terraform show]] | grep -w resource | sort | uniq</code> | ||
+ | <code>[[terraform show (EKS using Terraform)|terraform show]] | grep -w resource | sort | uniq | [[wc -l]]</code> | ||
+ | 34 | ||
+ | |||
+ | 4) Configure <code>[[kubectl]]</code> | ||
+ | [[aws eks list-clusters]] --output text | awk '{print $2}' | ||
+ | [[aws eks update-kubeconfig]] --name [[my-eks-cluster-name]] | ||
+ | |||
+ | 5) Review [[cluster status]]/configuration | ||
+ | [[kubectl cluster-info]] | ||
+ | [[kubectl cluster-info dump]] | ||
+ | [[kubectl get all -A]] | ||
+ | [[Default EKS installation]] | ||
+ | |||
+ | 6) Install your desired [[addons]]: | ||
+ | [[helm install]] | ||
+ | |||
+ | == Errors == | ||
+ | * <code>[[Error: Failed to read organization]]</code> | ||
+ | * <code>[[Error: failed to create backend alias to target]] "". The hostname is not in the correct format.</code> | ||
+ | * <code>[[Error: Invalid or missing required argument]] .../... [[TF_CLOUD_ORGANIZATION]]</code> | ||
+ | * [[Unable to parse config file]] ~/.aws/config | ||
+ | |||
+ | == Related == | ||
+ | * [[Addons]]: <code>[[eks-pod-identity-agent]]</code>, <code>[[aws-efs-csi-driver]], [[amazon-cloudwatch-observability]]</code> | ||
+ | * <code>[[helm install]]</code> | ||
+ | * <code>[[aws eks update-kubeconfig --name my-eks-cluster-name]]</code> | ||
+ | * <code>[[kubectl cluster-info]]</code> | ||
+ | * <code>[[kubectl get nodes]]</code>, <code>[[kubectl describe nodes]]</code> | ||
+ | * <code>[[kubeclt get services]]</code> | ||
+ | * <code>[[Terraform resource: aws eks cluster]]</code> | ||
+ | * <code>[[AccessDenied]] ... [[CreateRole]]</code> | ||
+ | * <code>[[iam:CreatePolicy]]</code>, <code>[[iam:CreateRole]]</code> | ||
+ | * <code>[[aws eks create-cluster]]</code> | ||
+ | * <code>[[asg_desired_capacity]]</code>, <code>[[InstanceType]]</code> | ||
+ | * [[Terraform eks managed node groups: instance types]] | ||
+ | * [[K8s installation]]: <code>[[eksctl create cluster]]</code> | ||
+ | * [[Deploy GKE cluster using Terraform]] | ||
+ | * <code>[[eks-cluster.tf]]</code> https://github.com/hashicorp/learn-terraform-provision-eks-cluster/blob/main/eks-cluster.tf | ||
+ | * <code>[[worker_groups]]</code> | ||
+ | * <code>[[node_groups]]</code> | ||
+ | * [[terraform.tf]] | ||
+ | * [[Apply complete! Resources: 63 added, 0 changed, 0 destroyed.]] | ||
+ | |||
+ | == Activities == | ||
+ | * Review https://learn.hashicorp.com/tutorials/terraform/eks | ||
+ | * [[Create your first EKS Cluster using AWS Management Console]] | ||
== See also == | == See also == | ||
− | * {{EKS}} | + | * {{Terraform EKS module}} |
− | * {{Terraform}} | + | * {{Terraform EKS}} |
+ | |||
[[Category:EKS]] | [[Category:EKS]] | ||
[[Category:Terraform]] | [[Category:Terraform]] |
Latest revision as of 11:07, 12 February 2024
- Terraform EKS module:
Contents
Example[edit]
0) Download code
git clone https://github.com/hashicorp/learn-terraform-provision-eks-cluster && cd learn-terraform-provision-eks-cluster
1) Execute (tf login
)
- Change TFC execution mode to local in TFC web portal
- Change name in main.tf (Terraform module: vpc section) to your prefered VPC name
- Configure your AWS profile name in
main.tf
, do not use default.
export TF_CLOUD_ORGANIZATION=test
terraform init #It may take several minutes terraform plan terraform apply: Terraform EKS apply output It may take around 15 min
one liner: export TF_CLOUD_ORGANIZATION=test && tf init && tf plan && tf apply
2) Update configuration
Update kubeconfig with credentials: aws eks --region $(terraform output -raw region) update-kubeconfig --name $(terraform output -raw cluster_name) Added new context arn:aws:eks:us-east-2:XXXXXXX:cluster/myeks-eks-xxxx to /Users/youruser/.kube/config
2.1) Review EKS cluster created
kubectl get nodes NAME STATUS ROLES AGE VERSION ip-10-0-1-29.us-east-2.compute.internal Ready <none> 5m31s v1.23.9-eks-ba74326 ip-10-0-1-47.us-east-2.compute.internal Ready <none> 5m21s v1.23.9-eks-ba74326 ip-10-0-2-121.us-east-2.compute.internal Ready <none> 5m13s v1.23.9-eks-ba74326
3) Review resources:
terraform show | grep -w resource | sort | uniq
terraform show | grep -w resource | sort | uniq | wc -l
34
4) Configure kubectl
aws eks list-clusters --output text | awk '{print $2}' aws eks update-kubeconfig --name my-eks-cluster-name
5) Review cluster status/configuration
kubectl cluster-info kubectl cluster-info dump kubectl get all -A Default EKS installation
6) Install your desired addons:
helm install
Errors[edit]
Error: Failed to read organization
Error: failed to create backend alias to target "". The hostname is not in the correct format.
Error: Invalid or missing required argument .../... TF_CLOUD_ORGANIZATION
- Unable to parse config file ~/.aws/config
Related[edit]
- Addons:
eks-pod-identity-agent
,aws-efs-csi-driver, amazon-cloudwatch-observability
helm install
aws eks update-kubeconfig --name my-eks-cluster-name
kubectl cluster-info
kubectl get nodes
,kubectl describe nodes
kubeclt get services
Terraform resource: aws eks cluster
AccessDenied ... CreateRole
iam:CreatePolicy
,iam:CreateRole
aws eks create-cluster
asg_desired_capacity
,InstanceType
- Terraform eks managed node groups: instance types
- K8s installation:
eksctl create cluster
- Deploy GKE cluster using Terraform
eks-cluster.tf
https://github.com/hashicorp/learn-terraform-provision-eks-cluster/blob/main/eks-cluster.tfworker_groups
node_groups
- terraform.tf
- Apply complete! Resources: 63 added, 0 changed, 0 destroyed.
Activities[edit]
- Review https://learn.hashicorp.com/tutorials/terraform/eks
- Create your first EKS Cluster using AWS Management Console
See also[edit]
- Terraform EKS module:
manage_aws_auth_configmap, create_aws_auth_configmap, aws_auth_roles, aws_auth_users, aws_auth_accounts, module.eks, Amazon EKS Blueprints for Terraform, OIDC
- Terraform EKS, Terraform EKS module, Deploy EKS cluster using Terraform, Terraform EKS apply output,
terraform show, ~/.kube/config
,aws_eks_cluster, aws_eks_addon, module.eks_managed_node_group, eks-cluster.tf, node_groups, worker_groups
Advertising: