Deploy EKS cluster using Terraform

• Terraform EKS module:
  • https://registry.terraform.io/modules/terraform-aws-modules/eks/aws/latest
  • FAQ: https://github.com/terraform-aws-modules/terraform-aws-eks/blob/master/docs/faq.md
  • 21 resources:
    • aws_eks_cluster (Terraform EKS apply output, terraform show | grep resource)
    • aws_eks_addon
  • Examples: https://github.com/terraform-aws-modules/terraform-aws-eks/tree/master/examples

Example

0) Download code

git clone https://github.com/hashicorp/learn-terraform-provision-eks-cluster

cd learn-terraform-provision-eks-cluster

1) Execute

terraform init #It may take several minutes
terraform plan
terraform apply: Terraform EKS apply output
It may take around 15 min

2) Update configuration

Update kubeconfig with credentials:
aws eks --region $(terraform output -raw region) update-kubeconfig --name $(terraform output -raw cluster_name)

Added new context arn:aws:eks:us-east-2:XXXXXXX:cluster/myeks-eks-xxxx to /Users/youruser/.kube/config

2.1) Review EKS cluster created

kubectl get nodes
NAME                                       STATUS   ROLES    AGE     VERSION
ip-10-0-1-29.us-east-2.compute.internal    Ready    <none>   5m31s   v1.23.9-eks-ba74326
ip-10-0-1-47.us-east-2.compute.internal    Ready    <none>   5m21s   v1.23.9-eks-ba74326
ip-10-0-2-121.us-east-2.compute.internal   Ready    <none>   5m13s   v1.23.9-eks-ba74326

3) Review resources:

terraform show | grep -w resource | sort | uniq

4) Configure kubectl

aws eks list-clusters --output text | awk '{print $2}'
aws eks update-kubeconfig --name my-eks-cluster-name

5) Review cluster status/configuration

kubectl cluster-info
kubectl get all -A
Default EKS installation

6) Install your desired addons:

helm install

Related

• helm install
• aws eks update-kubeconfig --name my-eks-cluster-name
• kubectl cluster-info
• kubectl get nodes, kubectl describe nodes
• kubeclt get services
• Terraform resource: aws eks cluster
• AccessDenied ... CreateRole
• iam:CreatePolicy, iam:CreateRole
• aws eks create-cluster
• asg_desired_capacity, InstanceType
• kubeadm
• eksctl create cluster
• Deploy GKE cluster using Terraform
• eks-cluster.tf https://github.com/hashicorp/learn-terraform-provision-eks-cluster/blob/main/eks-cluster.tf
• worker_groups
• node_groups
• eks_managed_node_groups

Activities

• Review https://learn.hashicorp.com/tutorials/terraform/eks
• Create your first EKS Cluster using AWS Management Console

See also

• Terraform EKS resources: aws_eks_cluster, aws_eks_addon, aws_eks_fargate_profile, aws_eks_node_group, aws_eks_identity_provider_config, kubernetes_config_map_v1_data
• Terraform EKS, Terraform EKS module, Deploy EKS cluster using Terraform, Terraform EKS apply output, terraform show, ~/.kube/config, aws_eks_cluster, aws_eks_addon, module.eks_managed_node_group, eks-cluster.tf, node_groups, worker_groups
• EKS, eksctl, EKS add-ons, Amazon EKS cluster role, Terraform EKS, Kubernetes Autoscaler, Karpenter, Terraform module: EKS, Terraform resource: aws eks node group, Terraform data source: aws_eks_cluster, AWS Controllers for Kubernetes, AWS Load Balancer Controller, Amazon EKS Anywhere, Kustomize, aws-iam-authenticator, ACK, tEKS, Amazon EKS authorization, Amazon EKS authentication, Nodegroup, EKS storage, aws-ebs-csi-driver, aws-efs-csi-driver, aws-load-balancer-controller, amazon-vpc-cni-k8s, EKS security, EKS Best Practices Guides, hardeneks, EKS versions, fargate-scheduler, eks-connector, Resilience in Amazon EKS, EKS control plane logging, Security groups for Pods in EKS