Questions tagged [amazon-eks]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0
votes
0answers
11 views

AWS EKS kubernetes pod received empty response when calling an Ingress URL with pod in same node

Context: i recently encountered an issue where a kubernetes pod (blackbox-exporter) will receive an empty response whenever it tries to call an Ingress URL of a pod that resides in the same node as ...
0
votes
0answers
10 views

EKS - Use IAM roles for service accounts on multiple clusters

I am trying to use IAM roles for service accounts in EKS. https://docs.aws.amazon.com/eks/latest/userguide/iam-roles-for-service-accounts.html When it comes to create the IAM role to be assigned to a ...
0
votes
0answers
15 views

EKS readiness and liveness probes randomly fail

I am running EKS 1.20 with Amazon Linux 2 selfmanaged nodes and VPC CNI 1.7.10 I noticed readiness probes and liveness probes fail randomly. All of probes fail at the same time inside a node while ...
0
votes
1answer
98 views

EKS ARM Node stuck in NotReady status - runtime network not ready cni config uninitialized

I have an EKS Cluster (AWS) named cluster-main running on Kubernetes version: 1.16 Platform version: eks.4 CNI version v1.6.1 There are two node groups in the cluster Cluster Name Instance Type AMI ...
0
votes
0answers
67 views

Can i access an EKS cluster , if i don't have access to iam user that created it?

An AWS admin , created an IAM user , and that user created an EKS cluster. Now , we don't have access to that IAM user. If , we try to execute , kubectl , commands on that EKS cluster from a new IAM ...
0
votes
0answers
34 views

aws-load-balancer-controller annotations not working

I'm trying to automatically start an ALB in my EKS cluster by using the aws-load-balancer-controller This is what the logs of my deployment look like: $ kubectl logs -n kube-system deployment.apps/aws-...
0
votes
1answer
23 views

Applying k8s network policies in Amazon EKS

I'm learning about Kubernetes network policies. I'm attempting to create a situation where two pods in the same namespace have different network policies associated: pod A has ingress from anywhere ...
1
vote
1answer
113 views

creating k8s secret results in public private key not matching

I have created a certificate using ACM. Now, I want to create a TLS secret using kubernetes, so that I can use the secret to configure Ingress Resource. I am trying to create a TLS secret using ...
0
votes
1answer
84 views

Postfix behind AWS NLB with Proxy Protocol does not send banner until CRLF is sent

I've redeployed my mail stack as a Kubernetes pod. This pod is on an EKS cluster in the private subnet, behind an NLB. Postfix and the NLB are configured to speak proxy protocol v2. Originally I had ...
0
votes
0answers
27 views

Use ALB to publish a service using EKS with nodes in private subnet WITHOUT a NAT Gateway

I am using eksctl to provision an EKS cluster in my AWS account. It works fine, but I noticed it creates a NAT Gateway, which is somewhat expensive. Is there a way to have nodes in private subnets ...
0
votes
0answers
14 views

How do you run arbitrary “post-deploy” commands inside a container in on AWS EKS?

We're looking into migrating away from a Docker Swarm to AWS EKS. We have not yet decided if it's going to be EKS + Fargate or EKS + EC2. When we deploy a project such as e.g. a Drupal site, we need ...
0
votes
0answers
52 views

NLB with NGINX controller on my EKS cluster Each service I deploy creates its own NLB instead of using the existing one

I am trying to use an NLB with NGINX controller on my EKS cluster. Each service I deploy creates its own NLB instead of using the existing one. Here's what I'm doing, please help me where I'm going ...
0
votes
1answer
493 views

AWS EKS: load balancer service stuck in external ip pending

I have a EKS cluster (1.19) with a public and private subnets. I deployed ingress nginx with the following annotations: service.beta.kubernetes.io/aws-load-balancer-backend-protocol: tcp service.beta....
1
vote
0answers
86 views

Troubleshoot kubectl DNS Lookup REFUSED

This is happening on one engineers Macbook. Everyone else is able to run kubectl commands successfully. % kubectl --v=1000 get svc I0326 16:22:48.587540 28045 loader.go:379] Config loaded from file: ...
1
vote
0answers
13 views

Applying CRDs to EKS cluster causes timeout

We have been using ArgoCD in a proof of concept EKS Cluster (running 1.18) and yesterday we tried to update it from ArgoCD 1.7.10 to 1.8.7. Our first attempt was just by doing: kubectl apply -n argocd ...
0
votes
1answer
196 views

Can't configure RBAC to users in EKS

I have deployed EKS using eksctl following this docs. As the user who created the cluster I have full access control. Trying to grant system:masters permissions to a specific user doesn't work this ...
0
votes
1answer
64 views

Filebeat on ECK with AWS Module Fails Due To Metadata Error

We are running an Elastic Stack with ECK in EKS (7.8). We noticed that our filebeat daemonset and the AWS module were not processing logs from S3 and our SQS queues backing up. Looking at the logs on ...
0
votes
1answer
39 views

Can 1 namespace span across multiple EKS clusters?

I am trying to understand the relation between namespaces and clusters in EKS. Can 1 namespace span across multiple EKS clusters? Is that possible?
1
vote
3answers
2k views

Kubectl error You must be logged in to the server (Unauthorized) when using kubectl

I proceeded with the work referring to the following site (I don't use EKS.I create k8s on ec2 using kops) Getting Started with kOps on AWS When I tried to call kubectl get service I got the message: ...
0
votes
2answers
62 views

Single IP to access Kubernetes cluster ingress

I have an amazon EKS cluster that I'm using to host multiple websites, I have an ingress controller and a load balancer that spins up more pods as needed. I normally use CNAME type "eg alias or ...
0
votes
2answers
88 views

Is AWS Fargate EKS Container to Container communication encrypted at the network level?

I see that ephemeral drives are now encrypted but is network communications between containers encrypted, say for HIPAA compliance. Looking specifically at Serverless Fargate with Kubernetes pods. A ...
0
votes
1answer
235 views

Running kubectl commands as cronjobs in the Kubernetes cluster results in a connection refused error

When running a kubectl command using the bitnami/kubectl image from inside a kubernetes (EKS based) cluster I am expecting the command to pick up the KUBERNETES_SERVICE_HOST and ...
2
votes
1answer
77 views

Why would you want worker node traffic to leave a VPC? (AWS EKS)

When setting up AWS EKS, I came across a configuration option I don't understand. What is the use case for the "public" option as shown in this screenshot? This is the only option that makes ...
0
votes
2answers
67 views

Why root user is allowed by default in public cloud Kubernetes services?

In a Kubernetes environment, I suppose that the root user should not be allowed by default to mitigate the risk in case the host OS was accessed from inside a container. This setting should be done by ...
0
votes
1answer
322 views

Is aws-iam-authenticator still needed with EKS?

I've created a cluster (eks.3) through the console and then used aws eks update-config to generate the kubeconfig configuration. I immediately had access to the cluster through kubectl but the EKS ...
1
vote
1answer
41 views

Kubernetes eks supported HPA api version

Does anyone know if eks 1.15 supports apps/v1 api for hpa scalling? We have 2 environments and would like to keep the helm repo updated to both code versions
0
votes
0answers
147 views

How to use two repositories from helm and use helm_release terraform

How to use two repositories as Dogwatch uses below commands manually helm repo add datadog https://helm.datadoghq.com helm repo add stable https://kubernetes-charts.storage.googleapis.com/ helm repo ...
0
votes
1answer
459 views

Is it possible to deploy Datadog agents on AWS EKS cluster using terraform

I am looking to understand if anyone can guide me on how to install Datadog agents on my AWS EKS cluster as pods. I am able to complete my requirement by using kubectl commands. But here I am looking ...
0
votes
0answers
128 views

EKS node not responding and not exposing container ports

So I've been struggling with the fact that I'm unable to expose any deployment in my eks cluster. I got down to this: My LoadBalancer service public IP never responds Went to the load balancer ...
0
votes
0answers
17 views

Create a CI/CD Pipeline in AWS using AWS Code Commit, ECR and EKS with Custom docker image name

I want to create a CI/CD pipeline using AWS Pipeline with code commit, ECR and EKS services, I am able to create a pipeline with latest tag name, but want to create a custom docker image. My pipeline ...
0
votes
0answers
52 views

Change instance type of EKS node without cluster/namespace downtime

We have 3 different node categories: backend, tools, studies. Our tools EKS nodes (total of 6) are under-provisioned and I need to scale them up. Is it possible to change the instance type to a bigger ...
0
votes
1answer
167 views

why AKS,EKS,GKE better than k8s .can we say k8s architecture is base of these 3. How they leverage each other?

I am trying to learn k8s, and 1 question always coming as to why we need GKE, aks, or EKS. In the cloud, Can we do container orchestration without the above services means can we have compute ...
0
votes
1answer
251 views

HTTPS for EKS LoadBalancer

I have LoadBalancer setup for a Deployment on EKS. I can access the app behind the classic load balancer AWS setup with the DNS name <elb id>.<aws region>.elb.amazonaws.com. I would like ...
4
votes
1answer
2k views

Worker Group VS Node Group EKS

I am trying to use https://registry.terraform.io/modules/terraform-aws-modules/eks/aws/12.2.0(Terraform AWS EKS provider) What is the difference between worker nodes and node group?
0
votes
0answers
28 views

The network path was not found / Connection closed unexpectedly using AWS EKS Kubernetes

We are running a AWS EKS Kubernetes cluster with Linux and Windows nodes. Only the Windows nodes have issues with connecting to MS SQL and mail servers. Error found in application logs: The network ...
0
votes
0answers
68 views

In Kubernetes, how can I create a CronJob to test mysql database connectivity from a standard docker image?

I'm trying to create a cronjob in EKS to test the database connection, but it's no working. I tried with the mysql-client docker image. This is the cronjob definition: apiVersion: batch/v1beta1 kind: ...
0
votes
0answers
204 views

AWX 14 install to EKS Fails on Render deployment templates

Trying to deploy AWX 14 to kubernetes on EKS (2 node t3.xlarge nodegroup / k8s v 1.16) via the ansible-playbook from: https://github.com/ansible/awx. Ive followed the pre-reqs and updated the ...
0
votes
1answer
833 views

How pass dotenv file to my deployment using Gitlab's Auto DevOps

Recently I was deployed a EKS cluster and connect it with our Gitlab.com group, I already deployed some examples and templates from Gitlab and all works fine. Now I’ll want to deploy my Node.js based ...
0
votes
0answers
83 views

No traffic getting to EKS pods through ALB

I'm hoping someone can point out where I've messed something up with my setup on AWS. The architecture of the application is: 1 VPC with 2 public + 2 private subnets 1 RDS MySQL database within the ...
1
vote
0answers
164 views

How to access a S3 bucket accessible only through a EKS Pod

We've got a S3 bucket we use to store files used by an application deployed on EKS, to access the bucket we have a secret web identity token. The application maintenance guys sometime need to browse ...
0
votes
0answers
35 views

How do I obtain kernel headers on AWS kubernetes image?

The kernel version from a container shows: uname -r 4.14.133-113.112.amzn2.x86_64 But I am not able to find the exact kernel header, or kernel source that matches that version. Is there a place to ...
0
votes
1answer
415 views

How to change the security group of Amazon EKS worker nodes?

I want to add a security group to the worker nodes of Amazon EKS. It seems that I can change "Additional security group" to add the security group to the worker nodes. But I cannot find any ...
0
votes
1answer
44 views

Run Job on a new node before running any Pods (without using taints)

Is it possible to make Kubernetes run a Job on a node after it has started, and do not run any Pods until that Job is finished? My first idea was to use taints (start node with a taint that only Job ...
0
votes
2answers
350 views

Missing metrics for “kubelet_volume_*” in Prometheus

I setup latest https://github.com/coreos/kube-prometheus/ in an AWS EKS cluster in which I'm using the Amazon EBS CSI driver for persistent volume claims, but I don't see any "kubelet_volume_*" ...
1
vote
1answer
602 views

Mounting EKS EFS with CSI Times Out before Pod Comes Up

I am using EKS with Kubernetes version 1.15 and when I create a Storageclass, Persistent-Volume, Persistent-Volume-Claim, and Deployment the pod fails with: Warning FailedAttachVolume 71s (x2 over ...
0
votes
0answers
323 views

Jenkins: Kubernetes plugin configuration for EKS cluster

Jenkins version : 2.204.4 (hosted Jenkins in IBM server) Kubernetes plugin version: 1.24.1 Tested process 1: I am trying to configure Kubernetes plugin with the EKS cluster, but could not get any ...
1
vote
3answers
2k views

EKS cluster nodes go from Ready to NotReady after approximately 30 minutes with authorization failures

I am using eksctl to set up a cluster on EKS/AWS. Following the guide in the EKS documentation, I use default values for pretty much everything. The cluster is created successfully, I update the ...
0
votes
1answer
2k views

Not able to access RDS instance inside EKS cluster | EKS <-> RDS connection

I'm trying to access my existing RDS instance in the newly created EKS cluster. steps I have followed: Create a VPC peering connection by keeping RDS as requester and EKS as accepter. Add destination ...
1
vote
1answer
133 views

Traffic encryption between EC2 and EKS pods

We are deploying our app to the EKS, and have a hybrid situation where some services aren't deployed yet within the EKS cluster. We want the traffic between services deployed on EC2 instances would ...
0
votes
1answer
593 views

Fallback to a static origin when receiving HTTP 404 in nginx-ingress

I have a web application running on Kubernetes, and an nginx-ingress which serves as the Ingress for the deployment. I'd like to enable the following behavior for nginx: when any request receives a ...