Questions tagged [amazon-eks]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0 votes
0 answers
19 views

EKS: kubectl exec does not respect streamingConnectionIdleTimeout

Using EKS with Kubernetes 1.21, managed nodegroups in a private subnet. I'm trying to set the cluster up so that kubectl exec times out after inactivity regardless of the workload being execed into, ...
user avatar
0 votes
1 answer
33 views

Pod assigned node role instead of service account role on AWS EKS

First some info about the setup: EKS version: 1.21 eksctl version: 0.77.0 AWS Go SDK verion: v1.44.28 Deploying using kubectl I have a k8s cluster on AWS EKS on which I am deploying a custom k8s ...
user avatar
  • 111
0 votes
0 answers
73 views

Configure EKS to use Nexus Private Docker Registry (HTTP/HTTPS)

I've created an EKS cluster on AWS along with Nexus Repository on DigitalOcean using Terraform & Ansible. Also I've not created any SSL for the Nexus Repository, so it is "http." ...
user avatar
0 votes
0 answers
7 views

How to run a Fargate task? My cluster seems to be invisible

I don't know what details to provide here, so bear with me. I want to use AWS Fargate. I successfully uploaded my docker image, created a Task Definition, and created an EKS cluster, but when I ...
user avatar
  • 101
0 votes
0 answers
34 views

AWS EKS - EIA attached on node not reachable by Pod

I'm using a standard AWS EKS cluster, all cloud based (K8S 1.21) with multiple node groups, one of which uses a Launch Template that defines an Elastic Inference Accelerator attached to the instances (...
user avatar
0 votes
0 answers
31 views

AWS Site-to-Site VPN ping working, TCP not

I want to establish a site-to-site IPsec VPN connection between an AWS EKS-Kubernetes-Cluster and a server from a different provider using AWS Site-to-Site VPN. Pings get through the VPN, but TCP ...
user avatar
  • 1
0 votes
0 answers
20 views

Temporarily take kubernetes cluster offline

I have a kuberbetes cluster running in EKS. We use it for testing periodically but mainly it just sits there with all its nodes and costing us. I am looking for the most elegant way to turn it off so ...
user avatar
  • 522
0 votes
0 answers
15 views

nginx rewrite configuration not works

I'm using the latest version of Nginx. I deployed the Nginx pod in k8s and using configMap for my configuration file. I'm trying to rewrite the url and its look like the rewrite is not working at all. ...
user avatar
  • 1
0 votes
0 answers
25 views

K8s v1.21 - Remove object from delete queue - Finalizers

Cluster information: Kubernetes version: 1.21 Cloud being used: EKS Installation method: Host OS: Amazon Linux CNI and version: Flannel CRI and version: Docker Hi, I have an object with a finalyzer ...
user avatar
  • 1
1 vote
0 answers
462 views

Updating ingress-nginx helm chart for kubernetes 1.23.5

I am having lots of issues that seem to stem from upgrading my kubernetes cluster to the latest version (1.23.5). I initially had some issues with the cluster itself and the nodes but that seems to be ...
user avatar
  • 111
0 votes
1 answer
45 views

Direct Traffic from a Pulbic ALB to an Internal ALB for EKS

So I have an EKS cluster sitting in a dedicated VPC (EKS-VPC) In my Main VPC I have a public-facing ALB that I want it to somehow direct traffic to services running in EKS. More specifically I want ...
user avatar
0 votes
0 answers
85 views

nodes failing to join node group

I have multipe EKS clusters in separate accounts. These are managed by Rancher 2.6.1. One is kubernetes 1.19 and the another is 1.20. In the last two weeks, I have experienced nodes not getting added ...
user avatar
0 votes
1 answer
62 views

Why does 'kubectl' sometimes return a *node* name instead of the *pod* name if the specified pod no longer exists in the cluster?

Sometimes kubectl get pod some-pod-1234abc returns an error like: Error from server (NotFound): pods "ip-192-168-55-196.us-east-1.compute.internal" not found. This is surprising because the ...
user avatar
  • 103
0 votes
0 answers
74 views

How to setup ingress with ingress controller in a separate namespace for redmine in k8s?

I am a tad new-ish to k8s and trying to set up Redmine on Amazon EKS cluster using Traefik. I lack a tad of understanding as to how the controller will pick up the ingress, especially given that the ...
user avatar
  • 1,355
0 votes
1 answer
68 views

Is it possible to mix instance types in an AWS cluster?

I'd like to know if it is possible to mix node instance types in an AWS (EKS) cluster. I'd like to host something which requires more resources and add it to the cluster.
user avatar
  • 1,355
0 votes
1 answer
164 views

Managing K3s Cluster with AWS EKS

I'm wondering if I can use an EKS managed node to be the control plane for a K3s cluster deployed on an edge/IoT device, such as the Intel NUC. My goal is to have a lightweight kubernetes distro to ...
user avatar
  • 3
0 votes
1 answer
269 views

Using the AWS VPC CNI add on for EKS can I access a pod directly via it's vpc ip address over a vpn?

My general question is in the title. I feel like I've misunderstood the way pods are connected to the VPC. I was assuming this would make pods routable on the vpc but it seems like this is not the ...
user avatar
  • 103
0 votes
0 answers
628 views

Amazon EKS: Moving pods from one node group to another

I currently have a Managed Node Group serving my EKS cluster and have added another: NodeGroup1 [current - 20gb ec2 disk] NodeGroup2 [new - 80gb ec2 disk] I'd like to migrate my current pods from ...
user avatar
  • 11
2 votes
2 answers
944 views

How can I get Egress Static IP per namespace within a EKS cluster

My current setup involves an EKS Cluster with multiple namespaces (multi-tenant) across many different EKS nodes in private subnets. I would like the egress traffic from the pods to have a dedicated ...
user avatar
1 vote
0 answers
294 views

How do you route to a mix of HTTP and HTTPS backends from an ALB Ingress?

I have a Kubernetes cluster running in EKS (on AWS.) In the cluster I have Elasticsearch, Kibana and various other web services. I would like to set up a single ALB loadbalancer such that: Requests ...
user avatar
  • 385
0 votes
0 answers
140 views

K8s ( on eks ) access pod with hostNetwork: true from another pod

I'm installing metricbeat ( deployed using this manifest file ) on my eks cluster. In order to monitor also some other metrics ( such as traefik and HPA ) i added Prometheus with remote_write enabled,...
user avatar
  • 101
0 votes
0 answers
78 views

How can i route pods in a EKS cluster to a specific NAT Gateway within the same subnet

Am running an EKS cluster deployed on a node (in public subnet) with two namespaces, one pod running in each of the namespaces. I have created two NAT gateways on the same subnet. I would like to ...
user avatar
0 votes
0 answers
167 views

AWS ELB(classic load balancer) response is too slow and sometimes response is not coming it is showing timed out

I have EKS cluster setup in private subnet in which i'm having my microservices and for each microservice i have classic load balancer to access API. But response is having high latency and sometimes ...
user avatar
  • 21
0 votes
1 answer
53 views

Can't access RDS instance externally

I've spun up an RDS postgres database in an existing VPC (which has both public and private subnets - connected to a NAT gateway) which I've set as publicly accessible. I've added the relevant IP ...
user avatar
  • 11
0 votes
1 answer
165 views

Unable to grant additional AWS roles the ability to interact with my cluster

I am trying to learn AWS EKS and following Getting started with Amazon EKS – AWS Management Console and AWS CLI guide step by step except for the region which I have changed to us-east-1. I am able to ...
user avatar
  • 101
0 votes
1 answer
3k views

AWS EKS add-on coredns status as degraded and node group creation failed( is unable to join Cluster)

I'm trying to create node group on EKS Cluster(region = ap-south-1) but it is failing to join cluster. Health issues : NodeCreationFailure Instances failed to join the kubernetes cluster I found that ...
user avatar
  • 21
0 votes
1 answer
99 views

Hashicorp Vault - AWS EKS vs EC2

Is it possible to install a Hashicorp Vault cluster to EC2 only or is EKS required and would there be a big advantage to one over the other?
user avatar
  • 33
0 votes
0 answers
371 views

Issue with starting kubernetes elasticsearch pods due to access denied in elasticsearch.keystore

I already have a EFK stack on a kubernetes cluster in AWS EKS and I intend to add s3 logging functionality for the elasticsearch pods in es-statefulset. For this, I have created a custom elasticseach ...
user avatar
0 votes
0 answers
205 views

How to send EKS on Fargate container logs in the same pod to different log groups by FireLens/Fluent Bit

I'm gonna send EKS on Fargate container logs to AWS CloudWatch Logs. These container logs are in the same pod. And I want to send container logs to different log groups. Now, these container logs are ...
user avatar
  • 101
1 vote
0 answers
109 views

do I need kube-proxy and vpc-cni addons when running fargate only eks cluster?

they both seem like good add-ons when you're running node groups; I'm assuming given Fargate mandates ALB's would register IP only for services, and other similar fargate requirements, do we still ...
user avatar
1 vote
1 answer
994 views

coredns deployment fails looking for nodes even after fargate profile patch

Problem with installing fargate profiles and coreddns addon; I'm using terraform for some parts and kubetctl for others, the fargate profiles are created via terraform: fargate_profiles = { kube-...
user avatar
0 votes
0 answers
160 views

Error accessing MySQL endpoints through nginx ingress in eks

I got 3 node on aws eks. I want to use mysql client and access the database via Nginx Ingress. this is my yaml. apiVersion: networking.k8s.io/v1beta1 kind: Ingress metadata: annotations: ...
user avatar
0 votes
0 answers
28 views

Kubernetes: missing worker node CRT file

Going through some CKA material, it refers to a /var/lib/kubelet/worker-1.crt file on the Node. However, looking at an EKS node, I don't see any CRT files under /var/lib/kubelet except for some pod ...
user avatar
  • 1,077
0 votes
1 answer
534 views

AWS EKS Ingress Timeout On Any Non-Root Path

We have configured an Ingress resource on our EKS cluster with rewrites from /.* on the load balancer to the matching URI upstream. If we visit staging.my-domain.com/, we see a successful health-check ...
user avatar
2 votes
0 answers
273 views

EKS - Use IAM roles for service accounts on multiple clusters

I am trying to use IAM roles for service accounts in EKS. https://docs.aws.amazon.com/eks/latest/userguide/iam-roles-for-service-accounts.html When it comes to create the IAM role to be assigned to a ...
user avatar
2 votes
1 answer
3k views

EKS ARM Node stuck in NotReady status - runtime network not ready cni config uninitialized

I have an EKS Cluster (AWS) named cluster-main running on Kubernetes version: 1.16 Platform version: eks.4 CNI version v1.6.1 There are two node groups in the cluster Cluster Name Instance Type AMI ...
user avatar
0 votes
0 answers
223 views

Can i access an EKS cluster , if i don't have access to iam user that created it?

An AWS admin , created an IAM user , and that user created an EKS cluster. Now , we don't have access to that IAM user. If , we try to execute , kubectl , commands on that EKS cluster from a new IAM ...
user avatar
1 vote
0 answers
214 views

aws-load-balancer-controller annotations not working

I'm trying to automatically start an ALB in my EKS cluster by using the aws-load-balancer-controller This is what the logs of my deployment look like: $ kubectl logs -n kube-system deployment.apps/aws-...
user avatar
  • 123
0 votes
1 answer
138 views

Applying k8s network policies in Amazon EKS

I'm learning about Kubernetes network policies. I'm attempting to create a situation where two pods in the same namespace have different network policies associated: pod A has ingress from anywhere ...
user avatar
2 votes
1 answer
3k views

creating k8s secret results in public private key not matching

I have created a certificate using ACM. Now, I want to create a TLS secret using kubernetes, so that I can use the secret to configure Ingress Resource. I am trying to create a TLS secret using ...
user avatar
  • 41
0 votes
2 answers
492 views

Postfix behind AWS NLB with Proxy Protocol does not send banner until CRLF is sent

I've redeployed my mail stack as a Kubernetes pod. This pod is on an EKS cluster in the private subnet, behind an NLB. Postfix and the NLB are configured to speak proxy protocol v2. Originally I had ...
user avatar
0 votes
1 answer
3k views

AWS EKS: load balancer service stuck in external ip pending

I have a EKS cluster (1.19) with a public and private subnets. I deployed ingress nginx with the following annotations: service.beta.kubernetes.io/aws-load-balancer-backend-protocol: tcp service.beta....
user avatar
  • 223
1 vote
0 answers
131 views

Troubleshoot kubectl DNS Lookup REFUSED

This is happening on one engineers Macbook. Everyone else is able to run kubectl commands successfully. % kubectl --v=1000 get svc I0326 16:22:48.587540 28045 loader.go:379] Config loaded from file: ...
user avatar
  • 163
1 vote
0 answers
51 views

Applying CRDs to EKS cluster causes timeout

We have been using ArgoCD in a proof of concept EKS Cluster (running 1.18) and yesterday we tried to update it from ArgoCD 1.7.10 to 1.8.7. Our first attempt was just by doing: kubectl apply -n argocd ...
user avatar
  • 111
0 votes
1 answer
237 views

Can't configure RBAC to users in EKS

I have deployed EKS using eksctl following this docs. As the user who created the cluster I have full access control. Trying to grant system:masters permissions to a specific user doesn't work this ...
user avatar
  • 123
0 votes
1 answer
169 views

Filebeat on ECK with AWS Module Fails Due To Metadata Error

We are running an Elastic Stack with ECK in EKS (7.8). We noticed that our filebeat daemonset and the AWS module were not processing logs from S3 and our SQS queues backing up. Looking at the logs on ...
user avatar
0 votes
1 answer
137 views

Can 1 namespace span across multiple EKS clusters?

I am trying to understand the relation between namespaces and clusters in EKS. Can 1 namespace span across multiple EKS clusters? Is that possible?
user avatar
  • 125
2 votes
3 answers
6k views

Kubectl error You must be logged in to the server (Unauthorized) when using kubectl

I proceeded with the work referring to the following site (I don't use EKS.I create k8s on ec2 using kops) Getting Started with kOps on AWS When I tried to call kubectl get service I got the message: ...
user avatar
0 votes
2 answers
117 views

Single IP to access Kubernetes cluster ingress

I have an amazon EKS cluster that I'm using to host multiple websites, I have an ingress controller and a load balancer that spins up more pods as needed. I normally use CNAME type "eg alias or ...
user avatar
0 votes
2 answers
302 views

Is AWS Fargate EKS Container to Container communication encrypted at the network level?

I see that ephemeral drives are now encrypted but is network communications between containers encrypted, say for HIPAA compliance. Looking specifically at Serverless Fargate with Kubernetes pods. A ...
user avatar