[AWS] Lab: Launching an EKS Cluster_Launching

Creating an IAM User with Admin Permissions

[AWS] Lab: Launching an EKS Cluster_Launching_02

[AWS] Lab: Launching an EKS Cluster_Launching_03

  1. Navigate to IAM > Users.
  2. Click Add user.
  3. Set the following values:
  • User name: k8-admin
  • Access type: Programmatic access
Click Next: Permissions.Select Attach existing policies directly.Select AdministratorAccess.Click Next: Tags > Next: Review.Click Create user.Copy the access key ID and secret access key, and paste them into a text file, as we'll need them in the next step.

Launching an EC2 Instance and Configuring the Command Line Tools

[AWS] Lab: Launching an EKS Cluster_Launching_04

  1. Navigate to EC2 > Instances.
  2. Click Launch Instance.
  3. On the AMI page, select the Amazon Linux 2 AMI.
  4. Leave t2.micro selected, and click Next: Configure Instance Details.
  5. On the Configure Instance Details page:
  • Network: Leave default
  • Subnet: Leave default
  • Auto-assign Public IP: Enable
Click Next: Add Storage > Next: Add Tags > Next: Configure Security Group.Click Review and Launch, and then Launch.In the key pair dialog, select Create a new key pair.Give it a Key pair name of "mynvkp".Click Download Key Pair, and then Launch Instances.Click View Instances, and give it a few minutes to enter the running state.Once the instance is fully created, check the checkbox next to it and click Connect at the top of the window.In the Connect to your instance dialog, select EC2 Instance Connect (browser-based SSH connection).Click Connect

Update AWS CLI to Version 2

  1. In the command line window, check the AWS CLI version:

    aws --version

    It should be an older version.

  2. Download v2:

    curl "https://awscli.amazonaws.com/awscli-exe-linux-x86_64.zip" -o "awscliv2.zip"
  3. Unzip the file:

    unzip awscliv2.zip
  4. See where the current AWS CLI is installed:

    which aws

    It should be /usr/bin/aws.

  5. Update it:

    sudo ./aws/install --bin-dir /usr/bin --install-dir /usr/bin/aws-cli --update
  6. Check the version of AWS CLI:

    aws --version

Configure AWS CLI

  1. Configure the CLI:

    aws configure
  2. For AWS Access Key ID, paste in the access key ID you copied earlier.

  3. For AWS Secret Access Key, paste in the secret access key you copied earlier.

  4. For Default region name, enter us-east-1.

  5. For Default output format, enter json.


  1. Download kubectl:

    curl -o kubectl https://amazon-eks.s3.us-west-2.amazonaws.com/1.16.8/2020-04-16/bin/linux/amd64/kubectl
  2. Apply execute permissions to the binary:

    chmod +x ./kubectl
  3. Copy the binary to a directory in your path:

    mkdir -p $HOME/bin && cp ./kubectl $HOME/bin/kubectl && export PATH=$PATH:$HOME/bin
  4. Ensure kubectl is installed:

    kubectl version --short --client


  1. Ensure kubectl is installed:

    kubectl version --short --client
  2. Download eksctl:

    curl --silent --location "https://github.com/weaveworks/eksctl/releases/latest/download/eksctl_$(uname -s)_amd64.tar.gz" | tar xz -C /tmp
  3. Move the extracted binary to /usr/bin:

    sudo mv /tmp/eksctl /usr/bin
  4. Get the version of eksctl:

    eksctl version
  5. See the options with eksctl:

    eksctl help

Provision an EKS Cluster

Provision an EKS cluster with three worker nodes in us-east-1:

eksctl create cluster --name dev --version 1.16 --region us-east-1 --nodegroup-name standard-workers --node-type t3.micro --nodes 3 --nodes-min 1 --nodes-max 4 --managed

It will take 10–15 minutes since it's provisioning the control plane and worker nodes, attaching the worker nodes to the control plane, and creating the VPC, security group, and Auto Scaling group.

It is using CloudFormation to create the whole stack:

[AWS] Lab: Launching an EKS Cluster_Launching_05

If you run into problem that `us-east-1 e` doesn't have enough resource, just wait for CloudFormation rollback and run the cmd again.

It create NodeGroup as well in EKS Cluster

[AWS] Lab: Launching an EKS Cluster_Launching_06


In EC2, you can see it creates worker nodes:

[AWS] Lab: Launching an EKS Cluster_Launching_07

  1. In the AWS Management Console, navigate to CloudFormation and take a look at what’s going on there.

  2. Select the eksctl-dev-cluster stack (this is our control plane).

  3. Click Events, so you can see all the resources that are being created.

  4. We should then see another new stack being created — this one is our node group.

  5. Once both stacks are complete, navigate to Elastic Kubernetes Service > Clusters.

  6. Click the listed cluster.

  7. Click the Compute tab, and then click the listed node group. There, we'll see the Kubernetes version, instance type, status, etc.

  8. Click dev in the breadcrumb navigation link at the top of the screen.

  9. Click the Networking tab, where we'll see the VPC, subnets, etc.

  10. Click the Logging tab, where we'll see the control plane logging info.

  • The control plane is abstracted — we can only interact with it using the command line utilities or the console. It’s not an EC2 instance we can log into and start running Linux commands on.

Navigate to EC2 > Instances, where you should see the instances have been launched.

Close out of the existing CLI window, if you still have it open.

Select the original t2.micro instance, and click Connect at the top of the window.

In the Connect to your instance dialog, select EC2 Instance Connect (browser-based SSH connection).

Click Connect.

In the CLI, check the cluster:

eksctl get cluster

Enable it to connect to our cluster:

aws eks update-kubeconfig --name dev --region us-east-1

Create a Deployment on Your EKS Cluster

  1. Install Git:

    sudo yum install -y git
  2. Download the course files:

    git clone https://github.com/ACloudGuru-Resources/Course_EKS-Basics
  3. Change directory:

    cd Course_EKS-Basics
  4. Take a look at the deployment file:

    cat nginx-deployment.yaml
  5. Take a look at the service file:

    cat nginx-svc.yaml


apiVersion: apps/v1kind: Deployment
  name: nginx-deployment
    env: dev
  replicas: 3
      env: dev
        env: dev
      containers:      - name: nginx
        image: nginx
        ports:- containerPort: 80


apiVersion: v1
kind: Service
  name: nginx-svc
    env: dev
  type: LoadBalancer
  ports:  - port: 80
    env: dev


Create Service first

  1. Create the service:

    kubectl apply -f ./nginx-svc.yaml
  2. Check its status:

    kubectl get service

    Copy the external IP of the load balancer, and paste it into a text file, as we'll need it in a minute.

  3. Create the deployment:

    kubectl apply -f ./nginx-deployment.yaml
  4. Check its status:

    kubectl get deployment
  5. View the pods:

    kubectl get pod
  6. View the ReplicaSets:

    kubectl get rs
  7. View the nodes:

    kubectl get node
  8. Access the application using the load balancer, replacing <LOAD_BALANCER_EXTERNAL_IP> with the IP you copied earlier:


    The output should be the HTML for a default Nginx web page.

  9. In a new browser tab, navigate to the same IP, where we should then see the same Nginx web page.

[AWS] Lab: Launching an EKS Cluster_Launching_08


Test the High Availability Features of Your EKS Cluster

  1. In the AWS console, on the EC2 instances page, select the three t3.micro instances.

  2. Click Actions > Instance State > Stop.

  3. In the dialog, click Yes, Stop.

  4. After a few minutes, we should see EKS launching new instances to keep our service running.

  5. In the CLI, check the status of our nodes:

    kubectl get node

    All the nodes should be down (i.e., display a NotReady status).

  6. Check the pods:

    kubectl get pod

    We'll see a few different statuses — TerminatingRunning, and Pending — because, as the instances shut down, EKS is trying to restart the pods.

[AWS] Lab: Launching an EKS Cluster_Launching_09

[AWS] Lab: Launching an EKS Cluster_Launching_10


  1. Check the nodes again:

    kubectl get node

    We should see a new node, which we can identify by its age.

  2. Wait a few minutes, and then check the nodes again:

    kubectl get node

    We should have one in a Ready state.

  3. Check the pods again:

    kubectl get pod

    We should see a couple pods are now running as well.

  4. Check the service status:

    kubectl get service
  5. Copy the external IP listed in the output.

  6. Access the application using the load balancer, replacing <LOAD_BALANCER_EXTERNAL_IP> with the IP you just copied:


    We should see the Nginx web page HTML again. (If you don't, wait a few more minutes.)

  7. In a new browser tab, navigate to the same IP, where we should again see the Nginx web page.

In the CLI, delete everything:

eksctl delete cluster dev