How to Deploy AWS EKS with Terraform - The Simplest Guide to Get Up and Running

Рет қаралды 32,678

Жыл бұрын

In this video, I go over the quickest and simplest way of getting AWS Elastic Kubernetes Service (EKS) up and running using Terraform for deployment. We go over the basic configuration options and end up with a fully functional working EKS cluster by the end of the video.
Code from the video can be found free on Github 🐙
github.com/ascode-com/wiki/tr...
Let me know what questions you have, content you'd like to see, and come check out the discord and twitter!
Relevant Links 🔗
Terraform Registry Page for EKS Module: registry.terraform.io/modules...
Terraform EKS Module Source Code: github.com/terraform-aws-modu...
Get in touch 🚀
Discord: / discord
LinkedIn: / jedidiahpark
Twitter: / jediascode
Website: ascode.com

Пікірлер: 107

@user-sv7fp9xk8e 7 ай бұрын

I vote for the Terraform video. You explain very well.

@ascode-com 7 ай бұрын

thank you so much!

@tanjamikhno Жыл бұрын

Mate, that's the easiest and most feature-packed k8s @ aws tutorial I've ever seen, huge thanks!!!!!!!

@ascode-com Жыл бұрын

thanks! glad i could help out

@oshoshoshoshosh 6 ай бұрын

Awesome work, clear explanations, very well done. You rock!

@ascode-com 6 ай бұрын

no you rock!

@user-uh6th6kv4c 6 ай бұрын

I love the simplicity and I tried it and its running, bravo. Thanks. And I like your color gradient and your cap.

@ascode-com 6 ай бұрын

hi thanks so much!

@brunopaz1645 2 ай бұрын

I really love you! It has been a brutal support for a problem I had! Thx!!!

@ciscoboy-devon1732 Жыл бұрын

This was awesome! Very well detailed & explained, Thanks for sharing 💪I am currently working on Cluster AutoScalers on EKS as well HPA's. I seem to have the Cluster Autoscaler on point, HPA's is my next ball game. Great to see you back in action!

@ascode-com Жыл бұрын

hey good to see you again!! and that's sick, wishing you minimal errors and bugs!

@Jay2Ops 10 ай бұрын

I will appreciate a Terraform Tutorial. This was helpful as well.

@ascode-com 9 ай бұрын

awesome, thanks for the input

@mahmoudhassan1324 11 ай бұрын

thanks a lot for the video. i was asked for a task as a test to start my new carrier and this really helps with a huge part of it. keep going bro

@ascode-com 11 ай бұрын

getting started is the hardest part! you got this!

@user-jy6xi5zq7c 8 ай бұрын

I stumbled two times into your clip. First time is in my preparation for CKA, second time is for a example to deploy a EKS cluster with terraform. Now I realize you have a total of six clips. I think you do great tutorials. You remind me of the python tutor Angela Yu who had 2 million students. Please keep doing more.

@ascode-com 8 ай бұрын

that's awsome haha and thank you so much!

@sarangsawant4497 2 ай бұрын

Good explanation, thank you :)

@tcloudcorner 7 ай бұрын

This helped me alot!!! thank you!

@AungBaw 11 ай бұрын

Dude! you came back, do more videos. Thanks. 9:05 context switch was lighting fast

@ascode-com 11 ай бұрын

thanks m8 :)

@JustDoTheSimpleThing 10 ай бұрын

Terraform tutorial will be great!

@ascode-com 10 ай бұрын

heard, seems like a popular request so i'll keep that in mind for future vids! thanks

@GoatOnATrain 8 ай бұрын

I just spent days trying to wrap my head around EKS with Terraform and trying to configure permissions. I even found the same module and the same example, but it's a massive file with no real explanation for what's going on in it. Thank you so much. And yes, I would like you to do a best practices video with all the goodness.

@ascode-com 8 ай бұрын

happy to help!

@andrewnhien9714 8 ай бұрын

Thank you. Please make more video about Terraform follow best practises. Hope see you soon!

@ascode-com 8 ай бұрын

popular request so i'm working on putting some things together! thanks :)

@mfich 6 ай бұрын

Great tutorial! I'm interested in the full terraform best practice guide you mentioned.

@ascode-com 6 ай бұрын

awesome, thanks!

@yuriytimerkhanov1228 Жыл бұрын

Thanks, just in time for me.

@ascode-com Жыл бұрын

happy to help!

@MrTheBroMoe Жыл бұрын

Good video! Hope you’ll make more soon

@ascode-com Жыл бұрын

thank you :) planning on it!

@colossuselka-zc7hb 8 ай бұрын

loved your channell!

@ascode-com 8 ай бұрын

thank you!

@rodgaray 7 ай бұрын

This video is excellent! Please, if you have the time, I would love to see a more "prod" like, it would be amazing!!! Thank you!!!

@ascode-com 7 ай бұрын

great suggestion, i'll keep it in mind for future stuff!

@h3itham 6 ай бұрын

saved my day!

@JaggerMeistification 2 ай бұрын

Subscribed.

@QwickGainz 9 күн бұрын

Did you end up making a video for best practices in terraform? I would love to see it!!

@BeverageOfSorts 6 ай бұрын

what a legend

@aaronl1251 8 ай бұрын

Fantastic tutorial. I appreciate you keeping it simple. If you do create another with fargate and a bit more "prod" worthy config, I would surely not complain. :)

@ascode-com 8 ай бұрын

oh man, eks with fargate is another beast entirely XD i wish you luck

@georgelza 10 ай бұрын

you mentioned terraform best practices... def keen on that, if you can cover the for_each loop also, I've got 9 subnets, 3 groups of 3, across 3 AZ's. so allot of repitition that i'm sure can be done better. thanks for easy to follow video.

@ascode-com 10 ай бұрын

thanks for the topic suggestions! here's some info to get you started: one of the ways you can automate this kind of set up is to dynamically get the az's and use functions like cidrsubnet() to generate the subnets. here's a thorough example: github.com/terraform-aws-modules/terraform-aws-vpc/blob/master/examples/complete/main.tf another way is to use for_each like you mentioned and will be the way to go if you strictly need to define which az's are being used and what subnets they receive. here's an example i've done in the past: github.com/kjpark/terraform-aws-eks-vpc-cni-custom-networking/blob/main/subnets.tf with vars defined like this: (also in that repo's readme) secondary_cidr = "100.64.0.0/16" secondary_subnets = { us-east-1a = "100.64.0.0/18" us-east-1b = "100.64.64.0/18" us-east-1c = "100.64.128.0/18" us-east-1d = "100.64.192.0/18" } personally i like the second option more as its more explicit.

@IceLanderve 11 ай бұрын

Great video. I am looking to configure a basic cluster with existing VPCs and private subnets, I suppose it's as simple as filling in the blanks. Thanks!

@ascode-com 11 ай бұрын

yup! just change the basic vpc config i provided for your own and you should be all set

@anilkumar-jj8gu 10 ай бұрын

thankyou.

@claudiogarcia7557 8 ай бұрын

just Excelent

@ascode-com 8 ай бұрын

thanks

@sukki_43 7 ай бұрын

Hey Amazing and very insightful video can you please make such video more and if possible can you include cloud projects or devops projects that newbies can practice

@ascode-com 7 ай бұрын

hey great suggestion! i'll write that down future ideas

@jonatanmoussandao397 7 ай бұрын

Awesome content. Please if you can cover terraform best practice

@ascode-com 7 ай бұрын

thanks and noted!

@PANDApoopish 10 ай бұрын

Hey! Thanks for the video! How long have you been in DevOps? I'm currently a sysadmin and enjoy practicing devops workflows

@ascode-com 10 ай бұрын

around 2 years for devops things!

@user-pu5md7vo3m 9 ай бұрын

Thats a good tutorial to kick start with EKS using Terraform. Can please advise how should we do the Cluster upgrade using Terraform ?

@ascode-com 9 ай бұрын

this probably deserves a video on its own... but check out these links out for now: aws-ia.github.io/terraform-aws-eks-blueprints/advanced/cluster-upgrades/ and maybe this for a more detailed upgrade aws-ia.github.io/terraform-aws-eks-blueprints/advanced/cluster-upgrades/

@dekooks1543 Жыл бұрын

Brilliant stuff !! But come on now drop the dotfiles 😂

@ascode-com Жыл бұрын

it's not production-grade (one day!) but if you want 'em for reference here ya go :) github.com/kjpark/dotfiles

@sadmanh0 6 ай бұрын

do you know of any resources on how I can use the fargate profiles? So far I have been able to do it with node group like in your video and that works great, but I want to try out serverless as well. From what I understand the problem is that the pods launched by default have an annotation in their yaml that forces them to use the node groups, do we update that? Or just leave those as is and only have our application run on the fargate nodes?

@ascode-com 6 ай бұрын

fargate nodes are pretty niche. i’d use them in tandem with regular nodes if you have to bc they have so many limitations. try using the complete example in the EKS terraform repo as a starter if you need to go down this path

@ragnargaming6887 Ай бұрын

Can you please make videos about aks and gke via terraform as well

@amalviswanathan3254 4 ай бұрын

hey, can you do a quick video on the latest release which is 20.0 which has a major change in configmap and auth section for eks.

@ascode-com 4 ай бұрын

interesting stuff. According to the 20.x upgrade notes... "This sub-module will be removed entirely in the next major release." Looks like major changes are still coming!

@sromankov6102 2 ай бұрын

Like for your great tutorial, please record tf best practices video

@melquisedequecosta9061 11 ай бұрын

I need to configure the release part of the specific users access to clsuter. Do you have any example? I speak here from Brazil :)

@ascode-com 11 ай бұрын

hi from the US! For user access, start by looking at the aws auth configmap section

@ericchagas3298 3 ай бұрын

its run perfect, the only thing that I had problem is about LB, when I create a service.yaml as type load balancer my status always stay as pedding, do you think that miss some module in terraform for it runing well? other thing is about SG...its looks creating more than 1 SG, that gave me problem with LB too....thanks for all man.

@ascode-com 3 ай бұрын

check `kubectl describe svc my-loadbalancer` for the reason. you may need to configure aws load balancer controller and/or add some annotations

@QwickGainz 9 күн бұрын

What would happen if i left both self managed and managed node groups in there? Which would be created? Both?

@NursultanBaitenov 2 ай бұрын

I tried to deploy eks exactly same way like you deployed. but pods are not be scheduled. whatever i wanted to create, status is pending

@PallavJha-os4bw Ай бұрын

How to add your AWS credentials before running the terraform apply?

@user-tu7yt6fn2z 4 ай бұрын

Very informative. I tried to create a GKE Auto Pilot cluster in GCP with a shared VPC private network through terraform, assigned necessary GKE service account permissions, and make sure the control plane, node, ranges IP range and the location are aligned correctly as per the GCP GKE documentation. But stuck with this exception again and again, 'Error: Error waiting for creating GKE cluster: All cluster resources were brought up, but: only 0 nodes out of 1 have registered; cluster may be unhealthy.' Pls share if there is any suggestions to troubleshoot this error ??

@ascode-com 4 ай бұрын

older versions of the gcp autopilot provider had a bug where you had to set an empty ip_allocation_policy github.com/hashicorp/terraform-provider-google/issues/10782 . Not sure if that's your exact issue without knowing more details.

@leibiw 3 ай бұрын

Have you ever run into where the "coreDNS" become degraded? I'm working on a project that trying to launch an EKS that hosts a Minecraft server and every time I run the terraform apply the coredns hangs and end up being degraded in the cluster section in the add-on tab.

@ascode-com 3 ай бұрын

not sure without knowing more but i’d check your plugin versions and terraform / k8s versions. I’d also look at the plugins installed via the console UI to make sure it’s installed properly

@hughesadam87 9 ай бұрын

Do you recommend this over using the eks blueprint libraries. They look cool but docs lacking. Does this create a cloud stack or naw?

@ascode-com 9 ай бұрын

i agree, blueprints look cool but i would avoid bc they're not as popular or have as much support. if you're trying to stick with nodejs i'd take a look at pulumi for IaC. otherwise use terraform

@hughesadam87 9 ай бұрын

@@ascode-com Thanks - I went with eksctl for now but will switch to terraform long term

@ascode-com 9 ай бұрын

@@hughesadam87 eksctl is a great option too!

@user-yp5bt3xw4c 7 ай бұрын

It would be great if you could create a terraform tutorial. Thanks in advance.

@ascode-com 7 ай бұрын

awesome, thanks for the input

@ssn5885 5 ай бұрын

Hey, I have a question, how do i deploy an app and make it accessible over the internet to users with the same repo you have created. Thanks

@ascode-com 5 ай бұрын

You would have to deploy a load balancer and route it to a service for your pods. Typically you would use load balancer controller in aws to do this. Hope that's enough to help you get started!

@ssn5885 5 ай бұрын

@@ascode-com Thanks for your reply. Is it possible to do using terraform ? Do you have any example code to deploy the load balancer?

@anbelko 10 ай бұрын

After deploying service lb had an error: Error syncing load balancer: failed to ensure load balancer: Multiple tagged security groups found for instance i-01d5b3aa46279a7c2; ensure only the k8s security group is tagged; the tagged groups were sg-0a3e3e24c0bc7840c(ascode-cluster-node-20230804045954383900000009) sg-0a4c75831ab5db090(eks-cluster-sg-ascode-cluster-1526614196) Checked, really node instance has 2 sg attached. One sg for nodes, and one that automatically created by EKS. Do you have ideas how to fix it in terraform initial config?

@ascode-com 10 ай бұрын

hey! replied in discord but linking the workaround here if anybody else has the same issue github.com/terraform-aws-modules/terraform-aws-eks/issues/1810#issuecomment-1021202184

@raypi2297 3 ай бұрын

If I never use terraform for provisioning before, can I use terraform for create only EKS ?

@ascode-com 3 ай бұрын

yes you can. you'll just have to select (data resource or hardcode) your existing resources in

@TikTokTrendsCompilation 9 ай бұрын

make a tutorial with complete automated pipeline workflow deploying frontend + backend using - terraform - eks - argocd - jenkins - sonarqube - trivy

@ascode-com 9 ай бұрын

good topics to cover! i'll keep that noted thanks

@devd6800 5 ай бұрын

8:36 what is "upstream" VPC module?

@ascode-com 5 ай бұрын

upstream refers to the official AWS VPC module maintained by hashicorp registry.terraform.io/modules/terraform-aws-modules/vpc/aws/latest

@C.RonaldoCR7G 6 ай бұрын

Please help with Terraforj set up video 🙏🏾

@ascode-com 6 ай бұрын

noted m8. haven't had much time these days but it's still on the list

@C.RonaldoCR7G 6 ай бұрын

@@ascode-com thanks so much

@sukhwinder101 11 ай бұрын

just confused ... how local.name is same as config in locals --- should it not be locals.name ?

@ascode-com 11 ай бұрын

hi, it's called locals when being declared, local.xyz is the syntax when referring to them. More here: developer.hashicorp.com/terraform/language/values/locals

@nivethav1589 3 ай бұрын

did't have "complete" option in github

@ascode-com 3 ай бұрын

you're right it looks like they updated the examples. I think eks-managed or self-managed are still good places to start.

@baibhavghimire3827 11 ай бұрын

Personally I don’t like using remote modules . How would you deploy this cluster in different region ? Definitely I would go with my own module and call them from main module.

@ascode-com 11 ай бұрын

remote's probably the easiest but i hear ya. region is configurable in the locals.

@MdAshraf007 6 ай бұрын

hi, no videos since 6 months, are you doing well?

@ascode-com 6 ай бұрын

haha yeah i'm alive, been wanting to get back into it but life's just so busy. channel is a side project of mine but def not abandoned!! thanks for asking

@MdAshraf007 6 ай бұрын

@@ascode-com good to hear and Take care