I was going by this update for EKS https://aws.amazon.com/about-aws/whats-new/2020/03/amazon-eks-adds-envelope-encryption-for-secrets-with-aws-kms/ and this blog from AWS https://aws.amazon.com/blogs/containers/using-eks-encryption-provider-support-for-defense-in-depth/. This is a very cryptic line which never confirms whether EKS encrypts secrets or not by default In EKS, we operate the etcd volumes encrypted…
I have a Terraform codebase which deploys a private EKS cluster, a bastion host and other AWS services. I have also added a few security groups to the in Terraform. One of the security groups allows inbound traffic from my…
I'm currently trying to monitor the EKS Node group status, sometimes my node groups show degraded and I want a CloudWatch alert whenever the status is in a Degraded state, I checked CloudWatch Metrics there are no standard metrics, and…
I've an EKS cluster in AWS. [cloudshell-user@ip-10-0-87-109 ~]$ kubectl version --short Kubeconfig user entry is using deprecated API version client.authentication.k8s.io/v1alpha1. Run 'aws eks update-kubeconfig' to update. Client Version: v1.23.7-eks-4721010 Server Version: v1.20.11-eks-f17b81 [cloudshell-user@ip-10-0-87-109 ~]$ kubectl get nodes Kubeconfig user entry…
Background Hi all, Terraform newbie here. I'm trying to poll an existing AWS certificate ARN and use that value in my ingress.tf file ingress object annotation. As a first step, I tried to poll the value using the below terraform…
**Unable to connect to the server: getting credentials: decoding stdout: no kind "ExecCredential" is registered for version "client.authentication.k8s.io/v1alpha1" in scheme "pkg/client/auth/exec/exec.go:62" ** 2022-09-16 16:35:00 [ℹ] eksctl version 0.111.0 2022-09-16 16:35:00 [ℹ] using region ap-south-1 2022-09-16 16:35:00 [ℹ] skipping ap-south-1c from…
after setting up my cluster tried to connect to my cluster. test everything is fine. but getting below error. command i executed: kubectl get svc Error i get: Unable to connect to the server: getting credentials: decoding stdout: no kind…
I'm running aws ebs csi driver inside aws eks 1.23 cluster via helm chart. I have PVCs provisioned with gp2 storage class PV is not being deleted once PVC is deleted. version of aws ebs csi driver ➜ helm search…
The Karpenter default OS, Amazon Linux 2 (AL2), accepts shell scripts (bash commands). Karpenter supports using custom launch templates In the default configuration, Karpenter uses an EKS optimized version of AL2 (Amazon Linux 2) (https://karpenter.sh/v0.13.2/aws/launch-templates/) and passes the hostname of…
I have successfully installed the AWS EBS CSI driver to my EKS cluster. This is meant to be using the "IAM Role for Service Account" technique. I am trying to utilise the checkout example app that AWS have given here…