Create EKS Cluster with Terraform EKS Blueprints

🔴 - To support my channel, I’d like to offer Mentorship/On-the-Job Support/Consulting - [e-mail]
👉 [UPDATED] AWS EKS Kubernetes Tutorial [NEW]: • AWS EKS Kubernetes Tut...
▬▬▬▬▬ Experience & Location 💼 ▬▬▬▬▬
► I’m a Senior Software Engineer at Juniper Networks (12+ years of experience)
► Located in San Francisco Bay Area, CA (US citizen)
▬▬▬▬▬▬ Connect with me 👋 ▬▬▬▬▬▬
► LinkedIn: / anton-putra
► Twitter/X: / antonvputra
► GitHub: github.com/antonputra
► Email: [e-mail]
▬▬▬▬▬▬ Related videos 👨‍🏫 ▬▬▬▬▬▬
👉 [Playlist] Kubernetes Tutorials: • Kubernetes Tutorials
👉 [Playlist] Terraform Tutorials: • Terraform Tutorials fo...
👉 [Playlist] Network Tutorials: • Network Tutorials
👉 [Playlist] Apache Kafka Tutorials: • Apache Kafka Tutorials
👉 [Playlist] Performance Benchmarks: • Performance Benchmarks
👉 [Playlist] Database Tutorials: • Database Tutorials
▬▬▬▬▬▬▬ Timestamps ⏰ ▬▬▬▬▬▬▬
0:00 Intro
1:23 Create VPC using Terraform
3:53 Create EKS using Terraform
5:44 EBS CSI Driver
7:51 EFS CSI Driver
12:25 AWS Load Balancer Controller
14:30 Metrics server, Cert-manager and Cluster Autoscaler
15:54 Karpenter
18:04 EKS Fargate Profile
19:11 Add IAM Role to EKS
▬▬▬▬▬▬▬ Source Code 📚 ▬▬▬▬▬▬▬
► GitHub: github.com/antonputra/tutoria...
#kubernetes #eks #aws

[@AntonPutra]

🔴 - To support my channel, I’d like to offer Mentorship/On-the-Job Support/Consulting - [e-mail] 👉 [UPDATED] AWS EKS Kubernetes Tutorial [NEW]: kzbin.info/aero/PLiMWaCMwGJXnKY6XmeifEpjIfkWRo9v2l&si=wc6LIC5V2tD-Tzwl

[@prashlovessamosa]

Your videos are very informative thanks for sharing knowledge sir.

[@omkarchavan7750]

Bro, really needed this video regarding the eks addon using the terraform, please make more videos on terraform sub-modules like reloader, external-DNS, kubecost etc. Thanks a lot!

[@AntonPutra]

Thanks Omkar, will do

[@aarus6]

You are a gift to the IT community. You are the best!

[@AntonPutra]

❤️

[@aarus6]

@@AntonPutra I'm able to learn Karpenter from this code. It looks like the new node can get provisioned only on private subnets. May be best practices from the eks blueprint?

[@sperformance.96]

Nice content bro really helpful 👏

[@AntonPutra]

Thank you 🙌

[@rritsoftwaresolutions9566]

hi putra , nice videos

[@AntonPutra]

Thanks!

[@MaxDevil1989]

Hi Anton, Great video. Although the EKS blueprints makes it super simple to deploy production grade EKS cluster, one of the biggest challenges I see is how to upgrade such cluster (deployed via blueprints). Do you have any thoughts/advise on it ? Thanks Btw I went through all the EKS video on your channel. Clearly one of the best resources on KZbin on k8s.

[@AntonPutra]

Thanks, Sami! Yes, it's hard to maintain, especially after they removed the v4 modules, lol. I would suggest using those "blueprints" only for consulting jobs and not if you need to maintain your clusters yourself.

[@piravitchenpittaya4548]

Thanks for sharing. I am new to terraform but I wonder at the intro “in long run, using this module can become a nightmare because for blueprint are wrapper of other modules” what is actually mean? it would be hard to customize? so we should not use it or else?

[@AntonPutra]

Even now, I would say that EKS blueprints are dead. They've deprecated v4 modules already, so it's impossible to maintain the infrastructure that you've already created. Use blueprints for consulting jobs, but build your own for internal use. That's my opinion.

[@georgelza]

@ the 3:30 mar you tie your VPC to public, private subnets, from what I can determine those are like reserved words. if I want to use module vac, but have a public, web, app, database and management subnets, how would I do this with a vpc based on a module? thank you for this video, love how you show example of using resources and modules interchangeable... working through video.code trying to map it to my requirements, my old 1.20 scripts that I had very badly broke with some of the newer EKS Blueprint changes, have you tried this script against EKS 1.27 and the newest Tf stack ? they seem to be changing things very fast on the back end. happy to share my code as example... for someone to use if we can modify it to get it working again,.

[@AntonPutra]

in vpc module you have 2 output variables github.com/antonputra/tutorials/blob/main/lessons/156/terraform/7-blueprints.tf#L31 module.vpc.private_subnets & module.vpc.public_subnets

[@georgelza]

@@AntonPutra I'm aware there are others like elastic, redshift... would have been great if it was more free form. not a form of this strigent set...

[@2mahender]

nice videos, can i use ACM instead of certmanager?

[@AntonPutra]

Sure, create cert and use annotation with arn

[@georgelza]

Anton, any chance you can on purpose build a 1.22 cluster and then cover how to upgrade it... ie via the console or via Tf. G

[@AntonPutra]

I can, but what the issue there?

[@georgelza]

@@AntonPutra the process, do i do it via was console... or via tf, just bump the version there, as it seems was console is also implying there are new AMi's for some of the node group nodes.

[@juandavidmarin230]

thanks for sharing these awesome videos and code in github as well!, I tried following your steps but when running terraform init I got Error: Failed to expand subdir globs │ │ subdir "modules/kubernetes-addons/helm-addon" not found is there any fix for it maybe ?, thanks in advance

[@AntonPutra]

I would advise against using EKS blueprints anymore.

[@georgelza]

Anton, you have a module based vpc 6-vpc... and 1-vpc based on resources, how did it know which to execute ? thinking... as you linked the module to the elks it created dependency preference ?, if we used the resource based option and resource based subnets then the module would have been ignored ?

[@AntonPutra]

In the video I explain how to use both. Here is the example to link to raw vpc terraform github.com/antonputra/tutorials/blob/main/lessons/156/terraform/7-blueprints.tf#L27-L30 Here to link to vpc module - github.com/antonputra/tutorials/blob/main/lessons/156/terraform/7-blueprints.tf#L31

[@georgelza]

@@AntonPutra just curious, have you tried this with elks 1.27 stack, they seem to have made major changes recently, things that always worked now does not. trying to copy your examples into my Tf scripts. if it works will share via email with you.

[@AntonPutra]

@@georgelza there is a huge breaking changes related to cgroups v2 and applications that use master slave proces architecture. I’ll update soon

[@georgelza]

@@AntonPutra I got my EKS cluster created... having problems with the add ons. will email you the git repo link...

[@luisswimer]

How to attach gp3 volumes to worker nodes?? what are the attributes for "managed_node_groups" ?

[@AntonPutra]

You can create launch template and use it for managed node group

[@pier_x0]

Great Tutorial Anton, thanks you so much, you're becoming my reference :D Like and subscribe absolutely required!!!! I've understood it's not possible mix karpeneter with node autoscaler and now is clear why I can use node autoscaler with Fargate, as you explained, I think because Fargate uses a profile and it doesn't compete with the node autoscaler Can I use karpenter with Fargate? I think yes, because Fargate uses a profile as above

[@AntonPutra]

Yes, you can. If you select fargate nodes, karpenter won't do anything

[@user-ge4zm6iw7v]

Hi, by using this configuration, the architecture is not affected by the breaking changes in eks blueprints v5?

[@AntonPutra]

it will be affected

[@user-ge4zm6iw7v]

​@@AntonPutra Are you planning to update this one? As dar as I understand what need to be updated is the main module right? from eks_blueprints to eks

[@ingofoerster6398]

Great Video. But finaly while apply the terraform I get always unauthorized errors. Any idea?

[@AntonPutra]

I think they removed the old EKS blueprint modules. The unauthorized error is most likely due to that.

[@wkhatch]

the blueprint add ons module seems broken; trying to use it results in missing submodule errors. subdir "modules/kubernetes-addons/helm-addon" not found

[@AntonPutra]

I know, don't use them

[@trojanhorses4760]

Hey Anton, the modules from the blueprints repo was removed from v5, why would that be?

[@AntonPutra]

EKS blueprints are already dead, lol.

[@salimabdul4703]

Do you have a guide how to run EKS with autoscaler properly? I mean if EKS blueprints are dead then what should we use?@@AntonPutra

[@AntonPutra]

@@salimabdul4703Yes, I have a lot of tutorials with cluster autoscaler or karpenter, here is an example - github.com/antonputra/tutorials/tree/main/lessons/160

[@georgelza]

Anton, to which lesson does this video link?

[@AntonPutra]

This is a source code for the video if that's the question - github.com/antonputra/tutorials/tree/main/lessons/156

[@vimaximus1360]

didn't understand anything, but thats my problem 🤣 great vid anyway

[@AntonPutra]

thanks =)

[@user-dv7rw4lu3e]

kudos on great content Anton! A quick question : is it only me whose ingress resource doesn't get an external address?I've tried the blueprint more than a couple of times but failed so far

[@AntonPutra]

Thanks! You can check if the nginx ingress pod is created with publish service flag. But generally it's not necessary for ingress to work, you can get the nginx service and use it for your DNS. It's the same thing. Also you can describe the ingress, you may get an error

[@youngolutosin1658]

Most likely is due to the cluster name variation

[@agun21st]

Sir you didnt show after enable Cert-manager=true on kubernetes addons how to get certificate by app ingress. I tried many way but still failed again and again for issue certificate with sub domain. Please help me. I have cert manager by enable true but after how to get certificate for an app?

[@AntonPutra]

I have couple of tutorials that can help you 1. Cert Manager Kubernetes Tutorial - kzbin.info/www/bejne/bZ6XkJ6QhLSVsNk 2. NGINX Ingress Controller for Kubernetes Tutorial - kzbin.info/www/bejne/b6SveaJ7rrekbtk

[@agun21st]

@@AntonPutra Thank you so much sir. I have done by Cert Manager Kubernetes Tutorial. :D😇

[@AntonPutra]

@@agun21st glad that it helped =)

[@AntonPutra]

🟢 [New] Terragrunt Tutorial: Create VPC, EKS from Scratch! (Step-by-Step) - kzbin.info/www/bejne/r5XYeZSFn5iLg8k

[@AntonPutra]

Get Full-Length High-Quality DevOps Tutorials for Free - Subscribe Now! - kzbin.info