How to Deploy AWS EKS with Terraform - The Simplest Guide to Get Up and Running

In this video, I go over the quickest and simplest way of getting AWS Elastic Kubernetes Service (EKS) up and running using Terraform for deployment. We go over the basic configuration options and end up with a fully functional working EKS cluster by the end of the video.
Code from the video can be found free on Github 🐙
github.com/asc...
Let me know what questions you have, content you'd like to see, and come check out the discord and twitter!
Relevant Links 🔗
Terraform Registry Page for EKS Module: registry.terra...
Terraform EKS Module Source Code: github.com/ter...
Get in touch 🚀
Discord: / discord
LinkedIn: / jedidiahpark
Twitter: / jediascode
Website: ascode.com

[@AllisonSolanoFlores]

I vote for the Terraform video. You explain very well.

[@ascode-com]

thank you so much!

[@taniallady]

Mate, that's the easiest and most feature-packed k8s @ aws tutorial I've ever seen, huge thanks!!!!!!!

[@ascode-com]

thanks! glad i could help out

[@GoatOnATrain]

I just spent days trying to wrap my head around EKS with Terraform and trying to configure permissions. I even found the same module and the same example, but it's a massive file with no real explanation for what's going on in it. Thank you so much. And yes, I would like you to do a best practices video with all the goodness.

[@ascode-com]

happy to help!

[@PatoxMaia]

10 months later, this is still saving hours of work. My first time dealing with Terraform and I learned all I needed today from this video. Thanks for taking the time to share this.

[@AungBaw]

Dude! you came back, do more videos. Thanks. 9:05 context switch was lighting fast

[@ascode-com]

thanks m8 :)

[@jingliliu-x5o]

I stumbled two times into your clip. First time is in my preparation for CKA, second time is for a example to deploy a EKS cluster with terraform. Now I realize you have a total of six clips. I think you do great tutorials. You remind me of the python tutor Angela Yu who had 2 million students. Please keep doing more.

[@ascode-com]

that's awsome haha and thank you so much!

[@Jay2Ops]

I will appreciate a Terraform Tutorial. This was helpful as well.

[@ascode-com]

awesome, thanks for the input

[@OlawaleoOgundare]

I love the simplicity and I tried it and its running, bravo. Thanks. And I like your color gradient and your cap.

[@ascode-com]

hi thanks so much!

[@subgero]

That was pretty easy man, thank you!

[@andrewnhien9714]

Thank you. Please make more video about Terraform follow best practises. Hope see you soon!

[@ascode-com]

popular request so i'm working on putting some things together! thanks :)

[@oshoshoshoshosh]

Awesome work, clear explanations, very well done. You rock!

[@ascode-com]

no you rock!

[@level.IT.up.training]

Great video, very informative and very well put together 👍

[@ThePragmaticAutomator]

Terraform tutorial will be great!

[@ascode-com]

heard, seems like a popular request so i'll keep that in mind for future vids! thanks

[@zvimelkman4407]

I'd b more than happy for that terraform video u talked about.

[@mahmoudhassan1324]

thanks a lot for the video. i was asked for a task as a test to start my new carrier and this really helps with a huge part of it. keep going bro

[@ascode-com]

getting started is the hardest part! you got this!

[@ciscoboy-devon1732]

This was awesome! Very well detailed & explained, Thanks for sharing 💪I am currently working on Cluster AutoScalers on EKS as well HPA's. I seem to have the Cluster Autoscaler on point, HPA's is my next ball game. Great to see you back in action!

[@ascode-com]

hey good to see you again!! and that's sick, wishing you minimal errors and bugs!

[@rodgaray]

This video is excellent! Please, if you have the time, I would love to see a more "prod" like, it would be amazing!!! Thank you!!!

[@ascode-com]

great suggestion, i'll keep it in mind for future stuff!

[@mfich]

Great tutorial! I'm interested in the full terraform best practice guide you mentioned.

[@ascode-com]

awesome, thanks!

[@brunopaz1645]

I really love you! It has been a brutal support for a problem I had! Thx!!!

[@patorikusutaru7483]

i complete the course and just leave it be, not realizing the node group still active and charge me for over 80$ for an empty cluster. thanks ascode :)

[@irisluxton]

9:05 nice transition =)))

[@campagnollo]

The complete folder in github is now gone. Unable to follow.

[@sarangsawant4497]

Good explanation, thank you :)

[@JeffInTech]

This helped me alot!!! thank you!

[@colossuselka-zc7hb]

loved your channell!

[@ascode-com]

thank you!

[@georgelza]

you mentioned terraform best practices... def keen on that, if you can cover the for_each loop also, I've got 9 subnets, 3 groups of 3, across 3 AZ's. so allot of repitition that i'm sure can be done better. thanks for easy to follow video.

[@ascode-com]

thanks for the topic suggestions! here's some info to get you started: one of the ways you can automate this kind of set up is to dynamically get the az's and use functions like cidrsubnet() to generate the subnets. here's a thorough example: github.com/terraform-aws-modules/terraform-aws-vpc/blob/master/examples/complete/main.tf another way is to use for_each like you mentioned and will be the way to go if you strictly need to define which az's are being used and what subnets they receive. here's an example i've done in the past: github.com/kjpark/terraform-aws-eks-vpc-cni-custom-networking/blob/main/subnets.tf with vars defined like this: (also in that repo's readme) secondary_cidr = "100.64.0.0/16" secondary_subnets = { us-east-1a = "100.64.0.0/18" us-east-1b = "100.64.64.0/18" us-east-1c = "100.64.128.0/18" us-east-1d = "100.64.192.0/18" } personally i like the second option more as its more explicit.

[@eduardoangulo8427]

Why you stopped doing this? You are a fucking master! Thanks a lot 👏

[@yuriytimerkhanov1228]

Thanks, just in time for me.

[@ascode-com]

happy to help!

[@aaronl1251]

Fantastic tutorial. I appreciate you keeping it simple. If you do create another with fargate and a bit more "prod" worthy config, I would surely not complain. :)

[@ascode-com]

oh man, eks with fargate is another beast entirely XD i wish you luck

[@h3itham]

saved my day!

[@NerdyPickle-moe]

Good video! Hope you’ll make more soon

[@ascode-com]

thank you :) planning on it!

[@BeverageOfSorts]

what a legend

[@QwickGainz]

Did you end up making a video for best practices in terraform? I would love to see it!!

[@ascode-com]

may break it out into different videos - like the one i made on terraform plan/apply! kzbin.info/www/bejne/nXiodaSOg9uJjLM

[@HiamnDrew]

Subscribed.

[@WompaStompa8688]

Great video! Question about the complete folder in github. It seems to be gone now, just FYI

[@dekooks1543]

Brilliant stuff !! But come on now drop the dotfiles 😂

[@ascode-com]

it's not production-grade (one day!) but if you want 'em for reference here ya go :) github.com/kjpark/dotfiles

[@jonatanmoussandao397]

Awesome content. Please if you can cover terraform best practice

[@ascode-com]

thanks and noted!

[@sukki_43]

Hey Amazing and very insightful video can you please make such video more and if possible can you include cloud projects or devops projects that newbies can practice

[@ascode-com]

hey great suggestion! i'll write that down future ideas

[@rajeshaussie]

Thats a good tutorial to kick start with EKS using Terraform. Can please advise how should we do the Cluster upgrade using Terraform ?

[@ascode-com]

this probably deserves a video on its own... but check out these links out for now: aws-ia.github.io/terraform-aws-eks-blueprints/advanced/cluster-upgrades/ and maybe this for a more detailed upgrade aws-ia.github.io/terraform-aws-eks-blueprints/advanced/cluster-upgrades/

[@amalviswanathan3254]

hey, can you do a quick video on the latest release which is 20.0 which has a major change in configmap and auth section for eks.

[@ascode-com]

interesting stuff. According to the 20.x upgrade notes... "This sub-module will be removed entirely in the next major release." Looks like major changes are still coming!

[@sadmanh0]

do you know of any resources on how I can use the fargate profiles? So far I have been able to do it with node group like in your video and that works great, but I want to try out serverless as well. From what I understand the problem is that the pods launched by default have an annotation in their yaml that forces them to use the node groups, do we update that? Or just leave those as is and only have our application run on the fargate nodes?

[@ascode-com]

fargate nodes are pretty niche. i’d use them in tandem with regular nodes if you have to bc they have so many limitations. try using the complete example in the EKS terraform repo as a starter if you need to go down this path

[@ericchagas3298]

its run perfect, the only thing that I had problem is about LB, when I create a service.yaml as type load balancer my status always stay as pedding, do you think that miss some module in terraform for it runing well? other thing is about SG...its looks creating more than 1 SG, that gave me problem with LB too....thanks for all man.

[@ascode-com]

check `kubectl describe svc my-loadbalancer` for the reason. you may need to configure aws load balancer controller and/or add some annotations

[@Deevg-f9e]

Very informative. I tried to create a GKE Auto Pilot cluster in GCP with a shared VPC private network through terraform, assigned necessary GKE service account permissions, and make sure the control plane, node, ranges IP range and the location are aligned correctly as per the GCP GKE documentation. But stuck with this exception again and again, 'Error: Error waiting for creating GKE cluster: All cluster resources were brought up, but: only 0 nodes out of 1 have registered; cluster may be unhealthy.' Pls share if there is any suggestions to troubleshoot this error ??

[@ascode-com]

older versions of the gcp autopilot provider had a bug where you had to set an empty ip_allocation_policy github.com/hashicorp/terraform-provider-google/issues/10782 . Not sure if that's your exact issue without knowing more details.

[@IceLanderve]

Great video. I am looking to configure a basic cluster with existing VPCs and private subnets, I suppose it's as simple as filling in the blanks. Thanks!

[@ascode-com]

yup! just change the basic vpc config i provided for your own and you should be all set

[@leibiw]

Have you ever run into where the "coreDNS" become degraded? I'm working on a project that trying to launch an EKS that hosts a Minecraft server and every time I run the terraform apply the coredns hangs and end up being degraded in the cluster section in the add-on tab.

[@ascode-com]

not sure without knowing more but i’d check your plugin versions and terraform / k8s versions. I’d also look at the plugins installed via the console UI to make sure it’s installed properly

[@claudiogarcia7557]

just Excelent

[@ascode-com]

thanks

[@ragnargaming6887]

Can you please make videos about aks and gke via terraform as well

[@ascode-com]

i'll consider it! thanks for the suggestion

[@ssn5885]

Hey, I have a question, how do i deploy an app and make it accessible over the internet to users with the same repo you have created. Thanks

[@ascode-com]

You would have to deploy a load balancer and route it to a service for your pods. Typically you would use load balancer controller in aws to do this. Hope that's enough to help you get started!

[@ssn5885]

@@ascode-com Thanks for your reply. Is it possible to do using terraform ? Do you have any example code to deploy the load balancer?

[@QwickGainz]

What would happen if i left both self managed and managed node groups in there? Which would be created? Both?

[@ascode-com]

yep! you'd create multiple node groups

[@sherifsalem-r5v]

It would be great if you could create a terraform tutorial. Thanks in advance.

[@ascode-com]

awesome, thanks for the input

[@justinstoddard4782]

Is the "EKS" module truly what everyone uses for ACTUAL production?

[@anbelko]

After deploying service lb had an error: Error syncing load balancer: failed to ensure load balancer: Multiple tagged security groups found for instance i-01d5b3aa46279a7c2; ensure only the k8s security group is tagged; the tagged groups were sg-0a3e3e24c0bc7840c(ascode-cluster-node-20230804045954383900000009) sg-0a4c75831ab5db090(eks-cluster-sg-ascode-cluster-1526614196) Checked, really node instance has 2 sg attached. One sg for nodes, and one that automatically created by EKS. Do you have ideas how to fix it in terraform initial config?

[@ascode-com]

hey! replied in discord but linking the workaround here if anybody else has the same issue github.com/terraform-aws-modules/terraform-aws-eks/issues/1810#issuecomment-1021202184

[@hughesadam87]

Do you recommend this over using the eks blueprint libraries. They look cool but docs lacking. Does this create a cloud stack or naw?

[@ascode-com]

i agree, blueprints look cool but i would avoid bc they're not as popular or have as much support. if you're trying to stick with nodejs i'd take a look at pulumi for IaC. otherwise use terraform

[@hughesadam87]

@@ascode-com Thanks - I went with eksctl for now but will switch to terraform long term

[@ascode-com]

@@hughesadam87 eksctl is a great option too!

[@melquisedequecosta9061]

I need to configure the release part of the specific users access to clsuter. Do you have any example? I speak here from Brazil :)

[@ascode-com]

hi from the US! For user access, start by looking at the aws auth configmap section

[@raypi2297]

If I never use terraform for provisioning before, can I use terraform for create only EKS ?

[@ascode-com]

yes you can. you'll just have to select (data resource or hardcode) your existing resources in

[@NursultanBaitenov]

I tried to deploy eks exactly same way like you deployed. but pods are not be scheduled. whatever i wanted to create, status is pending

[@ascode-com]

try checking the logs and describe for more info

[@TheCalax]

I'm a total noob and therefore have a question. We now deployed EKS with Terraform, how do I proceed from here? Using Kubernetes to deploy my application, load balancer, subnets etc?

[@ascode-com]

good questions! check my other video on getting a demo app running kzbin.info/www/bejne/nWqooo2fibx_faM

[@ascode-com]

also join the discord if you want some support / discussion!

[@devd6800]

8:36 what is "upstream" VPC module?

[@ascode-com]

upstream refers to the official AWS VPC module maintained by hashicorp registry.terraform.io/modules/terraform-aws-modules/vpc/aws/latest

[@sudo-bandit]

Hey! Thanks for the video! How long have you been in DevOps? I'm currently a sysadmin and enjoy practicing devops workflows

[@ascode-com]

around 2 years for devops things!

[@PJ-os4bw]

How to add your AWS credentials before running the terraform apply?

[@ascode-com]

multiple ways to do this! easiest way is to configure your shell environment via awscli. you can make and use an access key. Here's general info: docs.aws.amazon.com/cli/v1/userguide/cli-chap-authentication.html

[@TikTokTrendsCompilation]

make a tutorial with complete automated pipeline workflow deploying frontend + backend using - terraform - eks - argocd - jenkins - sonarqube - trivy

[@ascode-com]

good topics to cover! i'll keep that noted thanks

[@BasimHassan-o6j]

love u

[@anilkumar-jj8gu]

thankyou.

[@sromankov6102]

Like for your great tutorial, please record tf best practices video

[@sukhwinder101]

just confused ... how local.name is same as config in locals --- should it not be locals.name ?

[@ascode-com]

hi, it's called locals when being declared, local.xyz is the syntax when referring to them. More here: developer.hashicorp.com/terraform/language/values/locals

[@essamal-mansouri2689]

"Complete" is not one of the examples anymore. It is only self managed, or aws managed. I'm having a lot of trouble getting it to work without making the endpoint public

[@MdAshraf007]

hi, no videos since 6 months, are you doing well?

[@ascode-com]

haha yeah i'm alive, been wanting to get back into it but life's just so busy. channel is a side project of mine but def not abandoned!! thanks for asking

[@MdAshraf007]

@@ascode-com good to hear and Take care

[@baibhavghimire3827]

Personally I don’t like using remote modules . How would you deploy this cluster in different region ? Definitely I would go with my own module and call them from main module.

[@ascode-com]

remote's probably the easiest but i hear ya. region is configurable in the locals.

[@nivethav1589]

did't have "complete" option in github

[@ascode-com]

you're right it looks like they updated the examples. I think eks-managed or self-managed are still good places to start.

[@manideepsaipolavarapu272]

1000nd like

[@Denis-bj7ob]

most of video is about deleting code :)

[@kylan_11]

You haven't explained anything, I guess copy pasting a module and cutting 90% of the code for "simplicity" without explaining what or why is called a tutorial these days huh