How to Create EKS Cluster Using eksctl? (Public & Private & Existing VPC & IRSA & Auto Scaling)

How to Create EKS Cluster Using eksctl? (Public & Private & Existing VPC & IRSA & Auto Scaling)

Source: YouTube · Anton Putra · published Mar 14, 2022 · 22:07

Cloud Security
No ratings yet Log in to rate
Transcript Available
Description

This video demonstrates how to use eksctl, considered the fastest and easiest tool for creating and managing Kubernetes clusters on AWS EKS 0:00.

Key Takeaways:
IAM Setup: Create a dedicated IAM user with specific policies for EKS, EC2, and CloudFormation to securely manage cluster infrastructure 1:12.
Cluster Configurations: You can create simple public clusters via the CLI or use YAML configs for advanced setups, such as private nodes and spot instances 5:40.
Existing VPC: Configure eksctl to deploy clusters within a pre-existing AWS VPC by manually specifying subnet IDs and availability zones 15:05.
IAM & OIDC: Enable OpenID Connect to map AWS IAM roles to Kubernetes service accounts, allowing pods to securely access AWS services like S3 16:24.
Autoscaling: Deploy the cluster autoscaler component to automatically adjust the number of nodes based on the workload demand 19:54.

The tutorial covers essential eksctl workflows, ranging from basic cluster creation to advanced networking and permissions management 21:38.

Sources:

  • 0:00 Introduction to eksctl
  • 1:12 IAM user and policy creation
  • 5:40 Basic and private cluster creation
  • 15:05 Using an existing VPC
  • 16:24 IAM Roles for Service Accounts (IRSA)
  • 19:54 Cluster autoscaler setup

Generate CPE Credits

Generate a professional CPE document from this video's transcript.

Estimated credit: 0.5 CPE hours

Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.

Topic: Cloud Security. Commonly maps to: Security Architecture and Engineering, Communication and Network Security. Exact CISSP domains are assigned during generation.

CISSP Domain Mapping
Learning Objectives
Self-Assessment Questions
PDF Export Ready

Free account. One generation at a time, with a daily limit.

CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.

Watch on YouTube

Transcript Preview

First 800 characters of the transcript

In this video, I'll show you how to use the
eksctl tool to quickly create the EKS cluster in AWS. I think it's the easiest and fastest way to
get up to speed with Kubernetes in AWS. First, we will create a dedicated user for
eksctl and set up a local aws profile. For the first demo, we will simply use create
command and rely on the eksctl defaults to create a cluster. For the second one, we will use YAML config
and create a private cluster where Kubetnes nodes will have only private IPs and a NAT
gateway to access the internet. The following example will demonstrate how
to create an EKS cluster in the existing VPC. We will quickly create VPC with two public
and two private subnets in two different availability zones. Then we will configure eksctl to use them
to create a cluster. In the fin…