base on The official CLI for Amazon EKS # `eksctl` - The official CLI for Amazon EKS ! <img src="userdocs/src/img/logo.png" alt="eksctl" width="4%"/> [](https://goreportcard.com/report/github.com/eksctl-io/eksctl) `eksctl` is a simple CLI tool for creating clusters on EKS - Amazon's new managed Kubernetes service for EC2. It is written in Go, and uses CloudFormation. You can create a cluster in minutes with just one command – **`eksctl create cluster`**!  _Need help? Join [Eksctl Slack][slackjoin]._ ## New: EKS Auto Mode Support `eksctl` now supports EKS Auto Mode! EKS Auto Mode automates routine tasks for cluster compute, storage, and networking. * Learn how to [create an EKS Auto Mode Cluster with eksctl](https://docs.aws.amazon.com/eks/latest/userguide/automode-get-started-eksctl.html). * Review the [eksctl docs](https://github.com/eksctl-io/eksctl/blob/main/userdocs/src/usage/auto-mode.md) for EKS Auto Mode. Version 0.195.0 or greater is required. ## New: EKS Hybrid Nodes Support `eksctl` now supports EKS Hybrid Nodes! Hybrid Nodes enables you to run on-premises and edge applications on customer-managed infrastructure with the same AWS EKS clusters, features, and tools you use in the AWS Cloud. * For more information, see [Amazon EKS Hybrid Nodes overview](https://docs.aws.amazon.com/eks/latest/userguide/hybrid-nodes-overview.html) in the EKS User Guide. * Review the [eksctl docs](https://github.com/eksctl-io/eksctl/blob/main/userdocs/src/usage/hybrid-nodes.md) for EKS Hybrid Nodes. Version 0.195.0 or greater is required. ## Installation `eksctl` is available to install from official releases as described below. We recommend that you install `eksctl` from only the official GitHub releases. You may opt to use a third-party installer, but please be advised that AWS does not maintain nor support these methods of installation. Use them at your own discretion. ### Prerequisite You will need to have AWS API credentials configured. What works for AWS CLI or any other tools (kops, Terraform, etc.) should be sufficient. You can use [`~/.aws/credentials` file][awsconfig] or [environment variables][awsenv]. For more information read [AWS documentation](https://docs.aws.amazon.com/cli/latest/userguide/cli-environment.html). [awsenv]: https://docs.aws.amazon.com/cli/latest/userguide/cli-environment.html [awsconfig]: https://docs.aws.amazon.com/cli/latest/userguide/cli-config-files.html You will also need [AWS IAM Authenticator for Kubernetes](https://github.com/kubernetes-sigs/aws-iam-authenticator) command (either `aws-iam-authenticator` or `aws eks get-token` (available in version 1.16.156 or greater of AWS CLI) in your `PATH`. The IAM account used for EKS cluster creation should have these minimal access levels. | AWS Service | Access Level | |------------------|--------------------------------------------------------| | CloudFormation | Full Access | | EC2 | **Full:** Tagging **Limited:** List, Read, Write | | EC2 Auto Scaling | **Limited:** List, Write | | EKS | Full Access | | IAM | **Limited:** List, Read, Write, Permissions Management | | Systems Manager | **Limited:** List, Read | The inline policy json is listed in [Minimal IAM Policies](https://eksctl.io/usage/minimum-iam-policies/). ### For Unix To download the latest release, run: ```sh # for ARM systems, set ARCH to: `arm64`, `armv6` or `armv7` ARCH=amd64 PLATFORM=$(uname -s)_$ARCH curl -sLO "https://github.com/eksctl-io/eksctl/releases/latest/download/eksctl_$PLATFORM.tar.gz" # (Optional) Verify checksum curl -sL "https://github.com/eksctl-io/eksctl/releases/latest/download/eksctl_checksums.txt" | grep $PLATFORM | sha256sum --check tar -xzf eksctl_$PLATFORM.tar.gz -C /tmp && rm eksctl_$PLATFORM.tar.gz sudo mv /tmp/eksctl /usr/local/bin ``` ### For Windows #### Direct download (latest release): [AMD64/x86_64](https://github.com/eksctl-io/eksctl/releases/latest/download/eksctl_windows_amd64.zip) - [ARMv6](https://github.com/eksctl-io/eksctl/releases/latest/download/eksctl_windows_armv6.zip) - [ARMv7](https://github.com/eksctl-io/eksctl/releases/latest/download/eksctl_windows_armv7.zip) - [ARM64](https://github.com/eksctl-io/eksctl/releases/latest/download/eksctl_windows_arm64.zip) Make sure to unzip the archive to a folder in the `PATH` variable. Optionally, verify the checksum: 1. Download the checksum file: [latest](https://github.com/eksctl-io/eksctl/releases/latest/download/eksctl_checksums.txt) 2. Use Command Prompt to manually compare `CertUtil`'s output to the checksum file downloaded. ```cmd REM Replace amd64 with armv6, armv7 or arm64 CertUtil -hashfile eksctl_Windows_amd64.zip SHA256 ``` 3. Using PowerShell to automate the verification using the `-eq` operator to get a `True` or `False` result: ```pwsh # Replace amd64 with armv6, armv7 or arm64 (Get-FileHash -Algorithm SHA256 .\eksctl_Windows_amd64.zip).Hash -eq ((Get-Content .\eksctl_checksums.txt) -match 'eksctl_Windows_amd64.zip' -split ' ')[0] ``` #### Using Git Bash ```sh # for ARM systems, set ARCH to: `arm64`, `armv6` or `armv7` ARCH=amd64 PLATFORM=windows_$ARCH curl -sLO "https://github.com/eksctl-io/eksctl/releases/latest/download/eksctl_$PLATFORM.zip" # (Optional) Verify checksum curl -sL "https://github.com/eksctl-io/eksctl/releases/latest/download/eksctl_checksums.txt" | grep $PLATFORM | sha256sum --check unzip eksctl_$PLATFORM.zip -d $HOME/bin rm eksctl_$PLATFORM.zip ``` The `eksctl` executable is placed in `$HOME/bin`, which is in `$PATH` from Git Bash. ### Docker For every release and RC a container image is pushed to ECR repository `public.ecr.aws/eksctl/eksctl`. Learn more about the usage on [ECR Public Gallery - eksctl](https://gallery.ecr.aws/eksctl/eksctl). For example, ```bash docker run --rm -it public.ecr.aws/eksctl/eksctl version ``` ### Third-Party Installers (Not Recommended) #### For MacOS [Homebrew](https://brew.sh) ```bash brew tap weaveworks/tap brew install weaveworks/tap/eksctl ``` [MacPorts](https://www.macports.org) ```bash port install eksctl ``` #### For Windows [chocolatey](https://chocolatey.org) ```bash choco install eksctl ``` [scoop](https://scoop.sh) ```bash scoop install eksctl ``` ## Basic usage To create a basic cluster, run: ```bash eksctl create cluster ``` A cluster will be created with default parameters - exciting auto-generated name, e.g. "fabulous-mushroom-1527688624" - 2x `m5.large` nodes (this instance type suits most common use-cases, and is good value for money) - use official AWS EKS AMI - `us-west-2` region - dedicated VPC (check your quotas) Once you have created a cluster, you will find that cluster credentials were added in `~/.kube/config`. If you have `kubectl` as well as `aws-iam-authenticator` commands in your `PATH`, you should be able to use `kubectl`. You will need to make sure to use the same AWS API credentials for this also. Check [EKS docs][ekskubectl] for instructions. [ekskubectl]: https://docs.aws.amazon.com/eks/latest/userguide/configure-kubectl.html Example output: ```bash $ eksctl create cluster [ℹ] eksctl version 0.143.0 [ℹ] using region eu-west-2 [ℹ] setting availability zones to [eu-west-2a eu-west-2c eu-west-2b] [ℹ] subnets for eu-west-2a - public:192.168.0.0/19 private:192.168.96.0/19 [ℹ] subnets for eu-west-2c - public:192.168.32.0/19 private:192.168.128.0/19 [ℹ] subnets for eu-west-2b - public:192.168.64.0/19 private:192.168.160.0/19 [ℹ] nodegroup "ng-ac4c787c" will use "" [AmazonLinux2/1.25] [ℹ] using Kubernetes version 1.25 [ℹ] creating EKS cluster "attractive-sculpture-1685534556" in "eu-west-2" region with managed nodes [ℹ] will create 2 separate CloudFormation stacks for cluster itself and the initial managed nodegroup [ℹ] if you encounter any issues, check CloudFormation console or try 'eksctl utils describe-stacks --region=eu-west-2 --cluster=attractive-sculpture-1685534556' [ℹ] Kubernetes API endpoint access will use default of {publicAccess=true, privateAccess=false} for cluster "attractive-sculpture-1685534556" in "eu-west-2" [ℹ] CloudWatch logging will not be enabled for cluster "attractive-sculpture-1685534556" in "eu-west-2" [ℹ] you can enable it with 'eksctl utils update-cluster-logging --enable-types={SPECIFY-YOUR-LOG-TYPES-HERE (e.g. all)} --region=eu-west-2 --cluster=attractive-sculpture-1685534556' [ℹ] 2 sequential tasks: { create cluster control plane "attractive-sculpture-1685534556", 2 sequential sub-tasks: { wait for control plane to become ready, create managed nodegroup "ng-ac4c787c", } } [ℹ] building cluster stack "eksctl-attractive-sculpture-1685534556-cluster" [ℹ] deploying stack "eksctl-attractive-sculpture-1685534556-cluster" [ℹ] waiting for CloudFormation stack "eksctl-attractive-sculpture-1685534556-cluster" [ℹ] building managed nodegroup stack "eksctl-attractive-sculpture-1685534556-nodegroup-ng-ac4c787c" [ℹ] deploying stack "eksctl-attractive-sculpture-1685534556-nodegroup-ng-ac4c787c" [ℹ] waiting for CloudFormation stack "eksctl-attractive-sculpture-1685534556-nodegroup-ng-ac4c787c" [ℹ] waiting for the control plane to become ready [✔] all EKS cluster resources for "attractive-sculpture-1685534556" have been created [ℹ] nodegroup "ng-ac4c787c" has 2 node(s) [ℹ] node "ip-192-168-20-235.eu-west-2.compute.internal" is ready [ℹ] node "ip-192-168-80-49.eu-west-2.compute.internal" is ready [ℹ] waiting for at least 2 node(s) to become ready in "ng-ac4c787c" [ℹ] nodegroup "ng-ac4c787c" has 2 node(s) [ℹ] node "ip-192-168-20-235.eu-west-2.compute.internal" is ready [ℹ] node "ip-192-168-80-49.eu-west-2.compute.internal" is ready [ℹ] kubectl command should work with ".../.kube/config", try 'kubectl get nodes' [✔] EKS cluster "attractive-sculpture-1685534556" in "eu-west-2" region is ready $ ``` Install `eksctl` by following the [installation instructions](https://eksctl.io/installation). To discover the full range of capabilities that eksctl offers, visit [eksctl.io](https://eksctl.io). A great starting point is the [Getting Started](https://eksctl.io/getting-started/) guide. You can find a comprehensive list of features [here](https://eksctl.io/installation/#features). ## Contributions Code contributions are very welcome. If you are interested in helping make `eksctl` great then see our [contributing guide](CONTRIBUTING.md). We follow the [CNCF Code of Conduct](CODE_OF_CONDUCT.md). ## Releases Minor releases of `eksctl` should be expected every two weeks and patch releases will be made available as needed. One or more release candidate(s) (RC) builds will be made available prior to each minor release. RC builds are intended only for testing purposes. ## [Security Policy](SECURITY.md) If you discover a potential security issue in `eksctl` project, please follow [AWS Vulnerability Reporting process.](https://aws.amazon.com/security/vulnerability-reporting/) Do not open security related issues in the open source project. ## Get in touch [Create an issue](https://github.com/eksctl-io/eksctl/issues/new), or login to [Eksctl Community Slack (#eksctl)][slackchan] ([signup][slackjoin]). [slackjoin]: https://slack.k8s.io/ [slackchan]: https://slack.k8s.io/messages/eksctl/ > **_Logo Credits_** > > _Original Gophers drawn by [Ashley McNamara](https://twitter.com/ashleymcnamara), unique E, K, S, C, T & L Gopher identities had been produced with [Gopherize.me](https://github.com/matryer/gopherize.me/)._ ", Assign "at most 3 tags" to the expected json: {"id":"10667","tags":[]} "only from the tags list I provide: [{"id":77,"name":"3d"},{"id":89,"name":"agent"},{"id":17,"name":"ai"},{"id":54,"name":"algorithm"},{"id":24,"name":"api"},{"id":44,"name":"authentication"},{"id":3,"name":"aws"},{"id":27,"name":"backend"},{"id":60,"name":"benchmark"},{"id":72,"name":"best-practices"},{"id":39,"name":"bitcoin"},{"id":37,"name":"blockchain"},{"id":1,"name":"blog"},{"id":45,"name":"bundler"},{"id":58,"name":"cache"},{"id":21,"name":"chat"},{"id":49,"name":"cicd"},{"id":4,"name":"cli"},{"id":64,"name":"cloud-native"},{"id":48,"name":"cms"},{"id":61,"name":"compiler"},{"id":68,"name":"containerization"},{"id":92,"name":"crm"},{"id":34,"name":"data"},{"id":47,"name":"database"},{"id":8,"name":"declarative-gui "},{"id":9,"name":"deploy-tool"},{"id":53,"name":"desktop-app"},{"id":6,"name":"dev-exp-lib"},{"id":59,"name":"dev-tool"},{"id":13,"name":"ecommerce"},{"id":26,"name":"editor"},{"id":66,"name":"emulator"},{"id":62,"name":"filesystem"},{"id":80,"name":"finance"},{"id":15,"name":"firmware"},{"id":73,"name":"for-fun"},{"id":2,"name":"framework"},{"id":11,"name":"frontend"},{"id":22,"name":"game"},{"id":81,"name":"game-engine "},{"id":23,"name":"graphql"},{"id":84,"name":"gui"},{"id":91,"name":"http"},{"id":5,"name":"http-client"},{"id":51,"name":"iac"},{"id":30,"name":"ide"},{"id":78,"name":"iot"},{"id":40,"name":"json"},{"id":83,"name":"julian"},{"id":38,"name":"k8s"},{"id":31,"name":"language"},{"id":10,"name":"learning-resource"},{"id":33,"name":"lib"},{"id":41,"name":"linter"},{"id":28,"name":"lms"},{"id":16,"name":"logging"},{"id":76,"name":"low-code"},{"id":90,"name":"message-queue"},{"id":42,"name":"mobile-app"},{"id":18,"name":"monitoring"},{"id":36,"name":"networking"},{"id":7,"name":"node-version"},{"id":55,"name":"nosql"},{"id":57,"name":"observability"},{"id":46,"name":"orm"},{"id":52,"name":"os"},{"id":14,"name":"parser"},{"id":74,"name":"react"},{"id":82,"name":"real-time"},{"id":56,"name":"robot"},{"id":65,"name":"runtime"},{"id":32,"name":"sdk"},{"id":71,"name":"search"},{"id":63,"name":"secrets"},{"id":25,"name":"security"},{"id":85,"name":"server"},{"id":86,"name":"serverless"},{"id":70,"name":"storage"},{"id":75,"name":"system-design"},{"id":79,"name":"terminal"},{"id":29,"name":"testing"},{"id":12,"name":"ui"},{"id":50,"name":"ux"},{"id":88,"name":"video"},{"id":20,"name":"web-app"},{"id":35,"name":"web-server"},{"id":43,"name":"webassembly"},{"id":69,"name":"workflow"},{"id":87,"name":"yaml"}]" returns me the "expected json"