We want to use EKS, but seems it needs some additional roles:
https://docs.aws.amazon.com/eks/latest/userguide/service_IAM_role.html
I lack permissions to do it myself. We can just hope it is not as a show stopper as Openshift on AWS ...
CC @kevin
Metadata Update from @smooge: - Issue assigned to kevin - Issue priority set to: Waiting on Assignee (was: Needs Review)
Metadata Update from @smooge: - Issue tagged with: aws
So, I thought I already set this up for you. There's a policy on your role allowing eks...
Can you describe what error(s) you get when doing what actions? It may be not all the eks perms are eks*, but are in some other domain?
@kevin seems eks needs some additional IAM role to be able to create resources ... sorry I am on thin ice here as I am just trying to use this for the first time ..
Anyway, when I try to create an EKS cluster:
<img alt="eks-1.png" src="/fedora-infrastructure/issue/raw/files/8e82de1b0b244b8582b92a95a5dd15fd3f8e16d4ecae755554de2cae50b8fbdb-eks-1.png" />
On the IAM role dropdown box there is no role to select. When I follow the link to create one, I am not able to do that:
<img alt="eks-2.png" src="/fedora-infrastructure/issue/raw/files/4eda9cf8b4d54d7467cec2c620a4a2a248f2f60dd9b1cb9d83d526ef57df9f1f-eks-2.png" />
The documentation I should follow is: https://docs.aws.amazon.com/eks/latest/userguide/service_IAM_role.html
@kevin do I need to provide some more details?
ok,can you try now. It looks like it needed to allow you to list policies. I added that permission. Hopefully now it will see your role and you can choose the role policy for it.
If you hit another error, it might be useful for us to schedule a time to work on irc or something so we can iterate faster... just let me know if you hit something again now.
@kevin I will try to ping you on IRC on Tuesday, I still see the same problem ... Unfortunately I am out tmrw. Thanks for all the help, we will get to the end of it ;)
Worked with @mvadkert today and we got it all sorted (hopefully). We got the prod cluster up and running and able to deploy to. I setup the vpc's for the stg setup in us-east-2.
Let us know if you run into any issues with it.
Metadata Update from @kevin: - Issue close_status updated to: Fixed - Issue status updated to: Closed (was: Open)
Log in to comment on this ticket.