Get started with Amazon EKS – Amazon Web Services Management Console and Amazon CLI

Copy the following contents to a file named eks-cluster-role-trust-policy.json.

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Principal": {
        "Service": "eks.amazonaws.com"
      },
      "Action": "sts:AssumeRole"
    }
  ]
}

Create the role.

aws iam create-role \
  --role-name myAmazonEKSClusterRole \
  --assume-role-policy-document file://"eks-cluster-role-trust-policy.json"

Attach the required Amazon EKS managed IAM policy to the role.

aws iam attach-role-policy \
  --policy-arn arn:aws-cn:iam::aws:policy/AmazonEKSClusterPolicy \
  --role-name myAmazonEKSClusterRole

Select Custom configuration and disable Use EKS Auto Mode. (If you prefer an EKS Auto Mode cluster, refer instead to Create an EKS Auto Mode Cluster with the Amazon Management Console.)

Enter a Name for your cluster, such as my-cluster. The name can contain only alphanumeric characters (case-sensitive) and hyphens. It must start with an alphanumeric character and can’t be longer than 100 characters. The name must be unique within the Amazon Region and Amazon account that you’re creating the cluster in.

For Cluster Service Role, choose myAmazonEKSClusterRole.

Leave the remaining settings at their default values and choose Next.

Choose the ID of the VPC that you created in a previous step from the VPC dropdown list. It is something like vpc-00x0000x000x0x000 | my-eks-vpc-stack-VPC.

Leave the remaining settings at their default values and choose Next.

Copy the following contents to a file named node-role-trust-policy.json.

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Principal": {
        "Service": "ec2.amazonaws.com"
      },
      "Action": "sts:AssumeRole"
    }
  ]
}

Create the node IAM role.

aws iam create-role \
  --role-name myAmazonEKSNodeRole \
  --assume-role-policy-document file://"node-role-trust-policy.json"

Attach the required managed IAM policies to the role.

aws iam attach-role-policy \
  --policy-arn arn:aws-cn:iam::aws:policy/AmazonEKSWorkerNodePolicy \
  --role-name myAmazonEKSNodeRole
aws iam attach-role-policy \
  --policy-arn arn:aws-cn:iam::aws:policy/AmazonEC2ContainerRegistryReadOnly \
  --role-name myAmazonEKSNodeRole
aws iam attach-role-policy \
  --policy-arn arn:aws-cn:iam::aws:policy/AmazonEKS_CNI_Policy \
  --role-name myAmazonEKSNodeRole

Open the Amazon EKS console at https://console.aws.amazon.com/eks/home#/clusters.

Choose the name of the cluster that you created in Step 1: Create your Amazon EKS cluster, such as my-cluster.

On the my-cluster page, do the following:

Choose the Compute tab.

Choose Add Node Group.

For Name, enter a unique name for your managed node group, such as my-nodegroup. The node group name can’t be longer than 63 characters. It must start with letter or digit, but can also include hyphens and underscores for the remaining characters.

For Node IAM role name, choose myAmazonEKSNodeRole role that you created in a previous step. We recommend that each node group use its own unique IAM role.

Choose Next.

Compute tab – You see the list of Nodes that were deployed for the cluster. You can choose the name of a node to see more information about it.

Resources tab – You see all of the Kubernetes resources that are deployed by default to an Amazon EKS cluster. Select any resource type in the console to learn more about it.

Open the Amazon EKS console at https://console.aws.amazon.com/eks/home#/clusters.

In the left navigation pane, choose Clusters. In the list of clusters, choose my-cluster.

Choose the Compute tab.

If you created a node group, choose the my-nodegroup node group and then choose Delete. Enter my-nodegroup, and then choose Delete.

Don’t continue until the node group profiles are deleted.

In the left navigation pane, choose Clusters. In the list of clusters, choose my-cluster.

Choose Delete cluster.

Enter my-cluster and then choose Delete. Don’t continue until the cluster is deleted.

Open the CloudFormation console at https://console.aws.amazon.com/cloudformation/.

Choose the my-eks-vpc-stack stack, and then choose Delete.

In the Delete my-eks-vpc-stack confirmation dialog box, choose Delete stack.

Open the IAM console at https://console.aws.amazon.com/iam/.

In the left navigation pane, choose Roles.

Select each role you created from the list ( myAmazonEKSClusterRole , as well as myAmazonEKSNodeRole). Choose Delete, enter the requested confirmation text, then choose Delete.