🔴 - To support my channel, I’d like to offer Mentorship/On-the-Job Support/Consulting - me@antonputra.com 👉 [UPDATED] AWS EKS Kubernetes Tutorial [NEW]: th-cam.com/play/PLiMWaCMwGJXnKY6XmeifEpjIfkWRo9v2l.html&si=wc6LIC5V2tD-Tzwl
@@AntonPutra I'm able to learn Karpenter from this code. It looks like the new node can get provisioned only on private subnets. May be best practices from the eks blueprint?
Bro, really needed this video regarding the eks addon using the terraform, please make more videos on terraform sub-modules like reloader, external-DNS, kubecost etc. Thanks a lot!
Hi Anton, Great video. Although the EKS blueprints makes it super simple to deploy production grade EKS cluster, one of the biggest challenges I see is how to upgrade such cluster (deployed via blueprints). Do you have any thoughts/advise on it ? Thanks Btw I went through all the EKS video on your channel. Clearly one of the best resources on TH-cam on k8s.
Thanks, Sami! Yes, it's hard to maintain, especially after they removed the v4 modules, lol. I would suggest using those "blueprints" only for consulting jobs and not if you need to maintain your clusters yourself.
Thanks for sharing. I am new to terraform but I wonder at the intro “in long run, using this module can become a nightmare because for blueprint are wrapper of other modules” what is actually mean? it would be hard to customize? so we should not use it or else?
Even now, I would say that EKS blueprints are dead. They've deprecated v4 modules already, so it's impossible to maintain the infrastructure that you've already created. Use blueprints for consulting jobs, but build your own for internal use. That's my opinion.
@@salimabdul4703Yes, I have a lot of tutorials with cluster autoscaler or karpenter, here is an example - github.com/antonputra/tutorials/tree/main/lessons/160
@@AntonPutra the process, do i do it via was console... or via tf, just bump the version there, as it seems was console is also implying there are new AMi's for some of the node group nodes.
the blueprint add ons module seems broken; trying to use it results in missing submodule errors. subdir "modules/kubernetes-addons/helm-addon" not found
@ the 3:30 mar you tie your VPC to public, private subnets, from what I can determine those are like reserved words. if I want to use module vac, but have a public, web, app, database and management subnets, how would I do this with a vpc based on a module? thank you for this video, love how you show example of using resources and modules interchangeable... working through video.code trying to map it to my requirements, my old 1.20 scripts that I had very badly broke with some of the newer EKS Blueprint changes, have you tried this script against EKS 1.27 and the newest Tf stack ? they seem to be changing things very fast on the back end. happy to share my code as example... for someone to use if we can modify it to get it working again,.
in vpc module you have 2 output variables github.com/antonputra/tutorials/blob/main/lessons/156/terraform/7-blueprints.tf#L31 module.vpc.private_subnets & module.vpc.public_subnets
Anton, you have a module based vpc 6-vpc... and 1-vpc based on resources, how did it know which to execute ? thinking... as you linked the module to the elks it created dependency preference ?, if we used the resource based option and resource based subnets then the module would have been ignored ?
In the video I explain how to use both. Here is the example to link to raw vpc terraform github.com/antonputra/tutorials/blob/main/lessons/156/terraform/7-blueprints.tf#L27-L30 Here to link to vpc module - github.com/antonputra/tutorials/blob/main/lessons/156/terraform/7-blueprints.tf#L31
@@AntonPutra just curious, have you tried this with elks 1.27 stack, they seem to have made major changes recently, things that always worked now does not. trying to copy your examples into my Tf scripts. if it works will share via email with you.
kudos on great content Anton! A quick question : is it only me whose ingress resource doesn't get an external address?I've tried the blueprint more than a couple of times but failed so far
Thanks! You can check if the nginx ingress pod is created with publish service flag. But generally it's not necessary for ingress to work, you can get the nginx service and use it for your DNS. It's the same thing. Also you can describe the ingress, you may get an error
thanks for sharing these awesome videos and code in github as well!, I tried following your steps but when running terraform init I got Error: Failed to expand subdir globs │ │ subdir "modules/kubernetes-addons/helm-addon" not found is there any fix for it maybe ?, thanks in advance
Great Tutorial Anton, thanks you so much, you're becoming my reference :D Like and subscribe absolutely required!!!! I've understood it's not possible mix karpeneter with node autoscaler and now is clear why I can use node autoscaler with Fargate, as you explained, I think because Fargate uses a profile and it doesn't compete with the node autoscaler Can I use karpenter with Fargate? I think yes, because Fargate uses a profile as above
Sir you didnt show after enable Cert-manager=true on kubernetes addons how to get certificate by app ingress. I tried many way but still failed again and again for issue certificate with sub domain. Please help me. I have cert manager by enable true but after how to get certificate for an app?
I have couple of tutorials that can help you 1. Cert Manager Kubernetes Tutorial - th-cam.com/video/7m4_kZOObzw/w-d-xo.html 2. NGINX Ingress Controller for Kubernetes Tutorial - th-cam.com/video/9sLHoEyRq8w/w-d-xo.html
🔴 - To support my channel, I’d like to offer Mentorship/On-the-Job Support/Consulting - me@antonputra.com
👉 [UPDATED] AWS EKS Kubernetes Tutorial [NEW]: th-cam.com/play/PLiMWaCMwGJXnKY6XmeifEpjIfkWRo9v2l.html&si=wc6LIC5V2tD-Tzwl
You are a gift to the IT community. You are the best!
❤️
@@AntonPutra I'm able to learn Karpenter from this code. It looks like the new node can get provisioned only on private subnets. May be best practices from the eks blueprint?
🟢 [New] Terragrunt Tutorial: Create VPC, EKS from Scratch! (Step-by-Step) - th-cam.com/video/yduHaOj3XMg/w-d-xo.html
Bro, really needed this video regarding the eks addon using the terraform, please make more videos on terraform sub-modules like reloader, external-DNS, kubecost etc. Thanks a lot!
Thanks Omkar, will do
Your videos are very informative thanks for sharing knowledge sir.
Get Full-Length High-Quality DevOps Tutorials for Free - Subscribe Now! - th-cam.com/users/AntonPutra
Nice content bro really helpful 👏
Thank you 🙌
Hi Anton, Great video.
Although the EKS blueprints makes it super simple to deploy production grade EKS cluster, one of the biggest challenges I see is how to upgrade such cluster (deployed via blueprints). Do you have any thoughts/advise on it ? Thanks
Btw I went through all the EKS video on your channel. Clearly one of the best resources on TH-cam on k8s.
Thanks, Sami! Yes, it's hard to maintain, especially after they removed the v4 modules, lol. I would suggest using those "blueprints" only for consulting jobs and not if you need to maintain your clusters yourself.
Thanks for sharing. I am new to terraform but I wonder at the intro “in long run, using this module can become a nightmare because for blueprint are wrapper of other modules” what is actually mean?
it would be hard to customize?
so we should not use it or else?
Even now, I would say that EKS blueprints are dead. They've deprecated v4 modules already, so it's impossible to maintain the infrastructure that you've already created. Use blueprints for consulting jobs, but build your own for internal use. That's my opinion.
Great Video. But finaly while apply the terraform I get always unauthorized errors. Any idea?
I think they removed the old EKS blueprint modules. The unauthorized error is most likely due to that.
Hey Anton, the modules from the blueprints repo was removed from v5, why would that be?
EKS blueprints are already dead, lol.
Do you have a guide how to run EKS with autoscaler properly? I mean if EKS blueprints are dead then what should we use?@@AntonPutra
@@salimabdul4703Yes, I have a lot of tutorials with cluster autoscaler or karpenter, here is an example - github.com/antonputra/tutorials/tree/main/lessons/160
Anton, any chance you can on purpose build a 1.22 cluster and then cover how to upgrade it... ie via the console or via Tf.
G
I can, but what the issue there?
@@AntonPutra the process, do i do it via was console... or via tf, just bump the version there, as it seems was console is also implying there are new AMi's for some of the node group nodes.
hi putra , nice videos
Thanks!
the blueprint add ons module seems broken; trying to use it results in missing submodule errors. subdir "modules/kubernetes-addons/helm-addon" not found
I know, don't use them
@ the 3:30 mar you tie your VPC to public, private subnets, from what I can determine those are like reserved words.
if I want to use module vac, but have a public, web, app, database and management subnets, how would I do this with a vpc based on a module?
thank you for this video, love how you show example of using resources and modules interchangeable... working through video.code trying to map it to my requirements, my old 1.20 scripts that I had very badly broke with some of the newer EKS Blueprint changes,
have you tried this script against EKS 1.27 and the newest Tf stack ? they seem to be changing things very fast on the back end.
happy to share my code as example... for someone to use if we can modify it to get it working again,.
in vpc module you have 2 output variables github.com/antonputra/tutorials/blob/main/lessons/156/terraform/7-blueprints.tf#L31
module.vpc.private_subnets & module.vpc.public_subnets
@@AntonPutra I'm aware there are others like elastic, redshift... would have been great if it was more free form.
not a form of this strigent set...
Anton, to which lesson does this video link?
This is a source code for the video if that's the question - github.com/antonputra/tutorials/tree/main/lessons/156
nice videos, can i use ACM instead of certmanager?
Sure, create cert and use annotation with arn
didn't understand anything, but thats my problem 🤣 great vid anyway
thanks =)
Anton, you have a module based vpc 6-vpc... and 1-vpc based on resources, how did it know which to execute ? thinking... as you linked the module to the elks it created dependency preference ?, if we used the resource based option and resource based subnets then the module would have been ignored ?
In the video I explain how to use both. Here is the example to link to raw vpc terraform github.com/antonputra/tutorials/blob/main/lessons/156/terraform/7-blueprints.tf#L27-L30
Here to link to vpc module - github.com/antonputra/tutorials/blob/main/lessons/156/terraform/7-blueprints.tf#L31
@@AntonPutra just curious, have you tried this with elks 1.27 stack, they seem to have made major changes recently, things that always worked now does not.
trying to copy your examples into my Tf scripts.
if it works will share via email with you.
@@georgelza there is a huge breaking changes related to cgroups v2 and applications that use master slave proces architecture. I’ll update soon
@@AntonPutra I got my EKS cluster created... having problems with the add ons.
will email you the git repo link...
How to attach gp3 volumes to worker nodes?? what are the attributes for "managed_node_groups" ?
You can create launch template and use it for managed node group
kudos on great content Anton! A quick question : is it only me whose ingress resource doesn't get an external address?I've tried the blueprint more than a couple of times but failed so far
Thanks! You can check if the nginx ingress pod is created with publish service flag. But generally it's not necessary for ingress to work, you can get the nginx service and use it for your DNS. It's the same thing. Also you can describe the ingress, you may get an error
Most likely is due to the cluster name variation
thanks for sharing these awesome videos and code in github as well!, I tried following your steps but when running terraform init I got
Error: Failed to expand subdir globs
│
│ subdir "modules/kubernetes-addons/helm-addon" not found
is there any fix for it maybe ?, thanks in advance
I would advise against using EKS blueprints anymore.
Great Tutorial Anton, thanks you so much, you're becoming my reference :D
Like and subscribe absolutely required!!!!
I've understood it's not possible mix karpeneter with node autoscaler and now is clear why
I can use node autoscaler with Fargate, as you explained, I think because Fargate uses a profile and it doesn't compete with the node autoscaler
Can I use karpenter with Fargate? I think yes, because Fargate uses a profile as above
Yes, you can. If you select fargate nodes, karpenter won't do anything
Sir you didnt show after enable Cert-manager=true on kubernetes addons how to get certificate by app ingress. I tried many way but still failed again and again for issue certificate with sub domain. Please help me. I have cert manager by enable true but after how to get certificate for an app?
I have couple of tutorials that can help you
1. Cert Manager Kubernetes Tutorial - th-cam.com/video/7m4_kZOObzw/w-d-xo.html
2. NGINX Ingress Controller for Kubernetes Tutorial - th-cam.com/video/9sLHoEyRq8w/w-d-xo.html
@@AntonPutra Thank you so much sir. I have done by Cert Manager Kubernetes Tutorial. :D😇
@@agun21st glad that it helped =)