Requirements for creating EKS cluster in Morpheus

Infrastructure
,
1

For creating an EKS cluster in Morpheus, the AWS IAM role should have the below permissions:

AmazonEKSClusterPolicy
AmazonEKSWorkerNodePolicy
AmazonEKSServicePolicy
AmazonEC2ContainerRegistryReadOnly
AmazonEKS_CNI_Policy
AmazonEKSLocalOutpostClusterPolicy
AmazonEKSVPCResourceController

Also, the trust policy should look like the one below.


{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Effect": "Allow",
            "Principal": {
                "Service": "eks.amazonaws.com"
            },
            "Action": "sts:AssumeRole"
        },
        {
            "Effect": "Allow",
            "Principal": {
                "Service": "ec2.amazonaws.com"
            },
            "Action": "sts:AssumeRole"
        }
    ]
}

Important!
When creating EKS, a minimum of 2 subnets should be selected for each Controller and Worker. Both subnets should be in the different Availability Zones.

Example:

EKS_config
EKS_config1418×1790 42.3 KB

For other requirements, refer to our document here.

3 Likes