@codiac.io/codiac-aws-eks

aws eks

Test to create cluster locally

remember to uncomment out line 173 and 174 in authconfigindex.ts

rename env.test.sample to .env.test and fill in the blanks

npm run test:single -- ./src/index.spec.ts -g 'create cluster test'  --timeout 1000

npm run test:single -- ./src/index.spec.ts -g 'delete cluster test'  --timeout 1000

setup kubeconfig to point to aws cluster

aws eks update-kubeconfig --region us-east-1 --alias cluster-eks-sdk --name cluster-eks-sdk
kubectl create namespace testns
kubectl config set-context --current --namespace=testns
kubectl config view
kubectl config get-contexts
kubectl get pods -o wide 

commands

kubectl get nodes -o jsonpath='{.items[*].status.addresses[?(@.type=="ExternalIP")].address}'


kubectl exec -ti multitool-5c66dfbfd8-6msx9 -- bash -c "cat /etc/resolv.conf" 
kubectl get svc -n kube-system

create test pod in cluster

kubectl create deployment multitool --image=praqma/network-multitool -n testns
kubectl create service clusterip multitool --tcp=80:80 -n testns

install kubect shell

kubectl-node-shell

curl -LO https://github.com/kvaps/kubectl-node-shell/raw/master/kubectl-node_shell
chmod +x ./kubectl-node_shell
sudo mv ./kubectl-node_shell /usr/local/bin/kubectl-node_shell



kubectl get node
kubectl node-shell  ip-10-50-61-76.ec2.internal
kubectl node-shell ip-10-50-61-76.ec2.internal -- ls -al /etc/codiac
kubectl node-shell ip-10-50-61-76.ec2.internal -- cat /etc/codiac/kubelet-extra.json
kubectl node-shell ip-10-50-61-76.ec2.internal -- cat  /etc/codiac/kubelet.env


# Get standard bash shell
kubectl node-shell <node>

# Use X-mode (mount /host, and do not enter host namespace)
kubectl node-shell -x <node>

# Execute custom command
kubectl node-shell <node> -- echo 123

# Use stdin
cat /etc/passwd | kubectl node-shell <node> -- sh -c 'cat > /tmp/passwd'

# Run oneliner script
kubectl node-shell <node> -- sh -c 'cat /tmp/passwd; rm -f /tmp/passwd'

MIME-Version: 1.0
Content-Type: multipart/mixed; boundary=dfd2b9ec748a07c254358a3a53bb2529429d0d3049e22dbafa0d2922b8e5

--dfd2b9ec748a07c254358a3a53bb2529429d0d3049e22dbafa0d2922b8e5
Content-Type: application/node.eks.aws

apiVersion: node.eks.aws/v1alpha1
kind: NodeConfig
metadata: {}
spec:
  cluster:
    apiServerEndpoint: https://A53FCFC80C56F4606BB412833196A19E.gr7.us-east-1.eks.amazonaws.com
    certificateAuthority: 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
    cidr: 10.100.0.0/16
    name: cluster-test-eksctl-1
  containerd: {}
  instance:
    localStorage: {}
    network: {}
  kubelet:
    config:
      clusterDNS:
      - 10.100.0.10
    flags:
    - --node-labels=alpha.eksctl.io/nodegroup-name=ng-1,alpha.eksctl.io/cluster-name=cluster-test-eksctl-1

--dfd2b9ec748a07c254358a3a53bb2529429d0d3049e22dbafa0d2922b8e5--

token hop limit

codiac-us-east-2-prod-freemium-east-2-ng-1-NIR-9cc47b012e62

aws iam remove-role-from-instance-profile --role-name codiac-us-east-2-prod-freemium-aws-est1-ng-1-NIR-e344e9b51330 --instance-profile-name codiac-prod-freemium-aws-est1-nodegroup-ng-1-NodeInstanceProfile-7513ddb0274a